last executing test programs: 34.518942343s ago: executing program 2 (id=2898): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000300)='01234', 0x5) close(r0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000540)='1280', 0x4) 34.201513582s ago: executing program 2 (id=2900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010428bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c000280080003"], 0x3c}}, 0x20004000) 33.874953739s ago: executing program 2 (id=2903): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3c3e0f2397b4d84500b5f812365f00000000000000", 0xff40) 33.126663269s ago: executing program 2 (id=2907): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = eventfd2(0xeffffffb, 0x80800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x9, 0x0, 0x2, r1, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 32.597652631s ago: executing program 2 (id=2909): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)={[{@shortname_mixed}, {@fat=@nfs}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8no}, {@rodir}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@utf8}, {@shortname_winnt}, {@numtail}, {@fat=@dos1xfloppy}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}]}, 0xfd, 0x2a9, &(0x7f0000000500)="$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") open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) 32.033558206s ago: executing program 2 (id=2913): syz_emit_ethernet(0x7a, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB], 0xfc9, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x3) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000002680)=[0x0], 0x1}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x9) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.428971898s ago: executing program 3 (id=2980): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c00018005"], 0xbc}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) write(r2, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r2, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r3, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 10.092767327s ago: executing program 3 (id=2981): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) lseek(r2, 0xfffffffffffffff5, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000418283fb7e6200000f000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x8000000, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0xf, 0x6]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) r8 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000140)={0x1, 0x100, 0x2, {0x80000001, 0x8, 0x80000, 0x40}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000080)={0x6}) write(r0, &(0x7f0000000600)='dir', 0x3) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x3) 8.398701989s ago: executing program 0 (id=2983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d661", 0x28}], 0x2) 8.063605987s ago: executing program 3 (id=2984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.903746462s ago: executing program 1 (id=2985): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x5, 0xa, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000340000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x8040) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x238, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x3}}}}, [@NL80211_ATTR_IE={0x58, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7f}, 0x8, 0x9, @device_a, 0xced, 0x4, 0xe3}}, @prep={0x83, 0x1f, {{}, 0x5, 0xfc, @device_a, 0xef, @void, 0x3, 0x3, @broadcast, 0x401}}, @ht={0x2d, 0x1a, {0x0, 0x0, 0x3, 0x0, {0x410, 0x1, 0x0, 0x237, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x4, 0x6}}]}, @NL80211_ATTR_IE={0x1b8, 0x2a, [@ht={0x2d, 0x1a, {0x8000, 0x1, 0x4, 0x0, {0x2, 0x7f, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x1ff, 0xb}}, @erp={0x2a, 0x1}, @perr={0x84, 0xb6, {0x7, 0xc, [{{0x0, 0x1}, @device_b, 0xfffffffb, @value, 0x1d}, {{}, @broadcast, 0x9, @void, 0x8}, {{}, @device_b, 0x4, @void, 0x12}, {{}, @device_b, 0x9, @void, 0xd}, {{}, @broadcast, 0xfffffffa, @void, 0x9}, {{}, @device_a, 0xa932, @void, 0x27}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x5}, {{}, @device_a, 0xc67, @void, 0x33}, {{}, @device_b, 0x9, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x4a7, @value=@broadcast, 0x38}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x18}, {{}, @device_b, 0x2, @void, 0x11}]}}, @ibss={0x6, 0x2, 0xfffe}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xcf, {0x2, 0xd, [{{0x0, 0x1}, @broadcast, 0x80000001, @value, 0x3b}, {{}, @broadcast, 0x7fff, @void, 0x8}, {{0x0, 0x1}, @device_a, 0x7fffffff, @value=@broadcast, 0x3e}, {{}, @broadcast, 0x0, @void, 0x2a}, {{}, @device_a, 0x1, @void, 0x41}, {{}, @device_b, 0x4, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x2c}, {{}, @device_a, 0x9, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0xf}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x36}, {{}, @device_b, 0xccb, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x21}, {{}, @broadcast, 0x8, @void, 0xf}]}}]}]}, 0x238}}, 0x24000014) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) 6.115183506s ago: executing program 4 (id=2989): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x7) sendto$inet(r0, 0x0, 0x0, 0x24006802, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 6.024802929s ago: executing program 4 (id=2990): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 4.055116408s ago: executing program 3 (id=2991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x35) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 4.054805348s ago: executing program 0 (id=2992): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x143841, 0x114) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) 4.054461348s ago: executing program 1 (id=2993): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) openat(r1, 0x0, 0x2, 0x0) mkdirat(r1, 0x0, 0x1ff) r2 = openat(r1, 0x0, 0x0, 0x0) openat(r2, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) mkdirat(r1, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) r3 = openat(r1, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000780)='dummy_udc.0\n', 0xc) 3.780425705s ago: executing program 4 (id=2994): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x6a, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) set_mempolicy(0x6, 0x0, 0xe0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5c50fae9d6d8d3292ea54c7beef915d564c90c200", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r4, &(0x7f0000001640)={0x8, {"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", 0x1000}}, 0x1006) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x81, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 3.642478298s ago: executing program 1 (id=2995): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c60047e43f59c50020000000005c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000440)={"31ecffff1bdb69e2e1070000001e00", r6}) 3.641755638s ago: executing program 0 (id=2996): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 2.986440065s ago: executing program 3 (id=2997): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c00018005"], 0xbc}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) write(r2, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r2, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r3, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 2.605005604s ago: executing program 1 (id=2998): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x84}}, 0x24040884) 2.584911235s ago: executing program 3 (id=2999): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0xfa, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}], 0x1}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000080)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@rodir}, {@shortname_win95}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@numtail}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009"], 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) syz_usb_connect$uac2(0x6, 0x9d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x8, 0x60, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0xa, 0x25, 0x1}, [@effect_unit={0xf, 0x24, 0x7, 0x2, 0x4, 0x5, [0x1, 0x7, 0x1, 0x2]}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x6, [0x6, 0x4, 0xff, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x4, 0xa, {0x8, 0x25, 0x1, 0x80, 0x3, 0xb, 0x3ef}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x8, 0xa, {0x8, 0x25, 0x1, 0x76c13fbea9787d64, 0x0, 0x1, 0x9}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x52, 0x5, 0x2, 0xff, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x45, &(0x7f0000000200)=@string={0x45, 0x3, "70b61fbea6ae67ae9f77df44ef8ec0a068a48c1ab8dea9142686114bd2ec4536527fe66e1751b1a8e84e640f5e8be34831cd8ca128c371cf994a51021b820a16948610"}}, {0x81, &(0x7f0000000340)=@string={0x81, 0x3, "4a9cd219436d918749fae6c9c141062caa44b18af7a6e3082e78c00a14512c62d2f00e3d754d3d9eeaffb65330ce607fd236401410e5fff6cb7578c42279732b51cb93f6dee1bf4ef9e0d7dac3661c8a6173bbcbc16fba99e8b4407bdbb9b4512ad34967a9e34fb5af5ea145c08c60159ab79d5cf7f84fdca2b3ebead26247"}}, {0xa8, &(0x7f0000000400)=@string={0xa8, 0x3, "763b96b933f1fc9d243cc0c6a6e0dd532fb088301ab703b1280fff494a45c726b785aea9705360207e9f78806bed5109cd1a5a5f5c90270617382f50949677d8645d8381a92d0ab117e87f156c4bc3ab3b712e16a54d65f4173334c70490ecaa33561b27f4b6b058130958113c7e3077e30d027ab977066fec143b48d1b14678126d549ed31d43ace15704beb104e276e45722e2a65d0166dba075257fda07eceeef49467501"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x410}}, {0x17, &(0x7f00000005c0)=@string={0x17, 0x3, "0d58c8b1db4e1eee30364cff0ae8d76da2105f12c6"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 2.567253505s ago: executing program 4 (id=3000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.344827561s ago: executing program 0 (id=3001): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 2.250140624s ago: executing program 1 (id=3002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002000)={0x18, 0xf, 0xa, 0x201, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x3}, [@generic='\'']}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8404) 2.081240408s ago: executing program 1 (id=3003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d661", 0x28}], 0x2) 2.065092348s ago: executing program 4 (id=3004): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x40) 1.583031s ago: executing program 4 (id=3005): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 158.944936ms ago: executing program 0 (id=3006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 0s ago: executing program 0 (id=3007): syz_emit_ethernet(0x7a, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB], 0xfc9, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x3) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130e") ptrace$getregset(0x4205, r2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000002680)=[0x0], 0x1}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x9) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): evice syzkaller0 entered promiscuous mode [ 405.159038][ T4320] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.256461][ T4320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 405.300535][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 405.326051][ T4320] usb 2-1: Product: syz [ 405.340592][ T4320] usb 2-1: Manufacturer: syz [ 405.356328][ T4320] usb 2-1: SerialNumber: syz [ 405.587437][ T4320] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 405.907744][ C0] usblp0: nonzero write bulk status received: -71 [ 405.933972][ T4361] usb 2-1: USB disconnect, device number 25 [ 405.979099][ T4361] usblp0: removed [ 409.549899][ T9401] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 409.564235][ T9401] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 409.574492][ T9401] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 410.509135][ T9445] device syzkaller0 entered promiscuous mode [ 410.713542][ T33] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 410.934813][ T33] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.024648][ T33] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 411.055977][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 411.108817][ T33] usb 2-1: Product: syz [ 411.130432][ T33] usb 2-1: Manufacturer: syz [ 411.158660][ T33] usb 2-1: SerialNumber: syz [ 411.454440][ T33] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 411.786402][ C1] usblp0: nonzero write bulk status received: -71 [ 411.787107][ T4361] usb 2-1: USB disconnect, device number 26 [ 411.845638][ T4361] usblp0: removed [ 414.492448][ T9457] device syzkaller0 entered promiscuous