last executing test programs: 7m12.584090632s ago: executing program 1 (id=652): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) pipe(&(0x7f0000000080)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f00000037c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000020, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) 7m11.436572131s ago: executing program 1 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r1], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 7m11.274182715s ago: executing program 1 (id=658): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='pids.current\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) mkdir(0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047457, 0x0) 7m11.104002769s ago: executing program 1 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, 0x0, 0x2000c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x8000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r4, 0x1, 0x0, 0x6, @remote}, 0x14) 7m10.711013808s ago: executing program 1 (id=666): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f, 0xb604}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1d7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63d844d5d10acf23eb04c3f2e1150ff6608401", 0xa4}], 0x3}, 0x0) 7m2.694409497s ago: executing program 1 (id=682): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRESHEX=r1], 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x46}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) unshare(0x6a040000) mmap(&(0x7f00008ce000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x50, 0x1406, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x5, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_disconnect(r0) close(0x3) 6m45.822150566s ago: executing program 32 (id=682): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRESHEX=r1], 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x46}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) unshare(0x6a040000) mmap(&(0x7f00008ce000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x50, 0x1406, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x5, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_disconnect(r0) close(0x3) 8.237875855s ago: executing program 2 (id=1874): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000), 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1}, 0x10) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) 7.732469418s ago: executing program 3 (id=1877): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x10000, 0x0) unshare(0x24020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3) write(r0, &(0x7f0000000600)='120', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="04005b0006006500b0000000"], 0x28}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) 7.627592361s ago: executing program 3 (id=1879): syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001ffffffe89a98332ef71a1d915819000000020000364c8b3ea3d1a3d448dd4f980efccc9fc7a7ff69b3a80ab995b17bd2f5f27c70c031f774facec609a5c8904bbb391faf19edb9c5f2b676bbf7473e2c65cb5335cc729eb93ade1a0aff38eadcb01d4c2d430575bdb6f76c7ac87eacd77946d50b727943664d3da80d7493b993691204c1b278550e094f7f1a4d8fdc93bc1c8fc4ff88350321778c566f3d7b5d28a88e0c0dcc51c664c01ba1e4bb2e6b1ee9a2fbc6a537284b6c262739fab37cd0dfbc39d5b35ebb3e"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) 7.262001789s ago: executing program 2 (id=1881): r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(r0, 0x0, 0x20000840) 6.407988781s ago: executing program 2 (id=1883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x10009, 0x7f, 0x9, 0x3, 0x7, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x57, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x6, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x700, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x80, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x3, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x65b38436, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x7, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x2, 0x5, 0x2, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x63e, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x1, 0x859, 0x80aedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x3, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x6, 0x4, 0x6, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x82b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x5, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x3, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0x1003, 0x1, 0x3ff, 0x2, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="76cb07ce824cc887", 0x8}], 0x1}, 0x804) 6.316489042s ago: executing program 3 (id=1884): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.865082274s ago: executing program 0 (id=1886): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d000009"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.439776284s ago: executing program 4 (id=1887): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x10000, 0x0) unshare(0x24020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3) write(r0, &(0x7f0000000600)='120', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="2867acb3320b00e51e0071a2c5c3dd0f3bac41560a89db97d0f478642113554088c97874f48177cb7bfa21a93f6b6c1e7e5e408e7de4709cbfef47c00accb7b43569e8b03199f7a5efe16ae65b14a8720e51b939b3d01baa5748ce27d027958e54d8312d4b869257237253538aa639e63696a06d7485a061d2a55527bf5b03a9383081ad63418c0d91fe803e5c15bddb9e0bbcc31ccd18bd0808c87d345fb35edddfa4d95d046919f5475da08b711148eb1e24815578aec445cedf9c2580f2c1b11a92a9a2eea36c26967ea4f2687abed4e515b99f0aa0b82d15c384275ae5b63a175fd6e3bbe1ba7be6f2787916741cd078c73ecb4e83d09d429e0a601fbff6e5c7a4adf51356168c3d6e4bbe4780a8eed980e3adfeff81231dd3a97f93111ed36bf41aae668974018f9b40bd0b049b08553fdd31392b04c1143a685e7325", @ANYRES16, @ANYRES32, @ANYBLOB="04005b0006006500b0000000"], 0x28}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) 5.269935719s ago: executing program 4 (id=1888): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0x3, 0x146}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeebc, 0x2000, 0x2, 0x2d4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000700)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff8, 0x0, 0x0, 0x0}}, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000480)={@multicast2, @remote}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0xc048aec8, &(0x7f00000000c0)={0x6, 0xc, 0x2, 0x4, 0x44}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x6, 0x1, {{0x17, 0x4, 0x2, 0x1a, 0x5c, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0xb5, 0x3, 0x9, [{@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x58, 0x0, 0x2, [0x9]}, @timestamp_addr={0x44, 0x24, 0xba, 0x1, 0x1, [{@private=0xa010102, 0x8b68}, {@multicast1, 0x11a}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x2}]}, @end]}}}}}) r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="05000000000000000064a7254c0008000300", @ANYRESOCT=r2, @ANYRES64=r3], 0x34}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x55, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xb65, 0x0, 0x0, 0x7, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x5]}) sendmsg$nl_route(r10, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0xd4}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000028000180140004000000000000001fff0000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4.909399128s ago: executing program 4 (id=1889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x16d}}, 0x18}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 3.893207663s ago: executing program 3 (id=1890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000007a80), 0x0, 0x10022, 0x0) 3.339681276s ago: executing program 0 (id=1891): r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(r0, 0x0, 0x20000840) 2.871475528s ago: executing program 0 (id=1892): syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001ffffffe89a98332ef71a1d915819000000020000364c8b3ea3d1a3d448dd4f980efccc9fc7a7ff69b3a80ab995b17bd2f5f27c70c031f774facec609a5c8904bbb391faf19edb9c5f2b676bbf7473e2c65cb5335cc729eb93ade1a0aff38eadcb01d4c2d430575bdb6f76c7ac87eacd77946d50b727943664d3da80d7493b993691204c1b278550e094f7f1a4d8fdc93bc1c8fc4ff88350321778c566f3d7b5d28a88e0c0dcc51c664c01ba1e4bb2e6b1ee9a2fbc6a537284b6c262739fab37cd0dfbc39d5b35ebb3e"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) 2.153125146s ago: executing program 0 (id=1893): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xe0, 0x6, 0x8, 0x10, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7, 0x80, 0x7f}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840), 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000001c0), 0x0, 0x4000001) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00000000", 0x25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x1c) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r4, &(0x7f0000003380)={0x2020}, 0x2020) socket(0x10, 0x80003, 0x0) 1.881056163s ago: executing program 2 (id=1894): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 1.864625293s ago: executing program 4 (id=1895): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1.840342044s ago: executing program 0 (id=1896): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x10000, 0x0) unshare(0x24020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3) write(r0, &(0x7f0000000600)='120', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="04005b0006006500b0000000"], 0x28}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) 1.733324947s ago: executing program 3 (id=1897): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000), 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1}, 0x10) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) 1.627292639s ago: executing program 3 (id=1898): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.376898156s ago: executing program 0 (id=1899): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d000009"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.271834118s ago: executing program 4 (id=1900): r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000840) 988.561395ms ago: executing program 2 (id=1901): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 617.235454ms ago: executing program 4 (id=1902): syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001ffffffe89a98332ef71a1d915819000000020000364c8b3ea3d1a3d448dd4f980efccc9fc7a7ff69b3a80ab995b17bd2f5f27c70c031f774facec609a5c8904bbb391faf19edb9c5f2b676bbf7473e2c65cb5335cc729eb93ade1a0aff38eadcb01d4c2d430575bdb6f76c7ac87eacd77946d50b727943664d3da80d7493b993691204c1b278550e094f7f1a4d8fdc93bc1c8fc4ff88350321778c566f3d7b5d28a88e0c0dcc51c664c01ba1e4bb2e6b1ee9a2fbc6a537284b6c262739fab37cd0dfbc39d5b35ebb3e"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) 0s ago: executing program 2 (id=1903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x10009, 0x7f, 0x9, 0x3, 0x7, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x57, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x6, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x700, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x80, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x3, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x65b38436, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x7, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x2, 0x5, 0x2, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x63e, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x1, 0x859, 0x80aedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x3, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x6, 0x4, 0x6, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x82b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x5, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x3, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0x1003, 0x1, 0x3ff, 0x2, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="76cb07ce824cc887", 0x8}], 0x1}, 0x804) kernel console output (not intermixed with test programs): 9] fuse: Unknown parameter '0x0000000000000004' [ 352.623770][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.645862][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 352.714666][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.742575][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.791754][ T8] usb 4-1: Product: syz [ 352.796017][ T8] usb 4-1: Manufacturer: syz [ 352.813109][ T6101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.821028][ T6101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.821239][ T8] usb 4-1: SerialNumber: syz [ 352.971185][ T8803] random: crng reseeded on system resumption [ 353.021738][ T8] cdc_mbim 4-1:1.0: skipping garbage [ 353.434213][ T8808] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.681275][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 353.689664][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 353.721060][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 353.880131][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.888279][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.183410][ T8] cdc_mbim 4-1:1.0: bind() failure [ 354.196506][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 354.212915][ T8] cdc_ncm 4-1:1.1: bind() failure [ 354.244340][ T8] usb 4-1: USB disconnect, device number 8 [ 355.422574][ T8840] fuse: Unknown parameter '0x0000000000000004' [ 355.755148][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 355.799512][ T8846] syzkaller0: entered promiscuous mode [ 355.863098][ T8846] syzkaller0: entered allmulticast mode [ 355.922337][ T8861] random: crng reseeded on system resumption [ 357.352239][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 357.544044][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.561484][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 357.591752][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.600897][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.612377][ T8] usb 3-1: Product: syz [ 357.616629][ T8] usb 3-1: Manufacturer: syz [ 357.621279][ T8] usb 3-1: SerialNumber: syz [ 357.650515][ T8] cdc_mbim 3-1:1.0: skipping garbage [ 357.832685][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 357.852254][ T8862] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 358.491739][ T8] cdc_mbim 3-1:1.0: bind() failure [ 358.499997][ T8] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 358.513453][ T8] cdc_ncm 3-1:1.1: bind() failure [ 358.531351][ T8] usb 3-1: USB disconnect, device number 14 [ 360.484793][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 360.534823][ T8879] vcan0: entered promiscuous mode [ 360.539914][ T8879] vcan0: entered allmulticast mode [ 360.662474][ T8913] fuse: Unknown parameter '0x0000000000000004' [ 360.849162][ T8919] random: crng reseeded on system resumption [ 361.668416][ T8924] trusted_key: encrypted_key: keylen parameter is missing [ 362.532311][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 362.761082][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.793703][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 362.819804][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.844725][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.878337][ T8] usb 4-1: Product: syz [ 362.896341][ T8] usb 4-1: Manufacturer: syz [ 362.901028][ T8] usb 4-1: SerialNumber: syz [ 362.941095][ T8] cdc_mbim 4-1:1.0: skipping garbage [ 362.962820][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'. [ 363.034193][ T8957] fuse: Unknown parameter '0x0000000000000004' [ 363.065753][ T8950] 8021q: adding VLAN 0 to HW filter on device bond5 [ 363.160270][ T8930] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 363.196929][ T8954] bond4: (slave team0): Releasing backup interface [ 363.228873][ T8954] team0: left promiscuous mode [ 363.249778][ T8954] team_slave_0: left promiscuous mode [ 363.276586][ T8954] team_slave_1: left promiscuous mode [ 363.292012][ T8954] team0: left allmulticast mode [ 363.300572][ T8954] team_slave_0: left allmulticast mode [ 363.310069][ T8954] team_slave_1: left allmulticast mode [ 363.326435][ T8954] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.346614][ T8954] bond5: (slave team0): Enslaving as an active interface with an up link [ 363.374596][ T8962] bond5: entered promiscuous mode [ 363.380257][ T8962] team0: entered promiscuous mode [ 363.386556][ T8962] team_slave_0: entered promiscuous mode [ 363.396110][ T8962] team_slave_1: entered promiscuous mode [ 363.404761][ T8962] bond5: entered allmulticast mode [ 363.409987][ T8962] team0: entered allmulticast mode [ 363.416765][ T8962] team_slave_0: entered allmulticast mode [ 363.422672][ T8962] team_slave_1: entered allmulticast mode [ 363.759007][ T8974] random: crng reseeded on system resumption [ 363.846961][ T8] cdc_mbim 4-1:1.0: bind() failure [ 363.971635][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 364.007854][ T8] cdc_ncm 4-1:1.1: bind() failure [ 364.157977][ T8] usb 4-1: USB disconnect, device number 9 [ 365.598747][ T8978] trusted_key: encrypted_key: keylen parameter is missing [ 366.364292][ T9002] fuse: Unknown parameter 'fd0x0000000000000004' [ 366.383229][ T9003] fuse: Unknown parameter 'fd00000000000000000000' [ 366.428153][ T8992] netlink: 256 bytes leftover after parsing attributes in process `syz.0.771'. [ 366.611839][ T9009] netlink: 