last executing test programs: 22.116675297s ago: executing program 4 (id=2538): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) geteuid() (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f00000000c0)={0x30, r4, 0x0, 0x0, 0x8000, 0x200000000000, 0xffffffffffffffff, 0x0}) 19.000011637s ago: executing program 4 (id=2550): read$usbfs(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x8, 0x3, r3, &(0x7f0000000040)=0x80, &(0x7f0000000240)=@hci, 0x0, 0x80800}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) epoll_create(0xd74f) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\xeb\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x5) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) 18.785845354s ago: executing program 4 (id=2553): syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x10d443, 0x0) write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[], 0xa) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4835f010, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x40000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) statx(0xffffffffffffffff, &(0x7f00000062c0)='./file0\x00', 0x2000, 0x4, &(0x7f0000006300)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000006400)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f00000000c0)) fchown(r6, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) 16.946015326s ago: executing program 4 (id=2562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000008b7030000000000008504800008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.644544134s ago: executing program 4 (id=2564): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x400401) getxattr(0x0, &(0x7f0000001840)=@random={'osx.', '\x12\xedN%\xf4\x01\x9b\xf4\xb8\xd2\xe0(\x19\xf9z\xc1^m\xd2\b\x06o\xf7\x11\xc3Z\x7f\xc4\xca\x85\x06\xdd\x7f\x19\xf0w\xe6mG8\xe9\xef\x80-\xb8\xff\xc8e\x92\xfe\xd9\n\v0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x0, 0xf, 0x6}, {0x2, 0xf0, 0x1}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xf0}, {0x1, 0x1, 0x2}, 0x0, 0xfe}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0x0, 0xfd}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) r7 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r7, 0x0, 0xd, 0xfffffffffffffffe) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/224, 0xe0}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = fanotify_init(0x200, 0x0) fanotify_mark(r11, 0x1, 0x8000000, r3, &(0x7f0000000100)='./file1\x00') 8.357068716s ago: executing program 2 (id=2597): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 8.239652427s ago: executing program 2 (id=2599): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xe1) (async) syz_io_uring_submit(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 6.548894758s ago: executing program 2 (id=2607): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@broadcast, @dev, @val={@val={0x88a8, 0x1}, {0x8100, 0x5, 0x0, 0x3}}, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307583af3751595af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbeaf8b3c03e3f00"}}}}, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040c000980080002"], 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r5 = syz_open_dev$usbmon(0x0, 0x4, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x8000, 0x410180) r7 = dup3(r5, r6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00'}) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x8) syz_open_pts(0xffffffffffffffff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) 6.346661651s ago: executing program 2 (id=2609): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x800c044) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc040) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 4.816831152s ago: executing program 3 (id=2611): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x2d, 0xffffffffffffffff, {0x4}}, '.\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x5761, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffd21, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYBLOB="f9eb0c98fcb4640b2d9981bd3456e18e694107903a4ef07448c67bc3ed211545775fdb0b903bc17bb5415ce82527105faf257675962f36a360c1f5ba838f4cc3eed5e6581fd31f245fedf6967fd423b7d2b87be9e640e0e22fb93ae8abcc4a175eae1154a84011353b0bd779d86e285deb5a", @ANYRESHEX=r0, @ANYRES32=r1, @ANYRESDEC=r2], 0x28}, 0x1, 0x0, 0x0, 0x200448c4}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x26}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.76139006s ago: executing program 3 (id=2612): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r3, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r5}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) unlinkat(r7, &(0x7f00000002c0)='./file0\x00', 0x200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r7, &(0x7f0000000a80)="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", &(0x7f0000000140)=""/44}, 0x20) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1"], 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 4.077610933s ago: executing program 0 (id=2615): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000008b703000000000000850000000c000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.031892538s ago: executing program 0 (id=2616): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 3.944930915s ago: executing program 0 (id=2617): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) pipe2$9p(0x0, 0x80800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r5 = socket(0x1e, 0x5, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x3}], 0x1, 0x0, 0x0) pread64(r4, &(0x7f0000000480)=""/209, 0xd1, 0x7) r6 = socket$inet_sctp(0x2, 0x5, 0x84) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000007c0)={0x400, 0x7, 0x0, [{0xc8, 0x3fffffffffe, 0x4, 0xd, 0x6, 0x2, 0x3, '\x00', 0x2000000000000}, {0xfffffffffffffff9, 0x101, 0x2, 0x82, 0x9, 0x5f, 0x0, '\x00', 0x4}, {0x6641, 0xb63, 0x400, 0x0, 0x1, 0x2, 0x75, '\x00', 0x80000000}, {0x1, 0x3, 0x9, 0x5c, 0xd5, 0x4, 0x7, '\x00', 0x6}, {0x1, 0x8, 0x80, 0x0, 0x96, 0x5, 0x35, '\x00', 0x9}, {0xfffffffffffffa89, 0x400, 0x7, 0xe, 0x0, 0x9, 0x7f, '\x00', 0xd}, {0x4, 0x1, 0x8, 0x7, 0x3, 0x6, 0x4, '\x00', 0x1ff}]}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0x80000000, 0x9, 0xfffffffb}}, 0x44) 3.739105242s ago: executing program 1 (id=2618): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 3.516943381s ago: executing program 3 (id=2619): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) signalfd4(r5, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000200)={0x20, 0x8, 0xbc, {0xbc, 0xe, "185f5de4d8d2b33b77c41048f256406d5c2a41e4594966cab5288677351bb9f9850abf253a64bc02b37c191ddab5e2e4b615e8e79d8d6db8e721cf6f916693bd17c4f9945d56ef1caf0323b00fd9e3165c585e94e22653ad566f25d5a262900b173d8cb2b2a1a53aab07bbcc0c4c4ebc225729d7c3176d5192463b4b8ce87a6bcac1ae0255fdfa1c15fa5cc3b2b7e8bf2c18029c5ef49c566c3496ab47b15901818b2bd75245bf9cc6b05112d6aaa593e7cb9e15c75e47bb2cf9"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000180)={0x0, 0x12, 0x7, "38df7e31c70e7b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6, 0x800, 0xd, 0x7, 0x1883, 0x742a, 0x0, 0x3, 0x9, 0x7, 0x473b, 0x6}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.081055125s ago: executing program 1 (id=2620): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) 3.040251432s ago: executing program 1 (id=2621): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000001c0)='f', 0x1}], 0x2}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$KVM_NMI(r4, 0xae9a) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000200)) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a", 0x2e}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000280)=""/19, 0x13}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100)=0x4, 0x4) 2.758688881s ago: executing program 1 (id=2622): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x80, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x48}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0xffffffff, 0x4) syz_usb_connect(0x4, 0x32f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x13, 0xea, 0x2b, 0x10, 0x11c9, 0xcf38, 0x8e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31d, 0x1, 0xfd, 0xf1, 0x10, 0x8, [{{0x9, 0x4, 0xb, 0x6, 0xb, 0xff, 0x5d, 0x81, 0x7, [], [{{0x9, 0x5, 0x1, 0x8, 0x20, 0x7, 0x0, 0x7, [@generic={0x7d, 0x0, "5844f004e9a9436f1e68f9d2d3956e7b89b9999c9b2af5ed35d816c49d84b9594813a003af66492070322371fd6fd2b61bd5490d8926a60171ca07c2d69f4969e41fe4bed6b2343adf6c6f2a3dad137c4a71f3c9905ff9b7710b3f3c95d1ff1c88cead54d7096e5db2bd149e3a51b04216162524ebc172fbf182ab"}]}}, {{0x9, 0x5, 0x1, 0x12, 0x3ff, 0x1, 0xf9, 0xf}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0xc, 0xc, 0x32, [@generic={0x2f, 0x23, "848ad96244669382bd10dfbb7224d02690cdbd429967e6b871cdbbcb40749d39cc7f1ec341a6133421abf91bca"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x4, 0xa3, 0x1e, [@generic={0xe9, 0x6, "4969625d64d4d6366b4e2e6e4cd276b787ac4b39624881f33a78de693be3005069e8ea4eb5085f0b122b5424d993589e6f7fb9c291830678cbc6af43e32084af8ca583390456a54821b0d534cd07073e2ef1e0baa941e40aafe151ab861fd5992463827c65625916b29bf6ff00fc15bd66059f64e27cca5a999426f0a5505d11826e294e30dab6f4fd6b992836f369737dbb93df32a86774cfd04a5a38f74255ac4531898dfa4d2f2ab541b647d97a7d90eda18ed9ea8a6c02f4cf806cefcf63ac67492ed842e1ea883a08826503aee3d22a723523b43239ff0baa1f26dc091db24bfd5cf6c86e"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0xf, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x40}, @generic={0xca, 0x22, "5000e6ca4e812c1e980d711e388beeb5f5f92a30c4e31448baf0e7c3c8c4a9c67b2c4ae7e92fa816b7b5f22a155f1cd69f809a355789ebf86a8bc098770580be59a72e2b1f14741d848ea84f4038cb8aef88ff172366fdc2d79c5f274a258423b82eff947900961ae3fd708ecce01c18c039afac6e77d964ccc56990068940340ab2d5d1818e5ef97348f297c25c56ae79bcc02a1c38eda367a410408a01f585ede157eed50cc62d81602ec6e019dac5fd6b1c0f36c617308f3d858d97b99e5d64a8924cdedf39f5"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0x8, 0x1}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xab, 0xfa, 0x1}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x80, 0x81, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xc8, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc2, 0x1}, @generic={0x2d, 0xe, "b7222d147dcf0d6d551a3fc1b9078f6e5b201b38e9b9240b16dfefe37250487bec14c5b1178b92e29cf02f"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x4, 0x1, 0x5}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xd, 0x6, 0x52, 0x48, 0x2}, 0xf4, &(0x7f0000000080)={0x5, 0xf, 0xf4, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0xd, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x94, 0x7f, 0xb4, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x2fdd, 0xff00, 0x9, [0xf, 0x30, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0xfa, 0x8, 0x2, 0x5}, @generic={0xb7, 0x10, 0x6, "1086194b563c63139ca04fddf4edabe09415fc20ae7d0c470aed2b9ed7ff83c3c9cf0393c1c962aaf6f89aaaf9f1f5338a7a2aaaac88614513a344f80e1586804853ae3178a5911276ce1878669924d83b4ccf535b84d54d338f0d916b9bf62e2d875cc246b63c00a58249f2f5cb641f1758333a13a53dc22d697435e4cc873c52832b8b31ceec329ca256c5181f24eba8d13d86d882282bf67661739a3512599917e91578c9dada7eb23e0eb188e6ce883bb302"}, @ptm_cap={0x3}]}, 0x7, [{0xa3, &(0x7f0000000180)=@string={0xa3, 0x3, "eca9eb08ea2c56c1b18b339e1dc033d5c94d15871c47a10678285831da6afc87c8df1eec9a77f36ced4a14391f895be041a377c02c0bd18099861cc7bbbedb0bed4a091cf0676e0508973c7dbab3abdc3213d902b0f98692f82b63f26b3dcd9a1621b1d1627f269f1331b4627f0513488b207b436430d4c35e0581fde3c30b5951cd2606730297e77fc5ec491b4ca311a0192a4e70396d5fc41167890462be4905"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x16, &(0x7f0000000300)=@string={0x16, 0x3, "ca9901c831429ce3bda282c47ef9ac892ee39557"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x83e}}, {0x99, &(0x7f0000000380)=@string={0x99, 0x3, "cfc0ae36da4370ce27be57d9f32733e322c3d9108d354ca88161b94c1b78ac365297d35b30cdc6e6b31b0ab39124c92a39dae2001ce9424c53d9b116f27691ea9ec3c93060bd89e19b87b1b2daf722a6f066948a551c202ac045b7faa1071c8395106627b160fe18a2a027d47d180234e92dbca892baee0b354d337f86e4f33c1581b00455f6613524c0816187c8d63c41946afd32fbbf"}}, {0x59, &(0x7f00000007c0)=@string={0x59, 0x3, "9fb2e67e0b0e856ecf10e340896090e7735e52fa758e18f2d15d772fbef7008a0d0a4bda1d64709f8079f4950eabb5fa5d534aa36238085ef652b9b501757b25a5b29b3ef2380cde5060eeddea50d1d977f4c4cf94be8e"}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) accept$unix(r2, 0x0, &(0x7f0000000940)) getsockname$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) 2.108996301s ago: executing program 1 (id=2623): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000300000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000036000000000000000000000000000800000000000000000000000000002002000000000000000001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 2.069940034s ago: executing program 1 (id=2624): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="401912"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 64) 1.529552883s ago: executing program 2 (id=2625): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001000000000904000002e964c2000905040000000000000705"], 0x0) 823.684959ms ago: executing program 0 (id=2626): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 764.556844ms ago: executing program 32 (id=2567): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x0, 0xf, 0x6}, {0x2, 0xf0, 0x1}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xf0}, {0x1, 0x1, 0x2}, 0x0, 0xfe}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0x0, 0xfd}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) r7 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r7, 0x0, 0xd, 0xfffffffffffffffe) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/224, 0xe0}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = fanotify_init(0x200, 0x0) fanotify_mark(r11, 0x1, 0x8000000, r3, &(0x7f0000000100)='./file1\x00') 696.802558ms ago: executing program 0 (id=2628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f20060000007f00000001"], 0x48) unshare(0x22020400) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fallocate(r1, 0x10, 0x400, 0x7fffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000140)={@caif=@rfm={0x25, 0x7fff, "363cd47607a645ac7a9f23d883b4e940"}, {&(0x7f0000000000)=""/157, 0x9d}, &(0x7f0000000100), 0x72}, 0xa0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 606.331557ms ago: executing program 3 (id=2629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) 568.611381ms ago: executing program 0 (id=2630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006e02"]) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000abf65961c37b172ccf690102030109021b000100cef3d886c425f2d57a00000009040000", @ANYRESOCT=r2, @ANYRESHEX, @ANYRESOCT=r0], 0x0) 312.825741ms ago: executing program 3 (id=2631): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) 177.810035ms ago: executing program 3 (id=2632): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x299, &(0x7f0000000640)={0x0, 0xf76d, 0x400, 0xfffffffc, 0xfffeffff, 0x0, r0}) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) 0s ago: executing program 2 (id=2633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000040000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000020000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000002000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) kernel console output (not intermixed with test programs): 39701][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.169974][ T5926] usb 2-1: config 0 descriptor?? [ 748.448201][ T5926] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 748.601531][ T5997] usb 4-1: 0:2 : does not exist [ 748.683601][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 748.688190][ T5997] usb 4-1: USB disconnect, device number 8 [ 748.783042][T16672] udevd[16672]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.883728][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 748.938709][ T5926] usb 1-1: USB disconnect, device number 32 [ 749.719298][T16800] pim6reg: entered allmulticast mode [ 749.975842][ T5997] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 750.125854][ T5997] usb 4-1: Using ep0 maxpacket: 32 [ 750.140509][ T5997] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.151486][ T5997] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 750.175705][ T5997] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 750.185191][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.194062][ T5997] usb 4-1: Product: syz [ 750.203111][ T5997] usb 4-1: Manufacturer: syz [ 750.213784][ T5997] usb 4-1: SerialNumber: syz [ 750.258049][ T5997] usb 4-1: config 0 descriptor?? [ 750.521087][ T10] usb 2-1: USB disconnect, device number 113 [ 750.546904][ T5926] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 750.718944][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 750.726748][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 750.748440][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 750.793237][ T5926] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 750.799646][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 750.813153][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.252063][ T5926] usb 1-1: Product: syz [ 751.276526][ T5926] usb 1-1: Manufacturer: syz [ 751.284435][ T5926] usb 1-1: SerialNumber: syz [ 751.377476][ T5926] usb 1-1: config 0 descriptor?? [ 751.444597][ T5926] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 751.458919][ T5926] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 751.515839][ T5956] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 751.726380][ T5926] em28xx 1-1:0.0: unknown em28xx chip ID (47) [ 751.735600][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 751.765137][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.787898][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.811838][ T5956] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 751.833454][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.871197][ T5956] usb 3-1: config 0 descriptor?? [ 751.888125][ T5956] hub 3-1:0.0: USB hub found [ 751.927543][ T5926] em28xx 1-1:0.0: Config register raw data: 0x2f [ 751.983905][T16807] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 752.093420][ T5926] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 752.101459][ T5926] em28xx 1-1:0.0: No AC97 audio processor [ 752.219932][ T5926] usb 1-1: USB disconnect, device number 33 [ 752.306036][ T5997] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 752.455749][ T5997] usb 2-1: Using ep0 maxpacket: 32 [ 752.568790][ T5997] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 752.578324][ T5997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.586915][ T5997] usb 2-1: Product: syz [ 752.591315][ T5997] usb 2-1: Manufacturer: syz [ 752.600572][ T5997] usb 2-1: SerialNumber: syz [ 752.619262][ T5926] usb 4-1: USB disconnect, device number 9 [ 752.639906][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.648142][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.888124][ T5997] usb 2-1: config 0 descriptor?? [ 752.953936][ T5997] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 753.173504][T16843] tipc: Enabling of bearer rejected, failed to enable media [ 753.991769][ T5956] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 754.026177][ T5997] gspca_ov534_9: reg_w failed -110 [ 754.035983][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 754.063152][ T5956] usbhid 3-1:0.0: can't add hid device: -71 [ 754.093486][ T5956] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 754.146782][ T5956] usb 3-1: USB disconnect, device number 6 [ 754.220541][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 754.232691][ T10] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 754.255463][ T10] usb 1-1: config 5 has no interface number 0 [ 754.277128][ T10] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 754.312353][ T10] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 754.330479][ T10] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 754.335671][ T5997] gspca_ov534_9: Unknown sensor 0000 [ 754.350083][ T10] usb 1-1: config 5 interface 168 has no altsetting 0 [ 754.351666][ T5997] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 754.362744][ T10] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 754.472578][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.515849][ T5956] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 754.524738][ T10] usb 1-1: Product: syz [ 754.530375][ T10] usb 1-1: Manufacturer: syz [ 754.541814][ T10] usb 1-1: SerialNumber: syz [ 754.570821][T16850] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 754.583139][T16850] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 754.679224][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 754.701378][ T5956] usb 3-1: unable to get BOS descriptor or descriptor too short [ 754.718583][ T5956] usb 3-1: config 3 has an invalid interface number: 151 but max is 0 [ 754.752468][ T5956] usb 3-1: config 3 has no interface number 0 [ 754.784303][ T5956] usb 3-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice=6b.91 [ 754.811802][ C0] usb 1-1: NFC: Urb failure (status -71) [ 754.815303][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.838431][ C0] usb 1-1: NFC: Urb failure (status -71) [ 754.866889][ T10] usb 1-1: NFC: Unable to get FW version [ 754.870850][ T5956] usb 3-1: Product: syz [ 754.878781][ T10] pn533_usb 1-1:5.168: probe with driver pn533_usb failed with error -71 [ 754.949020][ T5997] usb 2-1: USB disconnect, device number 114 [ 754.978343][ T5956] usb 3-1: Manufacturer: syz [ 754.983001][ T5956] usb 3-1: SerialNumber: syz [ 754.990326][ T10] usb 1-1: USB disconnect, device number 34 [ 755.174333][T16869] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 755.241283][T16855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.270733][T16855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.344422][ T5956] mos7840 3-1:3.151: required endpoints missing [ 755.370271][ T5956] usb 3-1: USB disconnect, device number 7 [ 755.425777][ T5997] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 755.525902][ T24] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 755.565584][ T5997] usb 4-1: device descriptor read/64, error -71 [ 755.705984][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 755.713378][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 755.723750][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1119, setting to 1024 [ 755.735263][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 755.747108][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.763798][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 755.773516][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.782392][ T24] usb 5-1: Product: syz [ 755.787226][ T24] usb 5-1: Manufacturer: syz [ 755.791985][ T24] usb 5-1: SerialNumber: syz [ 755.804050][T16872] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 755.811790][ T5997] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 755.819781][T16872] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 755.835629][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 755.955934][ T5997] usb 4-1: device descriptor read/64, error -71 [ 756.076340][ T5997] usb usb4-port1: attempt power cycle [ 756.220938][ T30] audit: type=1326 audit(1755303845.903:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 756.237335][T16896] Invalid logical block size (9) [ 756.298137][ T30] audit: type=1326 audit(1755303845.903:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 756.471956][ T30] audit: type=1326 audit(1755303845.903:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 756.505663][ T30] audit: type=1326 audit(1755303845.903:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 756.528866][ T30] audit: type=1326 audit(1755303845.903:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 756.574238][ T5997] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 756.623146][ T5997] usb 4-1: device descriptor read/8, error -71 [ 756.720251][ T30] audit: type=1326 audit(1755303845.903:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 756.753455][ T30] audit: type=1326 audit(1755303845.903:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 756.918840][ T5997] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 757.034771][ T5997] usb 4-1: device descriptor read/8, error -71 [ 757.125782][ T30] audit: type=1326 audit(1755303845.903:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 757.149453][ T5997] usb usb4-port1: unable to enumerate USB device [ 757.157205][ T30] audit: type=1326 audit(1755303845.903:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 757.257029][ T30] audit: type=1326 audit(1755303845.903:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16891 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 758.148684][ T5885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 758.212087][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 758.253370][T16911] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2281'. [ 758.261434][ T24] usbtest 5-1:1.0: Linux user mode ISO test driver [ 758.290042][ T24] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 758.350452][ T24] usb 5-1: USB disconnect, device number 125 [ 758.375607][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 758.452751][ T5885] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 758.530719][T16920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 758.538039][T16920] IPv6: NLM_F_CREATE should be set when creating new route [ 758.549437][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.575998][ T5885] usb 3-1: Product: syz [ 758.580332][ T5885] usb 3-1: Manufacturer: syz [ 758.598654][ T5885] usb 3-1: SerialNumber: syz [ 758.662786][ T5885] usb 3-1: config 0 descriptor?? [ 758.734381][ T5885] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 758.897114][T16929] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2287'. [ 759.315630][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 759.495687][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 759.586907][T16908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.596427][T16908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.661991][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.679682][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 759.689552][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.710659][ T10] usb 1-1: config 0 descriptor?? [ 759.931210][ T5885] gspca_sonixj: reg_r err -110 [ 759.936473][ T5885] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 760.026173][T16955] netlink: 'syz.1.2293': attribute type 10 has an invalid length. [ 760.034104][T16955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2293'. [ 760.043803][T16955] team0: entered promiscuous mode [ 760.048967][T16955] team_slave_0: entered promiscuous mode [ 760.055173][T16955] team_slave_1: entered promiscuous mode [ 760.061462][T16955] bond1: entered promiscuous mode [ 760.067269][T16955] team0: entered allmulticast mode [ 760.072448][T16955] team_slave_0: entered allmulticast mode [ 760.117190][T16939] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 760.201925][T16955] team_slave_1: entered allmulticast mode [ 760.303203][T16955] bond1: entered allmulticast mode [ 760.334757][T16955] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 760.470924][ T10] uclogic 0003:28BD:0042.0033: interface is invalid, ignoring [ 760.844954][ T5956] usb 1-1: USB disconnect, device number 35 [ 760.916826][T16962] tipc: Enabled bearer , priority 0 [ 760.957345][T16962] ip6gre0: entered promiscuous mode [ 761.956457][ T5956] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 761.986458][ T10] usb 3-1: USB disconnect, device number 8 [ 762.047886][ T5926] tipc: Node number set to 1865286312 [ 762.147765][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'. [ 762.158496][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 762.170107][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.191029][ T5956] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 762.211296][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.225793][ T5939] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 762.246308][ T5956] usb 5-1: config 0 descriptor?? [ 762.279618][ T5956] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 762.411918][T16977] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 762.434716][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.451026][ T5939] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 762.477069][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.495074][ T5939] usb 4-1: config 0 descriptor?? [ 762.511047][ T5939] pwc: Askey VC010 type 2 USB webcam detected. [ 762.615780][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 762.665832][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 762.755720][ T10] usb 2-1: device descriptor read/64, error -71 [ 762.818681][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 762.835935][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 762.850207][ T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=99.49 [ 762.889975][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.925715][ T5939] pwc: recv_control_msg error -32 req 02 val 2b00 [ 762.936030][ T5939] pwc: recv_control_msg error -32 req 02 val 2700 [ 762.938160][ T24] usb 1-1: Product: syz [ 762.946124][ T5939] pwc: recv_control_msg error -32 req 02 val 2c00 [ 762.968224][ T24] usb 1-1: Manufacturer: syz [ 762.978493][ T5939] pwc: recv_control_msg error -32 req 04 val 1000 [ 762.992000][ T5939] pwc: recv_control_msg error -32 req 04 val 1300 [ 763.028212][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 763.048723][ T5939] pwc: recv_control_msg error -32 req 04 val 1400 [ 763.056401][ T24] usb 1-1: SerialNumber: syz [ 763.068620][ T5939] pwc: recv_control_msg error -32 req 02 val 2000 [ 763.086901][ T5939] pwc: recv_control_msg error -32 req 02 val 2100 [ 763.087229][ T24] usb 1-1: config 0 descriptor?? [ 763.107199][ T5939] pwc: recv_control_msg error -32 req 04 val 1500 [ 763.121711][ T5939] pwc: recv_control_msg error -32 req 02 val 2500 [ 763.136178][ T5939] pwc: recv_control_msg error -32 req 02 val 2400 [ 763.191340][ T5939] pwc: recv_control_msg error -32 req 02 val 2600 [ 763.204466][ T24] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 763.215506][ T10] usb 2-1: device descriptor read/64, error -71 [ 763.237321][ T5885] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 763.264054][ T5939] pwc: recv_control_msg error -71 req 02 val 2900 [ 763.286728][ T5939] pwc: recv_control_msg error -71 req 02 val 2800 [ 763.301251][ T5939] pwc: recv_control_msg error -71 req 04 val 1100 [ 763.317823][ T5939] pwc: recv_control_msg error -71 req 04 val 1200 [ 763.373646][ T5939] pwc: Registered as video103. [ 763.384321][ T10] usb usb2-port1: attempt power cycle [ 763.416463][ T5956] gspca_vc032x: reg_w err -110 [ 763.421968][ T5956] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 763.448577][ T5939] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66 [ 763.461564][ T5885] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.492872][ T5939] usb 4-1: USB disconnect, device number 14 [ 763.521737][ T5885] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 763.583992][ T5885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 763.617601][T16991] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 763.624542][T16991] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 763.646847][ T5885] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 763.663805][T16991] vhci_hcd vhci_hcd.0: Device attached [ 763.680205][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.789460][ T5885] usb 3-1: config 0 descriptor?? [ 763.835796][ T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 763.846659][ T5885] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input67 [ 763.867113][ T10] usb 2-1: device descriptor read/8, error -71 [ 763.885707][ T9] vhci_hcd: vhci_device speed not set [ 763.965660][ T9] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 764.135796][ T10] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 764.162860][ T10] usb 2-1: device descriptor read/8, error -71 [ 764.286406][ T10] usb usb2-port1: unable to enumerate USB device [ 764.621176][ T5939] usb 5-1: USB disconnect, device number 126 [ 765.126074][ T5939] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 765.305848][ T5956] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 765.305897][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 765.426981][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.509842][ T1210] usb 1-1: USB disconnect, device number 36 [ 765.534962][T16993] vhci_hcd: connection reset by peer [ 765.559893][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 765.611283][ T36] vhci_hcd: stop threads [ 765.642042][ T5956] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 765.673498][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.686995][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 765.711692][ T36] vhci_hcd: release socket [ 765.725460][ T36] vhci_hcd: disconnect device [ 765.757638][ T5939] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 765.772834][ T5956] usb 5-1: Product: syz [ 765.796064][ T5956] usb 5-1: Manufacturer: syz [ 765.820702][ T5956] usb 5-1: SerialNumber: syz [ 765.837265][ T5956] usb 5-1: config 0 descriptor?? [ 765.850782][ T5939] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 765.878573][ T5956] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 765.950555][ T5939] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 766.040184][ T5939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 766.063553][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 766.091499][ T5939] usb 4-1: SerialNumber: syz [ 766.102126][T17001] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 766.165130][ T5939] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 766.331367][ T5939] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 766.411735][T17015] loop9: detected capacity change from 0 to 3 [ 766.480184][T16681] buffer_io_error: 10 callbacks suppressed [ 766.480200][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.625288][ T5939] usb 4-1: USB disconnect, device number 15 [ 766.666480][ T5217] bcm5974 3-1:0.0: could not read from device [ 766.706826][ T5217] bcm5974 3-1:0.0: could not read from device [ 766.736950][T17004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.748350][T17004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.823875][ T5885] usb 3-1: USB disconnect, device number 9 [ 766.824360][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.905315][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.937107][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.947209][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.964353][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 767.006997][ T5956] gspca_sonixj: reg_r err -110 [ 767.011937][ T5956] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 767.111281][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 767.127505][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 767.154081][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 767.267416][T16681] Buffer I/O error on dev loop9, logical block 0, async page read [ 767.304201][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2313'. [ 767.715500][ T5926] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 767.815971][T17037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2315'. [ 768.257177][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.277876][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.303701][ T5926] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 768.344219][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.460468][ T5926] usb 3-1: config 0 descriptor?? [ 768.895813][T17027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.948032][T17027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.112469][ T9] vhci_hcd: vhci_device speed not set [ 769.255232][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 769.305867][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 769.321586][ T5885] usb 5-1: USB disconnect, device number 127 [ 769.385555][ T5926] usb 3-1: USB disconnect, device number 10 [ 769.398351][T17042] lo: entered promiscuous mode [ 769.469956][T17042] tunl0: entered promiscuous mode [ 769.477458][T17042] gre0: entered promiscuous mode [ 769.489311][T17042] gretap0: entered promiscuous mode [ 769.537567][T17042] erspan0: entered promiscuous mode [ 769.575300][T17042] ip_vti0: entered promiscuous mode [ 769.603521][T17042] ip6_vti0: entered promiscuous mode [ 769.777481][T17042] ip6tnl0: entered promiscuous mode [ 769.798591][T17042] ip6gre0: entered promiscuous mode [ 769.847221][T17042] syz_tun: entered promiscuous mode [ 769.876194][T17042] ip6gretap0: entered promiscuous mode [ 769.898113][T17042] vcan0: entered promiscuous mode [ 769.924093][T17042] bond0: entered promiscuous mode [ 769.946182][T17042] bond_slave_0: entered promiscuous mode [ 769.995864][T17042] bond_slave_1: entered promiscuous mode [ 770.006496][T17042] dummy0: entered promiscuous mode [ 770.057550][T17042] team0: entered promiscuous mode [ 770.062646][T17042] team_slave_0: entered promiscuous mode [ 770.191527][T17042] team_slave_1: entered promiscuous mode [ 770.262602][T17042] nlmon0: entered promiscuous mode [ 770.483830][T17066] netlink: 'syz.1.2323': attribute type 10 has an invalid length. [ 770.485980][ T5885] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 770.509446][T17066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2323'. [ 770.520376][T17042] caif0: entered promiscuous mode [ 770.526178][T17042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.565551][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 770.634776][T17066] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 770.722272][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 770.750631][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 770.765349][ T5885] usb 4-1: can't read configurations, error -71 [ 770.795755][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 770.812195][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 771.006382][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.086953][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 771.119921][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 771.136814][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 771.515673][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 771.624560][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.683914][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 771.723393][T17072] batadv_slave_1: entered promiscuous mode [ 771.746723][ T9] usb 3-1: SerialNumber: syz [ 771.788982][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2325'. [ 771.840280][ T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 772.031561][T17062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.060636][ T5885] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 772.331308][ T5885] usb 1-1: no configurations [ 772.366028][ T5885] usb 1-1: can't read configurations, error -22 [ 772.678934][ T5885] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 772.861500][ T5885] usb 1-1: no configurations [ 772.866936][ T5885] usb 1-1: can't read configurations, error -22 [ 772.878621][ T5885] usb usb1-port1: attempt power cycle [ 773.246056][ T5885] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 773.325662][ T5885] usb 1-1: no configurations [ 773.330432][ T5885] usb 1-1: can't read configurations, error -22 [ 773.432021][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 773.446065][ T30] audit: type=1326 audit(1755303863.133:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17094 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 773.505592][ T5885] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 773.539152][ T30] audit: type=1326 audit(1755303863.173:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17094 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 773.572202][ T5885] usb 1-1: no configurations [ 773.602433][ T5885] usb 1-1: can't read configurations, error -22 [ 773.706072][ T5885] usb usb1-port1: unable to enumerate USB device [ 773.735871][ T30] audit: type=1326 audit(1755303863.183:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17094 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 773.932559][ T30] audit: type=1326 audit(1755303863.183:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17094 comm="syz.3.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 774.062058][ T10] usb 3-1: USB disconnect, device number 11 [ 774.165471][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 774.425982][ T9] usb 2-1: device descriptor read/64, error -71 [ 774.528103][T17114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.613913][T17114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.629592][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2335'. [ 774.654828][T17076] batadv_slave_1: left promiscuous mode [ 774.745518][T17114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.765817][ T5885] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 774.785645][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 774.796540][T17114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.811033][T17114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.912551][T17114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.967119][ T5885] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 774.999258][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.999492][ T9] usb 2-1: device descriptor read/64, error -71 [ 775.024474][ T5885] usb 3-1: config 0 descriptor?? [ 775.073675][ T5885] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 775.171382][ T9] usb usb2-port1: attempt power cycle [ 775.265493][ T10] usb 3-1: USB disconnect, device number 12 [ 775.285573][ T1210] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 775.483535][ T1210] usb 4-1: device descriptor read/64, error -71 [ 775.526474][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 775.568993][ T9] usb 2-1: device descriptor read/8, error -71 [ 775.825524][ T1210] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 775.905711][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 775.975714][ T1210] usb 4-1: device descriptor read/64, error -71 [ 775.976471][ T9] usb 2-1: device descriptor read/8, error -71 [ 776.086322][ T1210] usb usb4-port1: attempt power cycle [ 776.101874][T17132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2341'. [ 776.167325][ T9] usb usb2-port1: unable to enumerate USB device [ 776.425809][ T1210] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 776.455663][ T1210] usb 4-1: device descriptor read/8, error -71 [ 776.705722][ T1210] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 776.766113][ T1210] usb 4-1: device descriptor read/8, error -71 [ 776.887464][ T1210] usb usb4-port1: unable to enumerate USB device [ 777.555825][ T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 777.735583][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 777.761623][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 777.771604][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 777.783867][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 777.806426][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.834933][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 777.859117][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.098248][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 778.125540][ T9] usbtmc 2-1:16.0: can't read capabilities [ 778.305205][T17124] delete_channel: no stack [ 778.327046][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.336181][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.345297][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.354401][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.363490][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.446815][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.455967][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.465165][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.474259][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.513764][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.522895][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.532008][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.541123][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.550216][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.559296][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.592633][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 778.762241][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 779.180357][ T5926] usb 2-1: USB disconnect, device number 123 [ 779.287374][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.372239][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.410465][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 779.625963][ T1210] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 779.645263][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 779.733143][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.786708][ T9] usb 1-1: config 0 descriptor?? [ 779.790996][ T1210] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 779.819126][ T1210] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 779.942096][ T1210] usb 5-1: config 0 has no interface number 0 [ 779.991115][ T1210] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.037757][ T9] logitech 0003:046D:C24F.0034: unknown main item tag 0x0 [ 780.047266][ T1210] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 780.083892][ T9] logitech 0003:046D:C24F.0034: unknown main item tag 0x0 [ 780.113933][ T9] logitech 0003:046D:C24F.0034: unknown main item tag 0x0 [ 780.142464][ T1210] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.164855][ T9] logitech 0003:046D:C24F.0034: unknown main item tag 0x0 [ 780.205065][ T1210] usb 5-1: config 0 interface 52 has no altsetting 0 [ 780.217312][ T9] logitech 0003:046D:C24F.0034: hidraw0: USB HID v0.05 Device [HID 046d:c24f] on usb-dummy_hcd.0-1/input0 [ 780.251021][T17193] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2358'. [ 780.282451][ T1210] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 780.299438][ T9] logitech 0003:046D:C24F.0034: no inputs found [ 780.308651][T17193] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2358'. [ 780.325215][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 780.345157][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 780.357232][ T1210] usb 5-1: Product: syz [ 780.385067][ T1210] usb 5-1: SerialNumber: syz [ 780.386183][ T9] usb 1-1: USB disconnect, device number 41 [ 780.401772][T17193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2358'. [ 780.426574][ T1210] usb 5-1: config 0 descriptor?? [ 780.562814][T17194] fido_id[17194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 780.652263][ T1210] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input68 [ 781.066949][ T30] audit: type=1326 audit(1755303870.773:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.144844][ T30] audit: type=1326 audit(1755303870.773:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.209611][ T30] audit: type=1326 audit(1755303870.803:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.236088][ T30] audit: type=1326 audit(1755303870.803:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.264911][ T30] audit: type=1326 audit(1755303870.803:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.369222][ T30] audit: type=1326 audit(1755303870.813:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.398007][ T30] audit: type=1326 audit(1755303870.813:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.577444][T17214] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 781.602191][T17214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 781.616314][ T30] audit: type=1326 audit(1755303870.813:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.666737][ T30] audit: