last executing test programs: 8.795681467s ago: executing program 4 (id=2562): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) 7.860887825s ago: executing program 1 (id=2565): open(&(0x7f00000000c0)='./file0\x00', 0x410000, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x3b7, 0x0, &(0x7f0000000140)="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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r9, @ANYBLOB="14005080040005"], 0x30}}, 0x0) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r7, 0x0, {}, 0xff}, 0x18) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r12 = syz_io_uring_setup(0x4f64, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x32a}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_BUFFERS2(r12, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r12, 0x6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000feec48081d0620c167e3000000010902120095a4f000090402"], 0x0) 7.518170021s ago: executing program 2 (id=2567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x128023, 0x111) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8647e2b7f43be400"}, 0x28) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) ppoll(&(0x7f0000000380)=[{r3}, {r4, 0xcaf9ef0804dd3d30}], 0x2, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x0) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f00000001c0)={0x0, 0x0, "f285ef6ae4c3eb75e46f5f27184615d7"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 5.767813749s ago: executing program 2 (id=2573): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0xffffffff, 0x0, &(0x7f00000010c0)=""/75, 0x0, 0x2000}) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/3, 0x3}, {&(0x7f00000005c0)=""/261, 0x105}], 0x2, 0x10, 0x1) r3 = dup(r1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000200)='\x00', &(0x7f0000000240)="11b253bd4ffbda48f80a0f9e73aac39d623b99a6b739448a5655b3c975b738862f14eb7b910249ef4652bef990b13feadd67dff5bf683dc239137659003420bc", 0x40) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001140)={0x1, 0x3, 0x0, 0x9e5, 0x4, [{0xffffffffffffffc9, 0x85b, 0xd5}, {0x3, 0xe3, 0x68e, '\x00', 0x40d}, {0x100, 0x5, 0x0, '\x00', 0x2c00}, {0xfff, 0xa8be, 0x1f, '\x00', 0x8}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) sendto$l2tp6(r3, 0x0, 0x0, 0x40, &(0x7f0000001080)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1}, 0x20) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000080)={{}, 0x0, 0x0, @unused=[0x8000000800000000], @devid}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x1) sendmmsg$inet(r9, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x5}}, {{0x0, 0xff97, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r5, 0x0, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0000000702000d002f6465762f7573626d6fbb230008000000"], 0x1a) 5.666548846s ago: executing program 1 (id=2574): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)='0', 0x1) read$char_usb(r1, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000140)='0', 0x1) 5.387752301s ago: executing program 4 (id=2577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000610b85000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.425164701s ago: executing program 3 (id=2578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 4.375293926s ago: executing program 4 (id=2579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000040)={&(0x7f0000000000), 0x6, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x0, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x64, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x200}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x522}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x3f}, &(0x7f0000000040)=0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x204, 0xfa7f, 0x400, r8}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.088238902s ago: executing program 3 (id=2580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000074ec35677b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05040500d3fc030000004788031c09100628", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x8ec0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x8}}}, @TCA_TBF_PRATE64={0xc, 0x7}]}}]}, 0x64}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r11 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000017e2ffff01000000180000004100000002f4596a8034a9ab3e395939422ffab456dd833a00000000180000000000000017c70f000400000006020000000000001800000000000000170100000300000001"], 0x60}], 0x1, 0x0) recvmmsg(r11, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)=""/63, 0x3f}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d80)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000000400)=""/34, 0x22}], 0x2}}], 0x3, 0x80010022, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "29ef3d7381f7e80d", "8b73a8045900020000080500f77400", "05e600", "d584433414cc2c30"}, 0x28) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00002bbd7000020000000300000038000180050002000300000014000400fe8000000000000000000000000000bb060005004e22000008000700", @ANYRES32=r9, @ANYBLOB="060005004e22000008000300070000000500050009000000"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.053440152s ago: executing program 4 (id=2581): creat(&(0x7f0000001180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) r1 = socket(0x200000100000011, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa03e, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) r3 = socket(0x10, 0x2, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000003180)=@nullb, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0xfe}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x6, 0x0, 0xfffffffe}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="470d00000000000700000a0000000400018004000588"], 0x1c}, 0x1, 0x0, 0x0, 0x24000888}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x102) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) creat(0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xad, 0x0, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shutdown(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x4d) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2060}], 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000040)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='gfs2\x00', 0x0, 0x0) 3.73965424s ago: executing program 3 (id=2582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, 0x0, &(0x7f0000000440)='syzkaller\x00'}, 0x90) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcb, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 3.724227816s ago: executing program 0 (id=2583): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x128023, 0x111) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8647e2b7f43be400"}, 0x28) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) ppoll(&(0x7f0000000380)=[{r3}, {r4, 0xcaf9ef0804dd3d30}], 0x2, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x0) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f00000001c0)={0x0, 0x0, "f285ef6ae4c3eb75e46f5f27184615d7"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 3.599355853s ago: executing program 3 (id=2584): syz_usb_connect$uac1(0x2, 0x9e, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "02400b"}, @input_terminal={0xc}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x1}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 3.303831385s ago: executing program 1 (id=2585): openat$uinput(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x5) 3.130023739s ago: executing program 1 (id=2586): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001280), 0x4) 2.869632898s ago: executing program 1 (id=2587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000040)="b907ef19ed", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.516525645s ago: executing program 2 (id=2588): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000006300)=""/188, 0xbc}], 0x1, 0x3, 0x0) 2.275724489s ago: executing program 4 (id=2589): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r2, 0xae7d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x17, &(0x7f0000000440)=@raw=[@alu={0x0, 0x0, 0x1, 0x8, 0x3, 0xfffffffffffffff0, 0x8}, @alu={0x0, 0x1, 0xc, 0x0, 0x0, 0x80}, @alu={0x4, 0x0, 0x0, 0x0, 0x7, 0x2, 0x4}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x0, 0x0, 0x7, 0x7, 0x80}, @generic={0x9, 0xc, 0x8, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x2, 0x3}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000a00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000009d400ff4d0b523b3b87a1ddecc9996987dde517cfcc666600001800", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000065309009c0700008520000004000000cc7b0400ffffffff8b05f4ff08000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x426b, 0xa4, &(0x7f0000000740)=""/164, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0x0, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5, r0], &(0x7f0000000900)=[{0x5, 0x4}], 0x10, 0x7}, 0x90) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ftruncate(r3, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) 2.224814612s ago: executing program 0 (id=2590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000610b85000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.178317839s ago: executing program 2 (id=2591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000040)={&(0x7f0000000000), 0x6, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x0, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x64, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x200}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x522}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x3f}, &(0x7f0000000040)=0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x204, 0xfa7f, 0x400, r8}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.785686698s ago: executing program 0 (id=2592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000074ec35677b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05040500d3fc030000004788031c09100628", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x8ec0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x8}}}, @TCA_TBF_PRATE64={0xc, 0x7}]}}]}, 0x64}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r11 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000017e2ffff01000000180000004100000002f4596a8034a9ab3e395939422ffab456dd833a00000000180000000000000017c70f000400000006020000000000001800000000000000170100000300000001"], 0x60}], 0x1, 0x0) recvmmsg(r11, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)=""/63, 0x3f}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d80)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000000400)=""/34, 0x22}], 0x2}}], 0x3, 0x80010022, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "29ef3d7381f7e80d", "8b73a8045900020000080500f77400", "05e600", "d584433414cc2c30"}, 0x28) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00002bbd7000020000000300000038000180050002000300000014000400fe8000000000000000000000000000bb060005004e22000008000700", @ANYRES32=r9, @ANYBLOB="060005004e22000008000300070000000500050009000000"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.785371693s ago: executing program 3 (id=2593): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x541b, 0x0) 1.75670675s ago: executing program 2 (id=2594): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.662672314s ago: executing program 1 (id=2595): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000140)='0', 0x1) read$char_usb(r2, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000140)='0', 0x1) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084523, 0x0) 1.448044454s ago: executing program 0 (id=2596): openat$uinput(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x5) 1.369559656s ago: executing program 0 (id=2597): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001280), 0x4) 1.240048256s ago: executing program 0 (id=2598): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b00)="2e00000010008188e6b62aa73772cc9f1ba1f848350000005e140602000000000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000085000000d000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r7, @ANYBLOB="010011000000000000003b00040008000300", @ANYRES32=r8, @ANYBLOB="2f00330040000000080211000000080211000001505050505050"], 0x4c}}, 0x46) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) readv(r9, &(0x7f0000000200)=[{&(0x7f0000000480)=""/171, 0xab}], 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES32=r10], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r12 = syz_open_dev$midi(&(0x7f0000000180), 0x200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) readv(r12, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/50, 0x32}], 0x1) 1.028209926s ago: executing program 3 (id=2599): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0xffffffff, 0x0, &(0x7f00000010c0)=""/75, 0x0, 0x2000}) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/3, 0x3}, {&(0x7f00000005c0)=""/261, 0x105}], 0x2, 0x10, 0x1) r3 = dup(r1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000200)='\x00', &(0x7f0000000240)="11b253bd4ffbda48f80a0f9e73aac39d623b99a6b739448a5655b3c975b738862f14eb7b910249ef4652bef990b13feadd67dff5bf683dc239137659003420bc", 0x40) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001140)={0x1, 0x3, 0x0, 0x9e5, 0x4, [{0xffffffffffffffc9, 0x85b, 0xd5}, {0x3, 0xe3, 0x68e, '\x00', 0x40d}, {0x100, 0x5, 0x0, '\x00', 0x2c00}, {0xfff, 0xa8be, 0x1f, '\x00', 0x8}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) sendto$l2tp6(r3, 0x0, 0x0, 0x40, &(0x7f0000001080)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1}, 0x20) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000080)={{}, 0x0, 0x0, @unused=[0x8000000800000000], @devid}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x1) sendmmsg$inet(r9, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x5}}, {{0x0, 0xff97, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r5, 0x0, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0000000702000d002f6465762f7573626d6fbb230008000000"], 0x1a) 1.025103423s ago: executing program 4 (id=2600): creat(&(0x7f0000001180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) r1 = socket(0x200000100000011, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa03e, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) r3 = socket(0x10, 0x2, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000003180)=@nullb, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0xfe}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x6, 0x0, 0xfffffffe}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="470d00000000000700000a0000000400018004000588"], 0x1c}, 0x1, 0x0, 0x0, 