last executing test programs: 2m21.134516829s ago: executing program 1 (id=4247): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x70, &(0x7f0000000100)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x4e, 0x0, @gue={{0x2, 0x1, 0x0, 0x9}, "ea1a7680ead451af971d9215c257b8d3938c1360f96cce51a57257858690883963e7ae6ccb44e8d5dab7d1b43702873919f699b37853b7a4ad1749d87f99"}}}}}}, 0x0) 2m21.041289693s ago: executing program 1 (id=4248): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}}, 0x14}}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_io_uring_setup(0xb5c, 0x0, 0x0, &(0x7f0000000200)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 2m20.92395928s ago: executing program 1 (id=4251): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 2m20.82584983s ago: executing program 1 (id=4253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m20.732141121s ago: executing program 1 (id=4256): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m20.498518391s ago: executing program 1 (id=4262): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 2m4.970745718s ago: executing program 32 (id=4262): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 9.374008289s ago: executing program 5 (id=4937): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x88c02) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x7e9b, 0x0, 0x1, 0x164}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) creat(&(0x7f0000000100)='./bus\x00', 0x1b) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 7.320485944s ago: executing program 3 (id=4938): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) 7.266095077s ago: executing program 4 (id=4939): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.097264226s ago: executing program 4 (id=4942): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000001c0)={0x40, 0x12, 0x4, "a56aa79c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0xbb}, 0x0}) 7.074814018s ago: executing program 3 (id=4943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000002400)="8000", 0x2, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0x3}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 6.742818823s ago: executing program 5 (id=4946): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0xf4) 6.678653792s ago: executing program 3 (id=4947): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfff, 0x4) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) 6.604322739s ago: executing program 5 (id=4948): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 6.510598395s ago: executing program 3 (id=4949): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="120101f5b94c6120c80a23038fa701"], &(0x7f0000008700)={0x0, 0x0, 0x0, 0x0}) 6.438514387s ago: executing program 5 (id=4950): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x615}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 5.342189552s ago: executing program 2 (id=4951): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.129889943s ago: executing program 4 (id=4952): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.971393454s ago: executing program 4 (id=4953): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) 3.319788877s ago: executing program 0 (id=4954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x1c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x9c3535b2955dac0c}, 0x20000884) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044890}, 0x20000000) 3.266658265s ago: executing program 3 (id=4955): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840) 2.867709195s ago: executing program 5 (id=4956): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) 2.813803082s ago: executing program 4 (id=4957): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x10000, 0xd304}, 0x10000, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x80000001, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r11, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x6}) r12 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') read$FUSE(r12, &(0x7f00000025c0)={0x2020}, 0x2020) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r14, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.808722696s ago: executing program 0 (id=4958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000002400)="8000", 0x2, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0x3}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2.577627862s ago: executing program 4 (id=4959): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.366766658s ago: executing program 0 (id=4960): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 2.286109217s ago: executing program 0 (id=4961): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x7, 0x0}) 2.21716626s ago: executing program 2 (id=4962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f6873"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 1.715563043s ago: executing program 2 (id=4963): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.428150746s ago: executing program 2 (id=4964): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040814) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) 1.425711531s ago: executing program 5 (id=4965): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000e80)={0x20}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x0, 0x6, 0x2, "c364"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.410490134s ago: executing program 3 (id=4966): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) 257.969218ms ago: executing program 0 (id=4967): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) 114.84677ms ago: executing program 2 (id=4968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 86.04447ms ago: executing program 0 (id=4969): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x10000, 0xd304}, 0x10000, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x80000001, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r11, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x6}) r12 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') read$FUSE(r12, &(0x7f00000025c0)={0x2020}, 0x2020) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r14, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=4970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x400}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x909}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x34, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}, {0x0}], 0x2, 0x1a, 0x20f5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): mpat=1 ip=0xf701ef6c code=0x7ffc0000 [ 601.954809][T16588] netlink: 64399 bytes leftover after parsing attributes in process `syz.4.4368'. [ 601.994884][ T30] audit: type=1326 audit(1773425166.931:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 602.187393][ T30] audit: type=1326 audit(1773425166.931:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 602.294661][ T30] audit: type=1326 audit(1773425166.931:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 602.360544][ T30] audit: type=1326 audit(1773425166.931:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 602.419145][T16591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4370'. [ 602.459546][ T30] audit: type=1326 audit(1773425166.931:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 602.493295][T16591] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4370'. [ 602.734735][ T30] audit: type=1326 audit(1773425166.931:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 602.798589][ T30] audit: type=1326 audit(1773425166.931:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 602.871286][ T30] audit: type=1326 audit(1773425166.931:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 602.924628][ T30] audit: type=1326 audit(1773425166.931:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 603.365188][T15263] Bluetooth: hci3: command tx timeout [ 605.444891][T15263] Bluetooth: hci3: command tx timeout [ 605.450716][T16344] syz_tun (unregistering): left promiscuous mode [ 605.697057][T16602] fuse: Bad value for 'fd' [ 605.845467][T16610] netlink: 'syz.2.4378': attribute type 1 has an invalid length. [ 605.873517][T16610] netlink: 64399 bytes leftover after parsing attributes in process `syz.2.4378'. [ 605.930399][T16578] chnl_net:caif_netlink_parms(): no params data found [ 606.071251][T16614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4381'. [ 606.093063][T16614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4381'. [ 606.146248][ T8146] hid_parser_main: 25 callbacks suppressed [ 606.146274][ T8146] hid-generic 0000:0003:0001.0022: unknown main item tag 0x0 [ 606.194676][ T8146] hid-generic 0000:0003:0001.0022: unknown main item tag 0x0 [ 606.234568][ T8146] hid-generic 0000:0003:0001.0022: hidraw0: HID v0.03 Device [syz0] on syz1 [ 606.452130][T16620] syzkaller0: entered promiscuous mode [ 606.530940][T16620] syzkaller0: entered allmulticast mode [ 606.626912][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 606.792207][ T29] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 606.880642][T16634] fuse: Bad value for 'fd' [ 606.962548][T16636] netlink: 'syz.2.4388': attribute type 1 has an invalid length. [ 606.973838][T16636] netlink: 64399 bytes leftover after parsing attributes in process `syz.2.4388'. [ 606.978703][ T29] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.009860][ T29] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.021566][ T29] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.031841][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.063408][T16638] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4389'. [ 607.083016][T16628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 607.107016][ T29] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.379613][ T8153] usb 1-1: USB disconnect, device number 5 [ 607.530858][T15263] Bluetooth: hci3: command tx timeout [ 608.212253][T16644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4392'. [ 608.235374][T16644] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4392'. [ 609.577541][T16578] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.586582][T16578] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.595501][T16578] bridge_slave_0: entered allmulticast mode [ 609.604196][T16578] bridge_slave_0: entered promiscuous mode [ 609.604808][T15263] Bluetooth: hci3: command tx timeout [ 609.645144][T16578] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.702956][T16578] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.736886][T16578] bridge_slave_1: entered allmulticast mode [ 609.756156][T16578] bridge_slave_1: entered promiscuous mode [ 609.775520][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4394'. [ 609.888700][T16578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.922025][T16578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.926870][T16656] fuse: Bad value for 'fd' [ 610.043120][T16578] team0: Port device team_slave_0 added [ 610.053418][T16578] team0: Port device team_slave_1 added [ 610.111188][T16578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.123326][T16578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.158629][T16578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.159071][T16664] loop3: detected capacity change from 0 to 7 [ 610.175214][T16578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.190976][T16578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.227914][T16664] Dev loop3: unable to read RDB block 7 [ 610.234212][T16664] loop3: AHDI p3 p4 [ 610.234855][T16578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.240584][T16664] loop3: partition table partially beyond EOD, truncated [ 610.260071][T16664] loop3: p3 start 1702000233 is beyond EOD, truncated [ 610.314585][ T933] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 610.363673][T16578] hsr_slave_0: entered promiscuous mode [ 610.378893][T16578] hsr_slave_1: entered promiscuous mode [ 610.484313][ T933] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 610.500709][ T933] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 610.514204][ T933] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 610.525454][ T933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.541384][T16662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 610.563938][ T933] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 610.664929][ T8153] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 610.777509][ T933] usb 1-1: USB disconnect, device number 6 [ 610.830759][ T8153] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 610.848144][ T8153] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 610.872265][ T8153] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 610.896745][ T8153] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.938540][ T8153] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 610.970853][ T8153] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 611.011976][ T8153] usb 5-1: Product: syz [ 611.017731][ T8153] usb 5-1: Manufacturer: syz [ 611.040080][T16578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 611.067021][ T8153] cdc_wdm 5-1:1.0: skipping garbage [ 611.081341][ T8153] cdc_wdm 5-1:1.0: skipping garbage [ 611.091278][ T8153] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 611.100827][T16578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 611.149741][T16578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 611.175334][T16578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 611.284089][ T8146] usb 5-1: USB disconnect, device number 7 [ 611.336258][T16697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4415'. [ 611.345883][T16697] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4415'. [ 611.430690][T16578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.493807][T16578] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.532362][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.541108][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.578938][T12490] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.586837][T12490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.753209][T16578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.811592][T16578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.940688][T16578] veth0_vlan: entered promiscuous mode [ 611.977291][T16578] veth1_vlan: entered promiscuous mode [ 612.068336][T16578] veth0_macvtap: entered promiscuous mode [ 612.103950][T16578] veth1_macvtap: entered promiscuous mode [ 612.134230][T16723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4427'. [ 612.152786][T16723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4427'. [ 