type=1326 audit(1755303870.813:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.943632][ T30] audit: type=1326 audit(1755303870.813:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9bf8ebe9 code=0x7ffc0000 [ 781.949657][T17215] bond2: (slave ip6erspan0): making interface the new active one [ 782.009813][ T10] usb 5-1: USB disconnect, device number 2 [ 782.011825][T17215] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 782.575577][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 782.627727][T17230] ptrace attach of "./syz-executor exec"[5884] was attempted by "/dev/snd/controlC# Àÿ Àÿ Ðÿ àÿ ¹Gi °ÿ Àÿ ÿÿÿÿ иGi üÿÿÿ   [ 782.745857][ T10] usb 5-1: device descriptor read/64, error -71 [ 783.251701][ T24] hid (null): invalid report_count 462536560 [ 783.258449][ T24] hid (null): invalid report_size 6441 [ 783.282034][ T24] hid (null): global environment stack underflow [ 783.303030][ T24] hid (null): global environment stack underflow [ 783.343210][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 783.346367][ T24] hid (null): invalid report_count -910827985 [ 783.360567][ T24] hid (null): unknown global tag 0xc [ 783.369460][ T24] hid (null): global environment stack underflow [ 783.378586][ T24] hid (null): global environment stack underflow [ 783.385121][ T24] hid (null): global environment stack underflow [ 783.448066][ T24] hid-generic 0008:0800:0008.0035: invalid report_count 462536560 [ 783.471301][ T24] hid-generic 0008:0800:0008.0035: item 0 4 1 9 parsing failed [ 783.492077][ T24] hid-generic 0008:0800:0008.0035: probe with driver hid-generic failed with error -22 [ 783.535960][ T10] usb 5-1: device descriptor read/64, error -71 [ 783.658516][ T10] usb usb5-port1: attempt power cycle [ 783.955493][ T5926] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 784.035715][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 784.066252][ T10] usb 5-1: device descriptor read/8, error -71 [ 784.105877][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 784.127030][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 784.154712][ T5926] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 784.188801][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.205795][ T5926] usb 1-1: Product: syz [ 784.211136][ T5926] usb 1-1: Manufacturer: syz [ 784.215998][ T5926] usb 1-1: SerialNumber: syz [ 784.229268][ T5926] usb 1-1: config 0 descriptor?? [ 784.238340][ T5926] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 784.252396][ T5926] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 784.305748][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 784.322821][T17251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2374'. [ 784.332684][T17251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2374'. [ 784.346454][ T10] usb 5-1: device descriptor read/8, error -71 [ 784.463978][T17253] netlink: 'syz.2.2375': attribute type 10 has an invalid length. [ 784.472793][ T10] usb usb5-port1: unable to enumerate USB device [ 784.487317][T17253] team0: Port device dummy0 added [ 784.498772][ T5926] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 784.505683][T17253] netlink: 'syz.2.2375': attribute type 10 has an invalid length. [ 784.520159][T17253] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 784.540655][T17253] team0: Failed to send options change via netlink (err -105) [ 784.548680][T17253] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 784.560538][T17253] team0: Port device dummy0 removed [ 784.571533][T17253] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 784.591355][ T5926] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 784.612727][ T5926] em28xx 1-1:0.0: board has no eeprom [ 784.717038][ T5926] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 784.740449][ T5926] em28xx 1-1:0.0: dvb set to bulk mode. [ 784.758057][ T9] em28xx 1-1:0.0: Binding DVB extension [ 784.771831][ T5926] usb 1-1: USB disconnect, device number 42 [ 784.808276][ T5926] em28xx 1-1:0.0: Disconnecting em28xx [ 784.860131][T17266] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 784.870550][ T9] em28xx 1-1:0.0: Registering input extension [ 784.878050][ T5926] em28xx 1-1:0.0: Closing input extension [ 784.903596][ T5926] em28xx 1-1:0.0: Freeing device [ 784.985670][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 785.135511][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 785.142711][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.145374][T17271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2380'. [ 785.154869][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.179327][ T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 785.180440][T17271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2380'. [ 785.192168][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.207743][T17271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2380'. [ 785.226403][ T24] usb 3-1: config 0 descriptor?? [ 785.235632][ T5926] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 785.339438][T17275] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 785.351067][T17274] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 785.372340][T17275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.385539][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 785.393311][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 785.402964][ T5926] usb 1-1: config 8 has an invalid interface number: 137 but max is 0 [ 785.412978][ T5926] usb 1-1: config 8 has no interface number 0 [ 785.421603][ T5926] usb 1-1: config 8 interface 137 altsetting 5 bulk endpoint 0xF has invalid maxpacket 84 [ 785.447659][ T5926] usb 1-1: config 8 interface 137 has no altsetting 0 [ 785.457890][ T5926] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=e5.0d [ 785.467444][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.476352][ T5926] usb 1-1: Product: syz [ 785.480778][ T5926] usb 1-1: Manufacturer: syz [ 785.485471][ T5926] usb 1-1: SerialNumber: syz [ 785.502860][T17261] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 785.654545][ T24] corsair 0003:1B1C:1B02.0036: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 785.678635][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 785.720143][ T5926] cyberjack 1-1:8.137: Reiner SCT Cyberjack USB card reader converter detected [ 785.748558][ T5926] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 785.772568][ T5926] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 785.803414][ T5926] usb 1-1: USB disconnect, device number 43 [ 785.834797][ T5926] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 785.846390][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 785.854688][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 785.865106][ T5926] cyberjack 1-1:8.137: device disconnected [ 785.877365][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40 [ 785.894604][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.940943][ T24] corsair 0003:1B1C:1B02.0036: Failed to get K90 initial state (error -71). [ 785.965793][ T9] usb 5-1: Product: И [ 785.971022][ T9] usb 5-1: Manufacturer: í¹ì»³à£­Æ熰㱳匞ï«î¸’â䈽é˜åƒ´ä©šç¼ªåŠ‚敶뮿讋墉꼯餑ሊ翯ç´å°žã„¹ç¥¸ì–”쒫룾躜⦪驔⸇ [ 786.063809][ T24] usb 3-1: USB disconnect, device number 13 [ 786.285645][ T5939] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 786.397567][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 786.403642][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 786.465760][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 786.480418][ T9] usb 5-1: USB disconnect, device number 7 [ 786.495655][ T5939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.529119][ T5939] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 786.566073][ T5939] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 786.581153][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.615331][ T5939] usb 2-1: Product: syz [ 786.642020][ T5939] usb 2-1: Manufacturer: syz [ 786.660000][ T5939] usb 2-1: SerialNumber: syz [ 786.681812][ T5939] usb 2-1: config 0 descriptor?? [ 786.776807][ T5926] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 786.945692][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 786.960403][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.023794][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 787.057425][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.068236][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 787.081471][ T5926] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 787.105544][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.124399][ T5926] usb 1-1: config 0 descriptor?? [ 787.221866][ T24] usb 3-1: config 6 has an invalid interface number: 57 but max is 0 [ 787.243998][ T24] usb 3-1: config 6 has no interface number 0 [ 787.254141][ T24] usb 3-1: config 6 interface 57 has no altsetting 0 [ 787.294431][ T24] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 787.315882][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.332867][ T24] usb 3-1: Product: syz [ 787.341593][ T24] usb 3-1: Manufacturer: syz [ 787.353949][ T24] usb 3-1: SerialNumber: syz [ 787.572981][ T5926] microsoft 0003:045E:07DA.0037: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 787.630361][ T5926] microsoft 0003:045E:07DA.0037: no inputs found [ 787.707244][ T5926] microsoft 0003:045E:07DA.0037: could not initialize ff, continuing anyway [ 787.766082][T17298] vxcan1: tx address claim with dlc 1 [ 787.925360][T17314] fuse: Unknown parameter 'fd0x0000000000000008' [ 787.934262][T17314] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 788.021363][ T24] usb-storage 3-1:6.57: USB Mass Storage device detected [ 788.154498][ T24] usb 3-1: USB disconnect, device number 14 [ 788.821776][T17319] vlan2: entered promiscuous mode [ 788.848747][ T9] usb 2-1: USB disconnect, device number 124 [ 788.894671][T17319] vlan2: entered allmulticast mode [ 788.945484][T17319] hsr_slave_1: entered allmulticast mode [ 788.949154][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 789.155285][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2394'. [ 789.196219][T17332] program syz.2.2395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 789.338180][ T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 789.510307][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 789.525927][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 789.533903][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 789.755269][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 789.834318][ T5926] usb 1-1: USB disconnect, device number 44 [ 789.851293][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 789.865804][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 789.868935][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.878089][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 789.893504][ T24] usb 3-1: config 0 has no interface number 0 [ 789.922998][ T9] usb 2-1: Product: syz [ 789.929743][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 789.942643][ T9] usb 2-1: Manufacturer: syz [ 789.961845][ T9] usb 2-1: SerialNumber: syz [ 790.028737][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 790.071564][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.090827][ T9] usb 2-1: config 0 descriptor?? [ 790.092655][ T24] usb 3-1: Product: syz [ 790.100386][ T24] usb 3-1: Manufacturer: syz [ 790.126887][ T24] usb 3-1: SerialNumber: syz [ 790.148744][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 790.155043][ T24] usb 3-1: config 0 descriptor?? [ 790.182764][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 790.355539][ T5926] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 790.512434][ T5926] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 790.531051][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.576241][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 790.596320][ T5926] usb 5-1: config 0 descriptor?? [ 790.630816][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 790.679709][ T5926] cp210x 5-1:0.0: cp210x converter detected [ 790.805766][ T5926] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 791.005269][ T5926] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 791.051119][ T5926] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 791.104530][ T5926] usb 5-1: cp210x converter now attached to ttyUSB0 [ 791.503592][ T9] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 791.514579][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 791.530742][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 791.544412][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 791.554955][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 791.573412][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 791.590384][ T9] usb 2-1: USB disconnect, device number 125 [ 791.602738][T16681] udevd[16681]: setting mode of /dev/bus/usb/002/125 to 020664 failed: No such file or directory [ 791.661617][T16681] udevd[16681]: setting owner of /dev/bus/usb/002/125 to uid=0, gid=0 failed: No such file or directory [ 792.076516][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 792.229113][ T24] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 792.238289][ T1210] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 792.276496][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 792.287183][ T9] usb 4-1: config 0 has no interfaces? [ 792.304998][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 792.321888][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.360593][ T9] usb 4-1: Product: syz [ 792.364993][ T9] usb 4-1: Manufacturer: syz [ 792.370644][ T9] usb 4-1: SerialNumber: syz [ 792.396126][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 792.407015][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 792.455983][ T24] usb 3-1: USB disconnect, device number 15 [ 792.590572][ T9] usb 4-1: config 0 descriptor?? [ 792.615766][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 792.631761][ T1210] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.643244][ T1210] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 792.671112][ T1210] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 792.683638][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.701197][ T1210] usb 1-1: Product: syz [ 792.711206][ T1210] usb 1-1: Manufacturer: syz [ 792.735315][ T1210] usb 1-1: SerialNumber: syz [ 792.763861][ T1210] usb 1-1: config 0 descriptor?? [ 792.854520][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 792.874266][ T5926] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 793.020294][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 793.038191][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.083060][ T9] usb 5-1: USB disconnect, device number 8 [ 793.095736][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 793.103737][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 793.133305][T17368] input: syz0 as /devices/virtual/input/input71 [ 793.155051][ T5926] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 793.169530][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.295168][ T9] cp210x 5-1:0.0: device disconnected [ 793.300331][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 793.336805][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 793.370701][ T24] usb 3-1: Manufacturer: syz [ 793.382826][T17368] input: syz1 as /devices/virtual/input/input72 [ 793.392907][ T5926] usb 2-1: Product: syz [ 793.415903][ T24] usb 3-1: config 0 descriptor?? [ 793.445603][ T5926] usb 2-1: Manufacturer: syz [ 793.574850][ T5926] usb 2-1: SerialNumber: syz [ 793.653705][ T5926] usb 2-1: config 0 descriptor?? [ 793.673883][ T5926] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 793.738067][ T24] rc_core: IR keymap rc-hauppauge not found [ 793.777554][ T24] Registered IR keymap rc-empty [ 793.808453][T17383] tipc: Enabling of bearer rejected, failed to enable media [ 793.813357][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 793.922110][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input73 [ 793.956225][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 