0x24000888}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x102) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) creat(0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xad, 0x0, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shutdown(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x4d) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2060}], 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000040)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='gfs2\x00', 0x0, 0x0) 0s ago: executing program 2 (id=2601): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x128023, 0x111) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8647e2b7f43be400"}, 0x28) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) ppoll(&(0x7f0000000380)=[{r3}, {r4, 0xcaf9ef0804dd3d30}], 0x2, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x0) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f00000001c0)={0x0, 0x0, "f285ef6ae4c3eb75e46f5f27184615d7"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) kernel console output (not intermixed with test programs): 4.152199][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 564.247313][ T5137] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 564.447863][ T5137] usb 4-1: Using ep0 maxpacket: 8 [ 564.459410][ T5137] usb 4-1: config 164 has too many interfaces: 149, using maximum allowed: 32 [ 564.480652][ T5137] usb 4-1: config 164 contains an unexpected descriptor of type 0x2, skipping [ 564.494255][ T5137] usb 4-1: config 164 has an invalid descriptor of length 11, skipping remainder of the config [ 564.505940][ T5137] usb 4-1: config 164 has 0 interfaces, different from the descriptor's value: 149 [ 564.516115][ T5137] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 564.525579][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.567236][T11984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2228'. [ 564.747926][ T5137] usb 4-1: string descriptor 0 read error: -71 [ 564.787704][ T5137] usb 4-1: USB disconnect, device number 35 [ 564.998830][T11987] syz.0.2227: attempt to access beyond end of device [ 564.998830][T11987] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 565.036574][T11987] gfs2: error -5 reading superblock [ 565.607383][ T5137] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 565.827037][ T5137] usb 3-1: Using ep0 maxpacket: 32 [ 565.845009][ T5137] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 565.883128][ T5137] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 566.019094][ T5137] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 566.047020][ T5137] usb 3-1: config 1 has no interface number 0 [ 566.067221][ T5137] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 566.107638][ T5137] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 566.155702][ T5137] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 566.212805][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.265449][ T5137] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 566.299340][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2236'. [ 566.856232][ T5137] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 567.143578][T12018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2239'. [ 567.899355][ T46] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 567.955166][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 567.955191][ T29] audit: type=1326 audit(1721147140.107:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 568.038970][ T29] audit: type=1326 audit(1721147140.107:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 568.147562][ T5154] usb 3-1: USB disconnect, device number 39 [ 568.150016][ T29] audit: type=1326 audit(1721147140.107:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 568.156121][ T5154] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 568.273968][ T29] audit: type=1326 audit(1721147140.147:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 568.401129][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.408980][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.423248][ T29] audit: type=1326 audit(1721147140.147:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 568.465075][ T29] audit: type=1326 audit(1721147140.147:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 568.594464][ T29] audit: type=1326 audit(1721147140.147:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 568.717682][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2250'. [ 568.740373][ T29] audit: type=1326 audit(1721147140.157:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 568.877661][ T29] audit: type=1326 audit(1721147140.157:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 568.987316][ T29] audit: type=1326 audit(1721147140.157:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12028 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e97775bd9 code=0x7ffc0000 [ 569.330271][T12049] syz.1.2245: attempt to access beyond end of device [ 569.330271][T12049] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 569.377105][T12049] gfs2: error -5 reading superblock [ 570.752855][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2262'. [ 570.868236][ T5137] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 571.082864][ T5137] usb 1-1: Using ep0 maxpacket: 32 [ 571.108009][ T5137] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 571.138992][ T5137] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 571.183284][ T5137] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 571.213789][ T5137] usb 1-1: config 1 has no interface number 0 [ 571.232102][ T5137] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.262491][ T5137] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 571.348274][ T5137] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 571.390642][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.466356][ T5137] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 571.702715][T12097] syz.2.2264: attempt to access beyond end of device [ 571.702715][T12097] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 571.771739][T12097] gfs2: error -5 reading superblock [ 572.042646][ T5137] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 572.829413][ T5154] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 573.045947][ T5154] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 573.098413][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.098718][ T5135] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 573.128098][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.160772][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.194677][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.219003][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.254622][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.303340][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.317195][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.349473][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.367785][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 573.394107][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.434724][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.478900][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.495550][ T5135] usb 1-1: USB disconnect, device number 58 [ 573.499453][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.525715][ T5135] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 573.555592][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.601915][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.656136][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.704020][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.741198][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.761803][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.788720][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.841585][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.867036][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.891852][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.938655][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.960775][ T5154] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 574.007025][ T5154] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 574.028352][ T5154] usb 4-1: Product: syz [ 574.034855][ T5154] usb 4-1: Manufacturer: syz [ 574.066794][ T5154] usb 4-1: SerialNumber: syz [ 574.098513][ T5154] usb 4-1: config 0 descriptor?? [ 574.127125][ T5154] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 574.241461][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 574.241485][ T29] audit: type=1326 audit(1721147146.397:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 574.456795][ T29] audit: type=1326 audit(1721147146.437:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 574.458059][ T5154] usb 4-1: USB disconnect, device number 36 [ 574.583527][ T29] audit: type=1326 audit(1721147146.437:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 574.655121][ T29] audit: type=1326 audit(1721147146.457:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 574.658414][ T5154] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 574.695418][ T29] audit: type=1326 audit(1721147146.457:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 574.769252][ T29] audit: type=1326 audit(1721147146.457:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 574.806650][ T29] audit: type=1326 audit(1721147146.467:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 574.865962][ T29] audit: type=1326 audit(1721147146.787:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 574.904698][ T29] audit: type=1326 audit(1721147146.787:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 575.354482][ T29] audit: type=1326 audit(1721147147.507:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 575.454261][T12144] syz.4.2283: attempt to access beyond end of device [ 575.454261][T12144] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 575.497279][T12144] gfs2: error -5 reading superblock [ 575.549179][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 576.159268][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 576.386305][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 576.409705][ T8] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 576.438253][ T8] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 576.471195][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 576.486980][ T8] usb 3-1: config 1 has no interface number 0 [ 576.503674][ T8] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.525367][ T8] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 576.556980][ T8] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 576.576630][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.607279][ T46] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 576.616460][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 576.848257][ T46] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 576.880033][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 576.907101][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 576.979797][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.016155][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.038923][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.086133][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.147991][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.157414][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.186706][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 577.265103][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.297835][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.306849][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.381668][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.427199][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.457195][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.484898][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.525042][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.562716][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.592623][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.684131][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.704800][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.739699][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.773080][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.803739][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.849296][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.880604][ T46] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 577.904165][ T46] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 577.921781][ T46] usb 1-1: Product: syz [ 577.932855][ T46] usb 1-1: Manufacturer: syz [ 577.949489][ T46] usb 1-1: SerialNumber: syz [ 577.976149][ T46] usb 1-1: config 0 descriptor?? [ 578.009959][ T46] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 578.227056][ T8] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 578.389771][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 578.390912][ T8] usb 1-1: USB disconnect, device number 59 [ 578.447907][ T8] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 578.704228][ T46] usb 3-1: USB disconnect, device number 40 [ 578.739081][ T46] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 579.257768][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 579.257793][ T29] audit: type=1326 audit(1721147151.417:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 579.291724][ T29] audit: type=1326 audit(1721147151.457:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 579.326202][ T29] audit: type=1326 audit(1721147151.457:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 579.371857][ T29] audit: type=1326 audit(1721147151.477:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5c2d7475f code=0x7ffc0000 [ 579.401223][ T29] audit: type=1326 audit(1721147151.477:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 579.425543][ T29] audit: type=1326 audit(1721147151.477:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 579.450131][ T29] audit: type=1326 audit(1721147151.477:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5c2d7475f code=0x7ffc0000 [ 579.484026][ T29] audit: type=1326 audit(1721147151.477:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 579.517060][ T5137] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 579.518196][ T29] audit: type=1326 audit(1721147151.477:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 579.555203][ T29] audit: type=1326 audit(1721147151.477:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 579.589402][ T46] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 