last executing test programs: 2m45.749116404s ago: executing program 2 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1040) 2m45.490281078s ago: executing program 2 (id=310): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0) gettid() r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b00000000010902"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) 2m43.258525084s ago: executing program 2 (id=317): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001c80), 0x80, 0x0) read$eventfd(r0, 0x0, 0x0) 2m43.070482137s ago: executing program 2 (id=318): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 2m42.794730962s ago: executing program 2 (id=320): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m41.910516887s ago: executing program 2 (id=322): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000000040)) 2m41.414987114s ago: executing program 32 (id=322): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000000040)) 1m4.95248484s ago: executing program 5 (id=777): syz_emit_ethernet(0x56, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x149182, 0x10) ioctl$TCSETA(r0, 0x5406, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write(r2, &(0x7f0000000280)="b415202cc2a3c97a86318a512ce11da0ea4bb5d7b76942bc79d4f5c113b86e95f8bf9d1b1e0b2663fd7a75c72ce94ca45c39e2733d17eb9e819c11d2a4aa3284835bbe677a8cb364bdc1152ea0d28aaf979a05b9ca1687cd57b0f4dc0cf830f5c11ff30da7a24dfdae3083ef23c81af787b3b8d9356b1653f5bb88753fd4cc6b2ff02ea6d55430fd2d8633b9a7c41f41883d468bcf", 0x95) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) socketpair$unix(0x1, 0x7, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)}], 0x2}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x150, 0x150, 0x160, 0xf8010000, 0x278, 0x238, 0x238, 0x278, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0xffffff00], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x2, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8000, 0x4}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="c0f39ad6e5a67f845edafa8eb7b9ecfcb173523b76264ad505bfe52d44566fa7c3f5b1c0caaf8fb7438da78f51b2cc2bfa1e73d66f5a209af3d1abfe81c8330f48de028ca77bed8682", 0x49, 0x41, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) 1m3.874030767s ago: executing program 5 (id=782): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0xd, 0x4, 0x6b}, 0x2c) 1m3.797053228s ago: executing program 5 (id=783): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xa}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3396}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m3.382687665s ago: executing program 5 (id=784): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m3.09658436s ago: executing program 5 (id=785): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='cmdline\x00') read$FUSE(r0, 0x0, 0x0) 1m2.574500209s ago: executing program 5 (id=789): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 1m2.208125155s ago: executing program 33 (id=789): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 15.627249525s ago: executing program 0 (id=983): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800074003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 15.463237898s ago: executing program 0 (id=985): memfd_secret(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0xfffffffffffffffc, 0x7e20123c, 0x4, 0x8, 0x6, 0x8000000000000001, 0x3, 0xaac}, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7ff]}, 0x8}) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.804526891s ago: executing program 1 (id=993): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) 12.630594154s ago: executing program 1 (id=994): r0 = syz_usb_connect(0x5, 0x3d, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0xb1, 0xfb, 0x66, 0x10, 0x91e, 0x3, 0x35bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0xce, 0x1, 0x2, 0x6f, 0xda, 0xd, 0x0, [@generic={0x7, 0x5, "f71f22810b"}], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x1, 0x3, 0x40}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x3, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 12.318500129s ago: executing program 0 (id=997): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') pread64(r5, 0x0, 0x0, 0x20003) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) unshare(0x400) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000000c0), 0x0) syz_open_dev$evdev(0x0, 0x200, 0x0) unshare(0x40000580) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da204020014977470102030109022b000100000000090400"], 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x92, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') syz_pidfd_open(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x9, 0x0, 0x7ffff020}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) 10.468616339s ago: executing program 1 (id=1003): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x6c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0x1, 0x2}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x100, 0x7ffd, 0x2, 0x5744, 0xa173}}, {0x1f}}]}]}, 0x64}}, 0x0) 8.670259879s ago: executing program 0 (id=1006): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b0000904000001030101000921000800012201000905810315"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0x16, 0x4, "7d470003"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000080)={0x20, 0x23, 0x57, {0x57, 0x21, "d4ceb4a6099eab8f76fad5e4f4403590d2d49666fa5b39681e4caf52cca3421dd4062be1552c6c763148508a82c85aedcc707d30911ac1939f051ebfecc5669c5ac4c175b81025c158b815048c8fb39c0c4c7f7987"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000100)={0x0, 0x22, 0xc, {[@global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x2, 0x1, 0x6, 'n\f'}, @global=@item_4={0x3, 0x1, 0x6, "b8dd764a"}, @main=@item_012={0x1, 0x0, 0xb, 'v'}, @global=@item_012={0x0, 0x1, 0xf}]}}, 0x0}, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x5}}) 7.635091635s ago: executing program 4 (id=1013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in, 0x0, 0x33}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x2000000000000}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'blake2b-160\x00'}}}]}, 0x184}}, 0x0) 7.634328316s ago: executing program 3 (id=1014): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e2, @void, @value}, 0x31) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.426287069s ago: executing program 4 (id=1015): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4004851) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) 7.324856601s ago: executing program 4 (id=1016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@mcast1, 0x0, 0xe, 0x0, 0xfffe, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x4, 0x0, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0xbb8) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) 7.187029243s ago: executing program 3 (id=1017): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') pread64(r5, 0x0, 0x0, 0x20003) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) unshare(0x400) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000000c0), 0x0) syz_open_dev$evdev(0x0, 0x200, 0x0) unshare(0x40000580) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da204020014977470102030109022b000100000000090400"], 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x92, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') syz_pidfd_open(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x9, 0x0, 0x7ffff020}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) 6.306600538s ago: executing program 1 (id=1018): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) unshare(0x68040200) syz_open_dev$dri(0x0, 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 5.385756732s ago: executing program 0 (id=1023): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x48) statx(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x400, &(0x7f0000000340)) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000580)={{0x1, 0x100, 0x4, 0x1, 0x81, 0x9}, 0x97, [0x4, 0x4, 0x3, 0xe9f5, 0x7, 0xfff, 0x40, 0x3ff, 0x7, 0xfa44, 0x1, 0x6, 0x6, 0xec, 0x7fffffff, 0x168, 0x4, 0x100, 0xb, 0x0, 0x9, 0x7, 0xad2a, 0x3, 0x2, 0x2b0, 0x80, 0xfff, 0x10000, 0xf, 0x1000, 0x7, 0x46e0, 0x5, 0x8, 0x6, 0x6, 0xffffff2b, 0x4, 0x10000, 0x8, 0xb7, 0x3, 0x4, 0x1, 0x9, 0x6, 0x10000, 0x2, 0xff, 0x6, 0xc, 0x3, 0x0, 0x8, 0x6dab, 0x1, 0x6, 0x1, 0x9, 0x2, 0x4, 0x1, 0x947, 0x1, 0x1, 0x1, 0xfffffff9, 0x8, 0x9, 0x7ff, 0xf3, 0x2, 0xdd5, 0x562, 0x61, 0x74720e6a, 0x0, 0x7, 0x5, 0xfffffffe, 0x7, 0xde8, 0x2c, 0x101, 0x4, 0x9, 0x8, 0xc3bf, 0x7fffffff, 0x5, 0xd, 0x8000, 0x2f63, 0x4, 0x6, 0x1, 0x1, 0x2, 0x80000000, 0xffff4104, 0xfff, 0x5, 0xff, 0x0, 0x10000, 0x9, 0x3ff, 0x7, 0x7, 0x8, 0x8000, 0x3, 0x6, 0xf, 0x8, 0xfffffffc, 0x100, 0x8, 0x8, 0x33, 0x2, 0x6, 0x6, 0x4, 0x0, 0x4c5, 0xb794, 0x7, 0x4, 0x4f42, 0x4, 0x8c4, 0x2, 0xa, 0x710, 0x6, 0x80000001, 0x8, 0x5d13, 0x8001, 0x2, 0x7b, 0x64, 0x9, 0x6, 0xf5f0, 0x4, 0x5, 0x100, 0x1, 0x8, 0x8, 0x200, 0x5, 0x2, 0x115, 0x8000, 0x80000000, 0x8, 0x6, 0x7, 0x4, 0x4, 0x80000000, 0x36f, 0x6, 0x7, 0x6, 0x10, 0x5, 0x7, 0x401, 0x6, 0x601, 0x6, 0x5, 0x3, 0x9, 0x60, 0x8, 0x7, 0x0, 0x6, 0x8, 0x0, 0x1ff, 0x6, 0x0, 0xc70, 0x7b, 0x3, 0x7, 0x6, 0x5, 0x3, 0x4, 0x80000001, 0x7, 0xa, 0x9, 0x123a00, 0x6, 0x0, 0x200, 0x80000000, 0x1, 0x81, 0x8001, 0x61c00000, 0xb7, 0x0, 0x6, 0x7f, 0x1000, 0x3, 0x40, 0x80000001, 0x7fffffff, 0x2, 0x18, 0x8, 0x2, 0x5, 0x4, 0x3, 0x9, 0x9, 0x1, 0x5, 0x9, 0xfff, 0x6, 0x7, 0x6, 0x3, 0x8, 0x2, 0x10000, 0x3, 0x6, 0x80000001, 0xfffffc00, 0x3, 0x5, 0x401, 0x800, 0x6, 0x8, 0x400, 0x9, 0x2fa, 0x200, 0x7, 0x8, 0xa9, 0x5, 0x90e, 0xfffffffd, 0x1, 0x0, 0x5c3, 0x40a7c427, 0x8001, 0x45d1, 0x1ff, 0x6, 0x2f, 0x5, 0x56c4, 0x6, 0x7, 0xfdce, 0x9, 0x3, 0x5, 0x4, 0xffffffff, 0x1, 0x0, 0x4, 0x80, 0x8, 0x1d, 0xb, 0x40, 0x400, 0xcd93, 0xfffffffe, 0x6, 0x36, 0xe, 0x9, 0xfffffffb, 0x4, 0x7fff, 0x8, 0x9, 0xff, 0x8000, 0x36, 0x4, 0x68, 0x0, 0xfffffffe, 0x77466976, 0xe, 0x0, 0x1, 0x9, 0x7ff, 0x5, 0xec, 0x6, 0x8, 0x2, 0x8, 0x9, 0x17f5, 0x3, 0x6e, 0x5, 0x6, 0x4, 0x8001, 0x608, 0x4, 0x9e, 0x1, 0x6, 0x5, 0x8, 0x7f, 0x100, 0x81, 0x5, 0x5, 0x4, 0x9, 0x0, 0x52b, 0x1, 0x8, 0x1, 0x9, 0x4, 0x2, 0x4, 0x100, 0x5, 0x2, 0x4, 0x40, 0x40, 0x0, 0xb, 0x9, 0xb, 0x0, 0x4, 0x2, 0xec2, 0xa, 0x7ff, 0x9, 0x7fff, 0x2e32, 0x7ff, 0xb3, 0x22, 0xfeb9, 0x8, 0x3, 0x0, 0x19, 0x83, 0x0, 0xffffffff, 0x4698d2d7, 0x5, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4, 0x6, 0x401, 0x1, 0x200, 0x8, 0x7ff, 0x8, 0x9, 0x8, 0x10, 0xfffffffa, 0x1, 0x8, 0x66e, 0x10001, 0x3, 0x4, 0x5, 0x8, 0x4, 0x40d7, 0x5, 0x0, 0x0, 0xfc, 0xd800, 0x1, 0x9, 0x5, 0x2, 0x9, 0x7, 0x6, 0xff, 0x7, 0x2, 0x400, 0xfffffffb, 0x0, 0x3, 0x1, 0x4, 0x0, 0x3, 0x6, 0xfff, 0x0, 0x6, 0xf, 0x1, 0x4, 0x2, 0x4, 0x8, 0x77, 0x7, 0x101, 0x4, 0xffffffff, 0x4, 0xfffffbdd, 0x0, 0x1, 0x10, 0x3ff, 0x0, 0x6, 0x3f0, 0x1000, 0x5, 0x4, 0x5, 0x4, 0x8bc, 0x1, 0xfffffffd, 0x81, 0x9, 0x0, 0xb2, 0x3, 0x31, 0xfffffff8, 0x5, 0x8000, 0x7, 0x100, 0x3, 0x3, 0x5, 0xfffff001, 0x4, 0x7f, 0x3c, 0x0, 0x3, 0x0, 0x3f6e, 0xaec, 0x0, 0x31ec, 0x7, 0xfffffab3, 0x8a7, 0x7ff, 0x7, 0x2, 0x1, 0x1, 0x7fe, 0xb, 0x6, 0xd, 0x0, 0x44, 0x9, 0x6, 0x8, 0x8001, 0x1, 0x3ff, 0x9, 0xa, 0x6, 0x2, 0x2, 0x9, 0xe, 0xd26, 0x4, 0xfffff2f8, 0x6, 0x6, 0x80, 0x4, 0x7e6bee85, 0x7ff, 0x7fff, 0x5, 0x9, 0x482, 0x7, 0x80000000, 0x1, 0x4, 0xfffffffa, 0x7, 0x8, 0x2, 0x3, 0x698d, 0x0, 0x122, 0xffff6f36, 0x3, 0xffff, 0x4, 0x6, 0x10001, 0xfffffffd, 0x6, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x8, 0x9, 0x400, 0x4, 0x9, 0x3ff, 0x4, 0x0, 0x9, 0x6, 0x5, 0x8, 0x45, 0x2, 0x6, 0x7, 0x3ff, 0x8a8, 0x401, 0x4, 0x0, 0x1ff, 0x5, 0xbf, 0xfffffff8, 0x6, 0x2, 0xe32f, 0x0, 0xffffffff, 0x7, 0x0, 0x4, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8000, 0x9, 0x9, 0x7, 0x7, 0x3, 0x7fffffff, 0x3, 0xfffffff5, 0x6, 0x8001, 0x81, 0x4, 0x3, 0x8000, 0x1, 0xfffffff8, 0x92, 0x7, 0xc, 0xa, 0x4, 0x0, 0x8000, 0xe5, 0x1, 0x6, 0x6, 0x3, 0x9, 0x1, 0x4, 0x5, 0x8, 0x9, 0x252, 0x5, 0x6, 0x1, 0xf204, 0x2, 0x1, 0x5, 0x8001, 0x7, 0x5, 0x5, 0x1, 0x1, 0x5, 0x9, 0xfffffff8, 0x4, 0x7fffffff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x0, 0xc39f, 0x1, 0x3, 0x9, 0x3, 0x7, 0x800, 0xd, 0x5, 0xdc4b, 0x6, 0x9, 0x4fb, 0x5, 0x5, 0x0, 0x4, 0x4, 0x7f, 0x6, 0x5, 0x1000, 0xf, 0x3, 0xb8, 0xffff, 0x0, 0xffffffff, 0x86f, 0x3, 0x2, 0x7fffffff, 0x5, 0x3, 0x4, 0xff, 0x5, 0x0, 0x226c5e59, 0x4, 0x7, 0x3, 0x5, 0x3, 0x1, 0x3, 0x3, 0x50, 0x8858, 0x6, 0x8000, 0xe, 0x6, 0x9, 0x6, 0xffffb3cd, 0x4, 0x3a1a, 0xa4, 0x6, 0x9, 0x44a, 0x3, 0xb1b, 0x3, 0x92be, 0x10, 0x7fffffff, 0xd6b6, 0x7, 0xd7, 0x3, 0x90, 0x0, 0x9, 0x6, 0x2, 0xb95b, 0x5, 0x7, 0x482d, 0x1, 0x3ff, 0x8, 0x8, 0x200, 0x20000, 0x9, 0x280, 0x0, 0x64a5c8f, 0x0, 0x3, 0xffffffff, 0x7, 0x100, 0x9, 0x3, 0x8, 0x5, 0xfb31, 0x4, 0x7ff, 0x3, 0x1, 0x2, 0x6363fcbf, 0xbd, 0x0, 0x3ff, 0x40, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5e3, 0xd82, 0x1, 0xfffff001, 0x1, 0x1000, 0x4, 0x0, 0x72, 0x7fffffff, 0x94d, 0x8, 0x4, 0xf, 0x6, 0x2, 0x3ff, 0xa, 0x80, 0xb, 0x5, 0x0, 0x9, 0x9, 0x8001, 0x284, 0x8000, 0x6, 0xffffb6ab, 0x2, 0x1, 0x7, 0x80000000, 0xffffffff, 0x2, 0x3, 0x6, 0x3fbfd950, 0xfffffff7, 0x0, 0x1, 0x4, 0x2, 0x2, 0x5, 0x2, 0x8, 0x0, 0x6, 0x3, 0x7fffffff, 0x7, 0x702, 0x99, 0x2, 0x9, 0x58d, 0x8, 0x2, 0x2, 0x5, 0x1, 0x3c21, 0xd53c, 0xf, 0x5, 0x8, 0x8, 0x3, 0x9, 0x5, 0x7fff, 0x2, 0x2, 0x1, 0x8, 0xfffffffc, 0x4, 0x10, 0x2, 0x2, 0xfff, 0x8, 0x4, 0x51c, 0x4bd50, 0x0, 0x1, 0x57b, 0xffffffaf, 0x9, 0x9, 0x1, 0x2, 0x7f, 0xfcd, 0x10000, 0x6, 0xa0, 0x1, 0x3, 0xfffffff8, 0x4, 0x9, 0x1, 0x7, 0x9, 0xfff, 0x5, 0x8, 0x8, 0xc, 0xfa, 0x1, 0xf287, 0x6d8, 0x81, 0xd, 0x5730, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x9, 0xe64, 0x8000, 0x3, 0x6, 0x1000, 0x4, 0x1, 0x10000, 0x800, 0x10, 0xf, 0x3d7, 0x0, 0x4, 0x1, 0x2a, 0x4, 0xf7cd, 0x68, 0xfffffff9, 0x1, 0x81, 0x7, 0x1000, 0x9403, 0x6, 0x7, 0x401, 0xe, 0xfffffffc, 0x7, 0x1, 0x1, 0xd, 0x3, 0x3, 0x40, 0x4, 0x1, 0xffff701c, 0x3, 0xcc, 0x3, 0x7, 0x9, 0x9, 0x1, 0x0, 0x6, 0x8, 0xc686, 0x56a3, 0x9, 0xdf, 0x1, 0x4, 0x8, 0xc, 0x5, 0x5, 0x7, 0xfff, 0xd, 0xfff, 0x3, 0x1ff, 0xc42, 0x40, 0x5, 0x1, 0x8, 0xbb, 0x2, 0x3, 0x2, 0xfffff801, 0x4c, 0x5, 0x7, 0x10, 0x2, 0x8, 0x101, 0x1, 0x2, 0xfffffff9, 0x3, 0x4, 0x80000, 0xc0000000, 0x0, 0x0, 0x1, 0x1, 0xffff, 0x1, 0x2, 0x9, 0x7fff, 0x81, 0x1, 0x0, 0x5, 0x1, 0x1a, 0x3, 0xfffff7d4, 0x4, 0x28f4, 0x9, 0xfffffe01, 0x6, 0x6, 0x0, 0x18, 0x3, 0x1ff, 0x6, 0x2, 0x9, 0x1, 0xffff2653, 0xfffffff9, 0x3f9e, 0x6, 0x3, 0x400, 0x8, 0x3, 0xe, 0x10, 0x8, 0xffffff81]}) 5.159724326s ago: executing program 1 (id=1025): syz_usb_connect(0x6, 0x7a, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev, 0x2}}, 0x24) fcntl$getflags(r0, 0x3) r1 = socket(0x10, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000280)='./file5\x00', 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000140)='./file5/../file0\x00', 0x49, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) write$cgroup_int(r3, &(0x7f0000000040)=0x902, 0x12) 4.714974963s ago: executing program 4 (id=1026): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4004851) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) 4.607355315s ago: executing program 6 (id=1027): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e2, @void, @value}, 0x31) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.607001465s ago: executing program 4 (id=1028): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 4.372737369s ago: executing program 4 (id=1029): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(r0, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.145010582s ago: executing program 6 (id=1030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008004"]) 3.801607489s ago: executing program 6 (id=1031): unshare(0x400) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x22}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 3.68108016s ago: executing program 3 (id=1032): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) renameat2(r2, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) 3.434533324s ago: executing program 3 (id=1033): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b0000904000001030101000921000800012201000905810315"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0x16, 