794.064832][T17386] geneve2: entered promiscuous mode [ 794.078639][ T6238] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 37524 - 0 [ 794.097540][ T6238] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 37524 - 0 [ 794.128740][ T24] usb 3-1: USB disconnect, device number 16 [ 794.184889][ T6238] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 37524 - 0 [ 794.309606][ T6238] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 37524 - 0 [ 794.738274][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.750338][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.826785][ T5926] gspca_sonixj: reg_r err -110 [ 794.831958][ T5926] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 795.560446][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 795.601092][ T24] usb 4-1: USB disconnect, device number 22 [ 795.842961][T17398] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 795.849623][T17398] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 795.869671][ T9] usb 1-1: USB disconnect, device number 45 [ 795.940257][T17398] vhci_hcd vhci_hcd.0: Device attached [ 796.098743][ T1210] vhci_hcd: vhci_device speed not set [ 796.177050][ T1210] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 796.230033][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 796.272742][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'. [ 796.318926][T17406] netlink: 'syz.0.2412': attribute type 14 has an invalid length. [ 796.572133][ T5926] usb 2-1: USB disconnect, device number 126 [ 796.615964][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 796.806142][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 796.816720][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 796.838787][ T9] usb 1-1: config 1 has an invalid interface number: 65 but max is 0 [ 796.856847][ T9] usb 1-1: config 1 has no interface number 0 [ 796.863275][ T9] usb 1-1: config 1 interface 65 has no altsetting 0 [ 796.879934][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 796.900722][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.912671][ T9] usb 1-1: Product: syz [ 796.920523][ T9] usb 1-1: Manufacturer: syz [ 796.929059][ T9] usb 1-1: SerialNumber: syz [ 797.073799][T17399] vhci_hcd: connection reset by peer [ 797.075631][ T5926] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 797.093512][ T3490] vhci_hcd: stop threads [ 797.099133][ T3490] vhci_hcd: release socket [ 797.104673][ T3490] vhci_hcd: disconnect device [ 797.199695][T17407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.208737][T17407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.512668][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 797.608990][ T5926] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.642361][ T5926] usb 2-1: config 0 has no interface number 0 [ 797.660456][ T5926] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 797.671784][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.684018][ T5926] usb 2-1: Product: syz [ 797.693821][ T5926] usb 2-1: Manufacturer: syz [ 797.702867][ T5926] usb 2-1: SerialNumber: syz [ 797.727859][ T5926] usb 2-1: config 0 descriptor?? [ 797.781477][ T5926] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 799.136492][T17439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.180099][T17439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.209141][T17439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.251855][T17439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.406046][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 799.526433][T17407] delete_channel: no stack [ 799.541100][ T9] kalmia 1-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 799.567524][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 799.603273][ T9] kalmia 1-1:1.65: probe with driver kalmia failed with error -22 [ 799.611439][ T10] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 799.629783][T17411] geneve2: entered promiscuous mode [ 799.641889][T17411] geneve2: entered allmulticast mode [ 799.658658][ T10] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.678516][ T9] usb 1-1: USB disconnect, device number 46 [ 799.696374][ T10] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 799.722374][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.843702][T17453] netlink: 'syz.0.2423': attribute type 20 has an invalid length. [ 799.949190][ T10] usb 4-1: string descriptor 0 read error: -71 [ 799.961292][ T10] hub 4-1:32.0: bad descriptor, ignoring hub [ 799.967676][ T10] hub 4-1:32.0: probe with driver hub failed with error -5 [ 800.057100][ T10] usb 4-1: USB disconnect, device number 23 [ 800.111004][T16672] udevd[16672]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.291716][ T24] usb 2-1: USB disconnect, device number 127 [ 801.435680][ T1210] vhci_hcd: vhci_device speed not set [ 802.595854][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 802.789214][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 802.829860][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 802.845975][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 802.859551][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 237, setting to 64 [ 802.878261][ T24] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 802.887773][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.900730][ T24] usb 3-1: Product: syz [ 802.905776][ T24] usb 3-1: Manufacturer: syz [ 802.913465][ T24] usb 3-1: SerialNumber: syz [ 802.936151][ T24] usb 3-1: config 0 descriptor?? [ 802.958766][T17503] loop6: detected capacity change from 0 to 524287999 [ 802.967871][ T24] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 803.243900][ T5926] usb 3-1: USB disconnect, device number 17 [ 804.412422][T16045] macsec0: left promiscuous mode [ 804.451779][T16045] bridge0: port 3(macsec0) entered disabled state [ 804.547322][T16045] bridge_slave_1: left promiscuous mode [ 804.582700][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.642284][T16045] : left promiscuous mode [ 804.673130][T16045] bridge0: port 1() entered disabled state [ 804.761485][T16045] tipc: Resetting bearer [ 804.874303][T15831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 804.890872][T15831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 804.900535][T15831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 804.915141][T15831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 804.923603][T15831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 804.931325][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 804.967648][T16045] tipc: Disabling bearer [ 805.074924][ T10] usb 3-1: device descriptor read/64, error -71 [ 805.327905][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 805.466132][ T10] usb 3-1: device descriptor read/64, error -71 [ 805.588637][ T10] usb usb3-port1: attempt power cycle [ 805.966041][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 806.026360][ T10] usb 3-1: device descriptor read/8, error -71 [ 806.295950][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 806.336175][ T10] usb 3-1: device descriptor read/8, error -71 [ 806.455905][ T10] usb usb3-port1: unable to enumerate USB device [ 806.552262][T16045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.572028][T16045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.583393][T16045] bond0 (unregistering): (slave team0): Releasing backup interface [ 806.592439][T16045] team0: left allmulticast mode [ 806.600429][T16045] bond0 (unregistering): Released all slaves [ 806.787871][T16045] bond1 (unregistering): Released all slaves [ 806.953735][T16045] tipc: Left network mode [ 807.036421][T15831] Bluetooth: hci2: command tx timeout [ 807.599084][T17542] delete_channel: no stack [ 807.874084][T17562] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2447'. [ 807.896236][T17562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 808.223484][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 808.251636][T16045] hsr_slave_0: left promiscuous mode [ 808.268625][T16045] hsr_slave_1: left promiscuous mode [ 808.297789][T16045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.398586][ T10] usb 3-1: config 7 descriptor has 1 excess byte, ignoring [ 808.406439][T16045] pim6reg (unregistering): left allmulticast mode [ 808.415690][ T10] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 808.457194][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 808.470338][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.478822][ T10] usb 3-1: Product: syz [ 808.485622][ T10] usb 3-1: Manufacturer: syz [ 808.510729][ T10] usb 3-1: SerialNumber: syz [ 808.534956][ T10] rndis_host 3-1:7.0: skipping garbage [ 808.566733][ T10] usb 3-1: bad CDC descriptors [ 808.579083][ T10] option 3-1:7.0: GSM modem (1-port) converter detected [ 808.586588][ T5926] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 808.739211][ T10] usb 3-1: USB disconnect, device number 22 [ 808.747607][ T10] option 3-1:7.0: device disconnected [ 808.766530][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 809.108516][T16045] team0 (unregistering): Port device team_slave_1 removed [ 809.118153][T15831] Bluetooth: hci2: command tx timeout [ 809.168953][T16045] team0 (unregistering): Port device team_slave_0 removed [ 809.369180][T17578] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2449'. [ 810.866107][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 810.906334][ T5926] usb 5-1: no configurations [ 810.911037][ T5926] usb 5-1: can't read configurations, error -22 [ 811.009954][T17524] chnl_net:caif_netlink_parms(): no params data found [ 811.195918][T15831] Bluetooth: hci2: command tx timeout [ 811.349741][ T5926] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 811.485731][ T5939] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 811.551938][ T5926] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 811.565846][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.579644][T17524] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.615441][ T5926] usb 5-1: config 0 descriptor?? [ 811.625856][T17524] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.633145][T17524] bridge_slave_0: entered allmulticast mode [ 811.636043][ T5926] cp210x 5-1:0.0: cp210x converter detected [ 811.672049][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.685909][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.696131][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 811.697675][T17524] bridge_slave_0: entered promiscuous mode [ 811.714833][ T5939] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 811.731578][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.746675][ T5939] usb 1-1: config 0 descriptor?? [ 811.754916][T17524] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.773547][T17524] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.789409][T17524] bridge_slave_1: entered allmulticast mode [ 811.801562][T17524] bridge_slave_1: entered promiscuous mode [ 811.828570][T17594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.853142][T17594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.861437][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 811.873287][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.901931][ T9] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 811.912061][ T5926] usb 5-1: cp210x converter now attached to ttyUSB0 [ 811.924444][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.936710][ T9] usb 2-1: Product: syz [ 811.965555][ T9] usb 2-1: Manufacturer: syz [ 811.985649][ T9] usb 2-1: SerialNumber: syz [ 812.015061][T16045] IPVS: stop unused estimator thread 0... [ 812.028557][T17524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.042696][ T9] usb 2-1: config 0 descriptor?? [ 812.071469][ T9] gspca_main: t613-2.14.0 probing 17a1:0128 [ 812.112044][ T5926] usb 5-1: USB disconnect, device number 10 [ 812.121283][T17524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.180270][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 812.186258][T17619] netlink: 'syz.2.2457': attribute type 2 has an invalid length. [ 812.203292][ T5939] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 812.233548][ T5926] cp210x 5-1:0.0: device disconnected [ 812.248755][ T5939] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 812.288846][ T5939] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 812.305597][ T5939] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 812.313232][ T5939] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 812.345705][ T9] gspca_t613: unknown sensor 0000 [ 812.353235][ T9] t613 2-1:0.0: probe with driver t613 failed with error -22 [ 812.366756][ T5939] playstation 0003:054C:0DF2.0038: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 812.380569][ T9] usb 2-1: USB disconnect, device number 2 [ 812.387535][T17619] : entered promiscuous mode [ 812.438247][T17524] team0: Port device team_slave_0 added [ 812.476783][ T5939] playstation 0003:054C:0DF2.0038: Invalid byte count transferred, expected 20 got 0 [ 812.494500][T17524] team0: Port device team_slave_1 added [ 812.525221][ T5939] playstation 0003:054C:0DF2.0038: Failed to retrieve DualSense pairing info: -22 [ 812.566177][ T5939] playstation 0003:054C:0DF2.0038: Failed to get MAC address from DualSense [ 812.575034][ T5939] playstation 0003:054C:0DF2.0038: Failed to create dualsense. [ 812.631440][ T5939] playstation 0003:054C:0DF2.0038: probe with driver playstation failed with error -22 [ 812.714554][ T5956] usb 1-1: USB disconnect, device number 47 [ 812.777203][T17524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.784300][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.861811][T17524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.135870][T17524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.143263][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.171832][T17524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.275721][T15831] Bluetooth: hci2: command tx timeout [ 813.303416][T17524] hsr_slave_0: entered promiscuous mode [ 813.363220][T17524] hsr_slave_1: entered promiscuous mode [ 813.411058][T17524] debugfs: 'hsr0' already exists in 'hsr' [ 813.427143][T17524] Cannot create hsr debugfs directory [ 813.435295][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 813.435314][ T30] audit: type=1326 audit(1755303903.133:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.1.2461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ea998ebe9 code=0x0 [ 813.806667][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 813.965520][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 813.975648][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 813.984215][T17649] tipc: Started in network mode [ 813.989814][ T9] usb 1-1: config 0 has no interface number 0 [ 814.005505][T17649] tipc: Node identity 660f2f352986, cluster identity 4711 [ 814.015617][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 814.033268][T17649] tipc: Enabled bearer , priority 0 [ 814.101136][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.107645][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 814.128287][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.140841][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 814.150059][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.160461][ T9] usb 1-1: Product: syz [ 814.164765][ T9] usb 1-1: Manufacturer: syz [ 814.174032][T17654] syzkaller0: entered promiscuous mode [ 814.175523][ T9] usb 1-1: SerialNumber: syz [ 814.199333][T17654] syzkaller0: entered allmulticast mode [ 814.217622][ T9] usb 1-1: config 0 descriptor?? [ 814.236086][T17643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 814.266031][T17643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 814.430936][T17656] tipc: Resetting bearer [ 814.479486][T17643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 814.508336][T17643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 814.699548][T17648] tipc: Resetting bearer [ 814.761689][T17648] tipc: Disabling bearer [ 814.889748][T17663] kvm: kvm [17662]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 