579.703084][ T5137] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 579.723259][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.745621][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.760746][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.780343][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.789799][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.802521][T12212] syz.2.2304: attempt to access beyond end of device [ 579.802521][T12212] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 579.817248][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.826801][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.836804][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.847335][T12212] gfs2: error -5 reading superblock [ 579.848146][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.864409][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.877927][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.884936][ T46] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 579.894398][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.905736][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.916114][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.929346][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.937676][ T46] usb 5-1: config 0 descriptor?? [ 579.951685][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.964192][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.975685][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.992093][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.001821][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.014916][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 580.025772][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.046633][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.077005][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 580.085633][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.106254][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.127446][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 580.157562][ T5137] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 580.177194][ T5137] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 580.185689][ T5137] usb 2-1: Product: syz [ 580.209257][ T5137] usb 2-1: Manufacturer: syz [ 580.215062][ T5137] usb 2-1: SerialNumber: syz [ 580.237824][ T5137] usb 2-1: config 0 descriptor?? [ 580.275967][ T5137] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 580.372443][ T46] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 580.397023][ T46] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 580.407916][ T46] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 580.427200][ T46] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 580.434567][ T46] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 580.506003][ T46] cm6533_jd 0003:0D8C:0022.0006: No inputs registered, leaving [ 580.570584][ T46] cm6533_jd 0003:0D8C:0022.0006: hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 580.646126][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 580.686066][ T5137] usb 2-1: USB disconnect, device number 39 [ 580.698764][T12231] yurex 2-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 580.717815][ T46] usb 5-1: USB disconnect, device number 61 [ 580.736780][ T5137] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 581.707057][ T46] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 581.989530][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 582.009958][ T46] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 582.037115][ T46] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 582.045804][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 582.047580][ T5154] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 582.091879][ T46] usb 1-1: config 1 has no interface number 0 [ 582.114193][ T46] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.136948][ T46] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 582.167011][ T46] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 582.176221][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.210732][ T46] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 582.278014][ T5154] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 582.309138][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 582.328976][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 582.359781][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.386586][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 582.407661][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 582.428734][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.456718][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 582.476340][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 582.494192][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.503628][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 582.508713][T12259] syz.1.2320: attempt to access beyond end of device [ 582.508713][T12259] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 582.526269][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 582.559413][T12259] gfs2: error -5 reading superblock [ 582.560836][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.585973][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 582.602667][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 582.616314][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.651113][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 582.670664][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 582.688060][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.697802][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 582.717591][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 582.736612][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.745407][ T5154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 582.780944][ T5154] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 582.791237][ T46] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 582.812748][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.833248][ T5154] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 582.868853][ T5154] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 582.905021][ T5154] usb 4-1: Product: syz [ 582.914957][ T5154] usb 4-1: Manufacturer: syz [ 582.919987][ T5154] usb 4-1: SerialNumber: syz [ 582.948807][ T5154] usb 4-1: config 0 descriptor?? [ 582.985405][ T5154] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 583.267633][ T46] usb 4-1: USB disconnect, device number 37 [ 583.316292][ T46] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 583.829558][ T46] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 584.207058][ T5154] usb 1-1: USB disconnect, device number 60 [ 584.257258][ T5154] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 584.469563][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 584.644792][T12294] netlink: 'syz.4.2333': attribute type 7 has an invalid length. [ 584.680417][T12294] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 584.864951][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 584.864977][ T29] audit: type=1326 audit(1721147157.017:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 584.985184][ T29] audit: type=1326 audit(1721147157.017:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 585.009647][ T5137] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 585.095508][ T29] audit: type=1326 audit(1721147157.057:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 585.222014][ T5137] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 585.248065][ T5137] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 585.266993][ T5137] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 585.282372][ T29] audit: type=1326 audit(1721147157.057:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 585.337176][ T5137] usb 1-1: config 0 interface 0 has no altsetting 0 [ 585.368220][ T5137] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 585.397090][ T29] audit: type=1326 audit(1721147157.057:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 585.421092][ T5137] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 585.456969][ T5137] usb 1-1: config 0 interface 0 has no altsetting 0 [ 585.499276][ T5137] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 585.508513][ T5137] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 585.526984][ T29] audit: type=1326 audit(1721147157.077:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 585.584798][ T5137] usb 1-1: config 0 interface 0 has no altsetting 0 [ 585.625113][ T29] audit: type=1326 audit(1721147157.077:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 585.627198][ T5137] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 585.697125][ T29] audit: type=1326 audit(1721147157.077:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 585.727735][ T5137] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 585.774679][ T29] audit: type=1326 audit(1721147157.077:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 585.796931][ T5137] usb 1-1: config 0 interface 0 has no altsetting 0 [ 585.847859][ T5137] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 585.861468][ T5137] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 585.875140][ T29] audit: type=1326 audit(1721147157.077:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.2.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 585.899707][T12312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.906989][ T5137] usb 1-1: config 0 interface 0 has no altsetting 0 [ 585.961466][T12312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.988803][ T5137] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.022329][ T5137] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.031318][T12312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.096970][ T5137] usb 1-1: config 0 interface 0 has no altsetting 0 [ 586.115680][ T5137] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.165529][ T5137] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.202968][ T5137] usb 1-1: config 0 interface 0 has no altsetting 0 [ 586.218754][ T5137] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.237017][ T5137] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.258705][T12317] syz.2.2336: attempt to access beyond end of device [ 586.258705][T12317] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 586.282277][ T5137] usb 1-1: config 0 interface 0 has no altsetting 0 [ 586.313166][T12317] gfs2: error -5 reading superblock [ 586.324328][ T5137] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 586.347726][ T5137] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 586.375602][ T5137] usb 1-1: Product: syz [ 586.387405][ T5137] usb 1-1: Manufacturer: syz [ 586.394447][ T5137] usb 1-1: SerialNumber: syz [ 586.411715][ T5137] usb 1-1: config 0 descriptor?? [ 586.439309][ T5137] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 586.917010][ T5135] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 587.111322][ T5135] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 587.129802][ T5135] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.140078][ T5135] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.169278][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.189462][ T5135] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.208037][ T5135] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.232701][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.252597][ T5135] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.266756][ T5135] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.300390][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.320231][ T5135] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.331744][ T5135] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.352333][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.371691][ T5135] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.386059][ T5135] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.420145][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.440042][ T5135] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.450228][ T5135] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.465644][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.478269][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 587.478712][ T5135] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.497546][ T5154] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 587.517008][ T5135] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.537458][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.547347][ T5135] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.556481][ T5135] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.572817][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.592251][ T5135] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 587.602572][ T5135] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 587.618507][ T5135] usb 4-1: Product: syz [ 587.622953][ T5135] usb 4-1: Manufacturer: syz [ 587.643224][ T5135] usb 4-1: SerialNumber: syz [ 587.661060][ T5135] usb 4-1: config 0 descriptor?? [ 587.687974][ T5135] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 587.697653][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 587.707226][ T5154] usb 5-1: Using ep0 maxpacket: 32 [ 587.726760][ T5154] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.757425][ T5135] usb 1-1: USB disconnect, device number 61 [ 587.783149][ T5135] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 587.797119][ T5154] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.835115][ T5154] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 587.872515][ T5154] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 587.918833][ T5154] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 587.955123][ T46] usb 4-1: USB disconnect, device number 38 [ 587.963476][ T5154] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 587.988145][T12337] netlink: 'syz.2.2347': attribute type 7 has an invalid length. [ 587.989296][ T46] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 588.015155][T12337] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 588.037207][ T5154] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.068908][ T5154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.092659][ T5154] usb 5-1: Product: syz [ 588.107113][ T5154] usb 5-1: Manufacturer: syz [ 588.122141][ T5154] usb 5-1: SerialNumber: syz [ 588.434466][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.474466][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.511662][ T5154] cdc_ncm 5-1:1.0: bind() failure [ 588.553087][ T5154] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 588.584462][ T5154] cdc_ncm 5-1:1.1: bind() failure [ 588.618439][ T5154] usb 5-1: USB disconnect, device number 62 [ 589.135579][T12354] syz.1.2352: attempt to access beyond end of device [ 589.135579][T12354] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 589.187252][T12354] gfs2: error -5 reading superblock [ 589.814003][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 589.928023][T12363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.948131][T12369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2356'. [ 590.083692][T12363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.152001][T12373] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 590.159711][T12363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.358918][ T5148] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 590.381841][T12379] netlink: 'syz.0.2361': attribute type 7 has an invalid length. [ 590.391947][T12379] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 590.566121][T12384] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 590.575276][T12384] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2364'. [ 590.577018][ T5148] usb 2-1: Using ep0 maxpacket: 8 [ 590.588004][T12384] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 590.592967][ T5148] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.609789][ T5148] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.625793][ T5148] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.636196][ T5148] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.656615][ T5148] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.666803][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.851847][ T8] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 590.929975][ T5148] usb 2-1: GET_CAPABILITIES returned 0 [ 590.935546][ T5148] usbtmc 2-1:16.0: can't read capabilities [ 591.037588][ T5154] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 591.074091][ T8] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 591.092881][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.107139][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.123592][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 591.123616][ T29] audit: type=1326 audit(1721147163.277:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.127337][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.138389][ T29] audit: type=1326 audit(1721147163.297:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.222041][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.237157][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.242716][ T29] audit: type=1326 audit(1721147163.297:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.257165][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.278864][ T5154] usb 4-1: Using ep0 maxpacket: 32 [ 591.313497][ T5154] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.317066][ T29] audit: type=1326 audit(1721147163.297:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.335950][ T5148] usb 2-1: USB disconnect, device number 40 [ 591.355126][ T5154] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.367381][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.381681][ T5154] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 591.396453][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.427083][ T5154] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 591.440733][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.445124][ T29] audit: type=1326 audit(1721147163.297:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.455401][ T5154] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 591.498075][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.510661][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.528151][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.535049][ T5154] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 591.537079][ T29] audit: type=1326 audit(1721147163.297:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.548764][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.578746][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.593545][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.602343][ T5154] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.617406][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.635514][ T5154] usb 4-1: Product: syz [ 591.646177][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.656290][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.667207][ T29] audit: type=1326 audit(1721147163.347:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.667297][ T29] audit: type=1326 audit(1721147163.347:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.667383][ T29] audit: type=1326 audit(1721147163.347:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.667478][ T29] audit: type=1326 audit(1721147163.347:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12392 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 591.767931][ T5154] usb 4-1: Manufacturer: syz [ 591.772701][ T5154] usb 4-1: SerialNumber: syz [ 591.790721][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.829977][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.839605][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.851701][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.869780][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.890397][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.916953][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.929125][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 591.944319][ T8] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 591.953454][ T8] usb 1-1: Product: syz [ 591.958460][ T8] usb 1-1: Manufacturer: syz [ 591.963519][ T8] usb 1-1: SerialNumber: syz [ 591.974748][ T8] usb 1-1: config 0 descriptor?? [ 592.024238][T12396] syz.2.2368: attempt to access beyond end of device [ 592.024238][T12396] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 592.047286][ T8] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 592.049112][T12387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.077060][T12396] gfs2: error -5 reading superblock [ 592.129535][T12387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.190315][ T5154] cdc_ncm 4-1:1.0: bind() failure [ 592.213338][ T5154] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 592.229205][ T5154] cdc_ncm 4-1:1.1: bind() failure [ 592.315894][ T5154] usb 4-1: USB disconnect, device number 39 [ 592.452501][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 592.463052][ T8] usb 1-1: USB disconnect, device number 62 [ 592.488781][ T8] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 592.849840][T12410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2370'. [ 593.114822][T12415] netlink: 'syz.4.2373': attribute type 7 has an invalid length. [ 593.127328][T12415] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 593.404440][T12420] netlink: 'syz.2.2375': attribute type 1 has an invalid length. [ 593.419256][T12420] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2375'. [ 593.448534][T12420] netlink: 'syz.2.2375': attribute type 1 has an invalid length. [ 594.376186][T12440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2384'. [ 594.667501][ T5154] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 594.687933][T12445] netlink: 'syz.1.2386': attribute type 7 has an invalid length. [ 594.715619][T12445] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 594.853825][T12448] syz.2.2380: attempt to access beyond end of device [ 594.853825][T12448] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 594.885402][T12448] gfs2: error -5 reading superblock [ 594.907307][ T5154] usb 5-1: Using ep0 maxpacket: 32 [ 594.925919][ T5154] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.950289][ T5154] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.967016][ T5154] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 594.977497][ T46] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 594.989058][ T5154] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 595.007353][ T5154] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 595.038731][ T5154] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 595.071095][ T5154] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.090250][ T5154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.106464][ T5154] usb 5-1: Product: syz [ 595.112728][ T5154] usb 5-1: Manufacturer: syz [ 595.124464][ T5154] usb 5-1: SerialNumber: syz [ 595.205817][ T46] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 595.236034][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.255541][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.274104][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.286156][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.295704][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.318151][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.328085][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.340861][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.377015][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.398946][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.424807][T12437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.438710][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.482701][T12437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.502537][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.528918][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.558471][ T5154] cdc_ncm 5-1:1.0: bind() failure [ 595.567069][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.603272][ T5154] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 595.618497][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.642995][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.653439][ T5154] cdc_ncm 5-1:1.1: bind() failure [ 595.663577][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.696990][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.697536][ T5154] usb 5-1: USB disconnect, device number 63 [ 595.721338][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.750214][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.801573][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.824951][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.855106][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.902056][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.917251][ T46] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 595.936612][ T46] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 595.946745][ T46] usb 1-1: Product: syz [ 595.957828][ T46] usb 1-1: Manufacturer: syz [ 595.965982][ T46] usb 1-1: SerialNumber: syz [ 595.980414][ T46] usb 1-1: config 0 descriptor?? [ 596.027172][ T46] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 596.654111][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 596.654136][ T29] audit: type=1400 audit(1721147168.807:4074): avc: denied { write } for pid=12474 comm="syz.4.2395" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 596.722953][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 596.732924][ T46] usb 1-1: USB disconnect, device number 63 [ 596.794770][ T46] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 596.801413][T12475] input: syz0 as /devices/virtual/input/input7 [ 596.873477][ T29] audit: type=1400 audit(1721147169.027:4075): avc: denied { read } for pid=4520 comm="acpid" name="js0" dev="devtmpfs" ino=2868 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 596.971305][ T29] audit: type=1400 audit(1721147169.027:4076): avc: denied { open } for pid=4520 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2868 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 597.011518][ T29] audit: type=1400 audit(1721147169.027:4077): avc: denied { ioctl } for pid=4520 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2868 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 597.101808][T12481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2396'. [ 597.499102][T12486] netlink: 'syz.4.2398': attribute type 7 has an invalid length. [ 597.525638][T12486] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 597.687073][ T29] audit: type=1400 audit(1721147169.827:4078): avc: denied { setopt } for pid=12491 comm="syz.1.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 597.765059][ T29] audit: type=1326 audit(1721147169.887:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 597.857029][ T29] audit: type=1326 audit(1721147169.887:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 597.896696][ T29] audit: type=1326 audit(1721147169.897:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 597.927600][ T29] audit: type=1326 audit(1721147169.907:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 597.952325][ T29] audit: type=1326 audit(1721147169.917:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff5c2d75bd9 code=0x7ffc0000 [ 598.157153][ T5137] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 598.210862][T12508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2407'. [ 598.368758][ T5137] usb 2-1: Using ep0 maxpacket: 32 [ 598.391295][ T5137] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.412755][ T5137] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.433403][ T5137] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 598.454571][ T5137] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 598.503444][ T5137] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 598.530264][ T5137] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 598.564961][ T5137] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.579092][ T5137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.596988][ T5137] usb 2-1: Product: syz [ 598.607172][ T5137] usb 2-1: Manufacturer: syz [ 598.618230][T12515] syz.2.2402: attempt to access beyond end of device [ 598.618230][T12515] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 598.625405][ T5137] usb 2-1: SerialNumber: syz [ 598.671384][T12515] gfs2: error -5 reading superblock [ 599.003744][T12502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.041660][T12502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.163271][ T5137] cdc_ncm 2-1:1.0: bind() failure [ 599.196182][ T5137] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 599.252451][ T5137] cdc_ncm 2-1:1.1: bind() failure [ 599.347824][ T5137] usb 2-1: USB disconnect, device number 41 [ 599.408172][T12527] netlink: 'syz.3.2413': attribute type 7 has an invalid length. [ 