mode [ 414.501107][ T9464] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 414.519563][ T9464] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 414.529397][ T9464] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 417.423885][ T22] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 417.628272][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.685346][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 417.712171][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 417.727881][ T22] usb 5-1: Product: syz [ 417.732653][ T22] usb 5-1: Manufacturer: syz [ 417.738210][ T22] usb 5-1: SerialNumber: syz [ 417.995299][ T22] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 418.340438][ C1] usblp0: nonzero write bulk status received: -71 [ 418.347708][ T22] usb 5-1: USB disconnect, device number 42 [ 418.358428][ T22] usblp0: removed [ 418.910180][ T9537] device syzkaller0 entered promiscuous mode [ 421.774826][ T9546] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 421.790278][ T9546] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 421.801307][ T9546] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 422.140946][ T9583] netlink: 'syz.0.1534': attribute type 1 has an invalid length. [ 422.173649][ T9583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.298902][ T9583] bond2: (slave gretap1): making interface the new active one [ 422.317501][ T9583] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 422.354570][ T5575] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 422.501694][ T9598] device syzkaller0 entered promiscuous mode [ 423.056412][ T9612] device syzkaller0 entered promiscuous mode [ 423.263824][ T7] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 423.479918][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.599967][ T9620] tipc: Enabled bearer , priority 0 [ 423.637685][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 423.715673][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 423.769756][ T9620] device syzkaller0 entered promiscuous mode [ 423.779163][ T7] usb 4-1: Product: syz [ 423.798689][ T7] usb 4-1: Manufacturer: syz [ 423.804426][ T9620] tipc: Resetting bearer [ 423.863118][ T7] usb 4-1: SerialNumber: syz [ 424.110144][ T4301] tipc: Resetting bearer [ 424.118920][ T7] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 424.148999][ T9617] tipc: Resetting bearer [ 424.455748][ C1] usblp0: nonzero write bulk status received: -71 [ 424.476977][ T33] usb 4-1: USB disconnect, device number 19 [ 424.513228][ T33] usblp0: removed [ 426.421411][ T9617] tipc: Disabling bearer [ 426.469302][ T9639] device syzkaller0 entered promiscuous mode [ 429.042556][ T9687] device syzkaller0 entered promiscuous mode [ 429.987100][ T7] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 430.190955][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.242488][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 430.257343][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 430.268542][ T7] usb 2-1: Product: syz [ 430.272908][ T7] usb 2-1: Manufacturer: syz [ 430.281713][ T7] usb 2-1: SerialNumber: syz [ 430.510800][ T7] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 430.871488][ C0] usblp0: nonzero write bulk status received: -71 [ 430.872573][ T22] usb 2-1: USB disconnect, device number 27 [ 430.916915][ T22] usblp0: removed [ 432.426179][ T9710] tipc: Enabled bearer , priority 0 [ 432.472909][ T9704] device syzkaller0 entered promiscuous mode [ 432.479931][ T9704] tipc: Resetting bearer [ 432.526525][ T9707] tipc: Resetting bearer [ 434.764784][ T9707] tipc: Disabling bearer [ 434.779584][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 434.823813][ T9747] device syzkaller0 entered promiscuous mode [ 434.854452][ T4324] tipc: Node number set to 2064527644 [ 437.023739][ T126] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 437.247509][ T126] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.288617][ T126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 437.306243][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 437.321816][ T126] usb 3-1: Product: syz [ 437.329519][ T126] usb 3-1: Manufacturer: syz [ 437.341389][ T126] usb 3-1: SerialNumber: syz [ 437.585532][ T126] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 437.883905][ C1] usblp0: nonzero write bulk status received: -71 [ 437.892020][ T22] usb 3-1: USB disconnect, device number 22 [ 437.903431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 437.932706][ T22] usblp0: removed [ 438.431902][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 439.039331][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'. [ 439.642403][ T9830] tipc: Enabled bearer , priority 0 [ 439.670278][ T9830] device syzkaller0 entered promiscuous mode [ 439.986338][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.992755][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.008887][ T7] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 440.114228][ T9841] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 440.184158][ T9841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.203672][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 440.212179][ T7] usb 5-1: config 4 has an invalid interface number: 104 but max is 0 [ 440.286327][ T7] usb 5-1: config 4 has no interface number 0 [ 440.321903][ T7] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8 [ 440.367430][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.389300][ T7] usb 5-1: Product: syz [ 440.405341][ T9845] device syzkaller0 entered promiscuous mode [ 440.414960][ T7] usb 5-1: Manufacturer: syz [ 440.429733][ T7] usb 5-1: SerialNumber: syz [ 441.015558][ T126] tipc: Node number set to 3190975696 [ 441.023317][ T9830] tipc: Resetting bearer [ 441.067805][ T7] rtsx_usb: probe of 5-1:4.104 failed with error -22 [ 441.095779][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 441.154984][ T7] usb 5-1: USB disconnect, device number 43 [ 441.245245][ T9829] tipc: Resetting bearer [ 441.326598][ T9829] tipc: Disabling bearer [ 443.363539][ T4324] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 443.556435][ T4324] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.589955][ T4324] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 443.609375][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 443.632702][ T4324] usb 2-1: Product: syz [ 443.642315][ T4324] usb 2-1: Manufacturer: syz [ 443.667881][ T4324] usb 2-1: SerialNumber: syz [ 443.897400][ T4324] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 444.180519][ C0] usblp0: nonzero write bulk status received: -71 [ 444.188975][ T4361] usb 2-1: USB disconnect, device number 28 [ 444.217700][ T9880] usblp0: removed [ 444.526849][ T9885] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1599'. [ 446.186384][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1606'. [ 446.972641][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1609'. [ 449.493527][ T22] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 449.687058][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.762089][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 449.785901][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 449.836592][ T22] usb 4-1: Product: syz [ 449.840800][ T22] usb 4-1: Manufacturer: syz [ 449.845860][ T22] usb 4-1: SerialNumber: syz [ 450.078428][ T22] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 450.345010][ C1] usblp0: nonzero write bulk status received: -71 [ 450.351848][ T22] usb 4-1: USB disconnect, device number 20 [ 450.370960][ T9966] usblp0: removed [ 451.947865][ T9994] device syzkaller0 entered promiscuous mode [ 455.343569][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.703491][ T22] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 455.872656][T10058] netlink: 'syz.3.1646': attribute type 1 has an invalid length. [ 455.903665][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 455.911640][ T22] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 455.922129][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 455.934632][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 455.947728][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 455.956970][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.973533][ T22] usb 1-1: config 0 descriptor?? [ 456.097083][T10058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.433488][ T33] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 456.658176][ T33] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.725781][ T33] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 456.761641][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 456.778733][ T4361] usb 1-1: USB disconnect, device number 32 [ 456.872905][ T33] usb 3-1: Product: syz [ 456.877785][ T33] usb 3-1: Manufacturer: syz [ 456.882593][ T33] usb 3-1: SerialNumber: syz [ 457.061317][T10076] device syzkaller0 entered promiscuous mode [ 457.107768][ T33] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 457.391971][ C1] usblp0: nonzero write bulk status received: -71 [ 457.423649][ T33] usb 3-1: USB disconnect, device number 23 [ 457.458494][ T33] usblp0: removed [ 458.931035][T10088] device syzkaller0 entered promiscuous mode [ 460.237167][ T4361] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 460.439919][ T4361] usb 4-1: Using ep0 maxpacket: 8 [ 460.467143][ T4361] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 460.482973][ T4361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 460.494462][ T4361] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 460.507696][ T4361] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 460.517610][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.529040][ T4361] usb 4-1: config 0 descriptor?? [ 461.288897][ T4361] usb 4-1: USB disconnect, device number 21 [ 461.801180][T10127] device syzkaller0 entered promiscuous mode [ 462.382949][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 463.973719][ T22] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 464.228270][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.269790][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 464.296563][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 464.322847][ T22] usb 1-1: Product: syz [ 464.333643][ T22] usb 1-1: Manufacturer: syz [ 464.350707][ T22] usb 1-1: SerialNumber: syz [ 464.363512][ T4361] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 464.571282][ T4361] usb 3-1: Using ep0 maxpacket: 8 [ 464.579788][ T4361] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 464.591924][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 464.619399][ T4361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 464.793531][ T4361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 26232, setting to 64 [ 464.859829][ C0] usblp0: nonzero write bulk status received: -71 [ 464.860764][ T4324] usb 1-1: USB disconnect, device number 33 [ 464.891673][ T4361] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.937142][ T4324] usblp0: removed [ 464.993643][ T4361] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 465.050110][ T4361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.115393][ T4361] usb 3-1: config 0 descriptor?? [ 465.868281][ T4361] usb 3-1: USB disconnect, device number 24 [ 466.970843][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 467.403477][ T7] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 467.605214][ T7] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 467.620278][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.630722][ T4361] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 467.648978][ T7] usb 5-1: config 0 has no interface number 0 [ 467.661326][ T7] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.694729][ T7] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 467.713455][ T7] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 467.728792][ T7] usb 5-1: Product: syz [ 467.736529][ T7] usb 5-1: SerialNumber: syz [ 467.749076][ T7] usb 5-1: config 0 descriptor?? [ 467.843519][ T4361] usb 4-1: Using ep0 maxpacket: 8 [ 467.851051][ T4361] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 467.863489][ T4361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 467.921022][ T4361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 26232, setting to 64 [ 467.973023][ T4361] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.019502][ T4361] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 468.048517][ T4276] usb 5-1: USB disconnect, device number 44 [ 468.074928][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.115868][ T4361] usb 4-1: config 0 descriptor?? [ 468.889064][ T4361] usb 4-1: USB disconnect, device