last executing test programs: 3m54.355078749s ago: executing program 0 (id=338): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 3m54.132468541s ago: executing program 0 (id=340): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="85b1793251024325064e5e621f6648fe78b2924a35e61baf4f614e3fb05fd6cbe9e40661f9f165c646fab749b1c447f959119f77dd25993bd5", 0x39}, {&(0x7f0000000380)="aaf58da174d465f6e31c7cda2e1cbd96de835f0d600100402d9312f3841cdc5cb4b1c83070f804c11df5d1ed544513263560c586b845e4c67ee7c48dff726cdaabe8457d0f55c1034d5d06961802bbf42625b96e52ade9ebc7a910ca03330a899f3890a5a786f20c196186edfbb4c1ec14c46547ce1945ad75224cdab51ce0740659e46ebba9ca712ad022f350581b5ee60031a9c7608e9f596b37634a8165001474a696a3171c1ce88cc46d1306b64c0692b5948add250479773502af7f94930eda6b3747fadaa6d85a58f03fd91616fd52e4e1b510e57178fe1c2f11dfc8b72f12147377280b26702a9d0d73aaeed664843178", 0xf4}, {&(0x7f0000000480)="7bed729ff47f621c4feddd83b0e40c4ff51c691be4b7e79a692d47b53285ee540847fa93111a088bec4b65ce95c181f05d194480ca3aafd3758f18", 0x3b}, {&(0x7f00000005c0)="e386542e15c90500969107b595dee7e2f4c28b7e734eaa7602b4d68ae7f364ed39d3c92bcaebb55c0d5a2adbeb28001f08dced4e4d02fd6848ccf062c53989cca956455d28af0ca8f0406a45fa1f1d84ff607fe6fe3954b3722831810864b7fe5596d90efaae76bb94579302353737", 0x6f}], 0x4}}], 0x1, 0x0) 3m54.005710377s ago: executing program 0 (id=341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x14, 0x28, 0x100, 0x70bd2b, 0x25dfdbfe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40804) 3m53.900300753s ago: executing program 0 (id=343): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8001, 0x100000, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xff, 0x7be, &(0x7f00000005c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') pread64(r2, &(0x7f0000000140)=""/25, 0x19, 0x4) 3m53.497809724s ago: executing program 0 (id=346): shutdown(0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000480)={0x0, 0x6}, 0x0, 0x0}) 3m53.090346115s ago: executing program 0 (id=348): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e25, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0x8, 0x81, 0x9, 0x40}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x40004) 3m52.612176101s ago: executing program 32 (id=348): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e25, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0x8, 0x81, 0x9, 0x40}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x40004) 8.381180429s ago: executing program 3 (id=1376): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.359479433s ago: executing program 3 (id=1380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x9, 0x21, 0x5, 0x8, 0x1, 0x5, 0x1, 0x0, [{0x8, 0x1, 0x5, 0xa}, {0x8, 0x7, 0x1, 0x3}, {0x4, 0x9105, 0x1, 0x7fffffff}, {0xffff, 0x8, 0x80000001, 0x6}, {0x0, 0x6838, 0x3ff, 0x9}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}], 0x1}, 0x5) 7.149478304s ago: executing program 3 (id=1382): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) unshare(0x20000400) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x200000000114, 0x2718, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0xffffffffffffffc7, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e23, @broadcast}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8fa50f638facd57de499163"}, 0x8000000000000001, 0xfffffffffffffffe, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) 5.242398964s ago: executing program 3 (id=1390): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a00009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000b000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.302141473s ago: executing program 2 (id=1395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc0100"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x3, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@multicast1, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.118019723s ago: executing program 5 (id=1397): syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write$char_usb(r0, &(0x7f0000002680)="e7", 0x1) 4.039443207s ago: executing program 2 (id=1399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, 0x0, 0x0}, 0x0) 3.809851179s ago: executing program 1 (id=1400): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) unshare(0x20000400) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x200000000114, 0x2718, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0xffffffffffffffc7, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e23, @broadcast}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8fa50f638facd57de499163"}, 0x8000000000000001, 0xfffffffffffffffe, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) 2.768567854s ago: executing program 1 (id=1401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.545238796s ago: executing program 1 (id=1402): pipe2$watch_queue(0x0, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.498066988s ago: executing program 5 (id=1403): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2.165646686s ago: executing program 5 (id=1404): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d00), 0x0, 0x200400c0) 2.142871117s ago: executing program 5 (id=1406): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x6f, 0x93, 0x8e, 0x20, 0x15f4, 0x131, 0x46ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x1, 0x60, 0x7, "", [{{0x9, 0x4, 0xc9, 0x2, 0x0, 0x5d, 0xff, 0x4a, 0xe}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x1c, &(0x7f0000000780)={0x5, 0xf, 0x1c, 0x2, [@generic={0x3, 0x10, 0xb}, @ssp_cap={0x14, 0x10, 0xa, 0xfa, 0x2, 0x3, 0xf0f, 0x2, [0xff003f, 0xff0000]}]}}) 2.060300411s ago: executing program 4 (id=1407): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) unshare(0x6020400) open_tree(r0, 0x0, 0x800) 2.026920873s ago: executing program 3 (id=1408): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d603", 0x45}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.951228177s ago: executing program 4 (id=1409): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) flock(r0, 0x1) 1.950567117s ago: executing program 3 (id=1410): syz_open_dev$sndctrl(0x0, 0x0, 0x801) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="400c19000000f1316b997cdcfe4901e443faaa8da2e5e66460e8a5e44570fbe3b0fde8d93e29d49312d08b92dc9170dc3a02c701bd1f2ba95485c9a1eda881c7d99e17fc7faec920"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.560508438s ago: executing program 1 (id=1411): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) unshare(0x20000400) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x200000000114, 0x2718, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0xffffffffffffffc7, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e23, @broadcast}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8fa50f638facd57de499163"}, 0x8000000000000001, 0xfffffffffffffffe, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) 1.005638816s ago: executing program 4 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 883.290643ms ago: executing program 2 (id=1413): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fedbdf25fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000800000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000010000000000000000ff0900000000000000000000008040000000000000000008000000000000000000000000000000004400050000000000000000000000ffff0a010100000000003c"], 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 743.64509ms ago: executing program 5 (id=1414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 683.560964ms ago: executing program 2 (id=1415): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x2c020400) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 647.030546ms ago: executing program 4 (id=1416): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d00), 0x0, 0x200400c0) 529.755052ms ago: executing program 1 (id=1417): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="7572de", 0x3}], 0x1, &(0x7f00000007c0)=[{0x10, 0x1, 0x1}], 0x10}}], 0x1, 0x40000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4402}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20008001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0xc0c1) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x1248}}, {{&(0x7f0000005240)=@phonet={0x23, 0x3, 0x2, 0x2}, 0x80, &(0x7f00000053c0)=[{&(0x7f00000052c0)="20d397dbea36ce7c8e1da812710e9ed32ce74a2a16f104c0d464090610bfc61b51b3f69df88ae2e444fe91dd09dc5c85d0c0c77f971b464a6b0507ca6fd7462720aba2e25bcd0aff66a5a46a01bb7b07ccc7d7c64e39c64fa95b7b72b32ba61b22021e95e39aaf529c1792613380d69938b9c0c2020a3d390d06503cee5c3066e2adb26de9a5081a5281d349d744b7f036fb", 0x92}], 0x1, &(0x7f0000005400)=[{0x10, 0x102, 0x5}, {0x10, 0x104, 0xfffffff9}, {0x808, 0x1, 0x3, "36a54e7aa62c81f38b707155bf4d7435ed430ee4dd4676c3484f8a402bf160c83aec8e5e5a6909e16d4d4a521461ce785cfba7b73b9932898551a3d8ba23ee02b00283bac4be23ecbc1f63e0f943d03bda73f9932c60c6401e5a94b52ed0ec9c84477aed9faa27d9ff6aa8f7c9bd6f1e75784a5bcc88ad5f73afecf4fc292ce2dd1afe551bdcec6d679c8a6d51adee088318a8084b00e2da47d2d775f47af3baafb7331e8a9232df4c9db79ad448fa24525fcc87ab5c7a17f91f9bc72ca9b69ff3c0e44cca5c12edca81a526357cfcd604f5692dbf20a1dbf4e3c6cf1d626b4998fb0fa714e8b8ad44a0c79967aa64f8935788aac7c4287bd21a264cb39e3f81358e124737ba65133ad0648bc6a5a263a2ba63fdc105d4e9e67d9d54aa7c9519346293e746496449ea17754003249bc467cc2778e980cef3ab80073c702cc3f4eb240f7df42b7a21a59f15b4b1ead3df463d80c511c4d067d858c6ba8fbbf84949aa3f9f1b29e6ddbda00946ff5ed537d631c28aa9a4248fc80f51df6d4be073980334103d0e20223c9d5050f57b22162d47ef68fc384e187137cca3a862fc94ed6b515e15956e4d853268bf5ca1bcc42cabc13c249ba261f3af3f1e1179975b4e36ec773b35725077b1eb05d213c756ae14727ab35017817d92a49d1eabb4f35a622a7d7b88b5978c452d0a30a0221dc4ec63eeda46b461afd5ba663a7d6cb9ecb05012066f3a77fb6713b417035c588f07c8de52c26793cbc6dc8d35a728ad7a6c6ed5c9293823e5df890bef825345fd30f01e9cfec9c7c0d9c76a7294da2ae0fb5f63151e4a74fc0147d0350b2032cf30f852c1ed41ced7a05f85d39c660a8495b727f193b85cd74aad860804f0e58d578f1ce692ec2f2c47e1353760260f2465901df4b28591dd136265413bc43d6f3fbb6fa96f97a674e0750a73e47dd318b001b42720250b38d518c6e6799ed707e6fe7ebedcd58ca719e89690483e410ba69961e74c75a2cb9ca609db81980cd39891b9ffe894e50064a5e82efff5a570ac6a8d57a0be7f1d0800f54a0db4380b026b767e5d63fc6963ba2184235ad1d5f80bed800d2501fe67708faf34a2bf19b938fc6f80863396972f405ecea250187353933a65b0311571ed1209327e2da2e49a2ef56b052d06acaea76e5acceb400dd7040655ab0d6788732f14d78c6e8169a627273e9a1d8f224dfa6f748c55c1e2772f0d27017b9f3b2b252b760008c4e892792cc57d9ed9759e57029d1d2447203fd5664bdcd746a287e459d3248edb4bde7a9dc2a63111e44fd3920430af627ebcaf9b24903d45899527f546c3c31099761378f887fe63ff90a781dec3e78247861aa8a4b9932db160e7f5657f1572ce3142050bdb3db21c7b1355bcf4301008a9cec7200bd18250b49b63511523ec5f1567c6a6b92fb6e9aba95847a1a1a35c60810cecaae82fd12316c341e8877c96353089236e19b03e8581084690f0f505307331e1d0fee5829c0154262450658bee07e351e62ec3b90e0cbdbe25d88fcc6215b6aa03927234b6de47907891d8a3fbb24bbab65be321efadad8190791ed27cac9662b59585a3d665fdcbcc1c5c89c0caf274bacd427cc961cd54237a7432bd5ca365e9627d63808dda55e21b55383edbd32f129db10e0cfa7934fd058a3baff498e837a23259b584deb237ffdf5bd17e9dddf368dda50f69c35b504859c8c067a631545f48108598ac71c4503f11646cac95d4e6da0ee698471c74a47a03eb25f58b9cb8501482bd4f19fa646fcc77533e5fc67fb1f85b277fe0242ed4ee143c88ebb1f205ceaf9122f61fa988a2db1f5de27952021768b35e0282f32e16f81c7cfec63ab557486102a053648986be305cc6c6d1638b6aca0049cb95fdd01846a7a2d00336c4ae591972f730dafb43e0721aa76df62d553b02a2624d89e3907bbf71bbb5c253b19ee25040a93257ceeb2d1d964c2cb4e43533a01ce590b01cfa2fa2a5cf3e308ed2934b81c55f0e60b3c8a892f00e2c0aefe7a74123282c3c44307f3c7926243e21d106a27f6f3162d7323205c6c4805424f96b07f8e1578bdfa59f5892a309cb3adfc4631531eb41ed2d23cf2dd4e6688836c9960b707fe6cab7896c1a8862f3406b6caa50f0597d88e79cbcae9da0e714c17fc85ce32c7c1377cf9c0c09471f506e43a435c74a018d340fe914f195763170e5dda1f00ebc83c41675a60362ff5e18de17f5c25f58fd27573c7857316b9d1df7d0636c32548650679749211727cd1c156db8f51238deec61d287ede16d06a0bb149b8d3b7c4fcd1d02d73f1943197dea29dfe3bf131a9f2e8a6cf448d5b9e4734135ae63caffccfe1b7ccec9b5385b57f082707eb7004c16d169894d3c4c91b8241192c123175dcb3b0524c40b5180603819c623de88ffe7db209b15d2eca2617fc151ebddf839e8c88a6a9be551f0c5876481a2217d53606c9b0f6c6b988e033ed847ef48e45217864d90547443de18e4eb44ae5bbaf9c9271e28955c6c746972358b9f4d15701e3eef075225c6c7f87ea8b8b4aa19f06a377ab118b0e3acbf8cfdfd88b1a8be886e3125772e22a234351db2557a691898fd4fb5eafa477a8d8292f8ad854e89c3108c8cd9eebab7175b4030e48593e516e749417c3fa7ae414341a7094fc0ca9e53d7559d7390fcbf659c3d685bd932466f04eea7cda21b00de57f5dcdb901865683fc43ca9d85a38d7cabc6d9327c593cf7f073894b68127ecee5289c45fa21d1a072e37a656bf88e9fe0cd6a29632053831327a000df4e2adc2fd579f9ef9bb9c9e744cb3b53ce30bb21820d60a15d034f43f4ed118f10cab17149e9c5120f930aacc9e3ffee410c99ee7a8a210"}, {0x38, 0x11, 0x5, "ce9ea3fb925112ff1e3c00139e89b5b36879f01f0f560781f52578ff7d5984e149c8fd"}, {0x18, 0xdb9418a3f4beee00, 0x6, "a9"}], 0x878}}], 0x2, 0x4001) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0)=0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x0) 458.113126ms ago: executing program 2 (id=1418): socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x1, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 418.943228ms ago: executing program 4 (id=1419): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) unshare(0x6020400) open_tree(r0, 0x0, 0x800) 277.564355ms ago: executing program 1 (id=1420): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r0, 0x9dc0d000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 225.836628ms ago: executing program 2 (id=1421): pipe2$watch_queue(0x0, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 101.860244ms ago: executing program 4 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004540)=@newtaction={0x44, 0x76, 0x1, 0xfffffffc, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48095}, 0x4) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(r1) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0105b08, &(0x7f0000000340)={0x1, 0x200, 0x3cf3, 0x200000, 0x110001}) 0s ago: executing program 5 (id=1423): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r2, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) kernel console output (not intermixed with test programs): 69.633918][ T7626] device syzkaller0 entered promiscuous mode [ 269.750762][ T7627] CIFS mount error: No usable UNC path provided in device string! [ 269.750762][ T7627] [ 269.765895][ T7627] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 270.322201][ T7630] fuse: Bad value for 'fd' [ 270.486479][ T4483] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 270.651272][ T4483] usb 6-1: device descriptor read/64, error -71 [ 270.921422][ T4483] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 271.091249][ T4483] usb 6-1: device descriptor read/64, error -71 [ 271.221462][ T4483] usb usb6-port1: attempt power cycle [ 271.294225][ T4309] usb 2-1: USB disconnect, device number 52 [ 271.631318][ T4483] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 271.672659][ T4483] usb 6-1: device descriptor read/8, error -71 [ 271.711221][ T4309] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 271.826566][ T125] usb 3-1: USB disconnect, device number 50 [ 271.903018][ T4309] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.925764][ T4309] usb 2-1: config 0 has no interface number 0 [ 271.941276][ T4483] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 