599.475948][T12527] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.806999][ T46] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 600.018425][ T46] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 600.054122][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.078687][ T46] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.101190][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 600.125333][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.140885][ T46] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.169833][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 600.194685][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.213147][ T46] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.243925][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 600.257831][T12545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2419'. [ 600.279909][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.301512][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2418'. [ 600.315121][ T46] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.387389][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 600.405284][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.435864][ T46] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.486960][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 600.517547][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.540049][ T46] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.583962][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 600.622372][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.652393][ T46] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.686992][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 600.709520][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.735700][ T46] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.776133][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 600.808969][ T46] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 600.844709][ T46] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 600.873883][ T46] usb 3-1: Product: syz [ 600.888739][ T46] usb 3-1: Manufacturer: syz [ 600.893439][ T46] usb 3-1: SerialNumber: syz [ 600.930970][ T46] usb 3-1: config 0 descriptor?? [ 600.957731][ T46] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 601.131324][T12564] netlink: 'syz.0.2426': attribute type 7 has an invalid length. [ 601.156974][T12564] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 601.377241][ T5154] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 601.607822][ T5154] usb 2-1: Using ep0 maxpacket: 32 [ 601.616179][ T5154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.636314][ T5154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.659920][ T4849] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 601.673865][ T5154] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 601.693016][ T5154] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 601.704572][T12580] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2431'. [ 601.715003][ T5154] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 601.726966][ T5154] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 601.750400][ T5154] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.759960][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.770808][ T5154] usb 2-1: Product: syz [ 601.775042][ T5154] usb 2-1: Manufacturer: syz [ 601.787920][ T5154] usb 2-1: SerialNumber: syz [ 601.827262][ T5135] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 601.890836][ T4849] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 601.913209][ T4849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 601.937051][ T4849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 601.965312][ T4849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 601.980911][ T4849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 601.991349][ T4849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.032253][ T4849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 602.037214][ T5135] usb 4-1: Using ep0 maxpacket: 32 [ 602.044895][ T4849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.049514][T12584] netlink: 'syz.4.2433': attribute type 4 has an invalid length. [ 602.062041][ T4849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.065427][T12563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.083519][ T4849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 602.095025][ T5135] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 602.096415][T12563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.108805][ T5135] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 602.135147][ T5135] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 602.146250][ T5135] usb 4-1: config 1 has no interface number 0 [ 602.146594][ T4849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.167588][ T5135] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 602.172762][ T4849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.190614][ T5154] cdc_ncm 2-1:1.0: bind() failure [ 602.201569][ T5135] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 602.213499][ T5154] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 602.238664][ T4849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 602.247940][ T5154] cdc_ncm 2-1:1.1: bind() failure [ 602.253039][ T5135] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 602.263907][ T4849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.279401][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.280239][ T4849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.305725][ T5154] usb 2-1: USB disconnect, device number 42 [ 602.332264][ T4849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 602.364496][ T4849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.373419][ T5135] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 602.397489][ T4849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.417942][ T4849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 602.436003][ T4849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.454883][ T4849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.479099][ T4849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 602.494352][ T4849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.504318][ T4849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.516040][ T4849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 602.539464][ T4849] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 602.555806][ T4849] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 602.569359][ T4849] usb 1-1: Product: syz [ 602.573601][ T4849] usb 1-1: Manufacturer: syz [ 602.576467][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 602.578654][ T4849] usb 1-1: SerialNumber: syz [ 602.601462][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 602.633238][ T4849] usb 1-1: config 0 descriptor?? [ 602.662404][ T4849] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 602.706117][ T5154] usb 3-1: USB disconnect, device number 41 [ 602.731588][ T5154] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 602.883941][ T46] usb 1-1: USB disconnect, device number 64 [ 602.911021][ T5135] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 602.960593][ T46] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 603.287514][T12601] netlink: 'syz.4.2439': attribute type 7 has an invalid length. [ 603.295335][T12601] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 603.377212][T12606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2442'. [ 603.710643][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 603.710667][ T29] audit: type=1326 audit(1721147175.867:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 603.782024][ T29] audit: type=1326 audit(1721147175.907:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 603.847068][ T29] audit: type=1326 audit(1721147175.907:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 603.902505][ T29] audit: type=1326 audit(1721147175.907:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 603.927182][ T5154] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 603.971248][ T29] audit: type=1326 audit(1721147175.907:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 603.997683][ T46] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 604.034997][ T29] audit: type=1326 audit(1721147175.907:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 604.080113][ T29] audit: type=1326 audit(1721147175.907:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 604.104516][ T29] audit: type=1326 audit(1721147175.907:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 604.137752][ T5154] usb 2-1: Using ep0 maxpacket: 8 [ 604.149632][ T29] audit: type=1326 audit(1721147175.907:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 604.150357][ T5154] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 604.210383][ T5154] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 604.239200][ T29] audit: type=1326 audit(1721147175.907:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 604.264226][ T5154] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.277112][ T5154] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.314264][ T5154] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 604.335383][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.465419][ T46] usb 4-1: USB disconnect, device number 40 [ 604.478210][ T46] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 604.519128][T12621] syz.4.2446: attempt to access beyond end of device [ 604.519128][T12621] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 604.556934][T12621] gfs2: error -5 reading superblock [ 604.632554][ T5154] usb 2-1: GET_CAPABILITIES returned 0 [ 604.638604][ T5154] usbtmc 2-1:16.0: can't read capabilities [ 604.717211][ T5135] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 604.927722][ T5135] usb 1-1: Using ep0 maxpacket: 32 [ 604.936823][ T5137] usb 2-1: USB disconnect, device number 43 [ 604.969399][ T5135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.999838][ T5135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.034887][ T5135] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 605.065375][ T5135] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 605.108123][ T5135] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 605.140975][ T5135] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 605.179064][ T5135] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.188312][T12634] netlink: 'syz.4.2453': attribute type 7 has an invalid length. [ 605.188347][T12634] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 605.227868][ T5135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.246604][ T5135] usb 1-1: Product: syz [ 605.252065][ T5135] usb 1-1: Manufacturer: syz [ 605.262143][ T5135] usb 1-1: SerialNumber: syz [ 605.293354][T12638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2455'. [ 605.567664][T12622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.608498][T12622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.672734][ T5135] cdc_ncm 1-1:1.0: bind() failure [ 605.720343][ T5135] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 605.746464][T12646] 9pnet_virtio: no channels available for device syz [ 605.753466][ T5135] cdc_ncm 1-1:1.1: bind() failure [ 605.791577][ T5135] usb 1-1: USB disconnect, device number 65 [ 606.237173][ T5137] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 606.457245][ T5137] usb 3-1: Using ep0 maxpacket: 32 [ 606.506999][ T5137] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 606.540041][ T5137] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 606.577047][ T5137] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 606.600589][ T5137] usb 3-1: config 1 has no interface number 0 [ 606.627489][ T5137] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.648888][ T5137] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 606.698678][ T5137] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 606.851447][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.924440][ T5137] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 606.976829][T12670] netlink: 'syz.3.2466': attribute type 7 has an invalid length. [ 607.023638][T12670] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 607.137578][T12674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2467'. [ 607.501343][ T5137] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 607.913228][ T5154] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 608.117364][ T5154] usb 5-1: Using ep0 maxpacket: 8 [ 608.140632][ T5154] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.175948][ T5154] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.217281][ T5154] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.244631][ T5154] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.276669][ T5154] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 608.308289][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.499660][T12706] netlink: 'syz.0.2478': attribute type 7 has an invalid length. [ 608.507910][T12706] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 608.537631][ T5137] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 608.548086][ T5135] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 608.562222][ T5154] usb 5-1: GET_CAPABILITIES returned 0 [ 608.577099][ T5154] usbtmc 5-1:16.0: can't read capabilities [ 608.647621][T12708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2479'. [ 608.772186][ T5137] usb 3-1: USB disconnect, device number 42 [ 608.776072][ T5154] usb 5-1: USB disconnect, device number 64 [ 608.780141][ T5135] usb 4-1: Using ep0 maxpacket: 32 [ 608.828171][ T5135] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.870676][ T5137] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 608.901669][ T5135] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.951709][ T5135] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 608.986987][ T5135] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 609.030384][ T5135] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 609.057898][ T5135] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 609.093735][ T5135] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 609.137466][ T5135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.172215][ T5135] usb 4-1: Product: syz [ 609.181056][ T5135] usb 4-1: Manufacturer: syz [ 609.191585][ T5135] usb 4-1: SerialNumber: syz [ 609.509736][T12700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.554473][T12700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.601648][ T5135] cdc_ncm 4-1:1.0: bind() failure [ 609.630090][ T5135] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 609.648829][ T5135] cdc_ncm 4-1:1.1: bind() failure [ 609.719019][ T5135] usb 4-1: USB disconnect, device number 41 [ 610.298329][T12742] netlink: 'syz.4.2490': attribute type 7 has an invalid length. [ 610.342107][T12742] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 610.513510][T12748] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2491'. [ 610.907352][ T5154] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 610.957170][ T8] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 611.122766][ T5154] usb 2-1: Using ep0 maxpacket: 32 [ 611.139971][ T5154] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 611.152561][ T5154] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 611.163772][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 611.192370][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.207437][ T5154] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 611.229740][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.247026][ T5154] usb 2-1: config 1 has no interface number 0 [ 611.253244][ T5154] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.269800][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.276589][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 611.286940][ T5154] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 611.289416][ T5135] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 611.307496][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.322910][ T5154] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 611.332328][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 611.352440][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.360859][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.387473][ T5154] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 611.517028][ T5135] usb 3-1: Using ep0 maxpacket: 32 [ 611.535144][ T5135] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.558797][ T5135] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.588447][ T5135] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 611.608377][ T5135] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 611.620532][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 611.626160][ T8] usbtmc 1-1:16.0: can't read capabilities [ 611.633966][ T5135] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 611.664933][ T5135] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 611.725241][ T5135] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.746963][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.752994][T12784] netlink: 'syz.3.2507': attribute type 7 has an invalid length. [ 611.772755][ T5135] usb 3-1: Product: syz [ 611.787421][T12784] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 611.789021][ T5135] usb 3-1: Manufacturer: syz [ 611.823996][ T5135] usb 3-1: SerialNumber: syz [ 611.845791][ T8] usb 1-1: USB disconnect, device number 66 [ 611.949081][ T5154] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 612.114240][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.131551][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.180908][ T5135] cdc_ncm 3-1:1.0: bind() failure [ 612.221392][ T5135] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 612.239102][ T5135] cdc_ncm 3-1:1.1: bind() failure [ 612.258877][ T5135] usb 3-1: USB disconnect, device number 43 [ 612.723925][T12796] netlink: 'syz.3.2510': attribute type 3 has an invalid length. [ 612.777473][T12796] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2510'. [ 613.017152][ T5154] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 613.226656][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 613.226680][ T29] audit: type=1326 audit(1721147185.377:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 613.306219][ T29] audit: type=1326 audit(1721147185.417:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 613.382062][ T29] audit: type=1326 audit(1721147185.417:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 613.427087][ T5137] usb 2-1: USB disconnect, device number 44 [ 613.465129][ T5137] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 613.510867][ T29] audit: type=1326 audit(1721147185.417:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 613.596149][ T29] audit: type=1326 audit(1721147185.417:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 613.683699][ T29] audit: type=1326 audit(1721147185.417:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 613.784395][ T29] audit: type=1326 audit(1721147185.417:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 613.892266][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'. [ 613.914995][ T29] audit: type=1326 audit(1721147185.417:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 613.941349][ T29] audit: type=1326 audit(1721147185.427:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 614.052504][ T29] audit: type=1326 audit(1721147185.427:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 614.234178][T12816] netlink: 'syz.2.2518': attribute type 7 has an invalid length. [ 614.248233][T12816] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 614.324933][T12814] syz.0.2516: attempt to access beyond end of device [ 614.324933][T12814] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 614.358053][T12814] gfs2: error -5 reading superblock [ 614.807235][ T5137] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 615.033741][ T5137] usb 2-1: Using ep0 maxpacket: 8 [ 615.042031][ T5137] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.057002][ T5137] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.086936][ T5137] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.111982][ T5137] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.130627][ T8] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 615.142757][ T5137] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 615.163477][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.319174][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 615.338401][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.370925][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.397378][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 615.438067][ T5137] usb 2-1: GET_CAPABILITIES returned 0 [ 615.453269][ T5137] usbtmc 2-1:16.0: can't read capabilities [ 615.459836][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 615.459886][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.514171][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 615.566349][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.596134][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.622404][ T8] usb 3-1: Product: syz [ 615.626815][ T8] usb 3-1: Manufacturer: syz [ 615.631538][ T8] usb 3-1: SerialNumber: syz [ 615.663633][ T5135] usb 2-1: USB disconnect, device number 45 [ 615.791564][ T5137] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 615.979740][T12830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.997893][T12830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.002545][ T5137] usb 1-1: Using ep0 maxpacket: 16 [ 616.031603][ T5137] usb 1-1: config 0 has no interfaces? [ 616.044077][ T8] cdc_ncm 3-1:1.0: bind() failure [ 616.057086][ T5137] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 616.081735][ T8] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 616.083689][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.096692][ T8] cdc_ncm 3-1:1.1: bind() failure [ 616.125633][ T8] usb 3-1: USB disconnect, device number 44 [ 616.135817][ T5137] usb 1-1: config 0 descriptor?? [ 616.389620][T12848] netlink: 'syz.1.2530': attribute type 3 has an invalid length. [ 616.407143][T12848] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2530'. [ 616.458943][ T5137] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 616.677158][ T5137] usb 4-1: Using ep0 maxpacket: 32 [ 616.713533][ T5137] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 616.727263][ T5137] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 616.751515][ T5137] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 616.757761][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2529'. [ 616.782768][ T5137] usb 4-1: config 1 has no interface number 0 [ 616.797023][ T5137] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 616.815280][ T5137] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 616.843240][ T5137] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 616.864578][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.914862][ T5137] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 617.015627][T12859] netlink: 'syz.2.2532': attribute type 7 has an invalid length. [ 617.061409][T12859] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 617.156371][ T5135] usb 1-1: USB disconnect, device number 67 [ 617.486507][ T5137] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 617.667010][ T5090] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 617.909357][ T5090] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 617.931459][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.952298][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.987151][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.008356][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.026678][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.057708][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.067921][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.088659][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.117030][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.133065][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.135708][T12875] syz.0.2535: attempt to access beyond end of device [ 618.135708][T12875] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 618.154789][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.191968][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.195343][T12875] gfs2: error -5 reading superblock [ 618.222483][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.252105][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.287083][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.318300][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.347251][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.384621][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.411240][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.427082][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.457332][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.466460][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.487135][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.520279][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.537367][ T5137] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 618.566977][ T5090] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 618.576207][ T5090] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 618.633687][ T5090] usb 3-1: Product: syz [ 618.654317][ T5090] usb 3-1: Manufacturer: syz [ 618.672678][ T5090] usb 3-1: SerialNumber: syz [ 618.710263][ T5090] usb 3-1: config 0 descriptor?? [ 618.782003][ T5090] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 619.078388][ T5090] usb 3-1: USB disconnect, device number 45 [ 619.140102][ T5090] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 619.147864][ T5154] usb 4-1: USB disconnect, device number 42 [ 619.155669][ T5154] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 619.537027][ T5135] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 619.738189][ T5135] usb 1-1: Using ep0 maxpacket: 8 [ 619.756222][ T5135] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 619.797058][ T5135] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 619.830753][ T5135] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 619.877100][ T5135] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.890493][ T5090] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 619.915072][ T5135] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 619.963039][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.167140][ T5090] usb 2-1: Using ep0 maxpacket: 32 [ 620.206104][ T5090] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.367697][ T5090] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.417439][ T5090] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 620.469565][ T5090] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 620.506585][ T5090] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 620.571390][ T5135] usb 1-1: usb_control_msg returned -71 [ 620.587591][ T5090] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 620.597758][ T5135] usbtmc 1-1:16.0: can't read capabilities [ 620.648986][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'. [ 620.687548][ T5090] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.696711][ T5090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.726314][ T5135] usb 1-1: USB disconnect, device number 68 [ 620.775963][ T5090] usb 2-1: Product: syz [ 620.803053][ T5090] usb 2-1: Manufacturer: syz [ 620.811058][ T5090] usb 2-1: SerialNumber: syz [ 620.958434][T12895] netlink: 'syz.2.2546': attribute type 7 has an invalid length. [ 621.004746][T12895] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 621.117812][T12883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.167672][T12883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.253971][ T5090] cdc_ncm 2-1:1.0: bind() failure [ 621.296982][ T5090] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 621.319389][ T5090] cdc_ncm 2-1:1.1: bind() failure [ 621.367646][ T5090] usb 2-1: USB disconnect, device number 46 [ 621.408624][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 621.408650][ T29] audit: type=1326 audit(1721147193.567:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.493247][ T29] audit: type=1326 audit(1721147193.567:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.536768][ T29] audit: type=1326 audit(1721147193.567:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.572860][ T29] audit: type=1326 audit(1721147193.607:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.610157][ T29] audit: type=1326 audit(1721147193.607:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.643971][ T29] audit: type=1326 audit(1721147193.607:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.727254][ T29] audit: type=1326 audit(1721147193.607:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.767067][ T29] audit: type=1326 audit(1721147193.607:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.837141][ T29] audit: type=1326 audit(1721147193.607:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.907076][ T29] audit: type=1326 audit(1721147193.607:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.0.