last executing test programs: 5.532932625s ago: executing program 1 (id=434): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10, 0x200400d1}, 0x404c000) 5.363620451s ago: executing program 1 (id=435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbeb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 3.192362159s ago: executing program 1 (id=437): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd106425563d80bd0d0d703f37ca153f601ae899a53f6715a0080034b0c94cce69945205480a55c22fe394ac000000000000000000040000000000437d57defb79ea6a58b83eeed729a2f95e6a1fc3857fb51b324be00000000000000090867f7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf350709e282a4f2bf59f46e20465eae865dbfd533b1cb2d540d0490cd5248715c74b6bd0248a9a0b413bbdfb5351defc6e34a961f3593920411e112c9df23a29c072d3460eb37beb5bbc04600c64acad9a04ffe62875177b51d2f0c6d7194c26789d2bec2d0846831455b8fcd03beaeca2c1335d8a49a92f9d2bef5f485c4fff4cf710b7d00000000000000009d47d564a838bdf8901a719431a9b0ef918ec0ec79037cb61df16379e3bf2a8100000007e8512e21080315e62559e8dd67dae85177d899d9e078f80585837f0e943b8820b19c75d243a78d8c2093c59cbc4c55f1578cff737502ea2d8d0b9dc946dcb38692dcc8db84834cc7726429cb20603b5338184f9856eeaec437fc3446b6c5ffe5db28aa802e37d3c4f259d616307d8aa46ca094049c0ddc1caaed5485b4ff030000182620bcba2316f9e6df0c8647f6ff0000000000000000386096e4a4ff86042f0b42027ff933d2dfe2d5baffacc9dc2411302a185ea454af5839be28b7d040c1fe1ce0fd63fa7f32b8ab6cd6a8b8bf1b693e4ffeca635d84c376b03a58677dd9f8c2a6fa126c7dad3f9e939c92d63ab1cf2fbea26a60b951914aba5c0696cc64e66b9b0f2c4444f8c391c0d9b647a3be4885a055ce3879a91fb62ca97e6526286c14c80b6dc981c5ae6ebf0778ea01a3a44e01ab79bcddbb83266a1ce1a1dea83ebb89d07b4d05aa09ad2904040e7784e96cd66b04204d47b1c66d5a84e7c3de1d1062fd8a23d1b402003c177e76dbca599691164ade323ad4a17abe99975cba748bc2379eed5a83dc94947eb18976db6ca6d35bfb65a3d8b5129d5263b66dbae6c2baa9bbec017646569fa99537aa453f3e6b2acebeddb6c32a87455f351efcd8385100f33d6b0c3195e229bd30260941825ba884d7db07e1212033409e62d7154cc68a7ee910e393470cdb781817f85373a647fd1b626035b666f224a66c0e47e15c6b836b324318507501a0f4b2cc9153167fd839a483615cbc2ad1a7d1528f01bf91b950a9bcd7d06491e1a355e476365f653d2d94ba898ab8d64d70bdb364ef3adb5ba1e4d9d5002da76ccec5d5184e912aaf5a945ae062e670fafb8cf0afee51c851546bb38c5ef303000000000000002ecdc2b82059750f019a418e3e8d20b6bf768a7db1f8472713452553149a4634418de7eda7b2e682271c6e62f5dfaabba46560dfa410e1f334a5f60791b275368469ddc42f7712bff1689f2ffbf5268cc0572e23afd4c402b154ae94c1f65d7d4a79272945287c79b4b70183d2cde66c7225106a064a1800d777372b2b43326821d5c1c78fda699c7484f3e5fc8bbce6fb3039569646b0de22c431d90c12d48e314d8a5ef4db14a110da070000002c4f7bd7f36f814ed92197fe3eb0843c2681c609231825b8a27ba301142cec8a6fd85965f83ff4dd40296e5fb5678d93d0daee45c43bdb9bde9c1d1c988b909fdf78cfda5da3dc28792b10fb8f3f22ece745c074f86f471489337a9a8d9ad7f310aa50c983b490f561bc420289b6aa0fc3f43f8a4548aa9c723ce466287760f919afbb94b0410ff06071de3aa1c199f407347af666713096a422fbc70671ac08f9256ab0079c101a724136352af2895899effda7bcd127ba98521eb4b04b2a821935ee3b216190e21fb059f9519c4804283d2ce09977842ff7309ad2c4d8f0420dfc8cdb1b37ad52985a88ca4cdc1e37715362a59f7c9c7df793d69f974399859e622ec3a1bab735a1aa489fe50619fe399eddaf92f67755cb54824685444a58731ee166ae65412709b853a5df7ce44220fc188c00291843d66e69da3744f39f5f6113fbe390b22cdbefb90ca2a51b1ff21f384e7bf076825aadaf02da77eeefb8875d630b7575e661b90eb6cd98674c92f179b2675b1f6c86712846ddae87bb3a3887b56292356270e85888c25a1c8ae958906ef6b71e1b800107da1c5608fe05d2f4265a5300000000000000007c737c911c049ae7dc9d77edecaf9685c53ac264e9f02ffcf0318af80c99ea2020b1e1f47cfdd6097c49b5f4bb92bb9133df719f35d4bf730784f1caa8e4e16f4eeb535c059a700d57e4d6c83c4a35a6ef44f135657d3d41856235253326d937125b6f23af7eb95bac231b84c6935a3a6d24d18f7e379db2fd5e76d5ad0d5b4a6c155e8759eb0e7b39ef433861158bd496ecafb3d1c50294e43d5895df1a2de536f5d85e0a000049277bc09533ceead6812fdfb5ef59b15069ea0df6a3eee0484c848fe4e6e7461ffc3917e4e07d250d9459ebea5fd4e26fc04eb38e70597fcb693cb2f7506f5f50b9f73a25bb83b6c71240e5d725ff567d9745a3ba5462524648a93360fb2b9feb1401e30996e1e7d14bb8db59880cde130af0a6a0e6152a6e3a8a684cabf379d4aa33c896bca694ce0180000000000000041caca10fe3ce74f1b8156d8155a4e11d2f35674dff1aa5e749deffffffffb946192820d223f4f0a1a7a2be83872662477884d65af42bcac801d0c667fba32e16ead8f076eed944d5998bca285c25349c6f26485902316c156eee9dcaa64f8a889abb1a890b23c7de6b2b0a6128545efc3ee8e60ea8eafa617ec3f0bfb1e23c4f75bc2a649a886bf4d5378c58259fddea066f1d70df9633af91752bf41a0d4d0929c34472a6f7110de1420800000000000000ca07ba65ce67dd46909ed693d71a5de47fe26a4eb2f4d514029b11f3f0c3ccb2403db497a55d23c25003ba864cdaf6e732f74e11d1a58e89f60267e60d79f467b181d636c9300420b30760bf861195eeb74275e9c4ed71f0e9fda02bdbf8aaa3e23a6d22dd423541b6acdd386a686bc8b128f724567d4c4908391b979a1c7102f5be7ed9db7a36ecfc3b9e0ab0eedde34700000000bec5fbefb008005888ce01eb816f2873e4c59facc7be45b2ab04b1456da413e3f7cf345d6fed0bff0800f8c3018bd0ea78ed54c8b684c797390bf5cad492bff0d97e553e42aba229446354cb4f5825915eccc911e7deee66873c20ffd06e63c27b8a12d757210a43870a0ef4ba3bad01c492d792c1535aeff946f3415912b5abbff35d1cd17c842175357a4bc758b4a943e06a7569fa1e1e4e017e43e8e47914d1000000000000000000000000000cd6b36d72dbc0d8000000c95d5ccace09e52960dbdf13b62f586b47ade41458b77834a573687780117829310ece7950fabcb63c63e18b207cbe936ee9a9a37879d42c66c2a72dfef46013ada19eb8d7e9f35267d0b72d591d0c2f92e2e667eed068310056ec5682b4c2bd946e657f2d9bce51da84f1e3b7d073265f352481b81703e0ecb59f70daf545215151b2b01b2bba1545de5d785ce281000000000000000000000000000000af9637ac06897446708dda1bd7b91be06c3f66def98618eb55bd5652d2ae6036402d69db587e87d04b6e4b1c86328adfcc7a22d77e8db6b1024f6bf7aec85a7f4241fb6b326acae3d9a4f4a0e8b723c43aae4f909f40d7167d1afde58812163d292666cf967e16c25889683658fdc86c820246d4009b3c4e8db0fe57735fb577b9f8e9d5fd9843615ec7c7affa29c04a7e8ea439d4938710039a55da15142ed876e581b4760b3483367fd96f0531ea7f3c6bb4193a76ea6b805b45a74365c15f41b8b542f21a83cae1aff4a858d551b95a2ba77fc8a1109f11e7b18d6f825587bb986e13ff37f111329feb2a09ebc54f1ee1ccd056ff9ec0ff0ce1c1ec5bfab4119a452eef335c0fe2b6bfcd635ef5979352de3801bdba7c145cdfb3ab07b45f13b8f45772c9f9c8285bbe14605879e4ddd78bfb6aa3444b7b3ef1713c58d3d348ea764370002f393e10ec3cf3ef1ab0aa1cab9596fe467c7288893172cd97691a0f1d68ca0449f05902fb7f46f7d0e0d36a68abb3f075358cdb701eac9c3f7f19ab13a83314309861dfaa256ccb4400ffc2568b900be14d9e06b138daf2b41c38abba3b1b2de2f3a660af382b7bc0c1318c5cbdec02646f3e28d8eef763aac4a7fd39c15950764734b8d641e4d642e44c4e6b83d1c3dda34d7cda18c652a5d8d9b406d4df8554e2a5611023766c53e9b478d374112165480e887c923ff0a33551d8f270481230ef34d9168806d43278c977b77148371bd02ee1bcfd278a579be8cc6dc58f6e1f8ee7