last executing test programs: 21m55.696863558s ago: executing program 3 (id=412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x1c, r1, 0x601, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) 21m55.586678107s ago: executing program 3 (id=415): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x23c) 21m55.542601101s ago: executing program 3 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, 0x0, 0x1, 0x170bd2b, 0x60000000, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) 21m54.472475987s ago: executing program 3 (id=417): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 21m54.224641757s ago: executing program 3 (id=419): pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setpipe(r0, 0x407, 0x10005) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0xf, 0x1, @buffer={0x0, 0xda, &(0x7f0000000380)=""/218}, &(0x7f0000000080)="00009f956e6636bc14a05700000000", 0x0, 0x6, 0x0, 0x8000000, 0x0}) 21m53.50608334s ago: executing program 3 (id=423): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlockall(0x7) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) brk(0x200004ffc000) 21m53.305749234s ago: executing program 32 (id=423): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlockall(0x7) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) brk(0x200004ffc000) 20m8.241512601s ago: executing program 4 (id=1422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)={0x14, r1, 0xf03, 0x2}, 0x14}}, 0x20008080) 20m8.114850857s ago: executing program 4 (id=1424): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)='~', 0x1}], 0x2) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f00000002c0)={0x2000, 0x1000}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8200) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r6, &(0x7f0000000300)='\t', 0x1, 0x65055, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xffffffffffffffd1, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x140d, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x44002005}, 0x20040000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000040)={0x5, 0xb84, 0x1, 'queue0\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r2, 0xc0086442, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000e00)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x46, 0x10, 0xf11, 0x2090, 0x76e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x2, 0x9, 0xe8, 0x2, "", [{{0x9, 0x4, 0xa6, 0x7, 0x4, 0xdf, 0xea, 0x95, 0x1, [], [{{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x0, 0x4, 0xa}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x80, 0x89, 0x80}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x4d, 0x3, 0x2, [@generic={0x7, 0x5, "e5b633821a"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x0, 0x6, 0x7}}]}}]}}]}}, 0x0) 20m6.320930793s ago: executing program 4 (id=1444): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000380)='\nr', 0x2) 20m5.994949522s ago: executing program 4 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="5801", @ANYRES16=r1, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) 20m5.929386432s ago: executing program 4 (id=1452): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)='~', 0x1}], 0x2) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f00000002c0)={0x2000, 0x1000}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8200) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r6, &(0x7f0000000300)='\t', 0x1, 0x65055, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xffffffffffffffd1, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x140d, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x44002005}, 0x20040000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000040)={0x5, 0xb84, 0x1, 'queue0\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r2, 0xc0086442, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000e00)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x46, 0x10, 0xf11, 0x2090, 0x76e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x2, 0x9, 0xe8, 0x2, "", [{{0x9, 0x4, 0xa6, 0x7, 0x4, 0xdf, 0xea, 0x95, 0x1, [], [{{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x0, 0x4, 0xa}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x80, 0x89, 0x80}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x4d, 0x3, 0x2, [@generic={0x7, 0x5, "e5b633821a"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x0, 0x6, 0x7}}]}}]}}]}}, 0x0) 20m3.958558445s ago: executing program 4 (id=1487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d09", 0x19}], 0x2) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x40000) 19m48.866484904s ago: executing program 33 (id=1487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d09", 0x19}], 0x2) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x40000) 10m3.663084043s ago: executing program 5 (id=5660): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xa4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x4022f4442ddecb9d, 0x2, 0x3, 0x86}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x29, {0x29, 0x1, "7d611870cced50a6dc9b9baae6e4fb07347310bcb53837f15d7c0201458010d302afc5dfce714d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10m1.551726045s ago: executing program 5 (id=5668): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 10m1.497467921s ago: executing program 5 (id=5669): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20840}, 0xc000) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)="a2cf747f43d3") 10m1.126985701s ago: executing program 5 (id=5673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0xfe, 0x1000000000000192, 0x4, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x844) 10m1.071274426s ago: executing program 5 (id=5674): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x50000, 0x0) 10m0.9327462s ago: executing program 5 (id=5675): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m45.855138414s ago: executing program 34 (id=5675): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m33.506082364s ago: executing program 0 (id=8528): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xb12, 0x400, 0x3, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf0, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x20, 0xc, 0xe5, {0xe5, 0x8, "e31d0532a9488724d60a8c3738c65b106910ad24229989589d697c09c76cd5d7db3f4b4e19fd67e59c02c77f424bec0eb7460c7fea8839031ea76a822836dbcd724fdf6ca9de77cf3fed3dbc5e0a24ac1e9da0069f80db3d93474af9e09291a0c7b64f95021db002bb21fb1e2cfa984bd1abf22d8f13b0e5fc27891cf67750f392c306e871dbbebdbcfff8a0918231389a91b94545965299fa33309a9fdbf81b6997b52c9b2826dd6311a31e37662915282915dbbbaba6ca185c1779d84e46ee6d31cab01d87d3d28a7bd053b4d04dc7f1d57c2300208707be14fd9e36868788a30d10"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000240)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "2431fc0c7f283cb5ea5262253b91196c"}]}}, 0x0, 0x0}, 0x0) 1m33.006660027s ago: executing program 6 (id=8542): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000780)) 1m32.807256712s ago: executing program 6 (id=8545): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m32.382235066s ago: executing program 6 (id=8552): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r3, &(0x7f0000002600)={0x2020}, 0x2020) openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) creat(&(0x7f0000000280)='./file0\x00', 0x88) execve(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000060000000702850069ea4ba1780202d1653cc842f60150d2f8d4cfe38a5bc0ad3f96e08db4be8b331b014073b084d4f4ec2f69e8ca4412344350ba0300000000000000d519b6ea15772b44d89f016ff89f2e5a"], 0x91) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x810) 1m31.512975899s ago: executing program 0 (id=8563): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f00000049c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 1m31.086789663s ago: executing program 6 (id=8569): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100)) 1m30.91146624s ago: executing program 6 (id=8573): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000040000000002, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20940, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m30.555887366s ago: executing program 0 (id=8578): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000d40)=0x9, 0x1) 1m30.380167652s ago: executing program 0 (id=8582): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400", 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000001}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0) syz_usb_disconnect(r0) 1m29.32203247s ago: executing program 6 (id=8598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef0001000000003a"], 0x280) 1m28.744096365s ago: executing program 0 (id=8603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac47", 0x1e}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb60400000000", 0xf8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="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", 0x70c}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10) 1m28.526103981s ago: executing program 0 (id=8608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 1m13.77778863s ago: executing program 35 (id=8598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef0001000000003a"], 0x280) 1m12.673983335s ago: executing program 36 (id=8608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 5.319002836s ago: executing program 7 (id=9017): r0 = socket$unix(0x1, 0x1, 0x0) getpeername$unix(r0, 0x0, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x4, @tick, {0x4, 0x2}, {}, @time=@tick=0xb}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x1}, {}, @control={0x4, 0x0, 0x200}}, {0x38, 0xfd, 0x94, 0x2, @time={0x4, 0x7}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0xf9, 0x0, @tick=0x58, {}, {0x0, 0x6}, @time}], 0x70) syz_ublk_setup_io_uring(0x36e7, &(0x7f0000000180)={0x0, 0xf23a, 0x1, 0x1, 0x167, 0x0, r1}, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000340)) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x40000000, 0x268}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_ublk_setup_io_uring(0x760, &(0x7f0000000800)={0x0, 0x0, 0x100, 0x2, 0x3db}, &(0x7f0000000940), &(0x7f00000004c0), &(0x7f0000000500)) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000700)={0x0, 0x6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x118}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20, 0x0, 0x0, 0x3, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x3, 0x1dc}}], 0x1, 0x0, 0x0) 4.987745603s ago: executing program 7 (id=9022): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x22840) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$panthor(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 4.661200431s ago: executing program 7 (id=9026): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c, 0x80800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000001240)={0x3, 0x0, @pic={0xeb, 0xb, 0x2a, 0xb1, 0x7d, 0x78, 0xe, 0x5, 0x0, 0x78, 0x5, 0x3, 0x8, 0x8, 0x10, 0xd}}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000280)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x80000005}, 0xc) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000480)={0x0, 0x9, 0xffff8001}) dup(r6) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.957403857s ago: executing program 1 (id=9033): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 3.826572446s ago: executing program 1 (id=9035): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{0x0}, {&(0x7f0000000940)="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", 0x5c8}], 0x2}}], 0x1, 0x20002090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.66779042s ago: executing program 1 (id=9037): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004000/0x2000)=nil}) 3.534570455s ago: executing program 7 (id=9039): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x22840) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$panthor(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 3.187601997s ago: executing program 7 (id=9042): syz_usb_connect(0x0, 0x3f, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904ff"], 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000140)=0x4) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0x2, 0xfffe, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}], 0x1, 0x0) 2.591736981s ago: executing program 1 (id=9052): syz_usb_connect$uac1(0x2, 0x72, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xc0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x0, 0x20, {0x7, 0x25, 0x1, 0x8, 0xf, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x92, 0xff, {0x7, 0x25, 0x1, 0xc, 0x4, 0x8}}}}}}}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="050f050010"], 0x1, [{0x0, 0x0}]}) 1.265440977s ago: executing program 1 (id=9063): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000640)="591e8a093b0ba8a84290e9c8468cb19d1c804d2b827073fe9c5f65a0cc63110ee53bbab1377da646c73e1054d929e2409ba1fa86e378a14ab8cb23b766f482f85482ddea0ea2516f1e7cd89fb4f29635ec16056631376ef7ca586cf2c5761b8cf65244e072afb851a505", 0x6a}, {&(0x7f0000000940)="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", 0x498}], 0x2}}], 0x1, 0x20002090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.114295065s ago: executing program 1 (id=9067): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 678.016561ms ago: executing program 2 (id=9078): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000640)="591e8a093b0ba8a84290e9c8468cb19d1c804d2b827073fe9c5f65a0cc63110ee53bbab1377da646c73e1054d929e2409ba1fa86e378a14ab8cb23b766f482f85482ddea0ea2516f1e7cd89fb4f29635ec16056631376ef7ca586cf2c5761b8cf65244e072afb851a5054d802ba24df54719bb00ee7e5195f5d5cc9e8935f57072817055130729695a1f3d871a409aa8a3593f7bfffa259779a75db60bf248ea23f404eb135700b1c21441b99d5852bb59", 0xb1}, {&(0x7f0000000940)="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", 0x450}], 0x2}}], 0x1, 0x20002090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 516.537402ms ago: executing program 2 (id=9079): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 466.734632ms ago: executing program 8 (id=9080): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c, 0x80800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000001240)={0x3, 0x0, @pic={0xeb, 0xb, 0x2a, 0xb1, 0x7d, 0x78, 0xe, 0x5, 0x0, 0x78, 0x5, 0x3, 0x8, 0x8, 0x10, 0xd}}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000280)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x80000005}, 0xc) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 445.626636ms ago: executing program 2 (id=9081): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x22840) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$panthor(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 397.454305ms ago: executing program 8 (id=9082): syz_usb_connect$uac1(0x2, 0x72, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xc0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x0, 0x20, {0x7, 0x25, 0x1, 0x8, 0xf, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x92, 0xff, {0x7, 0x25, 0x1, 0xc, 0x4, 0x8}}}}}}}}]}}, 0x0) 278.75144ms ago: executing program 8 (id=9083): r0 = socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) 258.437488ms ago: executing program 2 (id=9084): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000440)={0x3, 0x31, &(0x7f00000002c0)="01cf657e0e70a659099d9a0c92f95abea5765f542158095e04246700a46068f74a5220cac072704c0996126b83dab5ab17"}) 180.486783ms ago: executing program 8 (id=9085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000640)="591e8a093b0ba8a84290e9c8468cb19d1c804d2b827073fe9c5f65a0cc63110ee53bbab1377da646c73e1054d929e2409ba1fa86e378a14ab8cb23b766f482f85482ddea0ea2516f1e7cd89fb4f29635ec16056631376ef7ca586cf2c5761b8cf65244e072afb851a5054d802ba24df54719bb00ee7e5195f5d5cc9e8935f57072817055130729695a1f3d871a409aa8a3593f7bfffa259779", 0x99}, {&(0x7f0000000940)="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", 0x35e}], 0x2}}], 0x1, 0x20002090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 122.800487ms ago: executing program 2 (id=9086): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000ffffff06000000140008"], 0x34}}, 0x0) 113.525719ms ago: executing program 8 (id=9087): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="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", 0x451}], 0x1}}], 0x1, 0x20002090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 46.642396ms ago: executing program 7 (id=9088): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9400", @ANYBLOB="00002cbd7000fddbdf250a000000001c00068008000300ac1e010108000300ffff"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x24000080) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.15072ms