number 22 [ 468.896942][ T4276] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 469.108016][ T4276] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.194784][ T4276] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 469.375822][ T7] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 469.401799][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 469.482233][ T4276] usb 2-1: Product: syz [ 469.533081][ T4276] usb 2-1: Manufacturer: syz [ 469.542766][ T4276] usb 2-1: SerialNumber: syz [ 469.619515][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.790383][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 469.871746][ T4276] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 469.969131][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 469.995764][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 470.047935][ T7] usb 5-1: Product: syz [ 470.059585][ T7] usb 5-1: Manufacturer: syz [ 470.134856][ T7] usb 5-1: SerialNumber: syz [ 470.154212][ C0] usblp0: nonzero write bulk status received: -71 [ 470.165369][ T4276] usb 2-1: USB disconnect, device number 29 [ 470.189923][ T4276] usblp0: removed [ 470.417414][ T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 470.691804][ C0] usblp0: nonzero write bulk status received: -71 [ 470.698844][ T7] usb 5-1: USB disconnect, device number 45 [ 470.743074][T10227] usblp0: removed [ 471.127460][ T126] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 471.223604][T10255] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 471.325923][ T126] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 471.340018][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.384122][ T126] usb 1-1: config 0 has no interface number 0 [ 471.409376][ T126] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 471.496573][ T126] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 471.553550][ T126] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 471.623560][ T126] usb 1-1: Product: syz [ 471.627802][ T126] usb 1-1: SerialNumber: syz [ 471.704641][ T126] usb 1-1: config 0 descriptor?? [ 472.028063][ T7] usb 1-1: USB disconnect, device number 34 [ 473.123981][ T7] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 473.313607][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 473.322668][ T7] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 473.367457][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 473.454316][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 26232, setting to 64 [ 473.531545][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.594008][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 473.649232][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.716955][ T7] usb 4-1: config 0 descriptor?? [ 474.532298][ T22] usb 4-1: USB disconnect, device number 23 [ 475.298480][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1707'. [ 475.413581][ T33] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 475.523562][ T22] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 475.548615][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1705'. [ 475.605699][ T33] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 475.636453][ T33] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.701640][ T33] usb 2-1: config 0 has no interface number 0 [ 475.728548][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.760543][ T33] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.802028][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 475.826860][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 475.837470][ T33] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 475.907276][ T22] usb 1-1: Product: syz [ 475.918720][ T33] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 475.959719][ T22] usb 1-1: Manufacturer: syz [ 476.018435][ T33] usb 2-1: Product: syz [ 476.022830][ T22] usb 1-1: SerialNumber: syz [ 476.058154][ T33] usb 2-1: SerialNumber: syz [ 476.144594][ T33] usb 2-1: config 0 descriptor?? [ 476.279346][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 476.442263][ T22] usb 2-1: USB disconnect, device number 30 [ 476.528673][ C1] usblp0: nonzero write bulk status received: -71 [ 476.595092][ T33] usb 1-1: USB disconnect, device number 35 [ 476.627270][ T33] usblp0: removed [ 477.033544][ T7] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 477.280094][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.369237][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 477.450493][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 477.544873][ T7] usb 4-1: Product: syz [ 477.579869][ T7] usb 4-1: Manufacturer: syz [ 477.630782][ T7] usb 4-1: SerialNumber: syz [ 477.917270][ T7] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 478.010928][T10337] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 478.231645][ C1] usblp0: nonzero write bulk status received: -71 [ 478.248821][ T33] usb 4-1: USB disconnect, device number 24 [ 478.267769][T10317] usblp0: removed [ 480.423535][ T4361] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 480.615736][ T4361] usb 2-1: Using ep0 maxpacket: 8 [ 480.627281][ T4361] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 480.677492][ T4361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 480.699037][ T4361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12288, setting to 1024 [ 480.732944][ T4361] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 480.746817][ T4361] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.760401][ T4361] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 480.771324][ T4361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.809082][ T4361] usb 2-1: config 0 descriptor?? [ 480.963461][ T7] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 481.145296][ T7] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 481.156618][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.170728][ T7] usb 4-1: config 0 has no interface number 0 [ 481.177208][ T7] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.207053][ T7] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 481.216507][ T7] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 481.225042][ T7] usb 4-1: Product: syz [ 481.229478][ T7] usb 4-1: SerialNumber: syz [ 481.236279][ T7] usb 4-1: config 0 descriptor?? [ 481.245713][ T7] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 481.329622][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1724'. [ 481.516134][ T7] usb 4-1: USB disconnect, device number 25 [ 481.563545][ T4276] usb 2-1: USB disconnect, device number 31 [ 482.827374][ T126] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 482.935037][T10399] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 483.047846][ T126] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.110201][ T126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 483.152901][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 483.215476][ T126] usb 2-1: Product: syz [ 483.236794][ T126] usb 2-1: Manufacturer: syz [ 483.251910][ T126] usb 2-1: SerialNumber: syz [ 483.258151][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1730'. [ 483.490710][ T126] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 483.774656][ C0] usblp0: nonzero write bulk status received: -71 [ 483.789672][ T126] usb 2-1: USB disconnect, device number 32 [ 483.867520][ T126] usblp0: removed [ 484.920558][T10413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1737'. [ 485.291688][T10419] device syzkaller0 entered promiscuous mode [ 486.123602][ T4361] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 486.243662][ T22] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 486.325385][ T4361] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 486.346128][ T4361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.370612][ T4361] usb 4-1: config 0 has no interface number 0 [ 486.391178][ T4361] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.430851][ T4361] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 486.441946][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 486.453780][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 486.460394][ T4361] usb 4-1: Product: syz [ 486.462855][ T22] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 486.470861][ T4361] usb 4-1: SerialNumber: syz [ 486.499242][ T4361] usb 4-1: config 0 descriptor?? [ 486.533535][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 486.540015][ T4361] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 486.562483][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12288, setting to 1024 [ 486.603447][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 486.651625][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.704961][ T22] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 486.749908][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.788593][ T4361] usb 4-1: USB disconnect, device number 26 [ 486.830938][ T22] usb 3-1: config 0 descriptor?? [ 487.214735][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'. [ 487.318593][T10449] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 487.587738][ T22] usb 3-1: USB disconnect, device number 25 [ 489.413503][ T22] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 489.593484][ T4361] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 489.635950][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.736188][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 489.788704][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 489.801002][ T4361] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 489.817607][ T4361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.860997][ T22] usb 1-1: Product: syz [ 489.865601][ T4361] usb 3-1: config 0 has no interface number 0 [ 489.876651][ T22] usb 1-1: Manufacturer: syz [ 489.891693][ T4361] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.923650][ T22] usb 1-1: SerialNumber: syz [ 489.975692][ T4361] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 490.116397][ T4361] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 490.125658][ T126] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 490.167415][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 490.200000][ T4361] usb 3-1: Product: syz [ 490.233241][ T4361] usb 3-1: SerialNumber: syz [ 490.287878][ T4361] usb 3-1: config 0 descriptor?? [ 490.356399][ T126] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.388998][ T4361] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 490.437675][ C1] usblp0: nonzero write bulk status received: -71 [ 490.444777][ T22] usb 1-1: USB disconnect, device number 36 [ 490.458110][ T126] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 490.492129][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 490.504483][ T22] usblp0: removed [ 490.573088][ T126] usb 4-1: Product: syz [ 490.595493][ T126] usb 4-1: Manufacturer: syz [ 490.602084][ T126] usb 4-1: SerialNumber: syz [ 490.670815][ T4361] usb 3-1: USB disconnect, device number 26 [ 490.878034][ T126] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 491.103466][ T22] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 491.144783][ C0] usblp0: nonzero write bulk status received: -71 [ 491.147998][ T4276] usb 4-1: USB disconnect, device number 27 [ 491.214466][ T4276] usblp0: removed [ 491.314193][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 491.326616][ T22] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 491.366685][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 491.405255][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12288, setting to 1024 [ 491.456961][ T22] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 491.510129][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.551905][ T22] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 491.614653][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.693100][ T22] usb 5-1: config 0 descriptor?? [ 492.414808][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 492.468427][ T33] usb 5-1: USB disconnect, device number 46 [ 492.708107][T10507] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 493.261037][T10522] device syzkaller0 entered promiscuous mode [ 494.833574][ T33] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 494.903632][ T7] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 495.023553][ T33] usb 3-1: Using ep0 maxpacket: 8 [ 495.032681][ T33] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 495.069754][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 495.103328][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 495.126557][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.155789][ T33] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 