last executing test programs: 23m42.811668292s ago: executing program 32 (id=824): setresuid(0xee01, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xe949, 0x593241) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='R', 0x1, 0x7ffffffe) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) 20m27.65162236s ago: executing program 33 (id=1122): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000300)={{&(0x7f0000000000)=[{0x3, 0x8, 0x2, {0x4, 0x6}, 0xc6a, 0x0, 0x54}, {0x5, 0x9, 0x80000001, {0x40000000, 0x9}, 0x7, 0x8, 0x875}], 0x2, 0x40, 0x40, 0x9}, {&(0x7f0000000180)=[{0x40, 0x6}, {0xe, 0xffffffff}], 0x2, 0x10, 0x8d8a, 0x4}, {&(0x7f00000001c0)=[0x1, 0x7], 0x2, 0x8, 0x2, 0x1}, {&(0x7f0000000200)=[{0x5, 0x0, 0x6, 0x4, 0xf2}, {0x9, 0xe50df7bc00000000, 0x0, 0xfffffffffffffffa, 0xfffffffe}], 0x2, 0x28, 0x2}, {&(0x7f00000002c0)=[0x5, 0x5, 0x7, 0x8001, 0x4], 0x5, 0x8, 0x5, 0x2}}) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1m39.271047029s ago: executing program 3 (id=3260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 1m35.243150317s ago: executing program 3 (id=3270): r0 = syz_usb_connect(0x5, 0x248, &(0x7f0000000440)=ANY=[@ANYBLOB="120150024b31d110da0b23d7aed50102030109023602010902a0080904a3c10fffffff0109050e02"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x2a, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x5, 0x30004) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)=""/231) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x7) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x6c9, &(0x7f0000001280)=ANY=[], 0x0) syz_usb_control_io$uac2(r5, 0x0, 0x0) 1m33.023507807s ago: executing program 3 (id=3279): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x24}}, 0x0) 1m30.552190247s ago: executing program 3 (id=3282): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000840)={0x20, 0x16, 0xe, "cc63970e5c6720e95af8d0076b38"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0xc92557b0ce253e8d, 0x4, 0x0, "c439e465", "fb1ff24a"}}, 0x0}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000e80)={0x14, &(0x7f0000000cc0)={0x40, 0x24, 0xc1, {0xc1, 0x22, "d9c7bc5809788db6a3d1b00e44e1c5400d1085a3c9f51960b20af00010343962594d29f238a3b2ff5e6423bcd55c84453f051cfc9c1347e33e2900fe8c2cab7f425dff75c028b6df5f4b61efa9812d3b747c848535f02b21c8a72039c9f3818ad06db6d67c6255d1c2572c5dd09eb7f72c9048979d16569caf7f88e52bebd2cd337c2aa9186c6f55b092c6380d8c5d79dea10c3b186d9cb89c6fbb7bf850b7c95979716886807d5d14f8e9e84832e512722280ce7633955f428675190513e8"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x42, @string={0x42, 0x3, "4d322bdbe0212e051ced41e9ad9674c227288c7008393639f6e1bef08d5c41f6ae9edbfe353d4ba43dbf1ba8d4aeb8a7c274d696ba2c4a105b99301ca025d10f"}}}, &(0x7f0000001100)={0x44, &(0x7f0000000ec0)={0x20, 0x14, 0x4f, "b20f51bb34856368afb9305976bd59b6ac4e11a80bd393e4002b1762c00bc11db1d7523a278a9dd323d41fc8dabff3704009e7d33c2004a5c58dbb00bab50f2c4b4b191b35e9d67ea0a12dec558aa4"}, 0x0, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0xaa}, &(0x7f0000000fc0)={0x20, 0x81, 0x1, 'g'}, &(0x7f0000001000)={0x20, 0x82, 0x3, "772ffa"}, &(0x7f0000001040)={0x20, 0x83, 0x2, "beca"}, &(0x7f0000001080)={0x20, 0x84, 0x4, "c63bfb9c"}, &(0x7f00000010c0)={0x20, 0x85, 0x3, '0;T'}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="f69b6c502d61a183cb76ef68dbf86219d3d864c4fefcaea59b0438eb68a347d68d41df168c7103f8a57ca318fdcb968bb412ae0fa03aba10945ec53e62edbd8b69389c76305c06d98126cb415d806d7ce63d83cd0203fe03954393b831c9fd92ab7b184e1fa533147d504a13ec20a87a3057b6f37ef9932608252dd253b3d7ae6d7ea603"], 0x0) 1m28.018560734s ago: executing program 5 (id=3295): r0 = syz_usb_connect$hid(0x1, 0x5, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc71e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r2, &(0x7f0000000140)="b48e", 0x2) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0xe6, 0xa0, 0x83, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "cf4f8a92b2"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x0, 0xa}, {0x6, 0x24, 0x1a, 0x1, 0x6e234dd50d438da6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x2, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x9c, 0xffff}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x6, 0xee}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x8, 0x7, 0x0, 0x20, 0xd}, 0x92, &(0x7f0000000300)={0x5, 0xf, 0x92, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x7, 0x7, 0x3, 0x1f}, @generic={0x64, 0x10, 0x2, "7ce1e4abffd0b1c93abd44d7dc90037e9d55c738cfe24c9a43b96cdb2648b0c4416e10096b9c8d6bb0da3598b813bbfa4d76aa5be296d403f1b3c1c370ec78fa419b52fd80e0d2709d9eb2ed8f3f83cb99130557ed5e9f7263423383816268a1fb"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x9, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f2cad7de71bf987287596623ed80b45d"}]}, 0x1, [{0x1b, &(0x7f00000003c0)=@string={0x1b, 0x3, "de41e0275653158633bbebdd7c114212a9e02da53533001ccc"}}]}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x70, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x1c, {0x9, 0x21, 0x8001, 0x1, 0x1, {0x22, 0xd7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4, 0xb0}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe, 0x3, 0x5}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0x0, 0x3, 0x8, 0x60}, 0x4b, &(0x7f0000000500)={0x5, 0xf, 0x4b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "7e7663a48bac9ade8de10d7557f0131f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9435b857b80cc927c3b02a4b4471ea3c"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xf, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x7, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0xee0f, 0x7, [0xff00]}]}, 0x4, [{0xa1, &(0x7f0000000580)=@string={0xa1, 0x3, "1ed82b821382bd9f6b9cc82fe96dac1874fe23295a77fe933664e917f68a41227f2b432587439a8181620a1cf3936805556e8348836e074c9d6e5ac7adf4c73889abbcf7de204e3353e95c36c8544d3b715a8870d66b9b2481fe60b18a9ef42abd22bf6eec404ae612ab8cbdae8ec4bc4aecbcdb1f058a105f923e8ec70357af00be716cd693fc965f768a17efd0f3b65684954852a91910ad0f56ed41b956"}}, {0x36, &(0x7f0000000640)=@string={0x36, 0x3, "bc1a1d7bff3c13bfeab021f316f75447b778f5208ecd50d6fe1f30f68b88154900c511fa6a089f04aeccdf25d12136827ca44923"}}, {0x62, &(0x7f0000000680)=@string={0x62, 0x3, "a0ef24b80e1e734d98c6f3703f9076058ccc37035e82b0863c377cd11f2afc93a089cda7ca9b048c887b9e67bd8f15bbf63d34555cb61defa7c37b92ad3e0d13d23c31c8ad96a2c7b182c0a833e2c5d6b53a1b42f144225998856f51d72a9971"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x408}}]}) 1m26.988245408s ago: executing program 3 (id=3301): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "3a6b633cc97d7821", "889714886a4dcadc00", "58ff4fd6", "9b13fcf0a048ff82"}, 0x28) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x40) 1m26.915638233s ago: executing program 0 (id=3302): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="c1e220a182cfa0a8442859", 0xb}, 0x1, 0x0, 0x0, 0x40000}, 0x4006040) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0xe88e164623c85842, 0x0) 1m26.732757665s ago: executing program 3 (id=3304): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m26.651927634s ago: executing program 0 (id=3305): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x3, 0x2, 0x0, 0x4b}) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) r3 = syz_usb_connect(0x5, 0x248, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x53, [{0x0, 0x0}]}) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) read$char_usb(r5, 0x0, 0x0) syz_usb_connect(0x5, 0x46, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000008f304550700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect(0x0, 0x19d, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) 1m25.458728798s ago: executing program 4 (id=3312): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 1m25.190445754s ago: executing program 4 (id=3313): syz_usb_connect$uac2(0x7, 0x0, 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x9, [{{0x9, 0x2, 0xffd7}}]}}, 0x0) 1m24.945164435s ago: executing program 5 (id=3314): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x40) 1m24.729518398s ago: executing program 5 (id=3315): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="c1e220a182cfa0a8442859", 0xb}, 0x1, 0x0, 0x0, 0x40000}, 0x4006040) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0xe88e164623c85842, 0x0) 1m24.434391239s ago: executing program 5 (id=3317): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1a000}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) 1m24.328592518s ago: executing program 5 (id=3318): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) listen(r0, 0x0) 1m24.151718556s ago: executing program 5 (id=3319): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x4000001) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, 0x0, 0x8c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x16101400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000884}, 0x8040) 1m23.954440124s ago: executing program 0 (id=3320): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m23.359080515s ago: executing program 4 (id=3321): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008d1e502039102021a7020a020301090212000100ffc0000904"], 0x0) r1 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000006c0)={0x40, 0x6, 0x3, "cb49ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0) 1m23.070465067s ago: executing program 0 (id=3322): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1m22.217822277s ago: executing program 6 (id=3323): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 1m22.074465909s ago: executing program 0 (id=3324): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) 1m22.074065089s ago: executing program 6 (id=3325): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x40) 1m21.995701533s ago: executing program 0 (id=3326): r0 = socket(0x10, 0x803, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) close(0x4) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) 1m21.920525182s ago: executing program 6 (id=3327): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0xe88e164623c85842, 0x0) 1m21.781695581s ago: executing program 6 (id=3328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1a000}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) 1m21.780585039s ago: executing program 6 (id=3329): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) listen(r0, 0x0) 1m21.682858702s ago: executing program 6 (id=3330): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff1}, {0xc, 0x4}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000400000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4) 1m20.634967446s ago: executing program 4 (id=3331): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r0, 0x0) shutdown(r0, 0x1) 1m20.557707545s ago: executing program 4 (id=3332): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007c7afd75fab", 0xeb}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="8f79cfca1732b44c41f61a8f433147725d252e9b4e1c2090da11e7f0ae21c87d3ad877272241b880e4e7538c909fb5eee7ea4410a96731dcdcb0284bf731f940baf0084177a074e81d8aacc27b781185a0d6b447a83bc0b96fb90ec809a672e9a67da5cb0f6b6f58d5df7fcb49510441c4be59ce8a8b6f45f6d9b51e68c762760e58530969467ccaa845a1df6fc881c1f8ee24ee", 0x94}, {&(0x7f00000003c0)="26e0a13efa8d1524e3d8e21551", 0xd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000780)="b2eb79a95f5de0fbec6635327de60e4cb5af93ceed647019763117dedb1a6266a0b3596b0fbf8af6579e5431dc4e064688b92eced1ddacd8b96e7beda41b30f8e5f66b06ae110e62aa2494a5cb412a3a6a8e7878010b58b69e8980a1037b324c18c7358f585cff6fcb63838c1d1aad0ac1566e4a5936525949d4c605172eb090249661f2e293641296f2b6cc5fa05fff95931c293fdfdb0e8cb80a254f6de844a89f229b96a0733432d84f3b2dd53cf38ba2ed5ed447063ab4d28d056f869902df0fab9cc44f", 0xc6}, {&(0x7f0000000880)="3346cdba29da790f91d3c739bead36e6e0bf7e4bd71e862f49fde259301372638929a03a0ff542a2111eae8ee0ab677e812ba8153585d277892835d6f3cec29ece08d5aa2cbad1524b717ae1733da0459aec72e46ad7bd16486d18083f64092d3084f1093d79acee6c87ef0199cb80a3fdd0ef2c039f9fc8975e6bcf86531d083501a609e4683160660c09cc6618bdae48f16be713248cb9128d125559c5818b6034e5aa04f48f2a05fec562d26d7639913ef4618783ae349aecf90ec0e3ea75315f73a6e55f10", 0xc7}, {&(0x7f0000000980)="1c1b9563acec185fc10e36c8dec5ea5c84afd8c7f2742035cb6691d335b1", 0x1e}], 0x3}}], 0x3, 0x42044) 1m20.404321261s ago: executing program 4 (id=3333): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x88, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m9.819167452s ago: executing program 34 (id=3304): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m7.826342348s ago: executing program 35 (id=3319): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x4000001) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, 0x0, 0x8c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x16101400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000884}, 0x8040) 1m4.819333731s ago: executing program 36 (id=3326): r0 = socket(0x10, 0x803, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) close(0x4) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) 1m4.729058342s ago: executing program 37 (id=3330): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff1}, {0xc, 0x4}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000400000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4) 1m3.810545197s ago: executing program 38 (id=3333): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x88, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 9.928444877s ago: executing program 1 (id=3405): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 9.680585221s ago: executing program 1 (id=3408): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 8.423849692s ago: executing program 1 (id=3415): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0x3fd, 0x4) 5.631638643s ago: executing program 1 (id=3426): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008d1e502039102021a7020a020301090212000100ffc0000904"], 0x0) r1 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000006c0)={0x40, 0x6, 0x3, "cb49ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000080)={0x40, 0x24, 0xed, {0xed, 0x1, "564e01ca5d11532f3c98d12253f20f1cc5f194c5c0047aed00f2466d1b93aad272945cad4dbc88e6bd4b540c8e78773309a5830d79d4fa67fa0bdac41630d9a307b9148f838116c65ac2013f619a2fa5e49196371efa3d03b723f1638d4d201d8e631f6ad06da461a57a5b25222a6d0adb72f11a3ec551fbb45e40c2873f658ac96592900d386af81157073804b1a7bf9a5f70db91f5bda8543df7f4faf46a390ce70b6699a80463bfeed30c0d97170afa308fbeb50200746794c9c603df47de2f6fc4c34b5df1508c64dbf1a23b2da1f6aff8d38da329b50c4cbc8d26e0335ec3697ca261b9d3ef7a25f2"}}, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xb, {[@local=@item_012={0x2, 0x2, 0xc, "dd81"}, @main=@item_4={0x3, 0x0, 0xa, "d72233df"}, @local=@item_012={0x2, 0x2, 0x8, 'Dw'}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1e, 0x8, 0x1, {0x22, 0x93b}}}}, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xe6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x1, 0x26, "c7414a20e5a8874c8336b2ea5f0d5a2c5a255dc79fbbcc968e822042985e008de09cb20dcc7d"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x3d}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0) 5.396475843s ago: executing program 2 (id=3429): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x0, 0x61]}}, 0x0, 0x1d, 0x0, 0xa}, 0x28) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.353865447s ago: executing program 9 (id=3430): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 5.12643849s ago: executing program 9 (id=3431): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x4040040) 5.00738095s ago: executing program 2 (id=3432): ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x48000003, 0x0, "679c51432546da17ceb4ffff00", 0xffffffff, 0x0, 0x5}) 3.833865543s ago: executing program 2 (id=3434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x800) 3.538433875s ago: executing program 9 (id=3436): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x11, 0x0) landlock_restrict_self(r0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) tkill(r2, 0x3d) 3.513921228s ago: executing program 2 (id=3437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f00000005c0)="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", 0x285}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)='R', 0x1}], 0x1}}], 0x2, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) socket(0x2, 0x3, 0xff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x400006) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 3.273514344s ago: executing program 8 (id=3438): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000001200000000000061191400000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x1}, 