last executing test programs: 19m0.910402737s ago: executing program 5 (id=88): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 18m59.009053663s ago: executing program 5 (id=91): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) 18m54.378208597s ago: executing program 5 (id=104): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 18m51.782308339s ago: executing program 5 (id=110): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a", 0x81) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 18m51.050884386s ago: executing program 5 (id=113): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x158) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x3c0, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2f0, 0xffffffff, 0xffffffff, 0x2f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffffff], [], 'veth1_vlan\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x100000000}, {0xff}], 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @loopback, [0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@iprange={{0x68}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x19}, @ipv4=@empty, @ipv4=@private=0xa010100, @ipv6=@private1, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4c03}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x420) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x41, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x8000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x7, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) 18m49.634292881s ago: executing program 5 (id=116): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) 18m34.511166117s ago: executing program 32 (id=116): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) 10m57.296412403s ago: executing program 0 (id=1244): syz_clone(0x1000, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0) 10m56.776066975s ago: executing program 0 (id=1249): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 10m55.65220803s ago: executing program 0 (id=1254): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xff, 0x7ff, 0xfc00, 0x10, 0x10}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 10m54.102935085s ago: executing program 0 (id=1268): bind$x25(0xffffffffffffffff, &(0x7f0000000200), 0x12) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8"], 0x53) socket$nl_audit(0x10, 0x3, 0x9) 10m52.670828996s ago: executing program 0 (id=1273): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x1, @rand_addr=0x64010101, @multicast2}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 10m52.235651047s ago: executing program 0 (id=1278): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffbffffffffff, 0x180f81) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x2, 0x1}, 0x8, 0x0, 0x1000000, 0x0, 0x2, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 10m36.580961617s ago: executing program 33 (id=1278): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffbffffffffff, 0x180f81) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x2, 0x1}, 0x8, 0x0, 0x1000000, 0x0, 0x2, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9m57.755178356s ago: executing program 1 (id=1549): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902"], 0x0) socket$packet(0x11, 0x3, 0x300) r3 = dup(r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 9m55.803670573s ago: executing program 1 (id=1559): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', 0x0, 0x0, 0x0) 9m55.512992716s ago: executing program 1 (id=1560): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 9m55.379574031s ago: executing program 1 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 9m55.219060076s ago: executing program 1 (id=1564): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$P9_RLERRORu(r1, 0x0, 0x0) 9m54.168224984s ago: executing program 1 (id=1569): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020) 9m38.936903142s ago: executing program 34 (id=1569): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020) 1m59.345921283s ago: executing program 2 (id=3360): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x8001, 0x101, 0x3}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ftruncate(0xffffffffffffffff, 0x5) getresgid(&(0x7f0000000140), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) 23.097805299s ago: executing program 4 (id=3592): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f194483ef0db04df"], 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08ffc62e6dbdf25"], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)="dd2ac7a476835c711b45a013dadf5c6012048704b0c5563c154e0b4c83c6749dcf8faa895b1308fc7d74e51d41aa6b00d17c1a9361de6b4799bb5a1ee925045fa0f2fa51077e192eb20440434627", 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='\n', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 21.741511133s ago: executing program 4 (id=3596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{r3}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) 15.775628551s ago: executing program 4 (id=3609): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x30) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="330000f6000000006344b610f1cd92ec3a485f5578efb2ceb0b6b96a66fad112334822436e2fde91a5d2c0b6e6184aea9b85c33e058929802d717e5acecf75c31cb52fbcb626e6765dc113be2c"], 0x8) sendto$inet6(r3, &(0x7f0000000240), 0x0, 0x51, 0x0, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440), &(0x7f0000000080), &(0x7f0000000000)) ioctl$DVB_DEMUX_DMX_START(r7, 0x6f29) listen(r3, 0x100101) accept4(r3, 0x0, 0x0, 0x80800) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) 15.504261543s ago: executing program 6 (id=3610): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='reiserfs\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074"], 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x84000000, 0x12d5c, 0x12d5c}}, 0x44) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 12.88557508s ago: executing program 4 (id=3611): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000240)={0x51, 0x9, 0x6}) 12.415735119s ago: executing program 4 (id=3612): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x254, 0x1ac, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2fc, 0x20a, 0x278, 0x2fc, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'syz_tun\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe, 0x2, 0xb0}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [0x0, 0xff], 'hsr0\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2b0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x13, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2}, 0x94) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='|ALswosd\x00', &(0x7f0000000100)='guest\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0x164, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x150, 0x1, [@m_bpf={0x104, 0x16, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffff8, 0x1, 0x6, 0x1, 0x40}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x8b, 0xfc, 0x6, 0x5}, {0xffff, 0x1, 0x6, 0x2}]}]}, {0xa5, 0x6, "02c98fbad0928eafcdbc096b4fc40ce146aa0359c5b5650808d1422dba2929d2ee13762cb7e29b1ce99bb20d9860140ca53b3f2be19281613cb030bfac0cc38565e8619ed72f98d2662e6a32f922c351244e0a4dc00271f3d9b30fd9d4430d006cc5303f4601df2f8420e320ac51b67ffee133b76cfaba7edf9b7b163a64783c1b868725a94573d78160ac0194706faa42d158267241fb28647c841f866d25b73a"}, {0xc}, {0xc}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}, 0xfffe}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x2) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)) read$dsp(r5, &(0x7f0000000180)=""/93, 0x5d) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x7a, 0x50, 0x6, 0x5e}]}, 0x14) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48844) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 12.304957753s ago: executing program 3 (id=3613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.100637656s ago: executing program 7 (id=3614): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea443000905", @ANYRES64], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840) 11.458404342s ago: executing program 3 (id=3615): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11.217020737s ago: executing program 6 (id=3616): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x8001, 0x101, 0x3}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ftruncate(0xffffffffffffffff, 0x5) getresgid(&(0x7f0000000140), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 11.013358052s ago: executing program 8 (id=3617): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) 10.476072592s ago: executing program 4 (id=3618): r0 = openat$sndseq(0xffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) 10.463559279s ago: executing program 2 (id=3364): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 10.356770296s ago: executing program 8 (id=3619): openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r0}, 0x38) listen(0xffffffffffffffff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0xfffffffffffffed0, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x15, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f00000020c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000680)={0x78, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x20, 0x1, 0x7, 0x0, {0x5, 0x9, 0x0, 0x1}, 0x1, 0x9075, 0xf0}}]}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2b, 0x7f, [@mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x1, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x7, 0x7}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x51}, 0x14000) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 9.441356612s ago: executing program 2 (id=3621): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.253349744s ago: executing program 6 (id=3622): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) close(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r1, 0x0, 0xfffffeb0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='1', 0x1) 9.246456495s ago: executing program 7 (id=3623): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0xc8, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x80, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8010}, 0x8000840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 8.776245965s ago: executing program 2 (id=3624): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r1 = dup3(r0, r0, 0x0) file_getattr(r1, &(0x7f0000000080)='./proc/sys/net/sctp/auth_enable\x00', &(0x7f0000000240), 0x18, 0x1000) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0) write$FUSE_DIRENT(r2, &(0x7f00000024c0)={0x10}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)="12d6", 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='1\x00', 0x2) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_GET_FRONTEND(r6, 0x80246f4d, &(0x7f0000000100)={0x0, 0x0, @vsb}) ioctl$OTPLOCK(r6, 0x800c4d10, &(0x7f0000000040)={0x7, 0x3, 0x65e}) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1ff, 0xdd35, 0x80, 0x1df, 0x81}) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb}, {0x0, 0x2}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44}, 0x20) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000280)={0xd, 0x2, 0x3, 0x5, 0x4}) 8.610390764s ago: executing program 8 (id=3625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r3 = eventfd2(0x0, 0x0) r4 = dup2(r3, r2) write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x1, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 8.127931762s ago: executing program 7 (id=3626): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x420, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) r4 = socket$inet_tcp(0x2, 0x1, 0x0) set_robust_list(&(0x7f00000000c0), 0xc) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r6, &(0x7f00000001c0)=[{0x0}], 0x1) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r4, 0x1, 0x53, &(0x7f0000000000)=0x20, 0x4) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000140)=0x2000003) ioctl$USBDEVFS_RESET(r3, 0x5514) 7.912312269s ago: executing program 6 (id=3627): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000200)='smaps_rollup\x00') syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.910894844s ago: executing program 8 (id=3628): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000940)={0x4, 0xfffffffe, 0xe, 0x6, 0x100, &(0x7f0000000440)="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"}) 7.846651254s ago: executing program 3 (id=3629): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="200012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 7.673701234s ago: executing program 2 (id=3630): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20004450) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, r0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f908, 0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000040)={0x5, 0xcf1d, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 4.813627055s ago: executing program 7 (id=3631): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) 4.812153486s ago: executing program 8 (id=3632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 4.179725052s ago: executing program 3 (id=3633): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002d80)={'ip_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8008640b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 3.939932526s ago: executing program 6 (id=3634): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x8001, 0x101, 0x3}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ftruncate(0xffffffffffffffff, 0x5) getresgid(&(0x7f0000000140), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.648277036s ago: executing program 8 (id=3635): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x8001, 0x101, 0x3}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ftruncate(0xffffffffffffffff, 0x5) getresgid(&(0x7f0000000140), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) 1.497883416s ago: executing program 3 (id=3636): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000f9ffff00ffffffff000000efffffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000"]}, 0x108) 1.06232479s ago: executing program 3 (id=3637): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000300)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/\xe0\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\v\x00\x00\x00\x00\x00\x00\x00\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r1, 0x0, 0xfffffeb0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='1', 0x1) kernel console output (not intermixed with test programs): 8x5 converter now disconnected from ttyUSB0 [ 982.575990][ T10] spcp8x5 9-1:1.0: device disconnected [ 982.776412][T11246] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 982.986702][T11246] usb 5-1: too many configurations: 99, using maximum allowed: 8 [ 983.072305][T11246] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 983.099313][T16110] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2837'. [ 983.138803][T11246] usb 5-1: can't read configurations, error -61 [ 983.187349][T16110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2837'. [ 983.353847][T16110] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2837'. [ 983.354512][T11246] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 983.393538][T16115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.646647][T11246] usb 5-1: too many configurations: 99, using maximum allowed: 8 [ 983.650841][T11246] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 983.650881][T11246] usb 5-1: can't read configurations, error -61 [ 983.651308][T11246] usb usb5-port1: attempt power cycle [ 984.327416][T11246] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 984.423346][T11246] usb 5-1: too many configurations: 99, using maximum allowed: 8 [ 984.759122][T11246] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 984.759175][T11246] usb 5-1: can't read configurations, error -61 [ 984.935651][T11246] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 984.958558][T11246] usb 5-1: too many configurations: 99, using maximum allowed: 8 [ 984.964475][T11246] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 984.964514][T11246] usb 5-1: can't read configurations, error -61 [ 984.969620][T11246] usb usb5-port1: unable to enumerate USB device [ 986.849736][T16130] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2843'. [ 987.690557][T11246] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 987.844653][T11246] usb 5-1: Using ep0 maxpacket: 8 [ 987.879745][T11246] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 987.940859][T11246] usb 5-1: config 0 has no interface number 0 [ 987.991837][T11246] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 988.079194][T11246] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 988.128406][T16152] UDC core: g1: couldn't find an available UDC or it's busy [ 988.166351][T11246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.313270][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2853'. [ 988.361741][T11246] usb 5-1: config 0 descriptor?? [ 988.467722][T11246] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 988.584957][ T10] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 988.798525][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 988.850270][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 988.892851][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 988.933884][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.037261][ T10] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 989.133908][ T10] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 989.444688][T16158] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 