495.171568][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 495.199749][ T33] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.212884][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 495.212909][ T7] usb 4-1: Product: syz [ 495.212926][ T7] usb 4-1: Manufacturer: syz [ 495.212941][ T7] usb 4-1: SerialNumber: syz [ 495.332257][ T33] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 495.363663][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.414488][ T33] usb 3-1: config 0 descriptor?? [ 495.446788][ T7] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 495.520143][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 495.702916][ C1] usblp0: nonzero write bulk status received: -71 [ 495.710096][ T22] usb 4-1: USB disconnect, device number 28 [ 495.720483][ T22] usblp0: removed [ 496.117428][ T7] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 496.178932][ T33] usb 3-1: USB disconnect, device number 27 [ 496.339374][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.406101][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 496.483631][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 496.525324][ T7] usb 2-1: Product: syz [ 496.558666][ T7] usb 2-1: Manufacturer: syz [ 496.573740][ T7] usb 2-1: SerialNumber: syz [ 496.805112][ T7] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 497.063417][ T126] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 497.090438][ C0] usblp0: nonzero write bulk status received: -71 [ 497.105238][ T7] usb 2-1: USB disconnect, device number 33 [ 497.143777][ T7] usblp0: removed [ 497.195925][T10575] tipc: Enabled bearer , priority 0 [ 497.283457][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 497.290983][ T126] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 497.352837][ T126] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 497.418645][T10576] device syzkaller0 entered promiscuous mode [ 497.430512][T10576] tipc: Resetting bearer [ 497.449907][T10572] tipc: Resetting bearer [ 497.459614][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 497.467749][T10577] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 497.499626][ T126] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 497.519153][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.530219][ T126] usb 1-1: config 0 descriptor?? [ 497.761290][ T126] usbhid 1-1:0.0: can't add hid device: -71 [ 497.771090][ T126] usbhid: probe of 1-1:0.0 failed with error -71 [ 497.802284][ T126] usb 1-1: USB disconnect, device number 37 [ 498.693526][ T126] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 498.893525][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 498.907179][ T126] usb 4-1: config 4 has an invalid interface number: 104 but max is 0 [ 498.917610][ T126] usb 4-1: config 4 has no interface number 0 [ 498.938442][ T126] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8 [ 498.953916][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.962283][ T126] usb 4-1: Product: syz [ 498.966693][ T126] usb 4-1: Manufacturer: syz [ 498.971407][ T126] usb 4-1: SerialNumber: syz [ 500.534885][T10572] tipc: Disabling bearer [ 500.558913][T10585] tipc: Enabled bearer , priority 0 [ 500.572114][T10586] device syzkaller0 entered promiscuous mode [ 500.621733][T10588] tipc: Resetting bearer [ 500.657533][T10582] tipc: Resetting bearer [ 500.665450][ T126] rtsx_usb: probe of 4-1:4.104 failed with error -22 [ 500.744789][ T126] usb 4-1: USB disconnect, device number 29 [ 500.828548][T10582] tipc: Disabling bearer [ 500.908949][T10613] blktrace: Concurrent blktraces are not allowed on sg0 [ 501.435585][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.442348][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.978609][ T4323] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 502.186528][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 502.195077][ T4323] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 502.215893][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 502.245999][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.262541][ T4323] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 502.273525][ T4323] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.286912][ T4323] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 502.298320][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.317440][ T4323] usb 4-1: config 0 descriptor?? [ 503.041471][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1797'. [ 503.108546][ T4323] usb 4-1: USB disconnect, device number 30 [ 503.339310][T10663] blktrace: Concurrent blktraces are not allowed on sg0 [ 503.670946][T10666] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 506.326192][T10715] tipc: Enabled bearer , priority 0 [ 506.364533][T10715] device syzkaller0 entered promiscuous mode [ 506.383653][ T4361] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 506.449203][T10715] tipc: Resetting bearer [ 506.489318][T10714] tipc: Resetting bearer [ 506.534448][T10714] tipc: Disabling bearer [ 506.593758][ T4361] usb 1-1: Using ep0 maxpacket: 8 [ 506.618890][ T4361] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 506.655906][ T4361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 506.686429][ T4361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.700859][ T4361] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 506.711031][ T4361] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.724438][ T4361] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 506.746774][ T4361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.771185][ T4361] usb 1-1: config 0 descriptor?? [ 507.063269][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1814'. [ 507.517950][ T4276] usb 1-1: USB disconnect, device number 38 [ 508.972886][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 510.833539][ T4320] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 511.024148][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 511.031410][ T4320] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 511.065436][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 511.093225][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.143554][ T4320] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.189248][ T4320] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.275080][ T4320] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 511.293636][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.322787][ T4320] usb 4-1: config 0 descriptor?? [ 511.543746][ T4276] usb 4-1: USB disconnect, device number 31 [ 511.743501][ T4320] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 511.938011][ T4320] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.990375][ T4320] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 512.039871][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'. [ 512.082633][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 512.107082][ T4320] usb 3-1: Product: syz [ 512.126503][ T4320] usb 3-1: Manufacturer: syz [ 512.142702][ T4320] usb 3-1: SerialNumber: syz [ 512.389499][ T4320] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 512.666164][ C1] usblp0: nonzero write bulk status received: -71 [ 512.674367][ T4320] usb 3-1: USB disconnect, device number 28 [ 512.699274][ T4320] usblp0: removed [ 514.899019][T10848] tipc: Enabled bearer , priority 0 [ 514.969699][T10848] device syzkaller0 entered promiscuous mode [ 515.158135][T10848] tipc: Resetting bearer [ 515.208819][T10846] tipc: Resetting bearer [ 515.258573][T10846] tipc: Disabling bearer [ 516.684529][T10889] tipc: Enabling of bearer rejected, failed to enable media [ 517.887127][T10905] device syzkaller0 entered promiscuous mode [ 521.223887][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'. [ 522.058188][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 522.634948][ T4320] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 522.833722][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 522.841015][ T4320] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 522.892869][ T4320] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 522.948991][ T4320] usb 4-1: config 0 interface 0 has no altsetting 0 [ 522.999235][ T4320] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 523.040056][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.108752][ T4320] usb 4-1: config 0 descriptor?? [ 523.364269][ T4320] usbhid 4-1:0.0: can't add hid device: -71 [ 523.370325][ T4320] usbhid: probe of 4-1:0.0 failed with error -71 [ 523.418861][ T4320] usb 4-1: USB disconnect, device number 32 [ 525.716798][ T33] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 525.933543][ T33] usb 5-1: Using ep0 maxpacket: 32 [ 525.940331][ T33] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 526.016153][ T33] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 526.083781][ T33] usb 5-1: config 0 interface 0 has no altsetting 0 [ 526.110381][ T33] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 526.149776][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.188981][ T33] usb 5-1: config 0 descriptor?? [ 526.414849][ T33] usbhid 5-1:0.0: can't add hid device: -71 [ 526.430965][ T33] usbhid: probe of 5-1:0.0 failed with error -71 [ 526.482991][ T33] usb 5-1: USB disconnect, device number 47 [ 527.640054][T11081] tipc: Enabled bearer , priority 0 [ 527.685423][T11080] tipc: Disabling bearer [ 528.139827][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1907'. [ 529.392056][T11115] blktrace: Concurrent blktraces are not allowed on sg0 [ 529.853515][ T4276] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 530.062791][ T4276] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.117638][ T4276] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 530.175780][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 530.204742][ T4276] usb 2-1: Product: syz [ 530.208979][ T4276] usb 2-1: Manufacturer: syz [ 530.265481][ T4276] usb 2-1: SerialNumber: syz [ 530.497829][ T4276] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 530.762518][ C1] usblp0: nonzero write bulk status received: -71 [ 530.772387][ T4276] usb 2-1: USB disconnect, device number 34 [ 530.828230][ T4276] usblp0: removed [ 532.349979][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1925'. [ 533.663548][T11176] blktrace: Concurrent blktraces are not allowed on sg0 [ 536.624447][ T4361] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 536.813823][ T4361] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 536.822043][ T4361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.832663][ T4361] usb 2-1: config 0 has no interface number 0 [ 536.840878][ T4361] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.874170][ T4361] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 536.888694][ T4361] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 536.897015][ T4361] usb 2-1: Product: syz [ 536.901344][ T4361] usb 2-1: SerialNumber: syz [ 536.924377][ T4361] usb 2-1: config 0 descriptor?? [ 536.948960][ T4361] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 537.209838][ T4361] usb 2-1: USB disconnect, device number 35 [ 537.771961][T11203] tipc: Enabled bearer , priority 0 [ 537.786769][T11204] device syzkaller0 entered promiscuous mode [ 537.870018][T11214] tipc: Resetting bearer [ 537.985845][T11214] tipc: Resetting bearer [ 537.991800][T11234] blktrace: Concurrent blktraces are not allowed on sg0 [ 538.088346][T11214] tipc: Disabling bearer [ 538.257403][T11240] tipc: Enabling of bearer rejected, failed to enable media [ 538.874395][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1945'. [ 539.073665][ T7] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 539.275392][ T7] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 539.321768][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.342097][ T7] usb 5-1: config 0 has no interface number 0 [ 539.384658][ T7] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.434936][ T7] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 539.471676][ T7] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 539.503514][ T7] usb 5-1: Product: syz [ 539.530786][ T7] usb 5-1: SerialNumber: syz [ 539.559767][ T7] usb 5-1: config 0 descriptor?? [ 539.608422][ T7] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 539.849938][ T7] usb 5-1: USB disconnect, device number 48 [ 542.159630][T11296] tipc: Enabled bearer , priority 0 [ 542.172914][T11297] device syzkaller0 entered promiscuous mode [ 542.191404][T11305] tipc: Resetting bearer [ 542.221867][T11293] tipc: Resetting bearer [ 542.294480][T11293] tipc: Disabling bearer [ 542.413118][T11315] blktrace: Concurrent blktraces are not