last executing test programs: 6m59.802188594s ago: executing program 4 (id=908): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) socket(0x1d, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000000020004000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c"], 0x44}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m59.43424017s ago: executing program 4 (id=911): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 6m56.30885453s ago: executing program 4 (id=918): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x150, 0xd3, 0x12, 0x36, 0x10, 0x9fb, 0x602a, 0xfd36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) 6m53.812426723s ago: executing program 4 (id=926): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = syz_io_uring_setup(0x499f, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 6m50.929364966s ago: executing program 4 (id=932): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) socket(0x1d, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000000020004000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c"], 0x44}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc0000000800110007000000", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m50.778312206s ago: executing program 4 (id=934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x800000080000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54cdf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2400c080) capset(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2402c0c5) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[], 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000000)) 6m35.529762632s ago: executing program 32 (id=934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x800000080000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54cdf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2400c080) capset(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2402c0c5) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[], 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000000)) 1m39.053014187s ago: executing program 1 (id=1564): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe9, 0x5b, 0x17, 0x10, 0x572, 0xcb00, 0xbbc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xfb}}]}}, 0x0) mmap(&(0x7f00000a9000/0x3000)=nil, 0x3000, 0x300000b, 0x13, r0, 0x53d27000) 1m33.628907127s ago: executing program 1 (id=1572): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) 1m32.056981499s ago: executing program 1 (id=1574): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) sendmsg$nl_route(r0, 0x0, 0x20000040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) listen(r0, 0x5) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 1m31.594873886s ago: executing program 1 (id=1576): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m30.46056631s ago: executing program 1 (id=1578): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@keyring) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 1m26.244806799s ago: executing program 1 (id=1581): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r5 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r0, 0x0, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) 1m9.920870253s ago: executing program 33 (id=1581): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r5 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r0, 0x0, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) 27.896894784s ago: executing program 2 (id=1658): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@keyring) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 26.081303862s ago: executing program 2 (id=1659): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000100000022bbd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="211000005400a90f880b1c0158e2a7d031b3d89c030000000a00010005a2aaaaaa0c5cf16e8c8d8659d80000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 21.981847696s ago: executing program 3 (id=1663): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 20.581598987s ago: executing program 3 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 18.255586479s ago: executing program 3 (id=1668): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x82000000) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001080)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac1414", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004840)={0x2020}, 0x2020) 13.156017835s ago: executing program 2 (id=1673): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 13.154402115s ago: executing program 0 (id=1674): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000180)=ANY=[@ANYBLOB="1800020002"]) 11.98821775s ago: executing program 2 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 11.69617607s ago: executing program 0 (id=1677): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x82}}}, 0x7) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x4, 0x8f}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 8.832788654s ago: executing program 2 (id=1680): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980915, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc4}}, 0x4c050) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060081007468115f746f5f7465616d0000000400cc000800050004000000140004"], 0x58}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="100000000100000001000000c5db74", @ANYRES32], 0x10, 0x20000041}}], 0x1, 0xc004) 8.828316835s ago: executing program 0 (id=1681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r4, 0x541, 0x40001019, r5, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) 7.158183214s ago: executing program 0 (id=1682): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000100000022bbd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="211000005400a90f880b1c0158e2a7d031b3d89c030000000a00010005a2aaaaaa0c5cf16e8c8d8659d80000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 5.668967157s ago: executing program 5 (id=1683): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 4.913483266s ago: executing program 3 (id=1684): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.650564293s ago: executing program 0 (id=1685): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@keyring) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 3.648580513s ago: executing program 3 (id=1686): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket(0x2, 0x3, 0x64) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x1, @null, @bpq0, 0x4, 'syz1\x00', @bcast, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @null, @bpq0, 0x3, 'syz0\x00', @bcast, 0xffffffff, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]}) 2.295424278s ago: executing program 0 (id=1687): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)='trans=rdma,') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 2.235465415s ago: executing program 5 (id=1688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.115701786s ago: executing program 5 (id=1689): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x4008080) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r6, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 1.660849533s ago: executing program 2 (id=1690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.660263804s ago: executing program 5 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r4, 0x541, 0x40001019, r5, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) 1.636798092s ago: executing program 3 (id=1692): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) 208.599897ms ago: executing program 5 (id=1693): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 0s ago: executing program 5 (id=1694): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000100000022bbd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="211000005400a90f880b1c0158e2a7d031b3d89c030000000a00010005a2aaaaaa0c5cf16e8c8d8659d80000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) kernel console output (not intermixed with test programs): iptor of length 0, skipping remainder of the config [ 318.637471][ T824] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 318.637497][ T824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.692846][ T824] usb 5-1: config 0 descriptor?? [ 318.735560][ T824] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 318.758191][ T7734] tipc: Started in network mode [ 318.758225][ T7734] tipc: Node identity 7f000001, cluster identity 4711 [ 318.758993][ T7734] tipc: Enabled bearer , priority 10 [ 318.979673][ T824] usb 5-1: USB disconnect, device number 15 [ 319.880434][ T824] tipc: Node number set to 2130706433 [ 322.630447][ T5885] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 322.900487][ T1855] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 323.091023][ T1855] usb 5-1: unable to get BOS descriptor or descriptor too short [ 323.094091][ T1855] usb 5-1: not running at top speed; connect to a high speed hub [ 323.129260][ T1855] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.129304][ T1855] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 323.159311][ T1855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 323.159334][ T1855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.159348][ T1855] usb 5-1: Product: syz [ 323.159359][ T1855] usb 5-1: Manufacturer: syz [ 323.159369][ T1855] usb 5-1: SerialNumber: syz [ 323.743889][ T1855] usb 5-1: USB disconnect, device number 16 [ 327.871602][ T5885] usb 3-1: device descriptor read/64, error -110 [ 328.120506][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 328.250548][ T5885] usb 3-1: device descriptor read/64, error -32 [ 328.360941][ T5885] usb usb3-port1: attempt power cycle [ 328.720456][ T5885] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 328.757609][ T5885] usb 3-1: device descriptor read/8, error -32 [ 329.000506][ T5885] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 329.020858][ T5885] usb 3-1: device descriptor read/8, error -32 [ 329.130760][ T5885] raw-gadget.0 gadget.2: failed to queue suspend event [ 329.131127][ T5885] usb usb3-port1: unable to enumerate USB device [ 329.270059][ T5824] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 329.971020][ T7746] raw-gadget.0 gadget.2: failed to queue disconnect event [ 333.958571][ T5885] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 333.968001][ T7823] tipc: Enabling of bearer rejected, already enabled [ 334.120658][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 334.129649][ T5885] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.129681][ T5885] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.129704][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 334.129738][ T5885] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 334.129761][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.200496][ T5885] usb 2-1: config 0 descriptor?? [ 334.204082][ T7819] syz.4.588 (7819) used greatest stack depth: 18656 bytes left [ 334.697910][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 334.698028][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 334.731059][ T5885] usb 2-1: USB disconnect, device number 22 [ 334.964127][ T7835] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 334.964127][ T7835] program syz.4.593 not setting count and/or reply_len properly [ 339.040462][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 339.272310][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 339.272393][ T10] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 339.272717][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 340.094572][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 340.094604][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.094625][ T10] usb 3-1: Product: syz [ 340.094640][ T10] usb 3-1: Manufacturer: syz [ 340.094654][ T10] usb 3-1: SerialNumber: syz [ 340.484906][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 340.484942][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 340.510752][ T10] usb 3-1: USB disconnect, device number 22 [ 340.609710][ T7865] binder: 7861:7865 ioctl 4018620d 0 returned -22 [ 340.697827][ T7869] binder: 7861:7869 ioctl c0306201 0 returned -14 [ 342.087601][ T7887] 9pnet_virtio: no channels available for device syz [ 342.126620][ T7887] pim6reg99999999: entered allmulticast mode [ 344.788642][ T7901] tipc: Enabling of bearer rejected, already enabled [ 345.364753][ T7903] 9pnet_virtio: no channels available for device syz [ 350.811359][ T7920] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 350.811359][ T7920] program syz.0.616 not setting count and/or reply_len properly [ 351.130506][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 351.261144][ T7935] 9pnet_virtio: no channels available for device syz [ 351.302561][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.302620][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 351.302645][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.343826][ T10] usb 2-1: config 0 descriptor?? [ 351.362710][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 351.575208][ T7938] 9pnet_virtio: no channels available for device syz [ 351.700924][ T10] usb 2-1: USB disconnect, device number 23 [ 358.186184][ T7969] 9pnet_virtio: no channels available for device syz [ 358.451361][ T7976] 9pnet_virtio: no channels available for device syz [ 362.381957][ T7996] netlink: 'syz.1.646': attribute type 11 has an invalid length. [ 362.381983][ T7996] netlink: 'syz.1.646': attribute type 23 has an invalid length. [ 362.381992][ T7996] netlink: 224 bytes leftover after parsing attributes in process `syz.1.646'. [ 362.682143][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 362.864692][ T10] usb 5-1: config 0 has no interfaces? [ 362.886685][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.886726][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.886746][ T10] usb 5-1: Product: syz [ 362.886762][ T10] usb 5-1: Manufacturer: syz [ 362.886777][ T10] usb 5-1: SerialNumber: syz [ 362.952502][ T10] usb 5-1: config 0 descriptor?? [ 363.191727][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.192082][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.218692][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.219172][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.331919][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 363.497133][ T7998] vlan2: entered promiscuous mode [ 363.497149][ T7998] batadv0: entered promiscuous mode [ 363.593207][ T8006] 9pnet_virtio: no channels available for device syz [ 364.072713][ T8007] pim6reg: entered allmulticast mode [ 364.201826][ T8012] netlink: 'syz.2.650': attribute type 11 has an invalid length. [ 364.201848][ T8012] netlink: 'syz.2.650': attribute type 23 has an invalid length. [ 364.201862][ T8012] netlink: 224 bytes leftover after parsing attributes in process `syz.2.650'. [ 364.329227][ T10] usb 5-1: USB disconnect, device number 17 [ 364.441125][ T8017] 9pnet_virtio: no channels available for device syz [ 368.092428][ T8047] tipc: Enabling of bearer rejected, already enabled [ 368.755544][ T8052] netlink: 'syz.1.663': attribute type 11 has an invalid length. [ 368.755567][ T8052] netlink: 'syz.1.663': attribute type 23 has an invalid length. [ 368.755582][ T8052] netlink: 224 bytes leftover after parsing attributes in