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 621.917098][ T5154] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 622.157081][T12914] syz.0.2550: attempt to access beyond end of device [ 622.157081][T12914] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 622.157175][ T8] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 622.173877][T12914] gfs2: error -5 reading superblock [ 622.182025][ T5154] usb 4-1: Using ep0 maxpacket: 32 [ 622.224438][ T5154] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 622.235034][ T5154] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 622.253230][T12916] netlink: 'syz.1.2555': attribute type 3 has an invalid length. [ 622.261347][ T5154] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 622.270484][T12916] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2555'. [ 622.279974][ T5154] usb 4-1: config 1 has no interface number 0 [ 622.286175][ T5154] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.313894][ T5154] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 622.339887][ T5154] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 622.351360][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.380824][ T5154] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 622.438614][ T8] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 622.468265][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.477704][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.488802][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.506514][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.520102][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.557208][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.565560][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.590231][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.610657][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.629666][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.642028][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.678107][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.687969][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.717051][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.746948][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.768170][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.777641][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.816934][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.826165][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.854999][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2556'. [ 622.858570][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.896576][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.929341][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.957218][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.968821][ T5154] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 623.009171][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 623.052196][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 623.087032][ T8] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 623.095495][ T8] usb 3-1: Product: syz [ 623.124371][ T8] usb 3-1: Manufacturer: syz [ 623.136930][ T8] usb 3-1: SerialNumber: syz [ 623.180920][ T8] usb 3-1: config 0 descriptor?? [ 623.219903][ T8] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 623.377788][T12930] netlink: 'syz.0.2558': attribute type 7 has an invalid length. [ 623.403645][T12930] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 623.987869][ T5154] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 624.247246][ T5137] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 624.447192][ T5137] usb 1-1: Using ep0 maxpacket: 8 [ 624.475954][ T5137] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.479812][ T5154] usb 4-1: USB disconnect, device number 43 [ 624.517554][ T5137] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.528624][ T5154] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 624.551218][ T5137] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 624.590356][ T5137] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.647063][ T5137] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 624.687182][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.819880][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 624.828156][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 624.921586][ T5135] usb 3-1: USB disconnect, device number 46 [ 624.968033][ T5135] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 624.977373][ T5137] usb 1-1: usb_control_msg returned -71 [ 624.983056][ T5137] usbtmc 1-1:16.0: can't read capabilities [ 625.088684][ T5137] usb 1-1: USB disconnect, device number 69 [ 625.711954][ T5137] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 625.917136][ T5137] usb 2-1: Using ep0 maxpacket: 32 [ 625.937407][ T5137] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.987240][ T5137] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.032940][ T5137] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.073644][ T5137] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 626.117112][ T5137] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 626.120170][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'. [ 626.154391][ T5137] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 626.180742][ T5137] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.241599][ T5137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.289889][ T5137] usb 2-1: Product: syz [ 626.317110][ T5137] usb 2-1: Manufacturer: syz [ 626.340496][ T5137] usb 2-1: SerialNumber: syz [ 626.418210][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 626.418233][ T29] audit: type=1326 audit(1721147198.577:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.458973][ T29] audit: type=1326 audit(1721147198.607:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.484754][ T29] audit: type=1326 audit(1721147198.607:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.521653][T12967] syz.0.2566: attempt to access beyond end of device [ 626.521653][T12967] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 626.549813][T12968] netlink: 'syz.3.2569': attribute type 7 has an invalid length. [ 626.559431][T12967] gfs2: error -5 reading superblock [ 626.575878][ T29] audit: type=1326 audit(1721147198.607:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.613544][T12968] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 626.632088][ T29] audit: type=1326 audit(1721147198.607:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.659814][ T29] audit: type=1326 audit(1721147198.607:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.714282][T12954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.728424][ T29] audit: type=1326 audit(1721147198.607:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.752747][T12954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.777601][ T29] audit: type=1326 audit(1721147198.607:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.806535][ T29] audit: type=1326 audit(1721147198.607:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.868966][ T5137] cdc_ncm 2-1:1.0: bind() failure [ 626.887069][ T29] audit: type=1326 audit(1721147198.607:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ab75bd9 code=0x7ffc0000 [ 626.934460][ T5137] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 626.969261][ T5137] cdc_ncm 2-1:1.1: bind() failure [ 627.027495][ T5137] usb 2-1: USB disconnect, device number 47 [ 627.877228][ T5137] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 627.877539][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 628.010785][ T5154] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 628.091268][ T5137] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 628.115939][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.133605][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 628.145860][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.146688][ T8] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 628.177296][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.185979][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.186994][ T8] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 628.205300][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.227259][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 628.228949][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.236361][ T8] usb 3-1: config 1 has no interface number 0 [ 628.272010][ T8] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.272594][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.306959][ T5154] usb 1-1: Using ep0 maxpacket: 8 [ 628.312872][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.321925][ T5154] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 628.334236][ T8] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 628.353157][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.358173][ T5154] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 628.370609][ T8] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 628.379772][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.387693][ T5154] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 628.399310][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.414267][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.419050][ T5154] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 628.442654][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.453929][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 628.456258][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.461927][ T5154] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 628.487266][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.514342][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.514964][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.556475][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.574186][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.589494][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.608324][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.621541][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.632763][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.644762][ T5137] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.656716][ T5137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.689011][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.701639][ T5137] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 628.721476][ T5137] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 628.752068][ T5137] usb 2-1: Product: syz [ 628.756559][ T5137] usb 2-1: Manufacturer: syz [ 628.785378][ T5137] usb 2-1: SerialNumber: syz [ 628.797223][ T5154] usb 1-1: usb_control_msg returned -71 [ 628.809388][ T5137] usb 2-1: config 0 descriptor?? [ 628.823094][ T5154] usbtmc 1-1:16.0: can't read capabilities [ 628.852769][ T5137] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 628.864627][ T5154] usb 1-1: USB disconnect, device number 70 [ 628.872218][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2579'. [ 629.031148][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 629.114966][ T8] usb 2-1: USB disconnect, device number 48 [ 629.164279][ T8] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 629.207613][T13004] netlink: 'syz.3.2580': attribute type 7 has an invalid length. [ 629.215851][T13004] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 629.825460][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.835345][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.937738][ T8] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 630.059774][ T5154] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 630.120307][T13018] syz.4.2581: attempt to access beyond end of device [ 630.120307][T13018] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 630.143216][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 630.159564][T13018] gfs2: error -5 reading superblock [ 630.170886][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 630.221497][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 630.264408][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 630.326363][ T8] usb 4-1: string descriptor 0 read error: -22 [ 630.363023][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 630.388275][ T5137] usb 3-1: USB disconnect, device number 47 [ 630.402753][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.436577][ T5137] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 630.909587][ T8] usb 4-1: USB disconnect, device number 44 [ 631.142235][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 631.272559][ T6575] udevd[6575]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.497833][T13036] netlink: 'syz.0.2592': attribute type 7 has an invalid length. [ 631.527279][T13036] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 631.907631][ T8] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 632.042193][T13053] netlink: 'syz.0.2598': attribute type 3 has an invalid length. [ 632.053744][T13053] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2598'. [ 632.122082][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 632.146300][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.174752][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.225517][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.278291][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.309224][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.328715][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 632.328758][ T29] audit: type=1326 audit(1721147204.487:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.334656][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.348107][ T29] audit: type=1326 audit(1721147204.487:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.411841][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.434952][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.475930][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.498068][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.507261][ T29] audit: type=1326 audit(1721147204.487:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.507354][ T29] audit: type=1326 audit(1721147204.487:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.507449][ T29] audit: type=1326 audit(1721147204.527:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.507537][ T29] audit: type=1326 audit(1721147204.547:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.609952][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.672240][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.694463][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.706698][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.745369][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.776960][ T29] audit: type=1326 audit(1721147204.547:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.785138][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.807123][ T5090] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 632.848816][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.867024][ T29] audit: type=1326 audit(1721147204.547:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.902037][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.915170][ T29] audit: type=1326 audit(1721147204.547:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.946625][ T29] audit: type=1326 audit(1721147204.547:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13058 comm="syz.4.