allowed on sg0 [ 543.192281][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1964'. [ 545.066396][T11366] blktrace: Concurrent blktraces are not allowed on sg0 [ 546.455544][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1978'. [ 546.810763][T11390] blktrace: Concurrent blktraces are not allowed on sg0 [ 550.470325][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1993'. [ 550.779298][T11443] device syzkaller0 entered promiscuous mode [ 550.920815][T11449] device syzkaller0 entered promiscuous mode [ 552.091819][T11460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2003'. [ 553.646738][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 553.874249][T11471] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 555.624357][T11487] tipc: Enabling of bearer rejected, failed to enable media [ 556.238967][T11518] 8021q: adding VLAN 0 to HW filter on device bond4 [ 556.349444][T11523] device syzkaller0 entered promiscuous mode [ 559.117884][T11531] device wlan1 left promiscuous mode [ 559.124959][T11531] bridge0: port 3(wlan1) entered disabled state [ 559.135237][T11531] device bridge_slave_1 left promiscuous mode [ 559.141434][T11531] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.150808][T11531] device bridge_slave_0 left promiscuous mode [ 559.157148][T11531] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.271759][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'. [ 559.302163][T11562] tipc: Enabling of bearer rejected, failed to enable media [ 559.753133][T11577] 8021q: adding VLAN 0 to HW filter on device bond5 [ 559.833568][ T4276] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 559.904349][T11587] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 560.019275][T11589] device syzkaller0 entered promiscuous mode [ 560.030901][ T4276] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 560.048139][ T4276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.090171][ T4276] usb 5-1: config 0 has no interface number 0 [ 560.101466][ T4276] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.140222][ T4276] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 560.150803][ T4276] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 560.167820][ T4276] usb 5-1: Product: syz [ 560.172032][ T4276] usb 5-1: SerialNumber: syz [ 560.182142][ T4276] usb 5-1: config 0 descriptor?? [ 560.197746][ T4276] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 560.428473][ T4276] usb 5-1: USB disconnect, device number 49 [ 560.563899][T11603] tipc: Enabling of bearer rejected, failed to enable media [ 560.674627][T11609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.012131][T11623] device bridge_slave_1 left promiscuous mode [ 561.033039][T11623] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.060184][T11623] device bridge_slave_0 left promiscuous mode [ 561.105614][T11623] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.302877][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 561.977318][T11659] blktrace: Concurrent blktraces are not allowed on sg0 [ 562.063453][ T33] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 562.253659][ T33] usb 5-1: Using ep0 maxpacket: 32 [ 562.260938][ T33] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 562.270341][T11670] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2060'. [ 562.289666][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.300654][T11670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2060'. [ 562.323210][ T33] usb 5-1: config 0 descriptor?? [ 562.408477][T11676] device syzkaller0 entered promiscuous mode [ 562.463712][ T4320] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 562.471481][ T4276] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 562.494440][T11678] tipc: Enabling of bearer rejected, failed to enable media [ 562.552787][ T33] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 562.572100][ T33] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 562.587688][ T33] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 562.597642][ T33] usb 5-1: media controller created [ 562.650965][ T33] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.666013][ T4320] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.679183][ T4276] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 562.696603][ T4276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.708224][ T4276] usb 2-1: config 0 has no interface number 0 [ 562.717558][ T4276] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.732004][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 562.741578][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 562.751997][ T4320] usb 4-1: Product: syz [ 562.757026][ T4320] usb 4-1: Manufacturer: syz [ 562.764905][ T33] az6027: usb out operation failed. (-71) [ 562.773099][ T4276] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 562.784358][ T33] az6027: usb out operation failed. (-71) [ 562.790479][ T4320] usb 4-1: SerialNumber: syz [ 562.796255][ T33] stb0899_attach: Driver disabled by Kconfig [ 562.802296][ T33] az6027: no front-end attached [ 562.802296][ T33] [ 562.818310][ T4276] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 562.831028][ T4276] usb 2-1: Product: syz [ 562.842302][ T33] az6027: usb out operation failed. (-71) [ 562.848620][ T4276] usb 2-1: SerialNumber: syz [ 562.854732][ T33] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 562.866643][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.873135][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.883070][ T4276] usb 2-1: config 0 descriptor?? [ 562.889586][ T33] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 562.905177][ T4276] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 562.920338][ T33] dvb-usb: schedule remote query interval to 400 msecs. [ 562.928096][ T33] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 562.940569][ T33] usb 5-1: USB disconnect, device number 50 [ 563.028796][ T33] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 563.045022][ T4320] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 563.109843][ T4320] usb 2-1: USB disconnect, device number 36 [ 563.300770][ C1] usblp0: nonzero write bulk status received: -71 [ 563.305869][ T4321] usb 4-1: USB disconnect, device number 33 [ 563.336244][ T4321] usblp0: removed [ 563.765890][T11701] blktrace: Concurrent blktraces are not allowed on sg0 [ 564.031327][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 564.040673][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 564.065838][T11713] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.075261][T11713] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.084159][T11713] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.092909][T11713] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.112933][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 564.113338][ C0] hrtimer: interrupt took 260127 ns [ 564.129965][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 565.713456][ T4321] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 565.913563][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 565.928406][ T4321] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 565.937715][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.949118][ T4321] usb 4-1: config 0 descriptor?? [ 566.161141][ T4321] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 566.169813][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.181018][ T4321] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 566.188489][ T4321] usb 4-1: media controller created [ 566.205016][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.368773][ T4321] az6027: usb out operation failed. (-71) [ 566.375922][ T4321] az6027: usb out operation failed. (-71) [ 566.381694][ T4321] stb0899_attach: Driver disabled by Kconfig [ 566.389337][ T4321] az6027: no front-end attached [ 566.389337][ T4321] [ 566.396820][ T4321] az6027: usb out operation failed. (-71) [ 566.403002][ T4321] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 566.412021][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 566.428240][ T4321] dvb-usb: schedule remote query interval to 400 msecs. [ 566.435293][ T4321] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 566.449572][ T4321] usb 4-1: USB disconnect, device number 34 [ 566.476534][T11691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.586240][ T4321] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 566.946289][T11747] blktrace: Concurrent blktraces are not allowed on sg0 [ 566.984106][T11737] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 567.195478][T11737] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 567.214602][T11737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.240710][T11737] usb 3-1: config 0 has no interface number 0 [ 567.264521][T11737] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.325763][T11737] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 567.350249][T11737] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 567.367048][T11737] usb 3-1: Product: syz [ 567.381499][T11737] usb 3-1: SerialNumber: syz [ 567.399351][T11737] usb 3-1: config 0 descriptor?? [ 567.437445][T11737] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 567.638204][T11737] usb 3-1: USB disconnect, device number 29 [ 567.784848][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2079'. [ 568.525267][T11752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2086'. [ 569.871320][T11798] blktrace: Concurrent blktraces are not allowed on sg0 [ 570.029536][ T4320] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 570.130718][T11802] device syzkaller0 entered promiscuous mode [ 570.150635][T11804] device syzkaller0 entered promiscuous mode [ 570.233593][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 570.243122][ T4320] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 570.260030][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.292851][ T4320] usb 2-1: config 0 descriptor?? [ 570.511126][ T4320] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 570.544159][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.583129][ T4320] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 570.633425][ T4320] usb 2-1: media controller created [ 570.679874][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.752929][ T4320] az6027: usb out operation failed. (-71) [ 570.769605][ T4320] az6027: usb out operation failed. (-71) [ 570.775641][ T4320] stb0899_attach: Driver disabled by Kconfig [ 570.790450][ T4320] az6027: no front-end attached [ 570.790450][ T4320] [ 570.801368][ T4320] az6027: usb out operation failed. (-71) [ 570.811872][ T4320] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 570.845145][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 570.870309][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 570.892688][ T4320] dvb-usb: schedule remote query interval to 400 msecs. [ 570.900746][ T4320] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 570.947050][ T4320] usb 2-1: USB disconnect, device number 37 [ 571.040148][ T4320] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 571.776307][T11837] blktrace: Concurrent blktraces are not allowed on sg0 [ 572.360296][T11784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.737117][T11849] device syzkaller0 entered promiscuous mode [ 572.743522][ T33] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 572.950322][ T33] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.986821][ T33] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 573.010946][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 573.040093][ T33] usb 2-1: Product: syz [ 573.058872][ T33] usb 2-1: Manufacturer: syz [ 573.070679][ T33] usb 2-1: SerialNumber: syz [ 573.375949][ T33] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 573.649616][ C0] usblp0: nonzero write bulk status received: -71 [ 573.662520][ T4321] usb 2-1: USB disconnect, device number 38 [ 573.680493][ T4321] usblp0: removed [ 573.975215][T11842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2112'. [ 574.511816][T11872] tipc: Enabled bearer , priority 0 [ 574.523457][ T4323] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 574.559504][T11867] tipc: Disabling bearer [ 574.683478][ T4320] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 574.713708][ T4323] usb 4-1: Using ep0 maxpacket: 32 [ 574.725147][ T4323] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 574.750352][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.780818][ T4323] usb 4-1: config 0 descriptor?? [ 574.875225][ T4320] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 574.893488][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.913468][ T4320] usb 3-1: config 0 has no interface number 0 [ 574.919631][ T4320] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.972255][ T4320] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 574.996633][ T4323] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 575.021618][ T4323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 575.051611][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 575.063897][ T4323] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 575.071127][ T4323] usb 4-1: media controller created [ 575.098347][ T4320] usb 3-1: Product: syz [ 575.102570][ T4320] usb 3-1: SerialNumber: syz [ 575.148600][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 575.156780][ T4320] usb 3-1: config 0 descriptor?? [ 575.173229][ T4320] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 575.227249][ T4323] az6027: usb out operation failed. (-71) [ 575.241131][ T4323] az6027: usb out operation failed. (-71) [ 575.258509][ T4323] stb0899_attach: Driver disabled by Kconfig [ 575.324904][ T4323] az6027: no front-end attached [ 575.324904][ T4323] [ 575.346274][ T4323] az6027: usb out operation failed. (-71) [ 575.355760][ T4323] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 575.396181][ T4323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 575.454013][T11737] usb 3-1: USB disconnect, device number 30 [ 575.473118][ T4323] dvb-usb: schedule remote query interval to 400 msecs. [ 575.509262][ T4323] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 575.561936][ T4323] usb 4-1: USB disconnect, device number 35 [ 575.659501][ T4323] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 576.044049][T11893] device syzkaller0 entered promiscuous mode [ 577.380877][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2130'. [ 577.396211][T11913] device syzkaller0 entered promiscuous mode [ 578.230581][T11880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.757603][T11931] device syzkaller0 entered promiscuous mode [ 580.626577][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'. [ 581.123673][T11972] device syzkaller0 entered promiscuous mode [ 582.174004][ T4321] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 582.395107][ T4321] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.425153][ T4321] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 582.453222][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 582.481076][ T4321] usb 4-1: Product: syz [ 582.496644][ T4321] usb 4-1: Manufacturer: syz [ 582.515243][ T4321] usb 4-1: SerialNumber: syz [ 582.741548][ T4321] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 583.010392][ C0] usblp0: nonzero write bulk status received: -71 [ 583.020356][ T4320] usb 4-1: USB disconnect, device number 36 [ 583.041649][ T4320] usblp0: removed [ 583.073751][ T4321] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 583.298764][ T4321] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 583.308447][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.319898][ T4321] usb 1-1: config 0 has no interface number 0 [ 583.327145][ T4321] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.342816][ T4321] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 583.356173][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 583.365968][ T4321] usb 1-1: Product: syz [ 583.370300][ T4321] usb 1-1: SerialNumber: syz [ 583.386836][ T4321] usb 1-1: config 0 descriptor?? [ 583.407305][ T4321] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 583.903204][T11966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.340414][T12008] device syzkaller0 entered promiscuous mode [ 585.812963][T11737] usb 1-1: USB disconnect, device number 39 [ 586.479083][ T33] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 586.676819][ T33] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.711617][ T33] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 586.741483][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 586.751322][ T33] usb 1-1: Product: syz [ 586.756155][ T33] usb 1-1: Manufacturer: syz [ 586.760795][ T33] usb 1-1: SerialNumber: syz [ 586.911086][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 586.978224][ T33] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 587.238698][ C0] usblp0: nonzero write bulk status received: -71 [ 587.245688][ T4323] usb 1-1: USB disconnect, device number 40 [ 587.256162][ T4323] usblp0: removed [ 587.984397][T12020] device ip6gre2 entered promiscuous mode [ 589.153412][ T4321] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 589.352002][ T4321] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 589.377620][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.434651][ T4321] usb 5-1: config 0 has no interface number 0 [ 589.473417][ T4321] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.509020][ T4321] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 589.550555][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 589.591565][ T4321] usb 5-1: Product: syz [ 589.609795][ T4321] usb 5-1: SerialNumber: syz [ 589.630981][ T4321] usb 5-1: config 0 descriptor?? [ 589.637477][T12077] device ip6gre2 entered promiscuous mode [ 589.663235][ T4321] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 589.838948][T12076] device syzkaller0 entered promiscuous mode [ 591.114381][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2185'. [ 591.925883][ T4321] usb 5-1: USB disconnect, device number 51 [ 592.080097][ T33] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 592.307856][ T33] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.354894][ T33] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 592.377405][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 592.426621][ T33] usb 1-1: Product: syz [ 592.446897][ T33] usb 1-1: Manufacturer: syz [ 592.451556][ T33] usb 1-1: SerialNumber: syz [ 592.711102][ T33] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 592.967613][ C1] usblp0: nonzero write bulk status received: -71 [ 592.983543][ T4323] usb 1-1: USB disconnect, device number 41 [ 593.016508][ T4323] usblp0: removed [ 594.905724][T12121] tipc: Enabled bearer , priority 0 [ 594.965718][T12116] device syzkaller0 entered promiscuous mode [ 595.234271][T12116] tipc: Resetting bearer [ 596.634740][T12169] block nbd0: not configured, cannot reconfigure [ 598.542795][T12116] tipc: Disabling bearer [ 598.568095][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 599.069190][T12198] device syzkaller0 entered promiscuous mode [ 599.303438][ T4276] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 599.516028][ T4276] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.558306][ T4276] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 599.592571][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 599.619666][ T4276] usb 2-1: Product: syz [ 599.631223][ T4276] usb 2-1: Manufacturer: syz [ 599.650051][ T4276] usb 2-1: SerialNumber: syz [ 599.902548][ T4276] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 599.988723][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'. [ 600.172177][ C1] usblp0: nonzero write bulk status received: -71 [ 600.179422][ T4276] usb 2-1: USB disconnect, device number 39 [ 600.208833][ T4276] usblp0: removed [ 603.125480][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 603.314493][T12217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.833508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 603.917255][T12271] device syzkaller0 entered promiscuous mode [ 606.373678][ T4321] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 606.575283][ T4321] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.621047][ T4321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 606.648348][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 606.676967][ T4321] usb 3-1: Product: syz [ 606.690433][ T4321] usb 3-1: Manufacturer: syz [ 606.706574][ T4321] usb 3-1: SerialNumber: syz [ 606.940278][ T4321] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 607.198911][ C1] usblp0: nonzero write bulk status received: -71 [ 607.207556][ T4321] usb 3-1: USB disconnect, device number 31 [ 607.230968][ T4321] usblp0: removed [ 609.492726][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2245'. [ 609.930514][T12313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.354243][T12365] device syzkaller0 entered promiscuous mode [ 615.479119][T12448] raw_sendmsg: syz.4.2267 forgot to set AF_INET. Fix it! [ 615.931870][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2266'. [ 619.229318][T12491] blktrace: Concurrent blktraces are not allowed on sg0 [ 619.266941][T12494] netlink: 'syz.2.2278': attribute type 1 has an invalid length. [ 619.282041][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2278'. [ 619.305513][T12494] netlink: 'syz.2.2278': attribute type 1 has an invalid length. [ 619.327950][T12494] tipc: Failed to remove unknown binding: 66,0,0/0:4029809559/4029809560 [ 619.360226][T12494] tipc: Failed to remove unknown binding: 66,0,0/0:4029809559/4029809560 [ 620.313488][ T4320] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 620.550374][ T4320] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.567153][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2281'. [ 620.591989][ T4320] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 620.646263][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 620.688767][ T4320] usb 3-1: Product: syz [ 620.710493][ T4320] usb 3-1: Manufacturer: syz [ 620.736508][ T4320] usb 3-1: SerialNumber: syz [ 620.987066][ T4320] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 621.338329][ C1] usblp0: nonzero write bulk status received: -71 [ 621.345395][ T4276] usb 3-1: USB disconnect, device number 32 [ 621.352991][ T4276] usblp0: removed [ 624.309639][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.316241][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.589968][T12592] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2308'. [ 624.609551][T12557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.583685][ T4276] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 625.797911][ T4276] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.832895][ T4276] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 625.859049][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 625.899851][ T4276] usb 1-1: Product: syz [ 625.908755][ T4276] usb 1-1: Manufacturer: syz [ 625.933534][ T4276] usb 1-1: SerialNumber: syz [ 626.179290][ T4276] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 626.481924][ C0] usblp0: nonzero write bulk status received: -71 [ 626.532329][ T33] usb 1-1: USB disconnect, device number 42 [ 626.582902][ T33] usblp0: removed [ 628.163030][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2333'. [ 628.364408][T12658] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2330'. [ 628.538540][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2335'. [ 628.573378][T12670] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.582175][T12670] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.591143][T12670] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.599958][T12670] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.758769][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2335'. [ 629.693400][ T4321] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 629.705365][T12690] device syzkaller0 entered promiscuous mode [ 629.874815][T12677] Set syz1 is full, maxelem 6117 reached [ 629.895263][ T4321] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.933654][ T4321] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 629.993758][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 630.020613][ T4321] usb 4-1: Product: syz [ 630.042151][ T4321] usb 4-1: Manufacturer: syz [ 630.057130][ T4321] usb 4-1: SerialNumber: syz [ 630.290761][ T4321] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 630.541258][ C0] usblp0: nonzero write bulk status received: -71 [ 630.548311][ T4320] usb 4-1: USB disconnect, device number 37 [ 630.577618][ T4320] usblp0: removed [ 632.667009][T12700] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 632.681934][T12700] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 632.702736][T12700] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 632.913651][T12731] netlink: 'syz.2.2353': attribute type 1 has an invalid length. [ 632.943116][T12731] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2353'. [ 633.067075][T12735] xt_cgroup: invalid path, errno=-2 [ 633.191734][T12735] device vxcan1 entered promiscuous mode [ 633.315372][T12746] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2356'. [ 633.390981][T12745] device syzkaller0 