84 bytes leftover after parsing attributes in process `syz.2.774'. [ 367.065995][ T9020] trusted_key: encrypted_key: keylen parameter is missing [ 367.141511][ T5863] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 367.373591][ T5863] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.505369][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 368.231310][ T5863] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 368.245082][ T5863] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.254325][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.271484][ T5863] usb 3-1: Product: syz [ 368.275746][ T5863] usb 3-1: Manufacturer: syz [ 368.280392][ T5863] usb 3-1: SerialNumber: syz [ 368.364057][ T9034] random: crng reseeded on system resumption [ 370.239340][ T5863] usb 3-1: can't set config #1, error -71 [ 370.258361][ T5863] usb 3-1: USB disconnect, device number 15 [ 370.426096][ T9045] fuse: Unknown parameter 'fd0x0000000000000004' [ 370.598094][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 370.667506][ T9061] trusted_key: encrypted_key: hex blob is missing [ 370.746437][ T9050] 8021q: adding VLAN 0 to HW filter on device bond11 [ 370.806086][ T9062] bond10: (slave team0): Releasing backup interface [ 370.858182][ T9062] team0: left promiscuous mode [ 370.874115][ T9062] team0: left allmulticast mode [ 370.902672][ T9062] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.943681][ T9062] bond11: (slave team0): Enslaving as an active interface with an up link [ 371.068700][ T9064] bond11: entered promiscuous mode [ 371.093597][ T9064] team0: entered promiscuous mode [ 371.100416][ T9064] bond11: entered allmulticast mode [ 371.117904][ T9064] team0: entered allmulticast mode [ 371.647158][ T9096] random: crng reseeded on system resumption [ 373.575864][ T9103] fuse: Unknown parameter 'fd0x0000000000000004' [ 373.780825][ T9109] trusted_key: encrypted_key: hex blob is missing [ 374.203321][ T9120] netlink: 'syz.3.799': attribute type 29 has an invalid length. [ 374.246242][ T9120] netlink: 'syz.3.799': attribute type 29 has an invalid length. [ 374.261849][ T9122] netlink: 'syz.3.799': attribute type 29 has an invalid length. [ 374.295805][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 374.763471][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 375.764874][ T9128] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.946249][ T9140] bond5: (slave team0): Releasing backup interface [ 375.989863][ T9140] team0: left promiscuous mode [ 376.107502][ T9140] team_slave_0: left promiscuous mode [ 376.137759][ T9140] team_slave_1: left promiscuous mode [ 376.150843][ T9158] random: crng reseeded on system resumption [ 376.196783][ T9140] team0: left allmulticast mode [ 376.249698][ T9140] team_slave_0: left allmulticast mode [ 376.287754][ T9140] team_slave_1: left allmulticast mode [ 376.420978][ T9140] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.573573][ T9140] bond6: (slave team0): Enslaving as an active interface with an up link [ 376.816214][ T9162] fuse: Bad value for 'fd' [ 377.567725][ T9142] bond6: entered promiscuous mode [ 377.640499][ T9142] team0: entered promiscuous mode [ 377.680939][ T9142] team_slave_0: entered promiscuous mode [ 377.687006][ T9142] team_slave_1: entered promiscuous mode [ 377.704096][ T9142] bond6: entered allmulticast mode [ 377.709313][ T9142] team0: entered allmulticast mode [ 377.715369][ T9142] team_slave_0: entered allmulticast mode [ 377.721174][ T9142] team_slave_1: entered allmulticast mode [ 378.905807][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.924659][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.220075][ T9182] overlay: filesystem on ./file0 not supported as upperdir [ 379.581468][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 379.712736][ T9199] random: crng reseeded on system resumption [ 379.818185][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.913285][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 380.124022][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.227161][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.268675][ T9204] fuse: Bad value for 'fd' [ 380.320061][ T8] usb 4-1: Product: syz [ 380.354872][ T8] usb 4-1: Manufacturer: syz [ 380.388373][ T8] usb 4-1: SerialNumber: syz [ 380.660226][ T8] cdc_mbim 4-1:1.0: skipping garbage [ 380.814042][ T9190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 381.026548][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'. [ 381.110478][ T9213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 381.268222][ T9217] bond6: (slave team0): Releasing backup interface [ 381.284411][ T8] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 381.290643][ T8] cdc_mbim 4-1:1.0: bind() failure [ 381.299402][ T9217] team0: left promiscuous mode [ 381.308829][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 381.319196][ T8] cdc_ncm 4-1:1.1: bind() failure [ 381.323609][ T9217] team_slave_0: left promiscuous mode [ 381.335159][ T8] usb 4-1: USB disconnect, device number 10 [ 381.360782][ T9217] team_slave_1: left promiscuous mode [ 381.391611][ T9217] team0: left allmulticast mode [ 381.403233][ T9217] team_slave_0: left allmulticast mode [ 381.423606][ T9217] team_slave_1: left allmulticast mode [ 381.453397][ T9217] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.497314][ T9217] bond7: (slave team0): Enslaving as an active interface with an up link [ 381.556268][ T9213] bond7: entered promiscuous mode [ 381.571518][ T9213] team0: entered promiscuous mode [ 381.580064][ T9213] team_slave_0: entered promiscuous mode [ 381.611864][ T9213] team_slave_1: entered promiscuous mode [ 381.618302][ T9213] bond7: entered allmulticast mode [ 381.628000][ T9213] team0: entered allmulticast mode [ 381.648318][ T9213] team_slave_0: entered allmulticast mode [ 381.661487][ T9213] team_slave_1: entered allmulticast mode [ 382.324916][ T9241] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.533739][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 384.679475][ T9277] 8021q: adding VLAN 0 to HW filter on device bond12 [ 384.775763][ T9285] bond11: (slave team0): Releasing backup interface [ 384.823737][ T9285] team0: left promiscuous mode [ 384.828776][ T9285] team0: left allmulticast mode [ 384.846247][ T9285] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.883848][ T9285] bond12: (slave team0): Enslaving as an active interface with an up link [ 384.946383][ T9286] bond12: entered promiscuous mode [ 384.971531][ T9286] team0: entered promiscuous mode [ 384.976881][ T9286] bond12: entered allmulticast mode [ 385.001461][ T9286] team0: entered allmulticast mode [ 390.873667][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 391.125426][ T9334] 8021q: adding VLAN 0 to HW filter on device bond13 [ 391.222007][ T9336] bond12: (slave team0): Releasing backup interface [ 391.267434][ T9336] team0: left promiscuous mode [ 391.287443][ T9336] team0: left allmulticast mode [ 391.334546][ T9336] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.373486][ T9336] bond13: (slave team0): Enslaving as an active interface with an up link [ 391.572432][ T9339] bond13: entered promiscuous mode [ 391.624737][ T9339] team0: entered promiscuous mode [ 391.677285][ T9339] bond13: entered allmulticast mode [ 391.756663][ T9339] team0: entered allmulticast mode [ 395.426146][ T9354] overlay: filesystem on ./file0 not supported as upperdir [ 395.939663][ T9370] tmpfs: Unknown parameter 'nr_blhcks' [ 396.020946][ T28] audit: type=1800 audit(1785675631.478:10): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.853" name="file0" dev="overlay" ino=1241 res=0 errno=0 [ 397.466724][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 397.657487][ T9385] 8021q: adding VLAN 0 to HW filter on device bond14 [ 397.726636][ T9396] bond13: (slave team0): Releasing backup interface [ 397.747412][ T9396] team0: left promiscuous mode [ 397.754034][ T9396] team0: left allmulticast mode [ 397.768282][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.819979][ T9396] bond14: (slave team0): Enslaving as an active interface with an up link [ 401.718755][ T9397] bond14: entered promiscuous mode [ 401.740658][ T9397] team0: entered promiscuous mode [ 401.768999][ T9397] bond14: entered allmulticast mode [ 401.794464][ T9397] team0: entered allmulticast mode [ 402.063389][ T9414] overlay: filesystem on ./file0 not supported as upperdir [ 403.763141][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 403.797885][ T9452] 8021q: adding VLAN 0 to HW filter on device bond8 [ 403.898640][ T9452] bond7: (slave team0): Releasing backup interface [ 403.965966][ T9452] team0: left promiscuous mode [ 403.987614][ T9452] team_slave_0: left promiscuous mode [ 404.038428][ T9452] team_slave_1: left promiscuous mode [ 404.074074][ T9452] team0: left allmulticast mode [ 404.117996][ T9452] team_slave_0: left allmulticast mode [ 404.150994][ T9452] team_slave_1: left allmulticast mode [ 404.177685][ T9468] overlay: filesystem on ./file0 not supported as upperdir [ 404.215317][ T9452] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.283883][ T9452] bond8: (slave team0): Enslaving as an active interface with an up link [ 404.438758][ T9463] bond8: entered promiscuous mode [ 404.492256][ T9463] team0: entered promiscuous mode [ 404.514944][ T9463] team_slave_0: entered promiscuous mode [ 404.520887][ T9463] team_slave_1: entered promiscuous mode [ 404.651200][ T9463] bond8: entered allmulticast mode [ 404.672815][ T9482] netlink: 84 bytes leftover after parsing attributes in process `syz.3.880'. [ 404.704249][ T9463] team0: entered allmulticast mode [ 404.726780][ T9463] team_slave_0: entered allmulticast mode [ 404.759462][ T9463] team_slave_1: entered allmulticast mode [ 406.984858][ T9522] netlink: 84 bytes leftover after parsing attributes in process `syz.0.890'. [ 407.018761][ T9508] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.032779][ T9508] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.055156][ T9508] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 408.323730][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 408.477327][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 408.544163][ T9533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 408.585840][ T9539] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.718470][ T9539] bond5: (slave team0): Enslaving as an active interface with an up link [ 409.059567][ T9544] bond5: entered promiscuous mode [ 409.110862][ T9544] team0: entered promiscuous mode [ 409.129523][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 409.135748][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 409.193141][ T9544] team_slave_0: entered promiscuous mode [ 409.283723][ T9544] team_slave_1: entered promiscuous mode [ 409.350766][ T9544] bond5: entered allmulticast mode [ 409.450477][ T9544] team0: entered allmulticast mode [ 409.524856][ T9544] team_slave_0: entered allmulticast mode [ 409.595552][ T9544] team_slave_1: entered allmulticast mode [ 410.025852][ T9554] overlay: filesystem on ./file0 not supported as upperdir [ 410.176001][ T9563] netlink: 84 bytes leftover after parsing attributes in process `syz.3.900'. [ 410.635871][ T9574] ieee802154 phy0 wpan0: encryption failed: -22 [ 412.800746][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 413.237201][ T9588] 8021q: adding VLAN 0 to HW filter on device bond9 [ 413.423063][ T9596] bond8: (slave team0): Releasing backup interface [ 413.489855][ T9596] team0: left promiscuous mode [ 413.540598][ T9596] team_slave_0: left promiscuous mode [ 413.611660][ T9596] team_slave_1: left promiscuous mode [ 413.698292][ T9596] team0: left allmulticast mode [ 413.738495][ T9596] team_slave_0: left allmulticast mode [ 413.801467][ T9596] team_slave_1: left allmulticast mode [ 413.848387][ T9611] overlay: filesystem on ./file0 not supported as upperdir [ 413.854296][ T9596] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.923067][ T9618] netlink: 84 bytes leftover after parsing attributes in process `syz.4.911'. [ 413.944479][ T9596] bond9: (slave team0): Enslaving as an active interface with an up link [ 414.214605][ T9599] bond9: entered promiscuous mode [ 414.243913][ T9599] team0: entered promiscuous mode [ 414.249040][ T9599] team_slave_0: entered promiscuous mode [ 414.337294][ T9599] team_slave_1: entered promiscuous mode [ 414.354344][ T9599] bond9: entered allmulticast mode [ 414.359565][ T9599] team0: entered allmulticast mode [ 414.419268][ T9599] team_slave_0: entered allmulticast mode [ 414.527971][ T9634] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.600189][ T9599] team_slave_1: entered allmulticast mode [ 417.042214][ T9651] overlay: filesystem on ./file0 not supported as upperdir [ 418.875934][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1) [ 419.011964][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 420.011556][ T9682] 8021q: adding VLAN 0 to HW filter on device bond15 [ 420.469803][ T9686] bond14: (slave team0): Releasing backup interface [ 420.530245][ T9706] overlay: filesystem on ./file0 not supported as upperdir [ 420.549176][ T9686] team0: left promiscuous mode [ 420.614402][ T9686] team0: left allmulticast mode [ 420.696495][ T9686] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.793455][ T9686] bond15: (slave team0): Enslaving as an active interface with an up link [ 421.018304][ T9698] bond15: entered promiscuous mode [ 421.041887][ T9698] team0: entered promiscuous mode [ 421.066396][ T9698] bond15: entered allmulticast mode [ 421.093799][ T9698] team0: entered allmulticast mode [ 421.680532][ T9740] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 421.733236][ T9733] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 421.741015][ T9733] netlink: 188 bytes leftover after parsing attributes in process `syz.0.936'. [ 424.721469][ T172] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 424.954959][ T172] usb 4-1: Using ep0 maxpacket: 8 [ 425.992216][ T9753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 425.998411][ T9753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 426.045147][ T172] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 426.061513][ T172] usb 4-1: can't read configurations, error -71 [ 426.087831][ T9753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 426.430051][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 426.523793][ T9768] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.071567][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 428.077777][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 428.258477][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 432.571546][ T172] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 432.766893][ T172] usb 4-1: Using ep0 maxpacket: 8 [ 432.774286][ T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.814614][ T172] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 432.841470][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.873061][ T172] usb 4-1: config 0 descriptor?? [ 433.113068][ T172] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 433.326203][ T172] usb 4-1: USB disconnect, device number 13 [ 433.333379][ T9814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 433.353341][ T9814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 433.396675][ T9814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 433.753410][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 433.869660][ T9831] 8021q: adding VLAN 0 to HW filter on device bond7 [ 435.351674][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 435.432078][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 435.438404][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 436.384132][ T5824] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 436.582100][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 436.597765][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.629920][ T5824] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 436.646400][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.670799][ T5824] usb 4-1: config 0 descriptor?? [ 436.890661][ T5824] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 437.100022][ T5824] usb 4-1: USB disconnect, device number 14 [ 437.107975][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 437.124244][ T9896] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 437.514988][ T9917] overlay: filesystem on ./file0 not supported as upperdir [ 440.317488][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.686482][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.817063][ T5824] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 442.633632][ T5824] usb 1-1: config 0 has no interfaces? [ 442.694166][ T5824] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 442.866894][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.100196][ T5824] usb 1-1: config 0 descriptor?? [ 443.519027][ T5824] usb 1-1: USB disconnect, device number 10 [ 444.329653][ T9986] overlay: filesystem on ./file0 not supported as upperdir [ 444.572007][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 444.600191][ T9992] netlink: 84 bytes leftover after parsing attributes in process `syz.0.984'. [ 444.769716][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 