271.979692][ T4309] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.995033][ T4309] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 272.008438][ T4483] usb 6-1: device descriptor read/8, error -71 [ 272.032212][ T4309] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 272.052034][ T4309] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 272.075234][ T4309] usb 2-1: Product: syz [ 272.099835][ T4309] usb 2-1: config 0 descriptor?? [ 272.110337][ T26] kauditd_printk_skb: 153 callbacks suppressed [ 272.110348][ T26] audit: type=1326 audit(1777311733.189:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 272.113757][ T4309] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 272.150114][ T4483] usb usb6-port1: unable to enumerate USB device [ 272.171411][ T26] audit: type=1326 audit(1777311733.199:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 272.241399][ T26] audit: type=1326 audit(1777311733.229:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 272.334768][ T26] audit: type=1326 audit(1777311733.229:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 272.384025][ T4309] usb 2-1: USB disconnect, device number 53 [ 272.431292][ T26] audit: type=1326 audit(1777311733.229:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 272.533072][ T7670] device syzkaller0 entered promiscuous mode [ 272.539278][ T26] audit: type=1326 audit(1777311733.229:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 272.591390][ T26] audit: type=1326 audit(1777311733.229:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 272.615984][ T26] audit: type=1326 audit(1777311733.229:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 272.643660][ T26] audit: type=1326 audit(1777311733.229:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 272.669273][ T26] audit: type=1326 audit(1777311733.229:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 273.018606][ T7682] device syzkaller1 entered promiscuous mode [ 273.224332][ T33] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 273.432764][ T33] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 273.442552][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.453811][ T33] usb 5-1: config 0 descriptor?? [ 273.462451][ T33] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 273.865090][ T33] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 273.986313][ T125] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 274.075783][ T33] gspca_cpia1: usb_control_msg 01, error -32 [ 274.091572][ T7702] device syzkaller0 entered promiscuous mode [ 274.151255][ T4312] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 274.183084][ T125] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 274.201391][ T125] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.231337][ T125] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.246854][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.279085][ T125] usb 2-1: config 0 descriptor?? [ 274.288097][ T7698] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.305411][ T125] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 274.341343][ T4312] usb 6-1: Using ep0 maxpacket: 32 [ 274.350403][ T4312] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 274.423793][ T4312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.445493][ T4312] usb 6-1: config 0 descriptor?? [ 274.454220][ T4312] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 275.111358][ T33] gspca_cpia1: usb_control_msg 01, error -110 [ 275.118299][ T33] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 275.658511][ T4312] gspca_vc032x: reg_w err -71 [ 275.665841][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.694641][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.699970][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.715584][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.720913][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.739512][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.748901][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.758605][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.773774][ T7706] fuse: Bad value for 'fd' [ 275.778233][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.801221][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.806534][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.822382][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.836819][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.847038][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 275.858907][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.868033][ T7710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.886794][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.897223][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.907945][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.922450][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 275.927765][ T4312] gspca_vc032x: Unknown sensor... [ 275.933262][ T4312] vc032x: probe of 6-1:0.0 failed with error -22 [ 275.968319][ T4312] usb 6-1: USB disconnect, device number 40 [ 276.064340][ T4309] usb 5-1: USB disconnect, device number 57 [ 276.238319][ T7723] netlink: 'syz.3.984': attribute type 4 has an invalid length. [ 276.247024][ T7723] netlink: 152 bytes leftover after parsing attributes in process `syz.3.984'. [ 276.260885][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 276.301357][ T33] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 276.491245][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 276.498371][ T33] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.509220][ T33] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.523499][ T33] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.533607][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.541251][ T4309] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 276.549950][ T33] usb 3-1: Product: syz [ 276.554901][ T33] usb 3-1: Manufacturer: syz [ 276.567830][ T33] usb 3-1: SerialNumber: syz [ 276.611352][ T4312] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 276.742697][ T4309] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.757316][ T4309] usb 5-1: config 0 has no interface number 0 [ 276.766758][ T4309] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.778235][ T4309] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.781273][ T4312] usb 6-1: device descriptor read/64, error -71 [ 276.793652][ T4309] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.811500][ T4309] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 276.820961][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 276.829281][ T4309] usb 5-1: Product: syz [ 276.856309][ T4309] usb 5-1: config 0 descriptor?? [ 277.008934][ T33] usb 3-1: 0:2 : does not exist [ 277.069232][ T4309] usbhid 5-1:0.1: can't add hid device: -71 [ 277.081345][ T4312] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 277.081525][ T4309] usbhid: probe of 5-1:0.1 failed with error -71 [ 277.113177][ T4309] usb 5-1: USB disconnect, device number 58 [ 277.213779][ T33] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 277.251398][ T4312] usb 6-1: device descriptor read/64, error -71 [ 277.266042][ T4492] usb 2-1: USB disconnect, device number 54 [ 277.267226][ T33] usb 3-1: USB disconnect, device number 51 [ 277.381580][ T4312] usb usb6-port1: attempt power cycle [ 277.500868][ T7730] CIFS mount error: No usable UNC path provided in device string! [ 277.500868][ T7730] [ 277.514395][ T7730] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 277.524551][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.801303][ T4312] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 277.847311][ T4312] usb 6-1: device descriptor read/8, error -71 [ 277.886551][ T7736] device syzkaller0 entered promiscuous mode [ 277.977993][ T7740] netlink: 164 bytes leftover after parsing attributes in process `syz.4.989'. [ 278.018250][ T7740] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 278.141332][ T4312] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 278.192119][ T4312] usb 6-1: device descriptor read/8, error -71 [ 278.261225][ T33] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 278.311533][ T4312] usb usb6-port1: unable to enumerate USB device [ 278.466250][ T33] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 278.525237][ T33] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.559637][ T33] usb 4-1: config 220 has no interface number 2 [ 278.620215][ T33] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.677693][ T33] usb 4-1: config 220 interface 0 has no altsetting 0 [ 278.694990][ T33] usb 4-1: config 220 interface 76 has no altsetting 0 [ 278.717844][ T33] usb 4-1: config 220 interface 1 has no altsetting 0 [ 278.766059][ T33] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.804424][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.833504][ T33] usb 4-1: Product: syz [ 278.837749][ T33] usb 4-1: Manufacturer: syz [ 278.853766][ T33] usb 4-1: SerialNumber: syz [ 279.100867][ T33] usb 4-1: selecting invalid altsetting 0 [ 279.120558][ T33] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 279.143311][ T33] usb 4-1: No valid video chain found. [ 279.181691][ T33] usb 4-1: selecting invalid altsetting 0 [ 279.215721][ T33] usbtest: probe of 4-1:220.1 failed with error -22 [ 279.243177][ T33] usb 4-1: USB disconnect, device number 55 [ 279.271335][ T4483] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 279.404444][ T7749] netlink: 'syz.5.994': attribute type 1 has an invalid length. [ 279.462474][ T7749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.473651][ T4483] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 279.491393][ T4483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.501541][ T4483] usb 2-1: config 0 descriptor?? [ 279.515979][ T4483] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 279.654712][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 279.671854][ T7744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.737113][ T7758] tipc: Enabled bearer , priority 0 [ 279.762590][ T7758] tipc: Resetting bearer [ 279.779834][ T7757] tipc: Disabling bearer [ 279.916961][ T4483] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 279.971373][ T33] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 280.122022][ T4483] gspca_cpia1: usb_control_msg 01, error -32 [ 280.163333][ T33] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 280.173972][ T4255] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 280.191200][ T33] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.211263][ T33] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.220330][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.250834][ T33] usb 4-1: config 0 descriptor?? [ 280.257683][ T7756] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.273681][ T33] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 280.291287][ T4312] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 280.383709][ T4255] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.401554][ T4255] usb 6-1: config 0 has no interface number 0 [ 280.407690][ T4255] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.441349][ T4255] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.454872][ T4255] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.494752][ T4255] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 280.508242][ T4312] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 280.519515][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.528959][ T4255] usb 6-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 280.537707][ T4312] usb 3-1: Product: syz [ 280.542614][ T4312] usb 3-1: Manufacturer: syz [ 280.547788][ T4255] usb 6-1: Product: syz [ 280.552458][ T4312] usb 3-1: SerialNumber: syz [ 280.565720][ T4255] usb 6-1: config 0 descriptor?? [ 280.692060][ T7769] device syzkaller0 entered promiscuous mode [ 280.783203][ T4255] usbhid 6-1:0.1: can't add hid device: -71 [ 280.791376][ T4255] usbhid: probe of 6-1:0.1 failed with error -71 [ 280.819463][ T4255] usb 6-1: USB disconnect, device number 45 [ 280.977980][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 281.196720][ T4483] gspca_cpia1: usb_control_msg 01, error -110 [ 281.205240][ T4483] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 281.286126][ T4483] usb 2-1: USB disconnect, device number 55 [ 281.420077][ T7770] fuse: Bad value for 'fd' [ 281.927295][ T7784] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1006'. [ 282.061488][ T4492] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 282.213519][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 282.226054][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 282.238735][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 282.262837][ T4492] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.273481][ T4492] usb 5-1: config 0 has no interfaces? [ 282.279060][ T4492] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.290156][ T4492] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.308881][ T4492] usb 5-1: config 0 descriptor?? [ 282.456163][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 282.468173][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 282.480275][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 282.492161][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 282.505403][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 282.517337][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 282.528971][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 282.539320][ T4312] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 282.549399][ T4312] lan78xx: probe of 3-1:1.0 failed with error -71 [ 282.558835][ T4312] usb 3-1: USB disconnect, device number 52 [ 282.827204][ T4312] usb 4-1: USB disconnect, device number 56 [ 282.987359][ T7796] binder: 7795:7796 ioctl c0306201 0 returned -14 [ 283.029694][ T7800] tipc: Enabled bearer , priority 0 [ 283.071108][ T7800] device syzkaller0 entered promiscuous mode [ 283.140651][ T7800] tipc: Resetting bearer [ 283.152824][ T7799] tipc: Resetting bearer [ 283.177994][ T7799] tipc: Disabling bearer [ 283.652164][ T7827] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1018'. [ 283.913091][ T7834] CIFS mount error: No usable UNC path provided in device string! [ 283.913091][ T7834] [ 283.923592][ T7834] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 283.951352][ T4492] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 284.153097][ T4492] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 284.177570][ T4492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.232847][ T4492] usb 4-1: config 0 descriptor?? [ 284.259217][ T4492] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 284.663429][ T4492] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 284.878147][ T4492] gspca_cpia1: usb_control_msg 01, error -32 [ 284.928874][ T4310] usb 5-1: USB disconnect, device number 59 [ 285.409943][ T7857] binder: 7856:7857 ioctl c0306201 0 returned -14 [ 285.700749][ T7864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1027'. [ 285.911463][ T4492] gspca_cpia1: usb_control_msg 01, error -110 [ 285.918587][ T4492] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 286.923946][ T4312] usb 4-1: USB disconnect, device number 57 [ 286.951596][ T4310] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 