0xe) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x404c041) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_setup(0x7e17, 0x0) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="110000000000000088b81c77c2ccc615312101d05aa31af275f74c57cc7e3a08b0498adfae2dce9ced2c315415e1fc6797aca27a8d5f636d405b26341aa64b404a38d109a259ec72f33d99d281c727d73fd5d21bf40c89c07bdc7026e4bbc2"], 0x8) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES16], 0x98}}, 0x0) 3.204688252s ago: executing program 9 (id=3439): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "3a6b633cc97d7821", "889714886a4dcadc00", "58ff4fd6", "9b13fcf0a048ff82"}, 0x28) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x40) 2.890412323s ago: executing program 9 (id=3440): r0 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x5b06, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_connect(0x5, 0xda, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) write$char_usb(r1, &(0x7f0000000340)="3bcc2e920728d006b961b4a5e8882773ebf10eb8e6c959d829f4fb6eb1fe13f1f1000000808a579990bf74ea1fedd6a22b2b0609800d4a7744bebbe2843df8ec73345f1a42f545021d", 0x49) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000106d0419c2400001020301180224000101ff"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_open_dev$char_usb(0xc, 0xb4, 0x10) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="200c6f000000d4fea1645079c82bd9dba3345cef118f9c43948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f25ca1276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666cb1952f11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.556458562s ago: executing program 7 (id=3441): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2.445226442s ago: executing program 7 (id=3442): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfa86, 0xe2182) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb77, 0x1011, 0x0, 0xa, 0x9, 0x0, 0xa4de36948e08189d}}) 2.426006603s ago: executing program 8 (id=3443): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x1d, 0x0, 0xa}, 0x28) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2.104927991s ago: executing program 7 (id=3444): r0 = syz_open_dev$video(0x0, 0x1000000000000003, 0x180) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x48000003, 0x0, "679c51432546da17ceb4ffff00", 0xffffffff, 0x0, 0x5}) 2.04303191s ago: executing program 8 (id=3445): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x84, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 2.017922479s ago: executing program 2 (id=3446): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r5, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0xffff, 0x0, "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"}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000001000000100000001000000002000000"], 0x0, 0xffffffffffffff49}, 0x28) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) bind$inet6(r2, 0x0, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x4e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x4e, 0x0, @gue={{0x2, 0x0, 0x2, 0xae, 0x100, @val=0x80}, "fea15f8a8f5d47249b1a2f8e90a7edfebf40b8b7f2a7b56ab8e4a310b6ee738bfe73b34b9b232ac444722ab9bc9df0767018cf081aaa7788db0f7615f311"}}}}}}}, 0x0) 1.938396804s ago: executing program 1 (id=3447): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.841227306s ago: executing program 7 (id=3448): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r1 = gettid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x2004) read(r2, 0x0, 0x0) setresuid(r0, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.795425965s ago: executing program 1 (id=3449): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r1 = gettid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x2004) read(r2, 0x0, 0x0) setresuid(r0, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) 1.509292224s ago: executing program 7 (id=3450): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8008000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841", 0x4, 0x8000}]) 984.55905ms ago: executing program 8 (id=3451): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) 698.548236ms ago: executing program 7 (id=3452): geteuid() syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2941, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r1, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x19, 0x7, 0x2, {0x10, '/dev/sequencer2\x00'}}, 0x19) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x58120808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x10001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x400c000) 363.581923ms ago: executing program 8 (id=3453): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 333.668451ms ago: executing program 2 (id=3454): syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x40}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000007c0)) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0d03001f000000000000130000001c0009f6531b835738d01a68c7d08007"], 0x30}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 118.460264ms ago: executing program 8 (id=3455): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000840)={0x20, 0x16, 0xe, "cc63970e5c6720e95af8d0076b38"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0xc92557b0ce253e8d, 0x4, 0x0, "c439e465", "fb1ff24a"}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="f69b6c502d61a183cb76ef68dbf86219d3d864c4fefcaea59b0438eb68a347d68d41df168c7103f8a57ca318fdcb968bb412ae0fa03aba10945ec53e62edbd8b69389c76305c06d98126cb415d806d7ce63d83cd0203fe03954393b831c9fd92ab7b184e1fa533147d504a13ec20a87a3057b6f37ef9932608252dd253b3d7ae6d7ea6", @ANYRES8=0x0], 0x0) 0s ago: executing program 9 (id=3456): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0xf730ac4d9e9750df, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/248, 0xf8}], 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x5aed}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@getchain={0x34, 0x66, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0x4}, {0x0, 0xa}, {0xf, 0xa}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x92}, 0x40000) kernel console output (not intermixed with test programs): id=18350 comm="syz.3.2960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47b6e7d68e code=0x7ffc0000 [ 1723.615389][ T37] audit: type=1326 audit(1782794840.119:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.2960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47b6e7d68e code=0x7ffc0000 [ 1723.617312][ T37] audit: type=1326 audit(1782794840.119:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.2960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47b6e7d68e code=0x7ffc0000 [ 1723.623932][ T37] audit: type=1326 audit(1782794840.128:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.2960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47b6e7d68e code=0x7ffc0000 [ 1724.813978][T18216] block nbd15: Receive control failed (result -32) [ 1725.904238][T13552] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1726.083479][T13552] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.083525][T13552] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1726.083542][T13552] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1726.133820][T13552] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1726.133846][T13552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.133863][T13552] usb 7-1: Product: syz [ 1726.133876][T13552] usb 7-1: Manufacturer: syz [ 1726.133888][T13552] usb 7-1: SerialNumber: syz [ 1726.151873][T13552] usb 7-1: config 0 descriptor?? [ 1726.225940][T13552] dm9601 7-1:0.0: probe with driver dm9601 failed with error -22 [ 1726.489618][ T36] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1726.681005][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.712991][ T36] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1726.713018][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.713036][ T36] usb 5-1: Product: syz [ 1726.713048][ T36] usb 5-1: Manufacturer: syz [ 1726.713060][ T36] usb 5-1: SerialNumber: syz [ 1726.756453][ T36] usb 5-1: config 0 descriptor?? [ 1726.774775][ T36] dm9601 5-1:0.0: probe with driver dm9601 failed with error -22 [ 1728.884241][T17481] usb 7-1: USB disconnect, device number 11 [ 1730.203004][ T9] usb 5-1: USB disconnect, device number 46 [ 1730.732543][T18421] tipc: Started in network mode [ 1730.732564][T18421] tipc: Node identity 2003, cluster identity 4711 [ 1730.732575][T18421] tipc: Node number set to 8195 [ 1730.759586][T18421] 9pnet_fd: Insufficient options for proto=fd [ 1730.900553][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 1730.900573][ T37] audit: type=1800 audit(1782794846.735:1985): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2977" name="file0" dev="overlay" ino=511 res=0 errno=0 [ 1731.886648][ T5332] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1732.071722][ T5332] usb 7-1: Using ep0 maxpacket: 32 [ 1732.074148][ T5332] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1732.075296][ T5332] usb 7-1: config 14 has an invalid interface number: 228 but max is 0 [ 1732.075318][ T5332] usb 7-1: config 14 has no interface number 0 [ 1732.075359][ T5332] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1732.075382][ T5332] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1732.079732][ T5332] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1732.079755][ T5332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.079771][ T5332] usb 7-1: Product: syz [ 1732.079784][ T5332] usb 7-1: Manufacturer: syz [ 1732.079797][ T5332] usb 7-1: SerialNumber: syz [ 1732.146009][ T31] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1732.331066][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1732.332828][ T31] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1732.332850][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.332865][ T31] usb 1-1: config 0 has no interface number 0 [ 1732.332889][ T31] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1732.332900][ T31] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1732.332945][ T31] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1732.332958][ T31] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1732.335217][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1732.335240][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.335255][ T31] usb 1-1: Product: syz [ 1732.335262][ T31] usb 1-1: Manufacturer: syz [ 1732.335269][ T31] usb 1-1: SerialNumber: syz [ 1732.452435][ T31] usb 1-1: config 0 descriptor?? [ 1733.235289][ T5332] legousbtower 7-1:14.228: interrupt endpoints not found [ 1733.397275][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'. [ 1733.454674][ T31] ipheth 1-1:0.196: Unable to find endpoints [ 1733.486790][ T31] usb 1-1: USB disconnect, device number 56 [ 1733.956926][T18451] netlink: 'syz.6.2980': attribute type 1 has an invalid length. [ 1734.157231][T18454] netlink: 'syz.4.2987': attribute type 2 has an invalid length. [ 1734.157318][T18454] netlink: 'syz.4.2987': attribute type 8 has an invalid length. [ 1734.157372][T18454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2987'. [ 1735.550446][ T31] usb 7-1: USB disconnect, device number 12 [ 1737.590849][T18485] netlink: 'syz.4.2997': attribute type 20 has an invalid length. [ 1741.456468][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1741.912653][ T31] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1741.955790][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1741.961503][ T9] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1741.961526][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.961542][ T9] usb 4-1: config 0 has no interface number 0 [ 1741.961581][ T9] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1741.961592][ T9] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1741.961603][ T9] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1741.961615][ T9] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1741.968670][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1741.968693][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.968710][ T9] usb 4-1: Product: syz [ 1741.968722][ T9] usb 4-1: Manufacturer: syz [ 1741.968735][ T9] usb 4-1: SerialNumber: syz [ 1741.986933][ T9] usb 4-1: config 0 descriptor?? [ 1742.160956][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1742.163370][ T31] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1742.163391][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.163408][ T31] usb 5-1: config 0 has no interface number 0 [ 1742.163448][ T31] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1742.163467][ T31] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1742.163488][ T31] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1742.163511][ T31] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1742.171152][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1742.171230][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.171249][ T31] usb 5-1: Product: syz [ 1742.171261][ T31] usb 5-1: Manufacturer: syz [ 1742.171272][ T31] usb 5-1: SerialNumber: syz [ 1742.284168][ T31] usb 5-1: config 0 descriptor?? [ 1742.621521][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'. [ 1742.640909][ T9] ipheth 4-1:0.196: Unable to find endpoints [ 1742.646624][ T37] audit: type=1326 audit(1782794857.678:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18535 comm="syz.0.3011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1742.660179][ T37] audit: type=1326 audit(1782794857.687:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18535 comm="syz.0.3011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1742.660209][ T37] audit: type=1326 audit(1782794857.687:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18535 comm="syz.0.3011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1742.660233][ T37] audit: type=1326 audit(1782794857.687:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18535 comm="syz.0.3011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1742.660256][ T37] audit: type=1326 audit(1782794857.687:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18535 comm="syz.0.3011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1742.660276][ T37] audit: type=1326 audit(1782794857.687:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18535 comm="syz.0.3011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1742.676268][ T37] audit: type=1326 audit(1782794857.705:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18535 comm="syz.0.3011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1742.827790][ T37] audit: type=1326 audit(1782794857.844:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18535 comm="syz.0.3011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1742.869949][ T9] usb 4-1: USB disconnect, device number 56 [ 1742.919556][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 1742.927459][ T31] ipheth 5-1:0.196: Unable to find endpoints [ 1742.990375][ T31] usb 5-1: USB disconnect, device number 47 [ 1743.195436][T18542] ALSA: mixer_oss: invalid OSS volume 'SPEA9KsˠeSb{~R' [ 1743.195449][T18542] ALSA: mixer_oss: invalid OSS volume '(' [ 1744.854015][T18553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3016'. [ 1748.154907][T18578] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1748.375719][T18582] trusted_key: encrypted_key: insufficient parameters specified [ 1748.412342][T18582] devpts: Bad value for 'max' [ 1751.148094][T18597] trusted_key: encrypted_key: insufficient parameters specified [ 1751.193575][T18597] devpts: Bad value for 'max' [ 1756.504512][T18636] trusted_key: encrypted_key: insufficient parameters specified [ 1756.509345][T18636] devpts: Bad value for 'max' [ 1756.789799][T18652] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1758.561649][T18678] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1760.570407][T18696] netlink: 'syz.0.3054': attribute type 2 has an invalid length. [ 1760.570467][T18696] netlink: 'syz.0.3054': attribute type 8 has an invalid length. [ 1760.570606][T18696] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3054'. [ 1761.244353][ T37] audit: type=1326 audit(1782794874.840:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18697 comm="syz.3.3057" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47b6ebce59 code=0x0 [ 1763.564672][T18721] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1766.149415][T18748] Invalid argument reading file caps for ./file0 [ 