444.777206][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.798354][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 444.821478][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.867698][ T9] usb 4-1: config 0 descriptor?? [ 445.109051][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 445.300643][ T9] usb 4-1: USB disconnect, device number 15 [ 445.868372][T10016] overlay: filesystem on ./file0 not supported as upperdir [ 446.318154][T10021] netlink: 84 bytes leftover after parsing attributes in process `syz.3.994'. [ 448.073843][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 448.928648][ T9] usb 4-1: config 0 has no interfaces? [ 448.976961][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 449.056743][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.218740][ T9] usb 4-1: config 0 descriptor?? [ 449.824916][ T5789] usb 4-1: USB disconnect, device number 16 [ 450.821452][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 451.013572][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 451.031464][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 451.042893][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 451.063782][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 451.095579][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 451.116471][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 451.129236][ T9] usb 3-1: Product: syz [ 451.136748][ T9] usb 3-1: Manufacturer: syz [ 451.164012][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 451.171403][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 451.190176][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 451.199997][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 451.729427][T10053] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1003'. [ 452.002527][ T5824] usb 3-1: USB disconnect, device number 16 [ 452.318651][T10046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 452.332081][T10046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 452.341851][T10046] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 452.572045][T10057] syzkaller0: entered promiscuous mode [ 452.579319][T10057] syzkaller0: entered allmulticast mode [ 452.611968][T10056] overlay: filesystem on ./file0 not supported as upperdir [ 453.591736][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 453.671744][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 453.815964][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.836062][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 453.860789][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.885616][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.899292][ T9] usb 3-1: Product: syz [ 453.905141][ T9] usb 3-1: Manufacturer: syz [ 453.917059][ T9] usb 3-1: SerialNumber: syz [ 453.937648][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 454.157591][T10082] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.391644][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 454.397973][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 454.592599][T10084] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.598969][T10084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.638122][T10084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 454.863400][T10082] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.921915][ T9] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 454.931858][ T9] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 454.952265][ T9] wwan wwan0: port wwan0mbim0 attached [ 454.995849][ T9] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, fe:11:ed:91:a4:d7 [ 455.161332][ C1] wdm_int_callback: 3 callbacks suppressed [ 455.161452][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.174113][ C1] wdm_int_callback: 3 callbacks suppressed [ 455.174134][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.187134][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.193910][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.200426][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.207165][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.213824][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.220548][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.227045][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.233811][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.240365][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.247078][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.254136][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.260942][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.267415][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.274181][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.280720][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.287482][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.294279][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 455.301009][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 455.338555][ T8675] usb 3-1: USB disconnect, device number 17 [ 455.352704][ T8675] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 455.453178][ T8675] wwan wwan0: port wwan0mbim0 disconnected [ 455.513736][T10096] overlay: filesystem on ./file0 not supported as upperdir [ 456.071535][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 456.631750][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 456.712192][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 457.307915][T10118] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.381194][T10126] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 457.402071][T10126] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 457.421904][T10126] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 457.676318][ T9] kernel write not supported for file /770/clear_refs (pid: 9 comm: kworker/0:1) [ 458.780382][T10162] overlay: filesystem on ./file0 not supported as upperdir [ 459.081505][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 459.287842][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.307864][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 459.335523][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.351462][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 459.367963][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.381976][T10176] syzkaller0: entered promiscuous mode [ 459.391508][ T9] usb 3-1: Product: syz [ 459.392415][T10176] syzkaller0: entered allmulticast mode [ 459.395744][ T9] usb 3-1: Manufacturer: syz [ 459.413428][ T9] usb 3-1: SerialNumber: syz [ 459.431741][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 459.437933][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 459.448320][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 459.683488][T10165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.078327][T10188] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 460.305892][T10165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.329527][ T9] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 460.354696][ T9] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 460.391412][ T9] wwan wwan0: port wwan0mbim0 attached [ 460.442131][ T9] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ca:60:8e:e9:0b:ee [ 460.576123][ C1] wdm_int_callback: 137 callbacks suppressed [ 460.576147][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.589065][ C1] wdm_int_callback: 137 callbacks suppressed [ 460.589086][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.601425][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 460.638424][ T172] usb 3-1: USB disconnect, device number 18 [ 460.646976][ T172] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 461.074380][ T172] wwan wwan0: port wwan0mbim0 disconnected [ 462.526340][T10227] overlay: filesystem on ./file0 not supported as upperdir [ 462.667331][T10233] syzkaller0: entered promiscuous mode [ 462.679641][T10233] syzkaller0: entered allmulticast mode [ 468.096921][T10313] syzkaller0: entered promiscuous mode [ 468.121838][T10313] syzkaller0: entered allmulticast mode [ 470.142046][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1077'. [ 470.175632][T10347] siw: device registration error -23 [ 470.745548][T10368] syzkaller0: entered promiscuous mode [ 470.758638][T10368] syzkaller0: entered allmulticast mode [ 471.081483][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 471.362753][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 471.439255][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.657161][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 471.754617][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.905935][ T8] usb 4-1: config 0 descriptor?? [ 472.164742][ T8] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 472.382279][ T172] usb 4-1: USB disconnect, device number 17 [ 472.556708][T10400] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 472.564823][T10400] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1094'. [ 472.583829][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 472.894805][T10402] siw: device registration error -23 [ 474.097774][T10413] syzkaller0: entered promiscuous mode [ 474.103826][T10413] syzkaller0: entered allmulticast mode [ 474.695510][T10432] syzkaller0: entered promiscuous mode [ 474.710810][T10432] syzkaller0: entered allmulticast mode [ 474.740444][T10432] 0: reclassify loop, rule prio 0, protocol 700 [ 474.942351][T10434] syzkaller0: entered promiscuous mode [ 474.981730][T10434] syzkaller0: entered allmulticast mode [ 475.145573][T10440] netlink: 'syz.3.1107': attribute type 1 has an invalid length. [ 475.153746][T10440] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1107'. [ 476.927692][T10467] netlink: 'syz.0.1117': attribute type 1 has an invalid length. [ 476.935855][T10467] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1117'. [ 477.358270][T10470] syzkaller0: entered promiscuous mode [ 477.380597][T10470] syzkaller0: entered allmulticast mode [ 477.809581][T10474] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 478.621222][T10492] syzkaller0: entered promiscuous mode [ 478.628959][T10492] syzkaller0: entered allmulticast mode [ 478.864766][T10507] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 478.872995][T10507] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1129'. [ 482.610676][T10530] overlay: filesystem on ./file0 not supported as upperdir [ 482.639145][T10543] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 482.647140][T10543] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1139'. [ 483.760865][T10553] syzkaller0: entered promiscuous mode [ 483.795704][T10553] syzkaller0: entered allmulticast mode [ 484.081554][ T8675] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 484.322515][ T8675] usb 4-1: Using ep0 maxpacket: 8 [ 484.349589][ T8675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.380399][ T8675] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 484.418433][ T8675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.463889][ T8675] usb 4-1: config 0 descriptor?? [ 484.654025][T10576] syzkaller0: entered promiscuous mode [ 484.659835][T10576] syzkaller0: entered allmulticast mode [ 484.731828][ T8675] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 484.774231][ T8675] usb 4-1: USB disconnect, device number 18 [ 484.942475][T10584] overlay: filesystem on ./file0 not supported as upperdir [ 485.296259][T10589] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 485.304370][T10589] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1153'. [ 490.198908][T10624] fuse: Bad value for 'fd' [ 490.344408][T10629] overlay: filesystem on ./file0 not supported as upperdir [ 490.597408][T10637] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 490.791542][ T8675] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 491.011508][ T8675] usb 4-1: Using ep0 maxpacket: 8 [ 491.029360][ T8675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.045124][ T8675] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 491.066135][ T8675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.094178][ T8675] usb 4-1: config 0 descriptor?? [ 491.343478][ T8675] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 491.547144][ T23] usb 4-1: USB disconnect, device number 19 [ 491.655670][T10665] overlay: filesystem on ./file0 not supported as upperdir [ 491.902833][T10671] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 491.939905][T10676] syzkaller0: entered promiscuous mode [ 491.952066][T10676] syzkaller0: entered allmulticast mode [ 491.961134][T10679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1176'. [ 494.994997][T10704] overlay: filesystem on ./file0 not supported as upperdir [ 495.219083][T10709] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 495.241693][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1186'. [ 495.413391][T10721] syzkaller0: entered promiscuous mode [ 495.426178][T10721] syzkaller0: entered allmulticast mode [ 495.898022][T10730] syzkaller0: entered promiscuous mode [ 495.907221][T10730] syzkaller0: entered allmulticast mode [ 496.493421][T10754] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 498.930392][T10756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1198'. [ 499.100897][T10774] fuse: Bad value for 'fd' [ 499.656806][T10792] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 500.005917][T10797] syzkaller0: entered promiscuous mode [ 500.012183][T10797] syzkaller0: entered allmulticast mode [ 500.029382][T10806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1210'. [ 500.046080][T10804] syzkaller0: entered promiscuous mode [ 500.053325][T10804] syzkaller0: entered allmulticast mode [ 500.325954][T10808] fuse: Bad value for 'fd' [ 501.757101][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.768147][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.040384][T10822] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 503.207937][T10834] fuse: Bad value for 'fd' [ 503.618401][T10842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1226'. [ 503.720051][T10850] syzkaller0: entered promiscuous mode [ 503.725804][T10850] syzkaller0: entered allmulticast mode [ 503.911587][T10855] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 504.003682][T10859] fuse: Bad value for 'fd' [ 504.223729][T10865] UDC core: g1: couldn't find an available UDC or it's busy [ 504.470946][T10863] syzkaller0: entered promiscuous mode [ 504.478803][T10863] syzkaller0: entered allmulticast mode [ 504.861843][ T5824] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 505.052660][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 505.061648][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.073269][ T5824] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 505.082742][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.103444][ T5824] usb 1-1: config 0 descriptor?? [ 505.330465][ T5824] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 505.540526][ T5824] usb 1-1: USB disconnect, device number 11 [ 507.684726][T10881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1238'. [ 507.846528][T10912] fuse: Bad value for 'fd' [ 507.903563][T10914] UDC core: g1: couldn't find an available UDC or it's busy [ 508.117605][T10917] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 508.674090][T10943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1250'. [ 509.049464][T10953] syzkaller0: entered promiscuous mode [ 509.095866][T10953] syzkaller0: entered allmulticast mode [ 509.102864][T10956] random: crng reseeded on system resumption [ 509.111199][T10955] UDC core: g1: couldn't find an available UDC or it's busy [ 510.604154][T10989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 510.769622][T11001] UDC core: g1: couldn't find an available UDC or it's busy [ 510.960193][T11005] syzkaller0: entered promiscuous mode [ 510.968820][T11005] syzkaller0: entered allmulticast mode [ 511.231937][T11016] random: crng reseeded on system resumption [ 514.011934][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1274'. [ 514.415224][T11055] UDC core: g1: couldn't find an available UDC or it's busy [ 514.672791][T11063] syzkaller0: entered promiscuous mode [ 514.689949][T11063] syzkaller0: entered allmulticast mode [ 515.818226][T11082] random: crng reseeded on system resumption [ 516.308205][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 516.320118][T11092] UDC core: g1: couldn't find an available UDC or it's busy [ 516.987234][T11085] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 517.264316][T11109] tipc: Enabled bearer , priority 0 [ 517.339030][T11108] tipc: Disabling bearer [ 517.376481][T11115] UDC core: g1: couldn't find an available UDC or it's busy [ 517.784726][T11121] syzkaller0: entered promiscuous mode [ 517.790300][T11121] syzkaller0: entered allmulticast mode [ 518.417834][T11141] random: crng reseeded on system resumption [ 518.658655][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1300'. [ 519.536372][T11143] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 519.719959][T11160] tipc: Started in network mode [ 519.727405][T11160] tipc: Node identity 9e1c11dd08eb, cluster identity 4711 [ 519.741707][T11160] tipc: Enabled bearer , priority 0 [ 519.754210][T11161] UDC core: g1: couldn't find an available UDC or it's busy [ 519.766927][T11158] tipc: Disabling bearer [ 519.821891][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 