ago: executing program 8 (id=9089): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r1], &(0x7f0000000200), &(0x7f00000000c0)=[r2], &(0x7f0000000040), 0x0, 0x300}) 0s ago: executing program 2 (id=9090): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c, 0x80800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000001240)={0x3, 0x0, @pic={0xeb, 0xb, 0x2a, 0xb1, 0x7d, 0x78, 0xe, 0x5, 0x0, 0x78, 0x5, 0x3, 0x8, 0x8, 0x10, 0xd}}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000280)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x80000005}, 0xc) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): in process `syz.1.7930'. [ 1297.937265][ T32] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1297.958024][ T32] usb 7-1: device descriptor read/8, error -71 [ 1297.997613][T26631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.217225][ T32] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1298.247817][ T32] usb 7-1: device descriptor read/8, error -71 [ 1298.357924][ T32] usb usb7-port1: unable to enumerate USB device [ 1298.994293][T26648] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1300.212184][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.212245][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.410093][T26666] syzkaller1: entered promiscuous mode [ 1300.410109][T26666] syzkaller1: entered allmulticast mode [ 1300.645553][T26668] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7948'. [ 1300.947194][ T5595] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1301.097143][ T5595] usb 7-1: Using ep0 maxpacket: 16 [ 1301.107770][ T5595] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1301.107800][ T5595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.107819][ T5595] usb 7-1: Product: syz [ 1301.107833][ T5595] usb 7-1: Manufacturer: syz [ 1301.107847][ T5595] usb 7-1: SerialNumber: syz [ 1301.382507][ T5595] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1301.390512][ T5595] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1301.391005][ T5595] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1301.391052][ T5595] usb 7-1: media controller created [ 1301.416244][ T5595] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1301.454236][ T5595] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1301.515015][ T5595] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1301.528484][ T5595] usb 7-1: USB disconnect, device number 19 [ 1301.987970][T10481] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1302.028018][T26688] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7957'. [ 1302.092301][T26690] syzkaller1: entered promiscuous mode [ 1302.092317][T26690] syzkaller1: entered allmulticast mode [ 1302.127372][T10481] usb 1-1: device descriptor read/64, error -71 [ 1302.377276][T10481] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1302.507199][T10481] usb 1-1: device descriptor read/64, error -71 [ 1302.619647][T10481] usb usb1-port1: attempt power cycle [ 1302.957130][T10481] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1302.977970][T10481] usb 1-1: device descriptor read/8, error -71 [ 1303.037194][ T11] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1303.187100][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 1303.198715][ T11] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1303.198746][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.198765][ T11] usb 3-1: Product: syz [ 1303.198780][ T11] usb 3-1: Manufacturer: syz [ 1303.198795][ T11] usb 3-1: SerialNumber: syz [ 1303.217370][T10481] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1303.244252][T10481] usb 1-1: device descriptor read/8, error -71 [ 1303.361410][T10481] usb usb1-port1: unable to enumerate USB device [ 1303.469765][ T11] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1303.475919][ T11] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1303.476142][ T11] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1303.476169][ T11] usb 3-1: media controller created [ 1303.502939][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1303.587899][ T11] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1303.640985][ T11] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1303.653917][ T11] usb 3-1: USB disconnect, device number 73 [ 1303.761318][T26709] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7966'. [ 1303.837203][ T5595] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1303.849504][T26713] syzkaller1: entered promiscuous mode [ 1303.849519][T26713] syzkaller1: entered allmulticast mode [ 1304.042570][ T5595] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1304.042598][ T5595] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1304.042618][ T5595] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1304.042670][ T5595] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1304.042694][ T5595] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1304.042736][ T5595] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1304.044419][ T5595] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1304.044447][ T5595] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1304.044467][ T5595] usb 7-1: Product: syz [ 1304.044481][ T5595] usb 7-1: Manufacturer: syz [ 1304.077619][T26705] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1304.110157][T26715] binder: BINDER_SET_CONTEXT_MGR already set [ 1304.110172][T26715] binder: 26714:26715 ioctl 4018620d 200000000040 returned -16 [ 1304.183923][ T5595] cdc_wdm 7-1:1.0: skipping garbage [ 1304.183943][ T5595] cdc_wdm 7-1:1.0: skipping garbage [ 1304.186322][ T5595] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1304.186341][ T5595] cdc_wdm 7-1:1.0: Unknown control protocol [ 1304.285961][ C0] wdm_int_callback: 759 callbacks suppressed [ 1304.285988][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.286007][ C0] wdm_int_callback: 759 callbacks suppressed [ 1304.286023][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.286268][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.286288][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.286509][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.286528][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.286748][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.286768][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.287035][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.287052][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.298908][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.298935][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.299162][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.299181][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.299399][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.299417][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.299636][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.299655][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.299879][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1304.299898][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1304.309753][ T11] usb 7-1: USB disconnect, device number 20 [ 1304.309837][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1304.894504][T26730] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1305.145320][T26736] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.145336][T26736] binder: 26735:26736 ioctl 4018620d 200000000040 returned -16 [ 1305.250692][T26740] syzkaller1: entered promiscuous mode [ 1305.250717][T26740] syzkaller1: entered allmulticast mode [ 1305.401730][T26748] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7984'. [ 1305.547168][ T32] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1305.547517][T22201] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1305.555401][T26752] binder: 26751:26752 ioctl c0306201 200000000040 returned -22 [ 1305.555653][T26752] binder: 26751:26752 ioctl c0306201 200000000640 returned -22 [ 1305.673118][T26756] binder: 26755:26756 ioctl c0306201 0 returned -14 [ 1305.678321][ T32] usb 1-1: device descriptor read/64, error -71 [ 1305.700280][T22201] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.700334][T22201] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1305.700358][T22201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.706601][T22201] usb 7-1: config 0 descriptor?? [ 1305.899347][T26766] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7993'. [ 1305.929024][ T32] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1306.067324][ T32] usb 1-1: device descriptor read/64, error -71 [ 1306.180133][ T32] usb usb1-port1: attempt power cycle [ 1306.213659][T22201] usb 7-1: USB disconnect, device number 21 [ 1306.517505][ T32] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1306.537790][ T32] usb 1-1: device descriptor read/8, error -71 [ 1306.727267][T26773] binder: 26772:26773 ioctl c0306201 200000000040 returned -22 [ 1306.727531][T26773] binder: 26772:26773 ioctl c0306201 200000000640 returned -22 [ 1306.777146][ T32] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1306.797885][ T32] usb 1-1: device descriptor read/8, error -71 [ 1306.895708][T26779] binder: 26778:26779 ioctl c0306201 0 returned -14 [ 1306.908348][ T32] usb usb1-port1: unable to enumerate USB device [ 1306.984557][T26781] syzkaller1: entered promiscuous mode [ 1306.984581][T26781] syzkaller1: entered allmulticast mode [ 1307.063313][T26787] fuse: Unknown parameter 'use00000000000000000000' [ 1307.717196][T22201] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1307.869729][T22201] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.869786][T22201] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1307.869809][T22201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.873506][T22201] usb 7-1: config 0 descriptor?? [ 1308.005973][T26796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8006'. [ 1308.119172][T26800] binder: 26799:26800 ioctl c0306201 0 returned -14 [ 1308.339431][T26809] fuse: Unknown parameter 'use00000000000000000000' [ 1308.399657][ T5599] usb 7-1: USB disconnect, device number 22 [ 1308.445845][T26811] syzkaller1: entered promiscuous mode [ 1308.445859][T26811] syzkaller1: entered allmulticast mode [ 1308.844667][T26815] fuse: Unknown parameter 'group_id00000000000000000000' [ 1309.165482][T26828] fuse: Unknown parameter 'use00000000000000000000' [ 1309.235854][T26831] syzkaller1: entered promiscuous mode [ 1309.235879][T26831] syzkaller1: entered allmulticast mode [ 1309.424356][ T11] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1309.570518][ T11] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1309.570547][ T11] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1309.570567][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1309.570616][ T11] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1309.570641][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1309.570667][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1309.641501][ T11] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1309.641532][ T11] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1309.641552][ T11] usb 3-1: Product: syz [ 1309.641566][ T11] usb 3-1: Manufacturer: syz [ 1309.670874][T26826] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1309.683212][ T11] cdc_wdm 3-1:1.0: skipping garbage [ 1309.683233][ T11] cdc_wdm 3-1:1.0: skipping garbage [ 1309.729964][ T11] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1309.729985][ T11] cdc_wdm 3-1:1.0: Unknown control protocol [ 1309.762278][T26833] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8022'. [ 1309.906766][ C1] wdm_int_callback: 46 callbacks suppressed [ 1309.906795][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.906813][ C1] wdm_int_callback: 46 callbacks suppressed [ 1309.906829][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1309.907070][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.907092][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1309.907336][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.907351][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1309.907574][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.907602][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1309.907828][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.907848][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1309.908070][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.908090][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1309.908327][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.908347][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1309.908564][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.908583][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1309.908793][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.908817][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1309.909039][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1309.909060][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1310.072982][ T32] usb 3-1: USB disconnect, device number 74 [ 1310.073073][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1310.250480][T26848] fuse: Unknown parameter 'user_i00000000000000000000' [ 1310.376561][T26850] syzkaller1: entered promiscuous mode [ 1310.376577][T26850] syzkaller1: entered allmulticast mode [ 1311.564931][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805821f800: rx timeout, send abort [ 1311.936920][T26870] fuse: Unknown parameter 'user_i00000000000000000000' [ 1311.967670][T26871] syzkaller1: entered promiscuous mode [ 1311.967691][T26871] syzkaller1: entered allmulticast mode [ 1312.027988][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031d43c00: rx timeout, send abort [ 1312.528054][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031d43c00: abort rx timeout. Force session deactivation [ 1312.657098][T17601] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1312.789661][T17601] usb 3-1: device descriptor read/64, error -71 [ 1312.919522][T26890] fuse: Unknown parameter 'user_i00000000000000000000' [ 1313.027179][T17601] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1313.157944][T17601] usb 3-1: device descriptor read/64, error -71 [ 1313.297522][T17601] usb usb3-port1: attempt power cycle [ 1313.417901][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805eb62800: rx timeout, send abort [ 1313.469939][T26905] fuse: Bad value for 'fd' [ 1313.573680][T26902] syzkaller1: entered promiscuous mode [ 1313.573708][T26902] syzkaller1: entered allmulticast mode [ 1313.752976][T17601] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1313.767719][T17601] usb 3-1: device descriptor read/8, error -71 [ 1313.886528][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805eb63c00: rx timeout, send abort [ 1313.953132][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805eb62800: abort rx timeout. Force session deactivation [ 1314.020805][T17601] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1314.037787][T17601] usb 3-1: device descriptor read/8, error -71 [ 1314.124222][T26912] fuse: Unknown parameter 'user_id00000000000000000000' [ 1314.148800][T17601] usb usb3-port1: unable to enumerate USB device [ 1314.167205][T22201] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1314.204910][T26914] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8058'. [ 1314.325110][T26918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1314.337354][T22201] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1314.337381][T22201] usb 7-1: config 0 has no interface number 0 [ 1314.360699][T22201] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1314.360719][T22201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.360730][T22201] usb 7-1: Product: syz [ 1314.360737][T22201] usb 7-1: Manufacturer: syz [ 1314.360745][T22201] usb 7-1: SerialNumber: syz [ 1314.367565][T22201] usb 7-1: config 0 descriptor?? [ 1314.388240][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805eb63c00: abort rx timeout. Force session deactivation [ 1314.425029][T22201] usb 7-1: selecting invalid altsetting 1 [ 1314.425189][T22201] dvb_ttusb_budget: ttusb_init_controller: error [ 1314.425202][T22201] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1314.550880][T22201] DVB: Unable to find symbol stv0299_attach() [ 1314.591567][T22201] DVB: Unable to find symbol tda8083_attach() [ 1314.591582][T22201] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1314.662820][T22201] usb 7-1: USB disconnect, device number 