814.922733][T17663] kvm: kvm [17662]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 815.128755][ T5926] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 815.145229][T17643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.208532][T17643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.243870][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 815.276160][ T5926] usb 3-1: device descriptor read/64, error -71 [ 815.295925][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 815.336814][ T9] asix 1-1:0.251: probe with driver asix failed with error -71 [ 815.365710][ T9] usb 1-1: USB disconnect, device number 48 [ 815.567959][ T30] audit: type=1326 audit(1755303905.273:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.1.2469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ea998ebe9 code=0x0 [ 815.593931][ T5926] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 815.765730][ T5926] usb 3-1: device descriptor read/64, error -71 [ 815.856317][T17524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 815.891133][ T5926] usb usb3-port1: attempt power cycle [ 815.905706][ T5939] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 815.927637][T17524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.965580][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 816.041584][T17524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 816.069905][T17524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 816.095726][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 816.128315][ T5939] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 816.156889][ T5939] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 816.196790][ T5939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.206600][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 816.286431][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.303439][ T5939] usb 2-1: string descriptor 0 read error: -71 [ 816.310293][ T5926] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 816.323016][ T5939] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.368705][ T5926] usb 3-1: device descriptor read/8, error -71 [ 816.383124][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.383199][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 816.477695][ T5939] usb 2-1: can't set config #1, error -71 [ 816.504678][ T5939] usb 2-1: USB disconnect, device number 3 [ 816.692061][ T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 816.695841][ T5926] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 816.743080][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.765177][ T24] usb 5-1: Product: syz [ 816.803369][ T5926] usb 3-1: device descriptor read/8, error -71 [ 816.816666][ T24] usb 5-1: Manufacturer: syz [ 816.849666][ T24] usb 5-1: SerialNumber: syz [ 816.906609][ T24] usb 5-1: config 0 descriptor?? [ 816.916308][ T5926] usb usb3-port1: unable to enumerate USB device [ 816.939436][T17524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.071475][T17524] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.183399][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.191963][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.284157][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.291406][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.687474][T17524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.877080][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 817.948339][T17524] veth0_vlan: entered promiscuous mode [ 817.973332][T17524] veth1_vlan: entered promiscuous mode [ 818.003106][ T30] audit: type=1326 audit(1755303907.703:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17724 comm="syz.0.2475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc47138ebe9 code=0x0 [ 818.046104][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 818.050181][T17524] veth0_macvtap: entered promiscuous mode [ 818.061008][ T5885] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 818.073117][T17524] veth1_macvtap: entered promiscuous mode [ 818.091091][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.108444][ T5885] usb 2-1: Product: syz [ 818.112516][T17524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.119695][ T5885] usb 2-1: Manufacturer: syz [ 818.130162][ T5885] usb 2-1: SerialNumber: syz [ 818.139947][T17524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.153396][ T5885] usb 2-1: config 0 descriptor?? [ 818.171811][ T5885] gspca_main: se401-2.14.0 probing 047d:5003 [ 818.191005][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.214413][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.242267][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.264247][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.276931][ T5939] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 818.440981][ T5926] usb 5-1: USB disconnect, device number 11 [ 818.455572][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 818.609553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.637965][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.688767][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.702829][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.799953][ T5885] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 818.833591][ T5885] usb 2-1: device reset changed ep0 maxpacket size! [ 818.879209][ T5885] gspca_se401: read req failed req 0x06 error -19 [ 818.903140][ T5885] usb 2-1: USB disconnect, device number 4 [ 818.936270][ T5926] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 819.067082][ T5885] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 819.085962][ T5926] usb 5-1: device descriptor read/64, error -71 [ 819.415577][ T5926] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 819.450775][ T5885] usb 2-1: config index 0 descriptor too short (expected 12336, got 77) [ 819.462844][ T5885] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 819.502373][ T5885] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 819.532948][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 819.555506][ T5926] usb 5-1: device descriptor read/64, error -71 [ 819.569425][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 819.637858][ T5885] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 819.696331][ T5926] usb usb5-port1: attempt power cycle [ 819.771462][ T5885] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 819.782115][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.800811][ T5885] usb 2-1: Product: syz [ 819.805313][ T5885] usb 2-1: Manufacturer: syz [ 819.819465][ T5885] usb 2-1: SerialNumber: syz [ 820.055766][ T5926] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 820.127473][ T5926] usb 5-1: device descriptor read/8, error -71 [ 820.181662][ T5885] usb 2-1: USB disconnect, device number 5 [ 820.406938][ T5926] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 820.436476][ T5926] usb 5-1: device descriptor read/8, error -71 [ 820.576129][ T5926] usb usb5-port1: unable to enumerate USB device [ 820.962364][T17767] program syz.3.2480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.035514][ T5939] usb 3-1: unable to get BOS descriptor or descriptor too short [ 821.064725][ T5939] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 821.091152][ T5939] usb 3-1: can't read configurations, error -71 [ 821.143274][T17771] tipc: Enabled bearer , priority 0 [ 821.164261][T17771] syzkaller0: entered promiscuous mode [ 821.183921][T17771] syzkaller0: entered allmulticast mode [ 821.330434][T17773] tipc: Resetting bearer [ 821.420279][T17771] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 821.470426][T17770] tipc: Resetting bearer [ 821.568220][T17770] tipc: Disabling bearer [ 821.732811][T17785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 822.100960][ T5926] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 822.328077][ T5926] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.339515][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.384668][ T5926] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 822.568105][ T30] audit: type=1326 audit(1755303912.273:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.2488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x0 [ 822.658500][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.796584][ T5926] usb 5-1: config 0 descriptor?? [ 823.256803][T17787] bridge_slave_0: left allmulticast mode [ 823.262614][T17787] bridge_slave_0: left promiscuous mode [ 823.316026][T17787] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.383721][T17787] bridge_slave_1: left allmulticast mode [ 823.447623][T17787] bridge_slave_1: left promiscuous mode [ 823.456465][T17787] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.466069][ T5939] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 823.666881][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 823.682323][ T5939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.701067][ T5939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 823.716037][ T5939] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 823.736156][ T5939] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 823.760503][ T5939] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 823.777138][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.784702][T17787] bond3: (slave veth0_to_bond): Releasing active interface [ 823.813682][ T5939] hub 2-1:1.0: bad descriptor, ignoring hub [ 823.824980][ T5939] hub 2-1:1.0: probe with driver hub failed with error -5 [ 823.853321][ T5939] cdc_wdm 2-1:1.0: skipping garbage [ 823.875498][ T5939] cdc_wdm 2-1:1.0: skipping garbage [ 823.898894][ T5939] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 823.931977][ T5939] cdc_wdm 2-1:1.0: Unknown control protocol [ 824.012499][T17787] bond0: (slave bond_slave_0): Releasing backup interface [ 824.022337][ T5956] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 824.101005][T17821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.163264][T17821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.243108][T17787] bond0: (slave bond_slave_1): Releasing backup interface [ 824.289822][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.325625][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 824.359049][ T5956] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 824.450509][T17787] team0: Port device team_slave_0 removed [ 824.461984][ T5956] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 824.504000][T17840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.595507][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.609367][T17840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.650041][T17787] team0: Port device team_slave_1 removed [ 824.667364][ T5956] usb 4-1: Product: syz [ 824.691527][T17787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.695334][ T5956] usb 4-1: Manufacturer: syz [ 824.748762][ T5956] usb 4-1: SerialNumber: syz [ 824.766064][T17787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.795921][T17610] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 824.801509][ T5956] usb 4-1: config 0 descriptor?? [ 824.827167][T17787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.859516][T17787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.946400][T17610] usb 3-1: device descriptor read/64, error -71 [ 824.959128][T17787] bond2: (slave vcan1): Releasing backup interface [ 825.106438][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 825.162393][T17787] team0: Port device bridge5 removed [ 825.208114][T17610] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 825.255338][T17831] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 825.365678][T17610] usb 3-1: device descriptor read/64, error -71 [ 825.496557][T17610] usb usb3-port1: attempt power cycle [ 825.542293][ T5926] usbhid 5-1:0.0: can't add hid device: -71 [ 825.570047][ T5926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 825.610118][ T5926] usb 5-1: USB disconnect, device number 16 [ 825.672667][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 825.855644][T17610] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 825.900865][T17610] usb 3-1: device descriptor read/8, error -71 [ 826.157341][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 826.165851][T17610] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 826.185553][ T5926] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 826.198496][T17610] usb 3-1: device descriptor read/8, error -71 [ 826.316467][T17610] usb usb3-port1: unable to enumerate USB device [ 826.357792][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.488599][ T5926] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 826.503237][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.522126][ T5926] usb 5-1: config 0 descriptor?? [ 826.578869][ T24] usb 4-1: USB disconnect, device number 24 [ 826.583999][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 826.786381][T17867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.814456][T17867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.025923][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 827.597051][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 827.626213][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00 [ 827.648212][ T5926] pwc: recv_control_msg error -32 req 04 val 1000 [ 827.674912][ T5926] pwc: recv_control_msg error -32 req 04 val 1300 [ 827.710820][ T5926] pwc: recv_control_msg error -32 req 04 val 1400 [ 827.832719][ T30] audit: type=1800 audit(1755303917.523:944): pid=17883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2503" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 827.833146][ T5926] pwc: recv_control_msg error -32 req 02 val 2000 [ 827.871018][ T5926] pwc: recv_control_msg error -32 req 02 val 2100 [ 827.880421][ T5926] pwc: recv_control_msg error -32 req 04 val 1500 [ 827.900240][ T9] usb 2-1: USB disconnect, device number 6 [ 828.139033][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 828.385670][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 828.561026][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 828.578496][ T9] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 828.600364][ T9] usb 2-1: Product: syz [ 828.604178][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2513'. [ 828.611373][ T9] usb 2-1: Manufacturer: syz [ 828.649939][ T9] usb 2-1: SerialNumber: syz [ 828.692100][ T9] usb 2-1: config 0 descriptor?? [ 828.704705][ T30] audit: type=1326 audit(1755303918.403:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.2514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6946d8ebe9 code=0x0 [ 829.013395][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 829.302122][ T9] asix 2-1:0.0: probe with driver asix failed with error -61 [ 829.383526][ T9] usb 2-1: USB disconnect, device number 7 [ 829.445549][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 829.548203][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 829.610560][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 829.620230][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 829.715851][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 829.731516][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 829.748201][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 829.760166][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 829.778236][ T5926] pwc: Registered as video103. [ 829.790719][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input75 [ 829.865909][ T24] usb 3-1: config 0 has no interfaces? [ 829.890086][ T5926] usb 5-1: USB disconnect, device number 17 [ 829.899732][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 829.985611][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 830.024264][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.062124][ T24] usb 3-1: Product: syz [ 830.105905][ T24] usb 3-1: Manufacturer: syz [ 830.169637][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 830.217299][ T9] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 830.225879][ T9] usb 2-1: config 0 has no interface