entered promiscuous mode [ 633.429749][T12748] device syzkaller0 entered promiscuous mode [ 633.443595][ T4320] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 633.648483][ T4320] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.701237][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 633.796491][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 633.870598][ T4320] usb 4-1: Product: syz [ 633.910504][ T4320] usb 4-1: Manufacturer: syz [ 633.939906][ T4320] usb 4-1: SerialNumber: syz [ 634.115649][T12757] device syzkaller0 entered promiscuous mode [ 634.157253][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'. [ 634.184618][ T4320] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 634.449766][ C1] usblp0: nonzero write bulk status received: -71 [ 634.463793][ T4276] usb 4-1: USB disconnect, device number 38 [ 634.504168][ T4276] usblp0: removed [ 637.459119][T12780] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 637.469050][T12780] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 637.478816][T12780] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 637.782884][T12808] device macsec1 entered promiscuous mode [ 637.850512][T12811] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2373'. [ 637.874267][T12813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2376'. [ 638.601818][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2375'. [ 638.645716][T12833] device syzkaller0 entered promiscuous mode [ 641.670896][T12843] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 641.680839][T12843] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 641.690923][T12843] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 641.710153][T12855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2388'. [ 642.104634][T12891] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2394'. [ 642.129695][T12888] using random self ethernet address [ 642.150782][T12888] using random host ethernet address [ 642.342983][T12888] usb0: HOST MAC 9e:11:86:3a:54:58 [ 642.361223][T12888] usb0: MAC c6:7a:0d:94:98:c1 [ 642.673401][ T4276] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 642.764623][T12917] tipc: Enabled bearer , priority 0 [ 642.876237][ T4276] usb 1-1: Dual-Role OTG device on HNP port [ 642.909179][ T4276] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 642.933505][ T4276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.963089][T12917] device syzkaller0 entered promiscuous mode [ 643.013785][ T4276] cdc_ncm 1-1:1.0: MAC-Address: 9e:11:86:3a:54:58 [ 643.024454][T12917] tipc: Resetting bearer [ 643.033627][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 643.091814][ T4276] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 9e:11:86:3a:54:58 [ 643.103988][T12913] tipc: Resetting bearer [ 645.550484][T12913] tipc: Disabling bearer [ 645.567100][T12932] device macsec1 entered promiscuous mode [ 645.632368][T12937] device syzkaller0 entered promiscuous mode [ 646.191702][T12979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2415'. [ 647.379259][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2418'. [ 648.498372][ T4361] tipc: Node number set to 708590308 [ 648.521511][T12972] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 648.532173][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 648.554402][T12972] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 648.569474][T12972] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 648.621959][T12992] device syzkaller0 entered promiscuous mode [ 649.095978][T13014] tipc: Enabled bearer , priority 0 [ 649.326791][T13018] device syzkaller0 entered promiscuous mode [ 649.354467][T13018] tipc: Resetting bearer [ 649.410008][T13008] tipc: Resetting bearer [ 650.117912][T13041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2428'. [ 650.823422][ T4361] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 651.058996][ T4361] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.108791][ T4361] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 651.145836][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 651.181903][ T4361] usb 4-1: Product: syz [ 651.196299][ T4361] usb 4-1: Manufacturer: syz [ 651.217728][ T4361] usb 4-1: SerialNumber: syz [ 651.452157][ T4361] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 651.750362][ C1] usblp0: nonzero write bulk status received: -71 [ 651.754190][T11737] usb 4-1: USB disconnect, device number 39 [ 651.777166][T11737] usblp0: removed [ 653.293497][T13008] tipc: Disabling bearer [ 653.301316][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'. [ 653.321514][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 653.753728][T13063] device syzkaller0 entered promiscuous mode [ 653.916846][T13068] device macsec1 entered promiscuous mode [ 653.974149][T13072] device syzkaller0 entered promiscuous mode [ 654.510721][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 654.528724][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2444'. [ 654.763555][T13100] tipc: Enabled bearer , priority 0 [ 655.125300][T13100] device syzkaller0 entered promiscuous mode [ 655.183055][T13100] tipc: Resetting bearer [ 655.236273][T13097] tipc: Resetting bearer [ 655.473444][ T4323] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 655.692931][ T4323] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.729869][ T4323] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 655.757928][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 655.791352][ T4323] usb 4-1: Product: syz [ 655.803390][ T4323] usb 4-1: Manufacturer: syz [ 655.813596][ T4323] usb 4-1: SerialNumber: syz [ 656.069216][ T4323] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 656.342249][ C0] usblp0: nonzero write bulk status received: -71 [ 656.349917][ T4323] usb 4-1: USB disconnect, device number 40 [ 656.370423][T13112] usblp0: removed [ 657.355344][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2452'. [ 659.901108][T13097] tipc: Disabling bearer [ 659.965332][T13131] device syzkaller0 entered promiscuous mode [ 660.435613][T13180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2458'. [ 660.929081][ T4323] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 661.166203][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.214202][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.249607][ T4323] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 661.289851][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.361119][ T4323] usb 4-1: config 0 descriptor?? [ 661.483440][ T4321] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 661.705173][ T4321] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.764228][ T4321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 661.801216][ T4323] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 661.824553][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 661.832720][ T4321] usb 2-1: Product: syz [ 661.853446][ T4323] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 661.869084][ T4323] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 661.879246][ T4321] usb 2-1: Manufacturer: syz [ 661.893368][ T4321] usb 2-1: SerialNumber: syz [ 661.903689][ T4323] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 661.911234][ T4323] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 662.021033][ T4323] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 662.178693][ T4321] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 662.215931][ T4323] playstation 0003:054C:0DF2.000F: Invalid reportID received, expected 9 got 0 [ 662.278061][ T4323] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -22 [ 662.379091][ T4323] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 662.457083][ C1] usblp0: nonzero write bulk status received: -71 [ 662.466316][ T4324] usb 2-1: USB disconnect, device number 40 [ 662.483363][ T4323] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 662.501427][ T4324] usblp0: removed [ 662.628321][ T4323] playstation: probe of 0003:054C:0DF2.000F failed with error -22 [ 662.701314][ T4323] usb 4-1: USB disconnect, device number 41 [ 663.116121][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2464'. [ 667.074667][T13269] Set syz1 is full, maxelem 6117 reached [ 668.033232][T13271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2473'. [ 668.114856][ T4323] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 668.281858][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2477'. [ 668.306028][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 668.321885][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.378294][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.436269][ T4323] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 668.483351][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.516124][ T4323] usb 5-1: config 0 descriptor?? [ 668.571113][ T4323] hub 5-1:0.0: USB hub found [ 668.728722][ T4323] hub 5-1:0.0: 1 port detected [ 669.333201][ T4323] hub 5-1:0.0: activate --> -90 [ 669.535307][ T4323] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 669.542862][ T4321] usb 5-1: USB disconnect, device number 52 [ 670.403450][ T4361] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 670.552317][T13310] device syzkaller0 entered promiscuous mode [ 670.622361][ T4361] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.761529][ T4361] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 670.856617][ T4361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 671.023583][ T4361] usb 3-1: Product: syz [ 671.027823][ T4361] usb 3-1: Manufacturer: syz [ 671.142371][ T4361] usb 3-1: SerialNumber: syz [ 671.481354][ T4361] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 671.793704][ C0] usblp0: nonzero write bulk status received: -71 [ 671.808309][ T4361] usb 3-1: USB disconnect, device number 33 [ 671.819180][ T4361] usblp0: removed [ 672.148446][T13343] tipc: Enabled bearer , priority 0 [ 672.315749][T13343] device syzkaller0 entered promiscuous mode [ 672.322724][T13343] tipc: Resetting bearer [ 672.353767][T13340] tipc: Resetting bearer [ 673.287344][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2490'. [ 674.140493][T13376] blktrace: Concurrent blktraces are not allowed on sg0 [ 674.630736][ T4361] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 674.835549][ T4361] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 674.858882][ T4361] usb 5-1: can't read configurations, error -61 [ 675.013682][ T4361] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 675.227196][ T4361] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 675.243876][ T4361] usb 5-1: can't read configurations, error -61 [ 675.260695][ T4361] usb usb5-port1: attempt power cycle [ 675.683567][ T4361] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 675.737175][ T4361] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 675.753441][ T4361] usb 5-1: can't read configurations, error -61 [ 675.926892][ T4361] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 675.967499][ T4361] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 675.981090][ T4361] usb 5-1: can't read configurations, error -61 [ 675.988039][ T4361] usb usb5-port1: unable to enumerate USB device [ 676.130394][T13340] tipc: Disabling bearer [ 676.212151][T13394] device syzkaller0 entered promiscuous mode [ 676.777484][T13417] blktrace: Concurrent blktraces are not allowed on sg0 [ 679.226515][T13448] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 679.261512][T13448] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 679.303135][T13448] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 679.504692][T13457] tipc: Enabled bearer , priority 0 [ 679.726138][T13457] device syzkaller0 entered promiscuous mode [ 679.754143][T13457] tipc: Resetting bearer [ 679.794457][T13452] tipc: Resetting bearer [ 679.832554][T13471] blktrace: Concurrent blktraces are not allowed on sg0 [ 681.570761][T13484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2519'. [ 684.100941][T13452] tipc: Disabling bearer [ 684.113791][T13505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2522'. [ 684.188761][T13514] device syzkaller0 entered promiscuous mode [ 684.893502][ T4323] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 685.109431][ T4323] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 685.180134][ T4323] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 685.221101][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 685.248778][ T4323] usb 5-1: Product: syz [ 685.253165][ T4323] usb 5-1: Manufacturer: syz [ 685.268130][ T4323] usb 5-1: SerialNumber: syz [ 685.511442][ T4323] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 