0x4, "7d470003"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000080)={0x20, 0x23, 0x57, {0x57, 0x21, "d4ceb4a6099eab8f76fad5e4f4403590d2d49666fa5b39681e4caf52cca3421dd4062be1552c6c763148508a82c85aedcc707d30911ac1939f051ebfecc5669c5ac4c175b81025c158b815048c8fb39c0c4c7f7987"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000100)={0x0, 0x22, 0xc, {[@global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x2, 0x1, 0x6, 'n\f'}, @global=@item_4={0x3, 0x1, 0x6, "b8dd764a"}, @main=@item_012={0x1, 0x0, 0xb, 'v'}, @global=@item_012={0x0, 0x1, 0xf}]}}, 0x0}, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x5}}) 2.935768542s ago: executing program 6 (id=1034): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x40004, 0x25dfdbfe, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0xe, @in6={0xa, 0x4e22, 0xea5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}}, @sadb_sa={0x2, 0x1, 0x5, 0x0, 0x0, 0x7, 0x2, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x200000f4}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}]}, 0x78}}, 0x8810) 2.686284517s ago: executing program 6 (id=1035): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.46488216s ago: executing program 1 (id=1036): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x41, &(0x7f00000000c0)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x72, 0xa0, 0x66, 0x10, 0x2058, 0x1005, 0xe81f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb4, 0x2, 0x0, 0x90, 0x27, 0xd0, 0x80}}]}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xd, 0x25, 0x4, 0x8, 0x75}, 0x5, &(0x7f0000000840)=ANY=[]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 2.268955223s ago: executing program 0 (id=1037): socket(0x2, 0x3, 0xff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) memfd_create(0x0, 0xe) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSERGETLSR(r3, 0x5459, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x52, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, 0x0, 0x4000800) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000000240)={0x68, [0x4, 0x1, 0xb], [{0x3ff, 0x3ff, 0x0, 0x0, 0x0, 0x1}, {0x10000, 0xb, 0x0, 0x0, 0x1}, {0x100, 0x7, 0x1, 0x1, 0x1, 0x1}, {0xcd, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7}, {0x5, 0xde1, 0x0, 0x1, 0x1, 0x1}, {0x404, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x80000000, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x401, 0x1, 0x1, 0x1, 0x1}], 0x2}) r7 = io_uring_setup(0x30d5, &(0x7f00000001c0)) r8 = syz_open_dev$usbmon(&(0x7f0000007040), 0x3, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f00000070c0)={0x0, 0x0, 0x80}) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000001080)={0x31, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r10, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x18000}) 799.663667ms ago: executing program 6 (id=1038): shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002940)=ANY=[], 0x20) 307.342265ms ago: executing program 3 (id=1039): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003500), 0x0, 0x4004851) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) 0s ago: executing program 3 (id=1040): socket(0x2, 0x80805, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xee082) r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x3]}, 0x8, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000019c0)) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"4a354a1d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", "001000", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "03000000000000006a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x3, 0x0, 0x0, 0x0, "01e60000000000000034dbb39fe6083a"}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) kernel console output (not intermixed with test programs): RCU local softirq work is pending, handler #8a!!! [ 126.491203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 126.500301][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 126.509262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 126.518157][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 126.527567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 126.536472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 126.545448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 126.554831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 127.011866][ T4217] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.212964][ T5199] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 127.294224][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 127.304695][ T4217] usb 1-1: Using ep0 maxpacket: 16 [ 127.422066][ T4217] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.511850][ T4217] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 127.589108][ T4217] usb 1-1: can't read configurations, error -71 [ 128.287270][ T26] audit: type=1804 audit(1745046957.863:3): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.282" name="/newroot/44/file1" dev="fuse" ino=1 res=1 errno=0 [ 128.386377][ T26] audit: type=1800 audit(1745046957.883:4): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="/" dev="fuse" ino=1 res=0 errno=0 [ 128.569893][ T26] audit: type=1804 audit(1745046957.893:5): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.282" name="/newroot/44/file1" dev="fuse" ino=1 res=1 errno=0 [ 128.757685][ T26] audit: type=1800 audit(1745046957.893:6): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="/" dev="fuse" ino=1 res=0 errno=0 [ 129.399433][ T4365] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 129.429645][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 129.474932][ T5238] netlink: 5 bytes leftover after parsing attributes in process `syz.2.289'. [ 129.587396][ T5241] netlink: 'syz.3.284': attribute type 25 has an invalid length. [ 129.651727][ T4365] usb 5-1: Using ep0 maxpacket: 8 [ 129.772328][ T4365] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x73, skipping [ 129.952033][ T4365] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 129.981786][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.989916][ T4365] usb 5-1: Product: syz [ 130.014847][ T4365] usb 5-1: Manufacturer: syz [ 130.019483][ T4365] usb 5-1: SerialNumber: syz [ 130.058051][ T4365] usb 5-1: config 0 descriptor?? [ 130.061815][ T4979] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 130.119229][ T4365] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 130.323627][ T4365] usb 5-1: USB disconnect, device number 16 [ 130.488514][ T4979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.503264][ T4979] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 130.528425][ T4979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.561242][ T4979] usb 1-1: config 0 descriptor?? [ 130.604086][ T4979] pwc: Askey VC010 type 2 USB webcam detected. [ 130.842049][ T5258] Zero length message leads to an empty skb [ 131.241904][ T4979] pwc: recv_control_msg error -71 req 02 val 2700 [ 131.253550][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 131.263499][ T4979] pwc: recv_control_msg error -71 req 02 val 2c00 [ 131.311917][ T4979] pwc: recv_control_msg error -71 req 04 val 1000 [ 131.343158][ T4979] pwc: recv_control_msg error -71 req 04 val 1300 [ 131.381875][ T4979] pwc: recv_control_msg error -71 req 04 val 1400 [ 131.431851][ T4979] pwc: recv_control_msg error -71 req 02 val 2000 [ 131.461697][ T4365] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.481794][ T4979] pwc: recv_control_msg error -71 req 02 val 2100 [ 131.506923][ T4979] pwc: recv_control_msg error -71 req 04 val 1500 [ 131.557155][ T4979] pwc: recv_control_msg error -71 req 02 val 2500 [ 131.724543][ T4979] pwc: recv_control_msg error -71 req 02 val 2400 [ 131.751872][ T4979] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.071769][ T4365] usb 4-1: Using ep0 maxpacket: 16 [ 132.081876][ T4979] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.101754][ T4979] pwc: recv_control_msg error -71 req 02 val 2800 [ 132.121835][ T4979] pwc: recv_control_msg error -71 req 04 val 1100 [ 132.141875][ T4979] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.157808][ T4979] pwc: Registered as video103. [ 132.173390][ T4979] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 132.192129][ T4365] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 132.194093][ T4979] usb 1-1: USB disconnect, device number 13 [ 132.471962][ T4365] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.502255][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.510306][ T4365] usb 4-1: Product: syz [ 132.550477][ T26] audit: type=1326 audit(1745046962.123:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd369b169 code=0x7ffc0000 [ 132.591721][ T4365] usb 4-1: Manufacturer: syz [ 132.611723][ T4365] usb 4-1: SerialNumber: syz [ 132.632931][ T4365] usb 4-1: config 0 descriptor?? [ 132.650518][ T26] audit: type=1326 audit(1745046962.183:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f5bd369b169 code=0x7ffc0000 [ 132.674347][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.674442][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.093392][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 134.186535][ T4367] usb 4-1: USB disconnect, device number 11 [ 134.636622][ T5321] sctp: failed to load transform for md5: -2 [ 137.168704][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 137.331835][ T4367] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 137.404247][ T5354] team0 (unregistering): Port device team_slave_0 removed [ 137.458414][ T5354] team0 (unregistering): Port device team_slave_1 removed [ 137.691966][ T4367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.721959][ T4367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.757871][ T4367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.775748][ T4367] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.785335][ T4367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.795853][ T4367] usb 1-1: config 0 descriptor?? [ 138.091228][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 138.274446][ T4367] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 138.290700][ T4367] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 138.310226][ T4367] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 138.359307][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.371328][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.389074][ T5358] device bridge_slave_0 entered promiscuous mode [ 138.429155][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.456595][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.468282][ T5358] device bridge_slave_1 entered promiscuous mode [ 138.547973][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.573701][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.669618][ T5358] team0: Port device team_slave_0 added [ 138.689231][ T5358] team0: Port device team_slave_1 added [ 138.756213][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.779580][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.822805][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.849096][ T5378] netlink: 'syz.3.332': attribute type 25 has an invalid length. [ 138.863497][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.874497][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.923173][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.993950][ T4267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.040363][ T5358] device hsr_slave_0 entered promiscuous mode [ 139.160172][ T5358] device hsr_slave_1 entered promiscuous mode [ 139.189130][ T5358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.222125][ T5358] Cannot create hsr debugfs directory [ 139.312121][ T4217] Bluetooth: hci3: command 0x0409 tx timeout [ 139.339895][ T4267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.732562][ T4267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.891156][ T4267] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.505945][ T4980] usb 1-1: USB disconnect, device number 14 [ 140.661604][ T5358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.740783][ T5358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.816628][ T5358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.850722][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 140.873940][ T5358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.328549][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.391862][ T4217] Bluetooth: hci3: command 0x041b tx timeout [ 141.428252][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.459442][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.529466][ T5358] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.596471][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.611692][ T4367] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.650548][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.695870][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.703199][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.757999][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.802134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.820423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.874653][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.881796][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.958313][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.982587][ T4367] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.998764][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.023796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.034285][ T4367] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.061502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.090452][ T4367] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.162586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.185258][ T4367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.202878][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.252029][ T5420] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.278317][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.366200][ T5358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.402077][ T5358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.455403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.482561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.499084][ T4219] usb 4-1: USB disconnect, device number 12 [ 142.527701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.570086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.768278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.481765][ T4982] Bluetooth: hci3: command 0x040f tx timeout [ 143.757839][ T4267] device hsr_slave_0 left promiscuous mode [ 143.804970][ T4267] device hsr_slave_1 left promiscuous mode [ 143.908171][ T4267] device veth1_macvtap left promiscuous mode [ 143.927946][ T4267] device veth0_macvtap left promiscuous mode [ 143.969713][ T4267] device veth1_vlan left promiscuous mode [ 144.008802][ T4267] device veth0_vlan left promiscuous mode [ 145.280426][ T4267] bond0 (unregistering): Released all slaves [ 145.411681][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 145.431038][ T5478] netlink: 'syz.1.348': attribute type 25 has an invalid length. [ 145.493523][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.550411][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.558189][ T4980] Bluetooth: hci3: command 0x0419 tx timeout [ 145.560914][ T5497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'. [ 145.596751][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.941935][ T4980] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.252402][ T4980] usb 4-1: Using ep0 maxpacket: 16 [ 146.300128][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.322979][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.542927][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.606784][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.632001][ T4980] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 146.638102][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.658949][ T4980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.679308][ T4980] usb 4-1: Product: syz [ 146.688747][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.696371][ T4980] usb 4-1: Manufacturer: syz [ 146.726240][ T5358] device veth0_vlan entered promiscuous mode [ 146.736951][ T4980] usb 4-1: SerialNumber: syz [ 146.772799][ T4980] usb 4-1: config 0 descriptor?? [ 146.778325][ T5525] device netdevsim0 entered promiscuous mode [ 146.823416][ T5358] device veth1_vlan entered promiscuous mode [ 146.839413][ T4980] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 146.978459][ T5358] device veth0_macvtap entered promiscuous mode [ 147.006858][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.032623][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.079678][ T5358] device veth1_macvtap entered promiscuous mode [ 147.106760][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.154900][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.218587][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.224233][ T5499] udc-core: couldn't find an available UDC or it's busy [ 147.308987][ T5499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.313594][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.361735][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.408743][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.439285][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.497049][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.540481][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.615524][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.653248][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.725954][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.738553][ T4980] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 147.759838][ T4980] visor: probe of 4-1:0.0 failed with error -71 [ 147.789709][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.821776][ T4980] usb 4-1: USB disconnect, device number 13 [ 147.846762][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.918951][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.971301][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.023197][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.085129][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.144993][ T5358] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.204800][ T5358] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.251633][ T5358] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.291504][ T5358] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.333431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.358023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.452271][ T4368] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.502125][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 148.650014][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.700728][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.708581][ T4368] usb 1-1: Using ep0 maxpacket: 16 [ 148.783790][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.818803][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.842185][ T4368] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 148.868758][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.886856][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.042057][ T4368] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.065705][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.117413][ T4368] usb 1-1: Product: syz [ 149.143684][ T4368] usb 1-1: Manufacturer: syz [ 149.160963][ T4368] usb 1-1: SerialNumber: syz [ 149.189835][ T4368] usb 1-1: config 0 descriptor?? [ 150.083418][ T5612] netlink: 'syz.1.368': attribute type 25 has an invalid length. [ 150.707410][ T4982] usb 1-1: USB disconnect, device number 15 [ 151.153224][ T5640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 152.141729][ T4980] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 152.541754][ T4980] usb 4-1: config 0 has no interfaces? [ 153.081994][ T4980] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 153.102375][ T4980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.163181][ T4980] usb 4-1: Product: syz [ 153.212936][ T4980] usb 4-1: Manufacturer: syz [ 153.241754][ T4980] usb 4-1: SerialNumber: syz [ 153.297798][ T4980] usb 4-1: config 0 descriptor?? [ 153.387429][ T5697] program syz.0.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.822762][ T4980] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 154.081650][ T4980] usb 1-1: Using ep0 maxpacket: 8 [ 154.201864][ T4980] usb 1-1: config 0 has no interfaces? [ 154.207426][ T4980] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 154.626979][ T4980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.685159][ T4980] usb 1-1: config 0 descriptor?? [ 155.369152][ T5750] xt_hashlimit: size too large, truncated to 1048576 [ 155.643544][ T5757] netlink: 'syz.4.394': attribute type 25 has an invalid length. [ 155.732043][ T5653] usb 4-1: USB disconnect, device number 14 [ 156.589084][ T4980] usb 1-1: USB disconnect, device number 16 [ 156.683983][ T5776] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.283214][ T5789] device gretap0 entered promiscuous mode [ 157.343298][ T5787] device gretap0 left promiscuous mode [ 158.145591][ T5808] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.408274][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 159.705097][ T5845] HTB: quantum of class 8001000A is big. Consider r2q change. [ 160.851718][ T4980] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 160.908925][ T5864] input: syz1 as /devices/virtual/input/input8 [ 161.177873][ T5856] netlink: 'syz.4.425': attribute type 25 has an invalid length. [ 161.257495][ T4980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.278418][ T4980] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.336532][ T4980] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 161.366198][ T4980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.407187][ T4980] usb 2-1: config 0 descriptor?? [ 161.719783][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 161.960293][ T26] audit: type=1326 audit(1745046991.533:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.4.434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bd369b169 code=0x0 [ 162.043543][ T5888] udc-core: couldn't find an available UDC or it's busy [ 162.061649][ T5888] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.261725][ T4980] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.531715][ T4980] usb 4-1: Using ep0 maxpacket: 16 [ 162.599235][ T5894] futex_wake_op: syz.0.433 tries to shift op by -33; fix this program [ 162.878114][ T4980] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 162.895427][ T4980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.925301][ T4980] usb 4-1: Product: syz [ 162.945199][ T4980] usb 4-1: Manufacturer: syz [ 162.949848][ T4980] usb 4-1: SerialNumber: syz [ 162.987448][ T4980] usb 4-1: config 0 descriptor?? [ 163.053491][ T4980] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 163.253623][ T5886] udc-core: couldn't find an available UDC or it's busy [ 163.269616][ T5886] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.313346][ T4980] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 163.320689][ T4980] visor: probe of 4-1:0.0 failed with error -71 [ 163.394431][ T4980] usb 4-1: USB disconnect, device number 15 [ 163.600223][ T13] usb 2-1: USB disconnect, device number 14 [ 164.153722][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 164.648525][ T5916] netlink: 'syz.5.443': attribute type 25 has an invalid length. [ 164.874190][ T5932] fuse: blksize only supported for fuseblk [ 165.901203][ T5947] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 165.947882][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 166.048981][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 166.521713][ T13] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 167.001868][ T13] usb 5-1: config 0 has no interfaces? [ 167.043935][ T5977] netlink: 'syz.3.461': attribute type 25 has an invalid length. [ 167.321795][ T4217] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 167.329474][ T13] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 167.351860][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.381161][ T13] usb 5-1: Product: syz [ 167.393515][ T13] usb 5-1: Manufacturer: syz [ 167.410049][ T13] usb 5-1: SerialNumber: syz [ 167.450647][ T13] usb 5-1: config 0 descriptor?? [ 167.721781][ T4217] usb 6-1: config 0 has no interfaces? [ 167.893976][ T4217] usb 6-1: New USB device found, idVendor=148f, idProduct=2573, bcdDevice=23.a8 [ 167.922609][ T4217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.962086][ T4217] usb 6-1: Product: syz [ 167.979456][ T4217] usb 6-1: Manufacturer: syz [ 168.026736][ T4217] usb 6-1: SerialNumber: syz [ 168.071791][ T4217] usb 6-1: config 0 descriptor?? [ 168.599487][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 169.491316][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 170.046890][ T13] usb 6-1: USB disconnect, device number 2 [ 170.153107][ T21] usb 5-1: USB disconnect, device number 17 [ 170.550076][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 171.816430][ T6126] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[6126] [ 172.621133][ T6146] loop2: detected capacity change from 0 to 1 [ 172.686317][ T6146] Dev loop2: unable to read RDB block 1 [ 172.726984][ T6146] loop2: unable to read partition table [ 172.760328][ T6146] loop2: partition table beyond EOD, truncated [ 172.807929][ T6146] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 173.021862][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 173.421741][ T21] usb 6-1: config 0 has no interfaces? [ 173.431227][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 173.711852][ T21] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 173.766372][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.813260][ T21] usb 6-1: Product: syz [ 173.817558][ T21] usb 6-1: Manufacturer: syz [ 173.849850][ T21] usb 6-1: SerialNumber: syz [ 173.892039][ T21] usb 6-1: config 0 descriptor?? [ 174.191685][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 174.451667][ T4980] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.571797][ T23] usb 2-1: config 0 has no interfaces? [ 174.731883][ T23] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 174.756377][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.780321][ T23] usb 2-1: Product: syz [ 174.819110][ T23] usb 2-1: Manufacturer: syz [ 174.838870][ T23] usb 2-1: SerialNumber: syz [ 174.851748][ T4980] usb 5-1: config 0 has no interfaces? [ 174.880396][ T23] usb 2-1: config 0 descriptor?? [ 175.204886][ T4980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.233799][ T4980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.289833][ T4980] usb 5-1: Product: syz [ 175.322414][ T4980] usb 5-1: Manufacturer: syz [ 175.350925][ T4980] usb 5-1: SerialNumber: syz [ 175.388339][ T4980] usb 5-1: config 0 descriptor?? [ 176.727589][ T4217] usb 6-1: USB disconnect, device number 3 [ 177.231357][ T4217] usb 2-1: USB disconnect, device number 15 [ 178.754585][ T6210] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.771120][ T6210] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.782518][ T6210] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.791428][ T6210] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.962396][ T6224] tipc: Started in network mode [ 178.971700][ T6224] tipc: Node identity 4, cluster identity 4711 [ 179.007697][ T6224] tipc: Node number set to 4 [ 179.010333][ T5653] usb 5-1: USB disconnect, device number 18 [ 179.040589][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 179.236567][ T6244] mmap: syz.4.515 (6244) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 179.576338][ T6252] sctp: [Deprecated]: syz.3.521 (pid 6252) Use of int in max_burst socket option. [ 179.576338][ T6252] Use struct sctp_assoc_value instead [ 179.601754][ T13] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 180.061431][ T13] usb 6-1: config 0 has no interfaces? [ 181.151860][ T13] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 181.172453][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.229853][ T6248] netlink: 'syz.1.519': attribute type 25 has an invalid length. [ 181.240711][ T13] usb 6-1: Product: syz [ 181.290953][ T13] usb 6-1: Manufacturer: syz [ 181.304507][ T13] usb 6-1: SerialNumber: syz [ 181.356110][ T4982] Bluetooth: hci0: command 0x0406 tx timeout [ 181.363892][ T13] usb 6-1: config 0 descriptor?? [ 181.389395][ T4982] Bluetooth: hci4: command 0x0406 tx timeout [ 181.398803][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 181.408465][ T4982] Bluetooth: hci1: command 0x0406 tx timeout [ 181.439156][ T4982] Bluetooth: hci2: command 0x0406 tx timeout [ 182.158628][ T6293] delete_channel: no stack [ 182.531800][ T4979] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 182.648712][ T26] audit: type=1326 audit(1745047012.223:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 182.866372][ T26] audit: type=1326 audit(1745047012.263:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 183.878526][ T26] audit: type=1326 audit(1745047012.263:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 183.921746][ T4979] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.956857][ T4979] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 184.024501][ T4979] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 184.051333][ T26] audit: type=1326 audit(1745047012.263:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 184.099099][ T4979] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.162061][ T4979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.184339][ T26] audit: type=1326 audit(1745047012.263:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 184.345145][ T26] audit: type=1326 audit(1745047012.263:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 184.481685][ T26] audit: type=1326 audit(1745047012.263:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 184.482889][ T4979] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 184.549691][ T6293] netlink: 268 bytes leftover after parsing attributes in process `syz.4.535'. [ 184.598561][ T6293] unsupported nla_type 65024 [ 184.636662][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 184.716765][ T4558] udevd[4558]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.040027][ T4979] usb 6-1: USB disconnect, device number 4 [ 187.623639][ T6326] netlink: 'syz.5.544': attribute type 25 has an invalid length. [ 187.740290][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 187.754749][ T21] usb 5-1: USB disconnect, device number 19 [ 188.110835][ T5653] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 188.481892][ T5653] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 188.511695][ T5653] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 188.602746][ T5653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.632873][ T5653] usb 2-1: config 0 has no interface number 0 [ 188.654942][ T5653] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 188.690226][ T5653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.736819][ T5653] usb 2-1: config 0 descriptor?? [ 189.026260][ T5653] usb 2-1: USB disconnect, device number 16 [ 190.290620][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 191.578029][ T6406] netlink: 'syz.3.569': attribute type 25 has an invalid length. [ 192.275325][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 192.353386][ T4979] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 192.391845][ T4979] Bluetooth: hci0: Injecting HCI hardware error event [ 192.423192][ T146] Bluetooth: hci0: hardware error 0x00 [ 192.643356][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.580'. [ 193.114842][ T6435] team0 (unregistering): Port device team_slave_0 removed [ 193.152004][ T6435] team0 (unregistering): Port device team_slave_1 removed [ 194.113565][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.119957][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.920208][ T6460] netlink: 'syz.5.589': attribute type 25 has an invalid length. [ 195.841777][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 197.329558][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 197.367755][ T6513] tipc: Started in network mode [ 197.378738][ T6513] tipc: Node identity 4, cluster identity 4711 [ 197.390469][ T6513] tipc: Node number set to 4 [ 197.716260][ T6501] netlink: 'syz.3.603': attribute type 25 has an invalid length. [ 197.820849][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 198.100795][ T26] audit: type=1326 audit(1745047027.673:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1cfa4fa169 code=0x0 [ 199.437194][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 199.840568][ T6568] tipc: Started in network mode [ 199.854781][ T6561] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.881296][ T6568] tipc: Node identity 4, cluster identity 4711 [ 199.897211][ T6568] tipc: Node number set to 4 [ 200.099091][ T6576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.628'. [ 200.491653][ T1334] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.646907][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 200.781668][ T1334] usb 2-1: Using ep0 maxpacket: 16 [ 200.985354][ T1334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.101727][ T1334] usb 2-1: config 159 has an invalid interface number: 195 but max is 0 [ 201.116403][ T1334] usb 2-1: config 159 has no interface number 0 [ 201.124436][ T1334] usb 2-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.140154][ T1334] usb 2-1: config 159 interface 195 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.174677][ T1334] usb 2-1: config 159 interface 195 has no altsetting 0 [ 201.341853][ T1334] usb 2-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 201.374477][ T1334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.408604][ T1334] usb 2-1: Product: syz [ 201.428129][ T1334] usb 2-1: Manufacturer: syz [ 201.437252][ T1334] usb 2-1: SerialNumber: syz [ 201.833293][ T1334] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 201.855497][ T1334] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 201.901761][ T1334] [drm:udl_init] *ERROR* Selecting channel failed [ 201.947559][ T1334] [drm] Initialized udl 0.0.1 20120220 for 2-1:159.195 on minor 2 [ 201.979187][ T1334] [drm] Initialized udl on minor 2 [ 202.011790][ T1334] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 202.031133][ T1334] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 202.077446][ T1334] usb 2-1: USB disconnect, device number 17 [ 202.492642][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 202.566788][ T6638] futex_wake_op: syz.3.645 tries to shift op by -33; fix this program [ 203.971704][ T4979] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 204.571835][ T4979] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 204.592177][ T4979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.600208][ T4979] usb 2-1: Product: syz [ 204.628806][ T6663] syz.0.655 (6663): drop_caches: 2 [ 204.635199][ T4979] usb 2-1: Manufacturer: syz [ 204.650201][ T4979] usb 2-1: SerialNumber: syz [ 204.680148][ T4979] usb 2-1: config 0 descriptor?? [ 204.744282][ T4979] go7007: probe of 2-1:0.0 failed with error -12 [ 204.781641][ T5653] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 204.966549][ T6668] udc-core: couldn't find an available UDC or it's busy [ 204.981498][ T6668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 205.203741][ T6668] udc-core: couldn't find an available UDC or it's busy [ 205.221021][ T6668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 205.267058][ T6668] udc-core: couldn't find an available UDC or it's busy [ 205.284209][ T6668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 205.311267][ T4979] usb 2-1: USB disconnect, device number 18 [ 205.315047][ T5653] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 205.339193][ T5653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.362982][ T5653] usb 6-1: Product: syz [ 205.367203][ T5653] usb 6-1: Manufacturer: syz [ 205.391691][ T5653] usb 6-1: SerialNumber: syz [ 205.413189][ T5653] usb 6-1: config 0 descriptor?? [ 205.463602][ T5653] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 005 [ 205.548139][ T7] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 206.102754][ T5653] i2c i2c-1: connected i2c-tiny-usb device [ 206.272269][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 206.288680][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 206.308766][ T5653] usb 6-1: USB disconnect, device number 5 [ 206.391966][ T7] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 206.400186][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 206.418136][ T7] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 206.429789][ T7] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 206.474626][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.661760][ T7] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 206.670826][ T7] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 206.679469][ T7] usb 5-1: Product: syz [ 206.683792][ T7] usb 5-1: Manufacturer: syz [ 206.688404][ T7] usb 5-1: SerialNumber: syz [ 206.703424][ T7] usb 5-1: config 0 descriptor?? [ 206.742976][ T7] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 206.765474][ T7] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 206.790272][ T6698] netlink: 'syz.3.665': attribute type 25 has an invalid length. [ 206.891831][ T4256] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 207.313062][ T4256] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.338419][ T4256] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 207.351199][ T4256] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.363438][ T4256] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 207.375110][ T4256] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 207.511937][ T4256] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.543170][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 207.551732][ T4979] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 207.569502][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.591745][ T4256] usb 2-1: Product: syz [ 207.596025][ T4256] usb 2-1: Manufacturer: syz [ 207.603396][ T6714] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 207.635550][ T1107] usb 5-1: USB disconnect, device number 20 [ 207.656423][ T1107] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 207.682666][ T4256] cdc_wdm 2-1:1.0: skipping garbage [ 207.687902][ T4256] cdc_wdm 2-1:1.0: skipping garbage [ 207.713134][ T4256] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 207.719070][ T4256] cdc_wdm 2-1:1.0: Unknown control protocol [ 207.909413][ T1107] usb 2-1: USB disconnect, device number 19 [ 207.917126][ T6716] futex_wake_op: syz.5.669 tries to shift op by -33; fix this program [ 207.931949][ T7] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 207.940381][ T4979] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 207.965963][ T7] usb 4-1: config 0 has no interface number 0 [ 207.977490][ T4979] usb 1-1: config 0 has no interface number 0 [ 207.983982][ T4979] usb 1-1: config 0 interface 53 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.141918][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 208.160953][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.169771][ T4979] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=48.83 [ 208.194474][ T4979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.204722][ T7] usb 4-1: Product: syz [ 208.208909][ T7] usb 4-1: Manufacturer: syz [ 208.221779][ T4979] usb 1-1: Product: syz [ 208.226164][ T4979] usb 1-1: Manufacturer: syz [ 208.230766][ T4979] usb 1-1: SerialNumber: syz [ 208.235937][ T7] usb 4-1: SerialNumber: syz [ 208.249697][ T7] usb 4-1: config 0 descriptor?? [ 208.262028][ T4979] usb 1-1: config 0 descriptor?? [ 208.544684][ T4979] metro_usb 1-1:0.53: Metrologic USB to Serial converter detected [ 208.582133][ T4979] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 208.601946][ T4216] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 208.621699][ T7] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 208.632155][ T4979] usb 1-1: USB disconnect, device number 17 [ 208.638325][ T7] usb 4-1: Failed to create links for entity 32 [ 208.654229][ T7] usb 4-1: Failed to register entities (-22). [ 208.673778][ T4979] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 208.708943][ T7] usb 4-1: USB disconnect, device number 16 [ 208.740561][ T4979] metro_usb 1-1:0.53: device disconnected [ 208.821790][ T1107] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 209.001845][ T4216] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.014985][ T4216] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.045839][ T4216] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.071958][ T4216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 209.156992][ T4216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 209.212003][ T1107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.233336][ T1107] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 209.307029][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.676'. [ 209.341973][ T4216] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.351118][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.385922][ T4216] usb 2-1: Product: syz [ 209.390576][ T4216] usb 2-1: Manufacturer: syz [ 209.437655][ T1107] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.443093][ T4216] cdc_wdm 2-1:1.0: skipping garbage [ 209.455399][ T4216] cdc_wdm 2-1:1.0: skipping garbage [ 209.462029][ T4256] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 209.470262][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.479686][ T4216] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 209.487742][ T4216] cdc_wdm 2-1:1.0: Unknown control protocol [ 209.496328][ T1107] usb 5-1: Product: syz [ 209.509546][ T1107] usb 5-1: Manufacturer: syz [ 209.535766][ T1107] usb 5-1: SerialNumber: syz [ 209.680581][ T5653] usb 2-1: USB disconnect, device number 20 [ 209.797947][ T6721] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 210.007633][ T4256] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 210.028390][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.043325][ T6721] udc-core: couldn't find an available UDC or it's busy [ 210.068098][ T6721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.081704][ T4256] usb 1-1: Product: syz [ 210.092022][ T4256] usb 1-1: Manufacturer: syz [ 210.107389][ T4256] usb 1-1: SerialNumber: syz [ 210.149563][ T4256] usb 1-1: config 0 descriptor?? [ 210.220503][ T4256] go7007: probe of 1-1:0.0 failed with error -12 [ 210.411787][ T4216] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 210.442235][ T6724] udc-core: couldn't find an available UDC or it's busy [ 210.449278][ T6724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.555790][ T6721] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 210.661627][ T4979] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 210.676910][ T6724] udc-core: couldn't find an available UDC or it's busy [ 210.695181][ T6724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.717153][ T6724] udc-core: couldn't find an available UDC or it's busy [ 210.738200][ T6724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.756379][ T4256] usb 1-1: USB disconnect, device number 18 [ 210.771952][ T4216] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.817370][ T1107] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 210.828446][ T1107] cdc_mbim 5-1:1.0: setting rx_max = 16384 [ 210.871901][ T4216] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.895675][ T4216] usb 6-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 210.910729][ T4216] usb 6-1: Manufacturer: syz [ 210.915758][ T4979] usb 2-1: Using ep0 maxpacket: 32 [ 210.951501][ T4216] usb 6-1: config 0 descriptor?? [ 210.992848][ T4216] hub 6-1:0.0: USB hub found [ 211.031899][ T4979] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 211.038003][ T1107] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 211.048982][ T4979] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 211.050749][ T1107] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 211.070292][ T4979] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 211.091699][ T4979] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 211.092466][ T1107] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 211.121663][ T4979] usb 2-1: config 0 interface 0 has no altsetting 0 [ 211.201924][ T4216] hub 6-1:0.0: 1 port detected [ 211.287350][ T1107] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 211.301932][ T4979] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 211.343903][ T4979] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 211.363846][ T4979] usb 2-1: Product: syz [ 211.368341][ T4979] usb 2-1: Manufacturer: syz [ 211.378260][ T4979] usb 2-1: SerialNumber: syz [ 211.383427][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 211.402977][ T4979] usb 2-1: config 0 descriptor?? [ 211.453282][ T4979] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 211.487325][ T4979] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 211.601874][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 211.696868][ T6721] udc-core: couldn't find an available UDC or it's busy [ 211.711999][ T6721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 211.727801][ T4216] usb 5-1: USB disconnect, device number 21 [ 211.739249][ T4216] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 211.761734][ T1107] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 211.770040][ T1107] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.797466][ T1107] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.826592][ T1107] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.843328][ T1107] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.866628][ T1107] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.886325][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.171843][ T1107] usb 4-1: GET_CAPABILITIES returned 0 [ 212.177385][ T1107] usbtmc 4-1:16.0: can't read capabilities [ 212.786298][ T6800] futex_wake_op: syz.4.689 tries to shift op by -33; fix this program [ 212.861760][ T4979] usb 6-1.1: new full-speed USB device number 7 using dummy_hcd [ 212.871034][ T4979] dummy_hcd dummy_hcd.5: usb_device address has changed! [ 212.951635][ T21] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 212.995803][ T6746] udc-core: couldn't find an available UDC or it's busy [ 213.004988][ T6746] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 213.021279][ T5653] usb 6-1: USB disconnect, device number 6 [ 213.027528][ T4979] usb 6-1-port1: attempt power cycle [ 213.312006][ T21] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.325933][ T21] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 213.347763][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.368014][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 213.386532][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 213.453151][ T4256] usb 2-1: USB disconnect, device number 21 [ 213.542085][ T21] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.581970][ T21] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.630493][ T21] usb 1-1: Product: syz [ 213.635459][ T21] usb 1-1: Manufacturer: syz [ 213.682733][ T21] cdc_wdm 1-1:1.0: skipping garbage [ 213.692763][ T21] cdc_wdm 1-1:1.0: skipping garbage [ 213.918380][ T6803] netlink: 'syz.1.692': attribute type 25 has an invalid length. [ 214.742085][ T4221] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 214.991725][ T4221] usb 6-1: Using ep0 maxpacket: 16 [ 215.111805][ T4221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.134823][ T4221] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 215.159500][ T4221] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 215.179011][ T4221] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 215.283170][ T4221] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.297380][ T4221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 215.310779][ T4221] usb 6-1: SerialNumber: syz [ 215.354847][ T6825] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 215.365068][ T6825] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 215.392683][ T4221] hub 6-1:1.0: bad descriptor, ignoring hub [ 215.399973][ T4221] hub: probe of 6-1:1.0 failed with error -5 [ 215.597451][ T6825] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 215.610494][ T6825] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 216.064821][ T4221] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 216.615521][ T6844] udc-core: couldn't find an available UDC or it's busy [ 216.626980][ T6844] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 216.647048][ T6844] udc-core: couldn't find an available UDC or it's busy [ 216.656725][ T6844] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 216.666268][ T6844] udc-core: couldn't find an available UDC or it's busy [ 216.673504][ T6844] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 216.683617][ T6844] udc-core: couldn't find an available UDC or it's busy [ 216.690703][ T6844] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 216.721684][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 68! [ 216.946045][ T1107] usb 6-1: USB disconnect, device number 11 [ 216.964459][ T1107] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 217.525771][ T6754] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 217.540205][ T4256] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 217.551500][ T6792] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 217.559119][ T21] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 217.579130][ T21] cdc_wdm 1-1:1.0: Unknown control protocol [ 217.657905][ T21] usb 1-1: USB disconnect, device number 19 [ 217.741936][ T4221] usb 4-1: USB disconnect, device number 17 [ 217.861903][ T4979] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 218.075857][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 218.142901][ T4979] usb 6-1: Using ep0 maxpacket: 32 [ 218.317987][ T4979] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 218.326299][ T4979] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 218.366565][ T4979] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 218.405397][ T4979] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 218.469211][ T4979] usb 6-1: config 0 interface 0 has no altsetting 0 [ 218.487247][ T6881] netlink: 'syz.3.708': attribute type 25 has an invalid length. [ 218.662162][ T4979] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 218.671779][ T21] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 218.687322][ T4979] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 218.737636][ T4979] usb 6-1: Product: syz [ 218.777777][ T4979] usb 6-1: Manufacturer: syz [ 218.810421][ T4979] usb 6-1: SerialNumber: syz [ 218.849147][ T4979] usb 6-1: config 0 descriptor?? [ 218.913358][ T4979] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 218.946549][ T4979] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 219.041796][ T21] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 219.091485][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.181759][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.191072][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.213318][ T21] usb 1-1: config 0 descriptor?? [ 219.273585][ T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 219.501706][ T4256] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 219.724937][ T4216] usb 6-1: USB disconnect, device number 12 [ 219.741605][ T4256] usb 4-1: Using ep0 maxpacket: 8 [ 219.741625][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 219.753624][ T6933] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 219.767511][ T4216] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 219.861843][ T4256] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 219.880097][ T4256] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.890236][ T4256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.906176][ T4256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.931734][ T4256] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.945666][ T4256] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.954837][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.231749][ T4256] usb 4-1: usb_control_msg returned -32 [ 220.243656][ T4256] usbtmc 4-1:16.0: can't read capabilities [ 220.601700][ T4256] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 220.781675][ T4365] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 220.851719][ T4256] usb 5-1: Using ep0 maxpacket: 8 [ 220.971845][ T4256] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 220.983965][ T4256] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.999092][ T4256] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.011817][ T6946] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 221.021754][ T4365] usb 6-1: Using ep0 maxpacket: 16 [ 221.028037][ T4256] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.044341][ T4256] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.060201][ T4256] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 221.071433][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.141945][ T4365] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.158768][ T4365] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 221.177512][ T4365] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 221.188744][ T4365] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.215069][ T4221] usb 4-1: USB disconnect, device number 18 [ 221.281892][ T4365] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.291812][ T4365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 221.299819][ T4365] usb 6-1: SerialNumber: syz [ 221.332351][ T6944] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 221.341358][ T6944] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 221.341775][ T4256] usb 5-1: GET_CAPABILITIES returned 0 [ 221.354898][ T4365] hub 6-1:1.0: bad descriptor, ignoring hub [ 221.362411][ T4365] hub: probe of 6-1:1.0 failed with error -5 [ 221.368677][ T4256] usbtmc 5-1:16.0: can't read capabilities [ 221.426270][ T1334] usb 1-1: USB disconnect, device number 20 [ 221.558060][ T6944] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 221.568821][ T6944] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 221.587346][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 221.919084][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 221.928705][ T6968] netlink: 'syz.3.726': attribute type 10 has an invalid length. [ 221.941744][ T4256] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 221.968828][ T6968] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 222.037130][ T4365] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 222.076268][ T6972] device syzkaller1 entered promiscuous mode [ 222.273507][ T6982] syz.3.729 sent an empty control message without MSG_MORE. [ 222.301933][ T4256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.391958][ T4256] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.402350][ T4256] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 222.410659][ T4256] usb 1-1: Manufacturer: syz [ 222.425946][ T4256] usb 1-1: config 0 descriptor?? [ 222.464957][ T4256] hub 1-1:0.0: USB hub found [ 222.586566][ T6990] udc-core: couldn't find an available UDC or it's busy [ 222.601583][ C0] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 68! [ 222.607926][ T6990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.618892][ T6990] udc-core: couldn't find an available UDC or it's busy [ 222.626432][ T6990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.635181][ T6990] udc-core: couldn't find an available UDC or it's busy [ 222.642729][ T6990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.681733][ T4256] hub 1-1:0.0: 1 port detected [ 222.835445][ T4979] usb 6-1: USB disconnect, device number 13 [ 222.851962][ T4979] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 223.449898][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 224.311704][ T1107] usb 1-1.1: new full-speed USB device number 22 using dummy_hcd [ 224.327897][ T1107] dummy_hcd dummy_hcd.0: usb_device address has changed! [ 224.444025][ T6959] udc-core: couldn't find an available UDC or it's busy [ 224.481705][ T6959] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 224.506363][ T4221] usb 1-1: USB disconnect, device number 21 [ 224.521963][ T1107] usb 1-1-port1: attempt power cycle [ 225.119418][ T7076] xt_ecn: cannot match TCP bits for non-tcp packets [ 225.568282][ T26] audit: type=1326 audit(1745047055.143:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 225.680950][ T26] audit: type=1326 audit(1745047055.173:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 225.844102][ T26] audit: type=1326 audit(1745047055.173:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 225.891741][ T26] audit: type=1326 audit(1745047055.173:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 225.914168][ T26] audit: type=1326 audit(1745047055.183:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1cfa496359 code=0x7ffc0000 [ 226.019927][ T26] audit: type=1326 audit(1745047055.183:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 226.052014][ T4221] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 226.233299][ T26] audit: type=1326 audit(1745047055.183:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 227.151721][ T6942] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 227.157643][ T26] audit: type=1326 audit(1745047055.183:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfa4fa169 code=0x7ffc0000 [ 227.193986][ T6958] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 227.214698][ T4221] usb 1-1: Using ep0 maxpacket: 16 [ 227.349390][ T4216] usb 5-1: USB disconnect, device number 22 [ 227.361845][ T4221] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.400419][ T4221] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 227.429140][ T4221] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 227.479174][ T4221] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.701979][ T4221] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.727598][ T4221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.769798][ T4221] usb 1-1: SerialNumber: syz [ 227.842208][ T7094] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 227.856407][ T7094] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 227.886165][ T4221] hub 1-1:1.0: bad descriptor, ignoring hub [ 227.893403][ T4221] hub: probe of 1-1:1.0 failed with error -5 [ 228.071719][ T4256] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 228.094923][ T7094] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 228.113861][ T7094] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 228.354393][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.756'. [ 228.397083][ T7130] netlink: 'syz.5.756': attribute type 10 has an invalid length. [ 228.468142][ T7130] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.565846][ T4221] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 228.731888][ T4256] usb 5-1: config 0 has no interfaces? [ 228.903121][ T7132] netlink: 'syz.3.757': attribute type 25 has an invalid length. [ 228.932028][ T4256] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 228.955685][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.997646][ T4256] usb 5-1: Product: syz [ 229.011642][ T4256] usb 5-1: Manufacturer: syz [ 229.022351][ T4256] usb 5-1: SerialNumber: syz [ 229.092294][ T4256] usb 5-1: config 0 descriptor?? [ 229.126098][ T7153] udc-core: couldn't find an available UDC or it's busy [ 229.138396][ T7153] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 229.180778][ T7153] udc-core: couldn't find an available UDC or it's busy [ 229.225636][ T7153] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 229.277979][ T7153] udc-core: couldn't find an available UDC or it's busy [ 229.314112][ T7153] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 229.421625][ T4221] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 229.701640][ T4221] usb 6-1: Using ep0 maxpacket: 16 [ 229.801687][ C0] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 68! [ 229.821696][ T4221] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 229.850332][ T4221] usb 6-1: config 0 has no interface number 0 [ 229.941644][ T4221] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.994078][ T4221] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.021840][ T4221] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 230.055290][ T4221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.082524][ T4256] usb 1-1: USB disconnect, device number 26 [ 230.096232][ T4221] usb 6-1: config 0 descriptor?? [ 230.107358][ T4256] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 231.771417][ T7212] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[7212] [ 232.111696][ T4365] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 232.361791][ T4365] usb 4-1: Using ep0 maxpacket: 8 [ 232.380383][ T7207] device batadv_slave_1 entered promiscuous mode [ 232.421836][ T4221] usbhid 6-1:0.4: can't add hid device: -71 [ 232.436883][ T7210] device veth1_virt_wifi entered promiscuous mode [ 232.448221][ T4221] usbhid: probe of 6-1:0.4 failed with error -71 [ 232.522016][ T4221] usb 6-1: USB disconnect, device number 14 [ 232.540647][ T7213] device batadv_slave_1 left promiscuous mode [ 232.542857][ T4365] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.636179][ T7210] device veth1_virt_wifi left promiscuous mode [ 232.741741][ T4365] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 232.767015][ T4365] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 232.981757][ T4365] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 233.021804][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.061664][ T4365] usb 4-1: Product: syz [ 233.071680][ T4365] usb 4-1: Manufacturer: syz [ 233.086546][ T4365] usb 4-1: SerialNumber: syz [ 233.618063][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 233.677574][ T7243] xt_ecn: cannot match TCP bits for non-tcp packets [ 234.568775][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 234.689777][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.783'. [ 235.713814][ T4264] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.733609][ T4365] usb 4-1: USB disconnect, device number 19 [ 235.810260][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 235.889725][ T4264] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.056908][ T4264] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.218977][ T4264] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.297577][ T21] usb 5-1: USB disconnect, device number 23 [ 236.681877][ T13] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 236.699026][ T4264] tipc: Left network mode [ 236.770404][ T7295] xt_ecn: cannot match TCP bits for non-tcp packets [ 237.651807][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 237.791723][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.880244][ T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 237.906723][ T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 237.920212][ T13] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 238.035467][ T13] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.076125][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.146666][ T13] usb 4-1: SerialNumber: syz [ 238.241993][ T7282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 238.256711][ T7282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 238.277226][ T13] hub 4-1:1.0: bad descriptor, ignoring hub [ 238.308961][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 238.339467][ T13] hub: probe of 4-1:1.0 failed with error -5 [ 238.388405][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 238.486641][ T7282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 238.537448][ T7282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 