23 [ 1314.917107][T17601] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1315.069483][T17601] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1315.070605][T17601] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1315.072884][T17601] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1315.072910][T17601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.072938][T17601] usb 2-1: Product: syz [ 1315.072952][T17601] usb 2-1: Manufacturer: syz [ 1315.072966][T17601] usb 2-1: SerialNumber: syz [ 1315.320069][T26933] fuse: Bad value for 'fd' [ 1315.348757][T17601] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1315.403142][T26935] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8067'. [ 1315.544619][T17601] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1315.544645][T17601] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1315.581002][T26941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.753758][T26942] syzkaller1: entered promiscuous mode [ 1315.753776][T26942] syzkaller1: entered allmulticast mode [ 1315.992122][T17601] usb 2-1: invalid uac2 rates [ 1315.992258][T17601] usb 2-1: invalid uac2 rates [ 1315.992688][T17601] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1315.992699][T17601] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1316.117712][T10481] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1316.188879][T17601] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1316.269760][T10481] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1316.269787][T10481] usb 7-1: config 0 has no interface number 0 [ 1316.272147][T10481] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1316.272174][T10481] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.272193][T10481] usb 7-1: Product: syz [ 1316.272207][T10481] usb 7-1: Manufacturer: syz [ 1316.272221][T10481] usb 7-1: SerialNumber: syz [ 1316.280753][T10481] usb 7-1: config 0 descriptor?? [ 1316.291760][T10481] usb 7-1: selecting invalid altsetting 1 [ 1316.372513][T17601] usb 2-1: USB disconnect, device number 10 [ 1316.386040][T10481] dvb_ttusb_budget: ttusb_init_controller: error [ 1316.386061][T10481] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1316.502836][T12123] udevd[12123]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1316.567957][T10481] DVB: Unable to find symbol stv0299_attach() [ 1316.666595][T26964] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8078'. [ 1316.685373][T10481] DVB: Unable to find symbol tda8083_attach() [ 1316.685388][T10481] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1316.737106][T10481] usb 7-1: USB disconnect, device number 24 [ 1316.790730][T26966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.122571][T26981] fuse: Invalid rootmode [ 1317.195628][T26988] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8088'. [ 1317.328934][T26994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.660595][T27012] fuse: Invalid rootmode [ 1317.672035][T22201] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1317.755829][T27014] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8099'. [ 1317.841375][T22201] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1317.841401][T22201] usb 3-1: config 0 has no interface number 0 [ 1317.843709][T22201] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1317.843738][T22201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.843757][T22201] usb 3-1: Product: syz [ 1317.843772][T22201] usb 3-1: Manufacturer: syz [ 1317.843786][T22201] usb 3-1: SerialNumber: syz [ 1317.857150][T22201] usb 3-1: config 0 descriptor?? [ 1317.883563][T22201] usb 3-1: selecting invalid altsetting 1 [ 1317.883752][T22201] dvb_ttusb_budget: ttusb_init_controller: error [ 1317.883765][T22201] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1317.891312][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888040f84400: rx timeout, send abort [ 1317.995437][T22201] DVB: Unable to find symbol stv0299_attach() [ 1318.089457][T22201] DVB: Unable to find symbol tda8083_attach() [ 1318.089466][T22201] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1318.119380][T22201] usb 3-1: USB disconnect, device number 79 [ 1318.365580][T27033] fuse: Invalid rootmode [ 1318.391370][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888040f84400: abort rx timeout. Force session deactivation [ 1318.394043][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888040f84800: rx timeout, send abort [ 1318.500271][T27035] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1318.894101][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888040f84800: abort rx timeout. Force session deactivation [ 1318.967550][ T32] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1319.141037][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 1319.143565][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1319.145751][ T32] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1319.159719][ T32] usb 3-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 1319.159748][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.159767][ T32] usb 3-1: Product: syz [ 1319.159782][ T32] usb 3-1: Manufacturer: syz [ 1319.159795][ T32] usb 3-1: SerialNumber: syz [ 1319.219638][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888041188c00: rx timeout, send abort [ 1319.265224][T27060] fuse: Bad value for 'rootmode' [ 1319.420215][ T32] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1319.446530][T27062] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8119'. [ 1319.623166][ T32] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1319.629208][ T32] usb 3-1: can't set first interface for hiFace device. [ 1319.629246][ T32] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1319.634700][ T32] usb 3-1: can't set first interface for hiFace device. [ 1319.634734][ T32] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1319.641596][ T32] usb 3-1: can't set first interface for hiFace device. [ 1319.641631][ T32] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1319.650001][ T32] usb 3-1: USB disconnect, device number 80 [ 1319.688659][T12123] udevd[12123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.719703][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888041188c00: abort rx timeout. Force session deactivation [ 1319.719864][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888041189000: rx timeout, send abort [ 1319.817457][T22201] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1319.955319][T27077] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8126'. [ 1319.982557][T22201] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1319.982585][T22201] usb 7-1: config 0 has no interface number 0 [ 1319.986553][T22201] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1319.986579][T22201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.986597][T22201] usb 7-1: Product: syz [ 1319.986611][T22201] usb 7-1: Manufacturer: syz [ 1319.986625][T22201] usb 7-1: SerialNumber: syz [ 1320.010561][T22201] usb 7-1: config 0 descriptor?? [ 1320.037496][ T5595] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1320.041228][T22201] usb 7-1: selecting invalid altsetting 1 [ 1320.041387][T22201] dvb_ttusb_budget: ttusb_init_controller: error [ 1320.041401][T22201] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1320.114091][T27079] fuse: Bad value for 'rootmode' [ 1320.153037][T22201] DVB: Unable to find symbol stv0299_attach() [ 1320.167340][ T5595] usb 1-1: device descriptor read/64, error -71 [ 1320.205606][T22201] DVB: Unable to find symbol tda8083_attach() [ 1320.205616][T22201] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1320.219916][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888041189000: abort rx timeout. Force session deactivation [ 1320.265713][T22201] usb 7-1: USB disconnect, device number 25 [ 1320.407177][ T5595] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1320.537121][ T5595] usb 1-1: device descriptor read/64, error -71 [ 1320.647704][ T5595] usb usb1-port1: attempt power cycle [ 1320.768461][T27086] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1320.844867][T27089] batadv_slave_1: entered promiscuous mode [ 1320.845508][T27087] batadv_slave_1: left promiscuous mode [ 1320.987142][ T5595] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1321.008324][ T5595] usb 1-1: device descriptor read/8, error -71 [ 1321.070311][T27098] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8135'. [ 1321.130891][T27100] fuse: Bad value for 'rootmode' [ 1321.257367][ T5595] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1321.279847][ T5595] usb 1-1: device descriptor read/8, error -71 [ 1321.287229][ T5598] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1321.388109][ T5595] usb usb1-port1: unable to enumerate USB device [ 1321.437785][ T5598] usb 7-1: Using ep0 maxpacket: 32 [ 1321.439974][ T5598] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1321.441118][ T5598] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1321.443269][ T5598] usb 7-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 1321.443295][ T5598] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.443314][ T5598] usb 7-1: Product: syz [ 1321.443327][ T5598] usb 7-1: Manufacturer: syz [ 1321.443338][ T5598] usb 7-1: SerialNumber: syz [ 1321.497656][T22201] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1321.689159][T22201] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1321.689233][T22201] usb 2-1: config 0 has no interface number 0 [ 1321.691522][T22201] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1321.691550][T22201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.691647][T22201] usb 2-1: Product: syz [ 1321.691656][T22201] usb 2-1: Manufacturer: syz [ 1321.691663][T22201] usb 2-1: SerialNumber: syz [ 1321.741106][T22201] usb 2-1: config 0 descriptor?? [ 1321.764078][T22201] usb 2-1: selecting invalid altsetting 1 [ 1321.764192][T22201] dvb_ttusb_budget: ttusb_init_controller: error [ 1321.764200][T22201] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1321.775306][ T5598] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1321.853516][T22201] DVB: Unable to find symbol stv0299_attach() [ 1321.877321][ T5598] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1321.892383][ T5598] usb 7-1: can't set first interface for hiFace device. [ 1321.892422][ T5598] snd-usb-hiface 7-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1321.910026][ T5598] usb 7-1: can't set first interface for hiFace device. [ 1321.910064][ T5598] snd-usb-hiface 7-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1321.923036][ T5598] usb 7-1: can't set first interface for hiFace device. [ 1321.923074][ T5598] snd-usb-hiface 7-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1321.936592][ T5598] usb 7-1: USB disconnect, device number 26 [ 1321.957664][T22201] DVB: Unable to find symbol tda8083_attach() [ 1321.957679][T22201] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1322.014699][ T5599] usb 2-1: USB disconnect, device number 11 [ 1322.067092][T12123] udevd[12123]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1322.242035][T27115] batadv_slave_1: entered promiscuous mode [ 1322.242506][T27114] batadv_slave_1: left promiscuous mode [ 1322.350661][T27119] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8144'. [ 1322.554867][T27128] fuse: Unknown parameter 'use00000000000000000000' [ 1322.708674][T27136] batadv_slave_1: entered promiscuous mode [ 1322.709260][T27134] batadv_slave_1: left promiscuous mode [ 1322.851949][T27140] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8154'. [ 1323.112598][T27152] fuse: Unknown parameter 'user_i00000000000000000000' [ 1323.207353][T17601] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1323.300974][T27156] batadv_slave_1: entered promiscuous mode [ 1323.301488][T27156] batadv_slave_1: left promiscuous mode [ 1323.324023][T27154] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1323.324049][T27154] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1323.326432][T27154] vhci_hcd vhci_hcd.0: Device attached [ 1323.359196][T17601] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1323.359223][T17601] usb 1-1: config 0 has no interface number 0 [ 1323.361872][T17601] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1323.361900][T17601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.361918][T17601] usb 1-1: Product: syz [ 1323.361932][T17601] usb 1-1: Manufacturer: syz [ 1323.361946][T17601] usb 1-1: SerialNumber: syz [ 1323.382848][T17601] usb 1-1: config 0 descriptor?? [ 1323.403424][T27158] vhci_hcd: connection closed [ 1323.404005][ T57] vhci_hcd vhci_hcd.6: stop threads [ 1323.404028][ T57] vhci_hcd vhci_hcd.6: release socket [ 1323.404065][ T57] vhci_hcd vhci_hcd.6: disconnect device [ 1323.452536][T17601] usb 1-1: selecting invalid altsetting 1 [ 1323.452689][T17601] dvb_ttusb_budget: ttusb_init_controller: error [ 1323.452703][T17601] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1323.544295][T17601] DVB: Unable to find symbol stv0299_attach() [ 1323.611488][T17601] DVB: Unable to find symbol tda8083_attach() [ 1323.611505][T17601] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1323.634811][T17601] usb 1-1: USB disconnect, device number 99 [ 1324.143474][T27179] fuse: Unknown parameter 'user_i00000000000000000000' [ 1324.830899][T27195] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1324.830925][T27195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1324.833382][T27195] vhci_hcd vhci_hcd.0: Device attached [ 1324.901959][T27196] vhci_hcd: connection closed [ 1324.902978][ T93] vhci_hcd vhci_hcd.6: stop threads [ 1324.902993][ T93] vhci_hcd vhci_hcd.6: release socket [ 1324.903018][ T93] vhci_hcd vhci_hcd.6: disconnect device [ 1325.139202][T27203] fuse: Unknown parameter 'user_i00000000000000000000' [ 1325.347107][T10481] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1325.500383][T10481] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1325.500412][T10481] usb 1-1: config 0 has no interface number 0 [ 1325.504822][T10481] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1325.504851][T10481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.504871][T10481] usb 1-1: Product: syz [ 1325.504885][T10481] usb 1-1: Manufacturer: syz [ 1325.504900][T10481] usb 1-1: SerialNumber: syz [ 1325.571924][T10481] usb 1-1: config 0 descriptor?? [ 1325.592098][T10481] usb 1-1: selecting invalid altsetting 1 [ 1325.592270][T10481] dvb_ttusb_budget: ttusb_init_controller: error [ 1325.592285][T10481] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1325.685822][T10481] DVB: Unable to find symbol stv0299_attach() [ 1325.755630][T10481] DVB: Unable to find symbol tda8083_attach() [ 1325.755648][T10481] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1325.792411][T10481] usb 1-1: USB disconnect, device number 100 [ 1325.957118][T22201] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1326.163203][T22201] usb 3-1: device descriptor read/64, error -71 [ 1326.457642][T22201] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1326.486063][T27225] fuse: Unknown parameter 'user_id00000000000000000000' [ 1326.635412][T22201] usb 3-1: device descriptor read/64, error -71 [ 1326.760729][T27228] fuse: Unknown parameter 'user_id00000000000000000000' [ 1326.767498][T22201] usb usb3-port1: attempt power cycle [ 1327.157471][T22201] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1327.177756][T22201] usb 3-1: device descriptor read/8, error -71 [ 1327.472256][T22201] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1327.491821][T22201] usb 3-1: device descriptor read/8, error -71 [ 1327.649208][T22201] usb usb3-port1: unable to enumerate USB device [ 1327.972964][T22201] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1328.070400][T27250] fuse: Bad value for 'fd' [ 1328.132455][T22201] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1328.132483][T22201] usb 7-1: config 0 has no interface number 0 [ 1328.134724][T22201] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1328.134752][T22201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.134772][T22201] usb 7-1: Product: syz [ 1328.134787][T22201] usb 7-1: Manufacturer: syz [ 1328.134802][T22201] usb 7-1: SerialNumber: syz [ 1328.193668][T22201] usb 7-1: config 0 descriptor?? [ 1328.211309][T22201] usb 7-1: selecting invalid altsetting 1 [ 1328.211472][T22201] dvb_ttusb_budget: ttusb_init_controller: error [ 1328.211485][T22201] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1328.296041][T22201] DVB: Unable to find symbol stv0299_attach() [ 