process `syz.1.663'. [ 369.090669][ T8059] 9pnet_virtio: no channels available for device syz [ 369.179296][ T8061] pim6reg: entered allmulticast mode [ 369.710718][ T8070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.711194][ T8070] batadv_slave_0: entered promiscuous mode [ 371.782793][ T8080] tipc: Enabling of bearer rejected, already enabled [ 372.130926][ T5824] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 373.517234][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.666'. [ 373.719235][ T8096] netlink: 'syz.0.676': attribute type 11 has an invalid length. [ 373.719259][ T8096] netlink: 'syz.0.676': attribute type 23 has an invalid length. [ 373.719274][ T8096] netlink: 224 bytes leftover after parsing attributes in process `syz.0.676'. [ 374.080060][ T8104] 9pnet_virtio: no channels available for device syz [ 374.145560][ T8104] pim6reg99999999: entered allmulticast mode [ 374.184271][ T8103] netlink: 'syz.3.679': attribute type 11 has an invalid length. [ 374.184294][ T8103] netlink: 'syz.3.679': attribute type 23 has an invalid length. [ 374.184308][ T8103] netlink: 224 bytes leftover after parsing attributes in process `syz.3.679'. [ 377.318187][ T8123] tipc: Enabling of bearer rejected, already enabled [ 378.931331][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.931400][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.769886][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 384.030573][ T824] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 386.272162][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 386.328117][ T8176] vlan2: entered promiscuous mode [ 386.328137][ T8176] gretap0: entered promiscuous mode [ 386.800402][ T5885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 387.127570][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 387.279743][ T5885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.279765][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.279785][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.279801][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.279831][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 387.279847][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.361826][ T5885] usb 1-1: GET_CAPABILITIES returned 0 [ 388.361875][ T5885] usbtmc 1-1:16.0: can't read capabilities [ 388.574908][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.575813][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.577046][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.577110][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.577438][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.577517][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.577871][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.577940][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.578223][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.578290][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.578594][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.578658][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.578945][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.579013][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.579667][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.579736][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.579805][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.580563][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 388.845521][ T8191] netlink: 'syz.1.694': attribute type 11 has an invalid length. [ 388.845538][ T8191] netlink: 'syz.1.694': attribute type 23 has an invalid length. [ 388.845548][ T8191] netlink: 224 bytes leftover after parsing attributes in process `syz.1.694'. [ 389.610764][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'. [ 391.560485][ T5885] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 391.720438][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 391.748291][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.748319][ T5885] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.775947][ T5885] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 391.775979][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.775993][ T5885] usb 2-1: Product: syz [ 391.776004][ T5885] usb 2-1: Manufacturer: syz [ 391.776014][ T5885] usb 2-1: SerialNumber: syz [ 391.824692][ T5885] usb 2-1: config 0 descriptor?? [ 392.113189][ T9] usb 2-1: USB disconnect, device number 24 [ 392.160073][ T5885] usb 1-1: USB disconnect, device number 16 [ 393.145930][ T8226] tipc: Started in network mode [ 393.145964][ T8226] tipc: Node identity 7f000001, cluster identity 4711 [ 393.154595][ T8226] tipc: Enabled bearer , priority 10 [ 393.908206][ T8231] tipc: Enabling of bearer rejected, already enabled [ 394.370320][ T1854] tipc: Node number set to 2130706433 [ 395.063959][ T8236] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 395.063959][ T8236] program syz.3.716 not setting count and/or reply_len properly [ 395.600154][ T8241] netlink: 'syz.1.718': attribute type 11 has an invalid length. [ 395.600179][ T8241] netlink: 'syz.1.718': attribute type 23 has an invalid length. [ 395.600193][ T8241] netlink: 224 bytes leftover after parsing attributes in process `syz.1.718'. [ 395.945614][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 395.945653][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 395.945681][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 395.945709][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 395.945736][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 395.945763][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 395.945790][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 395.945818][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 395.945845][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 395.945873][ T9] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 396.201518][ T5819] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 396.232941][ T9] hid-generic 00A0:0006:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 396.280430][ T824] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 396.403151][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.403179][ T5819] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.406545][ T5819] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 396.406577][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.406597][ T5819] usb 1-1: Product: syz [ 396.406611][ T5819] usb 1-1: Manufacturer: syz [ 396.406625][ T5819] usb 1-1: SerialNumber: syz [ 396.418887][ T5819] usb 1-1: config 0 descriptor?? [ 396.440622][ T824] usb 3-1: Using ep0 maxpacket: 8 [ 396.480500][ T824] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.480532][ T824] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 396.480557][ T824] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.480581][ T824] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.480623][ T824] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.480645][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.696247][ T5819] usb 1-1: USB disconnect, device number 17 [ 396.800991][ T824] usb 3-1: GET_CAPABILITIES returned 0 [ 396.801038][ T824] usbtmc 3-1:16.0: can't read capabilities [ 397.015368][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.015909][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.017194][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.017634][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.018405][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.018841][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.019524][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.020404][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.020493][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.236583][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.236669][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.236759][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.268432][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.268492][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.268538][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.268881][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.268936][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.268981][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 402.160450][ T1854] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 402.270692][ T5885] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 402.323056][ T1854] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 402.323085][ T1854] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 402.325640][ T1854] usb 2-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 402.325669][ T1854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.325691][ T1854] usb 2-1: Product: syz [ 402.325705][ T1854] usb 2-1: Manufacturer: syz [ 402.325719][ T1854] usb 2-1: SerialNumber: syz [ 402.425703][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.425734][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 402.426029][ T5885] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.590414][ T5885] usb 4-1: string descriptor 0 read error: -22 [ 402.590552][ T5885] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.590576][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.593143][ T5885] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 403.593183][ T5885] cdc_ncm 4-1:1.0: bind() failure [ 403.621286][ T824] usb 2-1: USB disconnect, device number 25 [ 403.828617][ T5885] usb 4-1: USB disconnect, device number 21 [ 403.857534][ T824] usb 3-1: USB disconnect, device number 23 [ 407.371066][ T8315] 9pnet_virtio: no channels available for device syz [ 408.844369][ T8325] tipc: Enabling of bearer rejected, already enabled [ 410.420425][ T824] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 410.570405][ T5885] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 410.609916][ T824] usb 2-1: Using ep0 maxpacket: 8 [ 410.637784][ T824] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.637819][ T824] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.637845][ T824] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.637869][ T824] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.637912][ T824] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.637937][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.784677][ T5885] usb 4-1: config 0 has no interfaces? [ 410.798013][ T5885] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.798044][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.798066][ T5885] usb 4-1: Product: syz [ 410.798084][ T5885] usb 4-1: Manufacturer: syz [ 410.798097][ T5885] usb 4-1: SerialNumber: syz [ 410.843763][ T5885] usb 4-1: config 0 descriptor?? [ 410.917527][ T824] usb 2-1: GET_CAPABILITIES returned 0 [ 410.917575][ T824] usbtmc 2-1:16.0: can't read capabilities [ 411.056812][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.057395][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.127293][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.128124][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.174869][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.175211][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.283898][ T808] usb 4-1: USB disconnect, device number 22 [ 412.030498][ T5885] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 413.094484][ T5885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.094514][ T5885] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 413.094576][ T5885] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 413.094602][ T5885] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 413.125094][ T5885] usb 5-1: string descriptor 0 read error: -22 [ 413.125236][ T5885] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.125262][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.351692][ T8355] 9pnet_virtio: no channels available for device syz [ 413.492197][ T5885] usb 5-1: 0:2 : does not exist [ 413.670473][ T5892] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 413.786559][ T5885] usb 5-1: USB disconnect, device number 19 [ 413.822475][ T5892] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 413.822508][ T5892] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 413.822527][ T5892] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 413.822547][ T5892] usb 4-1: config 220 has no interface number 2 [ 413.822624][ T5892] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.822652][ T5892] usb 4-1: config 220 interface 0 has no altsetting 0 [ 413.822672][ T5892] usb 4-1: config 220 interface 76 has no altsetting 0 [ 413.822692][ T5892] usb 4-1: config 220 interface 1 has no altsetting 0 [ 413.825261][ T5892] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 413.825289][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.825309][ T5892] usb 4-1: Product: syz [ 413.825324][ T5892] usb 4-1: Manufacturer: syz [ 413.825339][ T5892] usb 4-1: SerialNumber: syz [ 414.503022][ T5892] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 414.503059][ T5892] uvcvideo 4-1:220.0: No valid video chain found. [ 415.914084][ T5892] usb 4-1: USB disconnect, device number 23 [ 416.390656][ T8371] netlink: 'syz.3.760': attribute type 11 has an invalid length. [ 416.390674][ T8371] netlink: 'syz.3.760': attribute type 23 has an invalid length. [ 416.390684][ T8371] netlink: 224 bytes leftover after parsing attributes in process `syz.3.760'. [ 416.669566][ T5819] usb 2-1: USB disconnect, device number 26 [ 416.810715][ T824] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 416.976351][ T824] usb 3-1: config 0 has no interfaces? [ 416.986199][ T824] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.986233][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.986254][ T824] usb 3-1: Product: syz [ 416.986268][ T824] usb 3-1: Manufacturer: syz [ 416.986284][ T824] usb 3-1: SerialNumber: syz [ 417.022719][ T8386] netlink: 'syz.3.765': attribute type 11 has an invalid length. [ 417.022742][ T8386] netlink: 'syz.3.765': attribute type 23 has an invalid length. [ 417.022755][ T8386] netlink: 224 bytes leftover after parsing attributes in process `syz.3.765'. [ 417.027560][ T824] usb 3-1: config 0 descriptor?? [ 417.032157][ T8387] 9pnet_virtio: no channels available for device syz [ 417.124489][ T8387] pim6reg99999999: entered allmulticast mode [ 417.258379][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.259114][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.265871][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.266388][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.267311][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'. [ 417.356023][ T5819] usb 3-1: USB disconnect, device number 24 [ 429.382109][ T8400] overlayfs: missing 'lowerdir' [ 429.677231][ T8401] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 429.794966][ T8399] netlink: 'syz.1.767': attribute type 4 has an invalid length. [ 429.794992][ T8399] netlink: 1601 bytes leftover after parsing attributes in process `syz.1.767'. [ 431.879582][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 432.920379][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 433.990448][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 