number 0 [ 830.251112][ T24] usb 3-1: SerialNumber: syz [ 830.255877][ T9] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 830.255910][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.255939][ T9] usb 2-1: Product: syz [ 830.255956][ T9] usb 2-1: Manufacturer: syz [ 830.255972][ T9] usb 2-1: SerialNumber: syz [ 830.289754][ T9] usb 2-1: config 0 descriptor?? [ 830.308526][ T9] redrat3 2-1:0.31: Couldn't find all endpoints [ 830.469990][ T24] usb 3-1: config 0 descriptor?? [ 831.095167][ T5926] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 831.245582][ T5926] usb 5-1: device descriptor read/64, error -71 [ 831.495518][ T5926] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 831.625729][ T5926] usb 5-1: device descriptor read/64, error -71 [ 831.746141][ T5926] usb usb5-port1: attempt power cycle [ 831.765685][T17610] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 831.935803][ T5885] usb 3-1: USB disconnect, device number 33 [ 831.948093][T17610] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 832.086281][T17610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.135531][ T5926] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 832.188243][ T5926] usb 5-1: device descriptor read/8, error -71 [ 832.218812][T17610] usb 4-1: config 0 descriptor?? [ 832.269134][T17610] pwc: Creative Labs Webcam Pro Ex detected. [ 832.322950][ T30] audit: type=1326 audit(1755303922.023:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.2.2524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6946d8ebe9 code=0x0 [ 832.546635][T17949] netlink: 'syz.3.2523': attribute type 1 has an invalid length. [ 832.554800][ T5926] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 832.598949][ T5926] usb 5-1: device descriptor read/8, error -71 [ 832.737519][ T5926] usb usb5-port1: unable to enumerate USB device [ 832.763058][T17949] bond1 (unregistering): Released all slaves [ 832.996857][ T10] usb 2-1: USB disconnect, device number 8 [ 833.541248][ T30] audit: type=1326 audit(1755303923.213:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 833.671341][ T30] audit: type=1326 audit(1755303923.213:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 833.969501][ T30] audit: type=1326 audit(1755303923.213:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 834.005525][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 834.196561][ T5885] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 834.215883][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 834.232385][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.275093][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.289433][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 834.304784][ T30] audit: type=1326 audit(1755303923.213:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 834.334034][ T24] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 834.375856][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 834.398388][ T5885] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 834.425544][ T30] audit: type=1326 audit(1755303923.213:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 834.428986][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.523806][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.591874][ T24] usb 3-1: config 0 descriptor?? [ 834.657879][ T5885] usb 2-1: config 0 has no interface number 0 [ 834.682036][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 834.692549][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.700870][ T30] audit: type=1326 audit(1755303923.213:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 834.723571][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.731360][ T5885] usb 2-1: Product: syz [ 834.738856][ T5885] usb 2-1: Manufacturer: syz [ 834.748249][ T5885] usb 2-1: SerialNumber: syz [ 834.758995][ T5885] usb 2-1: config 0 descriptor?? [ 834.780192][ T30] audit: type=1326 audit(1755303923.213:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 834.945585][ T30] audit: type=1326 audit(1755303923.213:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 835.017164][ T30] audit: type=1326 audit(1755303923.213:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 835.039792][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.048476][ T5885] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 835.066250][ T5885] usb 2-1: No valid video chain found. [ 835.297253][ T30] audit: type=1326 audit(1755303923.213:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6946d8ebe9 code=0x7ffc0000 [ 835.319466][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.803197][T17610] pwc: Failed to set LED on/off time (-71) [ 835.825859][T17610] pwc: send_video_command error -71 [ 835.847552][T17610] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 835.870393][T17610] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 835.957131][T17610] usb 4-1: USB disconnect, device number 25 [ 836.500663][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 836.531868][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 836.580968][ T24] usb 3-1: USB disconnect, device number 34 [ 838.282618][T17610] usb 2-1: USB disconnect, device number 9 [ 838.756419][T18022] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2542'. [ 838.801123][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 838.801143][ T30] audit: type=1326 audit(1755303928.503:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.1.2542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ea998ebe9 code=0x0 [ 840.356709][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'. [ 840.409439][T18047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2549'. [ 840.415736][T18050] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2549'. [ 840.450352][T18050] 0ªX¹¦À: renamed from caif0 [ 840.579090][T18050] 0ªX¹¦À: left promiscuous mode [ 840.595745][T18050] 0ªX¹¦À: entered allmulticast mode [ 840.601110][T18050] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 841.033253][ T30] audit: type=1800 audit(1755303930.733:970): pid=18068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2556" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 841.053850][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.045714][ T5926] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 842.235721][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 842.258040][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 842.285234][ T5926] usb 1-1: config 11 has an invalid interface number: 244 but max is 0 [ 842.321916][ T5926] usb 1-1: config 11 has no interface number 0 [ 842.361727][ T5926] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 842.402549][ T5926] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 842.455488][ T5926] usb 1-1: config 11 interface 244 has no altsetting 0 [ 842.492830][ T5926] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 842.514887][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.560888][ T5926] usb 1-1: Product: syz [ 842.565293][ T5926] usb 1-1: Manufacturer: syz [ 842.591055][ T5926] usb 1-1: SerialNumber: syz [ 842.739151][T18093] dlm: plock device version mismatch: kernel (1.2.0), user (1717991472.1717986918.1717986918) [ 842.815670][T18096] futex_wake_op: syz.3.2560 tries to shift op by 32; fix this program [ 842.950980][T18101] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 843.374051][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 843.447626][ C1] vcan0: j1939_session_tx_dat: 0xffff888056e4fc00: queue data error: -100 [ 843.658661][ T5926] peak_usb 1-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 843.685514][ T5926] peak_usb 1-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 843.837452][ T5926] peak_usb 1-1:11.244: probe with driver peak_usb failed with error -71 [ 843.872732][ T5926] usb 1-1: USB disconnect, device number 49 [ 844.335490][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 844.515499][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 844.615591][ T24] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 844.785786][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 844.842259][T18134] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.2574'. [ 844.853645][T18134] openvswitch: netlink: Message has 5 unknown bytes. [ 844.870731][T18134] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2574'. [ 844.925970][ T24] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 844.975777][T17610] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 845.083171][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 845.096404][ T24] usb usb1-port1: attempt power cycle [ 845.199633][T17610] usb 2-1: Using ep0 maxpacket: 8 [ 845.220427][T17610] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 845.229226][T17610] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.237648][ T30] audit: type=1326 audit(1755303934.933:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.2.2576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6946d8ebe9 code=0x0 [ 845.239721][T17610] usb 2-1: config 0 has no interface number 0 [ 845.301030][T17610] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 845.319842][T17610] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 845.336015][T17610] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 845.355246][T17610] usb 2-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 845.366534][T17610] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 845.377845][T17610] usb 2-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 845.423083][T17610] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 845.432735][T17610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.444807][T17610] usb 2-1: Product: syz [ 845.449627][T17610] usb 2-1: Manufacturer: syz [ 845.454699][T17610] usb 2-1: SerialNumber: syz [ 845.468074][T17610] usb 2-1: config 0 descriptor?? [ 845.474642][T18132] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 845.493433][T18132] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 845.505668][ T24] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 845.526619][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 845.655501][ T24] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 845.676571][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 845.682256][ T24] usb usb1-port1: unable to enumerate USB device [ 845.724523][T17610] usb 2-1: NFC: intf ffff888033cfb000 id ffffffff8eb53ba0 [ 845.798051][T17610] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 845.836834][T17610] usb 2-1: USB disconnect, device number 10 [ 845.864689][T17610] usb 2-1: NFC: intf ffff888033cfb000 [ 846.385516][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 846.643770][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 846.654487][ T24] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 846.669136][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.677965][ T24] usb 3-1: Product: syz [ 846.682315][ T24] usb 3-1: Manufacturer: syz [ 846.688250][ T24] usb 3-1: SerialNumber: syz [ 846.719563][ T24] usb 3-1: config 0 descriptor?? [ 846.739668][ T24] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 847.211955][ T24] gspca_m5602: Failed to find a sensor [ 847.248990][ T24] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 847.265284][ T24] usb 3-1: USB disconnect, device number 35 [ 847.295866][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 847.304631][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 847.333535][ T10] usb 4-1: can't read configurations, error -71 [ 847.725670][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 848.056337][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 848.160845][ T10] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 848.174469][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.183299][ T10] usb 4-1: Product: syz [ 848.231610][ T10] usb 4-1: Manufacturer: syz [ 848.237471][ T10] usb 4-1: SerialNumber: syz [ 848.245320][ T10] usb 4-1: config 0 descriptor?? [ 848.262547][ T10] esd_usb 4-1:0.0: sending version message failed [ 848.332591][ T10] esd_usb 4-1:0.0: probe with driver esd_usb failed with error -22 [ 848.541900][T18157] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 848.574748][ T10] usb 4-1: USB disconnect, device number 27 [ 848.721936][ T30] audit: type=1326 audit(1755303938.423:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.2.2587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6946d8ebe9 code=0x0 [ 848.745639][ T5926] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 849.038249][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 849.050915][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.088234][ T5926] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 849.121685][ T5926] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 849.150135][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.179824][ T5926] usb 2-1: Product: syz [ 849.215447][ T5926] usb 2-1: Manufacturer: syz [ 849.220134][ T5926] usb 2-1: SerialNumber: syz [ 849.249670][ T5926] usb 2-1: config 0 descriptor?? [ 849.665677][ T5926] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 849.825612][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 849.826315][ T5926] usb 1-1: no configurations [ 849.838402][ T5926] usb 1-1: can't read configurations, error -22 [ 849.975493][ T5926] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 850.008910][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 850.018550][ T24] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 850.028252][ T24] usb 3-1: config 0 has no interface number 0 [ 850.034412][ T24] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 850.059371][ T24] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 850.101775][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 850.121715][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.131629][ T24] usb 3-1: Product: syz [ 850.137204][ T24] usb 3-1: Manufacturer: syz [ 850.143335][ T24] usb 3-1: SerialNumber: syz [ 850.161394][ T24] usb 3-1: config 0 descriptor?? [ 850.171176][T18197] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 850.202276][ T5926] usb 1-1: no configurations [ 850.207170][ T5926] usb 1-1: can't read configurations, error -22 [ 850.221359][ T5926] usb usb1-port1: attempt power cycle [ 850.391259][ T24] qcserial 3-1:0.49: Qualcomm USB modem converter detected [ 850.440697][ T24] usb 3-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 850.595898][ T5926] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 850.618232][ T24] usb 3-1: USB disconnect, device number 36 [ 850.636543][ T24] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 850.647669][ T24] qcserial 3-1:0.49: device disconnected [ 850.654700][ T5926] usb 1-1: no configurations [ 850.661467][ T5926] usb 1-1: can't read configurations, error -22 [ 850.825490][ T5926] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 850.868674][ T5926] usb 1-1: no configurations [ 850.889104][ T5926] usb 1-1: can't read configurations, error -22 [ 850.918206][ T5926] usb usb1-port1: unable to enumerate USB device [ 851.299809][T18218] fuse: Bad value for 'fd' [ 851.325490][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 851.475700][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 851.484107][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 851.492018][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 851.503904][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.527017][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.543343][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.557113][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 851.567160][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 851.578653][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.597546][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.611174][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.624789][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 851.636328][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 