1328.354066][T22201] DVB: Unable to find symbol tda8083_attach() [ 1328.354077][T22201] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1328.403002][T10481] usb 7-1: USB disconnect, device number 27 [ 1329.011757][T27270] binder: BINDER_SET_CONTEXT_MGR already set [ 1329.011771][T27270] binder: 27269:27270 ioctl 4018620d 200000004a80 returned -16 [ 1329.024454][T27272] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8208'. [ 1329.111506][T27275] fuse: Bad value for 'fd' [ 1329.587200][T10481] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1329.614872][T27290] fuse: Unknown parameter '0x0000000000000003' [ 1329.637813][T22201] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1329.694779][T27292] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8217'. [ 1329.717974][T10481] usb 7-1: device descriptor read/64, error -71 [ 1329.789459][T22201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1329.790780][T22201] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1329.802818][T22201] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1329.802846][T22201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.802866][T22201] usb 2-1: Product: syz [ 1329.802879][T22201] usb 2-1: Manufacturer: syz [ 1329.802893][T22201] usb 2-1: SerialNumber: syz [ 1329.904092][T27297] fuse: Bad value for 'fd' [ 1329.977168][T10481] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1330.062139][T22201] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1330.137159][T10481] usb 7-1: device descriptor read/64, error -71 [ 1330.247575][T10481] usb usb7-port1: attempt power cycle [ 1330.256724][T22201] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1330.256741][T22201] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1330.587206][T10481] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1330.597241][ T5599] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1330.618829][T10481] usb 7-1: device descriptor read/8, error -71 [ 1330.715900][T22201] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1330.822114][ T5599] usb 3-1: device descriptor read/64, error -71 [ 1330.851665][T22201] usb 2-1: USB disconnect, device number 12 [ 1330.863676][T10481] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1330.877806][T10481] usb 7-1: device descriptor read/8, error -71 [ 1330.977883][T12123] udevd[12123]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1331.009380][T10481] usb usb7-port1: unable to enumerate USB device [ 1331.189203][ T5599] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1331.301497][T27310] fuse: Unknown parameter '0x0000000000000003' [ 1331.335345][T27312] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8226'. [ 1331.347431][ T5599] usb 3-1: device descriptor read/64, error -71 [ 1331.383422][T27314] binder: BINDER_SET_CONTEXT_MGR already set [ 1331.383436][T27314] binder: 27313:27314 ioctl 4018620d 200000004a80 returned -16 [ 1331.515693][ T5599] usb usb3-port1: attempt power cycle [ 1331.529854][T27317] fuse: Unknown parameter '0x0000000000000003' [ 1331.857257][ T5599] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1331.893964][ T5599] usb 3-1: device descriptor read/8, error -71 [ 1332.137077][ T5599] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1332.157590][ T5599] usb 3-1: device descriptor read/8, error -71 [ 1332.278565][ T5599] usb usb3-port1: unable to enumerate USB device [ 1332.757194][ T5599] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1332.759414][T27333] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8235'. [ 1332.819782][T27335] fuse: Unknown parameter '0x0000000000000003' [ 1332.890492][T27337] fuse: Unknown parameter '0x0000000000000003' [ 1332.917175][ T5599] usb 7-1: Using ep0 maxpacket: 16 [ 1332.918977][ T5599] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 1332.919002][ T5599] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.919021][ T5599] usb 7-1: config 0 has no interface number 0 [ 1332.919063][ T5599] usb 7-1: config 0 interface 143 has no altsetting 0 [ 1332.920742][ T5599] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1332.920768][ T5599] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1332.920786][ T5599] usb 7-1: Product: syz [ 1332.920794][ T5599] usb 7-1: SerialNumber: syz [ 1332.925378][ T5599] usb 7-1: config 0 descriptor?? [ 1333.142905][T17601] usb 7-1: USB disconnect, device number 32 [ 1333.417628][ T32] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1333.557143][ T32] usb 2-1: device descriptor read/64, error -71 [ 1333.589239][T27352] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8244'. [ 1333.624580][T27354] fuse: Unknown parameter '0x0000000000000003' [ 1333.707725][T27356] fuse: Unknown parameter '0x0000000000000003' [ 1333.749957][T27358] syzkaller1: entered promiscuous mode [ 1333.749974][T27358] syzkaller1: entered allmulticast mode [ 1333.798648][ T32] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1333.978191][ T32] usb 2-1: device descriptor read/64, error -71 [ 1334.089092][ T32] usb usb2-port1: attempt power cycle [ 1334.105728][T27365] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1334.105749][T27365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1334.113331][T27365] vhci_hcd vhci_hcd.0: Device attached [ 1334.149781][T27366] vhci_hcd: connection closed [ 1334.150190][ T57] vhci_hcd vhci_hcd.0: stop threads [ 1334.150214][ T57] vhci_hcd vhci_hcd.0: release socket [ 1334.150253][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 1334.406164][T27373] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8253'. [ 1334.437204][ T32] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1334.458311][ T32] usb 2-1: device descriptor read/8, error -71 [ 1334.482858][ T37] audit: type=1326 audit(1783392116.852:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27374 comm="syz.2.8254" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f312b1ade59 code=0x0 [ 1334.692546][T27379] fuse: Unknown parameter '0x0000000000000003' [ 1334.697519][ T32] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1334.727952][ T32] usb 2-1: device descriptor read/8, error -71 [ 1334.737587][T27381] fuse: Unknown parameter '0x0000000000000003' [ 1334.848147][ T32] usb usb2-port1: unable to enumerate USB device [ 1334.955338][T27387] syzkaller1: entered promiscuous mode [ 1334.955353][T27387] syzkaller1: entered allmulticast mode [ 1335.037159][T17601] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1335.191971][T17601] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.192026][T17601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1335.192052][T17601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1335.192073][T17601] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1335.194532][T17601] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1335.194557][T17601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.194584][T17601] usb 7-1: Product: syz [ 1335.194595][T17601] usb 7-1: Manufacturer: syz [ 1335.194610][T17601] usb 7-1: SerialNumber: syz [ 1335.293714][T17601] usb 7-1: config 0 descriptor?? [ 1335.320257][T17601] adutux 7-1:0.0: interrupt endpoints not found [ 1335.612148][T27394] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8262'. [ 1336.716179][T27408] fuse: Unknown parameter '0x0000000000000003' [ 1336.917407][ T32] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1337.047227][ T5599] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1337.047383][ T32] usb 3-1: device descriptor read/64, error -71 [ 1337.151096][T27414] syzkaller1: entered promiscuous mode [ 1337.151113][T27414] syzkaller1: entered allmulticast mode [ 1337.197331][ T5599] usb 1-1: Using ep0 maxpacket: 32 [ 1337.199634][ T5599] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1337.201020][ T5599] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1337.203697][ T5599] usb 1-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 1337.203725][ T5599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.203745][ T5599] usb 1-1: Product: syz [ 1337.203759][ T5599] usb 1-1: Manufacturer: syz [ 1337.203766][ T5599] usb 1-1: SerialNumber: syz [ 1337.287234][ T32] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1337.447310][ T32] usb 3-1: device descriptor read/64, error -71 [ 1337.493007][ T5599] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1337.530020][ T5599] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1337.530887][ T5599] usb 1-1: can't set first interface for hiFace device. [ 1337.530908][ T5599] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1337.534569][ T5599] usb 1-1: can't set first interface for hiFace device. [ 1337.534589][ T5599] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1337.544295][ T5599] usb 1-1: can't set first interface for hiFace device. [ 1337.544333][ T5599] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1337.548630][ T5599] usb 1-1: USB disconnect, device number 101 [ 1337.558331][ T32] usb usb3-port1: attempt power cycle [ 1337.632058][T12123] udevd[12123]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.798368][ T5599] usb 7-1: USB disconnect, device number 33 [ 1337.904809][T27419] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8271'. [ 1337.907335][ T32] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1337.939963][ T32] usb 3-1: device descriptor read/8, error -71 [ 1338.117892][T27427] fuse: Unknown parameter '0x0000000000000003' [ 1338.138744][T22201] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1338.188018][ T32] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1338.220638][ T32] usb 3-1: device descriptor read/8, error -71 [ 1338.299233][T22201] usb 2-1: Using ep0 maxpacket: 16 [ 1338.307794][T22201] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1338.307822][T22201] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.307843][T22201] usb 2-1: config 0 has no interface number 0 [ 1338.307874][T22201] usb 2-1: config 0 interface 143 has no altsetting 0 [ 1338.309479][T22201] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1338.309505][T22201] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1338.309523][T22201] usb 2-1: Product: syz [ 1338.309531][T22201] usb 2-1: SerialNumber: syz [ 1338.320277][T22201] usb 2-1: config 0 descriptor?? [ 1338.327948][ T32] usb usb3-port1: unable to enumerate USB device [ 1338.603768][T22201] usb 2-1: USB disconnect, device number 17 [ 1338.794318][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806eab1c00: rx timeout, send abort [ 1339.085955][T27436] syzkaller1: entered promiscuous mode [ 1339.085981][T27436] syzkaller1: entered allmulticast mode [ 1339.297192][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806eab1c00: abort rx timeout. Force session deactivation [ 1339.449377][T17601] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1339.483531][T27442] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8281'. [ 1339.655115][T27444] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8282'. [ 1339.678966][T17601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1339.678998][T17601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1339.679020][T17601] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1339.682661][T17601] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1339.682692][T17601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.682711][T17601] usb 7-1: Product: syz [ 1339.682725][T17601] usb 7-1: Manufacturer: syz [ 1339.682738][T17601] usb 7-1: SerialNumber: syz [ 1339.688189][T17601] usb 7-1: config 0 descriptor?? [ 1339.695798][T17601] adutux 7-1:0.0: interrupt endpoints not found [ 1339.833853][T27446] fuse: Unknown parameter 'fd0x0000000000000003' [ 1339.863669][T27448] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1339.863686][T27448] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1339.866032][T27448] vhci_hcd vhci_hcd.0: Device attached [ 1339.908277][T27449] vhci_hcd: connection closed [ 1339.911739][T15049] vhci_hcd vhci_hcd.1: stop threads [ 1339.911757][T15049] vhci_hcd vhci_hcd.1: release socket [ 1339.911781][T15049] vhci_hcd vhci_hcd.1: disconnect device [ 1340.297250][ T32] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1340.459882][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 1340.461913][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.461967][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1340.464493][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1340.464523][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.464543][ T32] usb 3-1: Product: syz [ 1340.464557][ T32] usb 3-1: Manufacturer: syz [ 1340.464571][ T32] usb 3-1: SerialNumber: syz [ 1340.538419][ T32] usb 3-1: config 0 descriptor?? [ 1340.731169][T27466] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8291'. [ 1341.007314][T10481] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1341.043494][T27470] fuse: Unknown parameter 'fd0x0000000000000003' [ 1341.157100][T10481] usb 2-1: Using ep0 maxpacket: 16 [ 1341.160592][T10481] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1341.160618][T10481] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.160637][T10481] usb 2-1: config 0 has no interface number 0 [ 1341.160679][T10481] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1341.162266][T10481] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1341.162291][T10481] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1341.162311][T10481] usb 2-1: Product: syz [ 1341.162323][T10481] usb 2-1: SerialNumber: syz [ 1341.176767][T10481] usb 2-1: config 0 descriptor?? [ 1341.403781][T10481] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1341.410835][T10481] usb 2-1: USB disconnect, device number 18 [ 1341.959266][T27477] syzkaller1: entered promiscuous mode [ 1341.959282][T27477] syzkaller1: entered allmulticast mode [ 1342.199713][T10481] usb 7-1: USB disconnect, device number 34 [ 1342.278624][ T5599] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1342.442219][ T5599] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.442270][ T5599] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1342.498747][ T5599] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1342.498776][ T5599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.498795][ T5599] usb 1-1: Product: syz [ 1342.498807][ T5599] usb 1-1: Manufacturer: syz [ 1342.498821][ T5599] usb 1-1: SerialNumber: syz [ 1342.502077][T27488] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8300'. [ 1342.503826][ T5599] usb 1-1: config 0 descriptor?? [ 1342.557551][ T5599] adutux 1-1:0.0: interrupt endpoints not found [ 1342.736558][T27494] fuse: Unknown parameter 'fd0x0000000000000003' [ 1343.073470][T25497] usb 3-1: USB disconnect, device number 93 [ 1343.088433][ T32] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1343.248783][ T32] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.248810][ T32] usb 7-1: config 0 has no interfaces? [ 1343.248839][ T32] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1343.248858][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.252144][ T32] usb 7-1: config 0 descriptor?? [ 1343.447176][T25497] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1343.635801][T25497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1343.635897][T25497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1343.635910][T25497] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1343.661753][T25497] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1343.661781][T25497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.661801][T25497] usb 3-1: Product: syz [ 1343.661815][T25497] usb 3-1: Manufacturer: syz [ 1343.661829][T25497] usb 3-1: SerialNumber: syz [ 1343.711790][T25497] usb 3-1: config 0 descriptor?? [ 1343.724960][T25497] adutux 3-1:0.0: interrupt endpoints not found [ 1343.848585][T25497] usb 7-1: USB disconnect, device number 35 [ 1343.857183][T22201] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1344.017160][T22201] usb 2-1: Using ep0 maxpacket: 32 [ 1344.026624][T22201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1344.043526][T22201] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1344.043565][T22201] usb 2-1: can't read configurations, error -71 [ 1344.451130][T27510] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1344.451147][T27510] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1344.452735][T27510] vhci_hcd vhci_hcd.0: Device attached [ 1344.503627][T27511] vhci_hcd: connection closed [ 1344.503986][ T57] vhci_hcd vhci_hcd.6: stop threads [ 1344.504004][ T57] vhci_hcd vhci_hcd.6: release socket [ 1344.504029][ T57] vhci_hcd vhci_hcd.6: disconnect device [ 1344.628946][T27516] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8309'. [ 1345.023714][ T32] usb 1-1: USB disconnect, device number 102 [ 1345.192886][T27529] binder: BINDER_SET_CONTEXT_MGR already set [ 1345.192901][T27529] binder: 27527:27529 ioctl 4018620d 200000004a80 returned -16 [ 1345.397147][T25497] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1345.547095][T25497] usb 7-1: Using ep0 maxpacket: 16 [ 1345.549431][T25497] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.549476][T25497] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1345.551823][T25497] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1345.551845][T25497] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.551856][T25497] usb 7-1: Product: syz [ 1345.551863][T25497] usb 7-1: Manufacturer: syz [ 1345.551870][T25497] usb 7-1: SerialNumber: syz [ 1345.557176][T25497] usb 7-1: config 0 descriptor?? [ 1346.142129][ T32] usb 3-1: USB disconnect, device number 94 [ 1346.294459][T25497] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1346.447235][T25497] usb 2-1: Using ep0 maxpacket: 16 [ 1346.452276][T25497] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1346.452384][T25497] usb 2-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1346.452404][T25497] usb 2-1: config 0 has no interface number 0 [ 1346.452446][T25497] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1346.454098][T25497] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1346.454124][T25497] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1346.454142][T25497] usb 2-1: Product: syz [ 1346.454156][T25497] usb 2-1: SerialNumber: syz [ 1346.464322][T25497] usb 2-1: config 0 descriptor?? [ 1346.536606][ T32] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1346.556149][T25497] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1346.640072][T27546] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1346.640089][T27546] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1346.640592][T27546] vhci_hcd vhci_hcd.0: Device attached [ 1346.684665][ T11] usb 2-1: USB disconnect, device number 21 [ 1346.705761][T27547] vhci_hcd: connection closed [ 1346.716790][T15049] vhci_hcd vhci_hcd.0: stop threads [ 1346.716826][T15049] vhci_hcd vhci_hcd.0: release socket [ 1346.716864][T15049] vhci_hcd vhci_hcd.0: disconnect device [ 1346.742221][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1346.751408][ T32] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1346.765519][ T32] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1346.765536][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.765546][ T32] usb 3-1: Product: syz [ 1346.765554][ T32] usb 3-1: Manufacturer: syz [ 1346.765561][ T32] usb 3-1: SerialNumber: syz [ 1347.016562][ T32] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1347.215035][ T32] usb 3-1: 2:1 : bogus bTerminalLink 2 [ 1347.479810][ T5599] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1347.628981][ T5599] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.629034][ T5599] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1347.632594][ T5599] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1347.632624][ T5599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.632644][ T5599] usb 2-1: Product: syz [ 1347.632659][ T5599] usb 2-1: Manufacturer: syz [ 1347.632673][ T5599] usb 2-1: SerialNumber: syz [ 1347.706888][ T5599] usb 2-1: config 0 descriptor?? [ 1347.719446][ T5599] adutux 2-1:0.0: interrupt endpoints not found [ 1348.173398][T25497] usb 7-1: USB disconnect, device number 36 [ 1348.567262][T25497] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1348.719626][T25497] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1348.719666][T25497] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1348.719678][T25497] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1348.721992][T25497] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1348.722020][T25497] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.722039][T25497] usb 7-1: Product: syz [ 1348.722054][T25497] usb 7-1: Manufacturer: syz [ 1348.722065][T25497] usb 7-1: SerialNumber: syz [ 1348.727372][T25497] usb 7-1: config 0 descriptor?? [ 1348.745680][T25497] adutux 7-1:0.0: interrupt endpoints not found [ 1349.066525][T27576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8331'. [ 1349.243759][ T11] usb 3-1: USB disconnect, device number 95 [ 1349.387945][T25497] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1349.537264][T25497] usb 1-1: Using ep0 maxpacket: 32 [ 1349.539743][T25497] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1349.539770][T25497] usb 1-1: config 0 has no interface number 0 [ 1349.542055][T25497] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1349.542082][T25497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.542102][T25497] usb 1-1: Product: syz [ 1349.542116][T25497] usb 1-1: Manufacturer: syz [ 1349.542131][T25497] usb 1-1: SerialNumber: syz [ 1349.545951][T25497] usb 1-1: config 0 descriptor?? [ 1350.047356][T25497] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1350.047387][T25497] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1350.227139][ T32] usb 2-1: USB disconnect, device number 22 [ 1350.456051][T25497] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1350.456365][T25497] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1350.467155][T25497] usb 1-1: USB disconnect, device number 103 [ 1350.798359][ T11] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1350.947122][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 1350.950415][ T11] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1350.950441][ T11] usb 3-1: config 0 has no interface number 0 [ 1350.950474][ T11] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1350.952226][ T11] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1350.952252][ T11] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1350.952271][ T11] usb 3-1: Product: syz [ 1350.952280][ T11] usb 3-1: SerialNumber: syz [ 1350.978995][ T11] usb 3-1: config 0 descriptor?? [ 1351.002386][ T11] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 1351.230903][ T11] usb 3-1: USB disconnect, device number 96 [ 1351.240544][T17601] usb 7-1: USB disconnect, device number 37 [ 1351.380040][T27603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8342'. [ 1352.327121][ T5598] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1352.479739][ T5598] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.479794][ T5598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1352.479819][ T5598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1352.479840][ T5598] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1352.482070][ T5598] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1352.482087][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.482097][ T5598] usb 2-1: Product: syz [ 1352.482105][ T5598] usb 2-1: Manufacturer: syz [ 1352.482112][ T5598] usb 2-1: SerialNumber: syz [ 1352.570796][ T5598] usb 2-1: config 0 descriptor?? [ 1352.588111][ T5598] adutux 2-1:0.0: interrupt endpoints not found [ 1352.717176][ T5599] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1352.830996][T27631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1352.877127][ T5599] usb 1-1: Using ep0 maxpacket: 16 [ 1352.879839][ T5599] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1352.910229][ T5599] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1352.910259][ T5599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.910271][ T5599] usb 1-1: Product: syz [ 1352.910278][ T5599] usb 1-1: Manufacturer: syz [ 1352.910286][ T5599] usb 1-1: SerialNumber: syz [ 1352.915114][ T5599] usb 1-1: config 0 descriptor?? [ 1353.237166][T17601] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1353.387163][T17601] usb 3-1: Using ep0 maxpacket: 16 [ 1353.388940][T17601] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1353.388964][T17601] usb 3-1: config 0 has no interface number 0 [ 1353.388998][T17601] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1353.389012][T17601] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1353.390650][T17601] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1353.390677][T17601] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1353.390698][T17601] usb 3-1: Product: syz [ 1353.390712][T17601] usb 3-1: SerialNumber: syz [ 1353.394345][T17601] usb 3-1: config 0 descriptor?? [ 1353.401796][T17601] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1353.405306][T17601] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input59 [ 1353.612347][ C0] cm109_urb_ctl_callback: 1 callbacks suppressed [ 1353.612375][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.612609][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.612842][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.613071][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.613297][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.613514][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.613731][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.613948][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.614170][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.614391][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1353.632177][T17601] usb 3-1: USB disconnect, device number 97 [ 1353.632251][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1353.760201][T17601] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1355.069936][T25497] usb 2-1: USB disconnect, device number 23 [ 1355.345000][T27667] netlink: 84 bytes leftover after parsing attributes in process `syz.6.8365'. [ 1355.535132][T17601] usb 1-1: USB disconnect, device number 104 [ 1355.604315][T27671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8367'. [ 1357.097640][ T5599] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1357.258974][ T5599] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.259047][ T5599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1357.259065][ T5599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1357.259077][ T5599] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1357.261252][ T5599] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1357.261280][ T5599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.261299][ T5599] usb 3-1: Product: syz [ 1357.261313][ T5599] usb 3-1: Manufacturer: syz [ 1357.261324][ T5599] usb 3-1: SerialNumber: syz [ 1357.264462][ T5599] usb 3-1: config 0 descriptor?? [ 1357.360886][ T5599] adutux 3-1:0.0: interrupt endpoints not found [ 1357.467079][ T11] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1357.617194][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 1357.622656][ T11] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1357.624741][ T11] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1357.624768][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.624787][ T11] usb 2-1: Product: syz [ 1357.624801][ T11] usb 2-1: Manufacturer: syz [ 1357.624815][ T11] usb 2-1: SerialNumber: syz [ 1357.636568][ T11] usb 2-1: config 0 descriptor?? [ 1357.731673][T27698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8376'. [ 1358.297128][ T11] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1358.452624][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1358.461884][ T11] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1358.464181][ T11] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1358.464209][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.464229][ T11] usb 7-1: Product: syz [ 1358.464239][ T11] usb 7-1: Manufacturer: syz [ 1358.464247][ T11] usb 7-1: SerialNumber: syz [ 1358.732423][ T11] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1358.836925][T27715] input: syz0 as /devices/virtual/input/input60 [ 1358.924198][ T11] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1359.836448][ T11] usb 3-1: USB disconnect, device number 98 [ 1360.321677][T22201] usb 2-1: USB disconnect, device number 24 [ 1360.371686][T27741] input: syz0 as /devices/virtual/input/input61 [ 1360.938498][T22201] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1361.118210][ T5598] usb 7-1: USB disconnect, device number 38 [ 1361.149588][T22201] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.149642][T22201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1361.149667][T22201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1361.149688][T22201] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1361.154480][T22201] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1361.154506][T22201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.154526][T22201] usb 3-1: Product: syz [ 1361.154540][T22201] usb 3-1: Manufacturer: syz [ 1361.154554][T22201] usb 3-1: SerialNumber: syz [ 1361.170196][T22201] usb 3-1: config 0 descriptor?? [ 1361.178369][T22201] adutux 3-1:0.0: interrupt endpoints not found [ 1361.207466][ T5599] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1361.398002][ T5599] usb 2-1: Using ep0 maxpacket: 16 [ 1361.406472][ T5599] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1361.428401][ T5599] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1361.428426][ T5599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.428436][ T5599] usb 2-1: Product: syz [ 1361.428444][ T5599] usb 2-1: Manufacturer: syz [ 1361.428451][ T5599] usb 2-1: SerialNumber: syz [ 1361.486246][ T5599] usb 2-1: config 0 descriptor?? [ 1361.662760][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.662857][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.847122][T17601] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1362.019714][T17601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1362.019747][T17601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1362.019769][T17601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1362.022056][T17601] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1362.022084][T17601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.022102][T17601] usb 7-1: Product: syz [ 1362.022116][T17601] usb 7-1: Manufacturer: syz [ 1362.022130][T17601] usb 7-1: SerialNumber: syz [ 1362.099608][T17601] usb 7-1: config 0 descriptor?? [ 1362.327576][T17601] adutux 7-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1362.358706][T17601] usb 7-1: USB disconnect, device number 39 [ 1362.837330][ T5599] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1362.997176][ T5599] usb 1-1: Using ep0 maxpacket: 16 [ 1362.998900][ T5599] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1362.998926][ T5599] usb 1-1: config 0 has no interface number 0 [ 1362.998969][ T5599] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1362.998985][ T5599] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1363.001216][ T5599] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1363.001245][ T5599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.001264][ T5599] usb 1-1: Product: syz [ 1363.001278][ T5599] usb 1-1: Manufacturer: syz [ 1363.001289][ T5599] usb 1-1: SerialNumber: syz [ 1363.009337][ T5599] usb 1-1: config 0 descriptor?? [ 1363.037214][T27787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1363.037346][T27787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1363.127130][T22201] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1363.279767][T22201] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1363.281074][T22201] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1363.284382][T22201] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1363.284410][T22201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.284480][T22201] usb 7-1: Product: syz [ 1363.284495][T22201] usb 7-1: Manufacturer: syz [ 1363.284509][T22201] usb 7-1: SerialNumber: syz [ 1363.329173][T27787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1363.329479][T27787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1363.530858][ T5599] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1363.531099][ T5599] asix 1-1:0.34: probe with driver asix failed with error -61 [ 1363.559774][T22201] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1363.669337][ T5599] usb 3-1: USB disconnect, device number 99 [ 1363.759008][T22201] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1364.031614][T25497] usb 2-1: USB disconnect, device number 25 [ 1365.537123][T22201] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1365.547086][T10481] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1365.606674][ T5599] usb 1-1: USB disconnect, device number 105 [ 