433.997878][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.997910][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.997935][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.997970][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.998025][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.998048][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.160534][ T8446] 9pnet_virtio: no channels available for device syz [ 434.271000][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 434.271048][ T9] usbtmc 1-1:16.0: can't read capabilities [ 434.302010][ T8449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.353902][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 434.458834][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.469086][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.538569][ T808] usb 1-1: USB disconnect, device number 18 [ 439.393070][ T8481] netlink: 'syz.4.792': attribute type 11 has an invalid length. [ 439.393087][ T8481] netlink: 'syz.4.792': attribute type 23 has an invalid length. [ 439.393098][ T8481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.792'. [ 439.399554][ T8483] 9pnet_virtio: no channels available for device syz [ 439.506095][ T8487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.082893][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.082996][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.440486][ T808] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 443.592616][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 443.596822][ T808] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.596856][ T808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.596883][ T808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.596909][ T808] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.596952][ T808] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.596976][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.202585][ T808] usb 4-1: GET_CAPABILITIES returned 0 [ 444.202619][ T808] usbtmc 4-1:16.0: can't read capabilities [ 444.408451][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.409065][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.803976][ T824] Process accounting resumed [ 445.079029][ T8534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.078913][ T8549] tipc: Enabling of bearer rejected, already enabled [ 447.912302][ T8554] netlink: 'syz.1.816': attribute type 11 has an invalid length. [ 447.912319][ T8554] netlink: 'syz.1.816': attribute type 23 has an invalid length. [ 447.912329][ T8554] netlink: 224 bytes leftover after parsing attributes in process `syz.1.816'. [ 448.236647][ T824] usb 4-1: USB disconnect, device number 24 [ 449.208474][ T8572] 9pnet_virtio: no channels available for device syz [ 449.375807][ T8574] syz.0.821 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 450.803661][ T8591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.021200][ T8594] kvm: user requested TSC rate below hardware speed [ 451.290390][ T808] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 451.440415][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 451.449885][ T808] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.449908][ T808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.449927][ T808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.449944][ T808] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.449975][ T808] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.449991][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.739795][ T808] usb 5-1: GET_CAPABILITIES returned 0 [ 451.739847][ T808] usbtmc 5-1:16.0: can't read capabilities [ 452.137064][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.138513][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.140659][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.140957][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.141130][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.142020][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.142852][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.143563][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.143778][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.144521][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.145196][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.145985][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.146183][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.147053][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.147758][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.150728][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.150890][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.151684][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.649958][ T8613] 9pnet_virtio: no channels available for device syz [ 452.844243][ T8615] tipc: Enabling of bearer rejected, already enabled [ 454.140744][ T8628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.202143][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 455.723403][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 456.450011][ T9] usb 5-1: USB disconnect, device number 20 [ 456.930953][ T8643] 9pnet_virtio: no channels available for device syz [ 459.589316][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 461.100386][ T824] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 461.275733][ T824] usb 5-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 461.275763][ T824] usb 5-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 461.279831][ T824] usb 5-1: string descriptor 0 read error: -22 [ 461.279985][ T824] usb 5-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 461.280010][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.595606][ T1854] usb 5-1: USB disconnect, device number 21 [ 461.688070][ T8674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.857'. [ 461.946519][ T8677] 9pnet_virtio: no channels available for device syz [ 462.656828][ T8682] kvm: user requested TSC rate below hardware speed [ 462.970388][ T808] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 463.200456][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 464.116424][ T808] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.116455][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 464.116474][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 464.116490][ T808] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.116520][ T808] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.116542][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.533107][ T808] usb 1-1: GET_CAPABILITIES returned 0 [ 464.533154][ T808] usbtmc 1-1:16.0: can't read capabilities [ 464.715733][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.716268][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.718903][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.718986][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.719032][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.719367][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.719414][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.719699][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.719755][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.719800][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.720125][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.720179][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.720296][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.720687][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.720735][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.721046][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.721115][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 464.721432][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.702071][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.865'. [ 467.376258][ T8712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.868'. [ 469.196326][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 470.599915][ T808] usb 1-1: USB disconnect, device number 19 [ 471.170498][ T824] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 471.348146][ T8746] tipc: Enabling of bearer rejected, already enabled [ 471.394742][ T824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.394802][ T824] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 471.394828][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.405185][ T824] usb 1-1: config 0 descriptor?? [ 471.419158][ T824] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 472.264345][ T824] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 472.866656][ T824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.866687][ T824] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.870194][ T824] usb 2-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 472.870353][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.870377][ T824] usb 2-1: Product: syz [ 472.870392][ T824] usb 2-1: Manufacturer: syz [ 472.870408][ T824] usb 2-1: SerialNumber: syz [ 472.940520][ T824] usb 2-1: config 0 descriptor?? [ 473.105486][ T8758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.882'. [ 473.195383][ T9] usb 2-1: USB disconnect, device number 27 [ 473.302428][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 474.487065][ T1854] usb 1-1: USB disconnect, device number 20 [ 476.184649][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'. [ 476.621448][ T8795] tipc: Enabling of bearer rejected, already enabled [ 479.080852][ T1854] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 479.718152][ T1854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.718183][ T1854] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.774325][ T1854] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 479.774358][ T1854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.774379][ T1854] usb 5-1: Product: syz [ 479.774394][ T1854] usb 5-1: Manufacturer: syz [ 479.774409][ T1854] usb 5-1: SerialNumber: syz [ 479.818508][ T1854] usb 5-1: config 0 descriptor?? [ 480.410505][ T1854] usb 5-1: can't set config #0, error -71 [ 480.462640][ T1854] usb 5-1: USB disconnect, device number 22 [ 480.840392][ T1854] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 480.888396][ T8829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.908'. [ 480.993567][ T1854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.993628][ T1854] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 480.993654][ T1854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.038122][ T1854] usb 3-1: config 0 descriptor?? [ 481.079036][ T1854] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 481.116052][ T8831] 9pnet_virtio: no channels available for device syz [ 481.337322][ T8837] tipc: Enabling of bearer rejected, already enabled [ 481.608451][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.609009][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.630993][ T1854] usb 3-1: USB disconnect, device number 25 [ 483.897577][ T8850] hub 8-0:1.0: USB hub found [ 483.897903][ T8850] hub 8-0:1.0: 1 port detected [ 484.633787][ T1854] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 484.792794][ T1854] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 484.792824][ T1854] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 484.823952][ T1854] usb 5-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 484.823985][ T1854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.824005][ T1854] usb 5-1: Product: syz [ 484.824020][ T1854] usb 5-1: Manufacturer: syz [ 484.824034][ T1854] usb 5-1: SerialNumber: syz [ 484.996986][ T8860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 485.083618][ T1854] usb 5-1: USB disconnect, device number 23 [ 485.205588][ T8862] 9pnet_virtio: no channels available for device syz [ 488.221525][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 488.582298][ T8888] netlink: 'syz.1.929': attribute type 11 has an invalid length. [ 488.582314][ T8888] netlink: 'syz.1.929': attribute type 23 has an invalid length. [ 488.582325][ T8888] netlink: 224 bytes leftover after parsing attributes in process `syz.1.929'. [ 488.630391][ T5821] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 488.780774][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 488.782632][ T5821] usb 1-1: descriptor type invalid, skip [ 488.782651][ T5821] usb 1-1: descriptor type invalid, skip [ 488.782665][ T5821] usb 1-1: descriptor type invalid, skip [ 488.783952][ T5821] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.788233][ T5821] usb 1-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.40 [ 488.788262][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.788288][ T5821] usb 1-1: Product: syz [ 488.788299][ T5821] usb 1-1: Manufacturer: syz [ 488.788310][ T5821] usb 1-1: SerialNumber: syz [ 489.401262][ T5821] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 489.421148][ T5821] usb 1-1: USB disconnect, device number 21 [ 489.636672][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.932'. [ 489.704392][ T8898] 9pnet_virtio: no channels available for device syz [ 491.145009][ T8905] kvm: user requested TSC rate below hardware speed [ 491.574615][ T5892] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 492.430387][ T5821] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 492.571834][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 492.575555][ T5892] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.575578][ T5892] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.575596][ T5892] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.575614][ T5892] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.575643][ T5892] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.575771][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.683971][ T5821] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 492.684003][ T5821] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 492.755291][ T5821] usb 4-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 492.755328][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.755364][ T5821] usb 4-1: Product: syz [ 492.755378][ T5821] usb 4-1: Manufacturer: syz [ 492.755394][ T5821] usb 4-1: SerialNumber: syz [ 493.763026][ T5821] usb 4-1: USB disconnect, device number 25 [ 493.888617][ T1854] hid_parser_main: 4 callbacks suppressed [ 493.888786][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 493.888873][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 493.888900][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 493.888928][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 493.888955][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 493.889069][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 493.889254][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 493.889284][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 493.889367][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 493.889396][ T1854] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 494.009507][ T1854] hid-generic 00A0:0006:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 495.950375][ T824] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 496.108549][ T824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.108600][ T824] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 496.171208][ T824] usb 2-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 496.171240][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.171263][ T824] usb 2-1: Product: syz [ 496.171274][ T824] usb 2-1: Manufacturer: syz [ 496.171284][ T824] usb 2-1: SerialNumber: syz [ 496.293197][ T824] usb 2-1: config 0 descriptor?? [ 496.524429][ T824] usb 2-1: USB disconnect, device number 28 [ 496.715567][ T8932] fido_id[8932]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 496.848657][ T8934] netlink: 'syz.3.945': attribute type 11 has an invalid length. [ 496.848682][ T8934] netlink: 'syz.3.945': attribute type 23 has an invalid length. [ 496.848697][ T8934] netlink: 224 bytes leftover after parsing attributes in process `syz.3.945'. [ 497.569138][ T8939] 9pnet_virtio: no channels available for device syz [ 497.667422][ T8938] tipc: Failed to remove unknown binding: 66,1,1/2130706433:1141424778/1141424780 [ 497.878420][ T5892] usb 5-1: usb_control_msg returned -110 [ 497.878469][ T5892] usbtmc 5-1:16.0: can't read capabilities [ 498.391912][ T5892] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 499.102764][ T5892] usb 1-1: config 0 has no interfaces? [ 499.106976][ T5892] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.107009][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.107030][ T5892] usb 1-1: Product: syz [ 499.107045][ T5892] usb 1-1: Manufacturer: syz [ 499.107060][ T5892] usb 1-1: SerialNumber: syz [ 500.052528][ T5892] usb 1-1: config 0 descriptor?? [ 500.634963][ T8945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.635323][ T8945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.638139][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 500.638433][ T8945] 8021q: VLANs not supported on caif0 [ 500.783771][ T824] usb 1-1: USB disconnect, device number 22 [ 503.151591][ T5892] usb 5-1: USB disconnect, device number 24 [ 504.837478][ T8972] netlink: 'syz.0.958': attribute type 11 has an invalid length. [ 504.837503][ T8972] netlink: 'syz.0.958': attribute type 23 has an invalid length. [ 504.837525][ T8972] netlink: 224 bytes leftover after parsing attributes in process `syz.0.958'. [ 506.815127][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.816428][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.454979][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 507.457403][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.459030][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.477766][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.479550][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 511.726715][ T8993] netlink: 'syz.2.962': attribute type 4 has an invalid length. [ 511.726733][ T8993] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.962'. [ 512.075327][ T60] Bluetooth: hci5: command tx timeout [ 514.274871][ T60] Bluetooth: hci5: command tx timeout [ 515.010558][ T824] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 515.170688][ T824] usb 1-1: config 0 has no interfaces? [ 515.176946][ T824] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.176977][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.176999][ T824] usb 1-1: Product: syz [ 515.177013][ T824] usb 1-1: Manufacturer: syz [ 515.177029][ T824] usb 1-1: SerialNumber: syz [ 515.280525][ T824] usb 1-1: config 0 descriptor?? [ 515.523319][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.526058][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.602378][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.602918][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.604493][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 515.604998][ T9010] 8021q: VLANs not supported on caif0 [ 515.821204][ T9] usb 1-1: USB disconnect, device number 23 [ 515.874047][ T8984] chnl_net:caif_netlink_parms(): no params data found [ 516.352844][ T60] Bluetooth: hci5: command tx timeout [ 518.449713][ T60] Bluetooth: hci5: command tx timeout [ 518.739447][ T9044] netlink: 'syz.1.972': attribute type 11 has an invalid length. [ 518.739471][ T9044] netlink: 'syz.1.972': attribute type 23 has an invalid length. [ 518.739486][ T9044] netlink: 224 bytes leftover after parsing attributes in process `syz.1.972'. [ 518.850517][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.850645][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.850894][ T8984] bridge_slave_0: entered allmulticast mode [ 518.889335][ T8984] bridge_slave_0: entered promiscuous mode [ 524.587299][ T8984] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.587389][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.587665][ T8984] bridge_slave_1: entered allmulticast mode [ 524.590834][ T8984] bridge_slave_1: entered promiscuous mode [ 525.120403][ T1854] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 525.282590][ T1854] usb 4-1: config 0 has no interfaces? [ 525.286700][ T1854] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.286731][ T1854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.286752][ T1854] usb 4-1: Product: syz [ 525.286768][ T1854] usb 4-1: Manufacturer: syz [ 525.286783][ T1854] usb 4-1: SerialNumber: syz [ 525.346996][ T1854] usb 4-1: config 0 descriptor?? [ 525.432414][ T1486] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.675063][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.675584][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.664899][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.665469][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.704437][ T8984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.707580][ T8984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.721738][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.980'. [ 526.790362][ T9066] 8021q: VLANs not supported on caif0 [ 527.309996][ T824] usb 4-1: USB disconnect, device number 26 [ 527.383727][ T1486] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.531444][ T8984] team0: Port device team_slave_0 added [ 527.535620][ T8984] team0: Port device team_slave_1 added [ 528.627372][ T1486] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.583832][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.583849][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.583873][ T8984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.369708][ T9104] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 531.407670][ T9105] netlink: 'syz.1.989': attribute type 10 has an invalid length. [ 531.449764][ T1486] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.496411][ T9105] team0: Port device dummy0 added [ 531.498203][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.498220][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.498251][ T8984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.706535][ T9107] netlink: 'syz.0.990': attribute type 11 has an invalid length. [ 531.706558][ T9107] netlink: 'syz.0.990': attribute type 23 has an invalid length. [ 531.706574][ T9107] netlink: 224 bytes leftover after parsing attributes in process `syz.0.990'. [ 533.377596][ T8984] hsr_slave_0: entered promiscuous mode [ 533.378650][ T8984] hsr_slave_1: entered promiscuous mode [ 533.379297][ T8984] debugfs: 'hsr0' already exists in 'hsr' [ 533.379317][ T8984] Cannot create hsr debugfs directory [ 534.603198][ T1486] bridge_slave_1: left allmulticast mode [ 534.603326][ T1486] bridge_slave_1: left promiscuous mode [ 534.605494][ T1486] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.102347][ T1486] bridge_slave_0: left allmulticast mode [ 536.102378][ T1486] bridge_slave_0: left promiscuous mode [ 536.102659][ T1486] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.682455][ T1486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.814443][ T1486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.917276][ T1486] bond0 (unregistering): Released all slaves [ 543.431122][ T9200] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 547.272425][ T1486] tipc: Disabling bearer [ 547.273011][ T1486] tipc: Left network mode [ 548.650264][ T9226] tipc: Enabling of bearer rejected, already enabled [ 549.958325][ T8984] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 550.378998][ T9244] syz.3.1025 uses obsolete (PF_INET,SOCK_PACKET) [ 550.407691][ T8984] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 550.654912][ T8984] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 550.919192][ T8984] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 551.070439][ T1854] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 553.133662][ T1854] usb 2-1: config 0 has no interfaces? [ 553.146126][ T1854] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.146156][ T1854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.146175][ T1854] usb 2-1: Product: syz [ 553.146192][ T1854] usb 2-1: Manufacturer: syz [ 553.146203][ T1854] usb 2-1: SerialNumber: syz [ 553.192333][ T1854] usb 2-1: config 0 descriptor?? [ 553.580162][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.622320][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.968848][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.971119][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.980081][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 554.558412][ T9249] 8021q: VLANs not supported on caif0 [ 554.636078][ T1854] usb 2-1: USB disconnect, device number 29 [ 554.777331][ T9282] netlink: 'syz.3.1032': attribute type 11 has an invalid length. [ 554.777357][ T9282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1032'. [ 558.538484][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.729568][ T8984] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.782606][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.804491][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.827100][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.827252][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.264428][ T1486] hsr_slave_0: left promiscuous mode [ 562.338323][ T1486] hsr_slave_1: left promiscuous mode [ 562.339793][ T1486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.339896][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.447448][ T1486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.447476][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.090677][ T1486] veth1_macvtap: left promiscuous mode [ 563.090962][ T1486] veth0_macvtap: left promiscuous mode [ 563.091267][ T1486] veth1_vlan: left promiscuous mode [ 563.091548][ T1486] veth0_vlan: left promiscuous mode [ 563.832362][ T1486] pim6reg99999999 (unregistering): left allmulticast mode [ 564.802955][ T1486] team0 (unregistering): Port device team_slave_1 removed [ 564.841883][ T3641] smc: removing ib device syz2 [ 564.867526][ T1486] team0 (unregistering): Port device team_slave_0 removed [ 565.280129][ T824] syz2: Port: 1 Link DOWN [ 568.194555][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 568.215654][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.215845][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.281633][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.071370][ T9441] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 569.071439][ T9441] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.1063'. [ 569.113867][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.150689][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.217879][ T824] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 569.252518][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.604132][ T824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.604163][ T824] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 569.606556][ T824] usb 4-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 569.606586][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.606608][ T824] usb 4-1: Product: syz [ 569.606622][ T824] usb 4-1: Manufacturer: syz [ 569.606637][ T824] usb 4-1: SerialNumber: syz [ 570.037081][ T824] usb 4-1: config 0 descriptor?? [ 570.290582][ T1854] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 570.295329][ T808] usb 4-1: USB disconnect, device number 27 [ 570.371661][ T824] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 570.452202][ T1854] usb 2-1: Using ep0 maxpacket: 32 [ 570.461445][ T1854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.461474][ T1854] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.472258][ T1854] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 570.472286][ T1854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.472305][ T1854] usb 2-1: Product: syz [ 570.472318][ T1854] usb 2-1: Manufacturer: syz [ 570.472332][ T1854] usb 2-1: SerialNumber: syz [ 570.526792][ T824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.526850][ T824] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 570.526875][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.690668][ T1854] usb 2-1: config 0 descriptor?? [ 570.745644][ T824] usb 3-1: config 0 descriptor?? [ 570.931487][ T1854] usb 2-1: USB disconnect, device number 30 [ 571.712469][ T5827] Bluetooth: hci2: command tx timeout [ 572.685180][ T824] usb 3-1: string descriptor 0 read error: -71 [ 572.746806][ T824] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 572.790686][ T824] usb 3-1: USB disconnect, device number 26 [ 573.790426][ T5827] Bluetooth: hci2: command tx timeout [ 573.866552][ T9533] pim6reg: entered allmulticast mode [ 575.693358][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 575.870342][ T5827] Bluetooth: hci2: command tx timeout [ 575.870419][ T1854] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 576.023370][ T1854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.023401][ T1854] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 576.027263][ T1854] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 576.027291][ T1854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.027311][ T1854] usb 3-1: Product: syz [ 576.027325][ T1854] usb 3-1: Manufacturer: syz [ 576.027339][ T1854] usb 3-1: SerialNumber: syz [ 576.172142][ T1854] usb 3-1: config 0 descriptor?? [ 576.392390][ T5892] usb 3-1: USB disconnect, device number 27 [ 577.581618][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.581744][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.581977][ T9433] bridge_slave_0: entered allmulticast mode [ 577.730754][ T9433] bridge_slave_0: entered promiscuous mode [ 577.752452][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.755261][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.755506][ T9433] bridge_slave_1: entered allmulticast mode [ 577.842592][ T9433] bridge_slave_1: entered promiscuous mode [ 577.950358][ T5827] Bluetooth: hci2: command tx timeout [ 578.098391][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.117335][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.248739][ T9433] team0: Port device team_slave_0 added [ 578.291779][ T9433] team0: Port device team_slave_1 added [ 578.990378][ T5892] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 579.149200][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.149258][ T5892] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 579.149292][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.284344][ T5892] usb 2-1: config 0 descriptor?? [ 579.471838][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.471858][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.471888][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.573068][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.573088][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.573116][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.661534][ T1486] IPVS: stop unused estimator thread 0... [ 579.980075][ T9433] hsr_slave_0: entered promiscuous mode [ 579.991224][ T9433] hsr_slave_1: entered promiscuous mode [ 582.541252][ T5892] usb 2-1: string descriptor 0 read error: -71 [ 582.546235][ T5892] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 582.575697][ T5892] usb 2-1: USB disconnect, device number 31 [ 591.003239][ T1486] bridge_slave_1: left allmulticast mode [ 591.003262][ T1486] bridge_slave_1: left promiscuous mode [ 591.003465][ T1486] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.074488][ T1486] bridge_slave_0: left allmulticast mode [ 591.074511][ T1486] bridge_slave_0: left promiscuous mode [ 591.074708][ T1486] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.488880][ T1486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.562685][ T1486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.610516][ T1486] bond0 (unregistering): Released all slaves [ 592.724975][ T9715] pim6reg: entered allmulticast mode [ 596.180220][ T1486] hsr_slave_0: left promiscuous mode [ 596.218412][ T1486] hsr_slave_1: left promiscuous mode [ 596.222665][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.271155][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.325869][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 596.473141][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.473201][ T9] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 596.473227][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.514513][ T9] usb 2-1: config 0 descriptor?? [ 598.866108][ T9] usb 2-1: string descriptor 0 read error: -71 [ 598.911248][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 598.931482][ T9] usb 2-1: USB disconnect, device number 32 [ 599.113084][ T1486] team0 (unregistering): Port device team_slave_1 removed [ 599.242457][ T1486] team0 (unregistering): Port device team_slave_0 removed [ 602.709952][ T9433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 602.773490][ T9433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 602.890464][ T9433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 602.979235][ T9433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 604.852289][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 605.002335][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.002395][ T9] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 605.002419][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.044961][ T9] usb 1-1: config 0 descriptor?? [ 605.464167][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.639054][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.756112][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.757320][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.913699][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.915089][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.600591][ T9433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.642627][ T9] usb 1-1: string descriptor 0 read error: -71 [ 606.676242][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 606.703288][ T9] usb 1-1: USB disconnect, device number 24 [ 612.034688][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.730470][ T5821] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 612.886065][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.886123][ T5821] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 612.886148][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.934468][ T5821] usb 2-1: config 0 descriptor?? [ 613.170286][ T5892] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 613.334645][ T5892] usb 3-1: config 0 has no interfaces? [ 613.338420][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.338502][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.338532][ T5892] usb 3-1: Product: syz [ 613.338548][ T5892] usb 3-1: Manufacturer: syz [ 613.338563][ T5892] usb 3-1: SerialNumber: syz [ 613.402496][ T5892] usb 3-1: config 0 descriptor?? [ 613.604492][ T9433] veth0_vlan: entered promiscuous mode [ 613.658717][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.659278][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.678784][ T9433] veth1_vlan: entered promiscuous mode [ 613.759930][ T9924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.761673][ T9924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.826666][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 613.858358][ T9433] veth0_macvtap: entered promiscuous mode [ 613.883403][ T9433] veth1_macvtap: entered promiscuous mode [ 613.926599][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.004078][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.085098][ T5892] usb 3-1: USB disconnect, device number 28 [ 614.214747][ T5821] usb 2-1: string descriptor 0 read error: -71 [ 614.219782][ T5821] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 614.242149][ T5821] usb 2-1: USB disconnect, device number 33 [ 614.327929][ T1016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.328532][ T1016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.328976][ T1016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.329433][ T1016] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.980245][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.980269][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.164217][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.164243][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.402256][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.959'. [ 620.591546][ T5892] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 620.630378][ T5821] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 620.770025][ T5892] usb 3-1: config 0 has no interfaces? [ 620.790357][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.790389][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.790409][ T5892] usb 3-1: Product: syz [ 620.790424][ T5892] usb 3-1: Manufacturer: syz [ 620.790437][ T5892] usb 3-1: SerialNumber: syz [ 620.807442][ T5892] usb 3-1: config 0 descriptor?? [ 620.826505][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.826564][ T5821] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 620.826591][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.880982][ T5821] usb 4-1: config 0 descriptor?? [ 621.101579][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.104364][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.147121][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.159122][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.178452][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 621.191737][ T9981] 8021q: VLANs not supported on nlmon0 [ 621.982754][ T9] usb 3-1: USB disconnect, device number 29 [ 622.351779][ T5821] usb 4-1: string descriptor 0 read error: -71 [ 622.356692][ T5821] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 622.383470][ T5821] usb 4-1: USB disconnect, device number 28 [ 623.160831][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1164'. [ 627.892193][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 628.240772][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 628.373346][ T824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 628.378567][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.378655][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.768507][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 628.768541][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.768562][ T9] usb 4-1: Product: syz [ 628.768577][ T9] usb 4-1: Manufacturer: syz [ 628.768592][ T9] usb 4-1: SerialNumber: syz [ 628.807797][ T9] usb 4-1: config 0 descriptor?? [ 628.892392][ T824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.892460][ T824] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 628.892485][ T824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.898935][ T824] usb 6-1: config 0 descriptor?? [ 629.657303][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.657374][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.189314][ T10] usb 4-1: USB disconnect, device number 29 [ 631.817831][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'. [ 632.060796][ T824] usb 6-1: string descriptor 0 read error: -71 [ 632.065565][ T824] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 632.087276][ T824] usb 6-1: USB disconnect, device number 2 [ 634.380309][ T5821] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 634.552748][ T5821] usb 1-1: config 0 has no interfaces? [ 634.556271][ T5821] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.556300][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.556320][ T5821] usb 1-1: Product: syz [ 634.556334][ T5821] usb 1-1: Manufacturer: syz [ 634.556348][ T5821] usb 1-1: SerialNumber: syz [ 634.579534][ T5821] usb 1-1: config 0 descriptor?? [ 634.811442][T10093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.825036][T10093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.884831][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.885948][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.940695][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 634.960307][ T5821] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 634.973261][T10115] vlan3: entered promiscuous mode [ 634.973288][T10115] dummy0: entered promiscuous mode [ 635.991865][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 635.994627][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.994653][ T5821] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 635.997952][ T5821] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 635.997981][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.998003][ T5821] usb 4-1: Product: syz [ 635.998019][ T5821] usb 4-1: Manufacturer: syz [ 635.998034][ T5821] usb 4-1: SerialNumber: syz [ 636.102406][ T5821] usb 4-1: config 0 descriptor?? [ 636.411002][ T1854] usb 1-1: USB disconnect, device number 25 [ 637.245945][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'. [ 638.942844][ T5821] usb 4-1: USB disconnect, device number 30 [ 644.975168][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 646.194268][T10203] netlink: 'syz.1.1200': attribute type 11 has an invalid length. [ 646.194292][T10203] netlink: 'syz.1.1200': attribute type 23 has an invalid length. [ 646.194307][T10203] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1200'. [ 647.094767][T10220] netlink: 'syz.2.1204': attribute type 4 has an invalid length. [ 647.094890][T10220] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.1204'. [ 654.287998][T10263] netlink: 'syz.0.1214': attribute type 11 has an invalid length. [ 654.288021][T10263] netlink: 'syz.0.1214': attribute type 23 has an invalid length. [ 654.288035][T10263] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1214'. [ 658.091448][T10314] netlink: 'syz.5.1228': attribute type 11 has an invalid length. [ 658.091470][T10314] netlink: 'syz.5.1228': attribute type 23 has an invalid length. [ 658.091484][T10314] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1228'. [ 660.896160][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'. [ 664.619386][T10378] netlink: 'syz.0.1241': attribute type 11 has an invalid length. [ 664.619409][T10378] netlink: 'syz.0.1241': attribute type 23 has an invalid length. [ 664.619425][T10378] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1241'. [ 669.483652][T10410] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 669.483727][T10410] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.1251'. [ 670.499062][ T5821] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 670.702304][ T5821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.702372][ T5821] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 670.702397][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.712638][ T5821] usb 6-1: config 0 descriptor?? [ 670.864013][ T5821] usb 6-1: can't set config #0, error -71 [ 670.953221][ T5821] usb 6-1: USB disconnect, device number 3 [ 671.087016][T10420] netlink: 'syz.5.1256': attribute type 11 has an invalid length. [ 671.087040][T10420] netlink: 'syz.5.1256': attribute type 23 has an invalid length. [ 671.087056][T10420] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1256'. [ 674.030745][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 677.374743][ T808] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 677.804709][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.804769][ T808] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 677.804794][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.851200][ T808] usb 1-1: config 0 descriptor?? [ 679.504207][ T808] usb 1-1: string descriptor 0 read error: -71 [ 679.509368][ T808] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 679.624006][ T808] usb 1-1: USB disconnect, device number 26 [ 681.886534][T10482] binder: 10480:10482 ioctl c0306201 0 returned -14 [ 683.221943][T10487] netlink: 'syz.2.1274': attribute type 11 has an invalid length. [ 683.221968][T10487] netlink: 'syz.2.1274': attribute type 23 has an invalid length. [ 683.221983][T10487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1274'. [ 683.878232][T10491] tipc: Enabling of bearer rejected, already enabled [ 685.189122][T10498] pim6reg: entered allmulticast mode [ 685.790275][ T808] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 686.060312][ T808] usb 6-1: Using ep0 maxpacket: 32 [ 686.064460][ T808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.064488][ T808] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 686.064539][ T808] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.067084][ T808] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.067112][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.067132][ T808] usb 6-1: Product: syz [ 686.067148][ T808] usb 6-1: Manufacturer: syz [ 686.067163][ T808] usb 6-1: SerialNumber: syz [ 686.414740][ T808] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 686.414801][ T808] cdc_ncm 6-1:1.0: bind() failure [ 686.467705][ T808] usb 6-1: USB disconnect, device number 4 [ 687.760422][ T5821] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 687.910311][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 687.929248][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 687.942313][ T5821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.945345][ T5821] usb 6-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.40 [ 687.945376][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.945397][ T5821] usb 6-1: Product: syz [ 687.945412][ T5821] usb 6-1: Manufacturer: 띤⸌歡瞦䫛䖓㒈ྗぢ៰૏쬃ۦ櫴홳癧媺㽶ꧠᑏᾈ壒腍ؠ켕귶≖棼䥤썧ᑋ睻崲䅺 [ 687.945435][ T5821] usb 6-1: SerialNumber: syz [ 688.031710][T10525] netlink: 'syz.0.1288': attribute type 11 has an invalid length. [ 688.031733][T10525] netlink: 'syz.0.1288': attribute type 23 has an invalid length. [ 