286.964416][ T7884] device syzkaller0 entered promiscuous mode [ 287.151481][ T4310] usb 6-1: Using ep0 maxpacket: 16 [ 287.159013][ T4310] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.175910][ T4310] usb 6-1: config 0 interface 0 has no altsetting 0 [ 287.211964][ T4310] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 287.221075][ T4310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.248640][ T4310] usb 6-1: config 0 descriptor?? [ 287.261642][ T4310] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 287.441251][ T4312] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 287.643517][ T4312] usb 4-1: Using ep0 maxpacket: 32 [ 287.655491][ T4312] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 287.685248][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.709161][ T4312] usb 4-1: config 0 descriptor?? [ 287.730701][ T4312] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 288.734463][ T4312] gspca_vc032x: reg_w err -71 [ 288.739342][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.766431][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.778751][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.791335][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.802609][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.812799][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.822095][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.827550][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.833380][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.838872][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.844704][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.850486][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.856950][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.862630][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.868116][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.877553][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.883339][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.888786][ T4312] gspca_vc032x: I2c Bus Busy Wait f1 [ 288.894542][ T4312] gspca_vc032x: Unknown sensor... [ 288.899774][ T4312] vc032x: probe of 4-1:0.0 failed with error -22 [ 288.909022][ T4312] usb 4-1: USB disconnect, device number 58 [ 289.591945][ T4310] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 289.684558][ T4255] usb 6-1: USB disconnect, device number 46 [ 289.783477][ T4310] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 289.809279][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.858579][ T4310] usb 4-1: config 0 descriptor?? [ 289.879938][ T7941] device syzkaller0 entered promiscuous mode [ 289.896671][ T4310] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 290.294562][ T4310] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 290.441255][ T4312] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 290.601284][ T4312] usb 6-1: device descriptor read/64, error -71 [ 290.628778][ T7949] syz.2.1050 (7949): drop_caches: 2 [ 290.803901][ T7949] syz.2.1050 (7949): drop_caches: 2 [ 290.893601][ T4312] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 290.914986][ T7956] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1052'. [ 291.051371][ T4255] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 291.059096][ T4312] usb 6-1: device descriptor read/64, error -71 [ 291.181435][ T4312] usb usb6-port1: attempt power cycle [ 291.254326][ T4255] usb 2-1: Using ep0 maxpacket: 32 [ 291.261754][ T4255] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.279187][ T4255] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.296169][ T4255] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 291.306915][ T4255] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 291.317391][ T4255] usb 2-1: Product: syz [ 291.327055][ T4255] usb 2-1: Manufacturer: syz [ 291.344435][ T4255] hub 2-1:4.0: USB hub found [ 291.511560][ T4310] gspca_cpia1: usb_control_msg 02, error -110 [ 291.522318][ T4310] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 291.544721][ T4255] hub 2-1:4.0: 2 ports detected [ 291.591302][ T4312] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 291.631958][ T4312] usb 6-1: device descriptor read/8, error -71 [ 291.687035][ T7967] CIFS mount error: No usable UNC path provided in device string! [ 291.687035][ T7967] [ 291.758890][ T7967] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 291.901358][ T4312] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 291.942086][ T4312] usb 6-1: device descriptor read/8, error -71 [ 292.078892][ T4312] usb usb6-port1: unable to enumerate USB device [ 292.111790][ T4483] usb 4-1: USB disconnect, device number 59 [ 292.755824][ T4255] hub 2-1:4.0: activate --> -90 [ 292.951699][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 292.951713][ T26] audit: type=1326 audit(1777311754.039:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.110587][ T26] audit: type=1326 audit(1777311754.039:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.138971][ T26] audit: type=1326 audit(1777311754.039:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.168426][ T4255] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 293.171731][ T4483] usb 2-1: USB disconnect, device number 56 [ 293.191696][ T4255] usb 2-1-port2: attempt power cycle [ 293.298416][ T26] audit: type=1326 audit(1777311754.039:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.364515][ T26] audit: type=1326 audit(1777311754.039:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.404287][ T26] audit: type=1326 audit(1777311754.039:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.427873][ T26] audit: type=1326 audit(1777311754.039:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.454534][ T26] audit: type=1326 audit(1777311754.039:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.517587][ T26] audit: type=1326 audit(1777311754.039:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.548167][ T26] audit: type=1326 audit(1777311754.039:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 293.592090][ T7991] binder: BINDER_SET_CONTEXT_MGR already set [ 293.629113][ T7991] binder: 7990:7991 ioctl 4018620d 200000004a80 returned -16 [ 293.957049][ T8011] device syzkaller0 entered promiscuous mode [ 294.071423][ T4309] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 294.251387][ T4309] usb 5-1: Using ep0 maxpacket: 8 [ 294.259823][ T4309] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 294.269157][ T4309] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.279668][ T4483] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 294.287817][ T4309] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.314863][ T4309] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.331824][ T4309] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.345564][ T4309] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.354950][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.366446][ T8018] CIFS mount error: No usable UNC path provided in device string! [ 294.366446][ T8018] [ 294.381625][ T8018] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 294.484187][ T4483] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 294.499249][ T4483] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.515088][ T4483] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.530126][ T4483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.550846][ T4483] usb 2-1: config 0 descriptor?? [ 294.557830][ T8013] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 294.573523][ T4483] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 294.618743][ T4309] usb 5-1: usb_control_msg returned -32 [ 294.626053][ T4309] usbtmc 5-1:16.0: can't read capabilities [ 294.681349][ T4310] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 294.853984][ T4310] usb 6-1: device descriptor read/64, error -71 [ 295.121383][ T4310] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 295.213570][ T4312] usb 5-1: USB disconnect, device number 60 [ 295.219737][ T8024] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 295.281343][ T4310] usb 6-1: device descriptor read/64, error -71 [ 295.385212][ T8025] fuse: Bad value for 'fd' [ 295.411436][ T4310] usb usb6-port1: attempt power cycle [ 295.487956][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1073'. [ 295.831736][ T4310] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 295.876973][ T4310] usb 6-1: device descriptor read/8, error -71 [ 296.111344][ T4483] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 296.151453][ T4310] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 296.196929][ T4310] usb 6-1: device descriptor read/8, error -71 [ 296.241286][ T4312] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 296.259486][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 296.272770][ T8052] loop4: detected capacity change from 0 to 256 [ 296.284659][ T8052] FAT-fs (loop4): Unrecognized mount option "0x0000000000000000" or missing value [ 296.291468][ T4483] usb 3-1: Using ep0 maxpacket: 32 [ 296.314265][ T4483] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 296.330916][ T4483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.335871][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.346268][ T8052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.354162][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.361319][ T8052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.361857][ T4483] usb 3-1: config 0 descriptor?? [ 296.379170][ T4310] usb usb6-port1: unable to enumerate USB device [ 296.380220][ T4483] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 296.401944][ T4312] usb 4-1: device descriptor read/64, error -71 [ 296.414934][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.423247][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.437597][ T8052] net_ratelimit: 2 callbacks suppressed [ 296.437606][ T8052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.681402][ T4312] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 296.801283][ T33] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 296.841290][ T4312] usb 4-1: device descriptor read/64, error -71 [ 296.891569][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.961430][ T4312] usb usb4-port1: attempt power cycle [ 296.991328][ T33] usb 5-1: Using ep0 maxpacket: 16 [ 297.002106][ T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.031261][ T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.051310][ T33] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 297.060385][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.083115][ T125] usb 2-1: USB disconnect, device number 61 [ 297.091040][ T33] usb 5-1: config 0 descriptor?? [ 297.377819][ T8058] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 8058 comm: syz.1.1083) [ 297.379851][ T4483] gspca_vc032x: reg_w err -71 [ 297.394615][ T4312] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 297.410646][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.418582][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.433661][ T4312] usb 4-1: device descriptor read/8, error -71 [ 297.436489][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.452801][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.458336][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.470508][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.485481][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.516034][ T33] usbhid 5-1:0.0: can't add hid device: -71 [ 297.525261][ T33] usbhid: probe of 5-1:0.0 failed with error -71 [ 297.549206][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.562583][ T33] usb 5-1: USB disconnect, device number 61 [ 297.566687][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.582201][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.590427][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.608338][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.626155][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.636112][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.646075][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.655329][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.660703][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.669470][ T4483] gspca_vc032x: I2c Bus Busy Wait f1 [ 297.680099][ T4483] gspca_vc032x: Unknown sensor... [ 297.689444][ T4483] vc032x: probe of 3-1:0.0 failed with error -22 [ 297.700874][ T4483] usb 3-1: USB disconnect, device number 53 [ 297.721246][ T4312] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 297.761981][ T4312] usb 4-1: device descriptor read/8, error -71 [ 297.907412][ T4312] usb usb4-port1: unable to enumerate USB device [ 297.992848][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1085'. [ 298.302054][ T26] kauditd_printk_skb: 172 callbacks suppressed [ 298.302069][ T26] audit: type=1326 audit(1777311759.389:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 298.407679][ T26] audit: type=1326 audit(1777311759.389:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 298.507519][ T26] audit: type=1326 audit(1777311759.419:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 298.677854][ T26] audit: type=1326 audit(1777311759.419:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 298.721927][ T26] audit: type=1326 audit(1777311759.419:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 298.746810][ T26] audit: type=1326 audit(1777311759.419:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 298.845244][ T26] audit: type=1326 audit(1777311759.419:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 298.939539][ T26] audit: type=1326 audit(1777311759.419:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 298.991266][ T4483] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 299.046392][ T26] audit: type=1326 audit(1777311759.419:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 299.090377][ T26] audit: type=1326 audit(1777311759.419:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2aaef9cdd9 code=0x7ffc0000 [ 299.183823][ T4483] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 299.208123][ T4483] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.231911][ T4483] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.241134][ T4483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.252761][ T4483] usb 2-1: config 0 descriptor?? [ 299.258654][ T8087] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.269351][ T4483] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 299.315133][ T8093] device syzkaller0 entered promiscuous mode [ 299.442369][ T4311] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 299.510067][ T8097] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1097'. [ 299.621365][ T4311] usb 4-1: device descriptor read/64, error -71 [ 299.735615][ T4483] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 299.775104][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1099'. [ 299.891468][ T4311] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 299.921313][ T4483] usb 5-1: Using ep0 maxpacket: 16 [ 299.929278][ T4483] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.964507][ T8106] device syzkaller0 entered promiscuous mode [ 299.965153][ T4483] usb 5-1: config 0 interface 0 has no altsetting 0 [ 299.991385][ T4483] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 300.020789][ T4483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.048243][ T4483] usb 5-1: config 0 descriptor?? [ 300.094507][ T4311] usb 4-1: device descriptor read/64, error -71 [ 300.234881][ T4311] usb usb4-port1: attempt power cycle [ 300.326550][ T8113] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1101'. [ 300.365388][ T8113] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 300.484352][ T8102] fuse: Bad value for 'fd' [ 300.641224][ T4311] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 300.671849][ T4311] usb 4-1: device descriptor read/8, error -71 [ 300.731239][ T4312] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 300.875044][ T4483] usbhid 5-1:0.0: can't add hid device: -71 [ 300.881076][ T4483] usbhid: probe of 5-1:0.0 failed with error -71 [ 300.891445][ T4312] usb 6-1: device descriptor read/64, error -71 [ 300.908502][ T4483] usb 5-1: USB disconnect, device number 62 [ 300.941242][ T4311] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 300.971731][ T4311] usb 4-1: device descriptor read/8, error -71 [ 301.091449][ T4311] usb usb4-port1: unable to enumerate USB device [ 301.171290][ T4312] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 301.331340][ T4312] usb 6-1: device descriptor read/64, error -71 [ 301.428714][ T8123] device syzkaller0 entered promiscuous mode [ 301.462073][ T4312] usb usb6-port1: attempt power cycle [ 301.511507][ T4483] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 301.691280][ T4483] usb 3-1: Using ep0 maxpacket: 16 [ 301.699281][ T4483] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 301.709436][ T4483] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 301.717939][ T4483] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.728617][ T4483] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 301.737908][ T4483] usb 3-1: config 0 has no interface number 0 [ 301.744456][ T4483] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 301.757667][ T4483] usb 3-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.770848][ T4483] usb 3-1: config 0 interface 125 has no altsetting 0 [ 301.780116][ T4483] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 301.789324][ T4483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.797362][ T4483] usb 3-1: Product: syz [ 301.801745][ T4483] usb 3-1: Manufacturer: syz [ 301.806344][ T4483] usb 3-1: SerialNumber: syz [ 301.813343][ T4483] usb 3-1: config 0 descriptor?? [ 301.891461][ T4312] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 301.941968][ T4312] usb 6-1: device descriptor read/8, error -71 [ 301.952792][ T33] usb 2-1: USB disconnect, device number 62 [ 302.027514][ T125] usb 3-1: USB disconnect, device number 54 [ 302.054819][ T8136] device syzkaller0 entered promiscuous mode [ 302.221304][ T4312] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 302.262850][ T4312] usb 6-1: device descriptor read/8, error -71 [ 302.391499][ T4312] usb usb6-port1: unable to enumerate USB device [ 302.530554][ T8147] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1116'. [ 302.629208][ T8147] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 303.820304][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1122'. [ 303.914624][ T8172] loop5: detected capacity change from 0 to 256 [ 303.960847][ T8172] FAT-fs (loop5): Unrecognized mount option "0x0000000000000000" or missing value [ 304.135993][ T8171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.161591][ T8171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.701276][ T4311] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 304.762890][ T4312] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 304.894339][ T4311] usb 4-1: Using ep0 maxpacket: 16 [ 304.914803][ T4311] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.931374][ T4312] usb 6-1: device descriptor read/64, error -71 [ 304.943211][ T4311] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.976059][ T4311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 304.988217][ T4311] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 305.000496][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.009295][ T4483] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 305.019158][ T4311] usb 4-1: config 0 descriptor?? [ 305.053766][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 305.079064][ T8169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.171269][ T4483] usb 2-1: device descriptor read/64, error -71 [ 305.201654][ T4312] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 305.266975][ T8189] device syzkaller0 entered promiscuous mode [ 305.361281][ T4312] usb 6-1: device descriptor read/64, error -71 [ 305.441354][ T4483] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 305.456154][ T4311] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 305.491392][ T4312] usb usb6-port1: attempt power cycle [ 305.591458][ T4483] usb 2-1: device descriptor read/64, error -71 [ 305.659599][ T4311] usb 4-1: USB disconnect, device number 68 [ 305.711684][ T4483] usb usb2-port1: attempt power cycle [ 305.911417][ T4312] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 305.952356][ T4312] usb 6-1: device descriptor read/8, error -71 [ 306.121249][ T4483] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 306.132549][ T33] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 306.151866][ T4483] usb 2-1: device descriptor read/8, error -71 [ 306.221477][ T4312] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 306.263797][ T4312] usb 6-1: device descriptor read/8, error -71 [ 306.266072][ T8199] device hsr0 entered promiscuous mode [ 306.291228][ T33] usb 3-1: device descriptor read/64, error -71 [ 306.336425][ T8200] device team_slave_0 entered promiscuous mode [ 306.342957][ T8200] device team_slave_1 entered promiscuous mode [ 306.370330][ T8200] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.401717][ T4312] usb usb6-port1: unable to enumerate USB device [ 306.424260][ T4483] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 306.491876][ T4483] usb 2-1: device descriptor read/8, error -71 [ 306.591250][ T33] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 306.631472][ T4483] usb usb2-port1: unable to enumerate USB device [ 306.761364][ T33] usb 3-1: device descriptor read/64, error -71 [ 306.861266][ T4309] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 306.891479][ T33] usb usb3-port1: attempt power cycle [ 307.041457][ T4309] usb 5-1: Using ep0 maxpacket: 8 [ 307.050430][ T4309] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 307.059068][ T4309] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.069308][ T4309] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.080072][ T4309] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.090487][ T4309] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.104357][ T4309] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.113476][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.311287][ T33] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 307.326454][ T4309] usb 5-1: usb_control_msg returned -32 [ 307.332164][ T4309] usbtmc 5-1:16.0: can't read capabilities [ 307.342019][ T33] usb 3-1: device descriptor read/8, error -71 [ 307.612323][ T33] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 307.653149][ T33] usb 3-1: device descriptor read/8, error -71 [ 307.771460][ T33] usb usb3-port1: unable to enumerate USB device [ 307.897821][ T4311] usb 5-1: USB disconnect, device number 63 [ 307.928255][ T8222] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 307.971490][ T4309] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 308.181454][ T4309] usb 6-1: Using ep0 maxpacket: 8 [ 308.188885][ T4309] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 308.212302][ T4309] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.231335][ T4483] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 308.252182][ T4309] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.267453][ T4309] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.278988][ T4309] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.297742][ T4309] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.309124][ T4309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.433875][ T4483] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.442093][ T4483] usb 2-1: config 0 has no interface number 0 [ 308.448321][ T4483] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.469849][ T4483] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.480292][ T4483] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 308.494875][ T4483] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 308.504320][ T4483] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 308.513651][ T4483] usb 2-1: Product: syz [ 308.527722][ T4483] usb 2-1: config 0 descriptor?? [ 308.534765][ T4309] usb 6-1: usb_control_msg returned -32 [ 308.540422][ T4309] usbtmc 6-1:16.0: can't read capabilities [ 308.577076][ T8242] device syzkaller0 entered promiscuous mode [ 308.758289][ T4483] usbhid 2-1:0.1: can't add hid device: -71 [ 308.767651][ T4483] usbhid: probe of 2-1:0.1 failed with error -71 [ 308.788951][ T4483] usb 2-1: USB disconnect, device number 67 [ 309.302330][ T33] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 309.481368][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 309.496167][ T33] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 309.511266][ T33] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 309.519464][ T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.551220][ T33] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 309.560105][ T33] usb 3-1: config 0 has no interface number 0 [ 309.581253][ T33] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 309.592404][ T33] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 309.611233][ T33] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 309.621075][ T33] usb 3-1: config 0 interface 125 has no altsetting 0 [ 309.649106][ T33] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 309.669809][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.679972][ T33] usb 3-1: Product: syz [ 309.687522][ T33] usb 3-1: Manufacturer: syz [ 309.692865][ T33] usb 3-1: SerialNumber: syz [ 309.699197][ T33] usb 3-1: config 0 descriptor?? [ 309.801280][ T4483] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 309.918611][ T4309] usb 3-1: USB disconnect, device number 59 [ 309.961391][ T4483] usb 4-1: device descriptor read/64, error -71 [ 310.241461][ T4483] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 310.411439][ T4483] usb 4-1: device descriptor read/64, error -71 [ 310.547520][ T128] usb 6-1: USB disconnect, device number 63 [ 310.557322][ T4483] usb usb4-port1: attempt power cycle [ 310.781346][ T4309] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 310.871890][ T8274] netlink: 'syz.1.1153': attribute type 1 has an invalid length. [ 310.981443][ T4483] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 311.002749][ T4309] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 311.051572][ T4309] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 311.082100][ T4483] usb 4-1: device descriptor read/8, error -71 [ 311.089570][ T4309] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 311.156636][ T4309] usb 3-1: config 150 has no interface number 0 [ 311.173327][ T4309] usb 3-1: config 150 interface 204 has no altsetting 0 [ 311.200974][ T4309] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 311.225736][ T4309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.281778][ T4309] usb 3-1: Product: syz [ 311.289713][ T4309] usb 3-1: Manufacturer: syz [ 311.294857][ T4309] usb 3-1: SerialNumber: syz [ 311.391241][ T4483] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 311.393138][ T4310] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 311.443461][ T4483] usb 4-1: device descriptor read/8, error -71 [ 311.510991][ T128] usb 3-1: USB disconnect, device number 60 [ 311.554052][ T4310] usb 2-1: device descriptor read/64, error -71 [ 311.561677][ T4483] usb usb4-port1: unable to enumerate USB device [ 311.821269][ T4310] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 311.981287][ T4310] usb 2-1: device descriptor read/64, error -71 [ 312.102326][ T4310] usb usb2-port1: attempt power cycle [ 312.445350][ T8306] CIFS mount error: No usable UNC path provided in device string! [ 312.445350][ T8306] [ 312.455811][ T8306] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 312.521516][ T4310] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 312.564349][ T4310] usb 2-1: device descriptor read/8, error -71 [ 312.851238][ T4310] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 312.881654][ T4310] usb 2-1: device descriptor read/8, error -71 [ 313.001760][ T4310] usb usb2-port1: unable to enumerate USB device [ 313.021256][ T128] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 313.221245][ T128] usb 4-1: Using ep0 maxpacket: 16 [ 313.227905][ T128] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 313.274892][ T128] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.321871][ T128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.378709][ T128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 313.429346][ T128] usb 4-1: config 0 has no interface number 0 [ 313.453245][ T128] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 313.508182][ T128] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.561255][ T128] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 313.603281][ T128] usb 4-1: config 0 interface 125 has no altsetting 0 [ 313.623148][ T128] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 313.661205][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.681653][ T128] usb 4-1: Product: syz [ 313.701902][ T128] usb 4-1: Manufacturer: syz [ 313.706543][ T128] usb 4-1: SerialNumber: syz [ 313.739517][ T128] usb 4-1: config 0 descriptor?? [ 313.962602][ T128] usb 4-1: USB disconnect, device number 73 [ 314.398998][ T8341] syz.1.1171 (8341): drop_caches: 2 [ 314.427868][ T8341] syz.1.1171 (8341): drop_caches: 2 [ 314.731397][ T4310] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 314.901490][ T4310] usb 3-1: device descriptor read/64, error -71 [ 314.970584][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 314.992432][ T8334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.201347][ T4310] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 315.316413][ T8360] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 315.325946][ T8360] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 315.381351][ T4310] usb 3-1: device descriptor read/64, error -71 [ 315.517883][ T4310] usb usb3-port1: attempt power cycle [ 315.931321][ T4310] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 315.972006][ T4310] usb 3-1: device descriptor read/8, error -71 [ 316.171313][ T4312] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 316.271264][ T4310] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 316.303558][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1186'. [ 316.322055][ T4310] usb 3-1: device descriptor read/8, error -71 [ 316.341295][ T4312] usb 5-1: device descriptor read/64, error -71 [ 316.344359][ T8391] loop3: detected capacity change from 0 to 256 [ 316.372211][ T8391] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 316.416290][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.423399][ T8391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.430757][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.437877][ T8391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.451944][ T4310] usb usb3-port1: unable to enumerate USB device [ 316.475761][ T8391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.486170][ T8391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.504031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.611269][ T4312] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 316.901292][ T4312] usb 5-1: device descriptor read/64, error -71 [ 316.957388][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.963761][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.022002][ T4312] usb usb5-port1: attempt power cycle [ 317.100209][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1183'. [ 317.205069][ T8392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.441354][ T4312] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 317.502097][ T4312] usb 5-1: device descriptor read/8, error -71 [ 317.605241][ T8406] netlink: 'syz.5.1190': attribute type 1 has an invalid length. [ 317.664464][ T8406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.716050][ T8410] bond2: (slave geneve2): making interface the new active one [ 317.757195][ T8410] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 317.768080][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 317.781316][ T4312] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 317.852841][ T4312] usb 5-1: device descriptor read/8, error -71 [ 317.995517][ T4312] usb usb5-port1: unable to enumerate USB device [ 318.005651][ T8410] syz.5.1190 (8410) used greatest stack depth: 20184 bytes left [ 318.313438][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 318.411798][ T8415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.149435][ T4312] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 319.354721][ T4312] usb 6-1: Using ep0 maxpacket: 16 [ 319.361653][ T4312] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 319.376438][ T4312] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.395790][ T4312] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.414776][ T4312] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.436972][ T4312] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 319.455365][ T4312] usb 6-1: config 0 has no interface number 0 [ 319.471129][ T4312] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 319.496964][ T4312] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 319.590339][ T4312] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 319.601699][ T4312] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.617135][ T4312] usb 6-1: config 0 interface 125 has no altsetting 0 [ 319.629037][ T4312] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 319.641850][ T4312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.650422][ T4312] usb 6-1: Product: syz [ 319.657053][ T4312] usb 6-1: Manufacturer: syz [ 319.662479][ T4312] usb 6-1: SerialNumber: syz [ 319.669175][ T4312] usb 6-1: config 0 descriptor?? [ 319.889315][ T128] usb 6-1: USB disconnect, device number 64 [ 320.084502][ T8455] fuse: Bad value for 'fd' [ 320.101459][ T4483] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 320.301358][ T4483] usb 4-1: Using ep0 maxpacket: 16 [ 320.309186][ T4483] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.320472][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.341235][ T4483] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 320.350309][ T4483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.366786][ T4483] usb 4-1: config 0 descriptor?? [ 320.474968][ T8466] device syzkaller0 entered promiscuous mode [ 320.651255][ T4312] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 320.852703][ T4312] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 320.860937][ T4312] usb 5-1: config 0 has no interface number 1 [ 320.867192][ T4312] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 320.877320][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.892344][ T4312] usb 5-1: config 0 descriptor?? [ 320.911345][ T128] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 320.985217][ T4483] usbhid 4-1:0.0: can't add hid device: -71 [ 320.991299][ T33] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 321.001719][ T4483] usbhid: probe of 4-1:0.0 failed with error -71 [ 321.015575][ T4483] usb 4-1: USB disconnect, device number 74 [ 321.061369][ T128] usb 6-1: device descriptor read/64, error -71 [ 321.115924][ T4312] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 321.191266][ T33] usb 2-1: Using ep0 maxpacket: 16 [ 321.197816][ T33] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 321.207288][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.217183][ T33] usb 2-1: config 0 descriptor?? [ 321.226284][ T33] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 321.323900][ T4312] usb 5-1: USB disconnect, device number 68 [ 321.335805][ T4312] qcserial 5-1:0.2: device disconnected [ 321.341337][ T128] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 321.501334][ T128] usb 6-1: device descriptor read/64, error -71 [ 321.627437][ T128] usb usb6-port1: attempt power cycle [ 321.945751][ T8489] binder: 8488:8489 ioctl 4018620d 0 returned -22 [ 321.977206][ T8489] syz.4.1218 (8489): drop_caches: 2 [ 321.983085][ T8489] syz.4.1218 (8489): drop_caches: 2 [ 321.998193][ T8491] fuse: Bad value for 'fd' [ 322.041297][ T128] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 322.087829][ T128] usb 6-1: device descriptor read/8, error -71 [ 322.361239][ T128] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 322.406350][ T125] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 322.412803][ T128] usb 6-1: device descriptor read/8, error -71 [ 322.531397][ T128] usb usb6-port1: unable to enumerate USB device [ 322.547089][ T33] gspca_sonixj: reg_w1 err -110 [ 322.581363][ T33] sonixj: probe of 2-1:0.0 failed with error -110 [ 322.605090][ T125] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 322.622400][ T125] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 322.630723][ T125] usb 3-1: Product: syz [ 322.667536][ T125] usb 3-1: config 0 descriptor?? [ 322.698315][ T125] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 322.733719][ T125] usb 3-1: Detected FT232H [ 322.759877][ T33] usb 2-1: USB disconnect, device number 72 [ 322.789637][ T8499] CIFS mount error: No usable UNC path provided in device string! [ 322.789637][ T8499] [ 322.800398][ T8499] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 322.918971][ T8501] device syzkaller0 entered promiscuous mode [ 323.077906][ T125] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 323.089043][ T125] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 323.109216][ T125] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 323.126656][ T125] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 323.138803][ T125] usb 3-1: USB disconnect, device number 65 [ 323.158935][ T125] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 323.179506][ T125] ftdi_sio 3-1:0.0: device disconnected [ 323.471294][ T4309] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 323.671704][ T4309] usb 4-1: Using ep0 maxpacket: 16 [ 323.678754][ T4309] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 323.705630][ T4309] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 323.726170][ T4309] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 323.748049][ T4309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.780288][ T4309] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 323.801353][ T4309] usb 4-1: config 0 has no interface number 0 [ 323.812072][ T4309] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 323.843470][ T4309] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 323.859301][ T4309] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.874110][ T4309] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.899107][ T4309] usb 4-1: config 0 interface 125 has no altsetting 0 [ 323.910559][ T4309] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 323.919902][ T8517] netlink: 'syz.2.1225': attribute type 4 has an invalid length. [ 323.928209][ T8517] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1225'. [ 323.937715][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.946025][ T8517] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 323.962255][ T4309] usb 4-1: Product: syz [ 323.967025][ T4309] usb 4-1: Manufacturer: syz [ 323.973531][ T4309] usb 4-1: SerialNumber: syz [ 323.980263][ T4309] usb 4-1: config 0 descriptor?? [ 324.195576][ T128] usb 4-1: USB disconnect, device number 75 [ 324.704900][ T8531] fuse: Bad value for 'fd' [ 324.844611][ T8533] binder: 8532:8533 ioctl 4018620d 0 returned -22 [ 324.992201][ T8533] syz.3.1231 (8533): drop_caches: 2 [ 325.009098][ T8533] syz.3.1231 (8533): drop_caches: 2 [ 325.191298][ T125] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 325.391265][ T125] usb 6-1: Using ep0 maxpacket: 8 [ 325.397788][ T125] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 325.435715][ T125] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 325.483275][ T125] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 325.501027][ T125] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 325.512929][ T125] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 325.523306][ T125] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.542096][ T125] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.563581][ T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.797582][ T125] usb 6-1: usb_control_msg returned -32 [ 325.821580][ T125] usbtmc 6-1:16.0: can't read capabilities [ 325.861317][ T4310] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 326.031445][ T33] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 326.063214][ T4310] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 326.081412][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.105737][ T4310] usb 2-1: config 0 descriptor?? [ 326.116237][ T4310] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 326.129826][ T8550] CIFS mount error: No usable UNC path provided in device string! [ 326.129826][ T8550] [ 326.140912][ T8550] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 326.168124][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 326.194840][ T8554] usbtmc 6-1:16.0: Unable to send data, error -71 [ 326.235363][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 326.242330][ T33] usb 3-1: no configurations [ 326.247034][ T33] usb 3-1: can't read configurations, error -22 [ 326.411328][ T33] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 326.641352][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 326.651628][ T33] usb 3-1: no configurations [ 326.670861][ T33] usb 3-1: can't read configurations, error -22 [ 326.698573][ T33] usb usb3-port1: attempt power cycle [ 327.131267][ T33] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 327.176082][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 327.181839][ T33] usb 3-1: no configurations [ 327.200657][ T33] usb 3-1: can't read configurations, error -22 [ 327.371300][ T33] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 327.394212][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 327.409987][ T8556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.426990][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 327.433124][ T33] usb 3-1: no configurations [ 327.437803][ T33] usb 3-1: can't read configurations, error -22 [ 327.444434][ T33] usb usb3-port1: unable to enumerate USB device [ 327.801811][ T8559] fuse: Bad value for 'fd' [ 327.932225][ T4310] usb 2-1: USB disconnect, device number 73 [ 327.976596][ T33] usb 6-1: USB disconnect, device number 69 [ 328.271378][ T125] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 328.426185][ T33] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 328.469755][ T125] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 328.493177][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.518513][ T125] usb 5-1: config 0 descriptor?? [ 328.526013][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1244'. [ 328.528090][ T125] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 328.631457][ T33] usb 6-1: Using ep0 maxpacket: 16 [ 328.638488][ T33] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 328.647144][ T33] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 328.655504][ T33] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 328.663794][ T33] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.673942][ T33] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 328.683311][ T33] usb 6-1: config 0 has no interface number 0 [ 328.689423][ T33] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 328.700558][ T33] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 328.710541][ T33] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 328.720502][ T33] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.733639][ T33] usb 6-1: config 0 interface 125 has no altsetting 0 [ 328.749798][ T33] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 328.758917][ T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.780140][ T33] usb 6-1: Product: syz [ 328.784706][ T33] usb 6-1: Manufacturer: syz [ 328.789851][ T33] usb 6-1: SerialNumber: syz [ 328.798340][ T33] usb 6-1: config 0 descriptor?? [ 328.803419][ T128] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 328.941666][ T125] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 328.994700][ T128] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 329.010981][ T128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.021426][ T4312] usb 6-1: USB disconnect, device number 70 [ 329.030556][ T128] usb 2-1: config 0 has no interface number 0 [ 329.038197][ T128] usb 2-1: config 0 interface 244 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 329.055454][ T128] usb 2-1: config 0 interface 244 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 329.082965][ T128] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 329.110838][ T128] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 329.131366][ T128] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 329.147415][ T128] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 329.158346][ T128] usb 2-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 329.177087][ T128] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 329.186746][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.206938][ T128] usb 2-1: config 0 descriptor?? [ 329.217103][ T8580] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 329.431743][ T128] usb 2-1: string descriptor 0 read error: -71 [ 329.465489][ T128] cypress_m8 2-1:0.244: DeLorme Earthmate USB converter detected [ 329.497155][ T128] earthmate ttyUSB0: required endpoint is missing [ 329.546381][ T128] usb 2-1: USB disconnect, device number 74 [ 329.577854][ T8591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1248'. [ 329.590167][ T128] cypress_m8 2-1:0.244: device disconnected [ 329.691882][ T8591] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 330.161515][ T125] gspca_cpia1: usb_control_msg 02, error -110 [ 330.169395][ T125] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 330.237601][ T8596] xt_hashlimit: size too large, truncated to 1048576 [ 330.648410][ T8600] tipc: Enabled bearer , priority 0 [ 330.727515][ T8600] tipc: Resetting bearer [ 330.877108][ T8599] tipc: Disabling bearer [ 331.093843][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 331.207125][ T8602] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 331.320672][ T125] usb 5-1: USB disconnect, device number 69 [ 331.442252][ T8615] binder: BINDER_SET_CONTEXT_MGR already set [ 331.468918][ T8615] binder: 8614:8615 ioctl 4018620d 200000004a80 returned -16 [ 331.509803][ T8615] syz.4.1257 (8615): drop_caches: 2 [ 331.534792][ T8615] syz.4.1257 (8615): drop_caches: 2 [ 331.652372][ T4310] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 331.862998][ T4310] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 331.881255][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.894894][ T8607] fuse: Bad value for 'fd' [ 331.941653][ T4310] usb 4-1: config 0 descriptor?? [ 331.972187][ T4310] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 332.380433][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 332.399805][ T8617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.639525][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1259'. [ 332.656162][ T8624] loop5: detected capacity change from 0 to 256 [ 332.668454][ T8624] FAT-fs (loop5): Unrecognized mount option "0x0000000000000000" or missing value [ 332.713616][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.748285][ T8624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.948317][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 332.983658][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 333.187014][ T8633] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1263'. [ 333.798581][ T4310] usb 4-1: USB disconnect, device number 76 [ 334.283355][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 334.283370][ T26] audit: type=1326 audit(1777311795.369:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 334.358958][ T26] audit: type=1326 audit(1777311795.409:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 334.457916][ T26] audit: type=1326 audit(1777311795.409:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 334.550329][ T26] audit: type=1326 audit(1777311795.409:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 334.573021][ T4311] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 334.633785][ T26] audit: type=1326 audit(1777311795.409:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 334.721544][ T26] audit: type=1326 audit(1777311795.409:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 334.782943][ T4311] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 334.801225][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.819471][ T26] audit: type=1326 audit(1777311795.409:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 334.850829][ T4311] usb 2-1: config 0 descriptor?? [ 334.874199][ T4311] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 334.900593][ T26] audit: type=1326 audit(1777311795.409:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 334.995796][ T26] audit: type=1326 audit(1777311795.409:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 335.092127][ T26] audit: type=1326 audit(1777311795.409:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbdf9cdd9 code=0x7ffc0000 [ 335.275581][ T4311] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 335.378124][ T8663] fuse: Bad value for 'fd' [ 335.393211][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 335.407191][ T8673] loop2: detected capacity change from 0 to 256 [ 335.448606][ T8673] FAT-fs (loop2): Unrecognized mount option "0x0000000000000000" or missing value [ 335.556328][ T8673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 335.595387][ T8673] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 335.634072][ T8673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.551714][ T4311] gspca_cpia1: usb_control_msg 02, error -110 [ 336.558238][ T4311] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 336.887911][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1268'. [ 336.927337][ T8685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.999870][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 337.021325][ T4311] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 337.029675][ T8677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.061789][ T4309] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 337.231304][ T4311] usb 3-1: Using ep0 maxpacket: 8 [ 337.242778][ T4311] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 337.261079][ T4311] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 337.283515][ T4311] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 337.294383][ T4309] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 337.305009][ T4309] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 337.320276][ T4311] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 337.332305][ T4309] usb 4-1: config 220 has no interface number 2 [ 337.341011][ T4309] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 337.354771][ T4311] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 337.366371][ T4311] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.381340][ T4309] usb 4-1: config 220 interface 0 has no altsetting 0 [ 337.389218][ T4309] usb 4-1: config 220 interface 76 has no altsetting 0 [ 337.396566][ T4311] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.405858][ T4309] usb 4-1: config 220 interface 1 has no altsetting 0 [ 337.426743][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.439414][ T4309] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 337.458221][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.505325][ T4309] usb 4-1: Product: syz [ 337.514159][ T4309] usb 4-1: Manufacturer: syz [ 337.525649][ T4309] usb 4-1: SerialNumber: syz [ 337.646535][ T4483] usb 2-1: USB disconnect, device number 75 [ 337.697039][ T4311] usb 3-1: usb_control_msg returned -32 [ 337.703307][ T4311] usbtmc 3-1:16.0: can't read capabilities [ 337.766009][ T4309] usb 4-1: selecting invalid altsetting 0 [ 337.775376][ T8701] tipc: Enabled bearer , priority 0 [ 337.795323][ T4309] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 337.812150][ T4309] usb 4-1: No valid video chain found. [ 337.836443][ T8701] tipc: Resetting bearer [ 337.876858][ T4309] usb 4-1: selecting invalid altsetting 0 [ 337.885666][ T4309] usbtest: probe of 4-1:220.1 failed with error -22 [ 337.912102][ T4309] usb 4-1: USB disconnect, device number 77 [ 337.953143][ T8700] tipc: Disabling bearer [ 338.248650][ T8709] binder: BINDER_SET_CONTEXT_MGR already set [ 338.255123][ T8709] binder: 8708:8709 ioctl 4018620d 200000004a80 returned -16 [ 338.334258][ T8709] syz.4.1282 (8709): drop_caches: 2 [ 338.367490][ T8709] syz.4.1282 (8709): drop_caches: 2 [ 339.401310][ T4483] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 339.410653][ T8718] fuse: Bad value for 'fd' [ 339.591252][ T4483] usb 5-1: Using ep0 maxpacket: 16 [ 339.598303][ T4483] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.620315][ T4483] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.627484][ T4483] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 339.638481][ T4483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.648074][ T4483] usb 5-1: config 0 descriptor?? [ 339.744161][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 339.796813][ T4312] usb 3-1: USB disconnect, device number 70 [ 339.861522][ T4310] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 340.011720][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 340.062170][ T4310] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 340.063215][ T4483] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 340.090310][ T4310] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 340.118875][ T4483] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 340.132598][ T4310] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 340.166261][ T4310] usb 6-1: config 150 has no interface number 0 [ 340.185156][ T4483] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 340.197436][ T4310] usb 6-1: config 150 interface 204 has no altsetting 0 [ 340.199608][ T4483] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 340.229583][ T4310] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 340.230981][ T4483] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 340.258665][ T8739] loop7: detected capacity change from 0 to 16384 [ 340.265401][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.295584][ T4310] usb 6-1: Product: syz [ 340.307984][ T4310] usb 6-1: Manufacturer: syz [ 340.323822][ T4310] usb 6-1: SerialNumber: syz [ 340.324989][ C0] usb 5-1: input irq status -75 received [ 340.491255][ T4309] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 340.589553][ T4310] xr_serial 6-1:150.204: skipping garbage [ 340.602304][ T4483] usb 5-1: USB disconnect, device number 70 [ 340.647605][ T4310] usb 6-1: USB disconnect, device number 71 [ 340.680895][ T8742] fido_id[8742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 340.697766][ T4309] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 340.713645][ T8740] loop7: detected capacity change from 16384 to 0 [ 340.725724][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.759836][ T4309] usb 3-1: config 0 descriptor?? [ 340.787979][ T4309] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 341.197364][ T4309] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 341.571266][ T125] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 341.578863][ T4310] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 341.784007][ T125] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 341.800748][ T4310] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 341.812010][ T125] usb 6-1: config 0 has no interface number 1 [ 341.818157][ T125] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 341.827417][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.835853][ T4310] usb 5-1: Product: syz [ 341.840143][ T4310] usb 5-1: Manufacturer: syz [ 341.844851][ T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.853060][ T4310] usb 5-1: SerialNumber: syz [ 341.872161][ T125] usb 6-1: config 0 descriptor?? [ 342.031262][ T4255] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 342.140806][ T125] usb 6-1: Could not set interface, error -71 [ 342.191291][ T125] usb 6-1: USB disconnect, device number 72 [ 342.214493][ T4255] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 342.241097][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.263009][ T4255] usb 2-1: config 0 descriptor?? [ 342.275171][ T4255] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 342.472262][ T4309] gspca_cpia1: usb_control_msg 02, error -110 [ 342.478477][ T4309] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 342.649510][ T4309] usb 3-1: USB disconnect, device number 71 [ 342.739793][ T4310] rtl8150 5-1:1.0: couldn't reset the device [ 342.760595][ T4310] rtl8150: probe of 5-1:1.0 failed with error -5 [ 342.777119][ T4310] usb 5-1: USB disconnect, device number 71 [ 343.091251][ T128] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 343.281343][ T128] usb 4-1: Using ep0 maxpacket: 8 [ 343.285646][ T8768] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1299'. [ 343.301637][ T128] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 343.325227][ T128] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 343.384737][ T128] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 343.434053][ T128] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 343.468881][ T128] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 343.527801][ T128] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.565450][ T128] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.591326][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.721384][ T4310] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 343.814866][ T128] usb 4-1: usb_control_msg returned -32 [ 343.820633][ T128] usbtmc 4-1:16.0: can't read capabilities [ 343.941285][ T4310] usb 5-1: Using ep0 maxpacket: 32 [ 343.947953][ T4310] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 344.007724][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.016355][ T8772] fuse: Bad value for 'fd' [ 344.032518][ T4310] usb 5-1: config 0 descriptor?? [ 344.048762][ T4310] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 344.085543][ T4255] usb 2-1: USB disconnect, device number 76 [ 344.244394][ T4310] gspca_vc032x: reg_r err -32 [ 344.249377][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.255048][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.260347][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.265772][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.271072][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.276475][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.282108][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.287468][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.292819][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.298130][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.303452][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.308740][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.315605][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.320905][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.326228][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.331986][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.337286][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.342827][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.348494][ T4310] gspca_vc032x: Unknown sensor... [ 344.353647][ T4310] vc032x: probe of 5-1:0.0 failed with error -22 [ 344.737747][ T8785] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1303'. [ 344.749633][ T8785] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 344.921312][ T128] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 345.104544][ T128] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 345.113616][ T128] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 345.124161][ T128] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 345.133344][ T128] usb 3-1: config 150 has no interface number 0 [ 345.139825][ T128] usb 3-1: config 150 interface 204 has no altsetting 0 [ 345.149478][ T128] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 345.158883][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.169218][ T128] usb 3-1: Product: syz [ 345.173499][ T128] usb 3-1: Manufacturer: syz [ 345.178228][ T128] usb 3-1: SerialNumber: syz [ 345.291315][ T4309] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 345.391877][ T128] xr_serial 3-1:150.204: skipping garbage [ 345.407356][ T128] usb 3-1: USB disconnect, device number 72 [ 345.481267][ T4309] usb 6-1: Using ep0 maxpacket: 16 [ 345.488403][ T4309] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 345.497077][ T4309] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 345.505350][ T4309] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 345.513959][ T4309] usb 6-1: config 0 has no interface number 1 [ 345.520837][ T4309] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 345.533207][ T4309] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 345.545635][ T4309] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 345.555719][ T4309] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.571420][ T4309] usb 6-1: config 0 interface 125 has no altsetting 0 [ 345.598284][ T4309] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 345.619354][ T4309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.628046][ T4309] usb 6-1: Product: syz [ 345.632541][ T4309] usb 6-1: Manufacturer: syz [ 345.640214][ T4309] usb 6-1: SerialNumber: syz [ 345.655719][ T4309] usb 6-1: config 0 descriptor?? [ 345.672878][ T8790] device syzkaller0 entered promiscuous mode [ 345.842246][ T4310] usb 4-1: USB disconnect, device number 78 [ 345.886965][ T4309] usb 6-1: USB disconnect, device number 73 [ 346.130537][ T8803] netlink: 'syz.2.1311': attribute type 4 has an invalid length. [ 346.156318][ T8803] usb usb1: usbfs: process 8803 (syz.2.1311) did not claim interface 63 before use [ 346.291322][ T4310] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 346.491277][ T4310] usb 4-1: Using ep0 maxpacket: 8 [ 346.500026][ T4310] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 346.519077][ T4310] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.546661][ T4309] usb 5-1: USB disconnect, device number 72 [ 346.570801][ T4310] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.615120][ T8807] fuse: Bad value for 'fd' [ 346.653095][ T4310] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.695340][ T4310] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.748824][ T4310] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.768313][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.002840][ T4310] usb 4-1: usb_control_msg returned -32 [ 347.020230][ T4310] usbtmc 4-1:16.0: can't read capabilities [ 347.121365][ T4309] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 347.316402][ T4309] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 347.335669][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.362649][ T4309] usb 5-1: config 0 descriptor?? [ 347.370979][ T4309] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 347.857784][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1312'. [ 347.897909][ T8814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.731271][ T4310] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 348.741713][ T4311] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 348.761327][ T33] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 348.881792][ T4255] usb 4-1: USB disconnect, device number 79 [ 348.911241][ T4310] usb 2-1: Using ep0 maxpacket: 8 [ 348.923574][ T4310] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 348.934089][ T4310] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 348.942647][ T4311] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 348.945772][ T4310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 348.961639][ T4311] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 348.963820][ T33] usb 3-1: Using ep0 maxpacket: 32 [ 348.983608][ T4311] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 348.985778][ T4310] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 348.994075][ T4311] usb 6-1: config 150 has no interface number 0 [ 349.011077][ T4311] usb 6-1: config 150 interface 204 has no altsetting 0 [ 349.013716][ T4310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 349.021590][ T4311] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 349.037239][ T4310] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.037282][ T4310] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.037331][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.063138][ T33] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.072932][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.082636][ T33] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.090188][ T4311] usb 6-1: Product: syz [ 349.100127][ T33] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 349.101244][ T4311] usb 6-1: Manufacturer: syz [ 349.115007][ T4311] usb 6-1: SerialNumber: syz [ 349.120434][ T33] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 349.129557][ T33] usb 3-1: Product: syz [ 349.139364][ T33] usb 3-1: Manufacturer: syz [ 349.150023][ T33] hub 3-1:4.0: USB hub found [ 349.258623][ T4310] usb 2-1: usb_control_msg returned -32 [ 349.265107][ T4310] usbtmc 2-1:16.0: can't read capabilities [ 349.353107][ T33] hub 3-1:4.0: 2 ports detected [ 349.362883][ T4311] usb 6-1: USB disconnect, device number 74 [ 349.418024][ T4310] usb 5-1: USB disconnect, device number 73 [ 349.949861][ T8851] fuse: Bad value for 'fd' [ 350.224067][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1326'. [ 350.587290][ T33] hub 3-1:4.0: activate --> -90 [ 350.996329][ T4311] usb 3-1: USB disconnect, device number 73 [ 351.381395][ T4310] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 351.463522][ T4309] usb 2-1: USB disconnect, device number 77 [ 351.563159][ T4310] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 351.579748][ T4310] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 351.617278][ T4310] usb 6-1: config 220 has no interface number 2 [ 351.628605][ T4310] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 351.681491][ T4310] usb 6-1: config 220 interface 0 has no altsetting 0 [ 351.688308][ T4310] usb 6-1: config 220 interface 76 has no altsetting 0 [ 351.731224][ T4310] usb 6-1: config 220 interface 1 has no altsetting 0 [ 351.740924][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 351.790534][ T4310] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 351.865549][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.878534][ T4310] usb 6-1: Product: syz [ 351.890920][ T4310] usb 6-1: Manufacturer: syz [ 351.902429][ T4310] usb 6-1: SerialNumber: syz [ 352.140979][ T4310] usb 6-1: selecting invalid altsetting 0 [ 352.156920][ T4310] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 352.217655][ T4310] usb 6-1: No valid video chain found. [ 352.277871][ T4310] usb 6-1: selecting invalid altsetting 0 [ 352.294927][ T4310] usbtest: probe of 6-1:220.1 failed with error -22 [ 352.318436][ T4310] usb 6-1: USB disconnect, device number 75 [ 352.701441][ T4255] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 352.761339][ T33] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 352.891251][ T4255] usb 4-1: Using ep0 maxpacket: 16 [ 352.898080][ T4255] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 352.924488][ T4255] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 352.944696][ T4255] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 352.963074][ T4255] usb 4-1: config 0 has no interface number 1 [ 352.973687][ T33] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 352.986429][ T4255] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 352.997861][ T4310] usb 6-1: new low-speed USB device number 76 using dummy_hcd [ 353.005475][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.015999][ T4255] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 353.033498][ T33] usb 2-1: config 0 descriptor?? [ 353.042785][ T33] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 353.049094][ T4255] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 353.061316][ T4255] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.078172][ T4255] usb 4-1: config 0 interface 125 has no altsetting 0 [ 353.096400][ T4255] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 353.105775][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.114321][ T4255] usb 4-1: Product: syz [ 353.118769][ T4255] usb 4-1: Manufacturer: syz [ 353.124108][ T4255] usb 4-1: SerialNumber: syz [ 353.140138][ T4255] usb 4-1: config 0 descriptor?? [ 353.194953][ T4310] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 353.206382][ T4310] usb 6-1: config 0 has no interface number 1 [ 353.213362][ T4310] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 353.222944][ T4310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.246290][ T4310] usb 6-1: config 0 descriptor?? [ 353.380010][ T4255] usb 4-1: USB disconnect, device number 80 [ 353.482504][ T4310] usb 6-1: Could not set interface, error -71 [ 353.515335][ T4310] usb 6-1: USB disconnect, device number 76 [ 354.610004][ T8935] fuse: Unknown parameter 'fd0x000000000000000d' [ 354.732061][ T4310] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 354.921336][ T4310] usb 5-1: Using ep0 maxpacket: 16 [ 354.928007][ T4310] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.966462][ T4310] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.989806][ T4310] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 355.001414][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.019207][ T4310] usb 5-1: config 0 descriptor?? [ 355.060787][ T4309] usb 2-1: USB disconnect, device number 78 [ 355.146507][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 355.166980][ T8936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.357918][ T8940] syz.5.1347 (8940): drop_caches: 2 [ 355.389357][ T8940] syz.5.1347 (8940): drop_caches: 2 [ 355.435292][ T4310] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 355.455501][ T4310] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 355.479030][ T4310] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 355.517086][ T4310] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 355.656190][ C1] usb 5-1: input irq status -75 received [ 355.860941][ T4310] usb 5-1: USB disconnect, device number 74 [ 356.077592][ T8944] fido_id[8944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 356.180495][ T8954] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 8954 comm: syz.1.1349) [ 356.203129][ T26] kauditd_printk_skb: 554 callbacks suppressed [ 356.203142][ T26] audit: type=1800 audit(1777311817.289:1247): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1349" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51736 res=0 errno=0 [ 356.719696][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1354'. [ 356.874035][ T8972] CIFS mount error: No usable UNC path provided in device string! [ 356.874035][ T8972] [ 356.901651][ T8972] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 357.203158][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 357.237285][ T8967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.501280][ T4311] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 358.691340][ T4311] usb 2-1: Using ep0 maxpacket: 32 [ 358.698116][ T4311] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 358.771445][ T33] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 358.790631][ T4311] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.856337][ T4311] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 358.891240][ T4311] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 358.899802][ T4311] usb 2-1: Product: syz [ 358.920054][ T4311] usb 2-1: Manufacturer: syz [ 358.945425][ T4311] hub 2-1:4.0: bad descriptor, ignoring hub [ 358.952026][ T9012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1366'. [ 358.971259][ T33] usb 4-1: Using ep0 maxpacket: 16 [ 358.978035][ T33] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.978681][ T4311] hub: probe of 2-1:4.0 failed with error -5 [ 359.002770][ T4311] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 359.017791][ T33] usb 4-1: config 0 interface 0 has no altsetting 0 [ 359.034838][ T33] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 359.052785][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.083398][ T9018] device syzkaller0 entered promiscuous mode [ 359.100283][ T33] usb 4-1: config 0 descriptor?? [ 359.502159][ T4255] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 359.520716][ T33] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 359.731352][ T4255] usb 6-1: Using ep0 maxpacket: 32 [ 359.739469][ T4255] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 359.759993][ T4255] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 359.768391][ T4255] usb 6-1: config 0 has no interface number 0 [ 359.774976][ T4255] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.786727][ T4255] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 359.802177][ T4255] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 359.819505][ T4255] usb 6-1: config 0 has no interface number 0 [ 359.827377][ T4255] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.848981][ T4255] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 359.868975][ T4255] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 359.878562][ T4255] usb 6-1: config 0 has no interface number 0 [ 359.893083][ T4255] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.909396][ T4255] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 359.925509][ T4483] usb 4-1: USB disconnect, device number 81 [ 359.930973][ T4255] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 359.939757][ T4255] usb 6-1: config 0 has no interface number 0 [ 359.951598][ T4255] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.971305][ T4255] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 359.991123][ T4255] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 360.014528][ T4255] usb 6-1: config 0 has no interface number 0 [ 360.034283][ T4255] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 360.054120][ T4255] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 360.120605][ T4255] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 360.130648][ T4255] usb 6-1: config 0 has no interface number 0 [ 360.140797][ T4255] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 360.157352][ T4255] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 360.199010][ T4255] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 360.232215][ T4255] usb 6-1: config 0 has no interface number 0 [ 360.254665][ T4255] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 360.275506][ T4255] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 360.288842][ T4255] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 360.313015][ T4255] usb 6-1: config 0 has no interface number 0 [ 360.327460][ T4255] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 360.343880][ T4255] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 360.370075][ T4255] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 360.386663][ T4255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.395266][ T4255] usb 6-1: Product: syz [ 360.399745][ T4255] usb 6-1: Manufacturer: syz [ 360.408100][ T4255] usb 6-1: SerialNumber: syz [ 360.416003][ T4255] usb 6-1: config 0 descriptor?? [ 360.429551][ T4255] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 360.690428][ T9024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.700458][ T9024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.711395][ T4483] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 360.717720][ T4255] etas_es58x 6-1:0.2: es58x_get_product_info: Could not read the product info: -EPROTO [ 360.730999][ T4255] etas_es58x: probe of 6-1:0.2 failed with error -71 [ 360.769283][ T4255] usb 6-1: USB disconnect, device number 77 [ 360.876048][ T22] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 360.926529][ T4483] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 360.938683][ T4483] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.953745][ T4483] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.964745][ T4483] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.991122][ T4483] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.003461][ T4483] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.014673][ T4483] usb 5-1: Product: syz [ 361.027591][ T4483] usb 5-1: Manufacturer: syz [ 361.056549][ T4483] cdc_wdm 5-1:1.0: skipping garbage [ 361.061867][ T4483] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 361.091329][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 361.101012][ T22] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 361.129918][ T22] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 361.161284][ T22] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 361.188790][ T22] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 361.209746][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 361.260826][ T22] usb 3-1: config 0 has no interface number 0 [ 361.277414][ T22] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 361.316813][ T22] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 361.371545][ T22] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 361.409159][ T22] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.440596][ T9034] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 361.448828][ T22] usb 3-1: config 0 interface 125 has no altsetting 2 [ 361.449488][ T4483] usb 2-1: USB disconnect, device number 79 [ 361.484974][ T22] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 361.487175][ T9034] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 361.502763][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.578530][ T22] usb 3-1: Product: syz [ 361.596990][ T22] usb 3-1: Manufacturer: syz [ 361.627824][ T22] usb 3-1: SerialNumber: syz [ 361.669208][ T22] usb 3-1: config 0 descriptor?? [ 361.719337][ T22] usb 3-1: selecting invalid altsetting 2 [ 361.797063][ T9064] device syzkaller0 entered promiscuous mode [ 361.938771][ T22] usb 3-1: USB disconnect, device number 74 [ 361.992207][ T4483] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 362.181817][ T4483] usb 2-1: Using ep0 maxpacket: 8 [ 362.192469][ T4483] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 362.200764][ T4483] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 362.217727][ T4483] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 362.228364][ T4483] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 362.245713][ T4483] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 362.263689][ T4483] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.289543][ T4483] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.305824][ T4483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.538196][ T4483] usb 2-1: usb_control_msg returned -71 [ 362.544131][ T4483] usbtmc 2-1:16.0: can't read capabilities [ 362.677184][ T4483] usb 2-1: USB disconnect, device number 80 [ 362.926409][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 363.151264][ T4311] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 363.239813][ T4483] usb 5-1: USB disconnect, device number 75 [ 363.323572][ T9089] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 363.341271][ T4311] usb 6-1: Using ep0 maxpacket: 16 [ 363.348836][ T4311] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.378874][ T4311] usb 6-1: config 0 interface 0 has no altsetting 0 [ 363.386966][ T4311] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 363.405433][ T4311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.426535][ T4311] usb 6-1: config 0 descriptor?? [ 363.844253][ T4311] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 364.182568][ T33] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 364.244937][ T4255] usb 6-1: USB disconnect, device number 78 [ 364.345414][ T9104] device syzkaller0 entered promiscuous mode [ 364.391302][ T33] usb 4-1: Using ep0 maxpacket: 32 [ 364.398637][ T33] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 364.418556][ T33] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.444619][ T33] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 364.455394][ T33] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 364.464433][ T33] usb 4-1: Product: syz [ 364.468635][ T33] usb 4-1: Manufacturer: syz [ 364.496771][ T33] hub 4-1:4.0: bad descriptor, ignoring hub [ 364.504502][ T33] hub: probe of 4-1:4.0 failed with error -5 [ 364.516689][ T33] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 364.861973][ T9110] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1395'. [ 364.896375][ T9110] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 365.291359][ T4483] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 365.301419][ T33] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 365.321248][ T4311] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 365.472695][ T4483] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.487395][ T4483] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 365.497418][ T4483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.501227][ T33] usb 6-1: Using ep0 maxpacket: 8 [ 365.513872][ T4311] usb 3-1: Using ep0 maxpacket: 16 [ 365.520772][ T4311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.537547][ T4311] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.538768][ T33] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 365.548073][ T4483] usb 5-1: config 0 descriptor?? [ 365.564959][ T4311] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 365.566374][ T4483] pwc: Askey VC010 type 2 USB webcam detected. [ 365.584860][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.600209][ T4311] usb 3-1: config 0 descriptor?? [ 365.619127][ T33] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 365.638308][ T33] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 365.656017][ T33] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 365.674932][ T33] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 365.692383][ T33] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.713553][ T33] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 365.730629][ T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.960103][ T33] usb 6-1: usb_control_msg returned -71 [ 365.969909][ T33] usbtmc 6-1:16.0: can't read capabilities [ 365.970068][ T4483] pwc: recv_control_msg error -32 req 02 val 2b00 [ 365.985784][ T4483] pwc: recv_control_msg error -32 req 02 val 2700 [ 365.995528][ T4483] pwc: recv_control_msg error -32 req 02 val 2c00 [ 365.998765][ T33] usb 6-1: USB disconnect, device number 79 [ 366.007527][ T4483] pwc: recv_control_msg error -32 req 04 val 1000 [ 366.015763][ T4483] pwc: recv_control_msg error -32 req 04 val 1300 [ 366.027813][ T4483] pwc: recv_control_msg error -32 req 04 val 1400 [ 366.036463][ T4483] pwc: recv_control_msg error -32 req 02 val 2000 [ 366.051552][ T4483] pwc: recv_control_msg error -32 req 02 val 2100 [ 366.068547][ T4483] pwc: recv_control_msg error -32 req 04 val 1500 [ 366.085247][ T4483] pwc: recv_control_msg error -32 req 02 val 2500 [ 366.096810][ T4483] pwc: recv_control_msg error -32 req 02 val 2400 [ 366.314397][ T4483] pwc: recv_control_msg error -71 req 02 val 2900 [ 366.323877][ T4483] pwc: recv_control_msg error -71 req 02 val 2800 [ 366.330780][ T4483] pwc: recv_control_msg error -71 req 04 val 1100 [ 366.337891][ T4483] pwc: recv_control_msg error -71 req 04 val 1200 [ 366.351449][ T4483] pwc: Registered as video103. [ 366.365442][ T4483] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 366.390744][ T4483] usb 5-1: USB disconnect, device number 76 [ 366.588837][ T9138] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 367.122276][ T4255] usb 4-1: USB disconnect, device number 82 [ 367.231746][ T33] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 367.421463][ T33] usb 6-1: Using ep0 maxpacket: 32 [ 367.434208][ T33] usb 6-1: config 8 has an invalid interface number: 201 but max is 0 [ 367.447711][ T33] usb 6-1: config 8 has no interface number 0 [ 367.454601][ T33] usb 6-1: config 8 interface 201 has no altsetting 0 [ 367.484873][ T33] usb 6-1: New USB device found, idVendor=15f4, idProduct=0131, bcdDevice=46.ec [ 367.494696][ T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.502970][ T4255] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 367.510751][ T33] usb 6-1: Product: syz [ 367.516259][ T33] usb 6-1: Manufacturer: syz [ 367.521101][ T33] usb 6-1: SerialNumber: syz [ 367.731266][ T4255] usb 4-1: Using ep0 maxpacket: 32 [ 367.746703][ T33] usb 6-1: USB disconnect, device number 80 [ 367.763421][ T4255] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 367.788873][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.801326][ T4255] usb 4-1: config 0 descriptor?? [ 367.815604][ T4255] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 368.136993][ T33] usb 3-1: USB disconnect, device number 75 [ 368.254137][ T9179] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1413'. [ 369.014899][ T9204] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 369.019713][ T4255] gspca_vc032x: reg_w err -71 [ 369.040693][ T4255] gspca_vc032x: I2c Bus Busy Wait f1 [ 369.055705][ T9204] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 369.091978][ T4255] gspca_vc032x: I2c Bus Busy Wait f1 [ 369.097306][ T4255] gspca_vc032x: I2c Bus Busy Wait f1 [ 369.106250][ T4255] gspca_vc032x: I2c Bus Busy Wait f1 [ 369.115638][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1423'. [ 369.118479][ T4255] gspca_vc032x: I2c Bus Busy Wait f1 [ 369.136701][ T9210] ------------[ cut here ]------------ [ 369.142259][ T9210] WARNING: CPU: 1 PID: 9210 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 369.152609][ T9210] Modules linked in: [ 369.156543][ T9210] CPU: 1 PID: 9210 Comm: syz.2.1421 Not tainted syzkaller #0 [ 369.164001][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.174162][ T9210] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 369.180615][ T9210] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 369.200295][ T9210] RSP: 0018:ffffc90005c6fc48 EFLAGS: 00010287 [ 369.206431][ T9210] RAX: ffffffff81100f7c RBX: ffff8880556fcf80 RCX: 0000000000080000 [ 369.214472][ T9210] RDX: ffffc9001056d000 RSI: 0000000000000ca5 RDI: 0000000000000ca6 [ 369.221637][ T4483] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 369.222478][ T9210] RBP: ffff888024280000 R08: dffffc0000000000 R09: 1ffffffff215f268 [ 369.238036][ T9210] R10: dffffc0000000000 R11: fffffbfff215f269 R12: ffff8880556fd274 [ 369.246035][ T9210] R13: ffff8880556fd058 R14: dffffc0000000000 R15: 0000000000000000 [ 369.254038][ T9210] FS: 00007f2aafe096c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 369.262977][ T9210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.269549][ T9210] CR2: 00007f2aaefea4c0 CR3: 000000005ec69000 CR4: 00000000003526e0 [ 369.277531][ T9210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.285513][ T9210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 369.293495][ T9210] Call Trace: [ 369.296779][ T9210] [ 369.299700][ T9210] ? mutex_lock_nested+0x10/0x10 [ 369.304655][ T9210] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 369.310368][ T9210] kvm_vcpu_ioctl+0x8f7/0xc10 [ 369.315056][ T9210] ? xa_release+0x50/0x50 [ 369.319378][ T9210] ? __fget_files+0x28/0x4b0 [ 369.323979][ T9210] ? __fget_files+0x28/0x4b0 [ 369.328565][ T9210] ? bpf_lsm_file_ioctl+0x5/0x10 [ 369.333514][ T9210] ? security_file_ioctl+0x7c/0xa0 [ 369.338616][ T9210] ? xa_release+0x50/0x50 [ 369.342948][ T9210] __se_sys_ioctl+0xfa/0x170 [ 369.347532][ T9210] do_syscall_64+0x4c/0xa0 [ 369.351960][ T9210] ? clear_bhb_loop+0x60/0xb0 [ 369.356625][ T9210] ? clear_bhb_loop+0x60/0xb0 [ 369.361308][ T9210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.367191][ T9210] RIP: 0033:0x7f2aaef9cdd9 [ 369.371622][ T9210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.391241][ T9210] RSP: 002b:00007f2aafe09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.399658][ T9210] RAX: ffffffffffffffda RBX: 00007f2aaf216090 RCX: 00007f2aaef9cdd9 [ 369.407646][ T9210] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 369.415619][ T9210] RBP: 00007f2aaf032d69 R08: 0000000000000000 R09: 0000000000000000 [ 369.423596][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.431571][ T9210] R13: 00007f2aaf216128 R14: 00007f2aaf216090 R15: 00007fff66ee09a8 [ 369.439550][ T9210] [ 369.442586][ T9210] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 369.449844][ T9210] CPU: 1 PID: 9210 Comm: syz.2.1421 Not tainted syzkaller #0 [ 369.457202][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.467243][ T9210] Call Trace: [ 369.470512][ T9210] [ 369.473429][ T9210] dump_stack_lvl+0x188/0x24e [ 369.478097][ T9210] ? memcpy+0x3c/0x60 [ 369.482064][ T9210] ? show_regs_print_info+0x12/0x12 [ 369.487263][ T9210] ? load_image+0x400/0x400 [ 369.491771][ T9210] panic+0x2e5/0x730 [ 369.495655][ T9210] ? bpf_jit_dump+0xd0/0xd0 [ 369.500153][ T9210] __warn+0x2f8/0x4f0 [ 369.504122][ T9210] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 369.509915][ T9210] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 369.515713][ T9210] report_bug+0x2ba/0x4f0 [ 369.520034][ T9210] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 369.525827][ T9210] handle_bug+0x3a/0x70 [ 369.530007][ T9210] exc_invalid_op+0x16/0x40 [ 369.534508][ T9210] asm_exc_invalid_op+0x16/0x20 [ 369.539354][ T9210] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 369.545761][ T9210] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 369.565351][ T9210] RSP: 0018:ffffc90005c6fc48 EFLAGS: 00010287 [ 369.571401][ T9210] RAX: ffffffff81100f7c RBX: ffff8880556fcf80 RCX: 0000000000080000 [ 369.579351][ T9210] RDX: ffffc9001056d000 RSI: 0000000000000ca5 RDI: 0000000000000ca6 [ 369.587309][ T9210] RBP: ffff888024280000 R08: dffffc0000000000 R09: 1ffffffff215f268 [ 369.595263][ T9210] R10: dffffc0000000000 R11: fffffbfff215f269 R12: ffff8880556fd274 [ 369.603215][ T9210] R13: ffff8880556fd058 R14: dffffc0000000000 R15: 0000000000000000 [ 369.611183][ T9210] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 369.616983][ T9210] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 369.622773][ T9210] ? mutex_lock_nested+0x10/0x10 [ 369.627698][ T9210] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 369.633403][ T9210] kvm_vcpu_ioctl+0x8f7/0xc10 [ 369.638078][ T9210] ? xa_release+0x50/0x50 [ 369.642392][ T9210] ? __fget_files+0x28/0x4b0 [ 369.646967][ T9210] ? __fget_files+0x28/0x4b0 [ 369.651555][ T9210] ? bpf_lsm_file_ioctl+0x5/0x10 [ 369.656479][ T9210] ? security_file_ioctl+0x7c/0xa0 [ 369.661576][ T9210] ? xa_release+0x50/0x50 [ 369.665887][ T9210] __se_sys_ioctl+0xfa/0x170 [ 369.670463][ T9210] do_syscall_64+0x4c/0xa0 [ 369.674864][ T9210] ? clear_bhb_loop+0x60/0xb0 [ 369.679522][ T9210] ? clear_bhb_loop+0x60/0xb0 [ 369.684183][ T9210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.690058][ T9210] RIP: 0033:0x7f2aaef9cdd9 [ 369.694454][ T9210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.714041][ T9210] RSP: 002b:00007f2aafe09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.722437][ T9210] RAX: ffffffffffffffda RBX: 00007f2aaf216090 RCX: 00007f2aaef9cdd9 [ 369.730387][ T9210] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 369.738336][ T9210] RBP: 00007f2aaf032d69 R08: 0000000000000000 R09: 0000000000000000 [ 369.746314][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.754271][ T9210] R13: 00007f2aaf216128 R14: 00007f2aaf216090 R15: 00007fff66ee09a8 [ 369.762232][ T9210] [ 369.765588][ T9210] Kernel Offset: disabled [ 369.769952][ T9210] Rebooting in 86400 seconds..