612.183733][T16578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.202851][T16578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.253479][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.274932][ T933] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 612.287218][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.347207][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.376599][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.479563][ T933] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.506582][ T933] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 612.536539][ T933] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.561797][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.581553][T16727] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4429'. [ 612.592350][T16719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 612.608099][T12483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.635417][ T933] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.651983][T12483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.904382][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.920848][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.949428][ T8146] usb 3-1: USB disconnect, device number 123 [ 613.407102][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4362'. [ 613.727197][T16756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4439'. [ 613.759007][T16756] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4439'. [ 614.674682][ T8153] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 614.837444][ T8153] usb 3-1: Using ep0 maxpacket: 16 [ 614.852958][ T8153] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.874577][ T8153] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.926442][ T8153] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.951425][ T8153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.962651][ T8153] usb 3-1: Product: syz [ 614.967159][ T8153] usb 3-1: Manufacturer: syz [ 614.972714][ T8153] usb 3-1: SerialNumber: syz [ 615.024906][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 615.037358][ T933] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 615.194905][ T933] usb 4-1: Using ep0 maxpacket: 16 [ 615.205526][ T933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.223950][ T8153] usb 3-1: 0:2 : does not exist [ 615.231841][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 615.270779][ T933] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 615.283207][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.302887][ T10] usb 6-1: Product: syz [ 615.308836][ T933] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 615.318518][ T5834] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 615.327551][ T8153] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 615.338290][ T933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.351802][ T10] usb 6-1: Manufacturer: syz [ 615.389361][ T10] usb 6-1: SerialNumber: syz [ 615.394527][ T933] usb 4-1: Product: syz [ 615.409122][ T933] usb 4-1: Manufacturer: syz [ 615.438004][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 615.459247][ T933] usb 4-1: SerialNumber: syz [ 615.504056][ T5834] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 615.534160][T15432] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 615.544041][ T8153] usb 3-1: USB disconnect, device number 124 [ 615.562834][ T5834] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 615.665819][ T5834] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 615.681111][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.754979][ T933] usb 4-1: USB disconnect, device number 25 [ 616.121701][ T10] usb 6-1: USB disconnect, device number 2 [ 616.199650][T16792] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 616.211043][ T5834] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 616.242258][T15012] udevd[15012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.428454][T16806] netlink: 308 bytes leftover after parsing attributes in process `syz.4.4456'. [ 616.482335][ T933] usb 1-1: USB disconnect, device number 7 [ 616.654661][T15432] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 616.663518][T15432] ath9k_htc: Failed to initialize the device [ 616.680140][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 617.405724][T16825] fuse: Unknown parameter 'grou00000000000000000000' [ 617.637845][T16836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4468'. [ 617.651875][T16836] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4468'. [ 617.691473][T16839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4469'. [ 617.875012][ T8146] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 618.034565][ T8146] usb 6-1: Using ep0 maxpacket: 16 [ 618.041844][ T8146] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.056692][ T8146] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 618.118134][ T933] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 618.194977][T16857] tipc: Started in network mode [ 618.200013][T16857] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 618.214573][T16857] tipc: Enabled bearer , priority 10 [ 618.318302][T16859] fuse: Unknown parameter 'grou00000000000000000000' [ 618.379631][ T8146] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 618.388353][ T933] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.389339][ T8146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.401125][ T933] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 618.494583][T15432] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 618.503025][ T8146] usb 6-1: Product: syz [ 618.512878][ T8146] usb 6-1: Manufacturer: syz [ 618.534622][ T933] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.545604][ T8146] usb 6-1: SerialNumber: syz [ 618.589571][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.648254][T16849] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 618.672330][T15432] usb 1-1: Using ep0 maxpacket: 16 [ 618.687411][ T933] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.710524][T15432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.767734][T15432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.829680][T15432] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.850194][ T8146] usb 6-1: USB disconnect, device number 3 [ 618.947104][T15432] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 619.010271][T15432] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.069638][T15432] usb 1-1: config 0 descriptor?? [ 619.283605][ T8146] usb 3-1: USB disconnect, device number 125 [ 619.385542][ T10] tipc: Node number set to 4269801491 [ 619.556248][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x0 [ 619.565967][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x0 [ 619.577298][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 619.587628][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x0 [ 619.598360][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x0 [ 619.625069][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x0 [ 619.650407][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x0 [ 619.665466][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x0 [ 619.687279][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x4 [ 619.732119][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x0 [ 619.744639][T15432] waterforce 0003:1044:7A4D.0023: unknown main item tag 0x0 [ 619.895570][T15432] waterforce 0003:1044:7A4D.0023: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 619.929285][T16879] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4484'. [ 620.072854][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 620.095206][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.122043][ T10] usb 5-1: Product: syz [ 620.145940][T15432] waterforce 0003:1044:7A4D.0023: fw version request failed with -38 [ 620.159037][ T10] usb 5-1: Manufacturer: syz [ 620.193456][ T10] usb 5-1: SerialNumber: syz [ 620.769254][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 620.823646][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 621.244652][ T8153] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 621.311038][T16898] loop3: detected capacity change from 0 to 7 [ 621.333367][T15012] Dev loop3: unable to read RDB block 7 [ 621.350457][T15012] loop3: AHDI p2 p3 p4 [ 621.361379][T15012] loop3: partition table partially beyond EOD, truncated [ 621.372410][T15012] loop3: p2 start 1802071854 is beyond EOD, truncated [ 621.380450][T15012] loop3: p3 start 1702000233 is beyond EOD, truncated [ 621.392025][T16898] Dev loop3: unable to read RDB block 7 [ 621.398823][T16898] loop3: AHDI p2 p3 p4 [ 621.403559][T16898] loop3: partition table partially beyond EOD, truncated [ 621.411802][T16898] loop3: p2 start 1802071854 is beyond EOD, truncated [ 621.478411][T16898] loop3: p3 start 1702000233 is beyond EOD, truncated [ 621.854611][ T29] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 621.984844][ T29] usb 4-1: device descriptor read/64, error -71 [ 621.994568][ T5834] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 622.167905][ T5834] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 622.178343][ T5834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.193307][ T5834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 622.203369][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.223273][ T5834] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 622.224536][ T29] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 622.234684][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 622.255732][ T5834] usb 3-1: Product: syz [ 622.260230][ T5834] usb 3-1: Manufacturer: syz [ 622.275908][ T5834] cdc_wdm 3-1:1.0: skipping garbage [ 622.283789][ T5834] cdc_wdm 3-1:1.0: skipping garbage [ 622.293498][ T5834] cdc_wdm 3-1:1.0: skipping garbage [ 622.301338][ T5834] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 622.384628][ T29] usb 4-1: device descriptor read/64, error -71 [ 622.422731][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 622.422749][ T30] audit: type=1326 audit(1773425187.431:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.457416][ T30] audit: type=1326 audit(1773425187.431:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.484250][ T30] audit: type=1326 audit(1773425187.471:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.515345][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 622.530798][ T29] usb usb4-port1: attempt power cycle [ 622.542468][ T30] audit: type=1326 audit(1773425187.471:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.573423][ T30] audit: type=1326 audit(1773425187.471:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.580098][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 622.599668][ T30] audit: type=1326 audit(1773425187.471:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.623481][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 622.659026][ T5834] usb 3-1: USB disconnect, device number 126 [ 622.669906][ T30] audit: type=1326 audit(1773425187.471:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.696001][ T30] audit: type=1326 audit(1773425187.471:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.724022][ T30] audit: type=1326 audit(1773425187.471:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.750000][ T30] audit: type=1326 audit(1773425187.471:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 622.777105][T15432] usb 1-1: USB disconnect, device number 8 [ 622.802059][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 622.838138][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 622.852087][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 622.861714][T16914] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4497'. [ 622.868447][ T10] usb 5-1: USB disconnect, device number 8 [ 622.924582][ T29] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 622.946634][ T29] usb 4-1: device descriptor read/8, error -71 [ 623.194607][ T29] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 623.225202][ T29] usb 4-1: device descriptor read/8, error -71 [ 623.342196][ T29] usb usb4-port1: unable to enumerate USB device [ 623.824766][ T29] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 623.946081][T15432] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 623.993390][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 624.006338][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.022552][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.077774][ T29] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 624.088133][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.097363][ T29] usb 3-1: Product: syz [ 624.102041][ T29] usb 3-1: Manufacturer: syz [ 624.110699][ T29] usb 3-1: SerialNumber: syz [ 624.144396][T15432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.183337][T15432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.221879][T15432] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.296979][T15432] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.312069][T15432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.341111][ T29] usb 3-1: USB disconnect, device number 127 [ 624.356393][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 624.370218][T15432] usb 5-1: config 0 descriptor?? [ 624.534540][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 624.542255][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 624.564970][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.578097][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.599800][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 624.629983][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 624.670568][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 624.703109][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.750681][ T10] usb 1-1: config 0 descriptor?? [ 624.767064][T16948] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 624.808815][T15432] hid_parser_main: 23 callbacks suppressed [ 624.808838][T15432] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 624.838281][T15432] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 624.849995][T15432] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 624.858668][T15432] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 624.871227][T15432] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 624.880530][T15432] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 624.889708][T15432] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 624.898460][T15432] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 624.906761][T15432] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 624.927939][T15432] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 