688.031746][T10525] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1288'. [ 688.248687][ T5821] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 688.281070][ T5821] usb 6-1: USB disconnect, device number 5 [ 691.083630][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.083691][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.382897][ T5821] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 691.530225][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 691.532525][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.532543][ T5821] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 691.537048][ T5821] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 691.537117][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.537225][ T5821] usb 1-1: Product: syz [ 691.537285][ T5821] usb 1-1: Manufacturer: syz [ 691.537343][ T5821] usb 1-1: SerialNumber: syz [ 691.690573][ T5821] usb 1-1: config 0 descriptor?? [ 693.155789][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 694.077021][ T5821] usb 1-1: USB disconnect, device number 27 [ 695.578551][T10586] netlink: 'syz.0.1305': attribute type 11 has an invalid length. [ 695.578574][T10586] netlink: 'syz.0.1305': attribute type 23 has an invalid length. [ 695.578588][T10586] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1305'. [ 696.405360][T10598] 9pnet_virtio: no channels available for device syz [ 696.417397][ T1854] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 696.707115][ T1854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.707145][ T1854] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 696.731434][ T1854] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 696.731466][ T1854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.731487][ T1854] usb 2-1: Product: syz [ 696.731502][ T1854] usb 2-1: Manufacturer: syz [ 696.731517][ T1854] usb 2-1: SerialNumber: syz [ 696.743148][ T1854] usb 2-1: config 0 descriptor?? [ 696.860369][ T824] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 697.005096][ T808] usb 2-1: USB disconnect, device number 34 [ 697.025124][ T824] usb 1-1: config 0 has no interfaces? [ 697.027908][ T824] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.027938][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.027958][ T824] usb 1-1: Product: syz [ 697.027971][ T824] usb 1-1: Manufacturer: syz [ 697.027985][ T824] usb 1-1: SerialNumber: syz [ 697.097067][ T824] usb 1-1: config 0 descriptor?? [ 697.327815][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.328350][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.344252][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.344741][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.375467][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1312'. [ 697.375788][T10602] 8021q: VLANs not supported on caif0 [ 697.631958][ T808] usb 1-1: USB disconnect, device number 28 [ 700.452810][T10630] 9pnet_virtio: no channels available for device syz [ 702.050250][T10636] netlink: 'syz.5.1323': attribute type 11 has an invalid length. [ 702.050275][T10636] netlink: 'syz.5.1323': attribute type 23 has an invalid length. [ 702.050286][T10636] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1323'. [ 703.086078][T10642] netlink: 'syz.2.1324': attribute type 4 has an invalid length. [ 703.086127][T10642] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.1324'. [ 704.010291][ T824] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 704.693189][ T824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.693277][ T824] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.693317][ T824] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 704.693340][ T824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.748661][ T824] usb 4-1: config 0 descriptor?? [ 705.001046][ T1854] usb 4-1: USB disconnect, device number 31 [ 706.590283][ T5893] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 706.649179][T10682] netlink: 'syz.2.1337': attribute type 11 has an invalid length. [ 706.649206][T10682] netlink: 'syz.2.1337': attribute type 23 has an invalid length. [ 706.649221][T10682] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1337'. [ 706.740586][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 706.745689][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 706.746792][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.746814][ T5893] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 706.784446][ T5893] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d7.a0 [ 706.784477][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.784498][ T5893] usb 2-1: Product: syz [ 706.784514][ T5893] usb 2-1: Manufacturer: syz [ 706.784529][ T5893] usb 2-1: SerialNumber: syz [ 706.832467][ T5893] usb 2-1: config 0 descriptor?? [ 707.052159][ T5893] usb 2-1: USB disconnect, device number 35 [ 708.046719][T10703] tipc: Enabling of bearer rejected, already enabled [ 711.800308][ T824] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 711.894977][T10732] netlink: 'syz.1.1350': attribute type 11 has an invalid length. [ 711.894996][T10732] netlink: 'syz.1.1350': attribute type 23 has an invalid length. [ 711.895006][T10732] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1350'. [ 711.952680][ T824] usb 3-1: config 0 has no interfaces? [ 711.955268][ T824] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 711.955305][ T824] usb 3-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 711.955326][ T824] usb 3-1: Manufacturer: syz [ 711.990344][ T824] usb 3-1: config 0 descriptor?? [ 712.146254][T10739] netlink: 'syz.3.1351': attribute type 11 has an invalid length. [ 712.146277][T10739] netlink: 'syz.3.1351': attribute type 23 has an invalid length. [ 712.146292][T10739] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1351'. [ 713.276913][T10748] tipc: Enabling of bearer rejected, already enabled [ 713.493295][ T824] usb 3-1: USB disconnect, device number 30 [ 714.023099][ T808] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 714.274405][ T808] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 714.274473][ T808] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 714.274659][ T808] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 714.274721][ T808] usb 6-1: config 220 interface 0 has no altsetting 0 [ 714.274792][ T808] usb 6-1: config 220 interface 1 has no altsetting 0 [ 714.582174][ T808] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 714.582246][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.582308][ T808] usb 6-1: Product: syz [ 714.582325][ T808] usb 6-1: Manufacturer: syz [ 714.582378][ T808] usb 6-1: SerialNumber: syz [ 715.902908][ T808] usb 6-1: selecting invalid altsetting 0 [ 715.953965][ T808] usb 6-1: selecting invalid altsetting 0 [ 715.954375][ T808] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22 [ 715.958210][ T808] usb 6-1: selecting invalid altsetting 0 [ 715.958236][ T808] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 715.999582][ T808] usb 6-1: USB disconnect, device number 6 [ 716.510278][ T1854] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 716.665145][ T1854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.665167][ T1854] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 716.667059][ T1854] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 716.667078][ T1854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.667092][ T1854] usb 2-1: Product: syz [ 716.667103][ T1854] usb 2-1: Manufacturer: syz [ 716.667113][ T1854] usb 2-1: SerialNumber: syz [ 716.677632][ T1854] usb 2-1: config 0 descriptor?? [ 716.960472][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.961957][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.962790][ T5827] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 716.962844][ T5827] Bluetooth: hci4: unknown advertising packet type: 0x0d [ 716.962866][ T5827] Bluetooth: hci4: Malformed LE Event: 0x02 [ 716.979323][ T1854] usb 2-1: USB disconnect, device number 36 [ 717.964289][T10787] tipc: Enabling of bearer rejected, already enabled [ 718.500672][T10795] netlink: 'syz.3.1367': attribute type 11 has an invalid length. [ 718.500694][T10795] netlink: 'syz.3.1367': attribute type 23 has an invalid length. [ 718.500709][T10795] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1367'. [ 718.561948][T10794] netlink: 'syz.1.1368': attribute type 11 has an invalid length. [ 718.561972][T10794] netlink: 'syz.1.1368': attribute type 23 has an invalid length. [ 718.561987][T10794] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1368'. [ 723.300254][ T824] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 723.344189][T10834] tipc: Started in network mode [ 723.344224][T10834] tipc: Node identity 7f000001, cluster identity 4711 [ 723.345044][T10834] tipc: Enabled bearer , priority 10 [ 724.110281][ T824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.110342][ T824] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 724.110366][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.353978][ T824] usb 1-1: config 0 descriptor?? [ 724.460403][ T5821] tipc: Node number set to 2130706433 [ 724.903657][T10840] pim6reg99999999: entered allmulticast mode [ 725.655538][ T824] usb 1-1: string descriptor 0 read error: -71 [ 725.734476][ T824] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 725.750602][ T824] usb 1-1: USB disconnect, device number 29 [ 725.886982][T10847] netlink: 'syz.5.1384': attribute type 11 has an invalid length. [ 725.887005][T10847] netlink: 'syz.5.1384': attribute type 23 has an invalid length. [ 725.887019][T10847] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1384'. [ 727.750317][ T808] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 727.910356][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 727.914892][ T808] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 727.914924][ T808] usb 4-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 727.918115][ T808] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 727.918147][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.918170][ T808] usb 4-1: Product: syz [ 727.918187][ T808] usb 4-1: Manufacturer: syz [ 727.918203][ T808] usb 4-1: SerialNumber: syz [ 728.427974][ T824] usb 4-1: USB disconnect, device number 32 [ 729.029169][T10875] tipc: Enabling of bearer rejected, already enabled [ 731.304393][T10891] tipc: Enabling of bearer rejected, already enabled [ 731.560341][ T824] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 731.741794][ T824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.741855][ T824] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 731.741881][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.791105][ T824] usb 3-1: config 0 descriptor?? [ 735.423344][ T824] usb 3-1: string descriptor 0 read error: -71 [ 735.434226][ T824] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 735.450951][ T824] usb 3-1: USB disconnect, device number 31 [ 735.810907][T10910] netlink: 'syz.0.1402': attribute type 11 has an invalid length. [ 735.810929][T10910] netlink: 'syz.0.1402': attribute type 23 has an invalid length. [ 735.810943][T10910] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1402'. [ 735.867193][T10916] tipc: Enabling of bearer rejected, already enabled [ 736.360074][ T5893] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 737.001664][ T5893] usb 2-1: config 0 has no interfaces? [ 737.114006][ T5893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 737.114041][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.114063][ T5893] usb 2-1: Product: syz [ 737.114078][ T5893] usb 2-1: Manufacturer: syz [ 737.114093][ T5893] usb 2-1: SerialNumber: syz [ 737.170034][ T5893] usb 2-1: config 0 descriptor?? [ 737.477466][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.478030][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.484331][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.485308][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.491215][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 737.491664][T10919] 8021q: VLANs not supported on caif0 [ 737.538182][T10928] tipc: Enabling of bearer rejected, already enabled [ 739.290234][T10084] usb 2-1: USB disconnect, device number 37 [ 740.740319][ T5893] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 740.903107][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.903169][ T5893] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 740.903195][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.106597][ T5893] usb 2-1: config 0 descriptor?? [ 741.170880][ T5893] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 741.625180][T10958] tipc: Enabling of bearer rejected, already enabled [ 744.085983][T10084] usb 2-1: USB disconnect, device number 38 [ 745.827138][T10981] netlink: 'syz.1.1425': attribute type 11 has an invalid length. [ 745.827175][T10981] netlink: 'syz.1.1425': attribute type 23 has an invalid length. [ 745.827191][T10981] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1425'. [ 746.080308][ T5893] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 746.277330][T10989] netlink: 'syz.2.1420': attribute type 11 has an invalid length. [ 746.277354][T10989] netlink: 'syz.2.1420': attribute type 23 has an invalid length. [ 746.277370][T10989] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1420'. [ 746.445851][ T5893] usb 1-1: config 0 has no interfaces? [ 746.449682][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.449713][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.449734][ T5893] usb 1-1: Product: syz [ 746.449749][ T5893] usb 1-1: Manufacturer: syz [ 746.449765][ T5893] usb 1-1: SerialNumber: syz [ 747.011786][ T5893] usb 1-1: config 0 descriptor?? [ 747.242610][T10983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.243156][T10983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.248921][T10983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.249436][T10983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.251083][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 747.398134][T10983] 8021q: VLANs not supported on caif0 [ 747.484759][ T808] usb 1-1: USB disconnect, device number 30 [ 747.940811][T11005] tipc: Enabling of bearer rejected, already enabled [ 749.519508][T11019] warning: `syz.3.1436' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 749.756398][T11023] tipc: Enabling of bearer rejected, already enabled [ 750.972269][T11030] netlink: 'syz.0.1441': attribute type 11 has an invalid length. [ 750.972285][T11030] netlink: 'syz.0.1441': attribute type 23 has an invalid length. [ 750.972295][T11030] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1441'. [ 752.223394][T11045] netlink: 'syz.5.1443': attribute type 4 has an invalid length. [ 752.223468][T11045] netlink: 1601 bytes leftover after parsing attributes in process `syz.5.1443'. [ 752.519060][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.519132][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.618459][ T5893] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 752.832421][ T5893] usb 4-1: config 0 has no interfaces? [ 752.836682][ T5893] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.836716][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.836738][ T5893] usb 