989.483116][T16175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.492985][T16158] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 989.493356][T16158] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 989.842302][T16157] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 989.876296][ T10] usb 7-1: USB disconnect, device number 42 [ 991.921934][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 991.922610][ T10] spcp8x5 7-1:1.0: device disconnected [ 992.033745][T16179] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 992.051062][T16179] dummy0: left promiscuous mode [ 992.057322][T16179] netlink: 'syz.3.2861': attribute type 10 has an invalid length. [ 992.057354][T16179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2861'. [ 992.060392][ T9] usb 5-1: USB disconnect, device number 53 [ 992.068061][T16179] dummy0: entered promiscuous mode [ 992.350956][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 996.134680][T16201] bridge1: entered promiscuous mode [ 996.180199][T16210] UDC core: g1: couldn't find an available UDC or it's busy [ 996.272785][T16201] bridge1: entered allmulticast mode [ 996.704881][ T10] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 996.938282][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 997.032400][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 997.172728][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 997.244869][ T9] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 997.259686][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.341239][ T10] usb 8-1: Product: syz [ 997.371977][T16223] tc_dump_action: action bad kind [ 997.377831][ T10] usb 8-1: Manufacturer: syz [ 997.417957][ T10] usb 8-1: SerialNumber: syz [ 997.468413][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 997.476312][ T10] usb 8-1: config 0 descriptor?? [ 997.510637][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 997.569291][ T9] usb 9-1: config 0 has no interface number 0 [ 997.619052][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.720054][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 997.788399][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.871551][ T9] usb 9-1: config 0 descriptor?? [ 997.961955][ T9] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 998.366471][T16231] dummy0: left promiscuous mode [ 998.453085][T16232] netlink: 'syz.4.2879': attribute type 10 has an invalid length. [ 998.636765][T16232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2879'. [ 998.794692][ T5770] usb 9-1: USB disconnect, device number 33 [ 998.806052][T16232] dummy0: entered promiscuous mode [ 999.733139][ T5770] usb 8-1: USB disconnect, device number 29 [ 1001.075324][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1001.148480][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2885'. [ 1001.259534][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2885'. [ 1001.280393][ T10] usb 5-1: device descriptor read/64, error -71 [ 1001.575685][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1001.784692][ T10] usb 5-1: device descriptor read/64, error -71 [ 1001.952850][ T10] usb usb5-port1: attempt power cycle [ 1002.519344][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1004.538865][ T10] usb 5-1: device descriptor read/8, error -71 [ 1005.013051][T16272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2892'. [ 1005.094329][T16272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2892'. [ 1005.213527][T16272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2892'. [ 1012.044056][T16330] UDC core: g1: couldn't find an available UDC or it's busy [ 1012.266062][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1012.304962][T16316] UDC core: g1: couldn't find an available UDC or it's busy [ 1012.494582][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1012.590225][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1012.658414][ T9] usb 5-1: config 0 has no interface number 0 [ 1012.717354][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1012.812860][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1013.117292][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.290601][ T9] usb 5-1: config 0 descriptor?? [ 1013.431369][ T9] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1013.823351][ T9] usb 5-1: USB disconnect, device number 58 [ 1014.642259][T16363] netlink: 'syz.2.2912': attribute type 4 has an invalid length. [ 1014.716404][T16363] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1014.944447][T11246] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1015.154581][T11246] usb 8-1: device descriptor read/64, error -71 [ 1015.444367][T11246] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1015.646057][T11246] usb 8-1: device descriptor read/64, error -71 [ 1015.804746][T11246] usb usb8-port1: attempt power cycle [ 1016.193858][T16383] syzkaller0: entered promiscuous mode [ 1016.211818][T11246] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1016.242508][T16383] syzkaller0: entered allmulticast mode [ 1016.292300][T11246] usb 8-1: device descriptor read/8, error -71 [ 1016.565890][T11246] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1016.649492][T11246] usb 8-1: device descriptor read/8, error -71 [ 1016.795135][T11246] usb usb8-port1: unable to enumerate USB device [ 1016.907579][T11821] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1016.914827][ T5632] Bluetooth: hci4: command 0x1003 tx timeout [ 1017.369274][T16401] UDC core: g1: couldn't find an available UDC or it's busy [ 1017.618631][T11246] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1018.116701][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1018.999601][T11246] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1020.214358][T11246] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1020.288787][T11246] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1020.345535][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1020.368279][T11246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.388639][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1020.441107][ T9] usb 4-1: config 0 has no interface number 0 [ 1020.489035][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1020.603846][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1020.675297][T11246] usb 9-1: can't set config #1, error -71 [ 1020.691542][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.752014][T11246] usb 9-1: USB disconnect, device number 34 [ 1020.797020][ T9] usb 4-1: config 0 descriptor?? [ 1021.122746][ T9] usb 4-1: can't set config #0, error -71 [ 1021.340605][ T9] usb 4-1: USB disconnect, device number 45 [ 1021.874919][ T9] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1022.086827][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1022.123173][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1022.204094][ T9] usb 9-1: config 0 has no interface number 0 [ 1022.251931][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1022.369341][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1022.467531][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.589564][ T9] usb 9-1: config 0 descriptor?? [ 1022.677259][ T9] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 1022.997122][ T9] usb 9-1: USB disconnect, device number 35 [ 1024.201930][T16466] netlink: 'syz.8.2930': attribute type 1 has an invalid length. [ 1029.105296][T16466] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1029.105532][T16469] tipc: Enabling of bearer rejected, already enabled [ 1029.817679][T16491] fuse: Bad value for 'group_id' [ 1029.879525][T16491] fuse: Bad value for 'group_id' [ 1029.933206][T16497] UDC core: g1: couldn't find an available UDC or it's busy [ 1035.172019][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 1035.264046][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 1036.672957][T11246] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1037.894517][T11246] usb 3-1: Using ep0 maxpacket: 8 [ 1037.973364][T11246] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.070503][T11246] usb 3-1: config 0 has no interface number 0 [ 1038.132769][T11246] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1038.239618][T11246] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1038.337755][T11246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.352052][T16539] netlink: 'syz.3.2945': attribute type 2 has an invalid length. [ 1038.380442][ T5632] Bluetooth: hci6: ISO packet too small [ 1038.451398][T11246] usb 3-1: config 0 descriptor?? [ 1038.491233][T16539] netlink: 'syz.3.2945': attribute type 1 has an invalid length. [ 1038.529988][T11246] usb 3-1: can't set config #0, error -71 [ 1038.600802][T11246] usb 3-1: USB disconnect, device number 73 [ 1038.846223][T16550] fuse: Bad value for 'group_id' [ 1038.899676][T16550] fuse: Bad value for 'group_id' [ 1039.393661][T16561] UDC core: g1: couldn't find an available UDC or it's busy [ 1040.351320][T16584] netlink: 'syz.8.2961': attribute type 4 has an invalid length. [ 1040.422255][T16584] netlink: 'syz.8.2961': attribute type 8 has an invalid length. [ 1040.478890][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1040.493485][T16584] netlink: 212 bytes leftover after parsing attributes in process `syz.8.2961'. [ 1040.563036][T16589] netlink: 'syz.6.2963': attribute type 1 has an invalid length. [ 1040.694748][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1040.733380][T16595] netlink: 'syz.6.2963': attribute type 10 has an invalid length. [ 1040.758026][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1040.846958][T16595] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2963'. [ 1040.877416][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1040.936852][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.972885][T16589] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1041.017919][ T9] usb 5-1: Product: syz [ 1041.047223][T16594] dummy0: left promiscuous mode [ 1041.052291][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2962'. [ 1041.062427][ T9] usb 5-1: Manufacturer: syz [ 1041.082721][ T9] usb 5-1: SerialNumber: syz [ 1041.117809][ T9] usb 5-1: config 0 descriptor?? [ 1041.153919][T16594] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1041.179604][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1041.231379][T16595] dummy0: entered promiscuous mode [ 1041.244025][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1041.272241][T16595] bond3: (slave dummy0): Releasing backup interface [ 1041.784868][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1041.952315][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1042.033163][ T9] em28xx 5-1:0.0: board has no eeprom [ 1042.188292][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1042.268322][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 1042.360025][ T5752] em28xx 5-1:0.0: Binding DVB extension [ 1042.393727][ T9] usb 5-1: USB disconnect, device number 59 [ 1042.538300][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 1042.630057][T16624] UDC core: g1: couldn't find an available UDC or it's busy [ 1042.856829][ T5752] em28xx 5-1:0.0: Registering input extension [ 1042.937703][ T9] em28xx 5-1:0.0: Closing input extension [ 1043.238783][ T9] em28xx 5-1:0.0: Freeing device [ 1043.844372][ T5752] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1044.068432][ T5752] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 1044.153711][ T5752] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1044.228577][ T5752] usb 5-1: can't read configurations, error -61 [ 1044.374833][T11246] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1044.411988][ T5752] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1044.656076][T11246] usb 8-1: Using ep0 maxpacket: 8 [ 1044.691903][T11246] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1044.718723][ T5752] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 1044.746755][T11246] usb 8-1: config 0 has no interface number 0 [ 1044.770386][ T5752] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1044.808760][T11246] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.841677][ T5752] usb 5-1: can't read configurations, error -61 [ 1044.880988][ T5752] usb usb5-port1: attempt power cycle [ 1044.889187][T11246] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1044.974840][T11246] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.052035][T11246] usb 8-1: config 0 descriptor?? [ 1045.111510][T11246] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1045.339638][T11246] usb 8-1: USB disconnect, device number 34 [ 1045.374921][ T5752] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1045.448491][ T5752] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 1045.519407][ T5752] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1045.565601][ T5752] usb 5-1: can't read configurations, error -61 [ 1045.644305][ T10] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1045.714386][ T5752] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1045.769558][ T5752] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 1045.813198][ T5752] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1045.845539][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1045.876044][ T5752] usb 5-1: can't read configurations, error -61 [ 1045.894827][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1045.941392][ T5752] usb usb5-port1: unable to enumerate USB device [ 1045.988518][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1046.061391][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.128723][ T10] usb 7-1: Product: syz [ 1046.169176][ T10] usb 7-1: Manufacturer: syz [ 1046.207117][ T10] usb 7-1: SerialNumber: syz [ 1046.259148][ T10] usb 7-1: config 0 descriptor?? [ 1046.322207][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1046.399147][ T10] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1046.415886][T16698] UDC core: g1: couldn't find an available UDC or it's busy [ 1046.953018][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1047.084168][ T10] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1047.117820][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2994'. [ 1047.160898][ T10] em28xx 7-1:0.0: board has no eeprom [ 1047.192163][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2994'. [ 1047.294371][ T10] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1047.369279][ T10] em28xx 7-1:0.0: dvb set to bulk mode. [ 1047.423922][ T5752] em28xx 7-1:0.0: Binding DVB extension [ 1047.490823][ T10] usb 7-1: USB disconnect, device number 43 [ 1047.707611][ T10] em28xx 7-1:0.0: Disconnecting em28xx [ 1049.452896][ T5752] em28xx 7-1:0.0: Registering input extension [ 1049.529654][ T10] em28xx 7-1:0.0: Closing input extension [ 1049.752238][ T10] em28xx 7-1:0.0: Freeing device [ 1050.125566][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1050.232172][T16744] UDC core: g1: couldn't find an available UDC or it's busy [ 1050.356082][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1050.406567][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1050.510737][ T9] usb 4-1: config 0 has no interface number 0 [ 1050.589086][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1050.685305][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1050.777012][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.889947][ T9] usb 4-1: config 0 descriptor?? [ 1050.980300][ T9] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1051.189986][ T9] usb 4-1: USB disconnect, device number 46 [ 1051.207896][ T5752] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1051.216611][T16769] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3014'. [ 1051.350193][T16769] netlink: 'syz.8.3014': attribute type 10 has an invalid length. [ 1051.407103][T16769] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3014'. [ 1051.433011][ T5752] usb 8-1: Using ep0 maxpacket: 16 [ 1051.472295][ T5752] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1051.492490][T16769] dummy0: entered promiscuous mode [ 1051.553742][ T5752] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1051.611458][ T5752] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.660236][ T5752] usb 8-1: Product: syz [ 1051.692831][T16777] syzkaller0: entered promiscuous mode [ 1051.700431][ T5752] usb 8-1: Manufacturer: syz [ 1051.739451][ T5752] usb 8-1: SerialNumber: syz [ 1051.752225][T16777] syzkaller0: entered allmulticast mode [ 1051.803092][ T5752] usb 8-1: config 0 descriptor?? [ 1051.890325][ T5752] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1052.008816][ T5752] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1052.480080][ T5752] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1052.622846][ T5752] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1052.699029][ T5752] em28xx 8-1:0.0: board has no eeprom [ 1052.803493][T16798] UDC core: g1: couldn't find an available UDC or it's busy [ 1052.837277][ T5752] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1052.919929][ T5752] em28xx 8-1:0.0: dvb set to bulk mode. [ 1052.978097][ T9] em28xx 8-1:0.0: Binding DVB extension [ 1053.011800][T16802] 9pnet_virtio: no channels available for device syz [ 1053.039468][ T5752] usb 8-1: USB disconnect, device number 35 [ 1053.130301][ T5752] em28xx 8-1:0.0: Disconnecting em28xx [ 1053.474869][T11246] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1053.530479][ T9] em28xx 8-1:0.0: Registering input extension [ 1053.612518][ T5752] em28xx 8-1:0.0: Closing input extension [ 1053.694425][T11246] usb 9-1: device descriptor read/64, error -71 [ 1053.788938][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.988267][T11246] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1054.109816][ T5752] em28xx 8-1:0.0: Freeing device [ 1054.163478][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3031'. [ 1054.206499][T11246] usb 9-1: device descriptor read/64, error -71 [ 1054.289298][T16826] dummy0: left promiscuous mode [ 1054.333820][T16826] netlink: 'syz.6.3031': attribute type 10 has an invalid length. [ 1054.378948][T11246] usb usb9-port1: attempt power cycle [ 1054.422441][T16826] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3031'. [ 1054.503517][T16826] dummy0: entered promiscuous mode [ 1054.713076][T16834] syzkaller0: entered promiscuous mode [ 1054.752276][T16834] syzkaller0: entered allmulticast mode [ 1054.774503][T11246] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1054.848027][T11246] usb 9-1: device descriptor read/8, error -71 [ 1055.155346][T11246] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1055.267051][T11246] usb 9-1: device descriptor read/8, error -71 [ 1055.435575][T11246] usb usb9-port1: unable to enumerate USB device [ 1056.265072][ T5752] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1056.560437][ T5752] usb 8-1: device descriptor read/64, error -71 [ 1058.757016][ T5752] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1058.974682][ T5752] usb 8-1: device descriptor read/64, error -71 [ 1059.218030][ T5752] usb usb8-port1: attempt power cycle [ 1059.645464][ T5770] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1060.070034][ T5770] usb 7-1: Using ep0 maxpacket: 32 [ 1060.121978][ T5770] usb 7-1: config 0 has no interfaces? [ 1060.183625][ T5770] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1060.242224][ T5770] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1060.324596][T11246] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1060.346045][ T5770] usb 7-1: Product: syz [ 1060.380335][ T5770] usb 7-1: Manufacturer: syz [ 1060.400398][ T5770] usb 7-1: SerialNumber: syz [ 1060.491479][ T5770] usb 7-1: config 0 descriptor?? [ 1060.538769][T11246] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 1060.612188][T11246] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1060.712386][T11246] usb 5-1: can't read configurations, error -61 [ 1060.758173][T16920] syzkaller0: entered promiscuous mode [ 1060.916233][T16920] syzkaller0: entered allmulticast mode [ 1060.994726][T11246] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1061.010049][ T5770] usb 7-1: can't set config #0, error -71 [ 1061.182997][ T5770] usb 7-1: USB disconnect, device number 44 [ 1061.400358][T11246] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 1061.531993][T11246] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1061.624358][T11246] usb 5-1: can't read configurations, error -61 [ 1062.665727][T11246] usb usb5-port1: attempt power cycle [ 1064.145772][ T5752] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1064.425407][T11246] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1065.744791][T16954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3056'. [ 1066.359557][T11246] usb 5-1: device descriptor read/8, error -71 [ 1066.785319][ T5770] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1066.890829][T16970] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3059'. [ 1067.004753][ T5770] usb 3-1: device descriptor read/64, error -71 [ 1067.305753][ T5770] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1067.497338][ T5770] usb 3-1: device descriptor read/64, error -71 [ 1067.564711][T11246] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1067.606658][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1067.624762][T11246] usb 5-1: device descriptor read/8, error -71 [ 1067.647962][ T5770] usb usb3-port1: attempt power cycle [ 1067.765956][T11246] usb usb5-port1: unable to enumerate USB device [ 1067.817399][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1067.856224][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1067.909652][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1067.961632][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.015025][ T5770] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1068.057484][ T9] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 1068.096267][ T5770] usb 3-1: device descriptor read/8, error -71 [ 1068.113911][ T9] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1068.384946][ T5770] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1068.444444][T16991] binder: BINDER_SET_CONTEXT_MGR already set [ 1068.467094][T16980] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1068.478428][ T5770] usb 3-1: device descriptor read/8, error -71 [ 1068.546588][T16980] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1068.577852][T16991] binder: 16990:16991 ioctl 4018620d 200000004a80 returned -16 [ 1068.602438][T16980] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1068.637442][ T5770] usb usb3-port1: unable to enumerate USB device [ 1068.771489][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1068.787256][T16979] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1068.833954][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1068.849574][ T5770] usb 4-1: USB disconnect, device number 47 [ 1068.952981][ T5770] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1069.020827][ T5770] spcp8x5 4-1:1.0: device disconnected [ 1070.332650][T17034] netlink: 'syz.6.3070': attribute type 4 has an invalid length. [ 1070.968068][T17046] fuse: Unknown parameter 'group_i00000000000000000000' [ 1071.320062][T17044] syzkaller0: entered promiscuous mode [ 1071.384398][ T9] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1071.409536][T17044] syzkaller0: entered allmulticast mode [ 1071.648112][ T9] usb 8-1: too many configurations: 128, using maximum allowed: 8 [ 1071.722796][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1071.783698][ T9] usb 8-1: can't read configurations, error -61 [ 1071.966926][ T9] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1072.179450][ T9] usb 8-1: too many configurations: 128, using maximum allowed: 8 [ 1072.275129][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1072.339898][ T9] usb 8-1: can't read configurations, error -61 [ 1072.408170][ T9] usb usb8-port1: attempt power cycle [ 1072.816254][ T9] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1072.924524][ T9] usb 8-1: too many configurations: 128, using maximum allowed: 8 [ 1072.972353][T17078] UDC core: g1: couldn't find an available UDC or it's busy [ 1073.003470][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1073.052807][ T9] usb 8-1: can't read configurations, error -61 [ 1073.238166][ T9] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1073.307941][ T9] usb 8-1: too many configurations: 128, using maximum allowed: 8 [ 1073.381093][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1073.450173][ T9] usb 8-1: can't read configurations, error -61 [ 1073.509665][ T9] usb usb8-port1: unable to enumerate USB device [ 1076.634458][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1076.855059][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1076.917237][ T9] usb 4-1: config 0 has no interfaces? [ 1076.995354][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1077.009839][T17121] fuse: Unknown parameter 'group_i00000000000000000000' [ 1077.118509][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1077.221153][ T9] usb 4-1: Product: syz [ 1077.286235][ T9] usb 4-1: Manufacturer: syz [ 1077.359557][ T9] usb 4-1: SerialNumber: syz [ 1077.507385][ T9] usb 4-1: config 0 descriptor?? [ 1078.347504][ T9] usb 4-1: can't set config #0, error -71 [ 1078.576196][ T9] usb 4-1: USB disconnect, device number 48 [ 1080.135620][ T10] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1080.417975][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1080.455486][T17173] syzkaller0: entered promiscuous mode [ 1080.517992][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1080.559610][T17173] syzkaller0: entered allmulticast mode [ 1080.569531][T17188] binder: BINDER_SET_CONTEXT_MGR already set [ 1080.630985][ T10] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1080.650585][T17188] binder: 17187:17188 ioctl 4018620d 200000004a80 returned -16 [ 1080.709004][ T10] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1080.801900][ T10] usb 9-1: config 14 has no interface number 0 [ 1080.884047][ T10] usb 9-1: config 14 has no interface number 1 [ 1080.935736][ T10] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1081.048446][ T10] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1081.114846][ T5770] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1081.140909][ T10] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1081.222876][ T10] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1081.315982][ T5770] usb 8-1: device descriptor read/64, error -71 [ 1081.332490][ T10] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1081.412502][ T10] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1081.497449][ T10] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1081.551630][ T10] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1081.604800][ T5770] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1081.654136][ T10] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1081.721175][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.792291][ T10] usb 9-1: Product: syz [ 1081.804450][ T5770] usb 8-1: device descriptor read/64, error -71 [ 1081.828932][ T10] usb 9-1: Manufacturer: syz [ 1081.857891][ T10] usb 9-1: SerialNumber: syz [ 1081.948305][ T5770] usb usb8-port1: attempt power cycle [ 1082.330357][ T5770] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1082.453619][ T5770] usb 8-1: device descriptor read/8, error -71 [ 1082.700232][ T10] legousbtower 9-1:14.57: interrupt endpoints not found [ 1082.777655][ T5770] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1082.857246][T17228] UDC core: g1: couldn't find an available UDC or it's busy [ 1082.896288][ T5770] usb 8-1: device descriptor read/8, error -71 [ 1082.908351][ T10] legousbtower 9-1:14.228: get version request failed: -71 [ 1082.982797][ T10] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 1083.068353][ T5770] usb usb8-port1: unable to enumerate USB device [ 1083.151927][ T10] usb 9-1: USB disconnect, device number 40 [ 1083.750986][ T10] IPVS: starting estimator thread 0... [ 1083.896709][T17245] IPVS: using max 30 ests per chain, 72000 per kthread [ 1084.649245][T17259] syzkaller0: entered promiscuous mode [ 1084.698626][T17259] syzkaller0: entered allmulticast mode [ 1085.564632][ T5770] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1088.254118][ T5770] usb 5-1: device descriptor read/all, error -71 [ 1088.303926][T17283] netlink: 'syz.6.3125': attribute type 1 has an invalid length. [ 1088.844344][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1089.025887][ T10] usb 3-1: device descriptor read/64, error -71 [ 1089.242551][T17283] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1089.384457][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1089.404031][T17287] tipc: Started in network mode [ 1089.480392][T17287] tipc: Node identity ac14142f, cluster identity 4711 [ 1089.523890][T17287] tipc: New replicast peer: 172.20.20.170 [ 1089.559917][ T10] usb 3-1: device descriptor read/64, error -71 [ 1089.575973][T17287] tipc: Enabled bearer , priority 10 [ 1089.718244][ T10] usb usb3-port1: attempt power cycle [ 1089.872916][T17288] tipc: New replicast peer: 0.0.0.0 [ 1089.925656][T17310] netlink: 'syz.7.3131': attribute type 4 has an invalid length. [ 1090.125842][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1090.215924][ T10] usb 3-1: device descriptor read/8, error -71 [ 1090.505817][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1090.589247][ T10] usb 3-1: device descriptor read/8, error -71 [ 1090.696680][ T5770] tipc: Node number set to 2886997039 [ 1090.750913][ T10] usb usb3-port1: unable to enumerate USB device [ 1091.936763][T17339] UDC core: g1: couldn't find an available UDC or it's busy [ 1092.012417][T17341] netlink: 'syz.2.3141': attribute type 4 has an invalid length. [ 1092.046004][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1092.063409][T17341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3141'. [ 1092.237031][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1092.293141][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1092.353641][ T10] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1092.417515][ T10] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1092.481253][ T10] usb 4-1: config 14 has no interface number 0 [ 1092.526632][ T10] usb 4-1: config 14 has no interface number 1 [ 1092.568639][ T10] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1092.643330][ T10] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1092.713709][ T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1092.798828][ T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1092.834677][ T5752] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1092.895633][ T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1093.363178][ T10] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1093.584349][ T10] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1093.622912][ T5752] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1093.642459][ T10] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1093.670780][ T5752] usb 3-1: can't read configurations, error -61 [ 1093.698572][ T10] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1093.762267][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.816544][ T10] usb 4-1: Product: syz [ 1093.859149][ T10] usb 4-1: Manufacturer: syz [ 1093.864867][ T5752] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1093.910795][ T10] usb 4-1: SerialNumber: syz [ 1094.086972][ T5752] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1094.133863][ T5752] usb 3-1: can't read configurations, error -61 [ 1094.172630][ T5752] usb usb3-port1: attempt power cycle [ 1094.430252][ T10] legousbtower 4-1:14.57: interrupt endpoints not found [ 1094.544606][ T5752] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1094.599599][ T5752] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1094.638816][ T5752] usb 3-1: can't read configurations, error -61 [ 1094.804504][ T5752] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1094.830879][ T10] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1094.874845][ T5752] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1094.899395][ T10] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1094.919317][ T5752] usb 3-1: can't read configurations, error -61 [ 1094.948877][ T5752] usb usb3-port1: unable to enumerate USB device [ 1096.532547][ T9] usb 4-1: USB disconnect, device number 49 [ 1096.603961][ T9] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1096.655165][ T5752] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1096.727944][ T10] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1096.884561][ T5752] usb 3-1: Using ep0 maxpacket: 16 [ 1096.911968][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1096.956588][ T10] usb 8-1: device descriptor read/64, error -71 [ 1096.988410][ T5752] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1097.544125][ T10] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1098.349467][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.444987][T17387] netlink: 'syz.8.3152': attribute type 1 has an invalid length. [ 1099.480532][ T5752] usb 3-1: Product: syz [ 1099.522650][ T5752] usb 3-1: Manufacturer: syz [ 1099.565088][ T10] usb 8-1: device descriptor read/64, error -71 [ 1099.577204][ T5752] usb 3-1: SerialNumber: syz [ 1099.636341][ T5752] usb 3-1: config 0 descriptor?? [ 1099.695535][ T5752] usb 3-1: can't set config #0, error -71 [ 1099.738752][ T10] usb usb8-port1: attempt power cycle [ 1099.807466][ T5752] usb 3-1: USB disconnect, device number 86 [ 1100.168722][T17401] UDC core: g1: couldn't find an available UDC or it's busy [ 1100.205160][ T10] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1100.273468][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1100.377918][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1100.427871][ T10] usb 8-1: config 0 has no interface number 0 [ 1100.472166][ T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1100.538207][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1100.622163][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.691386][ T10] usb 8-1: config 0 descriptor?? [ 1100.708855][T17389] tipc: Enabling of bearer rejected, already enabled [ 1100.792767][ T10] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1100.849773][T17387] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1100.993175][ T10] usb 8-1: USB disconnect, device number 50 [ 1101.371642][T17415] netlink: 'syz.6.3161': attribute type 10 has an invalid length. [ 1101.472575][T17415] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3161'. [ 1101.621678][T17411] bond5: Unable to set up delay as MII monitoring is disabled [ 1101.713398][T17411] bond5 (unregistering): Released all slaves [ 1103.078953][T17414] dummy0: left promiscuous mode [ 1103.743169][T17421] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3163'. [ 1104.160832][T17415] dummy0: entered promiscuous mode [ 1105.295740][ T10] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1105.526357][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1105.611161][ T10] usb 7-1: can't read configurations, error -61 [ 1105.717742][T17437] syzkaller1: entered promiscuous mode [ 1105.746741][T17437] syzkaller1: entered allmulticast mode [ 1105.794727][ T10] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1106.007927][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1106.054060][ T10] usb 7-1: can't read configurations, error -61 [ 1106.106165][ T10] usb usb7-port1: attempt power cycle [ 1106.484680][ T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1106.554413][ T5755] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1106.578171][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1106.632144][ T10] usb 7-1: can't read configurations, error -61 [ 1106.764393][ T5755] usb 5-1: Using ep0 maxpacket: 16 [ 1106.807694][ T5755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1106.827917][ T10] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1106.915249][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1106.923039][ T5755] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1106.973013][ T10] usb 7-1: can't read configurations, error -61 [ 1106.992050][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.024559][ T10] usb usb7-port1: unable to enumerate USB device [ 1107.048503][ T5755] usb 5-1: Product: syz [ 1107.073376][ T5755] usb 5-1: Manufacturer: syz [ 1107.097705][ T5755] usb 5-1: SerialNumber: syz [ 1107.128908][ T5755] usb 5-1: config 0 descriptor?? [ 1107.151644][T17461] UDC core: g1: couldn't find an available UDC or it's busy [ 1107.183456][ T5755] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1107.265326][ T5755] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1107.518127][T17465] XFS (nullb0): Invalid superblock magic number [ 1107.813870][ T5755] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1108.108678][T17478] UDC core: g1: couldn't find an available UDC or it's busy [ 1108.120050][ T5755] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1108.180641][ T5755] em28xx 5-1:0.0: board has no eeprom [ 1108.316974][ T5755] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1108.377880][ T5755] em28xx 5-1:0.0: dvb set to bulk mode. [ 1108.405734][ T9] em28xx 5-1:0.0: Binding DVB extension [ 1108.469216][ T5755] usb 5-1: USB disconnect, device number 70 [ 1108.549247][ T5755] em28xx 5-1:0.0: Disconnecting em28xx [ 1108.910368][ T9] em28xx 5-1:0.0: Registering input extension [ 1108.982879][ T5755] em28xx 5-1:0.0: Closing input extension [ 1109.044394][T17493] netlink: 'syz.8.3179': attribute type 10 has an invalid length. [ 1109.168965][T17493] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3179'. [ 1109.187320][ T5755] em28xx 5-1:0.0: Freeing device [ 1109.402713][T17486] bond2: Unable to set up delay as MII monitoring is disabled [ 1109.532587][T17486] bond2 (unregistering): Released all slaves [ 1110.009505][T17491] dummy0: left promiscuous mode [ 1110.131058][T17493] dummy0: entered promiscuous mode [ 1110.581305][T17506] syzkaller1: entered promiscuous mode [ 1111.633517][T17506] syzkaller1: entered allmulticast mode [ 1113.856134][T17516] fuse: Bad value for 'fd' [ 1114.084620][T17522] netlink: 'syz.7.3190': attribute type 1 has an invalid length. [ 1114.573631][T17530] UDC core: g1: couldn't find an available UDC or it's busy [ 1114.585407][T17522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1114.660438][T17535] UDC core: g1: couldn't find an available UDC or it's busy [ 1114.693578][T17524] tipc: New replicast peer: 172.20.20.170 [ 1114.797638][T17524] tipc: Enabled bearer , priority 10 [ 1115.099666][ T5770] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1115.208300][T17528] tipc: New replicast peer: 0.0.0.0 [ 1115.235313][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.759379][ T5770] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1117.886726][ T5770] usb 9-1: can't read configurations, error -61 [ 1119.017311][T17572] netlink: 'syz.7.3200': attribute type 4 has an invalid length. [ 1119.559185][T17577] syzkaller1: entered promiscuous mode [ 1119.609579][T17577] syzkaller1: entered allmulticast mode [ 1120.814813][ T5752] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1121.015319][ T5752] usb 8-1: Using ep0 maxpacket: 8 [ 1121.044134][ T5752] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1121.053266][ T5755] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1121.100389][ T5752] usb 8-1: config 0 has no interface number 0 [ 1121.140721][ T5752] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1121.201414][ T5752] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1121.244668][ T5755] usb 3-1: Using ep0 maxpacket: 8 [ 1121.258685][ T5752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.284716][ T5755] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1121.321652][ T5755] usb 3-1: config 0 has no interface number 0 [ 1121.329845][ T5752] usb 8-1: config 0 descriptor?? [ 1121.350573][T17596] UDC core: g1: couldn't find an available UDC or it's busy [ 1121.371338][ T5755] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1121.386675][ T5752] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1121.430682][ T5755] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1121.487303][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.537781][ T5755] usb 3-1: config 0 descriptor?? [ 1121.581877][ T5755] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1121.609651][ T5752] usb 8-1: USB disconnect, device number 51 [ 1121.792086][ T5755] usb 3-1: USB disconnect, device number 87 [ 1122.289139][T17600] UDC core: g1: couldn't find an available UDC or it's busy [ 1126.844755][ T5752] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1127.994585][ T5752] usb 7-1: Using ep0 maxpacket: 16 [ 1128.042319][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1128.069782][ T5755] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1128.127662][ T5752] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1128.150565][T17628] syzkaller1: entered promiscuous mode [ 1128.190401][T17628] syzkaller1: entered allmulticast mode [ 1128.196658][ T5752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.248237][ T5752] usb 7-1: Product: syz [ 1128.268743][ T5752] usb 7-1: Manufacturer: syz [ 1128.284939][ T5755] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1128.301431][ T5752] usb 7-1: SerialNumber: syz [ 1128.321749][ T5755] usb 5-1: can't read configurations, error -61 [ 1128.367414][ T5752] usb 7-1: config 0 descriptor?? [ 1128.422178][ T5752] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1128.499466][ T5752] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1128.520139][ T5755] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1128.756655][ T5752] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1128.920534][ T5752] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1129.035750][ T5752] em28xx 7-1:0.0: board has no eeprom [ 1130.304957][T17651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3222'. [ 1131.305370][ T5752] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1131.385305][ T5752] em28xx 7-1:0.0: dvb set to bulk mode. [ 1131.470717][ T5755] em28xx 7-1:0.0: Binding DVB extension [ 1131.519073][ T5752] usb 7-1: USB disconnect, device number 49 [ 1131.587338][ T5752] em28xx 7-1:0.0: Disconnecting em28xx [ 1131.605482][ T5770] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1131.854489][ T5770] usb 9-1: Using ep0 maxpacket: 8 [ 1131.916777][ T5770] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1131.978467][ T5770] usb 9-1: config 0 has no interface number 0 [ 1132.021187][ T5770] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1132.038999][ T5755] em28xx 7-1:0.0: Registering input extension [ 1132.056350][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1132.095190][ T5752] em28xx 7-1:0.0: Closing input extension [ 1132.117237][ T5770] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1132.207380][ T5770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.274482][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1132.289315][ T5752] em28xx 7-1:0.0: Freeing device [ 1132.324978][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1132.359937][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3228'. [ 1132.407266][ T5770] usb 9-1: config 0 descriptor?? [ 1132.419231][ T10] usb 4-1: config 0 has no interface number 0 [ 1132.499971][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1132.559678][ T5770] usb 9-1: can't set config #0, error -71 [ 1132.630736][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1132.651397][ T5770] usb 9-1: USB disconnect, device number 43 [ 1132.719222][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.810356][ T10] usb 4-1: config 0 descriptor?? [ 1132.879159][ T10] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1134.544097][ T10] usb 4-1: USB disconnect, device number 50 [ 1135.076983][ T5752] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1135.235122][T17689] syzkaller1: entered promiscuous mode [ 1135.276779][T17689] syzkaller1: entered allmulticast mode [ 1135.305272][ T5752] usb 7-1: Using ep0 maxpacket: 16 [ 1135.337652][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1135.399970][ T5752] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1135.447920][ T5752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.513076][ T5752] usb 7-1: Product: syz [ 1135.553823][ T5752] usb 7-1: Manufacturer: syz [ 1135.585153][ T5770] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1135.608810][ T5752] usb 7-1: SerialNumber: syz [ 1135.672902][ T5752] usb 7-1: config 0 descriptor?? [ 1135.745694][ T5752] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1135.809501][ T5770] usb 4-1: config 0 has no interfaces? [ 1135.834044][ T5752] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1135.843882][T17699] fuse: Invalid rootmode [ 1135.867003][ T5770] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1135.920420][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.001266][ T5770] usb 4-1: Product: syz [ 1136.040486][ T5770] usb 4-1: Manufacturer: syz [ 1136.091417][ T5770] usb 4-1: SerialNumber: syz [ 1136.159591][ T5770] usb 4-1: config 0 descriptor?? [ 1136.367663][ T5752] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1136.517955][ T5770] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1136.667217][ T5752] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1136.677629][T17710] syzkaller0: entered promiscuous mode [ 1136.686937][T11246] usb 4-1: USB disconnect, device number 51 [ 1136.697703][T17710] syzkaller0: entered allmulticast mode [ 1136.707541][ T5752] em28xx 7-1:0.0: board has no eeprom [ 1136.714777][ T9] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1136.733981][ T5770] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.786024][ T5770] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1136.796962][ T5770] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1136.814461][ T5752] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1136.837551][ T5752] em28xx 7-1:0.0: dvb set to bulk mode. [ 1136.848841][ T5770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.888750][T17711] em28xx 7-1:0.0: Binding DVB extension [ 1136.897015][ T5752] usb 7-1: USB disconnect, device number 50 [ 1136.914327][ T5755] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1136.927970][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.955715][ T5752] em28xx 7-1:0.0: Disconnecting em28xx [ 1137.017599][ T9] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1137.072869][ T9] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1137.127780][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.148185][ T5755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.207826][T17711] em28xx 7-1:0.0: Registering input extension [ 1137.215169][ T5755] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1137.279893][ T5752] em28xx 7-1:0.0: Closing input extension [ 1137.316656][ T5755] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1137.391424][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.466265][ T5752] em28xx 7-1:0.0: Freeing device [ 1137.499712][ T5755] as10x_usb: device has been detected [ 1137.559877][ T5755] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1137.669075][T17722] netlink: 'syz.6.3247': attribute type 10 has an invalid length. [ 1137.711505][ T5755] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1137.726022][T17722] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3247'. [ 1137.802148][ T5755] as10x_usb: error during firmware upload part1 [ 1137.841493][ T5755] Registered device Abilis Systems DVB-Titan [ 1137.851110][T17716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1138.018330][T17721] dummy0: left promiscuous mode [ 1138.115031][T17721] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1138.350776][T17722] dummy0: entered promiscuous mode [ 1138.369727][T17722] bond5: (slave dummy0): Releasing backup interface [ 1139.814983][ T5752] usb 8-1: USB disconnect, device number 52 [ 1139.902397][ T9] usb 9-1: USB disconnect, device number 44 [ 1140.002604][ T5755] usb 3-1: USB disconnect, device number 88 [ 1140.212389][ T5755] Unregistered device Abilis Systems DVB-Titan [ 1140.221912][T17744] fuse: Invalid rootmode [ 1140.260874][ T5755] as10x_usb: device has been disconnected [ 1140.295825][T17746] syzkaller1: entered promiscuous mode [ 1140.333306][T17746] syzkaller1: entered allmulticast mode [ 1140.785289][T17751] netlink: 'syz.2.3257': attribute type 4 has an invalid length. [ 1140.856869][T17751] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3257'. [ 1141.170701][T17754] syzkaller0: entered promiscuous mode [ 1141.221253][T17754] syzkaller0: entered allmulticast mode [ 1141.682677][T17766] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3263'. [ 1142.126368][ T5755] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1143.186095][ T5752] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1143.215199][ T5755] usb 4-1: config 0 has no interfaces? [ 1143.630148][ T5755] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1143.699649][ T5752] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.720000][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.790602][ T5755] usb 4-1: Product: syz [ 1143.795206][ T5752] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.831402][ T5755] usb 4-1: Manufacturer: syz [ 1143.864612][ T5755] usb 4-1: SerialNumber: syz [ 1143.879074][ T5752] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1143.922295][ T5755] usb 4-1: config 0 descriptor?? [ 1143.940249][T17789] fuse: Invalid rootmode [ 1143.967896][ T5752] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1144.009281][ T5752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.073364][ T5752] spcp8x5 8-1:1.0: required endpoints missing [ 1144.084995][T17711] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1144.247109][ T5752] usb 4-1: USB disconnect, device number 52 [ 1144.272310][T17711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.294064][T17793] syzkaller1: entered promiscuous mode [ 1144.321166][T17711] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1144.336380][T17793] syzkaller1: entered allmulticast mode [ 1144.392668][T17711] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1144.409556][T17711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.496515][T17711] as10x_usb: device has been detected [ 1144.529273][T17711] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1144.600071][T17711] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1144.772047][T17711] as10x_usb: error during firmware upload part1 [ 1144.807568][T17711] Registered device Abilis Systems DVB-Titan [ 1145.541388][T17809] UDC core: g1: couldn't find an available UDC or it's busy [ 1145.831241][ T5755] usb 8-1: USB disconnect, device number 53 [ 1146.588246][ T5755] usb 3-1: USB disconnect, device number 89 [ 1148.317631][ T5755] Unregistered device Abilis Systems DVB-Titan [ 1148.351768][ T5755] as10x_usb: device has been disconnected [ 1148.622682][T17833] fuse: Bad value for 'rootmode' [ 1148.678239][T17835] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3283'. [ 1148.691162][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3284'. [ 1148.770675][T17836] dummy0: left promiscuous mode [ 1148.792227][T17838] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3285'. [ 1148.819055][T17836] netlink: 'syz.6.3284': attribute type 10 has an invalid length. [ 1148.926258][T17836] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3284'. [ 1149.026325][T17836] dummy0: entered promiscuous mode [ 1149.564349][ T5755] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1149.670739][T17854] netlink: 'syz.6.3292': attribute type 4 has an invalid length. [ 1149.732476][T17854] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3292'. [ 1149.799828][ T5755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.862465][ T5755] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.952898][ T5755] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1150.073055][ T5755] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1150.154849][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.462091][ T5755] spcp8x5 3-1:1.0: required endpoints missing [ 1151.856546][T17864] netlink: 'syz.7.3296': attribute type 1 has an invalid length. [ 1152.214161][T17864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1152.289487][T17869] tipc: Enabling of bearer rejected, already enabled [ 1153.096597][T17711] usb 3-1: USB disconnect, device number 90 [ 1153.165286][T17893] fuse: Bad value for 'rootmode' [ 1153.483195][T17903] UDC core: g1: couldn't find an available UDC or it's busy [ 1153.511017][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1153.592038][T17902] dummy0: left promiscuous mode [ 1153.653694][T17906] netlink: 'syz.4.3304': attribute type 10 has an invalid length. [ 