851.648317][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.660222][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.683514][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.709500][ T24] usb 3-1: string descriptor 0 read error: -22 [ 851.717166][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 851.726537][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.808899][ T5926] usb 2-1: USB disconnect, device number 11 [ 851.841176][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 851.992515][ T10] usb 3-1: USB disconnect, device number 37 [ 852.277946][ T30] audit: type=1326 audit(1755303941.983:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.3.2603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cf9d8ebe9 code=0x0 [ 852.506543][T18233] loop4: detected capacity change from 0 to 7 [ 852.553289][T18233] Dev loop4: unable to read RDB block 7 [ 852.579241][T18233] loop4: unable to read partition table [ 852.597410][T18233] loop4: partition table beyond EOD, truncated [ 852.603706][T18233] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 852.945768][T18239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2608'. [ 853.235647][ T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 853.285491][ T5997] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 853.385467][ T1210] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 853.417482][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 853.435270][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 853.445853][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 853.446341][ T5997] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 853.454664][ T9] usb 3-1: Product: syz [ 853.454685][ T9] usb 3-1: Manufacturer: syz [ 853.502616][ T9] usb 3-1: SerialNumber: syz [ 853.508590][ T5997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.534300][ T9] usb 3-1: config 0 descriptor?? [ 853.535259][ T5997] usb 1-1: config 0 descriptor?? [ 853.562242][T18243] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 853.585582][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 853.592693][ T1210] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.598494][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 853.615952][ T1210] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.630159][ T1210] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 853.640679][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.649078][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 853.649727][ T1210] usb 4-1: Product: syz [ 853.661962][ T1210] usb 4-1: Manufacturer: syz [ 853.668577][ T1210] usb 4-1: SerialNumber: syz [ 853.904262][ T1210] usb 4-1: 0:2 : does not exist [ 853.932990][ T1210] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 853.963446][ T1210] usb 4-1: USB disconnect, device number 28 [ 854.035112][T16672] udevd[16672]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.257748][T18239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.266872][T18239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.353760][ T5997] usbhid 1-1:0.0: can't add hid device: -71 [ 854.361448][ T5997] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 854.394869][ T5997] usb 1-1: USB disconnect, device number 58 [ 854.503477][T18249] autofs4:pid:18249:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 855.110992][T18259] pim6reg1: entered promiscuous mode [ 855.120796][T18259] pim6reg1: entered allmulticast mode [ 855.186833][T18260] binder: 18258:18260 ioctl c00c6211 0 returned -14 [ 855.661468][ T30] audit: type=1326 audit(1755303945.323:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc47138ebe9 code=0x0 [ 856.105638][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 856.255590][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 856.269936][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 856.285102][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 856.301942][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 856.312447][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.337117][ T24] usb 4-1: Product: syz [ 856.342738][ T24] usb 4-1: Manufacturer: syz [ 856.348286][ T24] usb 4-1: SerialNumber: syz [ 856.362570][ T24] usb 4-1: config 0 descriptor?? [ 856.376792][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 856.387473][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 856.584058][T18284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.004742][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 857.011594][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 857.495503][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 857.635695][ T24] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 857.644416][ T24] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 857.657637][ T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 857.666958][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.682329][ T10] usb 2-1: config 0 descriptor?? [ 857.720087][ T1210] usb 3-1: USB disconnect, device number 38 [ 857.823781][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 857.849513][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 858.059838][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 858.070136][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 858.077260][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 858.088299][ T24] usb 4-1: USB disconnect, device number 29 [ 858.185836][ T1210] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 858.337490][ T1210] usb 3-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 858.355325][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 858.369133][ T1210] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 858.381013][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 858.393271][ T1210] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 858.408665][ T1210] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 858.418143][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.427754][ T1210] usb 3-1: Product: syz [ 858.432542][ T1210] usb 3-1: Manufacturer: syz [ 858.437442][ T1210] usb 3-1: SerialNumber: syz [ 858.462450][ T1210] usb 3-1: config 0 descriptor?? [ 858.492447][T18290] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 858.502355][ T1210] usb 3-1: ucan: probing device on interface #0 [ 858.511461][ T1210] usb 3-1: ucan: invalid endpoint configuration [ 858.519251][ T1210] usb 3-1: ucan: probe failed; try to update the device firmware [ 858.716713][ T9] usb 3-1: USB disconnect, device number 39 [ 859.106288][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 859.159618][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 859.190063][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 859.229783][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 859.258405][ T24] usb 1-1: device descriptor read/64, error -71 [ 859.260805][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 859.303403][ T10] ------------[ cut here ]------------ [ 859.321276][ T10] UBSAN: shift-out-of-bounds in drivers/net/usb/asix_devices.c:679:27 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 859.355583][ T10] shift exponent 240 is too large for 64-bit type 'unsigned long' [ 859.393975][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 859.394007][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 859.394024][ T10] Workqueue: usb_hub_wq hub_event [ 859.394058][ T10] Call Trace: [ 859.394068][ T10] [ 859.394079][ T10] dump_stack_lvl+0x189/0x250 [ 859.394113][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.394140][ T10] ? __pfx__printk+0x10/0x10 [ 859.394186][ T10] ubsan_epilogue+0xa/0x40 [ 859.394218][ T10] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 859.394280][ T10] ax88772_bind+0xdcf/0xfa0 [ 859.394326][ T10] ? __pfx_ax88772_bind+0x10/0x10 [ 859.394361][ T10] ? usbnet_probe+0x915/0x2870 [ 859.394390][ T10] usbnet_probe+0xa93/0x2870 [ 859.394414][ T10] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 859.394463][ T10] ? __pfx_usbnet_probe+0x10/0x10 [ 859.394484][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 859.394512][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 859.394537][ T10] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 859.394564][ T10] ? usb_disable_lpm+0x77/0x3e0 [ 859.394606][ T10] usb_probe_interface+0x665/0xc30 [ 859.394654][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 859.394682][ T10] really_probe+0x26a/0x9e0 [ 859.394717][ T10] __driver_probe_device+0x18c/0x2f0 [ 859.394745][ T10] driver_probe_device+0x4f/0x430 [ 859.394774][ T10] __device_attach_driver+0x2ce/0x530 [ 859.394805][ T10] bus_for_each_drv+0x251/0x2e0 [ 859.394837][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 859.394863][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 859.394906][ T10] __device_attach+0x2b8/0x400 [ 859.394932][ T10] ? __pfx___device_attach+0x10/0x10 [ 859.394959][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 859.394992][ T10] bus_probe_device+0x185/0x260 [ 859.395028][ T10] device_add+0x7b6/0xb50 [ 859.395056][ T10] usb_set_configuration+0x1a87/0x20e0 [ 859.395118][ T10] usb_generic_driver_probe+0x8d/0x150 [ 859.395148][ T10] usb_probe_device+0x1c4/0x390 [ 859.395181][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 859.395207][ T10] really_probe+0x26a/0x9e0 [ 859.395239][ T10] __driver_probe_device+0x18c/0x2f0 [ 859.395267][ T10] driver_probe_device+0x4f/0x430 [ 859.395297][ T10] __device_attach_driver+0x2ce/0x530 [ 859.395327][ T10] bus_for_each_drv+0x251/0x2e0 [ 859.395364][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 859.395388][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 859.395429][ T10] __device_attach+0x2b8/0x400 [ 859.395456][ T10] ? __pfx___device_attach+0x10/0x10 [ 859.395485][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 859.395518][ T10] bus_probe_device+0x185/0x260 [ 859.395553][ T10] device_add+0x7b6/0xb50 [ 859.395580][ T10] usb_new_device+0xa39/0x16f0 [ 859.395628][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 859.395654][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.395680][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 859.395713][ T10] hub_event+0x2958/0x4a20 [ 859.395802][ T10] ? __pfx_hub_event+0x10/0x10 [ 859.395828][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 859.395858][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.395883][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 859.395902][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 859.395927][ T10] process_scheduled_works+0xade/0x17b0 [ 859.395983][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 859.396026][ T10] worker_thread+0x8a0/0xda0 [ 859.396081][ T10] kthread+0x70e/0x8a0 [ 859.396113][ T10] ? __pfx_worker_thread+0x10/0x10 [ 859.396135][ T10] ? __pfx_kthread+0x10/0x10 [ 859.396165][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.396192][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 859.396219][ T10] ? __pfx_kthread+0x10/0x10 [ 859.396247][ T10] ret_from_fork+0x3f9/0x770 [ 859.396273][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 859.396303][ T10] ? __switch_to_asm+0x39/0x70 [ 859.396329][ T10] ? __switch_to_asm+0x33/0x70 [ 859.396364][ T10] ? __pfx_kthread+0x10/0x10 [ 859.396394][ T10] ret_from_fork_asm+0x1a/0x30 [ 859.396441][ T10] [ 859.790906][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.884213][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 860.029572][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 860.202917][ T10] ---[ end trace ]--- [ 860.207048][ T10] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 860.214289][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 860.226211][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 860.236292][ T10] Workqueue: usb_hub_wq hub_event [ 860.241342][ T10] Call Trace: [ 860.244632][ T10] [ 860.247578][ T10] dump_stack_lvl+0x99/0x250 [ 860.252208][ T10] ? __asan_memcpy+0x40/0x70 [ 860.256833][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 860.262059][ T10] ? __pfx__printk+0x10/0x10 [ 860.266690][ T10] vpanic+0x281/0x750 [ 860.270693][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 860.275919][ T10] ? __pfx_vpanic+0x10/0x10 [ 860.280475][ T10] panic+0xb9/0xc0 [ 860.284227][ T10] ? __pfx_panic+0x10/0x10 [ 860.288656][ T10] ? __pfx__printk+0x10/0x10 [ 860.293273][ T10] check_panic_on_warn+0x89/0xb0 [ 860.298249][ T10] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 860.304703][ T10] ax88772_bind+0xdcf/0xfa0 [ 860.309248][ T10] ? __pfx_ax88772_bind+0x10/0x10 [ 860.314766][ T10] ? usbnet_probe+0x915/0x2870 [ 860.319584][ T10] usbnet_probe+0xa93/0x2870 [ 860.324213][ T10] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 860.329820][ T10] ? __pfx_usbnet_probe+0x10/0x10 [ 860.334901][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 860.340827][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 860.347206][ T10] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 860.352771][ T10] ? usb_disable_lpm+0x77/0x3e0 [ 860.357651][ T10] usb_probe_interface+0x665/0xc30 [ 860.363351][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 860.369036][ T10] really_probe+0x26a/0x9e0 [ 860.373594][ T10] __driver_probe_device+0x18c/0x2f0 [ 860.378903][ T10] driver_probe_device+0x4f/0x430 [ 860.383950][ T10] __device_attach_driver+0x2ce/0x530 [ 860.389343][ T10] bus_for_each_drv+0x251/0x2e0 [ 860.394226][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 860.400133][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 860.405562][ T10] __device_attach+0x2b8/0x400 [ 860.410353][ T10] ? __pfx___device_attach+0x10/0x10 [ 860.415657][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 860.420898][ T10] bus_probe_device+0x185/0x260 [ 860.425779][ T10] device_add+0x7b6/0xb50 [ 860.430125][ T10] usb_set_configuration+0x1a87/0x20e0 [ 860.435638][ T10] usb_generic_driver_probe+0x8d/0x150 [ 860.441123][ T10] usb_probe_device+0x1c4/0x390 [ 860.445997][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 860.451400][ T10] really_probe+0x26a/0x9e0 [ 860.455924][ T10] __driver_probe_device+0x18c/0x2f0 [ 860.461332][ T10] driver_probe_device+0x4f/0x430 [ 860.466495][ T10] __device_attach_driver+0x2ce/0x530 [ 860.472001][ T10] bus_for_each_drv+0x251/0x2e0 [ 860.476880][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 860.482793][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 860.488191][ T10] __device_attach+0x2b8/0x400 [ 860.492975][ T10] ? __pfx___device_attach+0x10/0x10 [ 860.498276][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 860.503498][ T10] bus_probe_device+0x185/0x260 [ 860.508408][ T10] device_add+0x7b6/0xb50 [ 860.512759][ T10] usb_new_device+0xa39/0x16f0 [ 860.517551][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 860.522763][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 860.527984][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 860.533201][ T10] hub_event+0x2958/0x4a20 [ 860.537780][ T10] ? __pfx_hub_event+0x10/0x10 [ 860.542595][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 860.548633][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 860.553925][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 860.559708][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 860.565518][ T10] process_scheduled_works+0xade/0x17b0 [ 860.571133][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 860.577860][ T10] worker_thread+0x8a0/0xda0 [ 860.582564][ T10] kthread+0x70e/0x8a0 [ 860.586709][ T10] ? __pfx_worker_thread+0x10/0x10 [ 860.591885][ T10] ? __pfx_kthread+0x10/0x10 [ 860.596579][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 860.601845][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 860.607467][ T10] ? __pfx_kthread+0x10/0x10 [ 860.612106][ T10] ret_from_fork+0x3f9/0x770 [ 860.616842][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 860.622040][ T10] ? __switch_to_asm+0x39/0x70 [ 860.626915][ T10] ? __switch_to_asm+0x33/0x70 [ 860.631736][ T10] ? __pfx_kthread+0x10/0x10 [ 860.636386][ T10] ret_from_fork_asm+0x1a/0x30 [ 860.641363][ T10] [ 860.644765][ T10] Kernel Offset: disabled [ 860.649154][ T10] Rebooting in 86400 seconds..