4-1: Product: syz [ 752.836753][ T5893] usb 4-1: Manufacturer: syz [ 752.836768][ T5893] usb 4-1: SerialNumber: syz [ 752.901684][ T5893] usb 4-1: config 0 descriptor?? [ 754.423435][T10084] usb 4-1: USB disconnect, device number 33 [ 756.187018][T11074] tipc: Enabling of bearer rejected, already enabled [ 757.486181][T11089] netlink: 'syz.0.1459': attribute type 11 has an invalid length. [ 757.486197][T11089] netlink: 'syz.0.1459': attribute type 23 has an invalid length. [ 757.486213][T11089] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1459'. [ 758.174044][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 758.321793][ T10] usb 6-1: config 0 has no interfaces? [ 758.323986][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 758.324008][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.324023][ T10] usb 6-1: Product: syz [ 758.324079][ T10] usb 6-1: Manufacturer: syz [ 758.324090][ T10] usb 6-1: SerialNumber: syz [ 758.335826][ T10] usb 6-1: config 0 descriptor?? [ 758.580370][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.580766][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.607818][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.608179][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.609754][T11102] netlink: zone id is out of range [ 758.609763][T11102] netlink: zone id is out of range [ 758.609770][T11102] netlink: zone id is out of range [ 758.609775][T11102] netlink: zone id is out of range [ 758.609781][T11102] netlink: zone id is out of range [ 758.609901][T11102] netlink: zone id is out of range [ 758.609907][T11102] netlink: zone id is out of range [ 758.609912][T11102] netlink: zone id is out of range [ 758.609918][T11102] netlink: zone id is out of range [ 758.609923][T11102] netlink: zone id is out of range [ 758.626367][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1460'. [ 758.626650][T11092] 8021q: VLANs not supported on nlmon0 [ 758.730251][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 759.940399][T10084] usb 6-1: USB disconnect, device number 7 [ 760.028579][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 760.028601][ T10] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 760.028644][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 760.028664][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 760.028678][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 760.041890][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 760.041914][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.041929][ T10] usb 4-1: Product: syz [ 760.041939][ T10] usb 4-1: Manufacturer: syz [ 760.041950][ T10] usb 4-1: SerialNumber: syz [ 760.311217][T11109] tipc: Enabling of bearer rejected, already enabled [ 760.928342][ T10] usb 4-1: selecting invalid altsetting 0 [ 760.950580][ T10] usb 4-1: selecting invalid altsetting 0 [ 760.950967][ T10] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22 [ 760.953548][ T10] usb 4-1: selecting invalid altsetting 0 [ 760.953571][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 761.026435][ T10] usb 4-1: USB disconnect, device number 34 [ 762.435788][T11116] binder_alloc: 11115: binder_alloc_buf, no vma [ 763.950287][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 764.398412][ T10] usb 2-1: device not accepting address 39, error -71 [ 765.420254][T10084] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 765.576288][T10084] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.576317][T10084] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 765.579329][T10084] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 765.579358][T10084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.579380][T10084] usb 3-1: Product: syz [ 765.579395][T10084] usb 3-1: Manufacturer: syz [ 765.579409][T10084] usb 3-1: SerialNumber: syz [ 765.678660][T10084] usb 3-1: config 0 descriptor?? [ 765.992106][T11123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.992654][T11123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.001892][ T808] usb 3-1: USB disconnect, device number 32 [ 766.052973][T11138] tipc: Enabling of bearer rejected, already enabled [ 766.824368][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 769.893596][T11158] netlink: 'syz.1.1482': attribute type 11 has an invalid length. [ 769.893623][T11158] netlink: 'syz.1.1482': attribute type 23 has an invalid length. [ 769.893639][T11158] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1482'. [ 770.440461][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 770.710326][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 772.922312][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1491'. [ 773.362676][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 773.594805][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 773.595835][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 773.595861][ T10] usb 1-1: can't read configurations, error -71 [ 773.627279][T11193] tipc: Enabling of bearer rejected, already enabled [ 776.113551][T11208] netlink: 'syz.2.1498': attribute type 11 has an invalid length. [ 776.113576][T11208] netlink: 'syz.2.1498': attribute type 23 has an invalid length. [ 776.113591][T11208] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1498'. [ 778.644525][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 782.081019][T11249] netlink: 'syz.5.1512': attribute type 11 has an invalid length. [ 782.081044][T11249] netlink: 'syz.5.1512': attribute type 23 has an invalid length. [ 782.081059][T11249] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1512'. [ 783.131855][T11265] tipc: Enabling of bearer rejected, already enabled [ 787.021994][T11292] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 787.022020][T11292] netlink: 1601 bytes leftover after parsing attributes in process `syz.0.1513'. [ 787.164725][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1517'. [ 787.311600][T11295] netlink: 'syz.3.1525': attribute type 11 has an invalid length. [ 787.311625][T11295] netlink: 'syz.3.1525': attribute type 23 has an invalid length. [ 787.311659][T11295] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1525'. [ 787.681066][T11304] hub 8-0:1.0: USB hub found [ 787.683814][T11304] hub 8-0:1.0: 1 port detected [ 790.917881][T11327] binder_alloc: 11326: binder_alloc_buf, no vma [ 790.999375][T11330] netlink: 'syz.0.1537': attribute type 4 has an invalid length. [ 790.999399][T11330] netlink: 1601 bytes leftover after parsing attributes in process `syz.0.1537'. [ 791.090282][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 791.245647][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.245679][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 791.272448][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 791.272489][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.272511][ T10] usb 3-1: Product: syz [ 791.272527][ T10] usb 3-1: Manufacturer: syz [ 791.272542][ T10] usb 3-1: SerialNumber: syz [ 791.285359][ T10] usb 3-1: config 0 descriptor?? [ 791.555174][ T5827] Bluetooth: hci3: unknown advertising packet type: 0x17 [ 791.557975][ T1854] usb 3-1: USB disconnect, device number 33 [ 792.461702][T11340] hub 8-0:1.0: USB hub found [ 792.470402][T11340] hub 8-0:1.0: 1 port detected [ 792.682535][T11347] netlink: 'syz.2.1544': attribute type 11 has an invalid length. [ 792.682559][T11347] netlink: 'syz.2.1544': attribute type 23 has an invalid length. [ 792.682575][T11347] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1544'. [ 796.884587][ T1854] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 798.197394][T11389] netlink: 'syz.1.1556': attribute type 11 has an invalid length. [ 798.197417][T11389] netlink: 'syz.1.1556': attribute type 23 has an invalid length. [ 798.197432][T11389] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1556'. [ 798.261926][ T808] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 798.429157][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.429185][ T808] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.452632][ T808] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 798.452671][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.452694][ T808] usb 4-1: Product: syz [ 798.452710][ T808] usb 4-1: Manufacturer: syz [ 798.452726][ T808] usb 4-1: SerialNumber: syz [ 798.506426][ T808] usb 4-1: config 0 descriptor?? [ 799.187324][ T808] usb 4-1: USB disconnect, device number 35 [ 801.560764][T11410] netlink: 'syz.5.1565': attribute type 11 has an invalid length. [ 801.560786][T11410] netlink: 'syz.5.1565': attribute type 23 has an invalid length. [ 801.560800][T11410] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1565'. [ 802.161292][T11413] binder: 11409:11413 ioctl c0306201 0 returned -14 [ 803.350269][ T808] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 803.510535][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 803.515162][ T808] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 803.515191][ T808] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 803.517548][ T808] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 803.517578][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.517600][ T808] usb 2-1: Product: syz [ 803.517615][ T808] usb 2-1: Manufacturer: syz [ 803.517630][ T808] usb 2-1: SerialNumber: syz [ 803.847501][T10084] usb 2-1: USB disconnect, device number 41 [ 808.484313][T11440] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 808.484336][T11440] netlink: 'syz.3.1573': attribute type 23 has an invalid length. [ 808.484351][T11440] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1573'. [ 808.920375][ T808] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 809.134225][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.134255][ T808] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 809.247561][T11451] blktrace: Concurrent blktraces are not allowed on loop0 [ 810.078339][ T808] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 810.078372][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.078393][ T808] usb 3-1: Product: syz [ 810.078408][ T808] usb 3-1: Manufacturer: syz [ 810.078423][ T808] usb 3-1: SerialNumber: syz [ 810.105722][ T808] usb 3-1: config 0 descriptor?? [ 810.410391][ T5827] Bluetooth: hci3: unknown advertising packet type: 0x17 [ 810.411826][ T808] usb 3-1: USB disconnect, device number 34 [ 811.546730][T11462] netlink: 'syz.0.1579': attribute type 4 has an invalid length. [ 811.546872][T11462] netlink: 1601 bytes leftover after parsing attributes in process `syz.0.1579'. [ 812.957750][T11468] binder: 11452:11468 ioctl c0306201 0 returned -14 [ 814.110988][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.111062][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.330230][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 814.575133][ T10] usb 4-1: device descriptor read/64, error -71 [ 818.109995][T11491] netlink: 'syz.3.1588': attribute type 11 has an invalid length. [ 818.110018][T11491] netlink: 'syz.3.1588': attribute type 23 has an invalid length. [ 818.110035][T11491] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1588'. [ 821.110354][T11496] blktrace: Concurrent blktraces are not allowed on loop10 [ 821.251150][T11497] blktrace: Concurrent blktraces are not allowed on loop0 [ 824.897026][T11509] netlink: 'syz.3.1593': attribute type 4 has an invalid length. [ 824.897054][T11509] netlink: 1601 bytes leftover after parsing attributes in process `syz.3.1593'. [ 825.649299][T11512] binder: 11500:11512 ioctl c0306201 0 returned -14 [ 826.833928][T11511] binder_alloc: 11510: binder_alloc_buf, no vma [ 829.335877][T11534] blktrace: Concurrent blktraces are not allowed on loop4 [ 832.271297][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 832.292876][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 832.310329][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 832.322752][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 832.324090][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 832.544392][T11549] netlink: 'syz.5.1605': attribute type 11 has an invalid length. [ 832.544417][T11549] netlink: 'syz.5.1605': attribute type 23 has an invalid length. [ 832.544432][T11549] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1605'. [ 834.529365][ T5827] Bluetooth: hci5: command tx timeout [ 837.171561][ T5827] Bluetooth: hci5: command tx timeout [ 837.688137][T10084] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 838.190260][T11108] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 839.293335][ T60] Bluetooth: hci5: command tx timeout [ 839.304446][T11108] usb 6-1: device descriptor read/64, error -71 [ 839.426322][T11545] chnl_net:caif_netlink_parms(): no params data found [ 839.770171][T11108] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 839.856515][T11590] blktrace: Concurrent blktraces are not allowed on loop0 [ 839.991383][T11108] usb 6-1: device descriptor read/64, error -71 [ 840.113127][T11108] usb usb6-port1: attempt power cycle [ 840.406279][T11545] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.406529][T11545] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.406719][T11545] bridge_slave_0: entered allmulticast mode [ 840.409599][T11545] bridge_slave_0: entered promiscuous mode [ 840.440236][T11545] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.440441][T11545] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.440665][T11545] bridge_slave_1: entered allmulticast mode [ 840.443616][T11545] bridge_slave_1: entered promiscuous mode [ 840.515654][T11545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.529772][T11545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.606236][T11545] team0: Port device team_slave_0 added [ 840.618273][T11545] team0: Port device team_slave_1 added [ 840.938864][T11545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.938884][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.938913][T11545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.017526][T11545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.017541][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.017562][T11545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.219526][T11598] netlink: 'syz.5.1615': attribute type 11 has an invalid length. [ 841.219547][T11598] netlink: 'syz.5.1615': attribute type 23 has an invalid length. [ 841.219560][T11598] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1615'. [ 842.997758][ T60] Bluetooth: hci5: command tx timeout [ 847.101481][ T5892] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 849.286347][ T5892] usb 6-1: device descriptor read/all, error -61 [ 849.520217][ T5892] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 849.650254][ T5892] usb 6-1: device descriptor read/64, error -71 [ 849.760419][ T5893] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 849.760978][ T5892] usb usb6-port1: attempt power cycle [ 849.842686][ T808] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 851.633138][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 851.681972][ T808] usb 3-1: device descriptor read/64, error -71 [ 851.733127][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 851.736494][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 851.736530][ T5893] usb 1-1: can't read