625.022705][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.032166][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.040047][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.047981][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.055266][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.063642][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.073502][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.082675][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.090633][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.098628][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.106663][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.114702][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.122535][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.134145][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.141950][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.148387][ T8144] usb 5-1: USB disconnect, device number 9 [ 625.149501][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.163011][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.172587][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.181610][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.189664][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.198463][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.206207][ T5828] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 625.214582][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 625.230242][T15263] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 625.230539][ T8146] usb 1-1: USB disconnect, device number 9 [ 625.270748][T16957] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4515'. [ 625.287066][T16953] fido_id[16953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 625.347085][T16957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4515'. [ 625.361409][T16957] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.457636][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 625.475436][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.492389][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 625.502670][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.518210][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 625.529299][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 625.546686][ T29] usb 6-1: Product: syz [ 625.551455][ T29] usb 6-1: Manufacturer: syz [ 625.567312][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 625.577820][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 625.585023][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 625.590280][ T29] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 625.784722][ T10] usb 6-1: USB disconnect, device number 4 [ 625.864527][T15432] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 626.044648][T15432] usb 3-1: unable to get BOS descriptor or descriptor too short [ 626.061432][T15432] usb 3-1: not running at top speed; connect to a high speed hub [ 626.077290][T15432] usb 3-1: config index 0 descriptor too short (expected 28771, got 10) [ 626.090718][T15432] usb 3-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 626.106517][T15432] usb 3-1: config 114 descriptor has 1 excess byte, ignoring [ 626.120676][T15432] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 626.132872][T15432] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 626.143044][T15432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.151688][T15432] usb 3-1: Product: syz [ 626.156373][T15432] usb 3-1: Manufacturer: syz [ 626.161826][T15432] usb 3-1: SerialNumber: syz [ 626.174618][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 626.294719][ T8146] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 626.314648][ T29] usb 1-1: device descriptor read/64, error -71 [ 626.390778][T15432] usb 3-1: USB disconnect, device number 2 [ 626.454566][ T8146] usb 4-1: Using ep0 maxpacket: 16 [ 626.463668][ T8146] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.482241][ T8146] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 626.510060][ T8146] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 626.527603][ T8146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.555465][ T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 626.564570][ T8146] usb 4-1: Product: syz [ 626.586598][ T8146] usb 4-1: Manufacturer: syz [ 626.591605][ T8146] usb 4-1: SerialNumber: syz [ 626.716598][ T29] usb 1-1: device descriptor read/64, error -71 [ 626.726882][T16984] syzkaller0: entered promiscuous mode [ 626.733403][T16984] syzkaller0: entered allmulticast mode [ 626.835889][ T29] usb usb1-port1: attempt power cycle [ 626.852492][ T8146] usb 4-1: USB disconnect, device number 30 [ 627.084628][ T5834] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 627.195193][ T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 627.227068][ T29] usb 1-1: device descriptor read/8, error -71 [ 627.259742][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 627.267411][ T5834] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.278607][ T5834] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 627.288197][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.307999][ T5834] usb 6-1: config 0 descriptor?? [ 627.323624][ T5834] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 627.464614][ T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 627.496785][ T29] usb 1-1: device descriptor read/8, error -71 [ 627.615119][ T29] usb usb1-port1: unable to enumerate USB device [ 627.784511][T15432] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 627.954527][T15432] usb 4-1: Using ep0 maxpacket: 32 [ 627.964080][T15432] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 627.979676][T15432] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 627.993788][T15432] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.007081][T15432] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 628.024050][T15432] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 628.035101][T15432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.045649][T15432] usb 4-1: Product: syz [ 628.050204][T15432] usb 4-1: Manufacturer: syz [ 628.055268][T15432] usb 4-1: SerialNumber: syz [ 628.098159][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 628.111090][T15432] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input99 [ 628.304969][T15432] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 628.313792][T15432] (id 0x00) [ 628.394682][T15432] rc_core: IR keymap rc-imon-pad not found [ 628.400703][T15432] Registered IR keymap rc-empty [ 628.407003][T15432] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 628.418180][T15432] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 628.536617][T15432] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 628.561956][ T5834] gspca_vc032x: reg_w err -71 [ 628.570665][ T5834] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 628.604017][ T5834] usb 6-1: USB disconnect, device number 5 [ 628.612160][T15432] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input100 [ 628.660470][T15432] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:31> initialized [ 629.934111][T16991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4529'. [ 630.151838][ T5834] usb 4-1: USB disconnect, device number 31 [ 630.158550][T17007] imon:send_packet: packet tx failed (-71) [ 630.164673][ T8146] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 630.194844][T17007] imon:vfd_write: send packet #4 failed [ 630.326164][ T8146] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 630.338249][ T8146] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.362126][T17024] fuse: Unknown parameter 'group_id00000000000000000000' [ 630.383147][ T8146] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 630.423570][T17026] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4542'. [ 630.424677][ T8146] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.512004][ T8146] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 630.522515][ T8146] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 630.531751][ T8146] usb 6-1: Product: syz [ 630.542246][ T8146] usb 6-1: Manufacturer: syz [ 630.552061][ T8146] cdc_wdm 6-1:1.0: skipping garbage [ 630.558898][ T8146] cdc_wdm 6-1:1.0: skipping garbage [ 630.565449][ T8146] cdc_wdm 6-1:1.0: skipping garbage [ 630.571164][ T8146] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 630.690522][T17034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4546'. [ 630.771360][T15432] usb 6-1: USB disconnect, device number 6 [ 630.903976][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.912519][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.022355][T17048] fuse: Unknown parameter 'group_id00000000000000000000' [ 631.168497][T17051] loop3: detected capacity change from 0 to 7 [ 631.178777][T15012] Dev loop3: unable to read RDB block 7 [ 631.184941][T15012] loop3: AHDI p3 p4 [ 631.189131][T15012] loop3: partition table partially beyond EOD, truncated [ 631.209361][T15012] loop3: p3 start 1702000233 is beyond EOD, truncated [ 631.230417][T17051] Dev loop3: unable to read RDB block 7 [ 631.253927][T17051] loop3: AHDI p3 p4 [ 631.260139][T17051] loop3: partition table partially beyond EOD, truncated [ 631.273300][T17051] loop3: p3 start 1702000233 is beyond EOD, truncated [ 631.716701][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4561'. [ 631.826043][T17061] syzkaller0: entered promiscuous mode [ 631.831978][T17061] syzkaller0: entered allmulticast mode [ 632.073534][T15263] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 632.312907][T17082] loop3: detected capacity change from 0 to 7 [ 632.351244][T17082] Dev loop3: unable to read RDB block 7 [ 632.368711][T17082] loop3: AHDI p3 p4 [ 632.375555][T17082] loop3: partition table partially beyond EOD, truncated [ 632.383619][T17082] loop3: p3 start 1702000233 is beyond EOD, truncated [ 633.481165][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 633.481183][ T30] audit: type=1326 audit(1773425198.491:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 633.512886][ T30] audit: type=1326 audit(1773425198.491:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 633.537290][ T30] audit: type=1326 audit(1773425198.501:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 633.560915][ T30] audit: type=1326 audit(1773425198.501:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 633.586986][ T30] audit: type=1326 audit(1773425198.501:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 633.610128][ T30] audit: type=1326 audit(1773425198.531:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 633.634382][ T30] audit: type=1326 audit(1773425198.531:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 633.666082][ T30] audit: type=1326 audit(1773425198.531:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 633.690748][ T30] audit: type=1326 audit(1773425198.531:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 633.713624][ T30] audit: type=1326 audit(1773425198.531:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 635.354843][ T8146] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 635.374682][ T8153] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 635.468614][T17121] syzkaller0: entered promiscuous mode [ 635.475396][T17121] syzkaller0: entered allmulticast mode [ 635.514645][ T8146] usb 6-1: Using ep0 maxpacket: 32 [ 635.523625][ T8146] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 635.533525][ T8146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.544220][ T8153] usb 3-1: Using ep0 maxpacket: 16 [ 635.549879][T15432] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 635.550198][ T8146] usb 6-1: config 0 descriptor?? [ 635.559867][ T8153] usb 3-1: config 1 interface 0 has no altsetting 0 [ 635.610714][ T8153] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40 [ 635.621652][ T8153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.640775][ T8153] usb 3-1: Product: syz [ 635.645421][ T8153] usb 3-1: Manufacturer: syz [ 635.650021][ T8153] usb 3-1: SerialNumber: syz [ 635.704742][T15432] usb 5-1: device descriptor read/64, error -71 [ 635.888001][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 635.902591][ T8153] usbhid 3-1:1.0: can't add hid device: -71 [ 635.909579][ T8153] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 635.922683][ T8153] usb 3-1: USB disconnect, device number 3 [ 635.983741][T15432] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 636.022735][ T8146] usb 6-1: string descriptor 0 read error: -71 [ 636.044857][ T8146] gspca_main: sunplus-2.14.0 probing 041e:400b [ 636.051966][ T8146] gspca_sunplus: reg_w_riv err -71 [ 636.057691][ T8146] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 636.076037][ T8146] usb 6-1: USB disconnect, device number 7 [ 636.141420][T15432] usb 5-1: device descriptor read/64, error -71 [ 636.254824][T15432] usb usb5-port1: attempt power cycle [ 636.596305][T15432] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 636.636536][T15432] usb 5-1: device descriptor read/8, error -71 [ 636.904676][T15432] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 636.970312][T15432] usb 5-1: device descriptor read/8, error -71 [ 637.098103][T15432] usb usb5-port1: unable to enumerate USB device [ 638.516937][T17148] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4591'. [ 638.555562][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 638.555582][ T30] audit: type=1326 audit(1773425203.551:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 638.633667][ T30] audit: type=1326 audit(1773425203.551:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 638.702693][ T30] audit: type=1326 audit(1773425203.551:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 638.837360][ T30] audit: type=1326 audit(1773425203.551:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 638.934557][ T30] audit: type=1326 audit(1773425203.551:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 639.015475][ T8153] hid-generic 0000:0003:0001.0025: unknown main item tag 0x0 [ 639.023375][ T8153] hid-generic 0000:0003:0001.0025: unknown main item tag 0x0 [ 639.031766][ T30] audit: type=1326 audit(1773425203.551:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 639.117022][ T8153] hid-generic 0000:0003:0001.0025: hidraw0: HID v0.03 Device [syz0] on syz1 [ 639.146765][ T30] audit: type=1326 audit(1773425203.551:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 639.184055][T17161] syzkaller0: entered promiscuous mode [ 639.236219][T17161] syzkaller0: entered allmulticast mode [ 639.259325][ T30] audit: type=1326 audit(1773425203.551:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 639.320126][ T30] audit: type=1326 