520.044252][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.062142][ T8] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 520.077961][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.087603][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.097189][ T8] usb 1-1: Product: syz [ 520.106338][ T8] usb 1-1: Manufacturer: syz [ 520.113147][ T8] usb 1-1: SerialNumber: syz [ 520.134083][ T8] cdc_mbim 1-1:1.0: skipping garbage [ 520.338735][T11146] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 520.535489][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 520.954374][T11146] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 520.970819][ T8] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 520.979504][ T8] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 521.001096][ T8] wwan wwan0: port wwan0mbim0 attached [ 521.052637][T11204] random: crng reseeded on system resumption [ 521.126858][T11205] UDC core: g1: couldn't find an available UDC or it's busy [ 521.432092][ T8] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 26:c0:30:9e:6e:49 [ 521.536765][ T8] usb 1-1: USB disconnect, device number 12 [ 521.593082][ T8] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 521.913536][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 523.441939][T11267] UDC core: g1: couldn't find an available UDC or it's busy [ 523.491604][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 524.481638][ T172] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 524.549262][T11308] random: crng reseeded on system resumption [ 524.902236][T11317] UDC core: g1: couldn't find an available UDC or it's busy [ 526.534241][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'. [ 526.559369][ T172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.627950][ T172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 526.654652][ T172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.672345][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.681037][ T172] usb 3-1: Product: syz [ 526.696521][ T172] usb 3-1: Manufacturer: syz [ 526.706907][ T172] usb 3-1: SerialNumber: syz [ 526.729773][ T172] cdc_mbim 3-1:1.0: skipping garbage [ 526.930882][T11298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.149386][T11356] UDC core: g1: couldn't find an available UDC or it's busy [ 527.549164][T11298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.568918][ T172] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 527.594801][ T172] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 527.622988][ T172] wwan wwan0: port wwan0mbim0 attached [ 527.655617][ T172] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, e6:a5:b5:39:4f:33 [ 527.812534][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.819411][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.825952][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.832707][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.839353][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.846109][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.853090][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.859851][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.866369][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.873115][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.879580][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.886324][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.892802][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.899545][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.905970][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.912721][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.919351][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.926095][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.932548][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 527.939281][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 527.969480][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 527.980062][ T172] usb 3-1: USB disconnect, device number 19 [ 528.004118][ T172] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 529.013937][T11383] random: crng reseeded on system resumption [ 529.119223][ T172] wwan wwan0: port wwan0mbim0 disconnected [ 530.914230][T11418] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1352'. [ 531.671549][ T172] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 531.731158][T11448] tipc: Enabled bearer , priority 0 [ 531.791707][T11449] random: crng reseeded on system resumption [ 532.031172][T11450] syzkaller0: entered promiscuous mode [ 532.054378][T11450] syzkaller0: entered allmulticast mode [ 532.102201][T11450] tipc: Resetting bearer [ 532.164143][T11447] tipc: Resetting bearer [ 533.034568][ T172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.051573][ T172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 533.084125][ T172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.099902][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.118714][ T172] usb 3-1: Product: syz [ 533.123369][ T172] usb 3-1: Manufacturer: syz [ 533.128032][ T172] usb 3-1: SerialNumber: syz [ 533.166678][ T172] cdc_mbim 3-1:1.0: skipping garbage [ 533.217601][T11470] overlay: filesystem on ./file0 not supported as upperdir [ 533.382721][T11434] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.017757][T11434] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.026944][ T172] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 534.043487][ T172] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 534.071482][ T172] wwan wwan0: port wwan0mbim0 attached [ 536.746915][T11447] tipc: Disabling bearer [ 536.787850][ T172] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 7e:7a:29:23:16:af [ 536.840240][ T172] usb 3-1: USB disconnect, device number 20 [ 536.861256][ T172] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 537.003336][ T172] wwan wwan0: port wwan0mbim0 disconnected [ 537.173705][T11515] syzkaller0: entered promiscuous mode [ 537.197862][T11515] syzkaller0: entered allmulticast mode [ 537.771747][T11529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 538.021846][ T5824] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 538.228730][ T5824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.251578][ T5824] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 538.275469][ T5824] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.285735][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.301990][ T5824] usb 1-1: Product: syz [ 538.306448][ T5824] usb 1-1: Manufacturer: syz [ 538.311112][ T5824] usb 1-1: SerialNumber: syz [ 538.325575][ T5824] cdc_mbim 1-1:1.0: skipping garbage [ 538.540898][T11538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 538.633808][T11551] syzkaller0: entered promiscuous mode [ 538.646295][T11551] syzkaller0: entered allmulticast mode [ 539.170164][T11538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 539.202408][ T5824] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 539.212905][ T5824] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 539.230642][ T5824] wwan wwan0: port wwan0mbim0 attached [ 542.166881][T11562] tipc: Started in network mode [ 542.172066][T11562] tipc: Node identity 762ff3fbca92, cluster identity 4711 [ 542.179341][T11562] tipc: Enabled bearer , priority 0 [ 542.196260][ T5824] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 72:90:bd:3a:22:8d [ 542.209246][T11561] tipc: Disabling bearer [ 542.222676][ T5824] usb 1-1: USB disconnect, device number 13 [ 542.262609][T11579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1383'. [ 542.291651][ T5824] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 542.470773][ T5824] wwan wwan0: port wwan0mbim0 disconnected [ 543.081796][ T5824] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 543.186662][ T8675] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 543.531252][ T5824] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.575232][ T5824] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 543.680103][ T8675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.726469][ T8675] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 543.947436][ T5824] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 543.986947][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.029017][ T8675] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.043476][ T5824] usb 3-1: Product: syz [ 544.061327][ T5824] usb 3-1: Manufacturer: syz [ 544.077064][ T8675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.085278][ T5824] usb 3-1: SerialNumber: syz [ 544.125975][ T8675] usb 4-1: Product: syz [ 544.147300][ T8675] usb 4-1: Manufacturer: syz [ 544.169132][ T8675] usb 4-1: SerialNumber: syz [ 544.448451][ T5824] cdc_mbim 3-1:1.0: skipping garbage [ 544.592964][ T8675] cdc_mbim 4-1:1.0: skipping garbage [ 544.920799][T11616] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 545.156136][T11620] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 546.520937][T11616] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 546.670072][T11614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 546.794882][ T8675] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 546.890668][ T5824] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 546.899467][ T8675] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 546.915885][ T8675] wwan wwan0: port wwan0mbim0 attached [ 546.922017][ T5824] cdc_mbim 3-1:1.0: cdc-wdm1: USB WDM device [ 546.931778][ T5824] wwan wwan1: port wwan1mbim0 attached [ 547.057514][ T5824] cdc_mbim 3-1:1.0 wwan1: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 72:d6:ad:48:4d:95 [ 547.071520][ T8675] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 6e:e9:aa:ed:da:57 [ 547.139225][ T5824] usb 3-1: USB disconnect, device number 21 [ 547.155036][ T8675] usb 4-1: USB disconnect, device number 20 [ 547.172798][ T5824] cdc_mbim 3-1:1.0 wwan1: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 547.191996][ T8675] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 547.361659][ T8675] wwan wwan0: port wwan0mbim0 disconnected [ 547.381714][ T5824] wwan wwan1: port wwan1mbim0 disconnected [ 547.441800][T11631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1394'. [ 548.638139][T11648] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.718105][T11648] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 548.779386][T11648] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.781642][T11700] syzkaller0: entered promiscuous mode [ 549.787321][T11700] syzkaller0: entered allmulticast mode [ 549.791044][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 549.911705][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 550.003537][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.020467][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 550.111828][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.123975][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.164382][ T8] usb 3-1: Product: syz [ 550.168645][ T8] usb 3-1: Manufacturer: syz [ 550.190007][ T8] usb 3-1: SerialNumber: syz [ 550.225922][ T8] cdc_mbim 3-1:1.0: skipping garbage [ 550.426601][T11688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 550.793487][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 550.799638][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 551.072200][T11688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 551.173606][ T8] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 551.235944][ T8] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 551.354955][ T8] wwan wwan0: port wwan0mbim0 attached [ 551.655342][T11730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 551.687431][ T8] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 1a:5f:74:1b:5a:62 [ 551.697634][T11730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 551.717139][T11730] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 551.722997][ T8] usb 3-1: USB disconnect, device number 22 [ 551.733443][ T8] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 551.800636][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 552.134378][T11752] netlink: 'syz.2.1418': attribute type 2 has an invalid length. [ 552.892241][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 553.751689][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 553.757912][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 554.777038][T11797] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 558.854426][T11819] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 560.587899][T11851] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 561.161525][ T5789] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 561.363857][ T5789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.406100][ T5789] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 562.419265][ T5789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.431345][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.451391][ T5789] usb 1-1: Product: syz [ 562.455673][ T5789] usb 1-1: Manufacturer: syz [ 562.460312][ T5789] usb 1-1: SerialNumber: syz [ 562.470417][ T5789] cdc_mbim 1-1:1.0: skipping garbage [ 562.680182][T11862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.212491][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.219037][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.294137][T11862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.970177][ T5789] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 563.980589][ T5789] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 564.007406][ T5789] wwan wwan0: port wwan0mbim0 attached [ 564.090052][ T5789] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:47:8e:c0:4d:ae [ 564.200277][ T5789] usb 1-1: USB disconnect, device number 14 [ 564.230964][ T5789] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 564.327322][T11895] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 564.354138][ T5789] wwan wwan0: port wwan0mbim0 disconnected [ 567.319190][T11942] team0: No ports can be present during mode change [ 568.544369][T11947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.778860][T11965] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 573.518957][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1471'. [ 575.223068][T12014] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 575.502599][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 575.738717][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.775832][ T23] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 575.817527][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.835818][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.856919][ T23] usb 1-1: Product: syz [ 575.868973][ T23] usb 1-1: Manufacturer: syz [ 575.879354][ T23] usb 1-1: SerialNumber: syz [ 575.909411][ T23] cdc_mbim 1-1:1.0: skipping garbage [ 576.224317][T12016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 577.040314][T12016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 577.071216][ T23] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 577.092162][ T23] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 577.131750][ T23] wwan wwan0: port wwan0mbim0 attached [ 577.543453][T12023] syzkaller0: entered promiscuous mode [ 577.548998][T12023] syzkaller0: entered allmulticast mode [ 577.628636][ T23] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 46:df:3b:1d:b3:1f [ 577.700805][ T23] usb 1-1: USB disconnect, device number 15 [ 577.755983][ T23] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 581.065214][T12048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1483'. [ 581.079577][T12058] tipc: Enabling of bearer rejected, failed to enable media [ 581.155351][ T23] wwan wwan0: port wwan0mbim0 disconnected [ 581.368432][T12071] fuse: Bad value for 'fd' [ 582.119736][T12065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.126712][T12065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 582.133055][T12065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 582.497760][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 582.704784][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.736003][ T23] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 582.768918][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.788583][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.814967][ T23] usb 1-1: Product: syz [ 582.824957][ T23] usb 1-1: Manufacturer: syz [ 582.843815][ T23] usb 1-1: SerialNumber: syz [ 582.877358][ T23] cdc_mbim 1-1:1.0: skipping garbage [ 583.078554][T12076] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 583.407116][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1496'. [ 583.440039][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 583.732942][T12076] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 583.740707][ T23] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 583.759226][ T23] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 583.778809][ T23] wwan wwan0: port wwan0mbim0 attached [ 583.799244][ T23] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, da:d8:2e:7c:bb:84 [ 583.910451][T12106] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 583.963132][ C1] wdm_int_callback: 120 callbacks suppressed [ 583.963160][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 583.975955][ C1] wdm_int_callback: 120 callbacks suppressed [ 583.975977][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 583.988500][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 583.995244][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 584.015527][ T8] usb 1-1: USB disconnect, device number 16 [ 584.034161][ T8] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 584.112938][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 584.151618][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 584.151629][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 584.650263][T12104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 584.667380][T12104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 584.696184][T12104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 584.812571][T12124] fuse: Bad value for 'group_id' [ 585.272069][T12131] syzkaller0: entered promiscuous mode [ 585.291407][T12131] syzkaller0: entered allmulticast mode [ 585.297180][T12132] overlayfs: missing 'lowerdir' [ 585.893244][T12144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1505'. [ 585.911657][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 586.861455][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 586.867661][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 587.185965][T12166] fuse: Bad value for 'group_id' [ 587.551379][ T788] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 587.600726][T12181] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 587.733603][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.751418][ T23] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 587.763074][ T788] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 587.789042][ T788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 587.804014][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.821405][ T788] usb 1-1: Product: syz [ 587.830203][ T788] usb 1-1: Manufacturer: syz [ 587.842996][ T788] usb 1-1: SerialNumber: syz [ 587.861044][ T788] cdc_mbim 1-1:1.0: skipping garbage [ 587.961415][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 587.977325][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 588.005605][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 588.027435][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.055648][ T23] usb 4-1: config 0 descriptor?? [ 588.092102][T12169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 588.289173][T12176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 588.296203][ T23] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 588.310298][T12176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 588.328068][T12176] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 588.573602][ T23] usb 4-1: USB disconnect, device number 21 [ 588.727279][T12169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 588.760776][ T788] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 588.772094][ T788] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 588.779125][T12184] overlayfs: missing 'lowerdir' [ 588.810864][ T788] wwan wwan0: port wwan0mbim0 attached [ 588.881810][ T788] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 06:c0:d6:ed:85:cc [ 589.009668][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 589.016464][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 589.023075][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 589.029833][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 589.041567][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 589.048353][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 589.061428][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 589.068203][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 589.083508][ T8] usb 1-1: USB disconnect, device number 17 [ 589.122631][ T8] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 589.343813][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 589.598552][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 590.076348][T12197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1517'. [ 590.391630][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 590.397769][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 590.894867][T12213] overlayfs: missing 'lowerdir' [ 591.391829][T12227] syzkaller0: entered promiscuous mode [ 591.397431][T12227] syzkaller0: entered allmulticast mode [ 591.730999][T12240] overlayfs: missing 'lowerdir' [ 592.261615][T12229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 592.267852][T12229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 592.341807][T12229] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 592.631843][ T788] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 592.861553][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 593.761455][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 593.842960][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 593.903769][ T788] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 593.964505][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.033879][ T788] usb 1-1: config 0 descriptor?? [ 594.072514][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 594.191533][ T8675] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 594.311439][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 594.321815][ T788] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 594.391436][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 594.445491][ T8675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.471649][ T8675] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 594.493959][ T8675] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.512087][ T8675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.522433][ T9] usb 1-1: USB disconnect, device number 18 [ 594.528811][ T8675] usb 4-1: Product: syz [ 594.541413][ T8675] usb 4-1: Manufacturer: syz [ 594.546096][ T8675] usb 4-1: SerialNumber: syz [ 594.573822][ T8675] cdc_mbim 4-1:1.0: skipping garbage [ 594.788918][T12264] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 594.852220][T12278] overlayfs: missing 'lowerdir' [ 595.018423][T12284] overlay: Unknown parameter '/file0' [ 595.467142][T12264] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 595.481467][ T8675] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 595.503012][ T8675] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 595.541977][ T8675] wwan wwan0: port wwan0mbim0 attached [ 595.565988][ T8675] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 16:22:a3:b1:12:d3 [ 595.744698][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.751502][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.758127][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.764886][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.771395][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.778133][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.791586][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.798364][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.811403][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.818175][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.831429][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.838207][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.847510][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.854333][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.861343][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.868435][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.875702][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.882455][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.889522][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 595.896283][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 595.934747][ T8675] usb 4-1: USB disconnect, device number 22 [ 595.980563][ T8675] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 596.132958][T12290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 596.150038][T12290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.176077][ T8675] wwan wwan0: port wwan0mbim0 disconnected [ 596.253674][T12290] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 597.511368][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 598.060961][T12326] fuse: Bad value for 'fd' [ 598.151414][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 598.311414][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 598.331686][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 599.313137][T12343] syzkaller0: entered promiscuous mode [ 599.331490][T12343] syzkaller0: entered allmulticast mode [ 599.400853][T12338] overlayfs: missing 'lowerdir' [ 599.872955][T12350] overlay: Unknown parameter '/file0' [ 600.414149][T12354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 600.420349][T12354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 600.448264][T12354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 601.041519][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 601.744337][T12393] overlay: filesystem on ./file0 not supported as upperdir [ 602.071485][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 602.471387][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 602.477572][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 602.813372][T12401] overlay: Unknown parameter '/file0' [ 603.067600][T12409] fuse: Bad value for 'fd' [ 603.644188][T12404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 603.677778][T12404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 603.705854][T12404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 604.019552][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 604.263364][T12426] syzkaller0: entered promiscuous mode [ 604.268986][T12426] syzkaller0: entered allmulticast mode [ 605.037562][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 605.139919][T12435] overlay: filesystem on ./file0 not supported as upperdir [ 605.745677][T12451] overlay: filesystem on ./file0 not supported as upperdir [ 605.761332][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 605.767418][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 606.293239][T12469] fuse: Bad value for 'fd' [ 606.829367][T12459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 606.842843][T12459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 606.859607][T12459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 607.200834][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1574'. [ 607.478262][T12484] syzkaller0: entered promiscuous mode [ 607.507329][T12484] syzkaller0: entered allmulticast mode [ 607.692063][T12488] overlay: filesystem on ./file0 not supported as upperdir [ 608.231393][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 608.701508][T12494] overlay: filesystem on ./file0 not supported as upperdir [ 608.872095][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 608.872105][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 609.680561][T12503] syzkaller0: entered promiscuous mode [ 609.686530][T12503] syzkaller0: entered allmulticast mode [ 610.111793][T12509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 610.118025][T12509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.217248][T12509] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 611.833111][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 612.151920][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 612.231374][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 614.136078][T12539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1585'. [ 614.350055][T12548] fuse: Unknown parameter 'grou00000000000000000000' [ 614.383850][T12546] overlay: filesystem on ./file0 not supported as upperdir [ 614.947668][T12561] overlay: filesystem on ./file0 not supported as upperdir [ 615.101474][ T5824] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 615.305323][ T5824] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.326727][ T5824] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 615.354169][ T5824] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.371635][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.407344][ T5824] usb 3-1: Product: syz [ 615.431964][ T5824] usb 3-1: Manufacturer: syz [ 615.436748][ T5824] usb 3-1: SerialNumber: syz [ 615.477523][ T5824] cdc_mbim 3-1:1.0: skipping garbage [ 615.679985][T12559] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 615.786900][T12563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 615.813363][T12563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.829896][T12563] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 616.122346][T12586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1595'. [ 616.309142][T12559] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 616.334967][ T5824] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 616.365948][ T5824] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 616.389051][ T5824] wwan wwan0: port wwan0mbim0 attached [ 616.432125][T12595] fuse: Unknown parameter 'grou00000000000000000000' [ 616.440356][ T5824] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 36:28:f9:49:8b:ba [ 616.466377][T12593] syzkaller0: entered promiscuous mode [ 616.481436][T12593] syzkaller0: entered allmulticast mode [ 616.572540][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.579336][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.586140][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.592892][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.599301][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.606032][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.612466][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.619260][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.625715][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.632451][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.638979][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.645729][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.652182][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.658930][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.665357][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.672109][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.678564][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.685308][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.691831][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 616.698584][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 616.744008][ T172] usb 3-1: USB disconnect, device number 23 [ 616.782960][ T172] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 616.954811][ T172] wwan wwan0: port wwan0mbim0 disconnected [ 617.031786][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 617.475393][T12602] overlay: filesystem on ./file0 not supported as upperdir [ 617.588340][T12611] overlay: filesystem on ./file0 not supported as upperdir [ 617.833742][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.833753][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 618.683793][T12616] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 618.699156][T12616] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.732273][T12616] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 618.973923][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1607'. [ 619.007462][T12647] fuse: Unknown parameter 'grou00000000000000000000' [ 619.054783][T12642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.249257][T12642] bond1: entered promiscuous mode [ 619.261342][T12642] bond1: entered allmulticast mode [ 619.771659][ T5824] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 619.791614][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 619.877925][T12660] overlay: filesystem on ./file0 not supported as upperdir [ 619.991572][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 620.011489][ T5824] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.031631][ T5824] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 620.043431][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.078061][ T5824] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.091532][ T23] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 620.111438][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.130718][ T5824] usb 4-1: Product: syz [ 620.137137][ T5824] usb 4-1: Manufacturer: syz [ 620.142518][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.171402][ T5824] usb 4-1: SerialNumber: syz [ 620.176209][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.192978][ T5824] cdc_mbim 4-1:1.0: skipping garbage [ 620.211401][ T23] usb 3-1: Product: syz [ 620.224364][ T23] usb 3-1: Manufacturer: syz [ 620.229088][ T23] usb 3-1: SerialNumber: syz [ 620.285913][ T23] cdc_mbim 3-1:1.0: skipping garbage [ 620.397644][T12656] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 620.485002][T12654] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 620.652141][T12664] overlay: filesystem on ./file0 not supported as upperdir [ 620.711588][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 620.791438][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 621.018809][T12656] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 621.027036][ T5824] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 621.051909][ T5824] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 621.073401][ T5824] wwan wwan0: port wwan0mbim0 attached [ 621.118494][ T5824] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, fa:3c:6a:25:db:c9 [ 621.163220][T12654] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 621.171138][ T23] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 621.180681][ T23] cdc_mbim 3-1:1.0: cdc-wdm1: USB WDM device [ 621.227226][ T23] wwan wwan1: port wwan1mbim0 attached [ 621.291495][ T5824] usb 4-1: USB disconnect, device number 23 [ 621.317631][ T5824] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 621.332505][ T23] cdc_mbim 3-1:1.0 wwan1: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, c2:e5:ac:9f:a8:dc [ 621.399203][T12654] cdc_mbim 4-1:1.0: Error submitting int urb - -19 [ 621.453832][ T8675] usb 3-1: USB disconnect, device number 24 [ 621.477566][ T8675] cdc_mbim 3-1:1.0 wwan1: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 621.596024][ T5824] wwan wwan0: port wwan0mbim0 disconnected [ 621.843680][ T8675] wwan wwan1: port wwan1mbim0 disconnected [ 623.212746][T12705] fuse: Bad value for 'fd' [ 623.558594][T12697] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 623.641818][T12697] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.648014][T12697] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 624.369773][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 624.397972][T12730] overlay: filesystem on ./file0 not supported as upperdir [ 624.641888][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.648320][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.803005][T12728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.964337][T12747] overlayfs: missing 'workdir' [ 625.231601][ T8675] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 625.251515][T12740] bond2: entered promiscuous mode [ 625.271494][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 625.271759][ T172] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 625.291442][T12740] bond2: entered allmulticast mode [ 625.451460][ T8675] usb 3-1: Using ep0 maxpacket: 8 [ 625.520321][ T8675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 625.571137][ T8675] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 625.572283][ T172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.611887][ T8675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.626790][ T172] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 625.650206][ T172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.662747][ T8675] usb 3-1: config 0 descriptor?? [ 625.669698][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.671949][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 625.684368][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 625.741505][ T172] usb 4-1: Product: syz [ 625.745765][ T172] usb 4-1: Manufacturer: syz [ 625.750414][ T172] usb 4-1: SerialNumber: syz [ 625.853158][ T172] cdc_mbim 4-1:1.0: skipping garbage [ 625.875650][ T8675] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 626.080773][ T8675] usb 3-1: USB disconnect, device number 25 [ 626.091883][T12750] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 626.391725][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 626.750613][T12750] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 626.760411][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.779002][ T172] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 626.798977][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 626.809747][ T172] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 626.833864][ T172] wwan wwan0: port wwan0mbim0 attached [ 626.879043][ T172] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 46:c3:ef:25:a2:e0 [ 626.963019][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.993004][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.001150][ T9] usb 1-1: Product: syz [ 627.051565][ T9] usb 1-1: Manufacturer: syz [ 627.056683][ T9] usb 1-1: SerialNumber: syz [ 627.106670][ C0] wdm_int_callback: 159 callbacks suppressed [ 627.106695][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 627.119603][ C0] wdm_int_callback: 159 callbacks suppressed [ 627.119624][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 627.132187][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 627.138964][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 627.151379][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 627.158156][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 627.164848][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 627.171698][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 627.178291][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 627.185071][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 627.191707][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 627.198462][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 627.205102][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 627.211851][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 627.219689][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 627.226490][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 627.234792][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 627.241550][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 627.255493][ T9] cdc_mbim 1-1:1.0: skipping garbage [ 627.312064][ T8675] usb 4-1: USB disconnect, device number 24 [ 627.332141][ T8675] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 627.611831][T12755] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 627.685780][ T8675] wwan wwan0: port wwan0mbim0 disconnected [ 627.994053][ T9] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 628.000276][ T9] cdc_mbim 1-1:1.0: bind() failure [ 628.105281][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 628.151681][ T9] cdc_ncm 1-1:1.1: bind() failure [ 628.170765][ T9] usb 1-1: USB disconnect, device number 19 [ 628.320096][T12783] fuse: Unknown parameter 'group_i00000000000000000000' [ 628.328167][T12755] raw-gadget.0 gadget.0: fail, usb_ep_queue returned -108 [ 629.241635][T12785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 629.294746][T12785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 629.313216][T12808] overlayfs: missing 'workdir' [ 629.356160][T12785] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 629.799190][T12818] overlayfs: missing 'workdir' [ 629.982670][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1636'. [ 630.316846][T12823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 630.392346][ T5787] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 630.414763][T12834] bond3: entered promiscuous mode [ 630.419884][T12834] bond3: entered allmulticast mode [ 630.621371][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 630.631645][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 630.662204][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 630.721413][ T5787] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 630.730584][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.833244][ T5787] usb 4-1: config 0 descriptor?? [ 631.101597][ T5787] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 631.271935][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 631.351794][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 631.448670][ T9] usb 4-1: USB disconnect, device number 25 [ 631.784787][T12861] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 631.850294][T12863] fuse: Unknown parameter 'group_i00000000000000000000' [ 632.116695][T12865] syzkaller0: entered promiscuous mode [ 632.151670][T12865] syzkaller0: entered allmulticast mode [ 632.570802][T12869] overlayfs: missing 'workdir' [ 632.651364][ T5787] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 632.869467][T12875] overlayfs: missing 'workdir' [ 632.900109][ T5787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.927336][ T5787] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 632.971209][ T5787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.993790][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.018158][ T5787] usb 4-1: Product: syz [ 633.028280][ T5787] usb 4-1: Manufacturer: syz [ 633.041384][ T5787] usb 4-1: SerialNumber: syz [ 633.089767][ T5787] cdc_mbim 4-1:1.0: skipping garbage [ 633.292015][T12867] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.340147][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 633.442841][T12873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 633.493834][T12873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 633.531694][T12873] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 633.734231][T12881] 8021q: adding VLAN 0 to HW filter on device bond8 [ 634.071860][T12867] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 634.085305][ T5787] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 634.133126][ T5787] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 634.156843][ T5787] wwan wwan0: port wwan0mbim0 attached [ 634.248881][T12885] bond8: entered promiscuous mode [ 634.336985][T12885] bond8: entered allmulticast mode [ 634.423928][ T5787] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 4e:ac:85:4f:10:f0 [ 634.474321][ T5787] usb 4-1: USB disconnect, device number 26 [ 634.501664][ T5787] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 634.791456][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 634.877122][ T5787] wwan wwan0: port wwan0mbim0 disconnected [ 635.501406][ T5787] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 635.511638][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 635.591377][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 636.482549][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 636.501354][T12907] syzkaller0: entered promiscuous mode [ 636.506919][T12907] syzkaller0: entered allmulticast mode [ 636.568906][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 636.621360][ T5787] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 636.630509][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.709525][ T5787] usb 3-1: config 0 descriptor?? [ 636.867493][T12911] fuse: Unknown parameter 'group_id00000000000000000000' [ 637.041137][ T5787] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 637.275054][ T8675] usb 3-1: USB disconnect, device number 26 [ 637.874565][T12920] overlay: filesystem on ./file0 not supported as upperdir [ 637.994921][T12915] overlayfs: missing 'workdir' [ 638.709588][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1660'. [ 638.912386][T12923] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.918630][T12923] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.925280][T12923] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 639.008110][T12936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 639.129143][T12938] bond4: entered promiscuous mode [ 639.204459][T12938] bond4: entered allmulticast mode [ 639.422169][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 639.643736][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.654986][ T8] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 639.688355][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.698894][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.721710][T12948] fuse: Unknown parameter 'group_id00000000000000000000' [ 639.732818][ T8] usb 1-1: Product: syz [ 639.737059][ T8] usb 1-1: Manufacturer: syz [ 639.761354][ T8] usb 1-1: SerialNumber: syz [ 639.782883][ T8] cdc_mbim 1-1:1.0: skipping garbage [ 639.983631][T12944] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 640.391484][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 640.621050][T12944] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 640.670594][ T8] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 641.571540][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 641.577639][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 642.411771][ T8] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 642.501999][ T8] wwan wwan0: port wwan0mbim0 attached [ 642.637947][T12960] overlay: filesystem on ./file0 not supported as upperdir [ 642.799595][ T8] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 5e:98:87:ce:be:e4 [ 642.881396][ T8] usb 1-1: USB disconnect, device number 20 [ 642.888388][ T8] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 643.220925][T12964] syzkaller0: entered promiscuous mode [ 643.269578][T12964] syzkaller0: entered allmulticast mode [ 643.292762][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 643.597732][T12969] overlay: filesystem on ./file0 not supported as upperdir [ 643.811551][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 644.031350][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 644.051221][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.071419][ T8675] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 644.090536][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 644.131467][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.182278][ T8] usb 1-1: config 0 descriptor?? [ 644.241435][ T8675] usb 4-1: device descriptor read/64, error -71 [ 644.427366][ T8] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 644.523784][ T8675] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 644.572854][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1673'. [ 644.691418][ T8675] usb 4-1: device descriptor read/64, error -71 [ 644.768860][ T5863] usb 1-1: USB disconnect, device number 21 [ 644.851657][ T8675] usb usb4-port1: attempt power cycle [ 644.938594][T12980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 645.272696][ T8675] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 645.281927][T12985] bond5: entered promiscuous mode [ 645.311064][T12985] bond5: entered allmulticast mode [ 645.344200][ T8675] usb 4-1: device descriptor read/8, error -71 [ 645.641796][ T8675] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 645.694985][ T8675] usb 4-1: device descriptor read/8, error -71 [ 645.831706][ T8675] usb usb4-port1: unable to enumerate USB device [ 645.858377][T12997] fuse: Unknown parameter 'group_id00000000000000000000' [ 646.441386][ T8675] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 646.691510][ T8675] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.734736][ T8675] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 646.847947][ T8675] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.921494][ T8675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.929589][ T8675] usb 3-1: Product: syz [ 647.011414][ T8675] usb 3-1: Manufacturer: syz [ 647.016160][ T8675] usb 3-1: SerialNumber: syz [ 647.112631][ T8675] cdc_mbim 3-1:1.0: skipping garbage [ 647.310135][T13005] overlay: filesystem on ./file0 not supported as upperdir [ 647.325591][T12999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 647.450287][T13011] overlay: filesystem on ./file0 not supported as upperdir [ 647.941694][T13007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.962410][T13007] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 647.981731][T13007] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 647.982550][T12999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 648.032790][T13017] syzkaller0: entered promiscuous mode [ 648.068609][T13017] syzkaller0: entered allmulticast mode [ 648.132422][ T8675] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 648.173145][ T8675] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 648.220502][ T8675] wwan wwan0: port wwan0mbim0 attached [ 648.381176][ T8675] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 3e:8b:e8:d4:bc:86 [ 648.465661][ T8675] usb 3-1: USB disconnect, device number 27 [ 648.493335][ T8675] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 648.511704][ T5863] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 648.661699][ T8675] wwan wwan0: port wwan0mbim0 disconnected [ 648.711364][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 648.737162][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.779427][ T5863] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 648.811350][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.840220][ T5863] usb 4-1: config 0 descriptor?? [ 649.067939][ T5863] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 649.273509][ T5863] usb 4-1: USB disconnect, device number 31 [ 649.351425][T12957] Bluetooth: hci2: command 0x0c1a tx timeout [ 649.991534][T12957] Bluetooth: hci4: command 0x0c1a tx timeout [ 649.997799][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 652.048163][T13086] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 652.772920][T13094] random: crng reseeded on system resumption [ 654.733646][T13117] syzkaller0: entered promiscuous mode [ 654.756655][T13117] syzkaller0: entered allmulticast mode [ 655.190030][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1699'. [ 655.422161][T13125] 8021q: adding VLAN 0 to HW filter on device bond9 [ 655.594478][T13127] bond9: entered promiscuous mode [ 655.613732][T13127] bond9: entered allmulticast mode [ 655.805216][ T8675] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 655.991736][ T8675] usb 4-1: device descriptor read/64, error -71 [ 657.783784][ T8675] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 658.821339][ T5787] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 658.877090][T13140] fuse: Bad value for 'user_id' [ 659.044153][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.061678][ T5787] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 