configurations, error -71 [ 851.804301][ T1486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.897572][T11545] hsr_slave_0: entered promiscuous mode [ 851.899145][T11545] hsr_slave_1: entered promiscuous mode [ 851.911553][T11545] debugfs: 'hsr0' already exists in 'hsr' [ 851.911595][T11545] Cannot create hsr debugfs directory [ 851.931511][ T808] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 852.060258][ T808] usb 3-1: device descriptor read/64, error -71 [ 852.172837][ T808] usb usb3-port1: attempt power cycle [ 852.189759][ T1486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.680473][ T808] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 853.555390][ T808] usb 3-1: device descriptor read/8, error -71 [ 856.050003][ T1486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.740879][ T5892] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 858.332989][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.333049][ T5892] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 858.333074][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.395428][ T5892] usb 3-1: config 0 descriptor?? [ 858.404590][ T1486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.441686][T11683] hub 8-0:1.0: USB hub found [ 858.441932][T11683] hub 8-0:1.0: 1 port detected [ 858.682082][ T5893] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 858.840236][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 859.102447][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 859.104596][ T5893] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 859.105073][ T5893] usb 4-1: can't read configurations, error -71 [ 860.219303][ T5892] usb 3-1: string descriptor 0 read error: -71 [ 861.035720][ T5892] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 861.064571][ T5892] usb 3-1: USB disconnect, device number 39 [ 861.514138][T11702] blktrace: Concurrent blktraces are not allowed on loop0 [ 864.462220][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 864.683755][ T5892] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 865.287104][T11545] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.769784][T11545] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 866.861687][T11545] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 866.867994][T11717] hub 8-0:1.0: USB hub found [ 866.868352][T11717] hub 8-0:1.0: 1 port detected [ 866.953444][ T1486] bridge_slave_1: left allmulticast mode [ 866.953476][ T1486] bridge_slave_1: left promiscuous mode [ 866.953726][ T1486] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.091529][ T1486] bridge_slave_0: left allmulticast mode [ 867.091562][ T1486] bridge_slave_0: left promiscuous mode [ 867.091820][ T1486] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.410218][T10084] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 867.590286][T10084] usb 6-1: Using ep0 maxpacket: 8 [ 867.593502][T10084] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.593531][T10084] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 867.596739][T10084] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 867.596771][T10084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.596793][T10084] usb 6-1: Product: syz [ 867.596808][T10084] usb 6-1: Manufacturer: syz [ 867.596823][T10084] usb 6-1: SerialNumber: syz [ 867.730542][T10084] usb 6-1: config 0 descriptor?? [ 869.460258][T10084] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 869.620145][T10084] usb 3-1: Using ep0 maxpacket: 16 [ 869.833660][T10084] usb 3-1: unable to get BOS descriptor or descriptor too short [ 869.838187][T10084] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 869.838226][T10084] usb 3-1: can't read configurations, error -71 [ 869.951708][T11749] blktrace: Concurrent blktraces are not allowed on loop0 [ 870.921557][ T808] usb 6-1: USB disconnect, device number 15 [ 872.523078][ T1486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.658333][ T1486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.363760][ T1486] bond0 (unregistering): Released all slaves [ 875.090527][T11545] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 875.130192][ T1854] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 875.301465][ T1854] usb 6-1: device descriptor read/64, error -71 [ 875.366789][ T1486] tipc: Disabling bearer [ 875.366973][ T1486] tipc: Left network mode [ 875.402603][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.402673][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.620194][ T1854] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 876.108799][T11786] hub 8-0:1.0: USB hub found [ 876.113170][T11786] hub 8-0:1.0: 1 port detected [ 878.668108][T11545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.884807][T11545] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.893510][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.907973][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.315210][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.315300][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.600966][T11818] blktrace: Concurrent blktraces are not allowed on loop6 [ 882.306476][T11822] binder_alloc: 11821: binder_alloc_buf, no vma [ 885.752327][T11843] hub 8-0:1.0: USB hub found [ 886.366328][T11843] hub 8-0:1.0: 1 port detected [ 891.700642][ T1486] hsr_slave_0: left promiscuous mode [ 891.840230][ T1486] hsr_slave_1: left promiscuous mode [ 891.841362][ T1486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.841389][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.001713][ T1486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.001743][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.336665][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 893.339597][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 893.339974][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 893.347953][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 893.375017][ T1486] veth1_macvtap: left promiscuous mode [ 893.375117][ T1486] veth0_macvtap: left promiscuous mode [ 893.375284][ T1486] veth1_vlan: left promiscuous mode [ 893.375394][ T1486] veth0_vlan: left promiscuous mode [ 893.452625][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 894.736856][ T1486] pim6reg (unregistering): left allmulticast mode [ 894.774102][ T1486] pim6reg99999999 (unregistering): left allmulticast mode [ 895.110341][T10084] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 895.267125][T10084] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.267154][T10084] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 895.290890][T10084] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 895.290918][T10084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.290937][T10084] usb 6-1: Product: syz [ 895.290951][T10084] usb 6-1: Manufacturer: syz [ 895.290964][T10084] usb 6-1: SerialNumber: syz [ 895.351463][T10084] usb 6-1: config 0 descriptor?? [ 895.550382][ T60] Bluetooth: hci4: command tx timeout [ 895.570724][ T60] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 895.592238][ T808] usb 6-1: USB disconnect, device number 18 [ 895.754374][T11889] hub 8-0:1.0: USB hub found [ 895.757662][T11889] hub 8-0:1.0: 1 port detected [ 896.720962][ T1486] team0 (unregistering): Port device team_slave_1 removed [ 897.961721][ T60] Bluetooth: hci4: command tx timeout [ 898.170812][ T1486] team0 (unregistering): Port device team_slave_0 removed [ 898.574225][ T1486] team0 (unregistering): Port device dummy0 removed [ 900.041509][ T60] Bluetooth: hci4: command tx timeout [ 901.043705][ C1] ================================================================== [ 901.043723][ C1] BUG: KASAN: slab-use-after-free in detach_timer+0xc8/0x300 [ 901.043762][ C1] Read of size 8 at addr ffff8880602008d0 by task ktimers/1/29 [ 901.043782][ C1] [ 901.043815][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 901.043848][ C1] Tainted: [L]=SOFTLOCKUP [ 901.043856][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.043880][ C1] Call Trace: [ 901.043892][ C1] [ 901.043902][ C1] dump_stack_lvl+0xe8/0x150 [ 901.043938][ C1] print_report+0xba/0x230 [ 901.043970][ C1] ? detach_timer+0xc8/0x300 [ 901.043991][ C1] kasan_report+0x117/0x150 [ 901.044027][ C1] ? detach_timer+0xc8/0x300 [ 901.044051][ C1] detach_timer+0xc8/0x300 [ 901.044074][ C1] __run_timer_base+0x624/0x9f0 [ 901.044115][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 901.044147][ C1] ? rt_spin_lock+0x1e0/0x400 [ 901.044182][ C1] run_timer_softirq+0xb7/0x170 [ 901.044217][ C1] handle_softirqs+0x1de/0x6f0 [ 901.044256][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 901.044291][ C1] run_ktimerd+0x69/0x100 [ 901.044325][ C1] smpboot_thread_fn+0x541/0xa50 [ 901.044362][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 901.044402][ C1] kthread+0x388/0x470 [ 901.044437][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 901.044470][ C1] ? __pfx_kthread+0x10/0x10 [ 901.044494][ C1] ret_from_fork+0x51e/0xb90 [ 901.044529][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 901.044559][ C1] ? __switch_to+0xc7d/0x1450 [ 901.044582][ C1] ? __pfx_kthread+0x10/0x10 [ 901.044601][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.044625][ C1] [ 901.044643][ C1] [ 901.044647][ C1] Allocated by task 7795: [ 901.044655][ C1] kasan_save_track+0x3e/0x80 [ 901.044678][ C1] __kasan_kmalloc+0x93/0xb0 [ 901.044699][ C1] __kmalloc_cache_noprof+0x3a6/0x690 [ 901.044723][ C1] rose_add_node+0x26f/0xf50 [ 901.044741][ C1] rose_rt_ioctl+0xdc1/0x1350 [ 901.044757][ C1] rose_ioctl+0x3fb/0x8f0 [ 901.044781][ C1] sock_do_ioctl+0x101/0x320 [ 901.044806][ C1] sock_ioctl+0x5c9/0x7f0 [ 901.044828][ C1] __se_sys_ioctl+0xff/0x170 [ 901.044851][ C1] do_syscall_64+0x14d/0xf80 [ 901.044873][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.044889][ C1] [ 901.044892][ C1] Freed by task 29: [ 901.044900][ C1] kasan_save_track+0x3e/0x80 [ 901.044930][ C1] kasan_save_free_info+0x46/0x50 [ 901.044946][ C1] __kasan_slab_free+0x5c/0x80 [ 901.044966][ C1] kfree+0x1c1/0x6c0 [ 901.044983][ C1] rose_timer_expiry+0x4cb/0x600 [ 901.045019][ C1] call_timer_fn+0x192/0x640 [ 901.045032][ C1] __run_timer_base+0x6a3/0x9f0 [ 901.045054][ C1] run_timer_softirq+0xb7/0x170 [ 901.045087][ C1] handle_softirqs+0x1de/0x6f0 [ 901.045106][ C1] run_ktimerd+0x69/0x100 [ 901.045128][ C1] smpboot_thread_fn+0x541/0xa50 [ 901.045150][ C1] kthread+0x388/0x470 [ 901.045163][ C1] ret_from_fork+0x51e/0xb90 [ 901.045182][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.045195][ C1] [ 901.045198][ C1] The buggy address belongs to the object at ffff888060200800 [ 901.045198][ C1] which belongs to the cache kmalloc-512 of size 512 [ 901.045212][ C1] The buggy address is located 208 bytes inside of [ 901.045212][ C1] freed 512-byte region [ffff888060200800, ffff888060200a00) [ 901.045228][ C1] [ 901.045232][ C1] The buggy address belongs to the physical page: [ 901.045268][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60200 [ 901.045284][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 901.045297][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 901.045314][ C1] page_type: f5(slab) [ 901.045330][ C1] raw: 0080000000000040 ffff88813fe1cc80 dead000000000100 dead000000000122 [ 901.045356][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 901.045371][ C1] head: 0080000000000040 ffff88813fe1cc80 dead000000000100 dead000000000122 [ 901.045384][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 901.045399][ C1] head: 0080000000000002 ffffea0001808001 00000000ffffffff 00000000ffffffff [ 901.045435][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 901.045444][ C1] page dumped because: kasan: bad access detected [ 901.045456][ C1] page_owner tracks the page as allocated [ 901.045462][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5813, tgid 5813 (syz-executor), ts 104004676062, free_ts 0 [ 901.045492][ C1] post_alloc_hook+0x231/0x280 [ 901.045515][ C1] get_page_from_freelist+0x28bb/0x2950 [ 901.045530][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 901.045545][ C1] allocate_slab+0x77/0x660 [ 901.045561][ C1] refill_objects+0x334/0x3c0 [ 901.045576][ C1] __pcs_replace_empty_main+0x328/0x5f0 [ 901.045595][ C1] __kmalloc_cache_noprof+0x44e/0x690 [ 901.045617][ C1] ____ip_mc_inc_group+0x518/0xdd0 [ 901.045639][ C1] ip_mc_up+0x115/0x2e0 [ 901.045659][ C1] inetdev_event+0xff6/0x1610 [ 901.045675][ C1] notifier_call_chain+0x1be/0x400 [ 901.045690][ C1] __dev_notify_flags+0x1a9/0x310 [ 901.045709][ C1] netif_change_flags+0xe8/0x1a0 [ 901.045728][ C1] do_setlink+0xf82/0x4590 [ 901.045746][ C1] rtnl_newlink+0x15a9/0x1be0 [ 901.045763][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 901.045778][ C1] page_owner free stack trace missing [ 901.045784][ C1] [ 901.045787][ C1] Memory state around the buggy address: [ 901.045796][ C1] ffff888060200780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 901.045808][ C1] ffff888060200800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 901.045819][ C1] >ffff888060200880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 901.045828][ C1] ^ [ 901.045837][ C1] ffff888060200900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 901.045849][ C1] ffff888060200980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 901.045858][ C1] ================================================================== [ 901.045877][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 901.045892][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 901.045915][ C1] Tainted: [L]=SOFTLOCKUP [ 901.045921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.045932][ C1] Call Trace: [ 901.045937][ C1] [ 901.045944][ C1] vpanic+0x56c/0xa60 [ 901.045971][ C1] ? __pfx_vpanic+0x10/0x10 [ 901.046000][ C1] panic+0xc5/0xd0 [ 901.046024][ C1] ? __pfx_panic+0x10/0x10 [ 901.046051][ C1] ? detach_timer+0xc8/0x300 [ 901.046065][ C1] ? rcu_is_watching+0x15/0xb0 [ 901.046084][ C1] ? detach_timer+0xc8/0x300 [ 901.046100][ C1] ? detach_timer+0xc8/0x300 [ 901.046113][ C1] check_panic_on_warn+0x89/0xb0 [ 901.046133][ C1] ? detach_timer+0xc8/0x300 [ 901.046146][ C1] end_report+0x73/0x180 [ 901.046171][ C1] ? detach_timer+0xc8/0x300 [ 901.046184][ C1] kasan_report+0x128/0x150 [ 901.046210][ C1] ? detach_timer+0xc8/0x300 [ 901.046228][ C1] detach_timer+0xc8/0x300 [ 901.046244][ C1] __run_timer_base+0x624/0x9f0 [ 901.046275][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 901.046298][ C1] ? rt_spin_lock+0x1e0/0x400 [ 901.046322][ C1] run_timer_softirq+0xb7/0x170 [ 901.046347][ C1] handle_softirqs+0x1de/0x6f0 [ 901.046374][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 901.046400][ C1] run_ktimerd+0x69/0x100 [ 901.046432][ C1] smpboot_thread_fn+0x541/0xa50 [ 901.046458][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 901.046488][ C1] kthread+0x388/0x470 [ 901.046504][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 901.046533][ C1] ? __pfx_kthread+0x10/0x10 [ 901.046558][ C1] ret_from_fork+0x51e/0xb90 [ 901.046581][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 901.046602][ C1] ? __switch_to+0xc7d/0x1450 [ 901.046620][ C1] ? __pfx_kthread+0x10/0x10 [ 901.046636][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.046656][ C1] [ 902.175622][ C1] Shutting down cpus with NMI [ 902.176301][ C1] Kernel Offset: disabled