audit(1773425203.551:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 639.360417][T17175] netlink: 'syz.5.4601': attribute type 6 has an invalid length. [ 639.375108][T17175] netlink: 'syz.5.4601': attribute type 7 has an invalid length. [ 639.383490][T17175] netlink: 'syz.5.4601': attribute type 8 has an invalid length. [ 639.401144][ T30] audit: type=1326 audit(1773425203.551:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 639.582186][ T8153] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 639.733421][T17184] fuse: Bad value for 'fd' [ 639.755431][ T8153] usb 3-1: device descriptor read/64, error -71 [ 639.856112][T17182] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ [ 640.144745][ T8153] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 640.300795][T17191] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4608'. [ 640.624612][ T8153] usb 3-1: device descriptor read/64, error -71 [ 640.730657][ T8153] usb usb3-port1: attempt power cycle [ 641.099909][ T8153] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 641.133459][ T8153] usb 3-1: device descriptor read/8, error -71 [ 641.384523][ T8153] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 641.423096][ T8153] usb 3-1: device descriptor read/8, error -71 [ 641.474548][ T8144] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 641.534802][ T8153] usb usb3-port1: unable to enumerate USB device [ 641.646159][ T8144] usb 5-1: Using ep0 maxpacket: 32 [ 641.664490][ T8144] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 641.673224][ T8144] usb 5-1: config 0 has no interface number 0 [ 641.737469][ T8144] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 641.748365][ T8144] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 641.759677][ T8144] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 641.799399][ T8144] usb 5-1: config 0 interface 196 has no altsetting 0 [ 641.843721][ T8144] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 641.853606][ T8144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.875287][ T8144] usb 5-1: Product: syz [ 641.879698][ T8144] usb 5-1: Manufacturer: syz [ 641.891121][ T8144] usb 5-1: SerialNumber: syz [ 641.948279][ T8144] usb 5-1: config 0 descriptor?? [ 641.956264][T17202] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 642.650920][T17201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.671339][T17201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.918571][T17201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.939728][T17201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.973831][T17201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.996211][T17201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.836570][ T8146] hid-generic 0000:0003:0001.0026: unknown main item tag 0x0 [ 643.858045][ T8146] hid-generic 0000:0003:0001.0026: unknown main item tag 0x0 [ 643.903962][T17218] loop3: detected capacity change from 0 to 7 [ 643.905792][ T8146] hid-generic 0000:0003:0001.0026: hidraw0: HID v0.03 Device [syz0] on syz1 [ 643.954740][T17218] Dev loop3: unable to read RDB block 7 [ 644.003040][T17218] loop3: AHDI p3 p4 [ 644.023496][T17218] loop3: partition table partially beyond EOD, truncated [ 644.050509][T17218] loop3: p3 start 1702000233 is beyond EOD, truncated [ 644.185297][ T8146] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 644.300453][ T8144] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 644.320136][ T8144] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 644.344878][ T8146] usb 6-1: Using ep0 maxpacket: 16 [ 644.361519][ T8144] usb 5-1: USB disconnect, device number 14 [ 644.375898][ T8146] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.407804][ T8146] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.442881][ T8146] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 644.467386][ T8146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.501279][ T8146] usb 6-1: Product: syz [ 644.515085][ T8146] usb 6-1: Manufacturer: syz [ 644.520594][ T8146] usb 6-1: SerialNumber: syz [ 644.736436][T17240] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4625'. [ 644.771065][ T8146] usb 6-1: cannot find UAC_HEADER [ 644.876110][T17242] F2FS-fs: Conflicting test_dummy_encryption options [ 644.946194][ T8146] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 644.982606][ T8146] usb 6-1: USB disconnect, device number 8 [ 645.007519][T15012] udevd[15012]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.232251][T17252] loop3: detected capacity change from 0 to 7 [ 645.298906][T17252] Dev loop3: unable to read RDB block 7 [ 645.311936][T17252] loop3: AHDI p3 p4 [ 645.317369][T17252] loop3: partition table partially beyond EOD, truncated [ 645.342543][T17252] loop3: p3 start 1702000233 is beyond EOD, truncated [ 645.382577][T17257] fuse: Unknown parameter 'grou00000000000000000000' [ 646.177199][T17270] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4638'. [ 646.195212][ T8144] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 646.364602][ T8144] usb 5-1: Using ep0 maxpacket: 32 [ 646.385672][ T8144] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 646.395474][ T8144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.403648][ T8144] usb 5-1: Product: syz [ 646.411059][ T8144] usb 5-1: Manufacturer: syz [ 646.424280][ T8144] usb 5-1: SerialNumber: syz [ 646.433049][T17274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.446510][ T8144] usb 5-1: config 0 descriptor?? [ 646.456545][T17274] batadv_slave_0: entered promiscuous mode [ 646.466514][ T8144] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 646.573519][T17282] netlink: 316 bytes leftover after parsing attributes in process `syz.3.4644'. [ 646.666221][T17284] fuse: Unknown parameter 'grou00000000000000000000' [ 646.769017][T17288] loop3: detected capacity change from 0 to 7 [ 646.779131][T17288] Dev loop3: unable to read RDB block 7 [ 646.787679][T17288] loop3: AHDI p3 p4 [ 646.793340][T17288] loop3: partition table partially beyond EOD, truncated [ 646.801763][T17288] loop3: p3 start 1702000233 is beyond EOD, truncated [ 646.994737][T15432] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 647.096064][T17298] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4652'. [ 647.158633][T15432] usb 3-1: Using ep0 maxpacket: 16 [ 647.177546][T15432] usb 3-1: config 1 interface 0 has no altsetting 0 [ 647.199570][T15432] usb 3-1: string descriptor 0 read error: -22 [ 647.212826][T15432] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40 [ 647.228508][T15432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.332421][T17304] netlink: 316 bytes leftover after parsing attributes in process `syz.3.4655'. [ 647.558312][T17312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4659'. [ 647.654295][T15432] usbhid 3-1:1.0: can't add hid device: -32 [ 647.690585][T15432] usbhid 3-1:1.0: probe with driver usbhid failed with error -32 [ 647.736453][T15432] usb 3-1: USB disconnect, device number 8 [ 648.243646][T17327] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4663'. [ 648.455587][ T8144] gspca_ov534_9: reg_w failed -71 [ 649.076943][ T8144] gspca_ov534_9: Unknown sensor 0000 [ 649.077011][ T8144] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 649.132894][ T8144] usb 5-1: USB disconnect, device number 15 [ 649.343267][T17345] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4671'. [ 649.714901][T15432] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 649.748487][ T8144] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 649.757176][ T5834] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 649.897452][T15432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.914509][T15432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.933208][T15432] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.951090][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 649.959819][T15432] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.963505][ T8144] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 649.971848][T15432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.991421][ T5834] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 650.008744][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.008765][ T8144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.008786][ T8144] usb 3-1: Product: syz [ 650.033380][ T8144] usb 3-1: Manufacturer: syz [ 650.034069][ T5834] usb 6-1: config 0 descriptor?? [ 650.039250][ T8144] usb 3-1: SerialNumber: syz [ 650.050887][T15432] usb 5-1: config 0 descriptor?? [ 650.064546][T16964] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 650.249430][T16964] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 650.260875][T16964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.270919][T16964] usb 4-1: Product: syz [ 650.276183][T16964] usb 4-1: Manufacturer: syz [ 650.280868][T16964] usb 4-1: SerialNumber: syz [ 650.296141][T16964] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 650.331811][ T8146] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 650.476857][ T5834] usb 6-1: string descriptor 0 read error: -71 [ 650.492777][T15432] usbhid 5-1:0.0: can't add hid device: -71 [ 650.502449][T15432] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 650.512194][ T5834] gspca_main: sunplus-2.14.0 probing 041e:400b [ 650.520605][ T8144] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 650.520830][ T5834] gspca_sunplus: reg_w_riv err -71 [ 650.539876][ T8144] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 650.552250][T15432] usb 5-1: USB disconnect, device number 16 [ 650.566442][ T5834] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 650.580749][ T5834] usb 6-1: USB disconnect, device number 9 [ 650.788872][ T5834] usb 4-1: USB disconnect, device number 32 [ 651.410209][T12483] bridge_slave_1: left allmulticast mode [ 651.419827][T12483] bridge_slave_1: left promiscuous mode [ 651.431822][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.453270][ T8146] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 651.481031][T12483] bridge_slave_0: left allmulticast mode [ 651.481922][ T8146] ath9k_htc: Failed to initialize the device [ 651.499028][T12483] bridge_slave_0: left promiscuous mode [ 651.506661][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.556941][ T5834] usb 4-1: ath9k_htc: USB layer deinitialized [ 651.575710][T16964] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 651.715847][T12483] ip6gretap0 (unregistering): left promiscuous mode [ 651.763811][T16964] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 651.775822][T16964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.791821][T16964] usb 6-1: Product: syz [ 651.802330][T16964] usb 6-1: Manufacturer: syz [ 651.833692][T16964] usb 6-1: SerialNumber: syz [ 652.074666][ T8144] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 652.199919][ T8144] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 652.423821][T12483] dvmrp1 (unregistering): left allmulticast mode [ 652.431840][ T8144] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 652.548098][ T8144] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 652.637184][ T8144] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 652.746408][T12483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.806329][T16964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 652.839210][T16964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 652.877845][ T8144] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 652.950552][ T8144] usb 3-1: USB disconnect, device number 9 [ 652.961484][T12483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.998297][T12483] bond0 (unregistering): Released all slaves [ 653.075154][T17375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4683'. [ 653.704554][ T8153] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 653.798468][T12483] hsr_slave_0: left promiscuous mode [ 653.805847][T12483] hsr_slave_1: left promiscuous mode [ 653.812119][T12483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.821384][T12483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.832515][T17393] loop5: detected capacity change from 0 to 7 [ 653.849867][T17393] Dev loop5: unable to read RDB block 7 [ 653.871067][T17393] loop5: unable to read partition table [ 653.877515][ T8153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.878127][T17393] loop5: partition table beyond EOD, truncated [ 653.904147][T17393] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 653.928519][ T8153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.952260][ T8153] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.989862][ T8153] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.014534][ T8153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.039608][ T8153] usb 5-1: config 0 descriptor?? [ 654.265218][T12483] team0 (unregistering): Port device team_slave_1 removed [ 654.293837][T12483] team0 (unregistering): Port device team_slave_0 removed [ 654.342154][T16964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 654.454649][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 654.484738][ T8153] usbhid 5-1:0.0: can't add hid device: -71 [ 654.551232][ T8153] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 654.599393][ T8153] usb 5-1: USB disconnect, device number 17 [ 654.738525][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 654.787384][T16964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 654.790215][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.821323][ T10] usb 3-1: Product: syz [ 654.823377][T16964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 654.829050][ T10] usb 3-1: Manufacturer: syz [ 654.850128][T16964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 654.881842][ T10] usb 3-1: SerialNumber: syz [ 654.913406][T16964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 655.032292][T16964] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 655.060040][T16964] usb 6-1: USB disconnect, device number 10 [ 655.317400][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 655.392188][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 655.760151][T17409] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4696'. [ 656.634856][T15432] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 656.834617][T15432] usb 4-1: Using ep0 maxpacket: 16 [ 656.859190][T15432] usb 4-1: config 1 interface 0 has no altsetting 0 [ 656.878975][T15432] usb 4-1: string descriptor 0 read error: -22 [ 656.888972][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 656.915207][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 656.940526][T15432] usb 4-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40 [ 