659.084345][ T5787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 659.101515][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.109689][ T5787] usb 3-1: Product: syz [ 659.131534][ T5787] usb 3-1: Manufacturer: syz [ 659.136249][ T5787] usb 3-1: SerialNumber: syz [ 659.152999][ T5787] cdc_mbim 3-1:1.0: skipping garbage [ 659.377051][T13151] random: crng reseeded on system resumption [ 659.389238][T13144] overlay: filesystem on ./file0 not supported as upperdir [ 659.411946][T13136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 660.712476][ T5787] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 660.718730][ T5787] cdc_mbim 3-1:1.0: bind() failure [ 660.772531][ T5787] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 660.779454][ T5787] cdc_ncm 3-1:1.1: bind() failure [ 660.869487][ T5787] usb 3-1: USB disconnect, device number 28 [ 660.969477][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1712'. [ 661.052545][T13166] 8021q: adding VLAN 0 to HW filter on device bond16 [ 661.125063][T13172] bond16: entered promiscuous mode [ 661.150750][T13172] bond16: entered allmulticast mode [ 662.761486][ T788] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 662.921677][ T788] usb 4-1: device descriptor read/64, error -71 [ 663.206980][ T788] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 663.391706][ T788] usb 4-1: device descriptor read/64, error -71 [ 663.394314][T13188] fuse: Bad value for 'user_id' [ 663.531565][ T788] usb usb4-port1: attempt power cycle [ 663.761361][ T5787] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 663.903387][T13197] random: crng reseeded on system resumption [ 663.991386][ T788] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 664.049019][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.090080][ T5787] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 664.116070][T13202] overlay: filesystem on ./file0 not supported as upperdir [ 664.136754][ T5787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.165755][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.203627][ T5787] usb 3-1: Product: syz [ 664.223983][ T5787] usb 3-1: Manufacturer: syz [ 664.241194][ T5787] usb 3-1: SerialNumber: syz [ 664.281063][ T5787] cdc_mbim 3-1:1.0: skipping garbage [ 664.483076][T13190] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 664.866007][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 665.082176][ T788] usb 4-1: device descriptor read/8, error -71 [ 665.142925][T13190] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 665.151104][ T5787] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 665.159285][ T5787] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 665.169878][ T5787] wwan wwan0: port wwan0mbim0 attached [ 665.230219][T13206] 8021q: adding VLAN 0 to HW filter on device bond6 [ 665.302494][T13207] bond6: entered promiscuous mode [ 665.307624][T13207] bond6: entered allmulticast mode [ 665.360341][ T5787] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, e6:7a:a3:2d:e3:78 [ 665.361640][ T788] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 665.387337][ T5787] usb 3-1: USB disconnect, device number 29 [ 665.394691][ T5787] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 665.508665][ T788] usb 4-1: device descriptor read/8, error -71 [ 665.623543][ T5787] wwan wwan0: port wwan0mbim0 disconnected [ 665.651658][ T788] usb usb4-port1: unable to enumerate USB device [ 667.849494][T13237] fuse: Bad value for 'user_id' [ 668.186933][T13240] overlay: filesystem on ./file0 not supported as upperdir [ 668.216007][T13248] random: crng reseeded on system resumption [ 669.032845][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 669.311656][T13257] 8021q: adding VLAN 0 to HW filter on device bond17 [ 669.394473][T13258] bond17: entered promiscuous mode [ 669.399689][T13258] bond17: entered allmulticast mode [ 669.741549][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 669.901490][ T9] usb 3-1: device descriptor read/64, error -71 [ 669.921358][ T788] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 670.420031][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 671.220712][ T9] usb 3-1: device descriptor read/64, error -71 [ 674.244493][ T9] usb usb3-port1: attempt power cycle [ 674.275047][ T788] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 674.326723][ T788] usb 1-1: can't read configurations, error -71 [ 675.824153][T13289] fuse: Bad value for 'fd' [ 676.109977][T13287] overlay: filesystem on ./file0 not supported as upperdir [ 676.632626][T13308] random: crng reseeded on system resumption [ 679.131709][ T5824] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 682.347741][ T5824] usb 4-1: device descriptor read/64, error -71 [ 682.810831][T13342] fuse: Bad value for 'fd' [ 683.014173][T13341] overlay: filesystem on ./file0 not supported as upperdir [ 687.411542][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.417946][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.486951][T13350] syzkaller0: entered promiscuous mode [ 687.492780][T13350] syzkaller0: entered allmulticast mode [ 690.231344][T12957] Bluetooth: hci2: command 0x0c1a tx timeout [ 690.295738][T13357] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 690.331802][T13357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 690.338005][T13357] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 690.419227][T13358] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 690.446983][T13361] random: crng reseeded on system resumption [ 691.075604][T13372] fuse: Bad value for 'fd' [ 691.251400][ T8675] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 691.402592][ T8675] usb 1-1: device descriptor read/64, error -71 [ 691.711698][ T8675] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 691.908198][ T8675] usb 1-1: device descriptor read/64, error -71 [ 692.043615][ T8675] usb usb1-port1: attempt power cycle [ 692.402598][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 692.408895][T12957] Bluetooth: hci4: command 0x0c1a tx timeout [ 692.471590][ T8675] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 692.513020][ T8675] usb 1-1: device descriptor read/8, error -71 [ 693.047267][ T8675] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 693.503623][ T8675] usb 1-1: device descriptor read/8, error -71 [ 694.112730][ T8675] usb usb1-port1: unable to enumerate USB device [ 697.050385][T13411] tipc: Enabling of bearer rejected, failed to enable media [ 697.345444][T13422] random: crng reseeded on system resumption [ 697.840341][T13436] fuse: Bad value for 'fd' [ 699.581487][ T5824] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 700.293603][T13453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 700.401907][T13453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 700.408471][ T5824] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.496457][T13453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 700.524046][ T5824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 700.612147][ T5824] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.843570][ T5824] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.953928][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.030872][ T5824] usb 1-1: Product: syz [ 701.068127][ T5824] usb 1-1: Manufacturer: syz [ 701.100805][ T5824] usb 1-1: SerialNumber: syz [ 702.090644][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 702.150534][ T5824] cdc_mbim 1-1:1.0: skipping garbage [ 702.242177][ T5824] cdc_mbim 1-1:1.0: skipping garbage [ 702.364937][ T5824] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 702.513545][ T5824] cdc_mbim 1-1:1.0: bind() failure [ 703.617095][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 703.635002][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 703.642120][ T5824] usb 1-1: USB disconnect, device number 28 [ 704.253104][T13483] random: crng reseeded on system resumption [ 705.976085][T13502] fuse: Bad value for 'fd' [ 707.064807][T13507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 707.071133][T13507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 707.077380][T13507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 707.286055][T13529] syzkaller0: entered promiscuous mode [ 707.291970][T13529] syzkaller0: entered allmulticast mode [ 707.303810][T13532] tipc: Enabling of bearer rejected, failed to enable media [ 707.371457][T13041] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 707.585463][T13041] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.597269][T13041] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 707.606449][T13041] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.623648][T13041] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.633183][T13041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.641379][T13041] usb 3-1: Product: syz [ 707.645870][T13041] usb 3-1: Manufacturer: syz [ 707.650565][T13041] usb 3-1: SerialNumber: syz [ 707.665871][T13041] cdc_mbim 3-1:1.0: skipping garbage [ 707.674686][T13041] cdc_mbim 3-1:1.0: skipping garbage [ 707.680186][T13041] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 707.687486][T13041] cdc_mbim 3-1:1.0: bind() failure [ 708.551576][T12957] Bluetooth: hci2: command 0x0c1a tx timeout [ 709.116008][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 709.122367][T12957] Bluetooth: hci4: command 0x0c1a tx timeout [ 709.280468][T13041] usb 3-1: USB disconnect, device number 33 [ 710.272382][T13549] syzkaller0: entered promiscuous mode [ 710.286915][T13549] syzkaller0: entered allmulticast mode [ 711.256733][T13558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 711.272660][T13558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 711.279004][T13558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 712.557790][T12957] Bluetooth: hci2: command 0x0c1a tx timeout [ 713.341471][T13041] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 713.351522][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 713.358906][T12957] Bluetooth: hci4: command 0x0c1a tx timeout [ 713.454927][T13580] syzkaller0: entered promiscuous mode [ 713.486051][T13580] syzkaller0: entered allmulticast mode [ 713.554666][T13041] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.579624][T13041] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 713.611391][T13041] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.635549][T13041] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 713.651659][T13041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.665723][T13041] usb 4-1: Product: syz [ 713.670037][T13041] usb 4-1: Manufacturer: syz [ 713.677576][T13041] usb 4-1: SerialNumber: syz [ 713.696729][T13041] cdc_mbim 4-1:1.0: skipping garbage [ 713.709287][T13041] cdc_mbim 4-1:1.0: skipping garbage [ 713.715537][T13041] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 713.728859][T13041] cdc_mbim 4-1:1.0: bind() failure [ 716.426115][T13041] usb 4-1: USB disconnect, device number 40 [ 716.741486][T13597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 716.749225][T13597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 716.770834][T13597] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 716.989469][T13606] syzkaller0: entered promiscuous mode [ 716.999276][T13606] syzkaller0: entered allmulticast mode [ 717.081752][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 717.301430][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 717.308821][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 717.335045][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 717.371400][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.403448][ T9] usb 4-1: config 0 descriptor?? [ 717.646609][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 717.851757][ T9] usb 4-1: USB disconnect, device number 41 [ 718.799682][T12957] Bluetooth: hci2: command 0x0c1a tx timeout [ 718.815776][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout [ 718.823135][T12957] Bluetooth: hci3: command 0x0406 tx timeout [ 720.146471][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 720.344525][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.355599][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.374180][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 720.387526][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.400177][ T9] usb 4-1: Product: syz [ 720.404735][ T9] usb 4-1: Manufacturer: syz [ 720.416591][ T9] usb 4-1: SerialNumber: syz [ 720.427016][ T9] cdc_mbim 4-1:1.0: skipping garbage [ 720.439099][ T9] usb 4-1: selecting invalid altsetting 1 [ 720.836212][ T9] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 720.846640][ T9] cdc_mbim 4-1:1.0: bind() failure [ 721.052242][T13041] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 721.266917][T13041] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.279506][T13041] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 721.294076][T13041] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.303516][T13041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.311667][T13041] usb 3-1: Product: syz [ 721.317087][T13041] usb 3-1: Manufacturer: syz [ 721.321814][T13041] usb 3-1: SerialNumber: syz [ 721.332815][T13041] cdc_mbim 3-1:1.0: skipping garbage [ 721.540585][T13635] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 721.665327][T13637] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 721.672028][T13637] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 721.678186][T13637] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 721.855440][T13650] syzkaller0: entered promiscuous mode [ 721.861053][T13650] syzkaller0: entered allmulticast mode [ 722.158778][T13635] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 722.169314][T13041] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 722.187991][T13041] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 722.206743][T13041] wwan wwan0: port wwan0mbim0 attached [ 722.919279][ T8675] usb 4-1: USB disconnect, device number 42 [ 722.951634][T13627] Bluetooth: hci2: command 0x0c1a tx timeout [ 723.771447][T13627] Bluetooth: hci4: command 0x0c1a tx timeout [ 723.777617][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 725.151986][T13041] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 0e:48:50:4f:56:b2 [ 725.210242][T13041] usb 3-1: USB disconnect, device number 34 [ 725.234449][T13041] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 725.369713][T13041] wwan wwan0: port wwan0mbim0 disconnected [ 726.176991][T13688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 726.183542][T13688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 726.189701][T13688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 726.461862][T13041] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 726.469602][ T172] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 726.655527][ T172] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.666124][T13041] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.684952][ T172] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.696198][T13041] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 726.715191][T13041] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 726.727961][T13041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.737318][T13041] usb 3-1: Product: syz [ 726.742747][ T172] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 726.751963][T13041] usb 3-1: Manufacturer: syz [ 726.756616][T13041] usb 3-1: SerialNumber: syz [ 726.761357][ T172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.769395][ T172] usb 1-1: Product: syz [ 726.775073][ T172] usb 1-1: Manufacturer: syz [ 726.783917][T13041] cdc_mbim 3-1:1.0: skipping garbage [ 726.790805][ T172] usb 1-1: SerialNumber: syz [ 726.820429][ T172] cdc_mbim 1-1:1.0: skipping garbage [ 726.827229][ T172] usb 1-1: selecting invalid altsetting 1 [ 727.030237][T13692] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 727.213903][T13720] syzkaller0: entered promiscuous mode [ 727.220161][T13720] syzkaller0: entered allmulticast mode [ 727.245407][ T172] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 727.253492][ T172] cdc_mbim 1-1:1.0: bind() failure [ 727.511874][T13627] Bluetooth: hci2: command 0x0c1a tx timeout [ 727.680462][T13692] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 727.701833][T13041] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 727.729995][T13041] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 727.749507][T13041] wwan wwan0: port wwan0mbim0 attached [ 728.235175][T13627] Bluetooth: hci4: command 0x0c1a tx timeout [ 728.235292][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 729.005522][ T5787] usb 1-1: USB disconnect, device number 29 [ 729.986874][T13041] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 32:0d:bc:ce:a2:59 [ 730.037174][T13041] usb 3-1: USB disconnect, device number 35 [ 730.058955][T13041] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 730.111872][T13736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 730.121929][T13736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 730.134236][T13736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 730.172389][T13041] wwan wwan0: port wwan0mbim0 disconnected [ 731.041338][T13041] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 