118ae792c30d4f76546a630f7859fd315513722a1b871d311dc28f40d15b7c631b81e58a6bf8891875fe21e8ebcf2925c2fb2b32dc8a0b1b5c7f806ba81a31b1eec700225a14ff8dc83b484ab80849558a0ffc1ab62b2a4545dbfee4d93ed5de4ffe4469ed88df341dc69ab8b1da80bc47cd127c9e1378020cf5d362819e42350f293dd305b4801932d9e07fc647628a8a84958319874295b3cab523b2f43704845d5785c6b3025fadd8442ab42ebfc3bc45efcf24396f1c2ce50ba96430f8feaa1f8bcd8635a4ce00209a8ebabfdf6f1b5129c0e2a40ba4d1b5e3d6249ee8fa5d2d77351b6fba38756dea4e35c8573eda42eac89b4c50b85346b5ede0ff4dca6a70b38177eb5cb8b8437bb533f6ea1de29e1f1fda88e3afe92482af05ed713dd00aa6a5f8381b5d421909462ac33dee4095afcc67a926e50d2cbe1507195b73f624349b132e7b6b339f9a41fad97f3b70e5808eb177c9e7cb154554644e960f29c5d56fd83d8530a6afc8924dcf01e4ef07e7d16bcef404af5ee3b7767dfbd45f0eee2b583d0159b45cca60a930f37d995b02701d2991761cab642165ed3e52961b7c612991c11028bd1d45ea3106018692facfa14996d3d26d5642566c2f592f67975ce3840131275ce29ed116b6f6eeae34aeae334250e7ae4e25e98cc63b4104fdc79ac676a3c11fd6e9a67dc134802d41c4b01a47e3ad5b6ecd6f4a05bf55c1756535374b7bc9e010966a1415a1e50b2fcb20f3d972d9d7a9f0baf841be4f514eb35c9edaac4b3ca7bfab8a53945d035019cf3321c9144961780413dbb21b89c01fe020bcbaa7fe6b4697b196cf7ac3aa014c48259f5b22b45b2ae023d6052644fa51fc0671d6c4e012607a2df05b6f444903ab3251bdd8d2c98adf9f77de7edbc9631b0e7283a5ce1130d99ae5697ce3ea41e3ba5394883c9899384208cba558d69afdc574cbf05a45ed56d07a41f75c55603561f0e8d54670a53e4b8162729bc34ab66babf31d2e86af5a72553ec045466678427ca42eb49b58c5e58980b73451029b88118d730cce2a48b5d6b9caa2c8fb7178ff90196bd1091568a70d1b7ac47585f6180767a2534401aaf0cda644a4c978b972e0bf7b156aa5d80aa1c3d70c0bcd25ab61122349dd78bc28c3e169adea7ac95e09b6a160204ac772f810193cecf495a9836e082b60626316c02dba83abb792422079947b0d887b87f4cd6bd7c82b00000000000000008207fc649dab3ec0be72d68e61c19c1943664bf9088981b19ebbd3f212a471c6b01d28c1f5a0e5d9e0b762f7cebc056ae8fdeb4448ecb291b08684de1ff1c209448223e3979469b18ea13d5d88532f5a45ae4a86d21bde29b472d65e77d5412dae907ffaca95182316d15dbf12b7d77dcf2154376ab3900ba7d8f026e8a566372cdae696cdec4baa7efcbfc3d250638ee391aa3ab3cdd0a3fc42b674e1943bd0a3e1d103fe00b8788dc5b8ba1602bbfd7ca2bf58c60790eddb10cfca9938e2cafce2"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x25, 0xc, @val=@perf_event={0x7}}, 0x18) 2.912582851s ago: executing program 1 (id=439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) unshare(0x22020400) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x20006, 0x20000000001}) 2.850991534s ago: executing program 1 (id=441): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x7ffffffe, @dev={0xfe, 0x80, '\x00', 0x13}, 0x5}, 0x1c) 2.745561556s ago: executing program 1 (id=442): socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.664210586s ago: executing program 0 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.142623597s ago: executing program 0 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="20571a8826a3e1ab4ba1", 0xa}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0xffffffffffffffff, 0x2, {0x0, 0x1, 0x3}, {0x0, 0xf0}, 0xfd, 0x1}, {0x3, 0x1, {0x1, 0x1, 0x2}, {0x0, 0xf0, 0x1}, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0x1}, {0x9, 0xa}, {0x2, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.95401305s ago: executing program 0 (id=445): landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000000080), 0x2}], 0x1, 0x0, 0x0, 0x1) 1.883517451s ago: executing program 0 (id=446): read(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 1.423544049s ago: executing program 0 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 0s ago: executing program 0 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, r0, @void, @value=0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14646' (ED25519) to the list of known hosts. syzkaller login: [ 86.289029][ T3369] cgroup: Unknown subsys name 'net' [ 86.461090][ T3369] cgroup: Unknown subsys name 'cpuset' [ 86.475854][ T3369] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.891043][ T3369] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.954077][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.967361][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.101183][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.113582][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.935523][ T3374] hsr_slave_0: entered promiscuous mode [ 95.943033][ T3374] hsr_slave_1: entered promiscuous mode [ 96.108899][ T3375] hsr_slave_0: entered promiscuous mode [ 96.115110][ T3375] hsr_slave_1: entered promiscuous mode [ 96.117738][ T3375] debugfs: 'hsr0' already exists in 'hsr' [ 96.118387][ T3375] Cannot create hsr debugfs directory [ 97.024806][ T3374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.050150][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.062469][ T3374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.084296][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.089490][ T3374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.115283][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.126442][ T3374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.151994][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.371036][ T3375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.391159][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.396704][ T3375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.417358][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.425699][ T3375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.446625][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.453138][ T3375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.470986][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.276547][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.314603][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.697026][ T3375] veth0_vlan: entered promiscuous mode [ 101.713814][ T3374] veth0_vlan: entered promiscuous mode [ 101.770209][ T3374] veth1_vlan: entered promiscuous mode [ 101.799972][ T3375] veth1_vlan: entered promiscuous mode [ 101.945156][ T3374] veth0_macvtap: entered promiscuous mode [ 101.975583][ T3374] veth1_macvtap: entered promiscuous mode [ 102.074235][ T3375] veth0_macvtap: entered promiscuous mode [ 102.116013][ T3375] veth1_macvtap: entered promiscuous mode [ 102.361862][ T1206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.362517][ T1206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.362820][ T1206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.363002][ T1206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.462100][ T2218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.496589][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.521785][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.544366][ T2218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.793511][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.784924][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.798298][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.009459][ T919] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.068026][ T919] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.391705][ T3294] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.572275][ T3294] usb 1-1: Using ep0 maxpacket: 32 [ 104.590156][ T3294] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 104.593127][ T3294] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 104.596195][ T3294] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.598181][ T3294] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 104.599495][ T3294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.614357][ T3294] usb 1-1: config 0 descriptor?? [ 105.102589][ T3294] hid-generic 0003:056A:00C5.0002: ignoring exceeding usage max [ 105.148549][ T3294] hid-generic 0003:056A:00C5.0002: unknown main item tag 0x0 [ 105.151097][ T3294] hid-generic 0003:056A:00C5.0002: unknown main item tag 0x0 [ 105.151537][ T3294] hid-generic 0003:056A:00C5.0002: unknown main item tag 0x0 [ 105.151675][ T3294] hid-generic 0003:056A:00C5.0002: unknown main item tag 0x0 [ 105.151798][ T3294] hid-generic 0003:056A:00C5.0002: unknown main item tag 0x0 [ 105.151945][ T3294] hid-generic 0003:056A:00C5.0002: unknown main item tag 0x0 [ 105.152069][ T3294] hid-generic 0003:056A:00C5.0002: unknown main item tag 0x0 [ 105.152189][ T3294] hid-generic 0003:056A:00C5.0002: unknown main item tag 0x0 [ 105.152324][ T3294] hid-generic 0003:056A:00C5.0002: unknown main item tag 0x0 [ 105.175839][ T3294] hid-generic 0003:056A:00C5.0002: hidraw1: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 105.268471][ T11] usb 1-1: USB disconnect, device number 2 [ 105.414133][ T3538] fido_id[3538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 106.111657][ T3531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.114914][ T3531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.838351][ T3479] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.975377][ T3566] loop2: detected capacity change from 0 to 7 [ 108.001753][ T3566] loop2: [ 109.299330][ T28] audit: type=1326 audit(109.120:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3579 comm="syz.1.25" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a168 code=0x7ffc0000 [ 109.305853][ T28] audit: type=1326 audit(109.130:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3579 comm="syz.1.25" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8377a168 code=0x7ffc0000 [ 109.312704][ T28] audit: type=1326 audit(109.140:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3579 comm="syz.1.25" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a168 code=0x7ffc0000 [ 109.315995][ T28] audit: type=1326 audit(109.140:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3579 comm="syz.1.25" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a168 code=0x7ffc0000 [ 109.322087][ T28] audit: type=1326 audit(109.150:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3579 comm="syz.1.25" exe="/syz-executor" sig=0 arch=c00000b7 syscall=77 compat=0 ip=0xffff8377a168 code=0x7ffc0000 [ 109.325997][ T28] audit: type=1326 audit(109.150:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3579 comm="syz.1.25" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a168 code=0x7ffc0000 [ 109.505082][ T3584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.27'. [ 110.411519][ T3592] netlink: 2 bytes leftover after parsing attributes in process `syz.1.31'. [ 112.697012][ T3604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.706295][ T3604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.464352][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 117.466864][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 117.467378][ T3636] Zero length message leads to an empty skb [ 118.816972][ T3654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 119.484846][ T3665] geneve2: entered promiscuous mode [ 119.811114][ T3479] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.961173][ T3479] usb 1-1: Using ep0 maxpacket: 32 [ 119.979570][ T3479] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 119.979990][ T3479] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.983639][ T3479] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.985240][ T3479] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 119.985346][ T3479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.002891][ T3479] usb 1-1: config 0 descriptor?? [ 120.455972][ T3479] hid_parser_main: 3 callbacks suppressed [ 120.467933][ T3479] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 120.468330][ T3479] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 120.468423][ T3479] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 120.468504][ T3479] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 120.468592][ T3479] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 120.482335][ T3479] hid-generic 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 120.645969][ T919] usb 1-1: USB disconnect, device number 3 [ 120.954905][ T3676] fido_id[3676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 124.931308][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.091062][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 125.104060][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 125.104665][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.104786][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.104921][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.104995][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.105152][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.105225][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.341774][ T23] usb 1-1: usb_control_msg returned -32 [ 125.342248][ T23] usbtmc 1-1:16.0: can't read capabilities [ 126.758188][ T3713] netlink: 64 bytes leftover after parsing attributes in process `syz.1.75'. [ 132.386060][ T3728] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 132.593202][ T23] usb 1-1: USB disconnect, device number 4 [ 133.415529][ T3742] syz.1.83 uses obsolete (PF_INET,SOCK_PACKET) [ 133.831078][ T23] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 