1153.723828][T17906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1153.805455][T17906] dummy0: entered promiscuous mode [ 1156.065740][T17924] UDC core: g1: couldn't find an available UDC or it's busy [ 1158.383636][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1158.687683][T17950] fuse: Bad value for 'rootmode' [ 1158.728736][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.816892][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.853337][T17953] netlink: 'syz.3.3318': attribute type 1 has an invalid length. [ 1158.934545][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1158.951266][T17953] netlink: 'syz.3.3318': attribute type 1 has an invalid length. [ 1159.049361][T17953] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3318'. [ 1159.086109][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1159.110403][T17942] syzkaller0: entered promiscuous mode [ 1159.178993][T17942] syzkaller0: entered allmulticast mode [ 1159.184950][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.293588][ T9] spcp8x5 5-1:1.0: required endpoints missing [ 1159.491595][ T9] usb 5-1: USB disconnect, device number 73 [ 1159.724067][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1159.746410][T17972] binder: 17971:17972 ioctl c0306201 0 returned -14 [ 1159.917342][T17983] netlink: 'syz.3.3322': attribute type 10 has an invalid length. [ 1159.998865][T17983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1160.044045][T17986] UDC core: g1: couldn't find an available UDC or it's busy [ 1165.158106][T17981] dummy0: left promiscuous mode [ 1165.198480][T17983] dummy0: entered promiscuous mode [ 1165.739544][T18020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3331'. [ 1165.750622][T18022] fuse: Unknown parameter 'use00000000000000000000' [ 1165.808127][T18020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3331'. [ 1165.895807][T18026] netlink: 'syz.4.3334': attribute type 1 has an invalid length. [ 1165.931222][T18026] netlink: 'syz.4.3334': attribute type 1 has an invalid length. [ 1165.991985][T18026] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3334'. [ 1166.004970][ T5752] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1166.105174][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1166.196882][ T5752] usb 8-1: config 0 has no interfaces? [ 1166.239329][ T5752] usb 8-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1166.296268][ T5752] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.309277][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.329803][T18032] binder: 18031:18032 ioctl c0306201 0 returned -14 [ 1166.368727][ T5752] usb 8-1: Product: syz [ 1166.379674][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1166.408815][ T5752] usb 8-1: Manufacturer: syz [ 1166.441997][ T5752] usb 8-1: SerialNumber: syz [ 1166.466148][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1166.506348][ T5752] usb 8-1: config 0 descriptor?? [ 1166.541495][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1166.661795][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1166.916697][T17711] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1166.936094][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.745653][T17711] usb 5-1: Using ep0 maxpacket: 8 [ 1168.902875][T18042] fuse: Unknown parameter 'grou00000000000000000000' [ 1168.910558][ T9] spcp8x5 7-1:1.0: required endpoints missing [ 1168.936896][T17711] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1169.020272][T17711] usb 5-1: config 0 has no interface number 0 [ 1169.068026][ T5752] usb 7-1: USB disconnect, device number 51 [ 1169.077096][T17711] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1169.180168][T17711] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1169.254171][ T9] usb 8-1: USB disconnect, device number 54 [ 1169.277522][T17711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.322923][T18052] UDC core: g1: couldn't find an available UDC or it's busy [ 1169.389705][T17711] usb 5-1: config 0 descriptor?? [ 1169.767041][T17711] usb 5-1: can't set config #0, error -71 [ 1169.860612][T18043] syzkaller0: entered promiscuous mode [ 1169.873021][T17711] usb 5-1: USB disconnect, device number 74 [ 1169.931739][T18043] syzkaller0: entered allmulticast mode [ 1170.097014][T18066] netlink: 'syz.7.3344': attribute type 10 has an invalid length. [ 1170.202849][T18066] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3344'. [ 1173.366233][T18064] dummy0: left promiscuous mode [ 1173.429932][T18066] dummy0: entered promiscuous mode [ 1173.827834][T18099] fuse: Unknown parameter 'use00000000000000000000' [ 1173.927532][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3350'. [ 1174.008848][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3350'. [ 1174.219941][T18111] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 1174.289596][T18111] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 1174.361126][T18111] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3353'. [ 1176.234528][ T5752] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1176.329433][T17711] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1176.345526][T18128] fuse: Unknown parameter 'group_i00000000000000000000' [ 1176.356461][T18130] UDC core: g1: couldn't find an available UDC or it's busy [ 1176.414416][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1176.426535][ T5752] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.479522][ T5752] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.514693][T17711] usb 7-1: Using ep0 maxpacket: 8 [ 1176.541955][T17711] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1176.553161][ T5752] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1176.598097][ T9] usb 4-1: config 0 has no interfaces? [ 1176.609078][T17711] usb 7-1: config 0 has no interface number 0 [ 1176.627597][ T5752] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.651886][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1176.676641][T17711] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.687771][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.718310][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.739865][ T5752] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1176.749325][T17711] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1176.774338][ T9] usb 4-1: Product: syz [ 1176.796407][ T5752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.806510][ T9] usb 4-1: Manufacturer: syz [ 1176.811763][T17711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.837965][ T9] usb 4-1: SerialNumber: syz [ 1176.874649][T17711] usb 7-1: config 0 descriptor?? [ 1176.892517][ T9] usb 4-1: config 0 descriptor?? [ 1176.900030][ T5752] spcp8x5 9-1:1.0: required endpoints missing [ 1176.952613][T17711] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1177.039528][T18139] netlink: 'syz.2.3360': attribute type 4 has an invalid length. [ 1177.161898][T17711] usb 7-1: USB disconnect, device number 52 [ 1177.416126][ T9] usb 4-1: USB disconnect, device number 53 [ 1177.446311][T18142] syzkaller0: entered promiscuous mode [ 1177.478594][T18142] syzkaller0: entered allmulticast mode [ 1177.979383][T18145] dummy0: left promiscuous mode [ 1178.043370][T18147] netlink: 'syz.4.3363': attribute type 10 has an invalid length. [ 1178.138664][T18147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3363'. [ 1178.308083][ T9] usb 9-1: USB disconnect, device number 45 [ 1178.331948][T18147] dummy0: entered promiscuous mode [ 1178.461185][T18151] fuse: Unknown parameter 'use00000000000000000000' [ 1181.090275][T11821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1181.106295][T11821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1181.117170][T11821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1181.131193][T11821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1181.140888][T11821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1182.911389][T18165] netlink: 'syz.4.3369': attribute type 1 has an invalid length. [ 1183.088764][T18172] tipc: Started in network mode [ 1183.224465][T11821] Bluetooth: hci4: command tx timeout [ 1183.254401][T18172] tipc: Node identity ac14142f, cluster identity 4711 [ 1183.352039][T18172] tipc: New replicast peer: 172.20.20.170 [ 1183.505351][T18172] tipc: Enabled bearer , priority 10 [ 1183.651462][T18178] netlink: 'syz.3.3373': attribute type 1 has an invalid length. [ 1183.706554][T18178] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3373'. [ 1184.132184][T18165] bond2 (unregistering): Released all slaves [ 1184.542984][T18181] tipc: New replicast peer: 0.0.0.0 [ 1184.575821][T17711] tipc: Node number set to 2886997039 [ 1184.684605][ T5752] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1184.777016][ T9] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1184.914951][ T5752] usb 4-1: config 0 has no interfaces? [ 1184.977567][ T5752] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1184.998934][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1185.058543][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1185.088662][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.156131][ T9] usb 8-1: config 0 has no interface number 0 [ 1185.184651][ T5752] usb 4-1: Product: syz [ 1185.204470][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1185.229363][ T5752] usb 4-1: Manufacturer: syz [ 1185.281614][T18220] dummy0: left promiscuous mode [ 1185.287825][ T5752] usb 4-1: SerialNumber: syz [ 1185.306363][T11821] Bluetooth: hci4: command tx timeout [ 1185.317955][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1185.361506][ T5752] usb 4-1: config 0 descriptor?? [ 1185.367879][T18222] netlink: 'syz.8.3380': attribute type 10 has an invalid length. [ 1185.408855][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.463707][T18222] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3380'. [ 1185.498462][ T9] usb 8-1: config 0 descriptor?? [ 1185.538527][T18225] fuse: Unknown parameter 'user_i00000000000000000000' [ 1185.565320][ T9] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1185.790933][ T9] usb 8-1: USB disconnect, device number 55 [ 1185.957971][T16928] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.988185][T18222] dummy0: entered promiscuous mode [ 1186.097560][T18231] UDC core: g1: couldn't find an available UDC or it's busy [ 1186.219820][ T5755] usb 4-1: USB disconnect, device number 54 [ 1186.439914][T16928] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.640921][T11821] Bluetooth: hci4: command tx timeout [ 1188.714683][T16928] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.904305][T18265] netlink: 'syz.7.3390': attribute type 1 has an invalid length. [ 1189.704890][T11821] Bluetooth: hci4: command tx timeout [ 1189.839125][T18286] fuse: Unknown parameter 'user_i00000000000000000000' [ 1189.868385][T18265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1189.994859][T18270] tipc: Enabling of bearer rejected, already enabled [ 1190.696333][T16928] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.779818][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3396'. [ 1190.848291][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3396'. [ 1191.467107][T18308] netlink: 'syz.8.3398': attribute type 1 has an invalid length. [ 1191.551400][T18308] netlink: 'syz.8.3398': attribute type 1 has an invalid length. [ 1191.623406][T18308] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3398'. [ 1191.691551][T18314] netlink: 'syz.4.3397': attribute type 4 has an invalid length. [ 1191.996160][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1192.242472][ T9] usb 7-1: config 0 has no interfaces? [ 1192.296049][ T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1192.366409][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.441835][ T9] usb 7-1: Product: syz [ 1192.478076][ T9] usb 7-1: Manufacturer: syz [ 1192.518817][ T9] usb 7-1: SerialNumber: syz [ 1192.593686][ T9] usb 7-1: config 0 descriptor?? [ 1194.533370][T18338] fuse: Unknown parameter 'user_i00000000000000000000' [ 1194.731593][ T5755] usb 7-1: USB disconnect, device number 53 [ 1195.877934][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3411'. [ 1195.969510][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3411'. [ 1197.904970][ T5755] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1199.004426][ T5755] usb 5-1: Using ep0 maxpacket: 8 [ 1199.059419][ T5755] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1199.112970][ T5755] usb 5-1: config 0 has no interface number 0 [ 1199.140688][ T5755] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1199.179346][T18387] netlink: 'syz.6.3418': attribute type 10 has an invalid length. [ 1199.206323][ T5755] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1199.233064][T18387] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3418'. [ 1199.282599][ T5755] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1199.307398][T16928] bridge_slave_1: left allmulticast mode [ 1199.343604][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.360826][T16928] bridge_slave_1: left promiscuous mode [ 1199.397723][T16928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.428019][ T5755] usb 5-1: config 0 descriptor?? [ 1199.473147][T16928] bridge_slave_0: left allmulticast mode [ 1199.503362][ T5755] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1199.533857][T16928] bridge_slave_0: left promiscuous mode [ 1199.580626][T16928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.657106][ T5755] usb 5-1: USB disconnect, device number 75 [ 1199.743376][T18393] netlink: 'syz.7.3419': attribute type 4 has an invalid length. [ 1199.765450][T18395] fuse: Unknown parameter 'user_id00000000000000000000' [ 1200.691201][T17711] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1200.857260][T17711] usb 9-1: config 0 has no interfaces? [ 1200.909248][T17711] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1200.941137][T17711] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.988933][T17711] usb 9-1: Product: syz [ 1201.012908][T17711] usb 9-1: Manufacturer: syz [ 1201.032952][T17711] usb 9-1: SerialNumber: syz [ 1201.082830][T17711] usb 9-1: config 0 descriptor?? [ 1201.166478][T16928] batman_adv: batadv0: Removing interface: vxlan0 [ 1201.224100][T16928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.256369][T16928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.279257][T16928] bond0 (unregistering): Released all slaves [ 1201.323440][T16928] bond1 (unregistering): Released all slaves [ 1201.383029][T16928] bond2 (unregistering): Released all slaves [ 1201.573615][T18385] dummy0: left promiscuous mode [ 1201.614662][T18387] dummy0: entered promiscuous mode [ 1202.191194][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 1202.290811][ T5755] usb 9-1: USB disconnect, device number 46 [ 1202.314528][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 1203.162722][T16928] hsr_slave_0: left promiscuous mode [ 1203.242813][T16928] hsr_slave_1: left promiscuous mode [ 1203.291750][T16928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.353527][T16928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.398428][T16928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.498053][T16928] veth0_macvtap: left promiscuous mode [ 1203.535919][T16928] veth1_vlan: left promiscuous mode [ 1203.577857][T16928] veth0_vlan: left promiscuous mode [ 1203.927419][T18457] netlink: 'syz.4.3429': attribute type 4 has an invalid length. [ 1205.889152][T17711] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1206.106290][T17711] usb 9-1: Using ep0 maxpacket: 8 [ 1206.122545][T18464] fuse: Unknown parameter 'user_id00000000000000000000' [ 1206.143647][T17711] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1206.187578][T17711] usb 9-1: config 0 has no interface number 0 [ 1206.225740][T17711] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1206.284898][T17711] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1206.377770][T17711] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1206.421972][T17711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.483232][T17711] usb 9-1: config 0 descriptor?? [ 1206.526144][T17711] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1206.538324][T18466] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3436'. [ 1206.684529][T18470] netlink: 'syz.7.3436': attribute type 10 has an invalid length. [ 1206.723395][T18470] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3436'. [ 1206.780668][ T5752] usb 9-1: USB disconnect, device number 47 [ 1207.288941][T16928] team0 (unregistering): Port device team_slave_1 removed [ 1207.335934][T16928] team0 (unregistering): Port device team_slave_0 removed [ 1207.821151][T18469] dummy0: left promiscuous mode [ 1207.876996][T18470] dummy0: entered promiscuous mode [ 1208.875484][ T5752] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1209.108881][ T5752] usb 8-1: config 0 has no interfaces? [ 1209.122502][T18159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.180059][ T5752] usb 8-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1209.201265][T18159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.263212][ T5752] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.295532][T18513] netlink: 'syz.6.3440': attribute type 4 has an invalid length. [ 1209.307299][T18159] bridge_slave_0: entered allmulticast mode [ 1209.352642][ T5752] usb 8-1: Product: syz [ 1209.360623][T18159] bridge_slave_0: entered promiscuous mode [ 1209.384087][ T5752] usb 8-1: Manufacturer: syz [ 1209.581384][T17711] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1209.616440][ T5752] usb 8-1: SerialNumber: syz [ 1209.624014][T18159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.625832][ T5752] usb 8-1: config 0 descriptor?? [ 1210.633117][T18159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.564334][T17711] usb 5-1: device descriptor read/64, error -71 [ 1211.611893][ T5752] usb 8-1: can't set config #0, error -71 [ 1211.650694][T18159] bridge_slave_1: entered allmulticast mode [ 1211.719380][ T5752] usb 8-1: USB disconnect, device number 56 [ 1211.734667][T18159] bridge_slave_1: entered promiscuous mode [ 1211.884518][T17711] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1211.892507][T18522] fuse: Unknown parameter 'user_id00000000000000000000' [ 1212.054395][T17711] usb 5-1: device descriptor read/64, error -71 [ 1212.213847][T17711] usb usb5-port1: attempt power cycle [ 1212.259308][T18159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.285698][ T5770] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1212.398720][T18159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.596171][ T5770] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.708896][ T5770] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1212.737614][ T5752] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1212.850190][ T5770] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1212.889413][T18159] team0: Port device team_slave_0 added [ 1212.932316][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.959473][ T5752] usb 9-1: Using ep0 maxpacket: 8 [ 1213.008073][ T5752] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1213.071835][T18159] team0: Port device team_slave_1 added [ 1213.104077][ T5752] usb 9-1: config 0 has no interface number 0 [ 1213.158017][ T5770] as10x_usb: device has been detected [ 1213.190178][ T5752] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1213.237839][ T5770] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1213.329533][ T5752] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1213.412360][ T5770] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1213.470615][ T5752] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1213.553906][ T5770] as10x_usb: error during firmware upload part1 [ 1213.570789][ T5752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.629306][ T5770] Registered device Abilis Systems DVB-Titan [ 1213.674167][ T5752] usb 9-1: config 0 descriptor?? [ 1213.821641][ T5752] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1213.907606][T18159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.968368][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.044192][ T5752] usb 9-1: USB disconnect, device number 48 [ 1214.125829][T18561] netlink: 'syz.4.3453': attribute type 4 has an invalid length. [ 1214.213188][T18159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.328818][T18159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.384140][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.460220][T18564] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3455'. [ 1214.548909][T18159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.615172][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1214.624706][T18569] netlink: 'syz.6.3455': attribute type 10 has an invalid length. [ 1214.665795][T18566] dummy0: left promiscuous mode [ 1214.690643][T18569] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3455'. [ 1214.787033][T18569] dummy0: entered promiscuous mode [ 1217.101919][T18159] hsr_slave_0: entered promiscuous mode [ 1217.160671][T18159] hsr_slave_1: entered promiscuous mode [ 1217.180584][T18587] fuse: Bad value for 'fd' [ 1217.434421][ T5752] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1217.655482][ T5752] usb 5-1: device descriptor read/64, error -71 [ 1217.944971][ T5752] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1218.025851][ T5770] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1218.037086][T18598] syzkaller0: entered promiscuous mode [ 1218.083640][T18598] syzkaller0: entered allmulticast mode [ 1218.157236][ T5752] usb 5-1: device descriptor read/64, error -71 [ 1218.270810][ T5770] usb 7-1: config 0 has no interfaces? [ 1218.308174][ T5770] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1218.319098][ T5752] usb usb5-port1: attempt power cycle [ 1218.380277][ T5770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.459388][ T5770] usb 7-1: Product: syz [ 1218.499003][ T5770] usb 7-1: Manufacturer: syz [ 1218.531396][ T5770] usb 7-1: SerialNumber: syz [ 1218.581915][ T5770] usb 7-1: config 0 descriptor?? [ 1218.714527][ T5752] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1218.778184][ T5752] usb 5-1: device descriptor read/8, error -71 [ 1218.932518][T17711] usb 7-1: USB disconnect, device number 54 [ 1219.055292][ T5752] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1219.126944][ T5752] usb 5-1: device descriptor read/8, error -71 [ 1219.266443][ T5752] usb usb5-port1: unable to enumerate USB device [ 1219.828676][T18627] UDC core: g1: couldn't find an available UDC or it's busy [ 1220.325591][ T5752] usb 4-1: USB disconnect, device number 55 [ 1222.185438][ T5752] Unregistered device Abilis Systems DVB-Titan [ 1222.216966][T18644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3472'. [ 1222.801663][ T5752] as10x_usb: device has been disconnected [ 1225.225950][T18654] fuse: Bad value for 'fd' [ 1225.894476][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3480'. [ 1226.050317][T18671] netlink: 'syz.3.3480': attribute type 10 has an invalid length. [ 1226.123226][T18669] dummy0: left promiscuous mode [ 1226.160862][T18671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3480'. [ 1226.514611][ T5770] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1226.626800][T18687] UDC core: g1: couldn't find an available UDC or it's busy [ 1226.736233][ T5770] usb 5-1: config 0 has no interfaces? [ 1226.776706][ T5770] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1226.832638][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.897003][ T5770] usb 5-1: Product: syz [ 1226.920817][ T5770] usb 5-1: Manufacturer: syz [ 1226.950756][ T5770] usb 5-1: SerialNumber: syz [ 1226.985151][ T5752] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1226.997370][ T5770] usb 5-1: config 0 descriptor?? [ 1227.057375][T18671] dummy0: entered promiscuous mode [ 1227.174465][ T5752] usb 9-1: Using ep0 maxpacket: 8 [ 1227.207462][ T5752] usb 9-1: config index 0 descriptor too short (expected 260, got 27) [ 1227.253981][ T5752] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.277751][ T9] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1227.316290][ T5752] usb 9-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1227.341388][ T5770] usb 5-1: USB disconnect, device number 83 [ 1227.397552][ T5752] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1227.473954][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.484515][ T5752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.569702][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1227.664119][ T9] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1227.740854][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.779550][T18159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1227.823240][ T5752] usb 9-1: string descriptor 0 read error: -71 [ 1227.879420][ T9] as10x_usb: device has been detected [ 1227.892239][ T5752] usb 9-1: USB disconnect, device number 49 [ 1227.926977][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1227.962048][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1229.195471][T18159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1230.190343][ T9] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1230.241246][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1230.330496][ T9] as10x_usb: error during firmware upload part1 [ 1230.361431][T18159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1230.428281][ T9] Registered device Abilis Systems DVB-Titan [ 1230.466302][ T9] usb 8-1: USB disconnect, device number 57 [ 1230.537383][T18711] UDC core: g1: couldn't find an available UDC or it's busy [ 1230.557098][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1230.622599][T18159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1230.662443][T18716] fuse: Bad value for 'fd' [ 1230.675209][ T9] Unregistered device Abilis Systems DVB-Titan [ 1230.687742][ T9] as10x_usb: device has been disconnected [ 1230.767579][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1231.480088][T18742] netlink: 'syz.8.3491': attribute type 4 has an invalid length. [ 1231.493644][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1231.699241][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1231.777467][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1231.868820][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1231.956891][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.011816][T18159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.070734][ T9] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 1232.148018][ T9] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1232.161203][T18754] UDC core: g1: couldn't find an available UDC or it's busy [ 1232.270285][T18159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.403157][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.410413][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.711581][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.718849][ T6849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.461527][ T9] usb 4-1: USB disconnect, device number 56 [ 1236.451685][T18773] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3501'. [ 1236.719678][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1236.812661][ T9] spcp8x5 4-1:1.0: device disconnected [ 1236.964862][ T5770] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1237.199303][ T5770] usb 9-1: config 0 has no interfaces? [ 1237.259539][ T5770] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1237.269153][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1237.339861][ T5770] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.417983][ T5770] usb 9-1: Product: syz [ 1237.456380][ T5770] usb 9-1: Manufacturer: syz [ 1237.462980][T18790] UDC core: g1: couldn't find an available UDC or it's busy [ 1237.489007][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.517109][ T5770] usb 9-1: SerialNumber: syz [ 1237.587944][ T5770] usb 9-1: config 0 descriptor?? [ 1237.593764][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1237.653413][ T5770] usb 9-1: can't set config #0, error -71 [ 1237.708219][ T9] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1237.723013][ T5770] usb 9-1: USB disconnect, device number 50 [ 1237.796983][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.899824][ T9] as10x_usb: device has been detected [ 1237.960014][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1238.110211][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.188832][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1238.302280][T18801] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3507'. [ 1238.383852][ T9] as10x_usb: error during firmware upload part1 [ 1238.437303][T18801] dummy0: left promiscuous mode [ 1238.478978][ T9] Registered device Abilis Systems DVB-Titan [ 1238.512265][T18807] netlink: 'syz.7.3507': attribute type 10 has an invalid length. [ 1238.703985][T18807] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3507'. [ 1238.810564][T18807] dummy0: entered promiscuous mode [ 1239.397043][T18821] netlink: 'syz.8.3511': attribute type 1 has an invalid length. [ 1239.502099][T18821] netlink: 'syz.8.3511': attribute type 1 has an invalid length. [ 1239.598113][T18821] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3511'. [ 1240.051614][ T5770] usb 4-1: USB disconnect, device number 57 [ 1241.516567][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1241.533932][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1241.543853][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1241.574485][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1241.585599][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1241.711623][ T5770] Unregistered device Abilis Systems DVB-Titan [ 1241.775013][ T5770] as10x_usb: device has been disconnected [ 1242.124935][T17711] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1242.361902][T17711] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1242.442802][T17711] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1242.572937][T17711] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1242.676173][T17711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.831624][T17711] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 1242.937950][T17711] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 1243.184344][ T9] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1243.707645][ T5632] Bluetooth: hci3: command tx timeout [ 1244.801548][T18860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3518'. [ 1245.323771][T18858] UDC core: g1: couldn't find an available UDC or it's busy [ 1245.394558][ T9] usb 8-1: device descriptor read/64, error -71 [ 1245.451809][ T5755] usb 9-1: USB disconnect, device number 51 [ 1245.577375][ T5755] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1245.654808][ T5755] spcp8x5 9-1:1.0: device disconnected [ 1245.680829][ T9] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1245.785405][T11821] Bluetooth: hci3: command tx timeout [ 1245.884995][ T9] usb 8-1: device descriptor read/64, error -71 [ 1246.052697][ T9] usb usb8-port1: attempt power cycle [ 1246.364056][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3524'. [ 1246.532291][T18879] netlink: 'syz.6.3524': attribute type 10 has an invalid length. [ 1246.553615][ T5770] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1246.638113][T18878] dummy0: left promiscuous mode [ 1246.697713][T18879] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3524'. [ 1246.795099][ T5770] usb 9-1: Using ep0 maxpacket: 8 [ 1246.841251][ T5770] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1246.858567][T18879] dummy0: entered promiscuous mode [ 1246.903477][ T5770] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.116411][ T5632] Bluetooth: hci3: command tx timeout [ 1248.150689][ T5770] usb 9-1: config 0 has no interface number 0 [ 1249.098826][ T5770] usb 9-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1249.270846][ T5770] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1249.347981][ T5770] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1249.460197][ T5770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.603791][ T5770] usb 9-1: config 0 descriptor?? [ 1249.668369][ T5770] usb 9-1: can't set config #0, error -71 [ 1249.768373][ T5770] usb 9-1: USB disconnect, device number 52 [ 1250.187282][ T5632] Bluetooth: hci3: command tx timeout [ 1250.544806][ T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1250.758621][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1250.789435][T18926] netlink: 'syz.8.3529': attribute type 4 has an invalid length. [ 1250.802828][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1250.813203][T18928] UDC core: g1: couldn't find an available UDC or it's busy [ 1250.831742][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1250.890741][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.999682][ T9] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 1251.055923][ T9] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 1251.258540][T18933] binder: BINDER_SET_CONTEXT_MGR already set [ 1251.295521][T18933] binder: 18932:18933 ioctl 4018620d 200000004a80 returned -16 [ 1251.314509][ T5770] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1251.476831][ T5770] usb 4-1: device descriptor read/64, error -71 [ 1251.737392][T18940] fuse: Unknown parameter 'fd0x0000000000000003' [ 1251.756380][ T5770] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1251.878144][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3539'. [ 1251.925469][ T5770] usb 4-1: device descriptor read/64, error -71 [ 1252.042808][T18948] netlink: 'syz.7.3539': attribute type 10 has an invalid length. [ 1252.067021][ T5770] usb usb4-port1: attempt power cycle [ 1252.090047][T18948] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3539'. [ 1252.215923][T18947] dummy0: left promiscuous mode [ 1252.232093][T18948] dummy0: entered promiscuous mode [ 1252.328413][T18952] netlink: 'syz.8.3537': attribute type 4 has an invalid length. [ 1252.364569][T17711] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1252.445942][ T5770] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1252.515669][ T5770] usb 4-1: device descriptor read/8, error -71 [ 1252.544411][T17711] usb 7-1: Using ep0 maxpacket: 8 [ 1252.570657][T17711] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1252.602194][T18955] TCP: TCP_TX_DELAY enabled [ 1252.618441][T17711] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.670015][T17711] usb 7-1: config 0 has no interface number 0 [ 1252.707182][T17711] usb 7-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1252.773248][T17711] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1252.794310][ T5770] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1252.810960][T17711] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1252.845375][ T5770] usb 4-1: device descriptor read/8, error -71 [ 1252.856289][T17711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.901353][T17711] usb 7-1: config 0 descriptor?? [ 1252.968170][T17711] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1252.986583][ T5770] usb usb4-port1: unable to enumerate USB device [ 1253.011971][T16933] bridge_slave_1: left allmulticast mode [ 