1365.690325][T22201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1365.690358][T22201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1365.690380][T22201] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1365.693193][T22201] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1365.693221][T22201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.693240][T22201] usb 2-1: Product: syz [ 1365.693250][T22201] usb 2-1: Manufacturer: syz [ 1365.693257][T22201] usb 2-1: SerialNumber: syz [ 1365.707035][T10481] usb 3-1: Using ep0 maxpacket: 16 [ 1365.710855][T22201] usb 2-1: config 0 descriptor?? [ 1365.755928][T10481] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1365.765199][T22201] adutux 2-1:0.0: interrupt endpoints not found [ 1365.806186][T10481] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1365.806216][T10481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.806235][T10481] usb 3-1: Product: syz [ 1365.806248][T10481] usb 3-1: Manufacturer: syz [ 1365.806261][T10481] usb 3-1: SerialNumber: syz [ 1365.844926][T10481] usb 3-1: config 0 descriptor?? [ 1365.896179][ T5599] usb 7-1: USB disconnect, device number 40 [ 1366.037169][T22201] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1366.189024][T22201] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1366.189052][T22201] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1366.189071][T22201] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1366.189099][T22201] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1366.190677][T22201] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1366.190703][T22201] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1366.190723][T22201] usb 1-1: Product: syz [ 1366.190736][T22201] usb 1-1: Manufacturer: syz [ 1366.246845][T22201] cdc_wdm 1-1:1.0: skipping garbage [ 1366.246884][T22201] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1366.445201][T22201] usb 1-1: USB disconnect, device number 106 [ 1368.077122][T25497] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1368.249252][T25497] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1368.250432][T25497] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1368.252569][T25497] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1368.252596][T25497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.252616][T25497] usb 1-1: Product: syz [ 1368.252630][T25497] usb 1-1: Manufacturer: syz [ 1368.252639][T25497] usb 1-1: SerialNumber: syz [ 1368.296263][T17601] usb 2-1: USB disconnect, device number 26 [ 1368.423584][T10481] usb 3-1: USB disconnect, device number 100 [ 1368.552063][T25497] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1368.735902][T25497] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1368.776052][T27864] binder: 27863:27864 ioctl 4018620d 0 returned -22 [ 1368.997105][T10481] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1369.148852][T10481] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1369.148881][T10481] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1369.148901][T10481] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1369.148931][T10481] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1369.150508][T10481] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1369.150535][T10481] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1369.150555][T10481] usb 3-1: Product: syz [ 1369.150568][T10481] usb 3-1: Manufacturer: syz [ 1369.162280][T10481] cdc_wdm 3-1:1.0: skipping garbage [ 1369.162321][T10481] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1369.363432][T22201] usb 3-1: USB disconnect, device number 101 [ 1369.661184][ T5605] Bluetooth: hci4: command 0x1003 tx timeout [ 1369.661465][T25866] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1370.544890][T27885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1370.879726][T17601] usb 1-1: USB disconnect, device number 107 [ 1371.567199][T17601] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1371.740072][T17601] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1371.740102][T17601] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1371.740124][T17601] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1371.740181][T17601] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1371.746018][T17601] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1371.746048][T17601] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1371.746068][T17601] usb 7-1: Product: syz [ 1371.746083][T17601] usb 7-1: Manufacturer: syz [ 1371.835446][T17601] cdc_wdm 7-1:1.0: skipping garbage [ 1371.835468][T17601] cdc_wdm 7-1:1.0: skipping garbage [ 1371.835503][T17601] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1372.066011][T17601] usb 7-1: USB disconnect, device number 41 [ 1372.345076][T27961] binder: 27960:27961 ioctl c0306201 0 returned -14 [ 1372.582411][T27975] input: syz0 as /devices/virtual/input/input63 [ 1372.893249][T27989] input: syz1 as /devices/virtual/input/input64 [ 1372.967712][T15330] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1373.117075][T15330] usb 1-1: Using ep0 maxpacket: 16 [ 1373.121360][T15330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1373.127770][T15330] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1373.127799][T15330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.127819][T15330] usb 1-1: Product: syz [ 1373.127832][T15330] usb 1-1: Manufacturer: syz [ 1373.127847][T15330] usb 1-1: SerialNumber: syz [ 1373.148178][T15330] usb 1-1: config 0 descriptor?? [ 1373.194254][T15330] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1373.194288][T15330] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1373.809318][T15330] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1373.904156][ T5599] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1374.104376][ T5599] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.104403][ T5599] usb 2-1: config 0 has no interfaces? [ 1374.104431][ T5599] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1374.104478][ T5599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.120285][ T5599] usb 2-1: config 0 descriptor?? [ 1374.264647][T15330] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1374.264677][T15330] em28xx 1-1:0.0: board has no eeprom [ 1374.328726][T15330] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1374.328745][T15330] em28xx 1-1:0.0: dvb set to bulk mode. [ 1374.328962][ T5599] em28xx 1-1:0.0: Binding DVB extension [ 1374.341923][T15330] usb 1-1: USB disconnect, device number 108 [ 1374.344551][T15330] em28xx 1-1:0.0: Disconnecting em28xx [ 1374.440095][ T5599] em28xx 1-1:0.0: Registering input extension [ 1374.440598][T15330] em28xx 1-1:0.0: Closing input extension [ 1374.492928][T15330] em28xx 1-1:0.0: Freeing device [ 1374.679861][T15330] usb 2-1: USB disconnect, device number 27 [ 1375.402744][T28028] binder: 28027:28028 ioctl c0306201 0 returned -14 [ 1375.848384][ T5599] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1376.000067][ T5599] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.000093][ T5599] usb 2-1: config 0 has no interfaces? [ 1376.000121][ T5599] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1376.000134][ T5599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.003606][ T5599] usb 2-1: config 0 descriptor?? [ 1376.633064][T15330] usb 2-1: USB disconnect, device number 28 [ 1376.787150][T25497] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1376.939434][T25497] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1376.939466][T25497] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1376.940709][T25497] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1376.940736][T25497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1376.940753][T25497] usb 1-1: SerialNumber: syz [ 1377.004171][T28075] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1377.221895][T28075] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1377.630016][T25497] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1377.834283][ T5599] usb 1-1: USB disconnect, device number 109 [ 1379.517163][T10481] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1379.680477][T10481] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.680504][T10481] usb 7-1: config 0 has no interfaces? [ 1379.680535][T10481] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1379.680558][T10481] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.689702][T10481] usb 7-1: config 0 descriptor?? [ 1379.868534][T17601] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1379.907193][ T5599] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1379.997289][T10481] usb 7-1: USB disconnect, device number 42 [ 1380.045026][T17601] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1380.045055][T17601] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1380.045072][T17601] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1380.045099][T17601] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1380.045113][T17601] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1380.045126][T17601] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1380.050547][T17601] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1380.050576][T17601] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1380.050599][T17601] usb 1-1: Product: syz [ 1380.050613][T17601] usb 1-1: Manufacturer: syz [ 1380.110530][T28192] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1380.114904][T17601] cdc_wdm 1-1:1.0: skipping garbage [ 1380.114924][T17601] cdc_wdm 1-1:1.0: skipping garbage [ 1380.125799][ T5599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.125833][ T5599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.125856][ T5599] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1380.125896][ T5599] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1380.125919][ T5599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.253372][ T5599] usb 2-1: config 0 descriptor?? [ 1380.263693][T17601] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1380.263714][T17601] cdc_wdm 1-1:1.0: Unknown control protocol [ 1380.380183][ C1] wdm_int_callback: 822 callbacks suppressed [ 1380.380214][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.380234][ C1] wdm_int_callback: 822 callbacks suppressed [ 1380.380251][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.380487][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.380508][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.380729][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.380751][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.380975][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.380998][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.381218][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.381238][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.381458][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.381479][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.381699][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.381720][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.381940][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.381960][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.382182][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.382202][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.382427][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1380.382447][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1380.386240][T22201] usb 1-1: USB disconnect, device number 110 [ 1380.386318][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1380.807378][ T5599] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1381.464076][T25497] usb 2-1: USB disconnect, device number 29 [ 1382.578851][ T5599] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1382.762065][ T5599] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.762091][ T5599] usb 2-1: config 0 has no interfaces? [ 1382.762120][ T5599] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1382.762133][ T5599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.765613][ T5599] usb 2-1: config 0 descriptor?? [ 1383.461131][T25497] usb 2-1: USB disconnect, device number 30 [ 1396.508138][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1396.520453][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1396.599996][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1396.618723][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1396.648857][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1397.815218][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1398.020874][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1398.033186][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1398.035563][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1398.044644][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1398.900341][T25866] Bluetooth: hci4: command tx timeout [ 1399.784741][T25497] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1399.971806][T25497] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1399.971850][T25497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.971875][T25497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.971896][T25497] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1399.972929][T25497] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1399.972954][T25497] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1399.972974][T25497] usb 2-1: Manufacturer: syz [ 1400.052111][T25497] usb 2-1: config 0 descriptor?? [ 1400.587362][T25497] appleir 0003:05AC:8243.0029: item fetching failed at offset 0/1 [ 1400.587786][T25497] appleir 0003:05AC:8243.0029: parse failed [ 1400.587847][T25497] appleir 0003:05AC:8243.0029: probe with driver appleir failed with error -22 [ 1400.697399][T25866] Bluetooth: hci5: command tx timeout [ 1400.793614][T22201] usb 2-1: USB disconnect, device number 31 [ 1400.957564][T25866] Bluetooth: hci4: command tx timeout [ 1402.785149][T25866] Bluetooth: hci5: command tx timeout [ 1403.053620][T25866] Bluetooth: hci4: command tx timeout [ 1404.881259][T25866] Bluetooth: hci5: command tx timeout [ 1405.087163][T25866] Bluetooth: hci4: command tx timeout [ 1406.927194][T25866] Bluetooth: hci5: command tx timeout [ 1407.122151][T28252] tap0: tun_chr_ioctl cmd 1074025680 [ 1408.935953][T15051] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.376475][T15051] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.609508][T28306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.609721][T28306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.609888][T28306] bridge_slave_0: entered allmulticast mode [ 1409.611788][T28306] bridge_slave_0: entered promiscuous mode [ 1409.637440][T28306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.637743][T28306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.638041][T28306] bridge_slave_1: entered allmulticast mode [ 1409.648901][T28306] bridge_slave_1: entered promiscuous mode [ 1409.930372][T15051] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.974065][T28306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.012373][T28306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.254314][T15051] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.318651][T28306] team0: Port device team_slave_0 added [ 1410.343632][T28306] team0: Port device team_slave_1 added [ 1410.409998][T28291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.410178][T28291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.410359][T28291] bridge_slave_0: entered allmulticast mode [ 1410.412191][T28291] bridge_slave_0: entered promiscuous mode [ 1410.460180][T28291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.460493][T28291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.460743][T28291] bridge_slave_1: entered allmulticast mode [ 1410.462687][T28291] bridge_slave_1: entered promiscuous mode [ 1410.465087][T28306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.465096][T28306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.465128][T28306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.572669][T28306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.572680][T28306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.572695][T28306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.631488][T28291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.663470][T28291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.908267][T28291] team0: Port device team_slave_0 added [ 1410.995762][T28306] hsr_slave_0: entered promiscuous mode [ 1410.997970][T28306] hsr_slave_1: entered