1767.125613][T18757] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1767.465805][T18766] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1768.670139][ T5834] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1768.949836][T18784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1769.246990][ T5834] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.877554][ T5834] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1769.877582][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.877598][ T5834] usb 6-1: Product: syz [ 1769.877611][ T5834] usb 6-1: Manufacturer: syz [ 1769.877623][ T5834] usb 6-1: SerialNumber: syz [ 1769.888980][ T5834] usb 6-1: config 0 descriptor?? [ 1769.897536][ T5834] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 1770.026526][T18791] netlink: 'syz.6.3084': attribute type 2 has an invalid length. [ 1770.027415][T18791] netlink: 'syz.6.3084': attribute type 8 has an invalid length. [ 1770.027475][T18791] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3084'. [ 1771.843932][T16317] usb 6-1: USB disconnect, device number 25 [ 1773.151515][ T37] audit: type=1800 audit(1782794885.829:1995): pid=18808 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.3091" name="file0" dev="overlay" ino=1246 res=0 errno=0 [ 1773.678483][T18822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1780.498098][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1780.498162][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 1780.778941][ T37] audit: type=1800 audit(1782794892.870:1996): pid=18857 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.3104" name="file0" dev="overlay" ino=797 res=0 errno=0 [ 1780.980708][ T37] audit: type=1326 audit(1782794893.045:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.5.3105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3db87fce59 code=0x0 [ 1785.070183][T18893] trusted_key: encrypted_key: insufficient parameters specified [ 1786.902863][T18909] netlink: 'syz.5.3116': attribute type 2 has an invalid length. [ 1786.902973][T18909] netlink: 'syz.5.3116': attribute type 8 has an invalid length. [ 1786.903028][T18909] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3116'. [ 1787.055469][T18910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1788.195271][T18919] trusted_key: encrypted_key: insufficient parameters specified [ 1788.571622][ T37] audit: type=1800 audit(1782794900.057:1998): pid=18918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.3119" name="file0" dev="overlay" ino=1357 res=0 errno=0 [ 1789.407660][T18932] netlink: 'syz.0.3123': attribute type 2 has an invalid length. [ 1789.407930][T18932] netlink: 'syz.0.3123': attribute type 8 has an invalid length. [ 1789.407943][T18932] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3123'. [ 1790.841291][T18939] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1792.221533][T18959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1795.833466][T18972] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1796.318855][T17481] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1796.731678][T17481] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.801895][T17481] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1796.801998][T17481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.802060][T17481] usb 1-1: Product: syz [ 1796.802173][T17481] usb 1-1: Manufacturer: syz [ 1796.802231][T17481] usb 1-1: SerialNumber: syz [ 1796.815942][T16317] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1796.843433][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 1796.984588][T16317] usb 6-1: Using ep0 maxpacket: 32 [ 1796.986854][T16317] usb 6-1: no configurations [ 1796.986882][T16317] usb 6-1: can't read configurations, error -22 [ 1797.023771][T17481] usb 1-1: config 0 descriptor?? [ 1797.027847][T17481] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 1797.158668][T16317] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1797.736995][T16317] usb 6-1: Using ep0 maxpacket: 32 [ 1797.738656][T16317] usb 6-1: no configurations [ 1797.738666][T16317] usb 6-1: can't read configurations, error -22 [ 1797.739165][T16317] usb usb6-port1: attempt power cycle [ 1797.852659][T18994] devpts: Bad value for 'max' [ 1798.360182][T16317] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1798.382127][T16317] usb 6-1: Using ep0 maxpacket: 32 [ 1798.384977][T16317] usb 6-1: no configurations [ 1798.384992][T16317] usb 6-1: can't read configurations, error -22 [ 1798.584825][T19004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1798.621361][T16317] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1798.687154][T16317] usb 6-1: Using ep0 maxpacket: 32 [ 1798.727602][T16317] usb 6-1: no configurations [ 1798.727620][T16317] usb 6-1: can't read configurations, error -22 [ 1798.857777][T16317] usb usb6-port1: unable to enumerate USB device [ 1799.584772][ T5834] usb 1-1: USB disconnect, device number 57 [ 1800.074328][T19017] 9pnet_fd: Insufficient options for proto=fd [ 1801.866957][T19035] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1801.871091][T13552] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1802.063324][T13552] usb 5-1: Using ep0 maxpacket: 32 [ 1802.187101][T13552] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1802.188004][T13552] usb 5-1: config 14 has an invalid interface number: 228 but max is 0 [ 1802.188016][T13552] usb 5-1: config 14 has no interface number 0 [ 1802.188039][T13552] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1802.188053][T13552] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1802.191983][T13552] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1802.192006][T13552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.192024][T13552] usb 5-1: Product: syz [ 1802.192036][T13552] usb 5-1: Manufacturer: syz [ 1802.192048][T13552] usb 5-1: SerialNumber: syz [ 1803.067540][T13552] legousbtower 5-1:14.228: interrupt endpoints not found [ 1803.688428][T19055] netlink: 'syz.4.3152': attribute type 1 has an invalid length. [ 1804.615201][T19064] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1804.963097][T17481] usb 5-1: USB disconnect, device number 48 [ 1806.779576][T19080] trusted_key: encrypted_key: insufficient parameters specified [ 1808.135902][T19086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1810.244601][ T5732] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1810.377588][T16317] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1810.557903][ T5732] usb 1-1: Using ep0 maxpacket: 8 [ 1810.561006][ T5732] usb 1-1: config 0 has no interfaces? [ 1810.561039][ T5732] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1810.561056][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.598417][ T5732] usb 1-1: config 0 descriptor?? [ 1810.633835][T16317] usb 7-1: Using ep0 maxpacket: 32 [ 1810.636774][T16317] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1810.644358][T16317] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1810.644379][T16317] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1810.644396][T16317] usb 7-1: config 14 has no interface number 0 [ 1810.644411][T16317] usb 7-1: config 14 has no interface number 1 [ 1810.644462][T16317] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1810.644473][T16317] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1810.644485][T16317] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1810.722890][T16317] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1810.722921][T16317] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1810.722944][T16317] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1810.722967][T16317] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1810.722983][T16317] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1810.742240][T16317] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1810.742265][T16317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.742283][T16317] usb 7-1: Product: syz [ 1810.742294][T16317] usb 7-1: Manufacturer: syz [ 1810.742306][T16317] usb 7-1: SerialNumber: syz [ 1810.913722][T13552] usb 1-1: USB disconnect, device number 58 [ 1811.288830][T16317] legousbtower 7-1:14.57: interrupt endpoints not found [ 1811.682630][T19098] netlink: 'syz.6.3175': attribute type 1 has an invalid length. [ 1811.919739][T16317] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1811.922454][T16317] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1812.284459][T19130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1815.484540][T19138] usb 7-1: LEGO USB Tower reset control request failed [ 1816.073228][T16317] usb 7-1: USB disconnect, device number 13 [ 1816.091221][T16317] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 1816.672614][T17481] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1816.703049][ T5732] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1816.846998][T17481] usb 4-1: Using ep0 maxpacket: 32 [ 1816.912850][ T5732] usb 6-1: Using ep0 maxpacket: 32 [ 1816.918780][T17481] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1816.947145][T17481] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1816.947169][T17481] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1816.947243][T17481] usb 4-1: config 14 has no interface number 0 [ 1816.947289][T17481] usb 4-1: config 14 has no interface number 1 [ 1816.947557][T17481] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1816.947610][T17481] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1816.947666][T17481] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1816.947735][T17481] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1816.947758][T17481] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1816.947773][T17481] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1817.188381][ T5732] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1817.188767][T17481] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1817.188790][T17481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.188807][T17481] usb 4-1: Product: syz [ 1817.188820][T17481] usb 4-1: Manufacturer: syz [ 1817.188832][T17481] usb 4-1: SerialNumber: syz [ 1817.251689][ T5732] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1817.251751][ T5732] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1817.251769][ T5732] usb 6-1: config 14 has no interface number 0 [ 1817.251828][ T5732] usb 6-1: config 14 has no interface number 1 [ 1817.251980][ T5732] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1817.252033][ T5732] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1817.252066][ T5732] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1817.252129][ T5732] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1817.252197][ T5732] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1817.252246][ T5732] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1817.640154][ T5732] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1817.640211][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.640228][ T5732] usb 6-1: Product: syz [ 1817.640281][ T5732] usb 6-1: Manufacturer: syz [ 1817.640294][ T5732] usb 6-1: SerialNumber: syz [ 1819.326673][ T5856] IPVS: starting estimator thread 0... [ 1819.396072][T13552] IPVS: starting estimator thread 0... [ 1819.423372][T19184] IPVS: using max 9 ests per chain, 21600 per kthread [ 1819.432960][T19183] 9p: Could not find request transport: fɵ7DLsZ=D{E ! [ 1819.910232][T19189] IPVS: using max 9 ests per chain, 21600 per kthread [ 1820.286719][ T37] audit: type=1326 audit(1782794929.316:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.0.3203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1820.287541][ T37] audit: type=1326 audit(1782794929.316:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.0.3203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1820.287766][ T37] audit: type=1326 audit(1782794929.316:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.0.3203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1820.289038][ T37] audit: type=1326 audit(1782794929.316:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.0.3203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1820.289079][ T37] audit: type=1326 audit(1782794929.316:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.0.3203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1820.292629][ T37] audit: type=1326 audit(1782794929.316:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.0.3203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1820.307968][ T37] audit: type=1326 audit(1782794929.325:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.0.3203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1820.308770][ T37] audit: type=1326 audit(1782794929.335:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.0.3203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1820.571520][ T37] audit: type=1326 audit(1782794929.575:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.0.3203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb7d55ece59 code=0x7ffc0000 [ 1821.856615][T17481] legousbtower 4-1:14.57: interrupt endpoints not found [ 1821.876349][T17481] legousbtower 4-1:14.228: interrupt endpoints not found [ 1821.912439][T17481] usb 4-1: USB disconnect, device number 57 [ 1822.116225][ T5732] legousbtower 6-1:14.57: interrupt endpoints not found [ 1822.121050][ T5732] legousbtower 6-1:14.228: interrupt endpoints not found [ 1822.142854][ T5732] usb 6-1: USB disconnect, device number 30 [ 1822.381968][T13552] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1822.544839][T13552] usb 5-1: Using ep0 maxpacket: 16 [ 1822.548038][T13552] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1822.548061][T13552] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1822.548082][T13552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1822.548095][T13552] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1822.548106][T13552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1822.548116][T13552] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1822.548126][T13552] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1822.550284][T13552] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1822.550307][T13552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.550325][T13552] usb 5-1: Product: syz [ 1822.550336][T13552] usb 5-1: Manufacturer: syz [ 1822.550344][T13552] usb 5-1: SerialNumber: syz [ 1822.553480][T13552] usb 5-1: config 0 descriptor?? [ 1822.554265][T19210] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1822.563772][T13552] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected [ 1822.587499][T13552] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 1822.609613][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1822.620407][ T5732] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1822.667470][T17481] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1822.775960][T19210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.779296][T19210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.781792][ T31] usb 5-1: USB disconnect, device number 49 [ 1822.815433][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1822.819298][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1822.837718][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 1822.837759][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1822.837780][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1822.840455][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1822.840478][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.840494][ T9] usb 1-1: Product: syz [ 1822.840507][ T9] usb 1-1: Manufacturer: syz [ 1822.840520][ T9] usb 1-1: SerialNumber: syz [ 1822.843372][ T5732] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1822.902086][T17481] usb 7-1: Using ep0 maxpacket: 32 [ 1822.906978][T17481] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1822.906999][T17481] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.907016][T17481] usb 7-1: config 0 has no interface number 0 [ 1822.907054][T17481] usb 7-1: config 0 interface 184 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1822.919015][T17481] usb 7-1: New USB device found, idVendor=0bda, idProduct=c812, bcdDevice=8a.3a [ 1822.919041][T17481] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.919059][T17481] usb 7-1: Product: syz [ 1822.919071][T17481] usb 7-1: Manufacturer: syz [ 1822.919084][T17481] usb 7-1: SerialNumber: syz [ 1822.934673][ T5732] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1822.934696][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.934714][ T5732] usb 6-1: Product: syz [ 1822.934726][ T5732] usb 6-1: Manufacturer: syz [ 1822.934739][ T5732] usb 6-1: SerialNumber: syz [ 1823.051104][T17481] usb 7-1: config 0 descriptor?? [ 1823.131864][ T31] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1823.133352][ T31] iuu_phoenix 5-1:0.0: device disconnected [ 1823.200277][ T9] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1823.200320][ T9] cdc_ncm 1-1:1.0: bind() failure [ 1823.212962][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1823.213003][ T9] cdc_ncm 1-1:1.1: bind() failure [ 1823.224383][ T9] usb 1-1: USB disconnect, device number 59 [ 1823.289835][T19215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.301018][T19215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.311962][T19215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.312928][T19215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.438785][T17481] usb 7-1: USB disconnect, device number 14 [ 1823.484777][T19213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.485305][T19213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.489236][T19213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.504472][T19213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.704331][T13552] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1823.844196][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1823.896642][T13552] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 1823.896669][T13552] usb 4-1: config 5 has no interface number 0 [ 1823.896709][T13552] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1823.896743][T13552] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1823.896766][T13552] usb 4-1: config 5 interface 123 has no altsetting 0 [ 1823.943436][T13552] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1823.943462][T13552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.943479][T13552] usb 4-1: Product: syz [ 1823.943491][T13552] usb 4-1: Manufacturer: syz [ 1823.943503][T13552] usb 4-1: SerialNumber: syz [ 1823.971031][T19220] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1824.024838][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1824.024868][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1824.024935][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1824.024949][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1824.024971][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1824.024984][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.046850][ T9] usb 5-1: config 0 descriptor?? [ 1824.083523][T17481] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1824.111796][T19222] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1824.194570][T19220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.198624][T19220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.293152][T17481] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1824.295013][T17481] usb 1-1: config 4 has an invalid interface number: 138 but max is 0 [ 1824.295034][T17481] usb 1-1: config 4 has no interface number 0 [ 1824.295060][T17481] usb 1-1: too many endpoints for config 4 interface 138 altsetting 243: 255, using maximum allowed: 30 [ 1824.295149][T17481] usb 1-1: config 4 interface 138 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1824.295172][T17481] usb 1-1: config 4 interface 138 has no altsetting 0 [ 1824.300452][T17481] usb 1-1: string descriptor 0 read error: -22 [ 1824.300636][T17481] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1824.300657][T17481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.396668][T17481] usb 1-1: selecting invalid altsetting 1 [ 1824.396691][T17481] catc 1-1:4.138: Can't set altsetting 1. [ 1824.396844][T17481] catc 1-1:4.138: probe with driver catc failed with error -5 [ 1824.425609][T19220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.427279][T19220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.449606][T19220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.450490][T19220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.614197][ T9] hid_parser_main: 24 callbacks suppressed [ 1824.620579][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.620617][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.620643][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.620666][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.621669][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.626133][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.626160][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.626184][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.626207][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.632294][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1824.681870][T16317] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1824.859529][T16317] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1824.877771][T16317] usb 7-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1824.877798][T16317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.877816][T16317] usb 7-1: Product: syz [ 1824.877828][T16317] usb 7-1: Manufacturer: syz [ 1824.877840][T16317] usb 7-1: SerialNumber: syz [ 1825.075948][ T5732] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1825.076009][ T5732] usb 6-1: MIDIStreaming interface descriptor not found [ 1825.429630][T19229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.433856][T19229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.530426][T19229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.562639][T19229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.655197][ T5732] usb 6-1: USB disconnect, device number 31 [ 1825.703615][ T9] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1825.833885][T19234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.862166][T19234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.864396][ T9] usb 5-1: USB disconnect, device number 50 [ 1826.101527][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'. [ 1826.137066][T19233] fido_id[19233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1826.447779][T19238] net_ratelimit: 10 callbacks suppressed [ 1826.450184][T19238] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1826.606561][T13552] comedi comedi4: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 1826.762185][T13552] usb 4-1: USB disconnect, device number 58 [ 1826.930080][T19240] hsr_slave_0: left promiscuous mode [ 1827.116776][T18332] udevd[18332]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1827.181095][ T199] usb 1-1: USB disconnect, device number 60 [ 1827.242065][T19240] hsr_slave_1: left promiscuous mode [ 1827.410721][ T5732] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1827.428232][T16317] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1827.428279][T16317] usb 7-1: MIDIStreaming interface descriptor not found [ 1827.574276][ T5732] usb 6-1: Using ep0 maxpacket: 32 [ 1827.579973][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.579999][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.580034][ T5732] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1827.580054][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.640260][ T5732] usb 6-1: config 0 descriptor?? [ 1827.674508][T16317] usb 7-1: USB disconnect, device number 15 [ 1827.675945][ T5732] hub 6-1:0.0: USB hub found [ 1827.819304][T17756] udevd[17756]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1827.878339][ T5732] hub 6-1:0.0: 29 ports detected [ 1827.878826][ T5732] hub 6-1:0.0: insufficient power available to use all downstream ports [ 1827.993160][T19267] syzkaller0: entered promiscuous mode [ 1827.993183][T19267] syzkaller0: entered allmulticast mode [ 1828.122939][T19248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.124868][T19248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.180394][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1828.355213][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1828.363102][ T9] usb 1-1: config 8 has an invalid interface number: 62 but max is 0 [ 1828.363125][ T9] usb 1-1: config 8 has no interface number 0 [ 1828.363164][ T9] usb 1-1: config 8 interface 62 altsetting 6 has an endpoint descriptor with address 0x52, changing to 0x2 [ 1828.363185][ T9] usb 1-1: config 8 interface 62 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 32 [ 1828.363204][ T9] usb 1-1: config 8 interface 62 altsetting 6 bulk endpoint 0xB has invalid maxpacket 8 [ 1828.363224][ T9] usb 1-1: config 8 interface 62 has no altsetting 0 [ 1828.408247][ T9] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0117, bcdDevice=99.87 [ 1828.408272][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.408289][ T9] usb 1-1: Product: syz [ 1828.408302][ T9] usb 1-1: Manufacturer: syz [ 1828.408315][ T9] usb 1-1: SerialNumber: syz [ 1828.414655][T19265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1828.414861][T19265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1828.558641][ T5732] usb 6-1: USB disconnect, device number 32 [ 1828.775630][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3229'. [ 1828.829499][ T9] kvaser_usb 1-1:8.62: error -ENODEV: Cannot get usb endpoint(s) [ 1828.876383][ T9] usb 1-1: USB disconnect, device number 61 [ 1829.589522][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1829.710636][T19301] tipc: Enabled bearer , priority 0 [ 1829.711557][T19301] syzkaller0: entered promiscuous mode [ 1829.711578][T19301] syzkaller0: entered allmulticast mode [ 1829.714381][T19301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1829.786505][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1829.791144][ T9] usb 7-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1829.791171][ T9] usb 7-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 1829.791191][ T9] usb 7-1: Product: syz [ 1829.791205][ T9] usb 7-1: Manufacturer: syz [ 1829.791219][ T9] usb 7-1: SerialNumber: syz [ 1829.801382][ T9] usb 7-1: config 0 descriptor?? [ 1829.870816][ T5732] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1829.893136][T19299] vlan0: entered promiscuous mode [ 1829.972067][T19301] tipc: Resetting bearer [ 1830.011909][T19300] tipc: Resetting bearer [ 1830.024542][T13552] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1830.037978][T19290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.038612][T19290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.044222][ T5732] usb 5-1: Using ep0 maxpacket: 16 [ 1830.068063][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.068091][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.068113][ T5732] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1830.068152][ T5732] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1830.068173][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.132777][ T5732] usb 5-1: config 0 descriptor?? [ 1830.219357][T13552] usb 4-1: Using ep0 maxpacket: 16 [ 1830.222161][T13552] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1830.222209][T13552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.222231][T13552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.222250][T13552] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1830.222287][T13552] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1830.222306][T13552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.227936][T13552] usb 4-1: config 0 descriptor?? [ 1830.387092][T19300] tipc: Disabling bearer [ 1830.769782][ T5732] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.000C/input/input110 [ 1830.834570][ T5834] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1830.863495][ T9] usb 7-1: reset high-speed USB device number 16 using dummy_hcd [ 1830.986107][ T5732] sony 0003:054C:03D5.000C: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 1831.001945][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1831.001973][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.002056][ T5834] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1831.002075][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.013246][T13552] usbhid 4-1:0.0: can't add hid device: -71 [ 1831.013352][T13552] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1831.047232][ T5834] usb 1-1: config 0 descriptor?? [ 1831.075139][T13552] usb 4-1: USB disconnect, device number 59 [ 1831.219533][ T31] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1831.219710][ T5732] usb 5-1: USB disconnect, device number 51 [ 1831.262469][T19309] fido_id[19309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1831.382768][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1831.384449][ T31] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.384469][ T31] usb 6-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1831.384562][ T31] usb 6-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1831.384582][ T31] usb 6-1: config 66 interface 0 has no altsetting 0 [ 1831.406742][ T31] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1831.406765][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.406783][ T31] usb 6-1: Product: syz [ 1831.406796][ T31] usb 6-1: Manufacturer: syz [ 1831.406808][ T31] usb 6-1: SerialNumber: syz [ 1831.583348][ T9] usb 7-1: [UEAGLE-ATM] interface 1 not found [ 1831.583407][ T9] ueagle-atm 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1831.600470][ T5834] hid_parser_main: 5 callbacks suppressed [ 1831.600489][ T5834] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 1831.600516][ T5834] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 1831.600540][ T5834] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 1831.600562][ T5834] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 1831.600585][ T5834] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 1831.600607][ T5834] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 1831.600630][ T5834] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 1831.617079][ T9] usb 7-1: USB disconnect, device number 16 [ 1831.631678][ T5834] isku 0003:1E7D:319C.000D: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 1831.724041][ T31] ati_remote2 6-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 1831.730468][ T31] usb 6-1: USB disconnect, device number 33 [ 1831.936336][T19316] syzkaller0: entered promiscuous mode [ 1831.936360][T19316] syzkaller0: entered allmulticast mode [ 1832.298674][ T5834] usb 1-1: USB disconnect, device number 62 [ 1833.003021][ T5732] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1833.099047][T19346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'. [ 1833.143836][T13552] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1833.143970][ T31] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1833.179090][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.179118][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.179152][ T5732] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1833.179171][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.226931][ T5732] usb 6-1: config 0 descriptor?? [ 1833.306518][T13552] usb 5-1: Using ep0 maxpacket: 16 [ 1833.307429][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 1833.309799][T13552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.309825][T13552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.309844][T13552] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1833.309879][T13552] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1833.309899][T13552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.311245][ T31] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1833.311290][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1833.311308][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1833.311377][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1833.311397][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1833.311431][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1833.311449][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.438517][T13552] usb 5-1: config 0 descriptor?? [ 1833.555742][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1833.697359][ T5732] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1833.726594][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1833.726621][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1833.726693][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1833.726716][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1833.726753][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1833.726772][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.800268][ T5732] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1833.818596][ T9] usb 7-1: config 0 descriptor?? [ 1833.820029][T19349] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1833.925834][ T5732] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 1834.017415][T13552] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 1834.017480][T13552] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 1834.098362][T13552] hid-multitouch 0003:0457:07DA.000F: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 1834.345546][ T9] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 1834.356066][ T9] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1834.530380][ T31] usb 7-1: USB disconnect, device number 17 [ 1834.586076][T19351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.618897][T19356] fido_id[19356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1834.847886][T19334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.848533][T19334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.886701][ T5332] usb 6-1: USB disconnect, device number 34 [ 1835.212217][T19351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.222178][T19351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.517244][ T31] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1835.682222][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1835.717912][ T31] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1835.717939][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.717958][ T31] usb 7-1: Product: syz [ 1835.717971][ T31] usb 7-1: Manufacturer: syz [ 1835.717985][ T31] usb 7-1: SerialNumber: syz [ 1835.791967][ T31] usb 7-1: config 0 descriptor?? [ 1836.173407][ T5834] usb 5-1: USB disconnect, device number 52 [ 1836.240105][T19361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.240666][T19361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.267173][ T31] airspy 7-1:0.0: Board ID: 00 [ 1836.267191][ T31] airspy 7-1:0.0: Firmware version: [ 1836.294358][ T9] usb 1-1: USB disconnect, device number 63 [ 1836.486523][ T31] airspy 7-1:0.0: usb_control_msg() failed -71 request 11 [ 1837.064071][ T31] airspy 7-1:0.0: Registered as swradio24 [ 1837.064091][ T31] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1837.083889][ T31] usb 7-1: USB disconnect, device number 18 [ 1837.587504][T15444] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.934210][ T31] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1837.988629][ T5332] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1838.096664][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1838.099050][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1838.100318][ T31] usb 4-1: config 9 has an invalid interface number: 163 but max is 0 [ 1838.100339][ T31] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.100356][ T31] usb 4-1: config 9 has no interface number 0 [ 1838.100398][ T31] usb 4-1: config 9 interface 163 altsetting 193 endpoint 0xE has invalid wMaxPacketSize 0 [ 1838.100415][ T31] usb 4-1: config 9 interface 163 altsetting 193 bulk endpoint 0xE has invalid maxpacket 0 [ 1838.100437][ T31] usb 4-1: config 9 interface 163 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 1838.100449][ T31] usb 4-1: config 9 interface 163 has no altsetting 0 [ 1838.102581][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=d723, bcdDevice=d5.ae [ 1838.102604][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.102620][ T31] usb 4-1: Product: syz [ 1838.102633][ T31] usb 4-1: Manufacturer: syz [ 1838.102641][ T31] usb 4-1: SerialNumber: syz [ 1838.248770][ T5332] usb 6-1: Using ep0 maxpacket: 32 [ 1838.250725][ T5332] usb 6-1: config 8 has an invalid interface number: 62 but max is 0 [ 1838.250789][ T5332] usb 6-1: config 8 has no interface number 0 [ 1838.250813][ T5332] usb 6-1: config 8 interface 62 altsetting 6 has an endpoint descriptor with address 0x52, changing to 0x2 [ 1838.250826][ T5332] usb 6-1: config 8 interface 62 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 32 [ 1838.250837][ T5332] usb 6-1: config 8 interface 62 altsetting 6 bulk endpoint 0xB has invalid maxpacket 8 [ 1838.250849][ T5332] usb 6-1: config 8 interface 62 has no altsetting 0 [ 1838.253168][ T5332] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0117, bcdDevice=99.87 [ 1838.253238][ T5332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.253255][ T5332] usb 6-1: Product: syz [ 1838.253267][ T5332] usb 6-1: Manufacturer: syz [ 1838.253280][ T5332] usb 6-1: SerialNumber: syz [ 1838.270549][T19397] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1838.270714][T19397] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1838.446577][T19395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.448081][T19395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.503266][ T5332] kvaser_usb 6-1:8.62: error -ENODEV: Cannot get usb endpoint(s) [ 1838.519631][ T5332] usb 6-1: USB disconnect, device number 35 [ 1838.718694][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059f8f800: rx timeout, send abort [ 1838.722878][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059f8f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1838.723377][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059f8f400: rx timeout, send abort [ 1838.723603][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059f8f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1838.799477][T19398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.806324][T19398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.265944][ T31] usb 4-1: USB disconnect, device number 60 [ 1842.204264][T19383] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1842.210099][T19383] syzkaller0: entered promiscuous mode [ 1842.210114][T19383] syzkaller0: entered allmulticast mode [ 1842.228556][T15444] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.466520][T15444] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.468175][T15444] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.659381][ T5856] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1842.835623][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.835654][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.835686][ T5856] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1842.835705][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.895557][ T5856] usb 4-1: config 0 descriptor?? [ 1843.297942][T13552] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1843.400893][ T5856] hid_parser_main: 32 callbacks suppressed [ 1843.400913][ T5856] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1843.432049][ T5856] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1843.515527][T13552] usb 5-1: Using ep0 maxpacket: 16 [ 1843.517571][T13552] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.517615][T13552] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.517637][T13552] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.517656][T13552] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1843.517726][T13552] usb 5-1: config 7 interface 0 has no altsetting 0 [ 1843.517756][T13552] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1843.517775][T13552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.610172][ T5856] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 1844.092364][T13552] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0012/input/input112 [ 1844.178940][ T31] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1844.344060][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1844.344089][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.344122][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1844.344141][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.443004][ T31] usb 1-1: config 0 descriptor?? [ 1844.450833][T13552] kye 0003:0458:5010.0012: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 1844.577397][T13552] usb 5-1: USB disconnect, device number 53 [ 1844.660347][T19457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.660833][T19457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.690181][T19456] fido_id[19456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1844.933897][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1844.934409][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1844.934809][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1844.934965][ T31] usbhid 1-1:0.0: can't add hid device: -32 [ 1844.935065][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1845.018698][ T31] usb 1-1: USB disconnect, device number 64 [ 1845.303230][T19468] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.3298'. [ 1845.313591][T19468] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.3298'. [ 1845.368777][T15323] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1845.445458][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3299'. [ 1845.537383][T19465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3297'. [ 1845.542216][T15323] usb 6-1: Using ep0 maxpacket: 8 [ 1845.544151][T15323] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1845.544184][T15323] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1845.544223][T15323] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1845.544245][T15323] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1845.544266][T15323] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1845.544287][T15323] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1845.544310][T15323] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1845.544333][T15323] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1845.546000][T15323] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1845.546031][T15323] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1845.546066][T15323] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1845.546088][T15323] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1845.546109][T15323] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1845.546131][T15323] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1845.546153][T15323] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1845.546174][T15323] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1845.547731][T15323] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1845.547762][T15323] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1845.547802][T15323] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1845.547824][T15323] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1845.547845][T15323] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1845.547866][T15323] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1845.547888][T15323] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1845.547909][T15323] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1845.576753][T15323] usb 6-1: string descriptor 0 read error: -22 [ 1845.576877][T15323] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1845.576896][T15323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.764815][T15323] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1845.885258][T18413] block nbd17: Receive control failed (result -1) [ 1846.168610][ T5332] usb 6-1: USB disconnect, device number 36 [ 1846.186898][T19480] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 1846.477204][ T5856] usb 4-1: USB disconnect, device number 61 [ 1846.554437][T19493] syzkaller0: entered promiscuous mode [ 1846.554462][T19493] syzkaller0: entered allmulticast mode [ 1846.583948][T15323] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1846.712688][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1846.748877][T15323] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1846.748905][T15323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1846.748928][T15323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1846.748946][T15323] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1846.748984][T15323] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1846.749003][T15323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.754958][T15323] usb 1-1: config 0 descriptor?? [ 1846.897159][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1846.913762][ T9] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.913791][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1846.944470][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice= 0.40 [ 1846.944496][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.944514][ T9] usb 6-1: Product: 려Ḏ䵳욘烳逿ն첌̷艞蚰㜼텼⨟鏼覠ꟍ鯊谄箈枞辽묕㷶唴뙜쎧鉻㺭ግ㳒젱隭잢花ꣀ훅㪵䈛䓱夢薘兯⫗熙 [ 1846.944533][ T9] usb 6-1: Manufacturer: ᪼笝㳿뼓냪䝔碷⃵춎홐῾袋䤕씀﨑ࡪҟ첮◟⇑舶ꑼ⍉ [ 1846.944548][ T9] usb 6-1: SerialNumber: Ј [ 1847.269111][T15323] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 1847.272474][ T9] appletouch 6-1:1.0: Failed to read mode from device. [ 1847.272682][ T9] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 1847.326374][ T9] usb 6-1: USB disconnect, device number 37 [ 1847.353193][T15323] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1847.502765][T19489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.503357][T19489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.664197][T19512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.664900][T19512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.700402][T19512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.704720][T19512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.736983][T19512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.737432][T19512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.752764][T19512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.786780][T19512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.143426][ T31] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1848.304211][ T9] usb 1-1: USB disconnect, device number 65 [ 1848.423273][ T31] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1848.424482][ T31] usb 5-1: config index 0 descriptor too short (expected 65495, got 45) [ 1848.426238][ T31] usb 5-1: config index 1 descriptor too short (expected 65495, got 45) [ 1848.428837][ T31] usb 5-1: config index 2 descriptor too short (expected 65495, got 45) [ 1848.429950][ T31] usb 5-1: config index 3 descriptor too short (expected 65495, got 45) [ 1848.434546][ T31] usb 5-1: config index 4 descriptor too short (expected 65495, got 45) [ 1848.439165][ T31] usb 5-1: config index 5 descriptor too short (expected 65495, got 45) [ 1848.440262][ T31] usb 5-1: config index 6 descriptor too short (expected 65495, got 45) [ 1848.447703][ T31] usb 5-1: config index 7 descriptor too short (expected 65495, got 45) [ 1848.452596][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1848.452620][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.452636][ T31] usb 5-1: Product: syz [ 1848.452648][ T31] usb 5-1: Manufacturer: syz [ 1848.452660][ T31] usb 5-1: SerialNumber: syz [ 1848.630446][T13552] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1848.717564][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1848.717627][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1848.717646][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1848.875507][ T31] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1848.888769][ T31] usb 5-1: USB disconnect, device number 54 [ 1848.891256][T13552] usb 7-1: Using ep0 maxpacket: 16 [ 1848.895338][T13552] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.895383][T13552] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.895405][T13552] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1848.895423][T13552] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1848.895444][T13552] usb 7-1: config 7 interface 0 has no altsetting 0 [ 1848.895473][T13552] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1848.895492][T13552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.718832][T13552] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.0014/input/input114 [ 1849.866481][ T31] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1849.868162][T13552] kye 0003:0458:5010.0014: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 1849.983140][T13552] usb 7-1: USB disconnect, device number 19 [ 1850.076646][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1850.081000][ T31] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1850.081024][ T31] usb 5-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 1850.081040][ T31] usb 5-1: Product: syz [ 1850.081052][ T31] usb 5-1: Manufacturer: syz [ 1850.081060][ T31] usb 5-1: SerialNumber: syz [ 1850.086365][ T31] usb 5-1: config 0 descriptor?? [ 