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032375bd9 code=0x7ffc0000 [ 632.987292][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 633.010174][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 633.026960][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 633.048940][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 633.067338][ T5090] usb 4-1: Using ep0 maxpacket: 32 [ 633.069187][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 633.079511][ T5090] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 633.107012][ T5090] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 633.126002][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 633.136665][ T5090] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 633.148985][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 633.167011][ T5090] usb 4-1: config 1 has no interface number 0 [ 633.173245][ T5090] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 633.187027][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 633.215728][ T8] usb 2-1: Product: syz [ 633.223361][ T5090] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 633.230455][ T8] usb 2-1: Manufacturer: syz [ 633.276386][ T8] usb 2-1: SerialNumber: syz [ 633.276564][ T5090] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 633.304468][ T8] usb 2-1: config 0 descriptor?? [ 633.347061][ T5090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.360339][ T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 633.370719][T13062] syz.4.2600: attempt to access beyond end of device [ 633.370719][T13062] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 633.410951][ T5090] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 633.441932][T13062] gfs2: error -5 reading superblock [ 633.800968][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 633.825063][ T8] usb 2-1: USB disconnect, device number 49 [ 633.848001][ T8] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 634.006088][ T5090] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 691.319141][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.325666][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 739.066828][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 739.073847][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13065/1:b..l [ 739.082541][ C1] rcu: (detected by 1, t=10503 jiffies, g=89525, q=187 ncpus=2) [ 739.090309][ C1] task:syz.2.2601 state:R running task stack:25888 pid:13065 tgid:13064 ppid:6256 flags:0x00004002 [ 739.103620][ C1] Call Trace: [ 739.106943][ C1] [ 739.109911][ C1] __schedule+0xf27/0x5d10 [ 739.114417][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 739.119947][ C1] ? unwind_next_frame+0x51/0x23a0 [ 739.125144][ C1] ? stack_access_ok+0xf9/0x270 [ 739.130073][ C1] ? __pfx___schedule+0x10/0x10 [ 739.134976][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.140245][ C1] preempt_schedule_irq+0x51/0x90 [ 739.145331][ C1] irqentry_exit+0x36/0x90 [ 739.149811][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 739.155855][ C1] RIP: 0010:sized_strscpy+0x190/0x290 [ 739.161282][ C1] Code: 09 40 84 f6 0f 85 bb 00 00 00 49 8d 3c 06 0f b6 2c 03 48 89 fe 49 89 f8 48 c1 ee 03 41 83 e0 07 42 0f b6 34 2e 44 38 c6 7f 09 <40> 84 f6 0f 85 a4 00 00 00 40 84 ed 41 88 2c 06 0f 84 5f ff ff ff [ 739.180946][ C1] RSP: 0018:ffffc900033fee50 EFLAGS: 00000246 [ 739.187061][ C1] RAX: 0000000000000008 RBX: ffff88802c6c44b0 RCX: ffffffff8ad8dade [ 739.195070][ C1] RDX: ffffed10058d8897 RSI: 0000000000000000 RDI: ffff8880191facf0 [ 739.203086][ C1] RBP: 0000000000000030 R08: 0000000000000000 R09: ffffed10058d8896 [ 739.211102][ C1] R10: ffff88802c6c44b0 R11: 0000000000000001 R12: 0000000000000003 [ 739.219130][ C1] R13: dffffc0000000000 R14: ffff8880191face8 R15: 0000000000000008 [ 739.227151][ C1] ? read_word_at_a_time+0xe/0x20 [ 739.232228][ C1] ? __handle_mm_fault+0x2311/0x53d0 [ 739.237578][ C1] __update_page_owner_handle+0x256/0x320 [ 739.243369][ C1] __set_page_owner+0x13f/0x560 [ 739.248279][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 739.253711][ C1] ? bad_range+0x264/0x440 [ 739.258175][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.263436][ C1] post_alloc_hook+0x2d1/0x350 [ 739.268261][ C1] get_page_from_freelist+0x1353/0x2e50 [ 739.273876][ C1] ? __pfx___might_resched+0x10/0x10 [ 739.279226][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 739.285187][ C1] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 739.291613][ C1] __alloc_pages_noprof+0x22b/0x2460 [ 739.296969][ C1] ? hlock_class+0x4e/0x130 [ 739.301525][ C1] ? mark_lock+0xb5/0xc60 [ 739.305926][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 739.311710][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 739.316971][ C1] ? hlock_class+0x4e/0x130 [ 739.321526][ C1] ? hlock_class+0x4e/0x130 [ 739.326096][ C1] ? hlock_class+0x4e/0x130 [ 739.330652][ C1] ? __pfx_mark_lock+0x10/0x10 [ 739.335478][ C1] ? hlock_class+0x4e/0x130 [ 739.340033][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 739.345987][ C1] ? policy_nodemask+0xea/0x4e0 [ 739.350893][ C1] alloc_pages_mpol_noprof+0x275/0x610 [ 739.356410][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 739.362445][ C1] ? hlock_class+0x4e/0x130 [ 739.367006][ C1] ? find_held_lock+0x2d/0x110 [ 739.371826][ C1] vma_alloc_folio_noprof+0xad/0x1f0 [ 739.377170][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 739.383117][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 739.388374][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 739.393463][ C1] ? __mmu_notifier_invalidate_range_end+0x33a/0x430 [ 739.400215][ C1] do_wp_page+0xf51/0x3290 [ 739.404693][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 739.409782][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 739.414692][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 739.420114][ C1] __handle_mm_fault+0x2311/0x53d0 [ 739.425290][ C1] ? __pfx_mt_find+0x10/0x10 [ 739.429952][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 739.435493][ C1] ? find_vma+0xc0/0x140 [ 739.439795][ C1] ? __pfx_find_vma+0x10/0x10 [ 739.444533][ C1] handle_mm_fault+0x476/0xa00 [ 739.449368][ C1] ? __pkru_allows_pkey+0x52/0xb0 [ 739.454450][ C1] do_user_addr_fault+0x7a3/0x13f0 [ 739.459626][ C1] exc_page_fault+0x5c/0xc0 [ 739.464195][ C1] asm_exc_page_fault+0x26/0x30 [ 739.469103][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 739.474962][ C1] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 739.494620][ C1] RSP: 0018:ffffc900033ff958 EFLAGS: 00050206 [ 739.500732][ C1] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 [ 739.508749][ C1] RDX: 0000000000000000 RSI: ffff888012e7b180 RDI: 00000000202a5000 [ 739.516782][ C1] RBP: 0000000000001000 R08: 0000000000000000 R09: ffffed10025cf7ff [ 739.524789][ C1] R10: ffff888012e7bfff R11: 0000000000000000 R12: 00000000002a4b80 [ 739.532799][ C1] R13: ffffc900033ffd50 R14: ffff888012e7b000 R15: 00000000202a4e80 [ 739.540824][ C1] _copy_to_iter+0x4d2/0x1140 [ 739.545570][ C1] ? __pfx__copy_to_iter+0x10/0x10 [ 739.550736][ C1] ? irqentry_exit+0x3b/0x90 [ 739.555392][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.560656][ C1] copy_page_to_iter+0xf1/0x180 [ 739.565569][ C1] process_vm_rw_core.constprop.0+0x5c9/0xa10 [ 739.571709][ C1] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 739.578371][ C1] process_vm_rw+0x301/0x360 [ 739.583026][ C1] ? __pfx_process_vm_rw+0x10/0x10 [ 739.588208][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 739.593638][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 739.598986][ C1] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 739.604689][ C1] ? do_syscall_64+0x91/0x250 [ 739.609422][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.614689][ C1] do_syscall_64+0xcd/0x250 [ 739.619248][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.625196][ C1] RIP: 0033:0x7ff5c2d75bd9 [ 739.629663][ C1] RSP: 002b:00007ff5c3b2d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 739.638129][ C1] RAX: ffffffffffffffda RBX: 00007ff5c2f03f60 RCX: 00007ff5c2d75bd9 [ 739.646145][ C1] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 000000000000049a [ 739.654168][ C1] RBP: 00007ff5c2de4e60 R08: 0000000000000286 R09: 0000000000000000 [ 739.662185][ C1] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 739.670192][ C1] R13: 000000000000000b R14: 00007ff5c2f03f60 R15: 00007ffdde97b5e8 [ 739.678209][ C1] [ 739.681262][ C1] rcu: rcu_preempt kthread starved for 8866 jiffies! g89525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 739.692413][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 739.702416][ C1] rcu: RCU grace-period kthread stack dump: [ 739.708350][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 739.720144][ C1] Call Trace: [ 739.723456][ C1] [ 739.726423][ C1] __schedule+0xf27/0x5d10 [ 739.730904][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 739.736187][ C1] ? __pfx___schedule+0x10/0x10 [ 739.741092][ C1] ? schedule+0x298/0x350 [ 739.745494][ C1] ? __pfx_lock_release+0x10/0x10 [ 739.750591][ C1] ? __pfx___mod_timer+0x10/0x10 [ 739.755581][ C1] ? lock_acquire+0x1b1/0x560 [ 739.760326][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 739.765858][ C1] schedule+0xe7/0x350 [ 739.769996][ C1] schedule_timeout+0x136/0x2a0 [ 739.774904][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 739.780331][ C1] ? __pfx_process_timeout+0x10/0x10 [ 739.785693][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 739.791573][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 739.797097][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 739.801926][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 739.807269][ C1] ? rcu_gp_init+0xc82/0x1630 [ 739.812009][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 739.817877][ C1] rcu_gp_kthread+0x271/0x380 [ 739.822616][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 739.827875][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.833138][ C1] ? __kthread_parkme+0x148/0x220 [ 739.838222][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 739.843480][ C1] kthread+0x2c1/0x3a0 [ 739.847610][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.852871][ C1] ? __pfx_kthread+0x10/0x10 [ 739.857525][ C1] ret_from_fork+0x45/0x80 [ 739.862024][ C1] ? __pfx_kthread+0x10/0x10 [ 739.866690][ C1] ret_from_fork_asm+0x1a/0x30 [ 739.871561][ C1] [ 739.874614][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 739.880986][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 739.890405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 739.900495][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 739.905839][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 38 03 1c 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 28 a3 b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 739.925489][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 739.931639][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae7b8e9 [ 739.939654][ C1] RDX: 0000000000000001 RSI: ffff88801969f800 RDI: ffff88801969f864 [ 739.947673][ C1] RBP: ffff88801969f864 R08: 0000000000000001 R09: ffffed1017266fdd [ 739.955685][ C1] R10: ffff8880b9337eeb R11: 0000000000000000 R12: ffff888016fbf000 [ 739.963698][ C1] R13: ffffffff8e746de0 R14: 0000000000000001 R15: 0000000000000000 [ 739.971711][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 739.980693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.987322][ C1] CR2: 0000001b3101aff8 CR3: 00000000290fa000 CR4: 00000000003526f0 [ 739.995337][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 740.003346][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 740.011358][ C1] Call Trace: [ 740.014671][ C1] [ 740.017555][ C1] ? show_regs+0x8c/0xa0 [ 740.021861][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 740.028263][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 740.033518][ C1] ? rcu_sched_clock_irq+0x2501/0x33f0 [ 740.039029][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 740.044726][ C1] ? tmigr_requires_handle_remote+0x14c/0x480 [ 740.050854][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 740.057328][ C1] ? hrtimer_run_queues+0x97/0x450 [ 740.062498][ C1] ? update_process_times+0x175/0x220 [ 740.067929][ C1] ? __pfx_update_process_times+0x10/0x10 [ 740.073723][ C1] ? tick_nohz_handler+0x376/0x530 [ 740.078907][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 740.084430][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 740.089868][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 740.095643][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 740.101777][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 740.106947][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 740.113167][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 740.119036][ C1] [ 740.122004][ C1] [ 740.124964][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 740.131173][ C1] ? ct_kernel_exit+0x139/0x190 [ 740.136068][ C1] ? acpi_safe_halt+0x1a/0x20 [ 740.140794][ C1] acpi_idle_enter+0xc5/0x160 [ 740.145528][ C1] cpuidle_enter_state+0x85/0x500 [ 740.150611][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 740.156492][ C1] cpuidle_enter+0x4e/0xa0 [ 740.160975][ C1] do_idle+0x313/0x3f0 [ 740.165095][ C1] ? __pfx_do_idle+0x10/0x10 [ 740.169737][ C1] cpu_startup_entry+0x4f/0x60 [ 740.174557][ C1] start_secondary+0x220/0x2b0 [ 740.179376][ C1] ? __pfx_start_secondary+0x10/0x10 [ 740.184719][ C1] common_startup_64+0x13e/0x148 [ 740.189712][ C1] [ 740.762714][ T5090] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 741.556081][ T4535] udevd[4535]: worker [8635] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time