promiscuous mode [ 1410.999768][T28306] debugfs: 'hsr0' already exists in 'hsr' [ 1410.999793][T28306] Cannot create hsr debugfs directory [ 1411.004806][T28291] team0: Port device team_slave_1 added [ 1411.084659][T28291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.084672][T28291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.084691][T28291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.112528][T28291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.112546][T28291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.112572][T28291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.351805][T28291] hsr_slave_0: entered promiscuous mode [ 1411.353062][T28291] hsr_slave_1: entered promiscuous mode [ 1411.354032][T28291] debugfs: 'hsr0' already exists in 'hsr' [ 1411.354057][T28291] Cannot create hsr debugfs directory [ 1411.707825][T15051] bridge_slave_1: left allmulticast mode [ 1411.707851][T15051] bridge_slave_1: left promiscuous mode [ 1411.708052][T15051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.888740][T15051] bridge_slave_0: left allmulticast mode [ 1411.888780][T15051] bridge_slave_0: left promiscuous mode [ 1411.889128][T15051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.827880][T15051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.911181][T15051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.936738][T15051] bond0 (unregistering): Released all slaves [ 1413.222746][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1413.431478][T15051] tipc: Left network mode [ 1414.813650][ T5254] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1415.042485][T28306] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1415.093279][T28306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1415.493208][T28306] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1415.540120][T28306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1415.640805][T28306] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1415.670558][T28306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1415.730281][ T5254] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1415.742615][T28306] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1415.781134][T28306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1415.917130][T15051] hsr_slave_0: left promiscuous mode [ 1415.937082][T15051] hsr_slave_1: left promiscuous mode [ 1415.937807][T15051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.937824][T15051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.977950][T15051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.977977][T15051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.038499][T15051] veth1_macvtap: left promiscuous mode [ 1416.038582][T15051] veth0_macvtap: left promiscuous mode [ 1416.038760][T15051] veth1_vlan: left promiscuous mode [ 1416.038894][T15051] veth0_vlan: left promiscuous mode [ 1416.807644][T15051] team0 (unregistering): Port device team_slave_1 removed [ 1416.859095][T15051] team0 (unregistering): Port device team_slave_0 removed [ 1417.211548][T28291] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1417.251024][T28291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1417.256318][T28291] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1417.301234][T28291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1417.380525][T28291] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1417.565652][T28291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1417.586063][T28291] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1417.712792][T28291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1418.182008][T28306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.401822][T28306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.533074][T15499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.533243][T15499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.563183][ T5254] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1418.597720][T15499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.597957][T15499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.844701][T28291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.273543][T15051] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.379302][T28291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.406523][T15049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.406663][T15049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.470660][T15343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.470840][T15343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.883733][T15051] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.439179][T15051] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.859523][T15051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.901321][T28306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.412161][T28291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.524578][T28306] veth0_vlan: entered promiscuous mode [ 1421.562695][T28306] veth1_vlan: entered promiscuous mode [ 1421.986734][T28306] veth0_macvtap: entered promiscuous mode [ 1422.015413][T28306] veth1_macvtap: entered promiscuous mode [ 1422.149209][T15051] bridge_slave_1: left allmulticast mode [ 1422.149246][T15051] bridge_slave_1: left promiscuous mode [ 1422.149441][T15051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.268604][T15051] bridge_slave_0: left allmulticast mode [ 1422.268629][T15051] bridge_slave_0: left promiscuous mode [ 1422.268800][T15051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.090270][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.090376][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.227740][T15051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1423.308316][T15051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1423.330736][T15051] bond0 (unregistering): Released all slaves [ 1423.514453][T28306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.573836][T28306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.693528][T28291] veth0_vlan: entered promiscuous mode [ 1423.702719][T15049] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.706164][T15049] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.729434][T15049] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.789895][T15049] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.937896][T28291] veth1_vlan: entered promiscuous mode [ 1425.473666][T15241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.473688][T15241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.042306][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1426.209812][T28291] veth0_macvtap: entered promiscuous mode [ 1426.267904][T15054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.267919][T15054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.269454][T28291] veth1_macvtap: entered promiscuous mode [ 1426.685943][T28291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.770858][T28291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.860222][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.863218][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.863708][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.864751][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.059567][T10481] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1427.075580][T15051] hsr_slave_0: left promiscuous mode [ 1427.137125][T15051] hsr_slave_1: left promiscuous mode [ 1427.138210][T15051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.138235][T15051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.189842][T15051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.189872][T15051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.229125][T10481] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1427.229150][T10481] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1427.229169][T10481] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1427.229211][T10481] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1427.229234][T10481] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1427.229258][T10481] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1427.230766][T10481] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1427.230792][T10481] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1427.230812][T10481] usb 9-1: Product: syz [ 1427.230824][T10481] usb 9-1: Manufacturer: syz [ 1427.246647][T28525] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1427.300575][T15051] veth1_macvtap: left promiscuous mode [ 1427.300681][T15051] veth0_macvtap: left promiscuous mode [ 1427.301104][T15051] veth1_vlan: left promiscuous mode [ 1427.301299][T15051] veth0_vlan: left promiscuous mode [ 1427.314570][T10481] cdc_wdm 9-1:1.0: skipping garbage [ 1427.314583][T10481] cdc_wdm 9-1:1.0: skipping garbage [ 1427.411453][T10481] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1427.411474][T10481] cdc_wdm 9-1:1.0: Unknown control protocol [ 1427.466004][ C1] wdm_int_callback: 17 callbacks suppressed [ 1427.466029][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.466047][ C1] wdm_int_callback: 17 callbacks suppressed [ 1427.466062][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.466301][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.466330][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.466554][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.466574][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.466805][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.466826][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.467181][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.467203][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.467429][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.467448][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.467671][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.467689][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.467915][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.467933][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.468146][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.468164][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.468377][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1427.468396][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1427.524498][ T5599] usb 9-1: USB disconnect, device number 2 [ 1427.524588][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1427.716289][T28529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1428.988872][T15051] team0 (unregistering): Port device team_slave_1 removed [ 1429.027081][ T5598] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1429.048593][T15051] team0 (unregistering): Port device team_slave_0 removed [ 1429.180151][ T5598] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1429.180180][ T5598] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1429.180199][ T5598] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1429.180243][ T5598] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1429.180267][ T5598] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1429.180473][ T5598] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1429.182845][ T5598] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1429.182873][ T5598] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1429.182893][ T5598] usb 9-1: Product: syz [ 1429.182907][ T5598] usb 9-1: Manufacturer: syz [ 1429.298502][T28567] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1429.317624][ T5598] cdc_wdm 9-1:1.0: skipping garbage [ 1429.317644][ T5598] cdc_wdm 9-1:1.0: skipping garbage [ 1429.320010][ T5598] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1429.320028][ T5598] cdc_wdm 9-1:1.0: Unknown control protocol [ 1429.579967][ T5598] usb 9-1: USB disconnect, device number 3 [ 1429.580029][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1429.677779][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1430.299813][T15239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.299833][T15239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.151846][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.151865][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.293542][T28641] netlink: 620 bytes leftover after parsing attributes in process `syz.1.8695'. [ 1433.004907][ T5254] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1434.013028][T28696] netlink: 620 bytes leftover after parsing attributes in process `syz.1.8715'. [ 1434.663761][ T5254] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1437.132523][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1437.223188][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1437.225217][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1437.255226][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1437.293712][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1438.887125][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1439.037074][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1439.039335][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1439.039360][ T9] usb 2-1: config 0 has no interface number 0 [ 1439.039404][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1439.039428][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1439.073741][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1439.073771][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.073788][ T9] usb 2-1: Product: syz [ 1439.073800][ T9] usb 2-1: Manufacturer: syz [ 1439.073813][ T9] usb 2-1: SerialNumber: syz [ 1439.149283][ T9] usb 2-1: config 0 descriptor?? [ 1439.150052][T28869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1439.150169][T28869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1439.338761][T28886] netlink: 556 bytes leftover after parsing attributes in process `syz.7.8779'. [ 1439.373291][T28869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1439.373408][T28869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1439.492886][ T5605] Bluetooth: hci0: command tx timeout [ 1439.597750][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1439.598042][ T9] asix 2-1:0.34: probe with driver asix failed with error -32 [ 1440.166872][T15239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.226139][T15239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.569128][ T5605] Bluetooth: hci0: command tx timeout [ 1441.704205][T15330] usb 2-1: USB disconnect, device number 32 [ 1441.868099][T15239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.585571][T15239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.687207][T10481] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1442.847138][T10481] usb 2-1: Using ep0 maxpacket: 16 [ 1442.849443][T10481] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1442.849470][T10481] usb 2-1: config 0 has no interface number 0 [ 1442.849515][T10481] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1442.849540][T10481] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1442.852192][T10481] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1442.852220][T10481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.852239][T10481] usb 2-1: Product: syz [ 1442.852254][T10481] usb 2-1: Manufacturer: syz [ 1442.852268][T10481] usb 2-1: SerialNumber: syz [ 1442.924221][T28993] binder: 28992:28993 ioctl c0306201 0 returned -14 [ 1442.981879][T10481] usb 2-1: config 0 descriptor?? [ 1442.984126][T28978] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1442.984641][T28978] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1443.002265][T28832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.002633][T28832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.002934][T28832] bridge_slave_0: entered allmulticast mode [ 1443.057756][T28832] bridge_slave_0: entered promiscuous mode [ 1443.081698][T28832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.082167][T28832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.082597][T28832] bridge_slave_1: entered allmulticast mode [ 1443.114764][T28832] bridge_slave_1: entered promiscuous mode [ 1443.211628][T28978] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1443.211755][T28978] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1443.337228][T28832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.373446][T28832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.417417][T10481] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1443.417679][T10481] asix 2-1:0.34: probe with driver asix failed with error -61 [ 1443.619749][T28832] team0: Port