656.958086][T15432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.975716][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 657.012176][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 657.027529][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 657.043802][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 657.070748][ T10] usb 3-1: USB disconnect, device number 10 [ 657.113118][T17433] syzkaller0: entered promiscuous mode [ 657.120798][T17433] syzkaller0: entered allmulticast mode [ 657.425944][T17441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4708'. [ 657.522052][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.555760][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.577631][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.587188][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.595406][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.604105][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.613470][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.622509][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.640408][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.649268][T15432] thrustmaster 0003:044F:B320.0027: unknown main item tag 0x0 [ 657.782424][T15432] thrustmaster 0003:044F:B320.0027: hidraw0: USB HID vff.7f Device [HID 044f:b320] on usb-dummy_hcd.3-1/input0 [ 657.798330][T15432] thrustmaster 0003:044F:B320.0027: no inputs found [ 657.830069][T15432] usb 4-1: USB disconnect, device number 33 [ 658.327445][T17446] fido_id[17446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 661.752639][T17439] syzkaller0: entered promiscuous mode [ 661.760329][T17439] syzkaller0: entered allmulticast mode [ 662.381952][T17475] syzkaller1: entered promiscuous mode [ 662.445463][T17475] syzkaller1: entered allmulticast mode [ 662.788636][T17489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4721'. [ 662.798302][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 662.816817][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 662.816840][ T30] audit: type=1326 audit(1773425227.821:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 662.892137][ T30] audit: type=1326 audit(1773425227.821:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 662.973954][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 663.004879][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.025140][ T10] usb 6-1: Product: syz [ 663.027221][ T30] audit: type=1326 audit(1773425227.821:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 663.029376][ T10] usb 6-1: Manufacturer: syz [ 663.029400][ T10] usb 6-1: SerialNumber: syz [ 663.065857][ T30] audit: type=1326 audit(1773425227.821:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 663.094704][ T30] audit: type=1326 audit(1773425227.821:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 663.179014][ T30] audit: type=1326 audit(1773425227.821:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 663.206802][ T30] audit: type=1326 audit(1773425227.821:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 663.246593][T17491] syzkaller0: entered promiscuous mode [ 663.263752][T17491] syzkaller0: entered allmulticast mode [ 663.274323][ T30] audit: type=1326 audit(1773425227.821:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 663.317499][ T30] audit: type=1326 audit(1773425227.821:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 663.413643][ T30] audit: type=1326 audit(1773425227.821:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 663.552522][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 663.571144][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 663.615414][ T8153] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 663.794792][ T8153] usb 4-1: device descriptor read/64, error -71 [ 664.022979][T17507] netlink: 'syz.4.4729': attribute type 1 has an invalid length. [ 664.035840][T17507] netlink: 64399 bytes leftover after parsing attributes in process `syz.4.4729'. [ 664.057733][ T8153] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 664.207977][ T8153] usb 4-1: device descriptor read/64, error -71 [ 664.326283][ T8153] usb usb4-port1: attempt power cycle [ 664.694647][ T8153] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 664.762208][ T8153] usb 4-1: device descriptor read/8, error -71 [ 665.012497][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 665.028825][ T8153] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 665.042566][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 665.064966][ T8153] usb 4-1: device descriptor read/8, error -71 [ 665.072840][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 665.088538][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 665.101715][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 665.127824][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 665.168718][ T10] usb 6-1: USB disconnect, device number 11 [ 665.182940][ T8153] usb usb4-port1: unable to enumerate USB device [ 665.878870][T17518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4732'. [ 669.604874][T16964] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 669.816459][T16964] usb 3-1: Using ep0 maxpacket: 32 [ 669.843938][T16964] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 669.866339][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 669.870346][T16964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.953456][T16964] usb 3-1: Product: syz [ 669.984125][T16964] usb 3-1: Manufacturer: syz [ 669.991683][T16964] usb 3-1: SerialNumber: syz [ 670.038353][T16964] usb 3-1: config 0 descriptor?? [ 670.057743][T16964] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 670.064523][ T10] usb 1-1: device descriptor read/64, error -71 [ 670.552287][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 671.054614][ T10] usb 1-1: device descriptor read/64, error -71 [ 671.174847][ T10] usb usb1-port1: attempt power cycle [ 671.764751][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 671.825696][ T10] usb 1-1: device descriptor read/8, error -71 [ 672.094718][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 672.145144][T17565] fuse: Unknown parameter 'user_i00000000000000000000' [ 672.169227][ T10] usb 1-1: device descriptor read/8, error -71 [ 672.298105][ T10] usb usb1-port1: unable to enumerate USB device [ 672.468768][T16964] gspca_ov534_9: reg_w failed -71 [ 672.579712][T17571] syzkaller0: entered promiscuous mode [ 672.589693][T17571] syzkaller0: entered allmulticast mode [ 672.704561][T16964] gspca_ov534_9: Unknown sensor 0000 [ 672.704683][T16964] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 672.733989][T16964] usb 3-1: USB disconnect, device number 11 [ 674.405536][T16964] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 674.579793][T16964] usb 4-1: Using ep0 maxpacket: 16 [ 674.603202][T16964] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 674.615033][T16964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.631080][T16964] usb 4-1: Product: syz [ 674.644541][T16964] usb 4-1: Manufacturer: syz [ 674.719901][T16964] usb 4-1: SerialNumber: syz [ 675.117552][T16964] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 675.140197][T16964] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 675.155221][T16964] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 675.170265][T16964] usb 4-1: media controller created [ 675.228912][T16964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.272440][T16964] zl10353_read_register: readreg error (reg=127, ret==-71) [ 675.326953][T16964] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 675.344722][T16964] usb 4-1: USB disconnect, device number 38 [ 677.492100][T17600] tipc: Started in network mode [ 677.519174][T17600] tipc: Node identity ac1414aa, cluster identity 4711 [ 677.548268][T17600] tipc: Enabled bearer , priority 10 [ 677.572380][T17604] tipc: Enabled bearer , priority 0 [ 678.094808][T16964] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 678.209433][T17622] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 678.219941][T17622] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 678.239910][T16964] usb 3-1: device descriptor read/64, error -71 [ 678.284285][T17622] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 678.292271][T17622] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 678.344594][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 678.395088][T17622] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 678.406997][T17622] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 678.458090][T17622] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 678.466940][T17622] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 678.498279][T17622] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 678.504590][T16964] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 678.521749][T17622] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 678.539096][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 678.565848][ T8153] tipc: Node number set to 2886997162 [ 678.576706][ T10] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 678.594762][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.602893][ T10] usb 1-1: Product: syz [ 678.615726][ T10] usb 1-1: Manufacturer: syz [ 678.631942][ T10] usb 1-1: SerialNumber: syz [ 678.644875][T16964] usb 3-1: device descriptor read/64, error -71 [ 678.704165][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 678.704185][ T30] audit: type=1326 audit(1773425243.711:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 678.746190][ T30] audit: type=1326 audit(1773425243.711:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 678.774733][ T30] audit: type=1326 audit(1773425243.741:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 678.785146][T16964] usb usb3-port1: attempt power cycle [ 678.798994][ T30] audit: type=1326 audit(1773425243.741:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 678.846955][ T30] audit: type=1326 audit(1773425243.741:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 678.879989][ T30] audit: type=1326 audit(1773425243.741:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 678.920326][T17647] syzkaller0: entered promiscuous mode [ 678.931642][T17647] syzkaller0: entered allmulticast mode [ 678.941784][ T10] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 678.958715][ T30] audit: type=1326 audit(1773425243.741:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 678.985919][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 679.015102][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 679.026998][ T10] usb 1-1: media controller created [ 679.050118][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.060410][ T30] audit: type=1326 audit(1773425243.741:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 679.099488][ T30] audit: type=1326 audit(1773425243.741:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 679.149416][ T30] audit: type=1326 audit(1773425243.741:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 679.164806][T16964] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 679.184432][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 679.226353][T16964] usb 3-1: device descriptor read/8, error -71 [ 679.249358][ T10] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 679.334530][ T8153] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 679.353365][ T10] usb 1-1: USB disconnect, device number 18 [ 679.406998][T17653] syzkaller0: entered promiscuous mode [ 679.413778][T17653] syzkaller0: entered allmulticast mode [ 679.476800][T16964] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 679.505811][T16964] usb 3-1: device descriptor read/8, error -71 [ 679.517284][ T8153] usb 4-1: Using ep0 maxpacket: 32 [ 679.528666][ T8153] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 679.550522][ T8153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.576333][ T8153] usb 4-1: config 0 descriptor?? [ 679.625214][T16964] usb usb3-port1: unable to enumerate USB device [ 679.813740][ T8153] usb 4-1: language id specifier not provided by device, defaulting to English [ 680.017761][ T8153] gspca_main: sunplus-2.14.0 probing 041e:400b [ 680.032158][ T8153] gspca_sunplus: reg_w_riv err -71 [ 680.041249][ T8153] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 680.095348][ T8153] usb 4-1: USB disconnect, device number 40 [ 681.334711][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 681.661453][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 681.815467][ T10] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 682.284901][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.306433][ T10] usb 6-1: Product: syz [ 682.311260][ T10] usb 6-1: Manufacturer: syz [ 682.325086][ T10] usb 6-1: SerialNumber: syz [ 682.693194][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 682.707082][ T10] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 682.761019][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 682.775130][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 682.791592][ T10] usb 6-1: media controller created [ 682.835471][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.891807][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 682.904556][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.918628][ T29] usb 5-1: Product: syz [ 682.923082][ T29] usb 5-1: Manufacturer: syz [ 682.929707][ T29] usb 5-1: SerialNumber: syz [ 682.951512][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 683.023039][ T10] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 683.100462][ T10] usb 6-1: USB disconnect, device number 12 [ 683.204950][T16964] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 683.368808][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 683.382207][T16964] usb 3-1: device descriptor read/64, error -71 [ 683.402947][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 683.645942][T16964] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 683.784743][T16964] usb 3-1: device descriptor read/64, error -71 [ 683.896010][T16964] usb usb3-port1: attempt power cycle [ 684.274690][T16964] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 684.316031][T16964] usb 3-1: device descriptor read/8, error -71 [ 684.488249][T17729] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 684.585914][T16964] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 684.617963][T16964] usb 3-1: device descriptor read/8, error -71 [ 684.735205][T16964] usb usb3-port1: unable to enumerate USB device [ 684.926167][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 684.934561][ T8153] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 684.978707][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 