1850.379346][T19533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.380181][T19533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.975690][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1850.975753][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 1851.123677][ T31] usb 5-1: reset high-speed USB device number 55 using dummy_hcd [ 1851.645530][ T31] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 1851.645544][ T31] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1851.648973][ T31] usb 5-1: USB disconnect, device number 55 [ 1863.330498][T19421] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1863.347918][T19421] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1863.423907][T19421] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1863.436827][T19421] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1863.437481][T19421] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1865.254634][T19421] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1865.263769][T19421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1865.265035][T19421] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1865.266311][T19421] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1865.357773][T19421] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1865.636445][T18413] Bluetooth: hci3: command tx timeout [ 1867.792254][T18413] Bluetooth: hci4: command tx timeout [ 1867.883103][T18413] Bluetooth: hci3: command tx timeout [ 1868.376186][T19421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1868.481575][T19584] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1868.518802][T19585] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1868.524471][T19585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1868.525210][T19585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1868.527792][T18414] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1868.613814][T18413] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1868.669071][T18413] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1868.711425][T18414] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1868.719841][T18414] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1868.899960][T19556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.900034][T19556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.058528][T18414] Bluetooth: hci4: command tx timeout [ 1870.080497][T19585] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1870.110579][T19585] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1870.121113][T19585] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1870.141096][T19585] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1870.145653][T19585] Bluetooth: hci3: command tx timeout [ 1870.156264][T18414] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1871.095271][T19421] Bluetooth: hci8: command tx timeout [ 1871.095845][T19421] Bluetooth: hci7: command tx timeout [ 1872.300653][T18414] Bluetooth: hci4: command tx timeout [ 1872.430672][T18414] Bluetooth: hci3: command tx timeout [ 1872.473172][ T6070] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.474350][T18414] Bluetooth: hci9: command tx timeout [ 1872.906093][ T6070] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.294103][ T6070] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.341216][T19421] Bluetooth: hci7: command tx timeout [ 1873.341300][T18414] Bluetooth: hci8: command tx timeout [ 1873.736825][ T6070] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.395693][T19566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.395762][T19566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.395880][T19566] bridge_slave_0: entered allmulticast mode [ 1874.397273][T19566] bridge_slave_0: entered promiscuous mode [ 1874.427018][T19573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.427124][T19573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.428114][T19573] bridge_slave_0: entered allmulticast mode [ 1874.430511][T19573] bridge_slave_0: entered promiscuous mode [ 1874.484460][T19566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.484600][T19566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.484792][T19566] bridge_slave_1: entered allmulticast mode [ 1874.487490][T19566] bridge_slave_1: entered promiscuous mode [ 1874.512656][T19573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.512770][T19573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.512959][T19573] bridge_slave_1: entered allmulticast mode [ 1874.515297][T19573] bridge_slave_1: entered promiscuous mode [ 1874.555902][T18414] Bluetooth: hci4: command tx timeout [ 1874.697917][T19566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1874.729092][T18414] Bluetooth: hci9: command tx timeout [ 1874.733570][T19573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1874.768909][T19566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1874.798798][T19582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.798870][T19582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.799175][T19582] bridge_slave_0: entered allmulticast mode [ 1874.800597][T19582] bridge_slave_0: entered promiscuous mode [ 1874.830671][T19573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1874.868645][T19582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.868814][T19582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.868942][T19582] bridge_slave_1: entered allmulticast mode [ 1874.872427][T19582] bridge_slave_1: entered promiscuous mode [ 1874.909866][T19580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.909992][T19580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.910178][T19580] bridge_slave_0: entered allmulticast mode [ 1874.913763][T19580] bridge_slave_0: entered promiscuous mode [ 1875.088392][T19580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.088529][T19580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.088718][T19580] bridge_slave_1: entered allmulticast mode [ 1875.090467][T19580] bridge_slave_1: entered promiscuous mode [ 1875.091338][T19607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1875.091430][T19607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.091558][T19607] bridge_slave_0: entered allmulticast mode [ 1875.092895][T19607] bridge_slave_0: entered promiscuous mode [ 1875.227153][ T6070] bridge_slave_1: left allmulticast mode [ 1875.227176][ T6070] bridge_slave_1: left promiscuous mode [ 1875.227316][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.337583][ T6070] bridge_slave_0: left allmulticast mode [ 1875.337617][ T6070] bridge_slave_0: left promiscuous mode [ 1875.337833][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.595353][T19421] Bluetooth: hci7: command tx timeout [ 1875.595899][T18414] Bluetooth: hci8: command tx timeout [ 1876.452576][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.517081][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.540592][ T6070] bond0 (unregistering): Released all slaves [ 1876.546390][ T6070] bond1 (unregistering): Released all slaves [ 1876.564084][ T6070] bond2 (unregistering): Released all slaves [ 1876.594454][T19566] team0: Port device team_slave_0 added [ 1876.616545][T19573] team0: Port device team_slave_0 added [ 1876.634116][T19607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.634232][T19607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.634382][T19607] bridge_slave_1: entered allmulticast mode [ 1876.637024][T19607] bridge_slave_1: entered promiscuous mode [ 1876.641422][T19566] team0: Port device team_slave_1 added [ 1876.685951][T19582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.708710][T19573] team0: Port device team_slave_1 added [ 1876.765972][T19582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1876.775702][ T6070] tipc: Left network mode [ 1876.842572][T19580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.983267][T19580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1876.983590][T18414] Bluetooth: hci9: command tx timeout [ 1876.986458][T19607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.987148][T19566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1876.987157][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1876.987174][T19566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.081329][T19573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1877.081343][T19573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.081360][T19573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.144659][T19607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.159076][T19566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.159090][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.159109][T19566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.161847][T19582] team0: Port device team_slave_0 added [ 1877.163462][T19573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.163470][T19573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.163483][T19573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.234191][T19582] team0: Port device team_slave_1 added [ 1877.273923][T19580] team0: Port device team_slave_0 added [ 1877.366075][T19580] team0: Port device team_slave_1 added [ 1877.368894][T19607] team0: Port device team_slave_0 added [ 1877.407153][T19607] team0: Port device team_slave_1 added [ 1877.408178][T19582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1877.408189][T19582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.408209][T19582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.495408][T19582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.495421][T19582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.495440][T19582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.849773][T19421] Bluetooth: hci7: command tx timeout [ 1877.849821][T18414] Bluetooth: hci8: command tx timeout [ 1878.035547][T19580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.035562][T19580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.035582][T19580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.401616][T19566] hsr_slave_0: entered promiscuous mode [ 1878.403080][T19566] hsr_slave_1: entered promiscuous mode [ 1878.403960][T19566] debugfs: 'hsr0' already exists in 'hsr' [ 1878.403983][T19566] Cannot create hsr debugfs directory [ 1878.414034][T19573] hsr_slave_0: entered promiscuous mode [ 1878.415434][T19573] hsr_slave_1: entered promiscuous mode [ 1878.416342][T19573] debugfs: 'hsr0' already exists in 'hsr' [ 1878.416363][T19573] Cannot create hsr debugfs directory [ 1878.417950][T19580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.417961][T19580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.417983][T19580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.419426][T19607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.419438][T19607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.419458][T19607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.554502][T19607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.554516][T19607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.554537][T19607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.726409][T19582] hsr_slave_0: entered promiscuous mode [ 1878.733815][T19582] hsr_slave_1: entered promiscuous mode [ 1878.734774][T19582] debugfs: 'hsr0' already exists in 'hsr' [ 1878.734796][T19582] Cannot create hsr debugfs directory [ 1879.225609][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1879.239048][T18414] Bluetooth: hci9: command tx timeout [ 1879.256256][T19580] hsr_slave_0: entered promiscuous mode [ 1879.257081][T19580] hsr_slave_1: entered promiscuous mode [ 1879.257633][T19580] debugfs: 'hsr0' already exists in 'hsr' [ 1879.257647][T19580] Cannot create hsr debugfs directory [ 1879.438959][T19607] hsr_slave_0: entered promiscuous mode [ 1879.439799][T19607] hsr_slave_1: entered promiscuous mode [ 1879.440619][T19607] debugfs: 'hsr0' already exists in 'hsr' [ 1879.440634][T19607] Cannot create hsr debugfs directory [ 1879.649147][ T6070] hsr_slave_0: left promiscuous mode [ 1879.670317][ T6070] hsr_slave_1: left promiscuous mode [ 1879.671230][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1879.671252][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1879.725645][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1879.725669][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1879.790888][ T6070] veth1_macvtap: left promiscuous mode [ 1879.790951][ T6070] veth0_macvtap: left promiscuous mode [ 1879.793635][ T6070] veth1_vlan: left promiscuous mode [ 1879.793753][ T6070] veth0_vlan: left promiscuous mode [ 1880.548643][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 1880.592161][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 1881.784584][T19566] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1881.824003][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1882.380931][T19566] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1882.426198][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1882.428178][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1882.429634][T19566] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1882.480167][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1882.482348][T19566] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1882.513381][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1882.918879][T19566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1883.287204][T19566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.310424][T14543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.310631][T14543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1883.325958][T14543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.326128][T14543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.577787][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1884.041823][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1885.644199][T19566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1886.522505][T19566] veth0_vlan: entered promiscuous mode [ 1886.725126][T19566] veth1_vlan: entered promiscuous mode [ 1887.313265][T19566] veth0_macvtap: entered promiscuous mode [ 1887.452097][ T6070] bridge_slave_1: left allmulticast mode [ 1887.452130][ T6070] bridge_slave_1: left promiscuous mode [ 1887.452382][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.626205][ T6070] bridge_slave_0: left allmulticast mode [ 1887.626227][ T6070] bridge_slave_0: left promiscuous mode [ 1887.626388][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.395211][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1888.481941][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1888.503878][ T6070] bond0 (unregistering): Released all slaves [ 1888.510258][ T6070] bond1 (unregistering): Released all slaves [ 1888.539688][ T6070] bond2 (unregistering): Released all slaves [ 1888.585409][T19566] veth1_macvtap: entered promiscuous mode [ 1888.623021][T19566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1888.632387][T19566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1888.649406][T14543] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.649639][T14543] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.649672][T14543] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.649702][T14543] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.805420][T16091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1889.805437][T16091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1890.996996][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.997012][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1891.495753][T19573] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1891.564904][T19573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1891.627693][T19573] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1891.725753][T19573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1891.735214][T19573] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1891.788949][T19573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1891.869917][T19573] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1891.901684][T19573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1892.009095][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1892.048043][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1892.781151][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 1892.860802][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 