731.233039][T13041] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.243485][T13041] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.257606][T13041] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.267124][T13041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.275798][T13041] usb 1-1: Product: syz [ 731.280018][T13041] usb 1-1: Manufacturer: syz [ 731.285222][T13041] usb 1-1: SerialNumber: syz [ 731.296023][T13041] cdc_mbim 1-1:1.0: skipping garbage [ 731.304875][T13041] usb 1-1: selecting invalid altsetting 1 [ 731.698683][T13041] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 731.705047][T13041] cdc_mbim 1-1:1.0: bind() failure [ 732.012470][T13770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 732.018830][T13770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 732.025077][T13770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 732.619819][ T8675] usb 1-1: USB disconnect, device number 30 [ 733.107617][ T8675] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 733.271388][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 733.934008][T13804] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 734.072006][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 734.072015][T13627] Bluetooth: hci3: command 0x0406 tx timeout [ 734.207359][T13793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 734.226457][T13793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 734.241961][T13793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 735.441760][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 735.681499][ T172] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 735.760524][T13841] syzkaller0: entered promiscuous mode [ 735.807724][T13841] syzkaller0: entered allmulticast mode [ 735.893045][ T172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.915010][ T172] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 735.929033][ T172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.938520][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.947015][ T172] usb 4-1: Product: syz [ 735.951370][ T172] usb 4-1: Manufacturer: syz [ 735.956454][ T172] usb 4-1: SerialNumber: syz [ 736.005962][ T172] cdc_mbim 4-1:1.0: skipping garbage [ 736.227150][T13840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 736.241476][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 736.247696][ T5863] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 736.318678][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 736.475724][ T5863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.491573][T13854] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 736.494559][ T5863] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.536512][ T5863] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 736.581132][ T5863] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 736.590411][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.598556][ T5863] usb 1-1: Product: syz [ 736.602817][ T5863] usb 1-1: Manufacturer: syz [ 736.607466][ T5863] usb 1-1: SerialNumber: syz [ 736.639788][ T5863] cdc_mbim 1-1:1.0: skipping garbage [ 736.876015][T13840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 736.884170][ T172] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 736.894135][ T172] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 736.915632][ T172] wwan wwan0: port wwan0mbim0 attached [ 737.690457][ T5863] cdc_mbim 1-1:1.0: bind() failure [ 737.705424][ T5863] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 737.721132][ T5863] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 737.740764][ T5863] usbtest: probe of 1-1:1.1 failed with error -71 [ 737.768592][ T5863] usb 1-1: USB disconnect, device number 32 [ 739.544281][T13859] tipc: Enabling of bearer rejected, failed to enable media [ 739.581290][ T172] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 66:83:ef:9f:6f:58 [ 739.602613][ T172] usb 4-1: USB disconnect, device number 43 [ 739.609742][ T172] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 739.772924][ T172] wwan wwan0: port wwan0mbim0 disconnected [ 740.344098][ T5863] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 740.610673][ T5863] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.742294][ T5863] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 740.759576][ T5863] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 740.779088][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.789714][ T5863] usb 4-1: Product: syz [ 740.796821][ T5863] usb 4-1: Manufacturer: syz [ 740.802114][ T5863] usb 4-1: SerialNumber: syz [ 740.816373][ T5863] cdc_mbim 4-1:1.0: skipping garbage [ 740.821849][ T8675] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 741.028676][T13896] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 741.035992][ T8675] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.071373][ T8675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.111754][ T8675] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 741.160902][ T8675] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.181577][ T8675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.189758][ T8675] usb 1-1: Product: syz [ 741.216762][ T8675] usb 1-1: Manufacturer: syz [ 741.231309][ T8675] usb 1-1: SerialNumber: syz [ 741.254566][ T8675] cdc_mbim 1-1:1.0: skipping garbage [ 741.659127][T13899] ================================================================== [ 741.667374][T13899] BUG: KASAN: slab-use-after-free in string+0x204/0x290 [ 741.674698][T13899] Read of size 1 at addr ffff888025cade00 by task syz.0.1899/13899 [ 741.682746][T13899] [ 741.685189][T13899] CPU: 1 PID: 13899 Comm: syz.0.1899 Not tainted syzkaller #0 [ 741.692737][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.702855][T13899] Call Trace: [ 741.706172][T13899] [ 741.709234][T13899] dump_stack_lvl+0x18c/0x250 [ 741.714024][T13899] ? __lock_acquire+0x7d80/0x7d80 [ 741.719184][T13899] ? show_regs_print_info+0x20/0x20 [ 741.724413][T13899] ? load_image+0x420/0x420 [ 741.728980][T13899] ? __lock_acquire+0x1336/0x7d80 [ 741.734036][T13899] ? __virt_addr_valid+0x10c/0x380 [ 741.739213][T13899] ? __virt_addr_valid+0x10c/0x380 [ 741.744363][T13899] ? __virt_addr_valid+0x10c/0x380 [ 741.749538][T13899] print_report+0xa8/0x210 [ 741.753986][T13899] ? string+0x204/0x290 [ 741.758170][T13899] kasan_report+0x117/0x150 [ 741.762790][T13899] ? string+0x204/0x290 [ 741.767062][T13899] string+0x204/0x290 [ 741.771142][T13899] vsnprintf+0xf72/0x1ba0 [ 741.775536][T13899] snprintf+0xe9/0x140 [ 741.779657][T13899] ? vscnprintf+0x80/0x80 [ 741.784046][T13899] dev_vprintk_emit+0x310/0x3f0 [ 741.788980][T13899] ? _dev_info+0x170/0x170 [ 741.793462][T13899] dev_printk_emit+0xef/0x140 [ 741.798182][T13899] ? kasan_save_free_info+0x28/0x40 [ 741.803429][T13899] ? ____kasan_slab_free+0x126/0x1f0 [ 741.808758][T13899] ? dev_vprintk_emit+0x3f0/0x3f0 [ 741.813843][T13899] ? __dev_printk+0x131/0x190 [ 741.818631][T13899] _dev_err+0x11f/0x170 [ 741.822838][T13899] ? _dev_crit+0x170/0x170 [ 741.827296][T13899] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 741.833445][T13899] ? usb_ep_queue+0x158/0x350 [ 741.838190][T13899] raw_process_ep0_io+0x581/0x9a0 [ 741.843327][T13899] raw_ioctl+0x28cb/0x3d80 [ 741.847775][T13899] ? __kmem_cache_free+0xba/0x1f0 [ 741.852837][T13899] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 741.858579][T13899] ? tomoyo_path_number_perm+0x217/0x5e0 [ 741.864269][T13899] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 741.869775][T13899] ? make_qualifier+0x260/0x260 [ 741.874676][T13899] ? __fget_files+0x28/0x460 [ 741.879348][T13899] ? bpf_lsm_file_ioctl+0x9/0x10 [ 741.884340][T13899] ? security_file_ioctl+0x80/0xa0 [ 741.889501][T13899] ? make_qualifier+0x260/0x260 [ 741.894375][T13899] __se_sys_ioctl+0xfd/0x170 [ 741.899000][T13899] do_syscall_64+0x55/0xb0 [ 741.903472][T13899] ? clear_bhb_loop+0x40/0x90 [ 741.908278][T13899] ? clear_bhb_loop+0x40/0x90 [ 741.912981][T13899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.918908][T13899] RIP: 0033:0x7fd4d399dcab [ 741.923403][T13899] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 741.943092][T13899] RSP: 002b:00007fd4d4834f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.951605][T13899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd4d399dcab [ 741.959602][T13899] RDX: 00007fd4d4834fd0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 741.967606][T13899] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 741.975605][T13899] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd4d4834fd8 [ 741.983603][T13899] R13: 0000000000000000 R14: 00007fd4d3c25fa0 R15: 00007fffbebb2278 [ 741.991626][T13899] [ 741.994673][T13899] [ 741.997012][T13899] Allocated by task 13876: [ 742.001530][T13899] kasan_set_track+0x4e/0x70 [ 742.006153][T13899] __kasan_kmalloc+0x8f/0xa0 [ 742.010766][T13899] __kmalloc_node_track_caller+0xb4/0x230 [ 742.016548][T13899] kvasprintf+0xec/0x1a0 [ 742.020839][T13899] kobject_set_name_vargs+0x61/0x110 [ 742.026212][T13899] dev_set_name+0xe3/0x140 [ 742.030654][T13899] usb_add_gadget+0x475/0x6f0 [ 742.035400][T13899] usb_add_gadget_udc_release+0x19c/0x1f0 [ 742.041181][T13899] dummy_udc_probe+0x68a/0x780 [ 742.046003][T13899] platform_probe+0x13b/0x1c0 [ 742.050718][T13899] really_probe+0x247/0xae0 [ 742.055291][T13899] __driver_probe_device+0x1f5/0x390 [ 742.060632][T13899] device_driver_attach+0xe0/0x1d0 [ 742.065822][T13899] bind_store+0x1cc/0x210 [ 742.070183][T13899] kernfs_fop_write_iter+0x3a4/0x520 [ 742.075638][T13899] vfs_write+0x474/0x9a0 [ 742.079908][T13899] ksys_write+0x151/0x260 [ 742.084291][T13899] do_syscall_64+0x55/0xb0 [ 742.088738][T13899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.094659][T13899] [ 742.097004][T13899] Freed by task 13913: [ 742.101087][T13899] kasan_set_track+0x4e/0x70 [ 742.105702][T13899] kasan_save_free_info+0x28/0x40 [ 742.110761][T13899] ____kasan_slab_free+0x126/0x1f0 [ 742.115896][T13899] slab_free_freelist_hook+0x130/0x1a0 [ 742.121385][T13899] __kmem_cache_free+0xba/0x1f0 [ 742.126266][T13899] kobject_put+0x260/0x450 [ 742.130710][T13899] platform_remove+0x6d/0xe0 [ 742.135331][T13899] device_release_driver_internal+0x408/0x6f0 [ 742.141456][T13899] unbind_store+0x1a1/0x1d0 [ 742.145992][T13899] kernfs_fop_write_iter+0x3a4/0x520 [ 742.151308][T13899] vfs_write+0x474/0x9a0 [ 742.155594][T13899] ksys_write+0x151/0x260 [ 742.159949][T13899] do_syscall_64+0x55/0xb0 [ 742.164399][T13899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.170315][T13899] [ 742.172663][T13899] The buggy address belongs to the object at ffff888025cade00 [ 742.172663][T13899] which belongs to the cache kmalloc-16 of size 16 [ 742.186657][T13899] The buggy address is located 0 bytes inside of [ 742.186657][T13899] freed 16-byte region [ffff888025cade00, ffff888025cade10) [ 742.200221][T13899] [ 742.202569][T13899] The buggy address belongs to the physical page: [ 742.209035][T13899] page:ffffea0000972b40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888025cad0a0 pfn:0x25cad [ 742.220510][T13899] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 742.228515][T13899] page_type: 0xffffffff() [ 742.232914][T13899] raw: 00fff00000000800 ffff888017c413c0 0000000000000000 dead000000000001 [ 742.241522][T13899] raw: ffff888025cad0a0 000000008080007f 00000001ffffffff 0000000000000000 [ 742.250123][T13899] page dumped because: kasan: bad access detected [ 742.256563][T13899] page_owner tracks the page as allocated [ 742.262292][T13899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5777, tgid 5777 (syz-executor), ts 90861327052, free_ts 90339972923 [ 742.280557][T13899] post_alloc_hook+0x1c1/0x200 [ 742.285414][T13899] get_page_from_freelist+0x2181/0x22a0 [ 742.291010][T13899] __alloc_pages+0x1f0/0x460 [ 742.295630][T13899] alloc_slab_page+0x4f/0x180 [ 742.300504][T13899] new_slab+0x87/0x2d0 [ 742.304601][T13899] ___slab_alloc+0xc5c/0x12f0 [ 742.309303][T13899] __kmem_cache_alloc_node+0x11f/0x250 [ 742.314791][T13899] kmalloc_node_trace+0x26/0xe0 [ 742.319675][T13899] hugetlb_cgroup_css_alloc+0x180/0x880 [ 742.325239][T13899] cgroup_apply_control_enable+0x3cc/0xb00 [ 742.331101][T13899] cgroup_mkdir+0xc83/0xe70 [ 742.335633][T13899] kernfs_iop_mkdir+0x241/0x3e0 [ 742.340514][T13899] vfs_mkdir+0x2a5/0x470 [ 742.344783][T13899] do_mkdirat+0x1dc/0x450 [ 742.349138][T13899] __x64_sys_mkdirat+0x89/0xa0 [ 742.353932][T13899] do_syscall_64+0x55/0xb0 [ 742.358378][T13899] page last free stack trace: [ 742.363069][T13899] free_unref_page_prepare+0x7d7/0x8f0 [ 742.368551][T13899] free_unref_page+0x32/0x2e0 [ 742.373252][T13899] __slab_free+0x35a/0x400 [ 742.377695][T13899] qlist_free_all+0x75/0xd0 [ 742.382236][T13899] kasan_quarantine_reduce+0x143/0x160 [ 742.387810][T13899] __kasan_slab_alloc+0x22/0x80 [ 742.392778][T13899] slab_post_alloc_hook+0x6a/0x4d0 [ 742.397919][T13899] __kmem_cache_alloc_node+0x194/0x250 [ 742.403407][T13899] __kmalloc+0xa7/0x240 [ 742.407596][T13899] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 742.413820][T13899] genl_family_rcv_msg_doit+0xcf/0x310 [ 742.419305][T13899] genl_rcv_msg+0x611/0x7a0 [ 742.423835][T13899] netlink_rcv_skb+0x235/0x4c0 [ 742.428691][T13899] genl_rcv+0x28/0x40 [ 742.432706][T13899] netlink_unicast+0x7b1/0x930 [ 742.437518][T13899] netlink_sendmsg+0x8d0/0xbf0 [ 742.442305][T13899] [ 742.444643][T13899] Memory state around the buggy address: [ 742.450358][T13899] ffff888025cadd00: 00 01 fc fc fa fb fc fc 00 04 fc fc 00 00 fc fc [ 742.458445][T13899] ffff888025cadd80: 00 00 fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc [ 742.466676][T13899] >ffff888025cade00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 742.474772][T13899] ^ [ 742.478858][T13899] ffff888025cade80: fa fb fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 742.486942][T13899] ffff888025cadf00: fa fb fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc [ 742.495021][T13899] ================================================================== [ 742.524233][T13896] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 742.531843][ T8675] cdc_mbim 1-1:1.0: bind() failure [ 742.546476][T13899] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 742.553776][T13899] CPU: 0 PID: 13899 Comm: syz.0.1899 Not tainted syzkaller #0 [ 742.561279][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 742.571363][T13899] Call Trace: [ 742.574670][T13899] [ 742.577621][T13899] dump_stack_lvl+0x18c/0x250 [ 742.582327][T13899] ? show_regs_print_info+0x20/0x20 [ 742.587539][T13899] ? load_image+0x420/0x420 [ 742.592071][T13899] panic+0x2ca/0x720 [ 742.595998][T13899] ? bpf_jit_dump+0xd0/0xd0 [ 742.600519][T13899] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 742.606549][T13899] ? _raw_spin_unlock+0x40/0x40 [ 742.611469][T13899] ? print_memory_metadata+0x314/0x400 [ 742.616987][T13899] ? string+0x204/0x290 [ 742.621184][T13899] check_panic_on_warn+0x84/0xa0 [ 742.626212][T13899] ? string+0x204/0x290 [ 742.630403][T13899] end_report+0x6f/0x130 [ 742.634661][T13899] kasan_report+0x128/0x150 [ 742.639185][T13899] ? string+0x204/0x290 [ 742.643386][T13899] string+0x204/0x290 [ 742.647403][T13899] vsnprintf+0xf72/0x1ba0 [ 742.651778][T13899] snprintf+0xe9/0x140 [ 742.655865][T13899] ? vscnprintf+0x80/0x80 [ 742.660215][T13899] dev_vprintk_emit+0x310/0x3f0 [ 742.665082][T13899] ? _dev_info+0x170/0x170 [ 742.669517][T13899] dev_printk_emit+0xef/0x140 [ 742.674211][T13899] ? kasan_save_free_info+0x28/0x40 [ 742.679427][T13899] ? ____kasan_slab_free+0x126/0x1f0 [ 742.684742][T13899] ? dev_vprintk_emit+0x3f0/0x3f0 [ 742.689781][T13899] ? __dev_printk+0x131/0x190 [ 742.694560][T13899] _dev_err+0x11f/0x170 [ 742.698733][T13899] ? _dev_crit+0x170/0x170 [ 742.703165][T13899] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 742.709083][T13899] ? usb_ep_queue+0x158/0x350 [ 742.713782][T13899] raw_process_ep0_io+0x581/0x9a0 [ 742.718822][T13899] raw_ioctl+0x28cb/0x3d80 [ 742.723248][T13899] ? __kmem_cache_free+0xba/0x1f0 [ 742.728302][T13899] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 742.733959][T13899] ? tomoyo_path_number_perm+0x217/0x5e0 [ 742.739608][T13899] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 742.745083][T13899] ? make_qualifier+0x260/0x260 [ 742.749978][T13899] ? __fget_files+0x28/0x460 [ 742.754589][T13899] ? bpf_lsm_file_ioctl+0x9/0x10 [ 742.759538][T13899] ? security_file_ioctl+0x80/0xa0 [ 742.764681][T13899] ? make_qualifier+0x260/0x260 [ 742.769553][T13899] __se_sys_ioctl+0xfd/0x170 [ 742.774166][T13899] do_syscall_64+0x55/0xb0 [ 742.778593][T13899] ? clear_bhb_loop+0x40/0x90 [ 742.783300][T13899] ? clear_bhb_loop+0x40/0x90 [ 742.787986][T13899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.793908][T13899] RIP: 0033:0x7fd4d399dcab [ 742.798348][T13899] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 742.817973][T13899] RSP: 002b:00007fd4d4834f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.826400][T13899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd4d399dcab [ 742.834386][T13899] RDX: 00007fd4d4834fd0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 742.842367][T13899] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 742.850342][T13899] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd4d4834fd8 [ 742.858353][T13899] R13: 0000000000000000 R14: 00007fd4d3c25fa0 R15: 00007fffbebb2278 [ 742.866359][T13899] [ 742.870038][T13899] Kernel Offset: disabled [ 742.874403][T13899] Rebooting in 86400 seconds..