685.034697][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 685.068137][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 685.095378][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 685.113645][ T29] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 685.146365][ T8153] usb 4-1: Using ep0 maxpacket: 8 [ 685.147785][ T29] usb 5-1: USB disconnect, device number 18 [ 685.174595][ T8153] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 685.194137][ T8153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.210372][ T8153] usb 4-1: Product: syz [ 685.227082][ T8153] usb 4-1: Manufacturer: syz [ 685.256822][ T8153] usb 4-1: SerialNumber: syz [ 685.275419][ T8153] usb 4-1: config 0 descriptor?? [ 685.297772][ T8153] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 685.336166][T17733] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4808'. [ 685.905272][ T8153] gspca_sonixj: reg_w1 err -71 [ 685.923635][ T8153] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 685.989786][ T8153] usb 4-1: USB disconnect, device number 41 [ 688.314859][ T8153] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 688.503193][ T8153] usb 4-1: device descriptor read/64, error -71 [ 688.745382][ T8153] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 688.894719][ T8153] usb 4-1: device descriptor read/64, error -71 [ 689.017014][ T8153] usb usb4-port1: attempt power cycle [ 689.374523][ T8153] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 689.405076][ T8153] usb 4-1: device descriptor read/8, error -71 [ 689.644607][ T8153] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 689.677316][ T8153] usb 4-1: device descriptor read/8, error -71 [ 689.795730][ T8153] usb usb4-port1: unable to enumerate USB device [ 690.732650][T17823] syzkaller0: entered promiscuous mode [ 690.742742][T17823] syzkaller0: entered allmulticast mode [ 690.769126][T17829] x_tables: ip_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 24 [ 692.345440][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.353594][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.377171][ T8146] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 692.602294][ T8146] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 692.614029][ T8146] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 692.638038][ T8146] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 692.648405][ T8146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.673105][T17849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 692.693880][ T8146] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 694.925170][T17849] 8021q: VLANs not supported on caif0 [ 694.981587][ T8146] usb 1-1: USB disconnect, device number 19 [ 695.354661][ T8153] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 695.404624][T15432] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 695.536992][ T8153] usb 3-1: Using ep0 maxpacket: 32 [ 695.553726][T15432] usb 6-1: device descriptor read/64, error -71 [ 695.566088][ T8153] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 695.593296][ T8153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.602784][ T8153] usb 3-1: Product: syz [ 695.611979][ T8153] usb 3-1: Manufacturer: syz [ 695.617080][ T8153] usb 3-1: SerialNumber: syz [ 695.645472][ T8146] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 695.673973][ T8153] usb 3-1: config 0 descriptor?? [ 695.706132][ T8153] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 695.794517][ T8146] usb 5-1: device descriptor read/64, error -71 [ 695.801130][T15432] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 695.964576][T15432] usb 6-1: device descriptor read/64, error -71 [ 696.024602][ T29] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 696.066034][ T8146] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 696.079710][T15432] usb usb6-port1: attempt power cycle [ 696.214498][ T8146] usb 5-1: device descriptor read/64, error -71 [ 696.237278][ T29] usb 4-1: config 0 has no interfaces? [ 696.256981][ T29] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 696.269575][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.279169][ T29] usb 4-1: Product: syz [ 696.284555][ T29] usb 4-1: Manufacturer: syz [ 696.291441][ T29] usb 4-1: SerialNumber: syz [ 696.308284][ T29] usb 4-1: config 0 descriptor?? [ 696.336194][ T8146] usb usb5-port1: attempt power cycle [ 696.424733][T15432] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 696.468819][T15432] usb 6-1: device descriptor read/8, error -71 [ 696.558225][ T29] usb 4-1: USB disconnect, device number 46 [ 696.694574][ T8146] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 696.725471][ T8146] usb 5-1: device descriptor read/8, error -71 [ 696.734679][T15432] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 696.777334][T15432] usb 6-1: device descriptor read/8, error -71 [ 696.907535][T15432] usb usb6-port1: unable to enumerate USB device [ 696.974539][ T8146] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 697.015215][ T8146] usb 5-1: device descriptor read/8, error -71 [ 697.124957][ T8146] usb usb5-port1: unable to enumerate USB device [ 697.148431][ T8153] gspca_ov534_9: reg_r err -32 [ 697.448847][ T8153] gspca_ov534_9: Unknown sensor 0000 [ 697.448944][ T8153] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 697.482505][ T8153] usb 3-1: USB disconnect, device number 20 [ 697.544895][ T8146] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 697.718076][ T8146] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 697.743404][ T8146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.771776][ T8146] usb 4-1: Product: syz [ 697.784149][ T8146] usb 4-1: Manufacturer: syz [ 697.792202][ T8146] usb 4-1: SerialNumber: syz [ 697.827885][ T8146] usb 4-1: config 0 descriptor?? [ 697.857527][ T8146] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 697.994771][ T29] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 698.134632][ T29] usb 1-1: device descriptor read/64, error -71 [ 698.216665][T17902] fuse: Unknown parameter '0x0000000000000003' [ 698.384623][ T29] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 698.472010][T17890] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4865'. [ 698.495865][T17906] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4873'. [ 698.514762][T17906] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.524677][ T29] usb 1-1: device descriptor read/64, error -71 [ 698.525352][T17906] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.553954][T17907] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4873'. [ 698.576567][T16964] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 698.655453][ T29] usb usb1-port1: attempt power cycle [ 698.756838][T16964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.771731][ T8146] gspca_sunplus: reg_w_riv err -71 [ 698.777519][T16964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.794324][ T8146] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 698.806164][T16964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.828739][ T8146] usb 4-1: USB disconnect, device number 47 [ 698.838776][T16964] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 698.854303][T16964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.868365][T16964] usb 6-1: config 0 descriptor?? [ 699.034726][ T29] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 699.055293][ T29] usb 1-1: device descriptor read/8, error -71 [ 699.274710][ T8153] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 699.292571][T16964] wacom 0003:056A:0010.0028: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 699.306444][ T29] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 699.320970][T16964] wacom 0003:056A:0010.0028: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.5-1/input0 [ 699.341834][T16964] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0010.0028/input/input101 [ 699.360225][ T29] usb 1-1: device descriptor read/8, error -71 [ 699.468689][ T8153] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 699.504568][ T8153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.504794][ T29] usb usb1-port1: unable to enumerate USB device [ 699.513564][ T8153] usb 3-1: Product: syz [ 699.513587][ T8153] usb 3-1: Manufacturer: syz [ 699.513600][ T8153] usb 3-1: SerialNumber: syz [ 699.746061][T17926] raw_sendmsg: syz.3.4881 forgot to set AF_INET. Fix it! [ 699.940708][ T8153] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 699.956611][ T8153] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 700.094587][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 700.124653][T15432] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 700.274726][T15432] usb 5-1: device descriptor read/64, error -71 [ 700.283008][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 700.297599][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 700.312243][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 700.324069][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.339136][T17931] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 700.350686][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 700.544734][T15432] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 700.576390][T17931] 8021q: VLANs not supported on nlmon0 [ 700.587752][ T10] usb 4-1: USB disconnect, device number 48 [ 700.694975][T15432] usb 5-1: device descriptor read/64, error -71 [ 700.806548][T15432] usb usb5-port1: attempt power cycle [ 701.175717][T15432] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 701.207247][T15432] usb 5-1: device descriptor read/8, error -71 [ 701.281773][T17942] netlink: 'syz.3.4887': attribute type 1 has an invalid length. [ 701.292372][ T5834] usb 6-1: USB disconnect, device number 18 [ 701.314820][T17942] netlink: 64399 bytes leftover after parsing attributes in process `syz.3.4887'. [ 701.466431][T15432] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 701.506394][T15432] usb 5-1: device descriptor read/8, error -71 [ 701.589184][ T8153] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 701.625148][T15432] usb usb5-port1: unable to enumerate USB device [ 701.646361][ T8153] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 701.679472][ T8153] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 701.713417][ T8153] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 701.793552][ T8153] usb 3-1: USB disconnect, device number 21 [ 701.873468][T15432] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 702.094998][T15432] usb 4-1: Using ep0 maxpacket: 32 [ 702.112742][T15432] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 702.137920][T15432] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 702.172279][T15432] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 702.191961][T15432] usb 4-1: Product: syz [ 702.197024][T15432] usb 4-1: Manufacturer: syz [ 702.202282][T15432] usb 4-1: SerialNumber: syz [ 702.273904][T15432] usb 4-1: config 0 descriptor?? [ 702.296134][T17948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 702.363673][T15432] hub 4-1:0.0: bad descriptor, ignoring hub [ 702.390894][T15432] hub 4-1:0.0: probe with driver hub failed with error -5 [ 702.697198][T17965] syzkaller0: entered promiscuous mode [ 702.703482][T17965] syzkaller0: entered allmulticast mode [ 703.374537][ T29] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 703.405766][T17978] fuse: Unknown parameter 'fd0x0000000000000003' [ 703.618995][ T29] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 703.683981][ T29] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 703.699242][ T29] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 703.718952][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.816438][T17971] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 703.860671][ T29] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 703.934710][ T5834] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 704.131114][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.170806][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.224663][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.238406][ T5834] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 704.248471][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.267369][ T5834] usb 5-1: config 0 descriptor?? [ 704.631053][T17971] 8021q: VLANs not supported on nlmon0 [ 704.714978][ T5834] wacom 0003:056A:0010.0029: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 704.751399][ T5834] wacom 0003:056A:0010.0029: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.4-1/input0 [ 704.823608][ T5834] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0010.0029/input/input104 [ 704.840395][ T8153] usb 1-1: USB disconnect, device number 24 [ 705.563567][T17993] netlink: 304 bytes leftover after parsing attributes in process `syz.0.4903'. [ 705.976656][T18008] fuse: Unknown parameter 'fd0x0000000000000003' [ 705.992794][T18006] syzkaller0: entered promiscuous mode [ 706.001666][T18006] syzkaller0: entered allmulticast mode [ 706.094622][ T8146] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 706.244668][ T8146] usb 1-1: device descriptor read/64, error -71 [ 706.374921][ T29] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 706.485407][ T8146] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 706.534996][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 706.542861][ T8144] usb 5-1: USB disconnect, device number 28 [ 706.589007][ T29] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 706.625458][ T8146] usb 1-1: device descriptor read/64, error -71 [ 706.633109][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.657442][ T29] usb 3-1: Product: syz [ 706.676359][ T29] usb 3-1: Manufacturer: syz [ 706.687365][ T29] usb 3-1: SerialNumber: syz [ 706.764867][ T8146] usb usb1-port1: attempt power cycle [ 706.957404][ T29] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 706.997450][ T29] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 707.024023][ T29] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 707.047473][ T29] usb 3-1: media controller created [ 707.081349][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.125973][ T29] zl10353_read_register: readreg error (reg=127, ret==-71) [ 707.154562][ T8146] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 707.194030][ T29] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 707.216757][ T8146] usb 1-1: device descriptor read/8, error -71 [ 707.537453][ T8146] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 707.615122][ T8146] usb 1-1: device descriptor read/8, error -71 [ 707.658020][ T29] usb 3-1: USB disconnect, device number 22 [ 707.792117][ T8146] usb usb1-port1: unable to enumerate USB device [ 707.844772][T18028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.195063][T16964] usb 4-1: USB disconnect, device number 49 [ 708.253835][T18032] syzkaller0: entered promiscuous mode [ 708.263245][T18032] syzkaller0: entered allmulticast mode [ 709.284488][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 709.284507][ T30] audit: type=1326 audit(1773425274.291:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 709.333919][ T30] audit: type=1326 audit(1773425274.291:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 709.362398][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 709.380471][ T30] audit: type=1326 audit(1773425274.291:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 709.419947][ T30] audit: type=1326 audit(1773425274.291:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 709.474807][ T30] audit: type=1326 audit(1773425274.291:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 709.519379][ T30] audit: type=1326 audit(1773425274.291:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 709.543954][ T30] audit: type=1326 audit(1773425274.291:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 709.594807][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 709.606814][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.620864][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.679103][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.694524][ T30] audit: type=1326 audit(1773425274.291:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 709.721912][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.731031][ T10] usb 4-1: Product: syz [ 709.736100][ T10] usb 4-1: Manufacturer: syz [ 709.752160][ T30] audit: type=1326 audit(1773425274.291:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 709.788562][ T10] usb 4-1: SerialNumber: syz [ 709.805956][ T30] audit: type=1326 audit(1773425274.291:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.5.4920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 710.048371][ T10] usb 4-1: 0:2 : does not exist [ 710.089056][ T10] usb 4-1: USB disconnect, device number 50 [ 710.123806][T17481] udevd[17481]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.125125][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 713.293955][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 713.315765][ T10] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 713.339145][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.357438][ T10] usb 1-1: Product: syz [ 713.362131][ T10] usb 1-1: Manufacturer: syz [ 713.396452][ T8153] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 713.405511][ T10] usb 1-1: SerialNumber: syz [ 713.566528][ T8153] usb 4-1: device descriptor read/64, error -71 [ 713.667770][ T10] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 713.706069][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 713.717885][T18082] syzkaller0: entered promiscuous mode [ 713.735233][T18082] syzkaller0: entered allmulticast mode [ 713.747984][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 713.775687][ T10] usb 1-1: media controller created [ 713.809682][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 713.819174][ T8153] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 713.875797][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 713.936539][ T8148] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 713.955678][ T8153] usb 4-1: device descriptor read/64, error -71 [ 714.046644][ T10] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 714.074932][ T8153] usb usb4-port1: attempt power cycle [ 714.115915][ T8148] usb 6-1: Using ep0 maxpacket: 16 [ 714.119541][ T10] usb 1-1: USB disconnect, device number 29 [ 714.280364][T18086] syzkaller0: entered promiscuous mode [ 714.286852][T18086] syzkaller0: entered allmulticast mode [ 714.414650][ T8153] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 714.467144][ T8153] usb 4-1: device descriptor read/8, error -71 [ 714.485089][ T8145] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 714.615520][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 714.615540][ T30] audit: type=1326 audit(1773425279.631:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 714.647590][ T30] audit: type=1326 audit(1773425279.631:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 714.681401][ T30] audit: type=1326 audit(1773425279.631:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 714.698649][ T8145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.712963][ T30] audit: type=1326 audit(1773425279.631:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 714.742138][ T8153] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 714.751289][ T30] audit: type=1326 audit(1773425279.631:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 714.761883][ T8145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.777010][ T30] audit: type=1326 audit(1773425279.631:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 714.814681][ T8153] usb 4-1: device descriptor read/8, error -71 [ 714.822342][ T30] audit: type=1326 audit(1773425279.631:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 714.846850][ T8145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.846924][ T8145] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 714.846946][ T8145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.859565][ T8145] usb 3-1: config 0 descriptor?? [ 714.869783][ T30] audit: type=1326 audit(1773425279.631:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 714.918437][ T30] audit: type=1326 audit(1773425279.631:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 714.953052][ T8153] usb usb4-port1: unable to enumerate USB device [ 714.960278][ T30] audit: type=1326 audit(1773425279.631:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18088 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 715.339704][ T8145] wacom 0003:056A:0010.002A: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 715.368831][ T8145] wacom 0003:056A:0010.002A: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.2-1/input0 [ 715.386626][ T8145] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0010.002A/input/input107 [ 715.540294][ T8145] usb 3-1: USB disconnect, device number 23 [ 716.375805][ T8148] usb 6-1: unable to get BOS descriptor or descriptor too short [ 716.408856][ T8148] usb 6-1: no configurations [ 716.418081][ T8148] usb 6-1: can't read configurations, error -22 [ 716.774776][ T8148] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 716.961409][ T8148] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 716.973649][ T8148] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 716.997306][ T8148] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 717.007514][ T8148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.020918][T18102] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 717.037976][ T8148] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 718.424919][T18102] 8021q: VLANs not supported on nlmon0 [ 718.460658][ T8148] usb 6-1: USB disconnect, device number 20 [ 718.839951][T18115] syzkaller0: entered promiscuous mode [ 718.847834][T18115] syzkaller0: entered allmulticast mode [ 718.977869][ T8148] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 719.054789][ T8145] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 719.146099][ T8148] usb 5-1: Using ep0 maxpacket: 8 [ 719.176120][ T5834] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 719.180293][ T8148] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 719.221682][ T8148] usb 5-1: config 2 has no interface number 0 [ 719.234211][ T8148] usb 5-1: config 2 interface 31 has no altsetting 0 [ 719.242679][ T8145] usb 3-1: Using ep0 maxpacket: 16 [ 719.272112][ T8145] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 719.285315][ T8148] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 719.295239][ T8145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.307887][ T8145] usb 3-1: Product: syz [ 719.312384][ T8145] usb 3-1: Manufacturer: syz [ 719.320674][ T8148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.339189][ T5834] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 719.346347][ T8148] usb 5-1: Product: syz [ 719.356320][ T8145] usb 3-1: SerialNumber: syz [ 719.365046][ T8148] usb 5-1: Manufacturer: syz [ 719.374732][ T8148] usb 5-1: SerialNumber: syz [ 719.388395][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.422397][ T5834] usb 1-1: Product: syz [ 719.435773][ T5834] usb 1-1: Manufacturer: syz [ 719.452155][ T5834] usb 1-1: SerialNumber: syz [ 719.497807][T18131] syzkaller0: entered promiscuous mode [ 719.503492][T18131] syzkaller0: entered allmulticast mode [ 719.638881][ T8145] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 719.656507][ T8145] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 719.673134][ T8145] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 719.689868][T16964] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 719.703686][ T8145] usb 3-1: media controller created [ 719.730963][ T8145] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.850822][ T8145] zl10353_read_register: readreg error (reg=127, ret==-71) [ 719.887539][ T5834] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 719.887595][T16964] usb 4-1: unable to get BOS descriptor or descriptor too short [ 719.902352][ T5834] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 719.923903][ T8145] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 719.935333][T16964] usb 4-1: not running at top speed; connect to a high speed hub [ 719.943526][T16964] usb 4-1: too many configurations: 52, using maximum allowed: 8 [ 719.955944][ T8145] usb 3-1: USB disconnect, device number 24 [ 719.973246][T16964] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 719.985202][T16964] usb 4-1: can't read configurations, error -61 [ 720.052577][ T8148] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 720.076203][ T8148] usb 5-1: USB disconnect, device number 29 [ 720.133867][T16964] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 720.300746][T16964] usb 4-1: unable to get BOS descriptor or descriptor too short [ 720.311312][T16964] usb 4-1: not running at top speed; connect to a high speed hub [ 720.321237][T16964] usb 4-1: too many configurations: 52, using maximum allowed: 8 [ 720.346406][T16964] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 720.355836][T16964] usb 4-1: can't read configurations, error -61 [ 720.363120][T16964] usb usb4-port1: attempt power cycle [ 720.704681][T16964] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 720.749692][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 720.752848][T16964] usb 4-1: unable to get BOS descriptor or descriptor too short [ 720.778416][T16964] usb 4-1: not running at top speed; connect to a high speed hub [ 720.789859][T16964] usb 4-1: too many configurations: 52, using maximum allowed: 8 [ 720.820877][T16964] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 720.839480][T16964] usb 4-1: can't read configurations, error -61 [ 720.938713][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 720.949295][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.958029][ T10] usb 3-1: Product: syz [ 720.962545][ T10] usb 3-1: Manufacturer: syz [ 720.968026][ T10] usb 3-1: SerialNumber: syz [ 720.982226][T16964] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 721.052042][T16964] usb 4-1: unable to get BOS descriptor or descriptor too short [ 721.070342][T16964] usb 4-1: not running at top speed; connect to a high speed hub [ 721.078710][T16964] usb 4-1: too many configurations: 52, using maximum allowed: 8 [ 721.088856][T16964] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 721.097710][T16964] usb 4-1: can't read configurations, error -61 [ 721.106178][T16964] usb usb4-port1: unable to enumerate USB device [ 721.399707][ T5834] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 721.414165][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 721.427600][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 721.871204][ T5834] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 721.895963][ T5834] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 721.909691][ T5834] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 721.921105][ T5834] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 721.949846][ T5834] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 721.974716][ T5834] usb 1-1: USB disconnect, device number 30 [ 722.463936][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 722.490332][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 722.528488][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 722.552728][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 722.854571][ T8145] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 723.016183][T18153] syzkaller0: entered promiscuous mode [ 723.022474][T18153] syzkaller0: entered allmulticast mode [ 723.030234][ T8145] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.050744][ T8145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.062176][ T8145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.078906][ T8145] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 723.089181][ T8145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.121243][ T8145] usb 4-1: config 0 descriptor?? [ 723.454800][ T8153] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 723.501068][ T10] usb 3-1: USB disconnect, device number 25 [ 723.579107][ T8145] wacom 0003:056A:0010.002B: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 723.615691][ T8153] usb 5-1: Using ep0 maxpacket: 32 [ 723.617951][ T8145] wacom 0003:056A:0010.002B: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 723.662991][ T8153] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 723.676665][ T8153] usb 5-1: config 0 has no interface number 0 [ 723.684036][ T8145] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.002B/input/input110 [ 723.700845][ T8153] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 723.797855][ T8153] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 723.815114][T18167] syzkaller1: entered promiscuous mode [ 723.817900][ T8153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.830244][ T8145] usb 4-1: USB disconnect, device number 59 [ 723.837080][T18167] syzkaller1: entered allmulticast mode [ 723.860682][ T8153] usb 5-1: Product: syz [ 723.865681][ T8153] usb 5-1: Manufacturer: syz [ 723.871194][ T8153] usb 5-1: SerialNumber: syz [ 723.908642][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4962'. [ 723.938057][ T8153] usb 5-1: config 0 descriptor?? [ 723.948595][ T8153] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 723.968265][ T8153] em28xx 5-1:0.132: Video interface 132 found: [ 724.054499][T16964] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 724.224602][T16964] usb 1-1: Using ep0 maxpacket: 16 [ 724.237975][T16964] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 724.268751][T16964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.294482][T16964] usb 1-1: Product: syz [ 724.299580][T16964] usb 1-1: Manufacturer: syz [ 724.306069][T16964] usb 1-1: SerialNumber: syz [ 724.353863][ T8153] em28xx 5-1:0.132: chip ID is em2874 [ 724.555977][T16964] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 724.571850][T16964] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 724.594763][T16964] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 724.604545][T16964] usb 1-1: media controller created [ 724.621703][T16964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.684804][ T5834] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 724.694494][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 724.769191][T16964] zl10353_read_register: readreg error (reg=127, ret==-71) [ 724.828865][T16964] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 724.852807][T16964] usb 1-1: USB disconnect, device number 31 [ 724.868952][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.898818][ T5834] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 724.909990][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.924586][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.936425][ T5834] usb 6-1: Product: syz [ 724.942841][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 724.957539][ T5834] usb 6-1: Manufacturer: syz [ 724.966443][ T8153] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 724.982815][ T5834] usb 6-1: SerialNumber: syz [ 724.987930][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.999761][ T8153] em28xx 5-1:0.132: board has no eeprom [ 725.012509][ T10] usb 4-1: config 0 descriptor?? [ 725.124669][ T8153] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 725.140295][ T8153] em28xx 5-1:0.132: analog set to bulk mode. [ 725.153865][T15432] em28xx 5-1:0.132: Registering V4L2 extension [ 725.469147][ T5834] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 725.483716][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 725.490526][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 725.499449][ T5834] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 725.514753][ T10] usb 4-1: USB disconnect, device number 60 [ 725.557307][T15432] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 725.557505][ T8148] usb 5-1: USB disconnect, device number 30 [ 725.596998][T15432] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 725.607975][ T8148] em28xx 5-1:0.132: Disconnecting em28xx [ 725.819080][T15432] usb 5-1: Decoder not found [ 725.840937][T15432] em28xx 5-1:0.132: failed to create media graph [ 725.859525][T15432] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 725.881662][T15432] em28xx 5-1:0.132: Remote control support is not available for this card. [ 725.891312][T18189] ================================================================== [ 725.900291][T18189] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 725.908987][T18189] Read of size 8 at addr ffff88801fea0748 by task v4l_id/18189 [ 725.917513][T18189] [ 725.920565][T18189] CPU: 1 UID: 0 PID: 18189 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 725.920657][T18189] Tainted: [L]=SOFTLOCKUP [ 725.920664][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.920677][T18189] Call Trace: [ 725.920686][T18189] [ 725.920701][T18189] dump_stack_lvl+0xe8/0x150 [ 725.920764][T18189] print_report+0xba/0x230 [ 725.920794][T18189] ? v4l2_fh_open+0xac/0x420 [ 725.920818][T18189] kasan_report+0x117/0x150 [ 725.920864][T18189] ? v4l2_fh_open+0xac/0x420 [ 725.920889][T18189] v4l2_fh_open+0xac/0x420 [ 725.920912][T18189] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 725.920965][T18189] em28xx_v4l2_open+0x157/0x9a0 [ 725.921044][T18189] ? do_raw_spin_lock+0x12b/0x2f0 [ 725.921081][T18189] v4l2_open+0x1bf/0x3a0 [ 725.921132][T18189] chrdev_open+0x4cd/0x5e0 [ 725.921166][T18189] ? __pfx_chrdev_open+0x10/0x10 [ 725.921187][T18189] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 725.921211][T18189] ? __pfx_chrdev_open+0x10/0x10 [ 725.921232][T18189] do_dentry_open+0x785/0x14e0 [ 725.921262][T18189] vfs_open+0x3b/0x340 [ 725.921279][T18189] ? path_openat+0x2df0/0x3860 [ 725.921295][T18189] path_openat+0x2e08/0x3860 [ 725.921315][T18189] ? __pfx_stack_trace_save+0x10/0x10 [ 725.921331][T18189] ? stack_depot_save_flags+0x33/0x810 [ 725.921405][T18189] ? __pfx_path_openat+0x10/0x10 [ 725.921419][T18189] ? __x64_sys_openat+0x138/0x170 [ 725.921437][T18189] ? do_syscall_64+0x14d/0xf80 [ 725.921476][T18189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.921513][T18189] ? __lock_acquire+0x6b5/0x2cf0 [ 725.921534][T18189] do_file_open+0x23e/0x4a0 [ 725.921550][T18189] ? __pfx_do_file_open+0x10/0x10 [ 725.921571][T18189] ? _raw_spin_unlock+0x28/0x50 [ 725.921591][T18189] ? alloc_fd+0x64b/0x6c0 [ 725.921621][T18189] do_sys_openat2+0x113/0x200 [ 725.921644][T18189] ? __pfx_do_sys_openat2+0x10/0x10 [ 725.921664][T18189] ? exc_page_fault+0x6a/0xc0 [ 725.921701][T18189] ? do_user_addr_fault+0xc6f/0x1340 [ 725.921729][T18189] __x64_sys_openat+0x138/0x170 [ 725.921751][T18189] do_syscall_64+0x14d/0xf80 [ 725.921765][T18189] ? trace_irq_disable+0x3b/0x150 [ 725.921797][T18189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.921812][T18189] ? clear_bhb_loop+0x40/0x90 [ 725.921828][T18189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.921847][T18189] RIP: 0033:0x7f5ab9aa7407 [ 725.921869][T18189] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 725.921883][T18189] RSP: 002b:00007ffda0427770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 725.921932][T18189] RAX: ffffffffffffffda RBX: 00007f5aba151880 RCX: 00007f5ab9aa7407 [ 725.921943][T18189] RDX: 0000000000000000 RSI: 00007ffda0427f1b RDI: ffffffffffffff9c [ 725.921953][T18189] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 725.921962][T18189] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 725.921971][T18189] R13: 00007ffda04279c0 R14: 00007f5aba256000 R15: 000055cb1dad64d8 [ 725.921988][T18189] [ 725.921993][T18189] [ 726.237115][T18189] Allocated by task 15432: [ 726.241530][T18189] kasan_save_track+0x3e/0x80 [ 726.246388][T18189] __kasan_kmalloc+0x93/0xb0 [ 726.251155][T18189] __kmalloc_cache_noprof+0x31c/0x660 [ 726.256728][T18189] em28xx_v4l2_init+0x10b/0x2e70 [ 726.261988][T18189] em28xx_init_extension+0x120/0x1c0 [ 726.267480][T18189] process_scheduled_works+0xb02/0x1830 [ 726.273380][T18189] worker_thread+0xa50/0xfc0 [ 726.278358][T18189] kthread+0x388/0x470 [ 726.282454][T18189] ret_from_fork+0x51e/0xb90 [ 726.287219][T18189] ret_from_fork_asm+0x1a/0x30 [ 726.292161][T18189] [ 726.294468][T18189] Freed by task 15432: [ 726.298552][T18189] kasan_save_track+0x3e/0x80 [ 726.303744][T18189] kasan_save_free_info+0x46/0x50 [ 726.308958][T18189] __kasan_slab_free+0x5c/0x80 [ 726.313896][T18189] kfree+0x1c1/0x630 [ 726.317782][T18189] em28xx_v4l2_init+0x1683/0x2e70 [ 726.322936][T18189] em28xx_init_extension+0x120/0x1c0 [ 726.328212][T18189] process_scheduled_works+0xb02/0x1830 [ 726.333849][T18189] worker_thread+0xa50/0xfc0 [ 726.338873][T18189] kthread+0x388/0x470 [ 726.343988][T18189] ret_from_fork+0x51e/0xb90 [ 726.349381][T18189] ret_from_fork_asm+0x1a/0x30 [ 726.354443][T18189] [ 726.356955][T18189] The buggy address belongs to the object at ffff88801fea0000 [ 726.356955][T18189] which belongs to the cache kmalloc-8k of size 8192 [ 726.371614][T18189] The buggy address is located 1864 bytes inside of [ 726.371614][T18189] freed 8192-byte region [ffff88801fea0000, ffff88801fea2000) [ 726.386178][T18189] [ 726.388500][T18189] The buggy address belongs to the physical page: [ 726.395535][T18189] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fea0 [ 726.404405][T18189] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 726.413087][T18189] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 726.421168][T18189] page_type: f5(slab) [ 726.425432][T18189] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 726.436435][T18189] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 726.445901][T18189] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 726.455137][T18189] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 726.464671][T18189] head: 00fff00000000003 ffffea00007fa801 00000000ffffffff 00000000ffffffff [ 726.474174][T18189] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 726.483031][T18189] page dumped because: kasan: bad access detected [ 726.489908][T18189] page_owner tracks the page as allocated [ 726.495800][T18189] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5844, tgid 5844 (syz-executor), ts 94323078263, free_ts 94315720651 [ 726.517594][T18189] post_alloc_hook+0x231/0x280 [ 726.522646][T18189] get_page_from_freelist+0x24dc/0x2580 [ 726.528357][T18189] __alloc_frozen_pages_noprof+0x18d/0x380 [ 726.534247][T18189] allocate_slab+0x77/0x660 [ 726.538752][T18189] refill_objects+0x331/0x3c0 [ 726.543679][T18189] __pcs_replace_empty_main+0x2f9/0x5e0 [ 726.549229][T18189] __kvmalloc_node_noprof+0x657/0x8a0 [ 726.554771][T18189] pfifo_fast_init+0x112/0x6c0 [ 726.559729][T18189] qdisc_create_dflt+0x13b/0x510 [ 726.564758][T18189] dev_activate+0x378/0x1150 [ 726.569371][T18189] __dev_open+0x67a/0x830 [ 726.573889][T18189] __dev_change_flags+0x1f7/0x690 [ 726.578942][T18189] netif_change_flags+0x88/0x1a0 [ 726.583865][T18189] do_setlink+0xf82/0x4590 [ 726.588495][T18189] rtnl_newlink+0x15a9/0x1be0 [ 726.593385][T18189] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 726.598406][T18189] page last free pid 9 tgid 9 stack trace: [ 726.604461][T18189] __free_frozen_pages+0xc2b/0xdb0 [ 726.609577][T18189] __slab_free+0x263/0x2b0 [ 726.614345][T18189] qlist_free_all+0x97/0x100 [ 726.619118][T18189] kasan_quarantine_reduce+0x148/0x160 [ 726.624838][T18189] __kasan_slab_alloc+0x22/0x80 [ 726.629705][T18189] __kmalloc_cache_noprof+0x2ba/0x660 [ 726.635101][T18189] nsim_fib_event+0x4cb/0xa410 [ 726.640828][T18189] nsim_fib_event_work+0x254/0x3d0 [ 726.646373][T18189] process_scheduled_works+0xb02/0x1830 [ 726.652181][T18189] worker_thread+0xa50/0xfc0 [ 726.657134][T18189] kthread+0x388/0x470 [ 726.661722][T18189] ret_from_fork+0x51e/0xb90 [ 726.666315][T18189] ret_from_fork_asm+0x1a/0x30 [ 726.671171][T18189] [ 726.673628][T18189] Memory state around the buggy address: [ 726.680970][T18189] ffff88801fea0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.689728][T18189] ffff88801fea0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.698252][T18189] >ffff88801fea0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.706482][T18189] ^ [ 726.713178][T18189] ffff88801fea0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.721328][T18189] ffff88801fea0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.729382][T18189] ================================================================== [ 726.739438][ T8148] em28xx 5-1:0.132: Closing input extension [ 726.767052][T18189] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 726.774666][T18189] CPU: 1 UID: 0 PID: 18189 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 726.785354][T18189] Tainted: [L]=SOFTLOCKUP [ 726.790049][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.800496][T18189] Call Trace: [ 726.803800][T18189] [ 726.806851][T18189] vpanic+0x56c/0xa60 [ 726.811066][T18189] ? __pfx_vpanic+0x10/0x10 [ 726.815661][T18189] panic+0xc5/0xd0 [ 726.819637][T18189] ? __pfx_panic+0x10/0x10 [ 726.824511][T18189] ? preempt_schedule_thunk+0x16/0x30 [ 726.830056][T18189] ? preempt_schedule_thunk+0x16/0x30 [ 726.835781][T18189] ? v4l2_fh_open+0xac/0x420 [ 726.841009][T18189] check_panic_on_warn+0x89/0xb0 [ 726.846168][T18189] ? v4l2_fh_open+0xac/0x420 [ 726.850937][T18189] end_report+0x73/0x180 [ 726.855296][T18189] ? v4l2_fh_open+0xac/0x420 [ 726.860228][T18189] kasan_report+0x128/0x150 [ 726.865249][T18189] ? v4l2_fh_open+0xac/0x420 [ 726.870848][T18189] v4l2_fh_open+0xac/0x420 [ 726.876253][T18189] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 726.884389][T18189] em28xx_v4l2_open+0x157/0x9a0 [ 726.889494][T18189] ? do_raw_spin_lock+0x12b/0x2f0 [ 726.894749][T18189] v4l2_open+0x1bf/0x3a0 [ 726.899075][T18189] chrdev_open+0x4cd/0x5e0 [ 726.903490][T18189] ? __pfx_chrdev_open+0x10/0x10 [ 726.908616][T18189] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 726.916980][T18189] ? __pfx_chrdev_open+0x10/0x10 [ 726.922024][T18189] do_dentry_open+0x785/0x14e0 [ 726.927715][T18189] vfs_open+0x3b/0x340 [ 726.931981][T18189] ? path_openat+0x2df0/0x3860 [ 726.936955][T18189] path_openat+0x2e08/0x3860 [ 726.942185][T18189] ? __pfx_stack_trace_save+0x10/0x10 [ 726.948896][T18189] ? stack_depot_save_flags+0x33/0x810 [ 726.955254][T18189] ? __pfx_path_openat+0x10/0x10 [ 726.960840][T18189] ? __x64_sys_openat+0x138/0x170 [ 726.966316][T18189] ? do_syscall_64+0x14d/0xf80 [ 726.971098][T18189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.977813][T18189] ? __lock_acquire+0x6b5/0x2cf0 [ 726.982864][T18189] do_file_open+0x23e/0x4a0 [ 726.988068][T18189] ? __pfx_do_file_open+0x10/0x10 [ 726.993165][T18189] ? _raw_spin_unlock+0x28/0x50 [ 726.998534][T18189] ? alloc_fd+0x64b/0x6c0 [ 727.002960][T18189] do_sys_openat2+0x113/0x200 [ 727.007840][T18189] ? __pfx_do_sys_openat2+0x10/0x10 [ 727.013189][T18189] ? exc_page_fault+0x6a/0xc0 [ 727.018040][T18189] ? do_user_addr_fault+0xc6f/0x1340 [ 727.023497][T18189] __x64_sys_openat+0x138/0x170 [ 727.028361][T18189] do_syscall_64+0x14d/0xf80 [ 727.033133][T18189] ? trace_irq_disable+0x3b/0x150 [ 727.038270][T18189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.044450][T18189] ? clear_bhb_loop+0x40/0x90 [ 727.049661][T18189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.055820][T18189] RIP: 0033:0x7f5ab9aa7407 [ 727.060525][T18189] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 727.080484][T18189] RSP: 002b:00007ffda0427770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 727.089862][T18189] RAX: ffffffffffffffda RBX: 00007f5aba151880 RCX: 00007f5ab9aa7407 [ 727.097844][T18189] RDX: 0000000000000000 RSI: 00007ffda0427f1b RDI: ffffffffffffff9c [ 727.106182][T18189] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 727.114734][T18189] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 727.123487][T18189] R13: 00007ffda04279c0 R14: 00007f5aba256000 R15: 000055cb1dad64d8 [ 727.132267][T18189] [ 727.135928][T18189] Kernel Offset: disabled [ 727.140335][T18189] Rebooting in 86400 seconds..