1253.049357][T16933] bridge_slave_1: left promiscuous mode [ 1253.098178][T16933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.157560][ T5770] usb 7-1: USB disconnect, device number 55 [ 1253.177403][T16933] bridge_slave_0: left allmulticast mode [ 1253.414199][T16933] bridge_slave_0: left promiscuous mode [ 1253.459258][T16933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.563390][ T5755] usb 5-1: USB disconnect, device number 84 [ 1253.707798][ T5755] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1253.790811][ T5755] spcp8x5 5-1:1.0: device disconnected [ 1256.515110][T18977] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3545'. [ 1256.865307][ T5770] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1257.048531][T16933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.092382][ T5770] usb 4-1: Using ep0 maxpacket: 32 [ 1257.138547][ T5770] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1257.199094][ T5770] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1257.215500][T16933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.271610][ T5770] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1257.323465][T16933] bond0 (unregistering): Released all slaves [ 1257.372674][ T5770] usb 4-1: config 14 has no interface number 0 [ 1257.450684][ T5770] usb 4-1: config 14 has no interface number 1 [ 1257.522728][ T5770] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1257.788779][ T5770] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1257.942544][ T5770] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1258.081156][ T5770] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1258.133516][T19015] binder: BINDER_SET_CONTEXT_MGR already set [ 1258.229074][T19015] binder: 19013:19015 ioctl 4018620d 200000004a80 returned -16 [ 1258.236857][ T5770] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1258.300897][T16933] hsr_slave_0: left promiscuous mode [ 1258.350984][ T5770] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1258.413692][T16933] hsr_slave_1: left promiscuous mode [ 1258.450817][T16933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.462762][ T5770] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1258.525113][ T5770] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1258.567665][T16933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.605277][ T5770] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1258.665459][T19020] netlink: 'syz.4.3548': attribute type 4 has an invalid length. [ 1258.709730][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.781790][ T5770] usb 4-1: Product: syz [ 1258.826207][ T5770] usb 4-1: Manufacturer: syz [ 1258.840770][T19024] fuse: Unknown parameter 'fd0x0000000000000003' [ 1258.868095][ T5770] usb 4-1: SerialNumber: syz [ 1259.360767][ T5770] legousbtower 4-1:14.57: interrupt endpoints not found [ 1259.757769][ T5770] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1259.801793][ T5770] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1259.957136][T16933] team0 (unregistering): Port device team_slave_1 removed [ 1260.009014][T16933] team0 (unregistering): Port device team_slave_0 removed [ 1260.188933][T19041] comedi comedi3: pcl818: I/O base address or length out of range [ 1260.290903][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1260.410951][T17711] usb 4-1: USB disconnect, device number 62 [ 1260.526984][T17711] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1261.315611][T17711] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1263.187006][T17711] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1263.228736][T18827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.283829][T17711] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1263.300562][T18827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.366818][T18827] bridge_slave_0: entered allmulticast mode [ 1263.386019][T17711] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1263.446479][T18827] bridge_slave_0: entered promiscuous mode [ 1263.477797][T17711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.511590][T18827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.589573][T18827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.608983][T17711] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 1263.656553][T18827] bridge_slave_1: entered allmulticast mode [ 1263.743139][T18827] bridge_slave_1: entered promiscuous mode [ 1263.783177][T17711] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 1264.000826][T19072] UDC core: g1: couldn't find an available UDC or it's busy [ 1264.015458][T17711] usb 7-1: USB disconnect, device number 56 [ 1264.127972][T17711] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1264.205039][T17711] spcp8x5 7-1:1.0: device disconnected [ 1264.287569][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3561'. [ 1264.349969][T18827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.467578][T18827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.968364][T18827] team0: Port device team_slave_0 added [ 1265.259727][T18827] team0: Port device team_slave_1 added [ 1265.556274][T11246] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1265.657027][T18827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.720720][T18827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.798556][T11246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1265.872764][T11246] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1265.962699][T11246] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1265.973646][T18827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.038640][T11246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.068514][T18827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.116036][T18827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.169586][T11246] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 1266.241029][T11246] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 1266.370324][T18827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.975658][T18827] hsr_slave_0: entered promiscuous mode [ 1267.007223][T18827] hsr_slave_1: entered promiscuous mode [ 1267.509251][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3570'. [ 1267.582157][T19123] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3570'. [ 1267.602721][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1268.284737][T11246] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1268.457546][T17711] usb 5-1: USB disconnect, device number 85 [ 1268.497252][T11246] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1268.551970][T11246] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1268.612322][T11246] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1268.684429][T11246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.787138][T17711] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1268.802242][T11246] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 1268.850084][T17711] spcp8x5 5-1:1.0: device disconnected [ 1268.857999][T11246] usb 7-1: SPCP8x5 converter now attached to ttyUSB1 [ 1269.451150][T19149] UDC core: g1: couldn't find an available UDC or it's busy [ 1270.235223][T17711] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1270.444793][T17711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1270.511118][T17711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1270.612142][T17711] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1270.700450][T17711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.818509][T17711] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 1270.924629][T17711] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 1271.165344][T19155] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1271.243394][T19155] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1271.262959][T17711] usb 7-1: USB disconnect, device number 57 [ 1271.373197][T19155] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1271.411252][T17711] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 1271.513124][T17711] spcp8x5 7-1:1.0: device disconnected [ 1271.585488][T19154] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1271.689812][T11246] usb 5-1: USB disconnect, device number 86 [ 1271.832117][T11246] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1271.942522][T11246] spcp8x5 5-1:1.0: device disconnected [ 1272.526488][T19192] netlink: 'syz.3.3589': attribute type 2 has an invalid length. [ 1272.581199][T19197] netlink: 'syz.7.3590': attribute type 1 has an invalid length. [ 1272.729130][T19200] netlink: 'syz.7.3590': attribute type 10 has an invalid length. [ 1272.859453][T19205] UDC core: g1: couldn't find an available UDC or it's busy [ 1272.878361][T19200] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3590'. [ 1273.013631][T19197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1273.096425][T18827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1273.177962][T18827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1273.232676][T18827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1273.339708][T18827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1273.455036][T18827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1273.597035][T18827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1273.623790][T19222] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1273.631387][T19222] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1273.675972][T18827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1273.809865][T18827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1273.917318][T17711] hsr0: entered promiscuous mode [ 1274.672979][T18827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.966553][T18827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.066321][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.073528][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.113961][ T5755] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1275.255556][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.262759][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.328493][ T5755] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1275.392701][ T5755] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1275.490523][ T5755] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1275.598511][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.733132][ T5755] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 1275.903290][ T5755] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1278.052420][ T5755] usb 4-1: USB disconnect, device number 63 [ 1278.259101][ T5755] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1278.365640][ T5755] spcp8x5 4-1:1.0: device disconnected [ 1279.423068][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1279.495544][ T5770] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1279.505113][ T30] audit: type=1326 audit(1785601996.180:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248419e019 code=0x7ffc0000 [ 1279.567601][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1279.656198][T18827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.668794][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1279.750212][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1279.777071][ T5770] usb 4-1: config 0 has no interfaces? [ 1279.835283][ T5770] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1279.845179][ T30] audit: type=1326 audit(1785601996.280:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248419e019 code=0x7ffc0000 [ 1279.877802][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1279.948976][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1279.961171][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.023615][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1280.063548][ T5770] usb 4-1: config 0 descriptor?? [ 1280.109549][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1280.127277][T18827] veth0_vlan: entered promiscuous mode [ 1280.149881][ T30] audit: type=1326 audit(1785601996.280:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248419e019 code=0x7ffc0000 [ 1280.201426][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1280.254121][T18827] veth1_vlan: entered promiscuous mode [ 1280.272202][ T5755] hid-generic 0004:0007:0000.0007: unknown main item tag 0x0 [ 1280.523792][ T5770] usb 4-1: USB disconnect, device number 64 [ 1282.014284][T19310] IPVS: ip_vs_add_dest(): server weight less than zero [ 1282.368611][ T30] audit: type=1326 audit(1785601996.300:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f248415e84e code=0x7ffc0000 [ 1282.560888][T18827] veth0_macvtap: entered promiscuous mode [ 1282.640923][ T5755] hid-generic 0004:0007:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1282.656917][ T30] audit: type=1326 audit(1785601996.300:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248419e019 code=0x7ffc0000 [ 1282.713933][T18827] veth1_macvtap: entered promiscuous mode [ 1282.869164][T18827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.890792][ T30] audit: type=1326 audit(1785601996.300:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248419e019 code=0x7ffc0000 [ 1282.996391][T18827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.038487][T19312] fido_id[19312]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1283.125968][ T989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.139806][ T30] audit: type=1326 audit(1785601996.300:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248419e019 code=0x7ffc0000 [ 1283.239337][ T989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.395275][ T989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.428552][ T30] audit: type=1326 audit(1785601996.320:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248419e019 code=0x7ffc0000 [ 1283.534003][ T989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.663685][T19325] CIFS: Attempting to mount //127.0.0.1/share [ 1283.673969][ T30] audit: type=1326 audit(1785601996.320:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248419e019 code=0x7ffc0000 [ 1283.874346][ T5755] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1283.888363][ T30] audit: type=1326 audit(1785601996.320:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.8.3608" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f248419e019 code=0x7ffc0000 [ 1283.944177][T19325] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1284.059329][T19325] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1284.105296][ T5755] usb 8-1: Using ep0 maxpacket: 32 [ 1284.128274][T16933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.276215][ T5755] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1284.327588][T16933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.395614][ T5755] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1284.513723][ T5755] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1284.593790][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.628622][ T5755] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1284.672509][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.680290][ T5770] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1284.707703][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.756715][T19335] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1284.763239][T19335] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1284.784315][ T5755] usb 8-1: Product: syz [ 1284.801081][ T5755] usb 8-1: Manufacturer: syz [ 1284.833344][ T5755] usb 8-1: SerialNumber: syz [ 1284.890770][ T5770] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1284.901086][ T5755] usb 8-1: config 0 descriptor?? [ 1284.947788][T19324] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1284.973999][ T5770] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1285.019252][ T5755] hub 8-1:0.0: bad descriptor, ignoring hub [ 1285.068065][ T5770] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1285.088167][ T5755] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1285.160443][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.199376][ T5755] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input34 [ 1285.370294][ T5770] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 1285.458486][ T5755] usb 8-1: USB disconnect, device number 61 [ 1285.464951][ C0] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1285.540004][ T5770] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1287.027359][T19369] blktrace: Concurrent blktraces are not allowed on sg0 [ 1287.127362][T11821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1287.141330][T11821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1287.151319][T11821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1287.170316][T11821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1287.180577][T11821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1287.611530][ T5755] usb 4-1: USB disconnect, device number 65 [ 1287.767043][ T5755] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1287.862070][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1287.862089][ T30] audit: type=1800 audit(1785602004.550:276): pid=19382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3626" name="enable" dev="configfs" ino=46955 res=0 errno=0 [ 1287.918035][ T5755] spcp8x5 4-1:1.0: device disconnected [ 1288.063363][T19389] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.3626' resets device [ 1288.528449][ T5755] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1289.311118][T11821] Bluetooth: hci4: command tx timeout [ 1290.645394][ T5770] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1290.676259][ T5755] usb 4-1: Using ep0 maxpacket: 8 [ 1290.710965][ T5755] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1290.771040][T19397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3630'. [ 1290.793192][ T5755] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1291.130484][ T5755] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1291.245305][ T5755] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1291.287851][T19406] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1291.294370][T19406] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1291.363876][ T5755] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1291.387664][T11821] Bluetooth: hci4: command tx timeout [ 1291.476192][ T5755] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1291.570381][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.464347][T11821] Bluetooth: hci4: command tx timeout [ 1293.778403][ T5755] usb 4-1: can't set config #16, error -71 [ 1293.872107][ T5755] usb 4-1: USB disconnect, device number 66 [ 1294.354057][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.214391][T17711] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1295.242339][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.457705][T17711] usb 4-1: Using ep0 maxpacket: 8 [ 1295.522409][T17711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.544559][T11821] Bluetooth: hci4: command tx timeout [ 1295.632980][T17711] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1295.798165][T17711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 1295.831993][T19451] [ 1295.834356][T19451] ====================================================== [ 1295.841374][T19451] WARNING: possible circular locking dependency detected [ 1295.848380][T19451] syzkaller #0 Not tainted [ 1295.852776][T19451] ------------------------------------------------------ [ 1295.859792][T19451] syz.7.3641/19451 is trying to acquire lock: [ 1295.865837][T19451] ffff888024449900 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 1295.877289][T19451] [ 1295.877289][T19451] but task is already holding lock: [ 1295.884637][T19451] ffff88805435c918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 1295.893756][T19451] [ 1295.893756][T19451] which lock already depends on the new lock. [ 1295.893756][T19451] [ 1295.904142][T19451] [ 1295.904142][T19451] the existing dependency chain (in reverse order) is: [ 1295.913138][T19451] [ 1295.913138][T19451] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 1295.920787][T19451] lock_acquire+0x1b9/0x370 [ 1295.925807][T19451] __mutex_lock+0x1a4/0x1bd0 [ 1295.930923][T19451] tcm_set_name+0x29/0xb0 [ 1295.935768][T19451] function_make+0x21c/0x3f0 [ 1295.940979][T19451] configfs_mkdir+0x51e/0xb70 [ 1295.946171][T19451] vfs_mkdir+0x361/0x850 [ 1295.950926][T19451] filename_mkdirat+0x48b/0x5e0 [ 1295.956304][T19451] __x64_sys_mkdir+0x6b/0x90 [ 1295.961424][T19451] do_syscall_64+0x115/0x870 [ 1295.966546][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.972984][T19451] [ 1295.972984][T19451] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1295.981253][T19451] lock_acquire+0x1b9/0x370 [ 1295.986275][T19451] __mutex_lock+0x1a4/0x1bd0 [ 1295.991406][T19451] configfs_rmdir+0x5ae/0x950 [ 1295.996605][T19451] vfs_rmdir+0x328/0x8a0 [ 1296.001370][T19451] filename_rmdir+0x31a/0x5c0 [ 1296.006588][T19451] __x64_sys_rmdir+0x46/0x70 [ 1296.011707][T19451] do_syscall_64+0x115/0x870 [ 1296.016831][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.023255][T19451] [ 1296.023255][T19451] -> #0 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 1296.031968][T19451] check_prev_add+0xeb/0xe60 [ 1296.037074][T19451] __lock_acquire+0x136c/0x1a40 [ 1296.042440][T19451] lock_acquire+0x1b9/0x370 [ 1296.047455][T19451] down_write+0x8b/0x1f0 [ 1296.052224][T19451] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1296.058630][T19451] usbg_make_tpg+0x261/0x620 [ 1296.063745][T19451] target_fabric_make_tpg+0xab/0x8c0 [ 1296.069556][T19451] configfs_mkdir+0x51e/0xb70 [ 1296.074746][T19451] vfs_mkdir+0x361/0x850 [ 1296.079506][T19451] filename_mkdirat+0x48b/0x5e0 [ 1296.084901][T19451] __x64_sys_mkdir+0x6b/0x90 [ 1296.090016][T19451] do_syscall_64+0x115/0x870 [ 1296.095128][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.101539][T19451] [ 1296.101539][T19451] other info that might help us debug this: [ 1296.101539][T19451] [ 1296.111746][T19451] Chain exists of: [ 1296.111746][T19451] &sb->s_type->i_mutex_key#26 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1296.111746][T19451] [ 1296.126496][T19451] Possible unsafe locking scenario: [ 1296.126496][T19451] [ 1296.133944][T19451] CPU0 CPU1 [ 1296.139289][T19451] ---- ---- [ 1296.144632][T19451] lock(&opts->dep_lock); [ 1296.149043][T19451] lock(gadget_subsys.su_mutex); [ 1296.156586][T19451] lock(&opts->dep_lock); [ 1296.163521][T19451] lock(&sb->s_type->i_mutex_key#26); [ 1296.169011][T19451] [ 1296.169011][T19451] *** DEADLOCK *** [ 1296.169011][T19451] [ 1296.177138][T19451] 5 locks held by syz.7.3641/19451: [ 1296.182325][T19451] #0: ffff88801e366450 (sb_writers#15){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1296.191857][T19451] #1: ffff88805348a740 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 1296.202695][T19451] #2: ffffffff8fd8ac68 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 1296.212464][T19451] #3: ffffffff90255f80 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 1296.222238][T19451] #4: ffff88805435c918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 1296.231749][T19451] [ 1296.231749][T19451] stack backtrace: [ 1296.237647][T19451] CPU: 0 UID: 0 PID: 19451 Comm: syz.7.3641 Not tainted syzkaller #0 PREEMPT(full) [ 1296.237688][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1296.237707][T19451] Call Trace: [ 1296.237720][T19451] [ 1296.237735][T19451] dump_stack_lvl+0x100/0x190 [ 1296.237772][T19451] print_circular_bug.cold+0x178/0x1c7 [ 1296.237825][T19451] check_noncircular+0x146/0x160 [ 1296.237861][T19451] check_prev_add+0xeb/0xe60 [ 1296.237894][T19451] __lock_acquire+0x136c/0x1a40 [ 1296.237930][T19451] ? rcu_is_watching+0x12/0xc0 [ 1296.237976][T19451] lock_acquire+0x1b9/0x370 [ 1296.238007][T19451] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 1296.238041][T19451] ? __pfx___might_resched+0x10/0x10 [ 1296.238078][T19451] down_write+0x8b/0x1f0 [ 1296.238121][T19451] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 1296.238153][T19451] ? __pfx_down_write+0x10/0x10 [ 1296.238198][T19451] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1296.238228][T19451] ? __lock_acquire+0x49f/0x1a40 [ 1296.238264][T19451] usbg_make_tpg+0x261/0x620 [ 1296.238303][T19451] ? __pfx_usbg_make_tpg+0x10/0x10 [ 1296.238341][T19451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.238377][T19451] ? find_held_lock+0x2b/0x80 [ 1296.238421][T19451] ? __pfx_usbg_make_tpg+0x10/0x10 [ 1296.238459][T19451] target_fabric_make_tpg+0xab/0x8c0 [ 1296.238511][T19451] configfs_mkdir+0x51e/0xb70 [ 1296.238543][T19451] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 1296.238591][T19451] ? __pfx_configfs_mkdir+0x10/0x10 [ 1296.238624][T19451] ? inode_permission+0x374/0x620 [ 1296.238658][T19451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.238701][T19451] vfs_mkdir+0x361/0x850 [ 1296.238734][T19451] filename_mkdirat+0x48b/0x5e0 [ 1296.238781][T19451] ? __pfx_filename_mkdirat+0x10/0x10 [ 1296.238824][T19451] ? strncpy_from_user+0x19d/0x2d0 [ 1296.238869][T19451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.238903][T19451] ? do_getname+0x191/0x390 [ 1296.238933][T19451] __x64_sys_mkdir+0x6b/0x90 [ 1296.238976][T19451] do_syscall_64+0x115/0x870 [ 1296.239018][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.239049][T19451] RIP: 0033:0x7fedc9f9e019 [ 1296.239073][T19451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.239103][T19451] RSP: 002b:00007fedcae5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1296.239130][T19451] RAX: ffffffffffffffda RBX: 00007fedca225fa0 RCX: 00007fedc9f9e019 [ 1296.239150][T19451] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 1296.239175][T19451] RBP: 00007fedca03500c R08: 0000000000000000 R09: 0000000000000000 [ 1296.239200][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1296.239220][T19451] R13: 00007fedca226038 R14: 00007fedca225fa0 R15: 00007ffcd92516e8 [ 1296.239259][T19451] [ 1296.540211][T17711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.548247][T17711] usb 4-1: Product: syz [ 1296.552397][T17711] usb 4-1: Manufacturer: syz [ 1296.557002][T17711] usb 4-1: SerialNumber: syz SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1296.970109][ T5755] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1296.980310][T17711] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1296.993658][T17711] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1297.009819][T17711] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1297.057248][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.995386][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.263873][ T47] bridge_slave_1: left allmulticast mode [ 1298.276000][ T47] bridge_slave_1: left promiscuous mode [ 1298.297231][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.333357][ T47] bridge_slave_0: left allmulticast mode [ 1298.366539][ T47] bridge_slave_0: left promiscuous mode [ 1298.396143][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.683517][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.711405][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1298.741299][ T47] bond0 (unregistering): Released all slaves [ 1298.780904][ T47] bond1 (unregistering): Released all slaves [ 1298.863311][ T47] tipc: Disabling bearer [ 1298.886988][ T47] tipc: Left network mode [ 1299.007601][ T5770] usb 4-1: USB disconnect, device number 67 [ 1299.041371][ T47] hsr_slave_0: left promiscuous mode [ 1299.056240][ T47] hsr_slave_1: left promiscuous mode [ 1299.086223][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.112449][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.143520][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.202793][ T47] veth0_macvtap: left promiscuous mode [ 1299.218973][ T47] veth1_vlan: left promiscuous mode [ 1299.236574][ T47] veth0_vlan: left promiscuous mode [ 1299.389015][ T47] team0 (unregistering): Port device vlan2 removed [ 1299.549086][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.591112][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1299.620364][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1299.736410][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1300.007940][ T47] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.060962][ T47] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.109987][ T47] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.149815][ T47] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.256912][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.299865][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.348702][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.416420][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.519978][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1300.596686][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.650918][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.690004][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.730074][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.847756][ T47] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.898102][ T47] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.937459][ T47] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.958846][ T47] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.111338][ T47] bridge_slave_1: left allmulticast mode [ 1301.127973][ T47] bridge_slave_1: left promiscuous mode [ 1301.146020][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.158142][ T47] bridge_slave_0: left allmulticast mode [ 1301.175107][ T47] bridge_slave_0: left promiscuous mode [ 1301.182042][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.288944][ T47] bridge_slave_1: left allmulticast mode [ 1301.294978][ T47] bridge_slave_1: left promiscuous mode [ 1301.300647][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.309427][ T47] bridge_slave_0: left allmulticast mode [ 1301.315485][ T47] bridge_slave_0: left promiscuous mode [ 1301.321141][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.375549][ T47] bridge_slave_1: left allmulticast mode [ 1301.381210][ T47] bridge_slave_1: left promiscuous mode [ 1301.389390][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.422243][ T47] bridge_slave_0: left allmulticast mode [ 1301.429070][ T47] bridge_slave_0: left promiscuous mode [ 1301.435344][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.480936][ T47] bridge_slave_1: left allmulticast mode [ 1301.486818][ T47] bridge_slave_1: left promiscuous mode [ 1301.492497][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.501121][ T47] bridge_slave_0: left allmulticast mode [ 1301.507108][ T47] bridge_slave_0: left promiscuous mode [ 1301.513235][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.953005][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.967014][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1301.976754][ T47] bond0 (unregistering): Released all slaves [ 1301.985856][ T47] bond1 (unregistering): Released all slaves [ 1301.999253][ T47] bond2 (unregistering): Released all slaves [ 1302.010244][ T47] bond3 (unregistering): Released all slaves [ 1302.023982][ T47] bond4 (unregistering): Released all slaves [ 1302.100915][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.117698][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.127227][ T47] bond0 (unregistering): Released all slaves [ 1302.140246][ T47] bond1 (unregistering): Released all slaves [ 1302.152901][ T47] bond2 (unregistering): Released all slaves [ 1302.204916][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.216946][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.226624][ T47] bond0 (unregistering): Released all slaves [ 1302.349229][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.366253][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.380758][ T47] bond0 (unregistering): Released all slaves [ 1302.390156][ T47] bond1 (unregistering): Released all slaves [ 1302.401274][ T47] bond2 (unregistering): Released all slaves [ 1302.415235][ T47] bond3 (unregistering): Released all slaves [ 1302.430100][ T47] bond4 (unregistering): Released all slaves [ 1302.441244][ T47] bond5 (unregistering): Released all slaves [ 1302.455831][ T5283] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1302.548176][ T47] tipc: Disabling bearer [ 1302.570999][ T47] tipc: Left network mode [ 1302.585475][ T47] tipc: Disabling bearer [ 1302.608068][ T47] tipc: Left network mode [ 1302.929475][ T47] hsr_slave_0: left promiscuous mode [ 1302.951305][ T47] hsr_slave_1: left promiscuous mode [ 1302.961097][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.994662][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.014002][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.049105][ T47] hsr_slave_0: left promiscuous mode [ 1303.074686][ T47] hsr_slave_1: left promiscuous mode [ 1303.095472][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.115904][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.138143][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.160498][ T47] hsr_slave_0: left promiscuous mode [ 1303.174731][ T47] hsr_slave_1: left promiscuous mode [ 1303.181926][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.199301][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.217836][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.234543][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.256934][ T47] hsr_slave_0: left promiscuous mode [ 1303.269539][ T47] hsr_slave_1: left promiscuous mode [ 1303.284932][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.299786][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.317887][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.362249][ T47] veth1_macvtap: left promiscuous mode [ 1303.378417][ T47] veth0_macvtap: left promiscuous mode [ 1303.395256][ T47] veth1_vlan: left promiscuous mode [ 1303.401783][ T47] veth0_vlan: left promiscuous mode [ 1303.415050][ T47] veth0_macvtap: left promiscuous mode [ 1303.422019][ T47] veth1_vlan: left promiscuous mode [ 1303.435376][ T47] veth0_vlan: left promiscuous mode [ 1303.446189][ T47] veth1_macvtap: left promiscuous mode [ 1303.451677][ T47] veth0_macvtap: left promiscuous mode [ 1303.459260][ T47] veth1_vlan: left promiscuous mode [ 1303.469095][ T47] veth0_vlan: left promiscuous mode [ 1303.475242][ T47] veth0_macvtap: left promiscuous mode [ 1303.480771][ T47] veth1_vlan: left promiscuous mode [ 1303.488820][ T47] veth0_vlan: left promiscuous mode [ 1303.755681][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1303.768875][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1303.911869][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1303.930031][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1304.079448][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1304.095195][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1304.172188][ T47] team0 (unregistering): Port device vlan2 removed [ 1304.249940][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1304.267888][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1304.337576][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1304.840419][ T47] IPVS: stop unused estimator thread 0... [ 1305.144568][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1305.527461][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18