238.931443][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.991777][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.082657][ T7296] device bridge_slave_0 entered promiscuous mode [ 239.125025][ T7] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 239.184099][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.248485][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.279086][ T7296] device bridge_slave_1 entered promiscuous mode [ 239.321170][ T13] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 239.372228][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.458278][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.550024][ T4264] bond0: (slave wlan1): Releasing backup interface [ 239.601807][ T7] usb 1-1: config 0 has no interfaces? [ 239.626690][ T7357] udc-core: couldn't find an available UDC or it's busy [ 239.651880][ T7357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.688853][ T7357] udc-core: couldn't find an available UDC or it's busy [ 239.722233][ T4365] Bluetooth: hci3: command 0x0409 tx timeout [ 239.746087][ T7296] team0: Port device team_slave_0 added [ 239.771954][ T7357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.822603][ T7357] udc-core: couldn't find an available UDC or it's busy [ 239.829582][ T7357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.846176][ T7296] team0: Port device team_slave_1 added [ 239.935842][ T7] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.957672][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.991599][ T7] usb 1-1: Product: syz [ 239.997122][ T7] usb 1-1: Manufacturer: syz [ 240.010704][ T7] usb 1-1: SerialNumber: syz [ 240.019438][ T7] usb 1-1: config 0 descriptor?? [ 240.035756][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.064510][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.169638][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.212035][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.223377][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.270752][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.325035][ T4264] device hsr_slave_0 left promiscuous mode [ 240.341091][ T4264] device hsr_slave_1 left promiscuous mode [ 240.350825][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.364360][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.386479][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.399155][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.428542][ T4264] device bridge_slave_1 left promiscuous mode [ 240.458602][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.501141][ T4264] device bridge_slave_0 left promiscuous mode [ 240.516830][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.575261][ T4264] device veth1_macvtap left promiscuous mode [ 240.599133][ T4264] device veth0_macvtap left promiscuous mode [ 240.620306][ T4264] device veth1_vlan left promiscuous mode [ 240.635883][ T4264] device veth0_vlan left promiscuous mode [ 241.069409][ T1107] usb 4-1: USB disconnect, device number 20 [ 241.097202][ T1107] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 241.462593][ T4264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.522106][ T4264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.791770][ T4221] Bluetooth: hci3: command 0x041b tx timeout [ 241.911302][ T4264] bond0 (unregistering): Released all slaves [ 242.144759][ T7296] device hsr_slave_0 entered promiscuous mode [ 242.159429][ T7296] device hsr_slave_1 entered promiscuous mode [ 242.184688][ T7296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.198051][ T7296] Cannot create hsr debugfs directory [ 242.337206][ T7379] netlink: 'syz.3.809': attribute type 25 has an invalid length. [ 242.363696][ T26] audit: type=1326 audit(1745047071.933:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bd369b169 code=0x0 [ 242.888253][ T7296] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.114246][ T7296] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.146416][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 243.199277][ T7296] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.294934][ T7296] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 243.685635][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.777610][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.808221][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.872679][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.891688][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 243.911422][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.953837][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.972287][ T841] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.979460][ T841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.046105][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.068036][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.087779][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.109152][ T841] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.116304][ T841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.149785][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.200644][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.232630][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.285184][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.314384][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.365061][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.383222][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.420415][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.442400][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.493053][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.511913][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.539487][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.004671][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.024073][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.080677][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.475460][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 245.592333][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.624530][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.753709][ T7296] device veth0_vlan entered promiscuous mode [ 245.792553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.813161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.899183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.952104][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 245.967972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.013241][ T7296] device veth1_vlan entered promiscuous mode [ 246.202883][ T7296] device veth0_macvtap entered promiscuous mode [ 246.230631][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.257937][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.291918][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.339785][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.430216][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.466126][ T7296] device veth1_macvtap entered promiscuous mode [ 246.557700][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.598758][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.644013][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.679854][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.730569][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.766894][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.807240][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.829217][ T7460] netlink: 'syz.4.821': attribute type 25 has an invalid length. [ 246.851644][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.871135][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.892704][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.912448][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.932616][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.961586][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.981598][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.011587][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.045464][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.108686][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.172852][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.213000][ T7296] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.242923][ T7296] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.268303][ T7296] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.296623][ T7296] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.554262][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.572375][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.593167][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.641949][ T4216] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 247.738690][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.789347][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.862302][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.911665][ T4216] usb 4-1: Using ep0 maxpacket: 32 [ 248.052889][ T4216] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.106006][ T4979] usb 1-1: USB disconnect, device number 27 [ 248.176896][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 248.267129][ T4216] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 248.294086][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.325156][ T4216] usb 4-1: Product: syz [ 248.334083][ T4216] usb 4-1: Manufacturer: syz [ 248.348135][ T4216] usb 4-1: SerialNumber: syz [ 248.378798][ T4216] usb 4-1: config 0 descriptor?? [ 248.434092][ T4216] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 248.451225][ T4216] hdpvr: probe of 4-1:0.0 failed with error -12 [ 249.039797][ T7549] netlink: 'syz.1.837': attribute type 25 has an invalid length. [ 249.351780][ T4216] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 249.446464][ T1107] usb 4-1: USB disconnect, device number 21 [ 249.711821][ T4216] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.831943][ T4216] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.850742][ T4216] usb 7-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 249.891707][ T4216] usb 7-1: Manufacturer: syz [ 249.898928][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 249.942613][ T4216] usb 7-1: config 0 descriptor?? [ 250.002901][ T4216] hub 7-1:0.0: USB hub found [ 250.221720][ T4216] hub 7-1:0.0: 1 port detected [ 250.331734][ T1107] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 250.833263][ T1107] usb 2-1: config 0 has no interfaces? [ 251.071767][ T1107] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 251.101227][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.137600][ T1107] usb 2-1: Product: syz [ 251.157894][ T1107] usb 2-1: Manufacturer: syz [ 251.187457][ T1107] usb 2-1: SerialNumber: syz [ 251.224250][ T1107] usb 2-1: config 0 descriptor?? [ 251.831651][ T4979] usb 7-1.1: new full-speed USB device number 3 using dummy_hcd [ 251.847304][ T4979] dummy_hcd dummy_hcd.6: usb_device address has changed! [ 251.954921][ T4216] usb 7-1: USB disconnect, device number 2 [ 251.962703][ T4979] usb 7-1-port1: attempt power cycle [ 252.291629][ T1107] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 252.741851][ T1107] usb 5-1: config 0 has no interfaces? [ 252.981766][ T1107] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 253.118315][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.342413][ T1107] usb 5-1: Product: syz [ 253.414956][ T1107] usb 5-1: Manufacturer: syz [ 253.480544][ T1107] usb 5-1: SerialNumber: syz [ 253.553281][ T1107] usb 5-1: config 0 descriptor?? [ 253.905059][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.850'. [ 253.971724][ T4979] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 254.215201][ T4979] usb 1-1: Using ep0 maxpacket: 32 [ 254.361971][ T4979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.469785][ T4216] usb 2-1: USB disconnect, device number 22 [ 254.584567][ T4979] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 254.619133][ T4979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.660145][ T4979] usb 1-1: Product: syz [ 254.676197][ T4979] usb 1-1: Manufacturer: syz [ 254.687821][ T4979] usb 1-1: SerialNumber: syz [ 254.710244][ T4979] usb 1-1: config 0 descriptor?? [ 254.883134][ T4979] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 254.893085][ T4979] hdpvr: probe of 1-1:0.0 failed with error -12 [ 254.992482][ T7518] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 255.364105][ T7518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.472327][ T7518] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.499778][ T7518] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 255.564963][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.571299][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.594723][ T7518] usb 4-1: Manufacturer: syz [ 255.620726][ T7518] usb 4-1: config 0 descriptor?? [ 255.672463][ T7518] hub 4-1:0.0: USB hub found [ 255.891749][ T7518] hub 4-1:0.0: 1 port detected [ 256.044685][ T4365] usb 5-1: USB disconnect, device number 24 [ 256.462263][ T7] usb 1-1: USB disconnect, device number 28 [ 256.621619][ T4365] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 256.871689][ T4365] usb 5-1: Using ep0 maxpacket: 16 [ 257.011700][ T4365] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.031656][ T4365] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 257.041764][ T4365] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 257.051727][ T4365] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 257.161992][ T4365] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.177677][ T4365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.211214][ T4365] usb 5-1: SerialNumber: syz [ 257.251948][ T7696] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 257.269406][ T7696] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 257.322462][ T4365] hub 5-1:1.0: bad descriptor, ignoring hub [ 257.328423][ T4365] hub: probe of 5-1:1.0 failed with error -5 [ 257.498499][ T7518] usb 4-1.1: new full-speed USB device number 23 using dummy_hcd [ 257.521295][ T7518] dummy_hcd dummy_hcd.3: usb_device address has changed! [ 257.536675][ T7696] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 257.555004][ T7696] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 257.627012][ T1107] usb 4-1: USB disconnect, device number 22 [ 257.642069][ T7518] usb 4-1-port1: attempt power cycle [ 258.025222][ T4365] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 258.578738][ T7730] udc-core: couldn't find an available UDC or it's busy [ 258.588593][ T7730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.614019][ T7730] udc-core: couldn't find an available UDC or it's busy [ 258.629103][ T7730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.668921][ T7730] udc-core: couldn't find an available UDC or it's busy [ 258.735168][ T7730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 259.994192][ T7] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 260.261707][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 260.631797][ T7] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 260.654673][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.663460][ T7] usb 2-1: Product: syz [ 260.667635][ T7] usb 2-1: Manufacturer: syz [ 260.674018][ T7] usb 2-1: SerialNumber: syz [ 260.680123][ T7] r8152-cfgselector 2-1: config 0 descriptor?? [ 261.601888][ T7518] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 261.981929][ T7518] usb 4-1: config 0 has no interfaces? [ 261.991639][ T4256] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 262.151955][ T7518] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 262.171700][ T7518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.196101][ T7518] usb 4-1: Product: syz [ 262.206281][ T7518] usb 4-1: Manufacturer: syz [ 262.221662][ T7518] usb 4-1: SerialNumber: syz [ 262.257754][ T7518] usb 4-1: config 0 descriptor?? [ 262.371922][ T4256] usb 1-1: config 0 has no interfaces? [ 262.574559][ T4256] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 262.609301][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.651780][ T4256] usb 1-1: Product: syz [ 262.666955][ T4256] usb 1-1: Manufacturer: syz [ 262.686032][ T4256] usb 1-1: SerialNumber: syz [ 262.709013][ T4256] usb 1-1: config 0 descriptor?? [ 263.597253][ T7518] usb 1-1: USB disconnect, device number 29 [ 264.051661][ T7518] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 264.096206][ T1107] usb 5-1: USB disconnect, device number 25 [ 264.107997][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 264.122299][ T1107] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 264.261125][ T4256] usb 4-1: USB disconnect, device number 27 [ 264.291826][ T7518] usb 1-1: Using ep0 maxpacket: 16 [ 264.411927][ T7518] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.473777][ T7518] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 264.517836][ T7832] delete_channel: no stack [ 264.518527][ T7834] netlink: 'syz.4.902': attribute type 11 has an invalid length. [ 264.565513][ T7518] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 264.615752][ T7518] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 264.782710][ T7518] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.810774][ T7518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 264.856939][ T7518] usb 1-1: SerialNumber: syz [ 264.912059][ T7809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 264.925992][ T7809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 264.972789][ T7518] hub 1-1:1.0: bad descriptor, ignoring hub [ 264.984434][ T7518] hub: probe of 1-1:1.0 failed with error -5 [ 265.175461][ T7848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.904'. [ 265.188309][ T7809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 265.202376][ T7809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 265.229623][ T7848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.904'. [ 265.695373][ T7518] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 265.811778][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 265.831680][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 265.838123][ T7] r8152-cfgselector 2-1: bad CDC descriptors [ 265.882693][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 266.245599][ T7865] udc-core: couldn't find an available UDC or it's busy [ 266.256439][ T7865] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 266.301262][ T7865] udc-core: couldn't find an available UDC or it's busy [ 266.358716][ T7865] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 266.397901][ T7865] udc-core: couldn't find an available UDC or it's busy [ 266.441708][ T7865] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 266.842746][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.909'. [ 267.070575][ T7876] team0 (unregistering): Port device team_slave_0 removed [ 267.207926][ T7876] team0 (unregistering): Port device team_slave_1 removed [ 267.579716][ T7] usb 1-1: USB disconnect, device number 30 [ 267.593403][ T7] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 267.722111][ T4365] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 268.132519][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.221858][ T5653] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 268.251851][ T4365] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.270777][ T4365] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 268.290274][ T4365] usb 4-1: Manufacturer: syz [ 268.330213][ T4365] usb 4-1: config 0 descriptor?? [ 268.392837][ T4365] hub 4-1:0.0: USB hub found [ 268.601951][ T4365] hub 4-1:0.0: 1 port detected [ 268.622429][ T5653] usb 7-1: config index 0 descriptor too short (expected 63186, got 210) [ 268.640461][ T5653] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 268.659642][ T5653] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.708137][ T5653] usb 7-1: config 0 has no interface number 0 [ 268.757592][ T5653] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 268.787929][ T5653] usb 7-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 268.850941][ T5653] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 268.862417][ T5653] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.882072][ T5653] usb 7-1: config 0 descriptor?? [ 269.020815][ T5653] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 269.069349][ T7518] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 269.381169][ T7930] dccp_close: ABORT with 32 bytes unread [ 269.698280][ T7943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.920'. [ 269.804696][ T13] usb 7-1: USB disconnect, device number 7 [ 269.822219][ T4351] usb 7-1: Failed to submit usb control message: -71 [ 269.829536][ T4351] usb 7-1: unable to send the bmi data to the device: -71 [ 269.871063][ T4351] usb 7-1: unable to get target info from device [ 269.896546][ T4351] usb 7-1: could not get target info (-71) [ 269.927237][ T4351] usb 7-1: could not probe fw (-71) [ 269.956383][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 270.201751][ T5653] usb 4-1.1: new full-speed USB device number 29 using dummy_hcd [ 270.210211][ T5653] dummy_hcd dummy_hcd.3: usb_device address has changed! [ 270.231732][ T7518] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 270.331622][ T13] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 270.350255][ T7] usb 4-1: USB disconnect, device number 28 [ 270.352925][ T5653] usb 4-1-port1: attempt power cycle [ 270.593588][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 270.647684][ T7518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.664304][ T7518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.689433][ T7518] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.714547][ T7518] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.747202][ T7518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.760224][ T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.775872][ T13] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 270.823703][ T7518] usb 1-1: config 0 descriptor?? [ 270.828706][ T13] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 270.866965][ T13] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 270.990123][ T7988] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 270.997086][ T7988] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.011770][ T13] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.022111][ T7988] vhci_hcd vhci_hcd.0: Device attached [ 271.037992][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.089627][ T7992] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 271.096343][ T7992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.106450][ T13] usb 7-1: SerialNumber: syz [ 271.135571][ T7956] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.149114][ T7956] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.172142][ T7988] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 271.182422][ T13] hub 7-1:1.0: bad descriptor, ignoring hub [ 271.188358][ T13] hub: probe of 7-1:1.0 failed with error -5 [ 271.215279][ T7992] vhci_hcd vhci_hcd.0: Device attached [ 271.323919][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.331407][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.339500][ T7] vhci_hcd: vhci_device speed not set [ 271.345284][ T7996] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 271.351896][ T7996] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.387840][ T7956] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.411766][ T7956] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.429017][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.451608][ T7] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 271.469314][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.489605][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.499454][ T7996] vhci_hcd vhci_hcd.0: Device attached [ 271.520718][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.540807][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.570756][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.600973][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.620649][ T7998] vhci_hcd: connection closed [ 271.628499][ T841] vhci_hcd: stop threads [ 271.642593][ T841] vhci_hcd: release socket [ 271.652971][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.679375][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.690813][ T841] vhci_hcd: disconnect device [ 271.705971][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.713962][ T7993] vhci_hcd: connection closed [ 271.714179][ T7989] vhci_hcd: connection reset by peer [ 271.731679][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.749337][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.775252][ T841] vhci_hcd: stop threads [ 271.779667][ T841] vhci_hcd: release socket [ 271.790187][ T7518] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 271.806701][ T841] vhci_hcd: disconnect device [ 271.820622][ T841] vhci_hcd: stop threads [ 271.835465][ T841] vhci_hcd: release socket [ 271.849512][ T841] vhci_hcd: disconnect device [ 271.882117][ T7518] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 271.925335][ T13] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 271.948118][ T7518] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 272.020733][ T7518] usb 1-1: USB disconnect, device number 31 [ 272.475655][ T8024] udc-core: couldn't find an available UDC or it's busy [ 272.532745][ T8024] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 272.548079][ T8024] udc-core: couldn't find an available UDC or it's busy [ 272.556367][ T8024] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 272.672031][ T8024] udc-core: couldn't find an available UDC or it's busy [ 272.681993][ T8024] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 273.576769][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.932'. [ 273.591945][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.932'. [ 273.872299][ T4979] usb 7-1: USB disconnect, device number 8 [ 273.911926][ T4979] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 274.016010][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.937'. [ 274.151592][ T4216] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 274.431609][ T4216] usb 5-1: Using ep0 maxpacket: 8 [ 274.551760][ T4216] usb 5-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 274.626042][ T4216] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.651672][ T4216] usb 5-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice=e6.17 [ 274.662148][ T4216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.682168][ T4216] usb 5-1: config 0 descriptor?? [ 275.718739][ T4256] usb 5-1: USB disconnect, device number 26 [ 276.321154][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 276.328748][ T8112] netlink: 36 bytes leftover after parsing attributes in process `syz.6.946'. [ 276.591716][ T7] vhci_hcd: vhci_device speed not set [ 276.730440][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 276.971713][ T4216] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 277.381938][ T4216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.516530][ T4216] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 277.566046][ T4216] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 277.597973][ T4216] usb 5-1: Manufacturer: syz [ 277.606078][ T4216] usb 5-1: config 0 descriptor?? [ 277.683083][ T4216] hub 5-1:0.0: USB hub found [ 278.190376][ T4216] hub 5-1:0.0: 1 port detected [ 279.299079][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 279.913633][ T4979] usb 5-1: USB disconnect, device number 27 [ 279.951750][ T7] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 279.991661][ T4216] usb 5-1.1: new full-speed USB device number 28 using dummy_hcd [ 280.013081][ T4216] usb 5-1-port1: attempt power cycle [ 280.331706][ T7] usb 1-1: config 1 has no interfaces? [ 280.691723][ T7] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 280.741401][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.797703][ T7] usb 1-1: Product: syz [ 280.821263][ T7] usb 1-1: Manufacturer: syz [ 280.850979][ T7] usb 1-1: SerialNumber: syz [ 282.237619][ T4365] usb 1-1: USB disconnect, device number 32 [ 282.241673][ T13] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 282.300787][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 282.383262][ T8247] device syzkaller1 entered promiscuous mode [ 282.532964][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 282.641428][ T8256] netlink: 'syz.0.983': attribute type 21 has an invalid length. [ 282.651863][ T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.664667][ T8256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.983'. [ 282.674610][ T13] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 282.691741][ T13] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 282.709671][ T13] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 282.761947][ T4979] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 282.801939][ T13] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.827271][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.852822][ T13] usb 7-1: SerialNumber: syz [ 282.892074][ T8237] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 282.900635][ T8237] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 282.952488][ T13] hub 7-1:1.0: bad descriptor, ignoring hub [ 282.969525][ T13] hub: probe of 7-1:1.0 failed with error -5 [ 283.132475][ T4979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.155587][ T8237] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 283.183180][ T8237] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 283.241950][ T4979] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 283.270705][ T4979] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 283.291001][ T4979] usb 5-1: Manufacturer: syz [ 283.317609][ T4979] usb 5-1: config 0 descriptor?? [ 283.393080][ T4979] hub 5-1:0.0: USB hub found [ 283.611806][ T4979] hub 5-1:0.0: 1 port detected [ 283.648199][ T13] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 284.199889][ T8269] udc-core: couldn't find an available UDC or it's busy [ 284.217290][ T8269] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 284.251260][ T8269] udc-core: couldn't find an available UDC or it's busy [ 284.270162][ T8269] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 285.011618][ C0] cdc_ether 7-1:1.0 usb0: CDC: unexpected notification 68! [ 285.026929][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'. [ 285.163445][ T7] usb 5-1: USB disconnect, device number 32 [ 285.247429][ T4216] usb 7-1: USB disconnect, device number 9 [ 285.253604][ T13] usb 5-1.1: new full-speed USB device number 33 using dummy_hcd [ 285.283029][ T4216] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 285.293933][ T13] usb 5-1-port1: attempt power cycle [ 285.871727][ T5653] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 286.121666][ T5653] usb 2-1: Using ep0 maxpacket: 16 [ 286.241642][ T7518] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 286.242144][ T5653] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 286.281035][ T5653] usb 2-1: config 8 has no interface number 0 [ 286.299739][ T5653] usb 2-1: config 8 interface 206 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 286.328357][ T5653] usb 2-1: config 8 interface 206 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 286.368113][ T5653] usb 2-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 286.419433][ T5653] usb 2-1: config 8 interface 206 has no altsetting 0 [ 286.421711][ T4216] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 286.491705][ T7518] usb 5-1: Using ep0 maxpacket: 32 [ 286.603754][ T5653] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 286.622911][ T5653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.646167][ T5653] usb 2-1: Product: syz [ 286.659331][ T5653] usb 2-1: Manufacturer: syz [ 286.676199][ T5653] usb 2-1: SerialNumber: syz [ 286.701858][ T4216] usb 1-1: Using ep0 maxpacket: 32 [ 286.811846][ T7518] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 286.831658][ T4216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.853294][ T7518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.861371][ T7518] usb 5-1: Product: syz [ 286.913193][ T7518] usb 5-1: Manufacturer: syz [ 286.918237][ T7518] usb 5-1: SerialNumber: syz [ 286.934158][ T7518] usb 5-1: config 0 descriptor?? [ 286.973029][ T5653] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 286.989356][ T7518] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 286.990424][ T5653] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 287.060583][ T5653] garmin_gps: probe of ttyUSB0 failed with error -22 [ 287.096234][ T4216] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 287.127864][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.146764][ T4216] usb 1-1: Product: syz [ 287.161349][ T4216] usb 1-1: Manufacturer: syz [ 287.176121][ T4216] usb 1-1: SerialNumber: syz [ 287.186368][ T5653] usb 2-1: USB disconnect, device number 24 [ 287.205716][ T5653] garmin_gps 2-1:8.206: device disconnected [ 287.244844][ T4216] usb 1-1: config 0 descriptor?? [ 287.303317][ T4216] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 287.320495][ T4216] hdpvr: probe of 1-1:0.0 failed with error -12 [ 287.371642][ T13] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 287.781955][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.801161][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.812618][ T13] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.826117][ T13] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.836800][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.869591][ T13] usb 7-1: config 0 descriptor?? [ 288.021727][ T5653] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 288.151732][ T4365] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 288.272505][ T5653] usb 4-1: Using ep0 maxpacket: 8 [ 288.369314][ T13] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 288.401964][ T5653] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 288.418784][ T5653] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.439342][ T5653] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.450099][ T5653] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.450554][ T13] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 288.472849][ T5653] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.489300][ T5653] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.517589][ T5653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.535406][ T7518] gspca_topro: reg_r err -71 [ 288.540054][ T7518] gspca_topro: Sensor soi763a [ 288.634417][ T7518] usb 5-1: USB disconnect, device number 37 [ 288.702963][ T4365] usb 2-1: config 0 has no interfaces? [ 288.801921][ T5653] usb 4-1: GET_CAPABILITIES returned 0 [ 288.808757][ T5653] usbtmc 4-1:16.0: can't read capabilities [ 289.021802][ T4365] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.044736][ T4365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.068300][ T4365] usb 2-1: Product: syz [ 289.123058][ T4365] usb 2-1: Manufacturer: syz [ 289.127815][ T4365] usb 2-1: SerialNumber: syz [ 289.144551][ T5653] usb 1-1: USB disconnect, device number 33 [ 289.159988][ T4365] usb 2-1: config 0 descriptor?? [ 289.593484][ C0] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 289.608463][ T5653] usb 4-1: USB disconnect, device number 33 [ 289.901659][ T7] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 290.249504][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 290.331748][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.422903][ T13] usb 7-1: USB disconnect, device number 10 [ 290.552041][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 290.625868][ T7] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 290.661787][ T7] usb 1-1: Manufacturer: syz [ 290.716727][ T7] usb 1-1: config 0 descriptor?? [ 290.777552][ T7] hub 1-1:0.0: USB hub found [ 290.991794][ T7] hub 1-1:0.0: 1 port detected [ 291.552650][ T4365] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 291.811664][ T4365] usb 4-1: Using ep0 maxpacket: 32 [ 291.847539][ T5653] usb 2-1: USB disconnect, device number 25 [ 291.931875][ T4365] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.151714][ T4365] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 292.175583][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.226502][ T4365] usb 4-1: Product: syz [ 292.230687][ T4365] usb 4-1: Manufacturer: syz [ 292.265371][ T4365] usb 4-1: SerialNumber: syz [ 292.286902][ T4365] usb 4-1: config 0 descriptor?? [ 292.293634][ T7518] usb 1-1: USB disconnect, device number 34 [ 292.301713][ T7] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 292.309402][ T7] usb 1-1-port1: attempt power cycle [ 292.394258][ T4365] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 292.425369][ T4365] hdpvr: probe of 4-1:0.0 failed with error -12 [ 293.062704][ T7] usb 4-1: USB disconnect, device number 34 [ 293.327616][ T7518] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 293.664007][ T8452] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 293.801692][ T7518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.825384][ T7518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.846304][ T7518] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.900276][ T7518] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.929550][ T7518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.043300][ T7518] usb 1-1: config 0 descriptor?? [ 294.554487][ T7518] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 294.640738][ T7518] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 294.660732][ T8445] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 295.071908][ T13] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 295.441910][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.541978][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.565848][ T13] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 295.617358][ T13] usb 4-1: Manufacturer: syz [ 295.661463][ T13] usb 4-1: config 0 descriptor?? [ 295.722881][ T13] hub 4-1:0.0: USB hub found [ 295.901602][ C0] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1 [ 295.941704][ T13] hub 4-1:0.0: 1 port detected [ 296.077197][ T7518] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 296.331839][ T7518] usb 2-1: Using ep0 maxpacket: 16 [ 296.451798][ T7518] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.515580][ T7518] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 296.591664][ T7518] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 296.601357][ T7518] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 296.811599][ T4216] usb 1-1: reset high-speed USB device number 39 using dummy_hcd [ 296.942044][ T7518] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.987967][ T7518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 297.027038][ T7518] usb 2-1: SerialNumber: syz [ 297.062062][ T8481] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 297.079406][ T8481] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 297.107821][ T7518] hub 2-1:1.0: bad descriptor, ignoring hub [ 297.117117][ T7518] hub: probe of 2-1:1.0 failed with error -5 [ 297.147607][ T4216] usb 1-1: device firmware changed [ 297.161841][ T7] usb 1-1: USB disconnect, device number 39 [ 297.309583][ T8481] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 297.321799][ T8481] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 297.351618][ T7] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 297.383009][ T13] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 297.401689][ T13] usb 4-1-port1: cannot reset (err = -71) [ 297.408648][ T13] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 297.515595][ T4216] usb 4-1: USB disconnect, device number 35 [ 297.523921][ T13] usb 4-1-port1: cannot disable (err = -71) [ 297.530919][ T13] usb 4-1-port1: attempt power cycle [ 297.805055][ T7518] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 297.816729][ T7] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 297.862359][ T7] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.949783][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.991889][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.111824][ T7] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 298.165478][ T4554] udevd[4554]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.356488][ T8497] udc-core: couldn't find an available UDC or it's busy [ 298.376335][ T8497] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 298.606683][ T8487] page:ffffea0000b42c40 refcount:4 mapcount:1 mapping:ffff88807bc428a0 index:0x2 pfn:0x2d0b1 [ 298.618071][ T8487] memcg:ffff88801a7ac000 [ 298.622337][ T8487] aops:shmem_aops ino:2a [ 298.626611][ T8487] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 298.636457][ T8487] raw: 00fff00000080015 ffffea0001637488 ffffea0001550a88 ffff88807bc428a0 [ 298.645064][ T8487] raw: 0000000000000002 0000000000000000 0000000400000000 ffff88801a7ac000 [ 298.653661][ T8487] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 298.660714][ T8487] page_owner tracks the page as allocated [ 298.666456][ T8487] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 8490, ts 297665938329, free_ts 295717064773 [ 298.681242][ T8487] get_page_from_freelist+0x3b78/0x3d40 [ 298.686795][ T8487] __alloc_pages+0x272/0x700 [ 298.691386][ T8487] alloc_pages_vma+0x39a/0x800 [ 298.696150][ T8487] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 298.701785][ T8487] shmem_getpage_gfp+0x17b1/0x3190 [ 298.706900][ T8487] shmem_read_mapping_page_gfp+0xfd/0x180 [ 298.712617][ T8487] udmabuf_create+0xa62/0x15e0 [ 298.717388][ T8487] udmabuf_ioctl+0x300/0x4e0 [ 298.722002][ T8487] __se_sys_ioctl+0xf1/0x160 [ 298.726586][ T8487] do_syscall_64+0x3b/0x80 [ 298.731001][ T8487] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.736894][ T8487] page last free stack trace: [ 298.741558][ T8487] free_unref_page_prepare+0xc34/0xcf0 [ 298.747015][ T8487] free_unref_page_list+0x1f7/0x8e0 [ 298.752207][ T8487] release_pages+0x1bb9/0x1f40 [ 298.756966][ T8487] __pagevec_release+0x80/0xf0 [ 298.761723][ T8487] shmem_undo_range+0x67a/0x1b50 [ 298.766660][ T8487] shmem_evict_inode+0x21b/0xa00 [ 298.771589][ T8487] evict+0x529/0x930 [ 298.775477][ T8487] __dentry_kill+0x436/0x650 [ 298.780062][ T8487] dentry_kill+0xbb/0x290 [ 298.784385][ T8487] dput+0xd8/0x1a0 [ 298.788098][ T8487] __fput+0x636/0x8e0 [ 298.792075][ T8487] task_work_run+0x129/0x1a0 [ 298.796820][ T8487] do_exit+0x6a3/0x2480 [ 298.800992][ T8487] do_group_exit+0x144/0x310 [ 298.805667][ T8487] get_signal+0xc66/0x14e0 [ 298.810081][ T8487] arch_do_signal_or_restart+0xbd/0x12b0 [ 298.815816][ T8487] ------------[ cut here ]------------ [ 298.821261][ T8487] kernel BUG at mm/filemap.c:166! [ 298.826298][ T8487] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 298.832367][ T8487] CPU: 0 PID: 8487 Comm: syz.6.1038 Not tainted 5.15.180-syzkaller #0 [ 298.840509][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.850553][ T8487] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0 [ 298.856964][ T8487] Code: e8 68 6c d8 ff 4c 89 f7 48 c7 c6 80 06 b3 8a e8 c9 d8 0e 00 0f 0b e8 52 6c d8 ff 4c 89 f7 48 c7 c6 c0 06 b3 8a e8 b3 d8 0e 00 <0f> 0b 48 85 ed 75 62 e8 37 6c d8 ff 4c 89 eb eb 60 e8 2d 6c d8 ff [ 298.876565][ T8487] RSP: 0018:ffffc9000326f610 EFLAGS: 00010046 [ 298.882627][ T8487] RAX: ed19ef8a5429c500 RBX: 0000000000000000 RCX: ffff8880285ed940 [ 298.890612][ T8487] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 298.898576][ T8487] RBP: 0000000000000000 R08: ffffffff81d0f4c4 R09: ffffed10171c4f24 [ 298.906537][ T8487] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd4000168589 [ 298.914500][ T8487] R13: ffffea0000b42c48 R14: ffffea0000b42c40 R15: dffffc0000000000 [ 298.922483][ T8487] FS: 000055558350c500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 298.931408][ T8487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.937982][ T8487] CR2: 0000001b30a10ff8 CR3: 000000007b2d1000 CR4: 00000000003506f0 [ 298.945950][ T8487] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 298.953924][ T8487] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 298.961896][ T8487] Call Trace: [ 298.965169][ T8487] [ 298.968100][ T8487] ? rcu_is_watching+0x11/0xa0 [ 298.972861][ T8487] __delete_from_page_cache+0xd1/0x860 [ 298.978326][ T8487] ? __rwlock_init+0x140/0x140 [ 298.983093][ T8487] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 298.990122][ T8487] ? _raw_spin_lock_irq+0xdb/0x110 [ 298.995319][ T8487] ? _raw_spin_lock_irqsave+0x120/0x120 [ 299.000879][ T8487] ? page_mapping+0x312/0x440 [ 299.005554][ T8487] delete_from_page_cache+0x126/0x190 [ 299.010929][ T8487] truncate_inode_page+0x8d/0xb0 [ 299.015883][ T8487] shmem_undo_range+0x535/0x1b50 [ 299.020825][ T8487] ? shmem_truncate_range+0xa0/0xa0 [ 299.026028][ T8487] ? __lock_acquire+0x1ff0/0x1ff0 [ 299.031050][ T8487] ? do_raw_spin_lock+0x14a/0x370 [ 299.036076][ T8487] shmem_evict_inode+0x21b/0xa00 [ 299.041010][ T8487] ? _raw_spin_unlock+0x24/0x40 [ 299.045857][ T8487] ? inode_wait_for_writeback+0x21f/0x280 [ 299.051573][ T8487] ? shmem_free_in_core_inode+0xb0/0xb0 [ 299.057114][ T8487] ? bit_waitqueue+0x30/0x30 [ 299.061710][ T8487] ? do_raw_spin_unlock+0x137/0x8b0 [ 299.066919][ T8487] ? shmem_free_in_core_inode+0xb0/0xb0 [ 299.072460][ T8487] evict+0x529/0x930 [ 299.076354][ T8487] ? proc_nr_inodes+0x330/0x330 [ 299.081200][ T8487] ? _raw_spin_unlock+0x24/0x40 [ 299.086045][ T8487] ? iput+0x6f5/0x8b0 [ 299.090036][ T8487] __dentry_kill+0x436/0x650 [ 299.094626][ T8487] dentry_kill+0xbb/0x290 [ 299.098951][ T8487] dput+0xd8/0x1a0 [ 299.102669][ T8487] __fput+0x636/0x8e0 [ 299.106650][ T8487] task_work_run+0x129/0x1a0 [ 299.111249][ T8487] exit_to_user_mode_loop+0x106/0x130 [ 299.116619][ T8487] exit_to_user_mode_prepare+0xb1/0x140 [ 299.122163][ T8487] syscall_exit_to_user_mode+0x5d/0x240 [ 299.127707][ T8487] do_syscall_64+0x47/0x80 [ 299.132127][ T8487] ? clear_bhb_loop+0x15/0x70 [ 299.136802][ T8487] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.142707][ T8487] RIP: 0033:0x7f8c88260169 [ 299.147114][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.166711][ T8487] RSP: 002b:00007ffd819dd268 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 299.175120][ T8487] RAX: 0000000000000000 RBX: 00007f8c88489ba0 RCX: 00007f8c88260169 [ 299.183258][ T8487] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 299.191312][ T8487] RBP: 00007f8c88489ba0 R08: 0000000000000164 R09: 00000012819dd55f [ 299.199276][ T8487] R10: 00007f8c88489ac0 R11: 0000000000000246 R12: 0000000000048d11 [ 299.207253][ T8487] R13: 00007f8c88488160 R14: ffffffffffffffff R15: 00007ffd819dd380 [ 299.215340][ T8487] [ 299.218353][ T8487] Modules linked in: [ 299.222258][ T8487] ---[ end trace b7fb7af2a930597a ]--- [ 299.227705][ T8487] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0 [ 299.234205][ T8487] Code: e8 68 6c d8 ff 4c 89 f7 48 c7 c6 80 06 b3 8a e8 c9 d8 0e 00 0f 0b e8 52 6c d8 ff 4c 89 f7 48 c7 c6 c0 06 b3 8a e8 b3 d8 0e 00 <0f> 0b 48 85 ed 75 62 e8 37 6c d8 ff 4c 89 eb eb 60 e8 2d 6c d8 ff [ 299.253837][ T8487] RSP: 0018:ffffc9000326f610 EFLAGS: 00010046 [ 299.260001][ T8487] RAX: ed19ef8a5429c500 RBX: 0000000000000000 RCX: ffff8880285ed940 [ 299.267967][ T8487] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 299.275930][ T8487] RBP: 0000000000000000 R08: ffffffff81d0f4c4 R09: ffffed10171c4f24 [ 299.283894][ T8487] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd4000168589 [ 299.291858][ T8487] R13: ffffea0000b42c48 R14: ffffea0000b42c40 R15: dffffc0000000000 [ 299.299826][ T8487] FS: 000055558350c500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 299.308927][ T8487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.315504][ T8487] CR2: 0000001b30a10ff8 CR3: 000000007b2d1000 CR4: 00000000003506f0 [ 299.323471][ T8487] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.331434][ T8487] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.339410][ T8487] Kernel panic - not syncing: Fatal exception [ 299.345729][ T8487] Kernel Offset: disabled [ 299.350046][ T8487] Rebooting in 86400 seconds..