134.054532][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.056365][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 134.059801][ T23] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 134.064965][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 134.069692][ T23] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 134.073671][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.099624][ T3737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.116220][ T23] hub 1-1:1.0: bad descriptor, ignoring hub [ 134.117580][ T23] hub 1-1:1.0: probe with driver hub failed with error -5 [ 134.123608][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 134.124946][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 134.126810][ T23] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 134.451475][ T23] usb 1-1: USB disconnect, device number 5 [ 134.525643][ T3754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.526606][ T3754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.738713][ T3754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.747848][ T3754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.063586][ T3764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.068211][ T3764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.191617][ T3437] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 135.385080][ T3437] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.392192][ T3437] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.392408][ T3437] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.417831][ T3437] usb 1-1: string descriptor 0 read error: -22 [ 135.418609][ T3437] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 135.418897][ T3437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.482858][ T3437] usb 1-1: skipping empty audio interface (v1) [ 135.600085][ T3437] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 135.661007][ T23] usb 1-1: USB disconnect, device number 6 [ 136.121437][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.280957][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 136.304663][ T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 136.305041][ T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 136.305290][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 136.305497][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.305609][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.305717][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.305883][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 136.305993][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.323449][ T23] usb 1-1: config 0 descriptor?? [ 136.849733][ T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 136.883570][ T23] usb 1-1: USB disconnect, device number 7 [ 136.898789][ T23] usblp0: removed [ 137.201363][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.402312][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 138.394721][ T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 138.395104][ T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.395452][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.403973][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.408784][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.421267][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.421739][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.421907][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.452829][ T23] usb 1-1: config 0 descriptor?? [ 139.395388][ T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.610939][ T23] usb 1-1: USB disconnect, device number 8 [ 139.631731][ T23] usblp0: removed [ 141.881213][ T3508] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.031541][ T3508] usb 1-1: Using ep0 maxpacket: 8 [ 142.040047][ T3508] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 142.040995][ T3508] usb 1-1: config 0 has an invalid interface number: 149 but max is -1 [ 142.041166][ T3508] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 142.041347][ T3508] usb 1-1: config 0 has no interface number 0 [ 142.041478][ T3508] usb 1-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 142.041639][ T3508] usb 1-1: config 0 interface 149 altsetting 215 endpoint 0x84 has invalid wMaxPacketSize 0 [ 142.041727][ T3508] usb 1-1: config 0 interface 149 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 148 [ 142.041837][ T3508] usb 1-1: config 0 interface 149 has no altsetting 0 [ 142.069460][ T3508] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 142.069631][ T3508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.071227][ T3508] usb 1-1: Product: syz [ 142.071295][ T3508] usb 1-1: Manufacturer: syz [ 142.071340][ T3508] usb 1-1: SerialNumber: syz [ 142.078281][ T3508] usb 1-1: config 0 descriptor?? [ 142.102520][ T3508] hub 1-1:0.149: bad descriptor, ignoring hub [ 142.102730][ T3508] hub 1-1:0.149: probe with driver hub failed with error -5 [ 142.431355][ T3437] usb 1-1: USB disconnect, device number 9 [ 143.623127][ T3819] syzkaller0: entered promiscuous mode [ 143.623727][ T3819] syzkaller0: entered allmulticast mode [ 146.494612][ T3823] gadgetfs: bound to dummy_udc driver [ 146.741371][ T919] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 146.744365][ C0] gadgetfs: connected [ 146.761195][ T919] gadgetfs: disconnected [ 146.772217][ T3827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 146.898166][ T3827] bond1: entered promiscuous mode [ 146.911904][ T3827] bond1: entered allmulticast mode [ 148.161000][ T919] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.322411][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 149.206113][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 149.215895][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 149.219239][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 149.230926][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 149.235052][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 149.239213][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 149.244722][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 149.246283][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 149.247430][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 150.193424][ T919] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 150.193813][ T919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.194169][ T919] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 150.194315][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.209143][ T919] usb 1-1: config 0 descriptor?? [ 150.706340][ T919] hid-generic 0003:146B:0902.0005: ignoring exceeding usage max [ 150.726163][ T919] hid-generic 0003:146B:0902.0005: unknown main item tag 0x0 [ 150.726663][ T919] hid-generic 0003:146B:0902.0005: unknown main item tag 0x0 [ 150.739249][ T919] hid-generic 0003:146B:0902.0005: unexpected long global item [ 150.741814][ T919] hid-generic 0003:146B:0902.0005: probe with driver hid-generic failed with error -22 [ 150.776276][ T3844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.777781][ T3844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.868620][ T919] usb 1-1: USB disconnect, device number 11 [ 150.928975][ T3846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.932796][ T3846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.891474][ T3852] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 157.149578][ T3868] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 157.426613][ T3878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.436843][ T3878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.444965][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.445977][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.627957][ T3941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.629507][ T3941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.609092][ T3965] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.803027][ T3965] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.056455][ T3965] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.318128][ T3965] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.974193][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.491709][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.492256][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.551596][ T2218] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.151132][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 171.311360][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 171.328794][ T23] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 171.329165][ T23] usb 1-1: config 0 has no interface number 0 [ 171.329527][ T23] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 171.329632][ T23] usb 1-1: config 0 interface 184 has no altsetting 0 [ 171.391159][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 171.391861][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.391970][ T23] usb 1-1: Product: syz [ 171.392069][ T23] usb 1-1: Manufacturer: syz [ 171.392152][ T23] usb 1-1: SerialNumber: syz [ 171.418136][ T23] usb 1-1: config 0 descriptor?? [ 171.438947][ T3982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.688952][ T3982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.141633][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 172.142096][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 174.295881][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 174.296407][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 174.296864][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 174.297337][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 174.298266][ T23] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 174.332264][ T23] usb 1-1: USB disconnect, device number 12 [ 174.456401][ T3945] udevd[3945]: setting owner of /dev/bus/usb/001/012 to uid=0, gid=0 failed: No such file or directory [ 176.007887][ T4008] __nla_validate_parse: 24 callbacks suppressed [ 176.008394][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.024694][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.035560][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.047074][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.055892][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.067123][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.078876][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.091279][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.099476][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.108139][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 183.549572][ T4065] ima: Unable to open file: /e (-2) [ 183.552599][ T4064] ima: policy update failed [ 183.555282][ T28] audit: type=1802 audit(183.380:8): pid=4064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.207" res=0 errno=0 [ 183.971684][ T3437] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 184.121422][ T3437] usb 1-1: Using ep0 maxpacket: 32 [ 184.131155][ T3437] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 184.131493][ T3437] usb 1-1: config 0 has no interface number 0 [ 184.131778][ T3437] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 60314, setting to 1024 [ 184.131908][ T3437] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 184.154554][ T3437] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 184.154931][ T3437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.155066][ T3437] usb 1-1: Product: syz [ 184.155197][ T3437] usb 1-1: Manufacturer: syz [ 184.155261][ T3437] usb 1-1: SerialNumber: syz [ 184.172717][ T3437] usb 1-1: config 0 descriptor?? [ 184.176707][ T4069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.692176][ T4074] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 198.121310][ T4087] capability: warning: `syz.1.212' uses 32-bit capabilities (legacy support in use) [ 198.357117][ T4090] syzkaller0: entered promiscuous mode [ 198.358240][ T4090] syzkaller0: entered allmulticast mode [ 198.775234][ T38] usb 1-1: USB disconnect, device number 13 [ 199.116138][ T28] audit: type=1807 audit(198.940:9): action=measure UNKNOWN=func= res=0 [ 199.121213][ T28] audit: type=1802 audit(198.940:10): pid=4100 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.0.217" res=0 errno=0 [ 199.121492][ T4100] ima: policy update failed [ 199.124119][ T28] audit: type=1802 audit(198.950:11): pid=4100 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.217" res=0 errno=0 [ 199.304261][ T4103] __nla_validate_parse: 24 callbacks suppressed [ 199.306215][ T4103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.218'. [ 199.598331][ T4112] vlan2: entered allmulticast mode [ 199.598823][ T4112] bond0: entered allmulticast mode [ 199.602548][ T4112] bond_slave_0: entered allmulticast mode [ 199.603028][ T4112] bond_slave_1: entered allmulticast mode [ 199.709165][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 199.798630][ T3508] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 199.950826][ T3508] usb 1-1: Using ep0 maxpacket: 8 [ 199.958590][ T3508] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 199.958904][ T3508] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.959020][ T3508] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.959086][ T3508] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.959136][ T3508] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.959290][ T3508] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.959374][ T3508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.198535][ T3508] usb 1-1: usb_control_msg returned -32 [ 200.198918][ T3508] usbtmc 1-1:16.0: can't read capabilities [ 207.215643][ T4155] syzkaller0: entered promiscuous mode [ 207.216069][ T4155] syzkaller0: entered allmulticast mode [ 207.665680][ T4163] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 207.768006][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 207.875319][ T3508] usb 1-1: USB disconnect, device number 14 [ 208.421405][ T3294] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 208.609780][ T3294] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 208.612064][ T3294] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 208.613423][ T3294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.803736][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.814259][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.069273][ T3294] qmi_wwan 1-1:1.0: probe with driver qmi_wwan failed with error -22 [ 209.096962][ T3294] usb 1-1: USB disconnect, device number 15 [ 209.851320][ T919] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.011569][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 210.020968][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.021176][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.021250][ T919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.021353][ T919] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.021423][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.029567][ T919] usb 1-1: config 0 descriptor?? [ 210.330934][ T4197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.332011][ T4197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.417199][ T4199] syz_tun: entered allmulticast mode [ 210.468013][ T4194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.470036][ T4194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.493009][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.493209][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.494579][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.494706][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.494848][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.494933][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.495010][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.495089][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.495166][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.495263][ T919] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 210.503411][ T919] hid-generic 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 210.693729][ T919] usb 1-1: USB disconnect, device number 16 [ 211.498881][ T4203] syz_tun: left allmulticast mode [ 211.873158][ T4221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.875945][ T4221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.011177][ T919] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 212.161317][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 212.192490][ T919] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 212.227229][ T919] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 212.227598][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.229207][ T919] usb 1-1: Product: syz [ 212.229295][ T919] usb 1-1: Manufacturer: syz [ 212.229356][ T919] usb 1-1: SerialNumber: syz [ 212.281890][ T919] r8152-cfgselector 1-1: Unknown version 0x0000 [ 212.282391][ T919] r8152-cfgselector 1-1: config 0 descriptor?? [ 212.519968][ T919] r8152-cfgselector 1-1: Needed 1 retries to read version [ 212.521832][ T919] r8152-cfgselector 1-1: Unknown version 0x0000 [ 212.533902][ T919] r8152-cfgselector 1-1: No union descriptors [ 212.724888][ T3294] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 213.270928][ T919] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 213.421170][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 213.452280][ T919] usb 1-1: config 162 has an invalid interface number: 84 but max is 2 [ 213.452869][ T919] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 213.453006][ T919] usb 1-1: config 162 has 2 interfaces, different from the descriptor's value: 3 [ 213.453141][ T919] usb 1-1: config 162 has no interface number 0 [ 213.453231][ T919] usb 1-1: config 162 has no interface number 1 [ 213.453529][ T919] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.453738][ T919] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 213.454287][ T919] usb 1-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 213.454409][ T919] usb 1-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 213.454502][ T919] usb 1-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 213.454588][ T919] usb 1-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 213.454683][ T919] usb 1-1: config 162 interface 84 has no altsetting 0 [ 213.455465][ T919] usb 1-1: config 162 interface 2 has no altsetting 0 [ 213.513158][ T919] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 213.513469][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.515155][ T919] usb 1-1: Product: syz [ 213.515273][ T919] usb 1-1: Manufacturer: syz [ 213.515339][ T919] usb 1-1: SerialNumber: syz [ 213.870831][ T919] usb 1-1: USB disconnect, device number 18 [ 215.607974][ T4249] syz.0.276 (4249): drop_caches: 2 [ 223.118292][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 224.971128][ T23] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 225.184205][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 225.185648][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.185921][ T23] usb 1-1: Product: syz [ 225.186047][ T23] usb 1-1: Manufacturer: syz [ 225.186148][ T23] usb 1-1: SerialNumber: syz [ 225.195621][ T23] usb 1-1: config 0 descriptor?? [ 235.458855][ T3508] usb 1-1: USB disconnect, device number 19 [ 235.901216][ T3508] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 236.061930][ T3508] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.067538][ T3508] usb 1-1: not running at top speed; connect to a high speed hub [ 236.079213][ T3508] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 236.098806][ T3508] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 236.099138][ T3508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.099383][ T3508] usb 1-1: Product: syz [ 236.099557][ T3508] usb 1-1: Manufacturer: syz [ 236.099631][ T3508] usb 1-1: SerialNumber: syz [ 236.112333][ T4325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.364612][ T3508] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.365392][ T3508] usb 1-1: MIDIStreaming interface descriptor not found [ 236.589339][ T3508] usb 1-1: USB disconnect, device number 20 [ 236.854819][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.506204][ T4337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.514273][ T4337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.617393][ T4348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.618894][ T4348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.101318][ T3294] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 240.218270][ T4361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.219319][ T4361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.251440][ T3294] usb 1-1: Using ep0 maxpacket: 8 [ 240.286249][ T4363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.287457][ T4363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.302706][ T3294] usb 1-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 240.304987][ T3294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.306236][ T3294] usb 1-1: Product: syz [ 240.307043][ T3294] usb 1-1: Manufacturer: syz [ 240.308216][ T3294] usb 1-1: SerialNumber: syz [ 240.549878][ T4367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.563541][ T3294] usb 1-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 240.563899][ T4367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.634489][ T3294] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 240.657322][ T3294] usb 1-1: USB disconnect, device number 21 [ 241.327200][ T4113] udevd[4113]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.994234][ T4387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.994707][ T4387] IPv6: NLM_F_CREATE should be set when creating new route [ 244.005173][ T4387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.288947][ T4393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.296575][ T4393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.422179][ T3437] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 244.590957][ T3437] usb 1-1: unable to get BOS descriptor or descriptor too short [ 244.597200][ T3437] usb 1-1: not running at top speed; connect to a high speed hub [ 244.606481][ T3437] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 244.606815][ T3437] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 244.607034][ T3437] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 244.607103][ T3437] usb 1-1: config 14 has no interface number 0 [ 244.607204][ T3437] usb 1-1: config 14 has no interface number 1 [ 244.607536][ T3437] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 244.607700][ T3437] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 244.607912][ T3437] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.608011][ T3437] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 244.608096][ T3437] usb 1-1: config 14 interface 57 has no altsetting 0 [ 244.608229][ T3437] usb 1-1: config 14 interface 228 has no altsetting 0 [ 244.676844][ T3437] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 244.677162][ T3437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.677393][ T3437] usb 1-1: Product: syz [ 244.677461][ T3437] usb 1-1: Manufacturer: syz [ 244.677523][ T3437] usb 1-1: SerialNumber: syz [ 245.124892][ T3437] legousbtower 1-1:14.57: interrupt endpoints not found [ 245.533635][ T3437] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 245.542259][ T3437] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 249.649922][ T3437] usb 1-1: USB disconnect, device number 22 [ 249.739076][ T3437] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 251.844946][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.858062][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.436760][ T4453] gadgetfs: bound to dummy_udc driver [ 252.671722][ T919] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 252.672750][ C0] gadgetfs: connected [ 252.674761][ T919] gadgetfs: disconnected [ 262.442554][ T4486] gadgetfs: bound to dummy_udc driver [ 262.826455][ T4495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.365'. [ 262.875992][ T4495] nbd: socks must be embedded in a SOCK_ITEM attr [ 262.877571][ T4495] block nbd0: shutting down sockets [ 265.531916][ T38] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 265.831375][ T38] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.831779][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.940116][ T38] usb 1-1: config 0 descriptor?? [ 266.135376][ T38] cp210x 1-1:0.0: cp210x converter detected [ 266.655419][ T38] usb 1-1: cp210x converter now attached to ttyUSB0 [ 266.817938][ T3294] usb 1-1: USB disconnect, device number 24 [ 266.847584][ T3294] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.916297][ T3294] cp210x 1-1:0.0: device disconnected [ 267.891219][ T38] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 268.061202][ T38] usb 1-1: Using ep0 maxpacket: 8 [ 268.072447][ T38] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.072761][ T38] usb 1-1: config 0 interface 0 has no altsetting 0 [ 268.074651][ T38] usb 1-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 268.074781][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.084992][ T38] usb 1-1: config 0 descriptor?? [ 268.523128][ T38] hid_parser_main: 8 callbacks suppressed [ 268.525469][ T38] hid-generic 0003:056A:0057.0007: unknown main item tag 0x1 [ 268.526002][ T38] hid-generic 0003:056A:0057.0007: ignoring exceeding usage max [ 268.542575][ T38] hid-generic 0003:056A:0057.0007: hidraw0: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.0-1/input0 [ 268.708307][ T38] usb 1-1: USB disconnect, device number 25 [ 268.726146][ T4574] fido_id[4574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0057.0007/report_descriptor': No such device [ 269.402419][ T38] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 269.575447][ T38] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.575824][ T38] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.592261][ T38] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 269.592565][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.592796][ T38] usb 