device team_slave_0 added [ 1443.646072][T28832] team0: Port device team_slave_1 added [ 1443.652811][ T5605] Bluetooth: hci0: command tx timeout [ 1443.841563][T29008] netlink: 620 bytes leftover after parsing attributes in process `syz.7.8824'. [ 1444.199646][T28832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.199662][T28832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.199686][T28832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.204243][T28832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.204257][T28832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.204277][T28832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1444.526073][T28832] hsr_slave_0: entered promiscuous mode [ 1444.530957][T28832] hsr_slave_1: entered promiscuous mode [ 1444.532820][T28832] debugfs: 'hsr0' already exists in 'hsr' [ 1444.532844][T28832] Cannot create hsr debugfs directory [ 1445.147762][T15239] bridge_slave_1: left allmulticast mode [ 1445.147795][T15239] bridge_slave_1: left promiscuous mode [ 1445.148081][T15239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.321977][T15239] bridge_slave_0: left allmulticast mode [ 1445.322012][T15239] bridge_slave_0: left promiscuous mode [ 1445.322302][T15239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.459766][ T5770] usb 2-1: USB disconnect, device number 33 [ 1445.697198][T29069] netlink: 620 bytes leftover after parsing attributes in process `syz.1.8845'. [ 1445.727119][ T5605] Bluetooth: hci0: command tx timeout [ 1446.857912][T15239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1446.937845][T15239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1446.985506][T15239] bond0 (unregistering): Released all slaves [ 1447.056385][ T5254] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1450.046485][ T5254] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1450.389479][T29117] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR [ 1451.967239][ T5595] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1452.130474][ T5595] usb 2-1: Using ep0 maxpacket: 16 [ 1452.134120][ T5595] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1452.134151][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1452.134187][ T5595] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1452.134230][ T5595] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1452.134253][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.285118][ T5595] usb 2-1: config 0 descriptor?? [ 1452.444180][ T5595] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input67 [ 1452.712878][ T5595] usb 2-1: USB disconnect, device number 34 [ 1452.713007][ C0] pxrc 2-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1453.275739][T15239] hsr_slave_0: left promiscuous mode [ 1453.354260][T15239] hsr_slave_1: left promiscuous mode [ 1453.368975][T15239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.369003][T15239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.524132][T15239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.524161][T15239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.910736][T15239] veth1_macvtap: left promiscuous mode [ 1453.910837][T15239] veth0_macvtap: left promiscuous mode [ 1453.977005][T15239] veth1_vlan: left promiscuous mode [ 1453.977587][T15239] veth0_vlan: left promiscuous mode [ 1454.807185][ T32] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1454.957019][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 1454.959707][ T32] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1454.959731][ T32] usb 2-1: config 0 has no interface number 0 [ 1454.959780][ T32] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1454.959801][ T32] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1454.961858][ T32] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1454.961886][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.961905][ T32] usb 2-1: Product: syz [ 1454.961920][ T32] usb 2-1: Manufacturer: syz [ 1454.961934][ T32] usb 2-1: SerialNumber: syz [ 1454.989969][ T32] usb 2-1: config 0 descriptor?? [ 1454.990963][T29305] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1454.991136][T29305] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1455.214408][T29305] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1455.214506][T29305] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1455.424984][ T32] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1455.736402][T15239] team0 (unregistering): Port device team_slave_1 removed [ 1455.787868][T15239] team0 (unregistering): Port device team_slave_0 removed [ 1455.826267][ T32] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1455.826532][ T32] asix 2-1:0.34: probe with driver asix failed with error -61 [ 1457.222606][T28832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1457.292083][T28832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1457.293195][T28832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1457.389996][T28832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1457.420990][T28832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1457.526046][T28832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1457.628929][T28832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1457.637075][ T32] usb 2-1: USB disconnect, device number 35 [ 1457.672858][T28832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1458.636773][T28832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.945054][T28832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.963154][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.963329][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.083228][T15049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.083360][T15049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.337053][T10481] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1459.477126][T10481] usb 2-1: device descriptor read/64, error -71 [ 1459.717101][T10481] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1459.847146][T10481] usb 2-1: device descriptor read/64, error -71 [ 1459.958267][T10481] usb usb2-port1: attempt power cycle [ 1460.300712][T10481] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1460.321080][T10481] usb 2-1: device descriptor read/8, error -71 [ 1460.563026][T10481] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1460.582153][T10481] usb 2-1: device descriptor read/8, error -71 [ 1460.622480][T29469] netlink: 'syz.7.8990': attribute type 12 has an invalid length. [ 1460.697604][T10481] usb usb2-port1: unable to enumerate USB device [ 1460.865528][T28832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.126203][T28832] veth0_vlan: entered promiscuous mode [ 1461.151481][T28832] veth1_vlan: entered promiscuous mode [ 1461.312161][T28832] veth0_macvtap: entered promiscuous mode [ 1461.369058][T28832] veth1_macvtap: entered promiscuous mode [ 1461.465991][T28832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1461.494588][T28832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.535186][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.536460][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.536504][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.536539][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.514050][T15051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.514069][T15051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.030359][ T3332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.030378][ T3332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.459560][T10481] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1463.609389][T10481] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1463.609416][T10481] usb 2-1: config 0 has no interface number 0 [ 1463.609460][T10481] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1463.609483][T10481] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1463.609509][T10481] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1463.609534][T10481] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 1463.609559][T10481] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1463.609600][T10481] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1463.609622][T10481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.707119][T10481] usb 2-1: config 0 descriptor?? [ 1463.708431][T29525] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1463.744051][T10481] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1464.181805][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-1) [ 1464.190440][ T5598] usb 2-1: USB disconnect, device number 40 [ 1464.256588][ T5598] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1464.923718][T29577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9020'. [ 1465.104885][T29583] netlink: 'syz.7.9022': attribute type 12 has an invalid length. [ 1465.117071][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1465.289677][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1465.291770][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1465.291797][ T9] usb 3-1: config 0 has no interface number 0 [ 1465.291833][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1465.291854][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1465.348953][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1465.348983][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.349004][ T9] usb 3-1: Product: syz [ 1465.349018][ T9] usb 3-1: Manufacturer: syz [ 1465.349032][ T9] usb 3-1: SerialNumber: syz [ 1465.396568][ T9] usb 3-1: config 0 descriptor?? [ 1465.399968][T29573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1465.400082][T29573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1465.610817][T29573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1465.612103][T29573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1465.819720][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1466.648274][T29627] netlink: 'syz.7.9039': attribute type 12 has an invalid length. [ 1467.456704][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1467.456734][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1467.482432][ T9] asix 3-1:0.34: probe with driver asix failed with error -71 [ 1467.508032][ T9] usb 3-1: USB disconnect, device number 102 [ 1467.669514][ T5598] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1467.825109][ T5598] usb 2-1: not running at top speed; connect to a high speed hub [ 1467.854599][ T5598] usb 2-1: string descriptor 0 read error: -22 [ 1467.854752][ T5598] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1467.854776][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.914991][ T5598] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1468.095484][ T5598] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1468.272739][ T5598] usb 2-1: USB disconnect, device number 41 [ 1469.117045][ T5598] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1469.268880][ T5598] usb 2-1: Using ep0 maxpacket: 32 [ 1469.271771][ T5598] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1469.271803][ T5598] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1469.271836][ T5598] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1469.271869][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.286503][ T5598] usb 2-1: config 0 descriptor?? [ 1469.585865][T29724] netlink: 'syz.2.9081': attribute type 12 has an invalid length. [ 1469.736201][ T5598] usbhid 2-1:0.0: can't add hid device: -71 [ 1469.736316][ T5598] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1469.750356][ T5598] usb 2-1: USB disconnect, device number 42 [ 1469.971975][ T5598] ================================================================== [ 1469.972052][ T5598] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1469.972112][ T5598] Read of size 8 at addr ffffc900043b9008 by task kworker/1:4/5598 [ 1469.972128][ T5598] [ 1469.972172][ T5598] CPU: 1 UID: 0 PID: 5598 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1469.972208][ T5598] Tainted: [L]=SOFTLOCKUP [ 1469.972216][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1469.972229][ T5598] Workqueue: usb_hub_wq hub_event [ 1469.972259][ T5598] Call Trace: [ 1469.972271][ T5598] [ 1469.972280][ T5598] dump_stack_lvl+0xe8/0x150 [ 1469.972308][ T5598] print_address_description+0x55/0x1e0 [ 1469.972338][ T5598] ? __list_add_valid_or_report+0x4e/0x130 [ 1469.972380][ T5598] print_report+0x58/0x70 [ 1469.972407][ T5598] kasan_report+0x117/0x150 [ 1469.972437][ T5598] ? __list_add_valid_or_report+0x4e/0x130 [ 1469.972460][ T5598] __list_add_valid_or_report+0x4e/0x130 [ 1469.972481][ T5598] kcov_remote_stop+0x457/0x680 [ 1469.972513][ T5598] hub_event+0x4789/0x4cf0 [ 1469.972544][ T5598] ? __lock_acquire+0x6df/0x2e40 [ 1469.972564][ T5598] ? register_lock_class+0x31/0x2e0 [ 1469.972609][ T5598] ? __pfx_hub_event+0x10/0x10 [ 1469.972639][ T5598] ? rcu_is_watching+0x15/0xb0 [ 1469.972662][ T5598] ? process_one_work+0x7fd/0x1480 [ 1469.972683][ T5598] process_one_work+0xaaf/0x1480 [ 1469.972711][ T5598] ? __pfx_process_one_work+0x10/0x10 [ 1469.972731][ T5598] ? do_raw_spin_lock+0x12b/0x2f0 [ 1469.972761][ T5598] ? assign_work+0x3cf/0x5d0 [ 1469.972782][ T5598] worker_thread+0xb3c/0x10d0 [ 1469.972813][ T5598] kthread+0x388/0x470 [ 1469.972839][ T5598] ? __pfx_worker_thread+0x10/0x10 [ 1469.972859][ T5598] ? __pfx_kthread+0x10/0x10 [ 1469.972885][ T5598] ret_from_fork+0x514/0xb70 [ 1469.972913][ T5598] ? __pfx_ret_from_fork+0x10/0x10 [ 1469.972937][ T5598] ? __switch_to+0xc89/0x1420 [ 1469.972959][ T5598] ? __pfx_kthread+0x10/0x10 [ 1469.972983][ T5598] ret_from_fork_asm+0x1a/0x30 [ 1469.973015][ T5598] [ 1469.973022][ T5598] [ 1469.973027][ T5598] The buggy address belongs to a vmalloc virtual mapping [ 1469.973056][ T5598] Memory state around the buggy address: [ 1469.973067][ T5598] ffffc900043b8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1469.973079][ T5598] ffffc900043b8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1469.973093][ T5598] >ffffc900043b9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1469.973102][ T5598] ^ [ 1469.973113][ T5598] ffffc900043b9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1469.973126][ T5598] ffffc900043b9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1469.973136][ T5598] ================================================================== [ 1469.973161][ T5598] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1469.973177][ T5598] CPU: 1 UID: 0 PID: 5598 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1469.973205][ T5598] Tainted: [L]=SOFTLOCKUP [ 1469.973212][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1469.973223][ T5598] Workqueue: usb_hub_wq hub_event [ 1469.973248][ T5598] Call Trace: [ 1469.973256][ T5598] [ 1469.973264][ T5598] vpanic+0x5d9/0xad0 [ 1469.973284][ T5598] ? __pfx_clockevents_program_event+0x10/0x10 [ 1469.973308][ T5598] ? __pfx_vpanic+0x10/0x10 [ 1469.973334][ T5598] panic+0xc5/0xd0 [ 1469.973349][ T5598] ? __pfx_panic+0x10/0x10 [ 1469.973371][ T5598] ? __list_add_valid_or_report+0x4e/0x130 [ 1469.973390][ T5598] ? __list_add_valid_or_report+0x4e/0x130 [ 1469.973405][ T5598] check_panic_on_warn+0x89/0xb0 [ 1469.973428][ T5598] ? __list_add_valid_or_report+0x4e/0x130 [ 1469.973443][ T5598] end_report+0x73/0x170 [ 1469.973468][ T5598] ? __list_add_valid_or_report+0x4e/0x130 [ 1469.973484][ T5598] kasan_report+0x128/0x150 [ 1469.973510][ T5598] ? __list_add_valid_or_report+0x4e/0x130 [ 1469.973529][ T5598] __list_add_valid_or_report+0x4e/0x130 [ 1469.973546][ T5598] kcov_remote_stop+0x457/0x680 [ 1469.973576][ T5598] hub_event+0x4789/0x4cf0 [ 1469.973604][ T5598] ? __lock_acquire+0x6df/0x2e40 [ 1469.973622][ T5598] ? register_lock_class+0x31/0x2e0 [ 1469.973687][ T5598] ? __pfx_hub_event+0x10/0x10 [ 1469.973712][ T5598] ? rcu_is_watching+0x15/0xb0 [ 1469.973733][ T5598] ? process_one_work+0x7fd/0x1480 [ 1469.973751][ T5598] process_one_work+0xaaf/0x1480 [ 1469.973776][ T5598] ? __pfx_process_one_work+0x10/0x10 [ 1469.973793][ T5598] ? do_raw_spin_lock+0x12b/0x2f0 [ 1469.973820][ T5598] ? assign_work+0x3cf/0x5d0 [ 1469.973838][ T5598] worker_thread+0xb3c/0x10d0 [ 1469.973865][ T5598] kthread+0x388/0x470 [ 1469.973889][ T5598] ? __pfx_worker_thread+0x10/0x10 [ 1469.973907][ T5598] ? __pfx_kthread+0x10/0x10 [ 1469.973931][ T5598] ret_from_fork+0x514/0xb70 [ 1469.973958][ T5598] ? __pfx_ret_from_fork+0x10/0x10 [ 1469.973981][ T5598] ? __switch_to+0xc89/0x1420 [ 1469.974003][ T5598] ? __pfx_kthread+0x10/0x10 [ 1469.974028][ T5598] ret_from_fork_asm+0x1a/0x30 [ 1469.974061][ T5598] [ 1469.974334][ T5598] Kernel Offset: disabled