1893.714357][T19580] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1893.746946][T19580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1893.755813][T19580] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1893.828315][T19580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1893.833826][T19580] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1893.913849][T19580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1893.916653][T19573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1894.058468][T19580] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1894.147381][T19580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1894.298658][T19573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1894.497920][T19582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1894.598928][T19582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1894.607460][T14543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1894.607641][T14543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1894.640360][T19582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1894.812165][T19582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1894.826591][T14553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1894.826745][T14553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1894.847015][T19582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1894.879746][T19582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1894.894638][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034a7ac00: rx timeout, send abort [ 1894.895215][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888034a7ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1895.071496][T19582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1895.108133][T19582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1895.118564][ T6070] IPVS: stop unused estimator thread 0... [ 1896.193447][T19607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1896.235498][T19607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1896.244149][T19607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1896.298502][ T199] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1896.302576][T19607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1896.317212][T19607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1896.354668][T19607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1896.367959][T19607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1896.397870][T19607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1896.460134][ T199] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1896.460164][ T199] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.460197][ T199] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1896.460225][ T199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.508689][ T199] usb 8-1: config 0 descriptor?? [ 1896.757352][T19580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1896.957445][ T199] usbhid 8-1:0.0: can't add hid device: -71 [ 1896.957555][ T199] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1896.999494][ T199] usb 8-1: USB disconnect, device number 2 [ 1897.171454][T19580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1897.226941][T19582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1897.239330][T16091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1897.239474][T16091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1897.275183][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.275302][ T5881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1897.334151][T19582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1897.365738][T15449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1897.367448][T15449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1897.435997][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.436075][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1897.677039][T19607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1897.897366][T19573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1897.940167][T19607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1898.007368][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.007568][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1898.155625][T16091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.157332][T16091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1899.287150][T19573] veth0_vlan: entered promiscuous mode [ 1899.381818][T19573] veth1_vlan: entered promiscuous mode [ 1899.636052][T19573] veth0_macvtap: entered promiscuous mode [ 1899.652129][T19573] veth1_macvtap: entered promiscuous mode [ 1899.742122][T19573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1899.782007][T19573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1899.841794][ T5856] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1899.895664][T19582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1899.921432][T15451] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.922523][T15451] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.954343][T15451] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.956857][T19580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1899.989386][T15451] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.002027][ T5856] usb 8-1: Using ep0 maxpacket: 16 [ 1900.005546][ T5856] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1900.005569][ T5856] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1900.005592][ T5856] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1900.005615][ T5856] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1900.005635][ T5856] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1900.005650][ T5856] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1900.005669][ T5856] usb 8-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1900.008141][ T5856] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1900.008165][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.008183][ T5856] usb 8-1: Product: syz [ 1900.008196][ T5856] usb 8-1: Manufacturer: syz [ 1900.008208][ T5856] usb 8-1: SerialNumber: syz [ 1900.139004][ T5856] usb 8-1: config 0 descriptor?? [ 1900.140318][T20067] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1900.158992][ T5856] iuu_phoenix 8-1:0.0: iuu_phoenix converter detected [ 1900.171401][ T5856] usb 8-1: iuu_phoenix converter now attached to ttyUSB0 [ 1900.385157][T20067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1900.391409][T20067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1900.574039][T16317] usb 8-1: USB disconnect, device number 3 [ 1900.719180][T16317] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1900.719925][T16317] iuu_phoenix 8-1:0.0: device disconnected [ 1900.740645][T19607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1900.913926][T19582] veth0_vlan: entered promiscuous mode [ 1901.213677][T19582] veth1_vlan: entered promiscuous mode [ 1901.297447][T15453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.297464][T15453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.483315][T15453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.483333][T15453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.497951][ T5834] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1901.566960][T19607] veth0_vlan: entered promiscuous mode [ 1901.614536][T19582] veth0_macvtap: entered promiscuous mode [ 1901.650872][ T5834] usb 8-1: device descriptor read/64, error -71 [ 1901.668346][T19607] veth1_vlan: entered promiscuous mode [ 1901.689528][T19580] veth0_vlan: entered promiscuous mode [ 1901.698873][T19582] veth1_macvtap: entered promiscuous mode [ 1901.786393][T19580] veth1_vlan: entered promiscuous mode [ 1901.912073][T19582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1901.963611][ T5834] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1901.986808][T19582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1902.063688][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.080801][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.104483][ T5834] usb 8-1: device descriptor read/64, error -71 [ 1902.108036][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.131050][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.153164][T19607] veth0_macvtap: entered promiscuous mode [ 1902.453028][ T5834] usb usb8-port1: attempt power cycle [ 1903.243355][T19607] veth1_macvtap: entered promiscuous mode [ 1903.475908][ T5834] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1903.480520][T19580] veth0_macvtap: entered promiscuous mode [ 1903.492197][ T5834] usb 8-1: device descriptor read/8, error -71 [ 1903.816825][ T5834] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1903.839895][ T5834] usb 8-1: device descriptor read/8, error -71 [ 1903.958061][ T5834] usb usb8-port1: unable to enumerate USB device [ 1904.144397][T19580] veth1_macvtap: entered promiscuous mode [ 1904.347607][T19607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1904.514288][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.514304][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.561156][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3351'. [ 1904.574500][T19607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1904.601503][T19580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1904.602888][T20141] netlink: 'syz.8.3351': attribute type 1 has an invalid length. [ 1904.602899][T20141] netlink: 'syz.8.3351': attribute type 2 has an invalid length. [ 1904.850016][T19580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1904.850099][T14543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.882355][T14543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.900099][T14543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.917400][T14543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.007454][T14543] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.012767][T14543] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.015258][T14543] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.017152][T14543] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.146396][T15451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.146413][T15451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1906.776835][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3358'. [ 1907.194877][T16091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.194896][T16091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1907.706725][T15453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.706739][T15453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1907.865443][T13552] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1907.908171][T15444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.908188][T15444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.022147][T13552] usb 3-1: Using ep0 maxpacket: 16 [ 1908.025579][T13552] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1908.025602][T13552] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1908.025624][T13552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1908.025646][T13552] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1908.025664][T13552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1908.025682][T13552] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1908.025701][T13552] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1908.043868][ T5881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1908.043885][ T5881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.132797][T13552] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1908.132824][T13552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.132841][T13552] usb 3-1: Product: syz [ 1908.132854][T13552] usb 3-1: Manufacturer: syz [ 1908.132866][T13552] usb 3-1: SerialNumber: syz [ 1908.139424][T13552] usb 3-1: config 0 descriptor?? [ 1908.180663][T20182] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1908.209462][T13552] iuu_phoenix 3-1:0.0: iuu_phoenix converter detected [ 1908.236730][T13552] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 1908.447783][T20182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.448244][T20182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.452622][ T5834] usb 3-1: USB disconnect, device number 22 [ 1908.503878][ T5332] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1908.553769][ T5834] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1908.577515][ T5834] iuu_phoenix 3-1:0.0: device disconnected [ 1908.674259][ T5332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1908.674287][ T5332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1908.674319][ T5332] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1908.674339][ T5332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.713126][ T5332] usb 9-1: config 0 descriptor?? [ 1909.304778][ T5834] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1909.421611][ T5332] usbhid 9-1:0.0: can't add hid device: -71 [ 1909.421723][ T5332] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1909.447449][ T5332] usb 9-1: USB disconnect, device number 2 [ 1909.476519][ T5834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1909.479829][ T5834] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1909.479851][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.479868][ T5834] usb 2-1: Product: syz [ 1909.479881][ T5834] usb 2-1: Manufacturer: syz [ 1909.479893][ T5834] usb 2-1: SerialNumber: syz [ 1910.020110][T20201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.022827][T20201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.051227][T20201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.056318][T20201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.160264][T20219] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3369'. [ 1911.048441][ T5732] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1911.208304][ T5732] usb 3-1: Using ep0 maxpacket: 16 [ 1911.225387][ T5732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.225436][ T5732] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1911.225474][ T5732] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1911.225494][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.303653][ T5732] usb 3-1: config 0 descriptor?? [ 1911.404966][ T5732] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1911.445313][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1912.021364][ T199] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1912.127365][T20238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1912.127691][T20238] batadv_slave_0: entered promiscuous mode [ 1912.161917][ T199] usb 9-1: device descriptor read/64, error -71 [ 1912.478681][ T199] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1912.640875][ T199] usb 9-1: device descriptor read/64, error -71 [ 1912.759372][ T199] usb usb9-port1: attempt power cycle [ 1912.938527][T20237] macvlan2: entered promiscuous mode [ 1912.938550][T20237] bridge0: entered promiscuous mode [ 1913.040894][ T5834] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1913.040946][ T5834] usb 2-1: MIDIStreaming interface descriptor not found [ 1913.192491][ T199] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1913.218433][ T199] usb 9-1: device descriptor read/8, error -71 [ 1913.323074][ T5834] usb 2-1: USB disconnect, device number 15 [ 1913.484342][ T199] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1913.510313][ T199] usb 9-1: device descriptor read/8, error -71 [ 1913.625292][ T199] usb usb9-port1: unable to enumerate USB device [ 1913.716590][T20263] udevd[20263]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1913.842003][ T11] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1913.895940][ T5834] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1913.934083][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1914.006353][ T11] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1914.006406][ T11] usb 10-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1914.009189][ T11] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1914.009213][ T11] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.009228][ T11] usb 10-1: Product: syz [ 1914.009240][ T11] usb 10-1: Manufacturer: syz [ 1914.009253][ T11] usb 10-1: SerialNumber: syz [ 1914.069727][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 1914.079541][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1914.079561][ T5834] usb 2-1: config 0 has no interfaces? [ 1914.110611][ T5834] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1914.110636][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.110653][ T5834] usb 2-1: Product: syz [ 1914.110666][ T5834] usb 2-1: Manufacturer: syz [ 1914.110678][ T5834] usb 2-1: SerialNumber: syz [ 1914.156780][ T11] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1914.185265][ T5332] usb 3-1: USB disconnect, device number 23 [ 1914.208015][ T199] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1914.233290][ T5834] usb 2-1: config 0 descriptor?? [ 1914.253535][T17481] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1916.097315][ T199] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1916.102308][ T5834] usb 10-1: USB disconnect, device number 2 [ 1916.118637][T17481] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1916.118654][T17481] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.118677][T17481] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1916.118688][T17481] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.273660][T17481] usb 8-1: config 0 descriptor?? [ 1916.339958][ T199] ath9k_htc: Failed to initialize the device [ 1916.340596][ T5834] usb 10-1: ath9k_htc: USB layer deinitialized [ 1916.344352][T20265] udevd[20265]: setting owner of /dev/bus/usb/010/002 to uid=0, gid=0 failed: No such file or directory [ 1916.595295][T20286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.600793][T20286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.659675][ T5834] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1916.822246][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 1916.824454][ T5834] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1916.824504][ T5834] usb 10-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1916.940213][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 1916.950130][T17481] usbhid 8-1:0.0: can't add hid device: -71 [ 1916.950381][T17481] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1916.982668][T17481] usb 8-1: USB disconnect, device number 8 [ 1917.104025][ T5834] usb 10-1: string descriptor 0 read error: -71 [ 1917.104238][ T5834] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 1917.104251][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.127897][ T5834] usb 10-1: can't set config #1, error -71 [ 1917.130506][ T5834] usb 10-1: USB disconnect, device number 3 [ 1917.564408][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1917.588168][ T5834] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1918.149298][T20317] comedi comedi3: 8255: I/O base address not correctly aligned [ 1918.168477][ T5834] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1918.195550][ T5834] usb 10-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1918.195575][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.195593][ T5834] usb 10-1: Product: syz [ 1918.195605][ T5834] usb 10-1: Manufacturer: syz [ 1918.195618][ T5834] usb 10-1: SerialNumber: syz [ 1918.241333][T17481] usb 2-1: USB disconnect, device number 16 [ 1918.717140][T20303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.717741][T20303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.739058][T20303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.739642][T20303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.909204][T20341] input: syz0 as /devices/virtual/input/input115 [ 1919.762962][T15323] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1919.988873][T15323] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1919.988904][T15323] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1919.988931][T15323] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1919.989023][T15323] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.204841][T15323] usb 8-1: config 0 descriptor?? [ 1921.034967][T15323] usbhid 8-1:0.0: can't add hid device: -71 [ 1921.035088][T15323] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1921.129531][T15323] usb 8-1: USB disconnect, device number 9 [ 1921.146686][ T5856] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1921.308972][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 1921.311356][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1921.311377][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1921.311399][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1921.311422][ T5856] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1921.311443][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1921.311462][ T5856] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1921.311481][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1921.314656][ T5856] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1921.314680][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.314697][ T5856] usb 2-1: Product: syz [ 1921.314710][ T5856] usb 2-1: Manufacturer: syz [ 1921.314723][ T5856] usb 2-1: SerialNumber: syz [ 1921.466848][ T5856] usb 2-1: config 0 descriptor?? [ 1921.468298][T20356] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1921.558339][ T5856] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected [ 1921.912098][ T5856] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 1921.912582][T20356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.957957][T20356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1922.027002][ T5856] usb 2-1: USB disconnect, device number 17 [ 1922.137954][ T5856] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1922.160910][ T5856] iuu_phoenix 2-1:0.0: device disconnected [ 1922.553725][T20365] comedi comedi3: 8255: I/O base address not correctly aligned [ 1923.125960][ T5834] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1923.126012][ T5834] usb 10-1: MIDIStreaming interface descriptor not found [ 1923.764869][T13552] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1924.491487][ T5834] usb 10-1: USB disconnect, device number 4 [ 1924.675408][T13552] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1924.675461][T13552] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1924.678364][T13552] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1924.678389][T13552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.678407][T13552] usb 3-1: Product: syz [ 1924.678420][T13552] usb 3-1: Manufacturer: syz [ 1924.678433][T13552] usb 3-1: SerialNumber: syz [ 1924.749049][T13552] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1924.891786][ T11] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1925.229003][T20003] udevd[20003]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1925.692981][ T5723] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1925.893348][ T5723] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1925.902923][ T5723] usb 8-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1925.902948][ T5723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.902966][ T5723] usb 8-1: Product: syz [ 1925.902979][ T5723] usb 8-1: Manufacturer: syz [ 1925.902992][ T5723] usb 8-1: SerialNumber: syz [ 1926.261730][ T11] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1926.304500][T13552] usb 3-1: USB disconnect, device number 24 [ 1926.332977][ T11] ath9k_htc: Failed to initialize the device [ 1926.368949][T13552] usb 3-1: ath9k_htc: USB layer deinitialized [ 1926.454769][T20414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.465387][T20414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.482854][T20414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.485799][T20414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.751377][T13552] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1927.659945][T15323] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1927.788065][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1927.822416][T15323] usb 2-1: Using ep0 maxpacket: 32 [ 1927.830407][T15323] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1927.830431][T15323] usb 2-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 1927.830449][T15323] usb 2-1: Product: syz [ 1927.830513][T15323] usb 2-1: Manufacturer: syz [ 1927.830535][T15323] usb 2-1: SerialNumber: syz [ 1927.896120][T15323] usb 2-1: config 0 descriptor?? [ 1928.274972][T20447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.315767][T20447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.398687][ T5723] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1928.398739][ T5723] usb 8-1: MIDIStreaming interface descriptor not found [ 1929.423196][ T5723] usb 8-1: USB disconnect, device number 10 [ 1929.537892][T15323] usb 2-1: reset high-speed USB device number 18 using dummy_hcd [ 1929.891670][T20195] udevd[20195]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1930.185743][T15323] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 1930.185763][T15323] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1930.276798][T15323] usb 2-1: USB disconnect, device number 18 [ 1930.401880][T17481] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1930.569454][T17481] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1930.569510][T17481] usb 10-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1930.573292][T17481] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1930.573316][T17481] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.573333][T17481] usb 10-1: Product: syz [ 1930.573346][T17481] usb 10-1: Manufacturer: syz [ 1930.573367][T17481] usb 10-1: SerialNumber: syz [ 1930.657842][T17481] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1930.698010][ T5723] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1930.980649][T16317] usb 10-1: USB disconnect, device number 5 [ 1931.112212][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1931.890879][ T5723] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1932.020164][ T5723] ath9k_htc: Failed to initialize the device [ 1932.022035][T16317] usb 10-1: ath9k_htc: USB layer deinitialized [ 1932.623618][T16317] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1932.801726][T16317] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1932.801750][T16317] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1932.801782][T16317] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1932.801801][T16317] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.981222][ T5723] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1933.069853][ T5834] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1933.116497][T16317] usb 8-1: USB disconnect, device number 11 [ 1933.168918][ T5723] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1933.168942][ T5723] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1933.168958][ T5723] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.168975][ T5723] usb 3-1: config 220 has no interface number 2 [ 1933.169047][ T5723] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1933.169070][ T5723] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1933.169085][ T5723] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1933.169100][ T5723] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1933.171290][ T5723] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1933.171311][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.171328][ T5723] usb 3-1: Product: syz [ 1933.171339][ T5723] usb 3-1: Manufacturer: syz [ 1933.171351][ T5723] usb 3-1: SerialNumber: syz [ 1933.236604][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.236632][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.236664][ T5834] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1933.236684][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.249107][ T5834] usb 9-1: config 0 descriptor?? [ 1933.319507][T16317] ================================================================== [ 1933.319521][T16317] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1933.319618][T16317] Read of size 8 at addr ffffc9002614f008 by task kworker/0:7/16317 [ 1933.319633][T16317] [ 1933.319662][T16317] CPU: 0 UID: 0 PID: 16317 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1933.319687][T16317] Tainted: [L]=SOFTLOCKUP [ 1933.319693][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1933.319705][T16317] Workqueue: usb_hub_wq hub_event [ 1933.319768][T16317] Call Trace: [ 1933.319807][T16317] [ 1933.319849][T16317] dump_stack_lvl+0xe8/0x150 [ 1933.319922][T16317] print_address_description+0x55/0x1e0 [ 1933.319943][T16317] ? __list_add_valid_or_report+0x4e/0x130 [ 1933.319970][T16317] print_report+0x58/0x70 [ 1933.319987][T16317] kasan_report+0x117/0x150 [ 1933.320057][T16317] ? __list_add_valid_or_report+0x4e/0x130 [ 1933.320082][T16317] __list_add_valid_or_report+0x4e/0x130 [ 1933.320104][T16317] kcov_remote_stop+0x457/0x680 [ 1933.320127][T16317] hub_event+0x4789/0x4cf0 [ 1933.320156][T16317] ? __lock_acquire+0x683/0x2ce0 [ 1933.320206][T16317] ? register_lock_class+0x31/0x2e0 [ 1933.320236][T16317] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1933.320281][T16317] ? __pfx_hub_event+0x10/0x10 [ 1933.320302][T16317] ? process_scheduled_works+0xa20/0x14e0 [ 1933.320373][T16317] ? rcu_is_watching+0x15/0xb0 [ 1933.320440][T16317] ? process_scheduled_works+0xa20/0x14e0 [ 1933.320462][T16317] process_scheduled_works+0xa8e/0x14e0 [ 1933.320496][T16317] ? __pfx_process_scheduled_works+0x10/0x10 [ 1933.320520][T16317] ? assign_work+0x3cf/0x5d0 [ 1933.320543][T16317] worker_thread+0xa47/0xfb0 [ 1933.320572][T16317] ? __kthread_parkme+0x71/0x1f0 [ 1933.320619][T16317] kthread+0x388/0x470 [ 1933.320635][T16317] ? __pfx_worker_thread+0x10/0x10 [ 1933.320656][T16317] ? __pfx_kthread+0x10/0x10 [ 1933.320674][T16317] ret_from_fork+0x514/0xb70 [ 1933.320721][T16317] ? __pfx_ret_from_fork+0x10/0x10 [ 1933.320739][T16317] ? __switch_to+0xc89/0x1420 [ 1933.320781][T16317] ? __pfx_kthread+0x10/0x10 [ 1933.320798][T16317] ret_from_fork_asm+0x1a/0x30 [ 1933.320825][T16317] [ 1933.320854][T16317] [ 1933.320858][T16317] The buggy address belongs to a vmalloc virtual mapping [ 1933.320874][T16317] Memory state around the buggy address: [ 1933.320909][T16317] ffffc9002614ef00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1933.320921][T16317] ffffc9002614ef80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1933.320932][T16317] >ffffc9002614f000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1933.320940][T16317] ^ [ 1933.320949][T16317] ffffc9002614f080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1933.320959][T16317] ffffc9002614f100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1933.320967][T16317] ================================================================== [ 1933.321241][T16317] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1933.321257][T16317] CPU: 0 UID: 0 PID: 16317 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1933.321280][T16317] Tainted: [L]=SOFTLOCKUP [ 1933.321287][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1933.321298][T16317] Workqueue: usb_hub_wq hub_event [ 1933.321320][T16317] Call Trace: [ 1933.321327][T16317] [ 1933.321335][T16317] vpanic+0x56c/0xa60 [ 1933.321357][T16317] ? __pfx_vpanic+0x10/0x10 [ 1933.321377][T16317] ? irqentry_exit+0x218/0x8f0 [ 1933.321459][T16317] panic+0xc5/0xd0 [ 1933.321478][T16317] ? __pfx_panic+0x10/0x10 [ 1933.321504][T16317] ? __list_add_valid_or_report+0x4e/0x130 [ 1933.321525][T16317] check_panic_on_warn+0x89/0xb0 [ 1933.321569][T16317] ? __list_add_valid_or_report+0x4e/0x130 [ 1933.321589][T16317] end_report+0x73/0x170 [ 1933.321611][T16317] ? __list_add_valid_or_report+0x4e/0x130 [ 1933.321631][T16317] kasan_report+0x128/0x150 [ 1933.321653][T16317] ? __list_add_valid_or_report+0x4e/0x130 [ 1933.321677][T16317] __list_add_valid_or_report+0x4e/0x130 [ 1933.321699][T16317] kcov_remote_stop+0x457/0x680 [ 1933.321721][T16317] hub_event+0x4789/0x4cf0 [ 1933.321745][T16317] ? __lock_acquire+0x683/0x2ce0 [ 1933.321767][T16317] ? register_lock_class+0x31/0x2e0 [ 1933.321797][T16317] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1933.321816][T16317] ? __pfx_hub_event+0x10/0x10 [ 1933.321836][T16317] ? process_scheduled_works+0xa20/0x14e0 [ 1933.321861][T16317] ? rcu_is_watching+0x15/0xb0 [ 1933.321884][T16317] ? process_scheduled_works+0xa20/0x14e0 [ 1933.321905][T16317] process_scheduled_works+0xa8e/0x14e0 [ 1933.321938][T16317] ? __pfx_process_scheduled_works+0x10/0x10 [ 1933.321964][T16317] ? assign_work+0x3cf/0x5d0 [ 1933.321987][T16317] worker_thread+0xa47/0xfb0 [ 1933.322015][T16317] ? __kthread_parkme+0x71/0x1f0 [ 1933.322035][T16317] kthread+0x388/0x470 [ 1933.322052][T16317] ? __pfx_worker_thread+0x10/0x10 [ 1933.322074][T16317] ? __pfx_kthread+0x10/0x10 [ 1933.322092][T16317] ret_from_fork+0x514/0xb70 [ 1933.322112][T16317] ? __pfx_ret_from_fork+0x10/0x10 [ 1933.322130][T16317] ? __switch_to+0xc89/0x1420 [ 1933.322147][T16317] ? __pfx_kthread+0x10/0x10 [ 1933.322172][T16317] ret_from_fork_asm+0x1a/0x30 [ 1933.322199][T16317] [ 1933.322438][T16317] Kernel Offset: disabled