1-1: Product: syz [ 269.592900][ T38] usb 1-1: Manufacturer: syz [ 269.592964][ T38] usb 1-1: SerialNumber: syz [ 269.624639][ T38] symbolserial 1-1:1.0: symbol converter detected [ 269.643348][ T38] usb 1-1: symbol converter now attached to ttyUSB0 [ 269.830808][ T4583] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 269.837888][ T38] usb 1-1: USB disconnect, device number 26 [ 269.865447][ T38] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 269.867535][ T38] symbolserial 1-1:1.0: device disconnected [ 270.601169][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 270.761104][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.761287][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 270.761470][ T9] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 270.761581][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.786306][ T9] opticon 1-1:1.0: opticon converter detected [ 270.806767][ T9] usb 1-1: opticon converter now attached to ttyUSB0 [ 271.508624][ T4595] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 281.734476][ T9] usb 1-1: USB disconnect, device number 27 [ 281.762258][ T9] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 281.769427][ T9] opticon 1-1:1.0: device disconnected [ 281.948957][ T4627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.392'. [ 282.534346][ T4635] binder: 4634:4635 tried to acquire reference to desc 0, got 1 instead [ 282.544811][ T4635] binder_alloc: 4634: pid 4634 spamming oneway? 1 buffers allocated for a total size of 4096 [ 282.546871][ T4635] binder: 4634:4635 ioctl c0306201 0 returned -14 [ 282.552602][ T4635] binder: 4634:4635 BC_FREE_BUFFER matched unreturned or currently freeing buffer at offset 0 [ 282.575324][ T3479] binder: undelivered TRANSACTION_COMPLETE [ 282.575769][ T3479] binder: undelivered TRANSACTION_COMPLETE [ 282.586931][ T3479] binder: undelivered transaction 6, process died. [ 282.589212][ T3479] binder: undelivered transaction 5, process died. [ 297.921889][ T4732] ALSA: mixer_oss: invalid OSS volume '' [ 302.318759][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 304.531581][ T3294] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 304.686183][ T3294] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.686649][ T3294] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 304.687019][ T3294] usb 1-1: Dual-Role OTG device on HNP port [ 304.693382][ T3294] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 304.693775][ T3294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.732543][ C1] ------------[ cut here ]------------ [ 304.732683][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 304.734010][ C1] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0xa0/0xdc, CPU#1: rcu_preempt/15 [ 304.749098][ C1] Modules linked in: [ 304.751173][ C1] CPU: 1 UID: 0 PID: 15 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT [ 304.751880][ C1] Hardware name: linux,dummy-virt (DT) [ 304.752417][ C1] pstate: 604020c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 304.752821][ C1] pc : usb_ep_enable+0xa0/0xdc [ 304.753100][ C1] lr : usb_ep_enable+0xa0/0xdc [ 304.753390][ C1] sp : ffff800082f03c70 [ 304.753626][ C1] x29: ffff800082f03c70 x28: 0000000000007fff x27: 0000000000000000 [ 304.754529][ C1] x26: f9f000000d8a0580 x25: faf000000856dcb8 x24: fdf000000b938210 [ 304.754921][ C1] x23: f4f0000005ccc0a8 x22: f6f000000b929478 x21: 0000000000000000 [ 304.755307][ C1] x20: f4f0000005cccbc8 x19: f4f0000005ccc0a8 x18: 00000000ffffffff [ 304.755757][ C1] x17: fff07ffffcda2000 x16: ffff800082f00000 x15: ffff800082dfabe9 [ 304.756174][ C1] x14: 00000000ffffffea x13: ffff800082f038c8 x12: 00000000000affa8 [ 304.756552][ C1] x11: ffff800082b8ed68 x10: 000000000002ffe8 x9 : ffff800082c3ed68 [ 304.756999][ C1] x8 : ffff800082c6ed50 x7 : 0000000000000001 x6 : ffffffffffffdfff [ 304.757375][ C1] x5 : fff000007f8d2188 x4 : 0000000000000000 x3 : fff07ffffcda2000 [ 304.757745][ C1] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3f00000035a6600 [ 304.758296][ C1] Call trace: [ 304.758774][ C1] usb_ep_enable+0xa0/0xdc (P) [ 304.759341][ C1] hidg_set_alt+0x64/0x2b8 [ 304.759656][ C1] composite_setup+0xa04/0x1a70 [ 304.759918][ C1] configfs_composite_setup+0x80/0xac [ 304.760382][ C1] dummy_timer+0xb70/0xfa0 [ 304.760672][ C1] __hrtimer_run_queues+0x100/0x170 [ 304.760916][ C1] hrtimer_run_softirq+0x6c/0xac [ 304.761164][ C1] handle_softirqs+0x100/0x244 [ 304.761381][ C1] __do_softirq+0x14/0x20 [ 304.761670][ C1] ____do_softirq+0x10/0x20 [ 304.761887][ C1] call_on_irq_stack+0x30/0x48 [ 304.762128][ C1] do_softirq_own_stack+0x1c/0x40 [ 304.762359][ C1] __irq_exit_rcu+0xd4/0x10c [ 304.762605][ C1] irq_exit_rcu+0x10/0x1c [ 304.762829][ C1] el1_interrupt+0x40/0x60 [ 304.763063][ C1] el1h_64_irq_handler+0x18/0x24 [ 304.763358][ C1] el1h_64_irq+0x6c/0x70 [ 304.763843][ C1] finish_task_switch.isra.0+0x90/0x2fc (P) [ 304.764227][ C1] __schedule+0x404/0xdc8 [ 304.764538][ C1] schedule+0x34/0xd4 [ 304.764812][ C1] schedule_timeout+0x8c/0x110 [ 304.765136][ C1] rcu_gp_fqs_loop+0xf0/0x40c [ 304.765459][ C1] rcu_gp_kthread+0x104/0x11c [ 304.765763][ C1] kthread+0x118/0x124 [ 304.766076][ C1] ret_from_fork+0x10/0x20 [ 304.766742][ C1] ---[ end trace 0000000000000000 ]--- [ 304.768257][ C1] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 304.814828][ T3294] usb 1-1: can't set config #1, error -32 [ 305.356934][ T4539] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.509464][ T4539] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.599312][ T4539] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.699686][ T4539] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.453143][ T4539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.492854][ T4539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.526977][ T4539] bond0 (unregistering): Released all slaves [ 306.541084][ T4539] bond1 (unregistering): Released all slaves [ 306.674198][ T4539] hsr_slave_0: left promiscuous mode [ 306.678910][ T4539] hsr_slave_1: left promiscuous mode [ 306.704154][ T4539] veth1_macvtap: left promiscuous mode [ 306.708761][ T4539] veth0_macvtap: left promiscuous mode [ 306.709670][ T4539] veth1_vlan: left promiscuous mode [ 306.710241][ T4539] veth0_vlan: left promiscuous mode [ 307.878851][ T3218] 8021q: adding VLAN 0 to HW filter on device eth1 [ 308.575471][ T3218] 8021q: adding VLAN 0 to HW filter on device eth2 [ 309.202579][ T3218] 8021q: adding VLAN 0 to HW filter on device eth3 [ 310.034462][ T3218] 8021q: adding VLAN 0 to HW filter on device eth4