685.750175][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.756652][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.768560][ C0] usblp0: nonzero write bulk status received: -71 [ 685.778265][ T4320] usb 5-1: USB disconnect, device number 57 [ 685.825981][ T4320] usblp0: removed [ 689.409364][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2538'. [ 690.669323][T13601] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2535'. [ 690.923470][T13656] blktrace: Concurrent blktraces are not allowed on sg0 [ 694.647028][T13729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2552'. [ 695.413507][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2556'. [ 695.741331][T13761] device syzkaller1 entered promiscuous mode [ 697.218928][T13759] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2560'. [ 699.910056][T13768] device syzkaller0 entered promiscuous mode [ 701.042896][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2572'. [ 702.419906][T13855] device syzkaller0 entered promiscuous mode [ 703.104940][T13841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2577'. [ 705.280556][T13851] device syzkaller0 entered promiscuous mode [ 708.270511][T13909] device syzkaller0 entered promiscuous mode [ 709.250947][T13914] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2594'. [ 709.737614][T13944] device syzkaller0 entered promiscuous mode [ 712.971902][T13989] device syzkaller0 entered promiscuous mode [ 714.093648][T14020] device syzkaller0 entered promiscuous mode [ 714.143046][T14023] device syzkaller0 entered promiscuous mode [ 715.209112][T14006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2620'. [ 717.590983][T14037] device syzkaller0 entered promiscuous mode [ 722.319691][T14094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2637'. [ 724.085119][T14097] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2639'. [ 724.109835][T14117] device macsec1 entered promiscuous mode [ 724.171183][T14120] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 724.189160][T14120] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 724.200620][T14120] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 725.153072][T14158] device syzkaller0 entered promiscuous mode [ 725.474640][T14161] device syzkaller0 entered promiscuous mode [ 725.625985][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'. [ 726.856756][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2659'. [ 730.967581][T14167] device macsec1 entered promiscuous mode [ 731.032459][T14176] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 731.052562][T14176] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 731.079657][T14176] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 731.540976][T14219] device syzkaller0 entered promiscuous mode [ 733.705786][T14228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2671'. [ 736.117088][T14251] device syzkaller0 entered promiscuous mode [ 736.573516][ T4361] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 736.773530][ T4361] usb 3-1: Using ep0 maxpacket: 32 [ 736.797393][ T4361] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 736.805893][ T4361] usb 3-1: config 0 has no interface number 0 [ 736.812114][ T4361] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 736.822915][ T4361] usb 3-1: config 0 interface 184 has no altsetting 0 [ 736.832259][ T4361] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 736.842384][ T4361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.854234][ T4361] usb 3-1: Product: syz [ 736.858455][ T4361] usb 3-1: Manufacturer: syz [ 736.863073][ T4361] usb 3-1: SerialNumber: syz [ 736.892294][ T4361] usb 3-1: config 0 descriptor?? [ 736.905652][T14291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 736.917316][ T4361] smsc75xx v1.0.0 [ 737.128482][T14291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 737.542788][ T4361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 737.559583][ T4361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 739.209272][ T4361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 739.231880][ T4361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 739.250962][ T4361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 739.270357][ T4361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 739.281354][ T4361] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 739.319897][ T4361] usb 3-1: USB disconnect, device number 34 [ 739.413423][ T4320] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 739.645173][ T4320] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.681532][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 739.728591][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 739.775148][ T4320] usb 4-1: Product: syz [ 739.807457][ T4320] usb 4-1: Manufacturer: syz [ 739.833396][ T4320] usb 4-1: SerialNumber: syz [ 740.068535][ T4320] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 740.336474][ C1] usblp0: nonzero write bulk status received: -71 [ 740.345243][ T4361] usb 4-1: USB disconnect, device number 42 [ 740.380857][ T4361] usblp0: removed [ 740.730742][T14344] device syzkaller0 entered promiscuous mode [ 741.613597][ T4361] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 741.806330][ T4361] usb 2-1: Using ep0 maxpacket: 8 [ 741.824737][ T4361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 741.839066][ T4361] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 741.848498][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.858941][ T4361] usb 2-1: Product: syz [ 741.863150][ T4361] usb 2-1: Manufacturer: syz [ 741.868107][ T4361] usb 2-1: SerialNumber: syz [ 742.721670][ T4361] usb 2-1: MIDIStreaming interface descriptor not found [ 742.946923][ T4361] usb 2-1: USB disconnect, device number 41 [ 743.581174][T14389] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2704'. [ 744.954592][T14367] device syzkaller0 entered promiscuous mode [ 747.192009][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.198596][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.966916][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2711'. [ 748.251444][T14438] device syzkaller0 entered promiscuous mode [ 748.596621][T14446] device syzkaller0 entered promiscuous mode [ 748.752043][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.822470][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.897274][T14444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2716'. [ 750.027975][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2718'. [ 753.983385][T14508] netlink: 'syz.3.2729': attribute type 1 has an invalid length. [ 754.238051][T14523] device syzkaller0 entered promiscuous mode [ 756.054605][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'. [ 756.118717][T14565] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 756.153155][ T26] audit: type=1800 audit(1785541122.862:3): pid=14562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2742" name="UDC" dev="configfs" ino=81209 res=0 errno=0 [ 756.224941][T14565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.285394][T14572] device syzkaller0 entered promiscuous mode [ 756.798398][T14582] device syzkaller0 entered promiscuous mode [ 757.859938][T14608] netlink: 'syz.0.2756': attribute type 1 has an invalid length. [ 757.891541][T14608] 8021q: adding VLAN 0 to HW filter on device bond4 [ 757.948124][T14611] device syzkaller0 entered promiscuous mode [ 757.993438][ T4276] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 758.189220][ T4276] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.210714][ T4276] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 758.235806][ T4276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 758.254669][ T4276] usb 5-1: Product: syz [ 758.258936][ T4276] usb 5-1: Manufacturer: syz [ 758.283283][ T4276] usb 5-1: SerialNumber: syz [ 758.508775][ T4276] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 758.535915][T14625] device syzkaller0 entered promiscuous mode [ 758.761543][ C1] usblp0: nonzero write bulk status received: -71 [ 758.764435][ T4361] usb 5-1: USB disconnect, device number 58 [ 758.840039][ T4361] usblp0: removed [ 758.989383][T14653] futex_wake_op: syz.0.2766 tries to shift op by 144; fix this program [ 759.656003][T14676] netlink: 'syz.3.2768': attribute type 1 has an invalid length. [ 759.760168][T14676] 8021q: adding VLAN 0 to HW filter on device bond6 [ 759.825039][T14681] tipc: Enabled bearer , priority 0 [ 760.001600][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 760.102167][T14681] device syzkaller0 entered promiscuous mode [ 760.148369][T14681] tipc: Resetting bearer [ 760.211981][T14677] tipc: Resetting bearer [ 762.315283][T14702] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2774'. [ 764.414314][T14677] tipc: Disabling bearer [ 765.585856][ T4361] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 765.801258][ T4361] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.822057][ T4361] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 765.832707][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 765.844835][ T4361] usb 2-1: Product: syz [ 765.849047][ T4361] usb 2-1: Manufacturer: syz [ 765.854253][ T4361] usb 2-1: SerialNumber: syz [ 766.084220][ T4361] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 766.354141][ C0] usblp0: nonzero write bulk status received: -71 [ 766.363721][ T4361] usb 2-1: USB disconnect, device number 42 [ 766.400427][ T4361] usblp0: removed [ 767.050360][T14720] device syzkaller0 entered promiscuous mode [ 767.062864][T14743] netlink: 'syz.3.2781': attribute type 1 has an invalid length. [ 767.393952][T14761] ======================================================= [ 767.393952][T14761] WARNING: The mand mount option has been deprecated and [ 767.393952][T14761] and is ignored by this kernel. Remove the mand [ 767.393952][T14761] option from the mount to silence this warning. [ 767.393952][T14761] ======================================================= [ 767.639799][T14764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2786'. [ 770.286454][T14752] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2783'. [ 770.323347][T14771] tipc: Enabling of bearer rejected, failed to enable media [ 770.333831][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2790'. [ 770.688352][T14796] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 770.757489][T14796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 770.884644][T14804] bond1: (slave gretap1): making interface the new active one [ 770.921579][T14804] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 770.958809][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 770.983882][ T33] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 771.195491][ T33] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.222277][ T33] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 771.245312][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 771.263381][ T33] usb 5-1: Product: syz [ 771.276575][ T33] usb 5-1: Manufacturer: syz [ 771.294888][ T33] usb 5-1: SerialNumber: syz [ 771.353543][ T4361] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 771.534690][ T33] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 771.557788][ T4361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.591472][ T4361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.620147][ T4361] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 771.626465][T14818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2800'. [ 771.635197][ T4361] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.653438][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.663874][ T4361] usb 4-1: config 0 descriptor?? [ 771.794998][ C1] usblp0: nonzero write bulk status received: -71 [ 771.802278][ T33] usb 5-1: USB disconnect, device number 59 [ 771.834159][ T33] usblp0: removed [ 771.953910][T14827] device syzkaller0 entered promiscuous mode [ 772.084923][ T4361] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 772.106688][ T4361] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 772.190699][ T4361] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 772.468025][ T4320] usb 4-1: USB disconnect, device number 43 [ 772.554283][T14830] fido_id[14830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 772.589749][T14834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2803'. [ 772.847327][T14840] tipc: Enabled bearer , priority 0 [ 772.955521][T14840] device syzkaller0 entered promiscuous mode [ 772.969048][T14840] tipc: Resetting bearer [ 773.037815][T14836] tipc: Resetting bearer [ 777.004638][T14836] tipc: Disabling bearer [ 777.025078][T14870] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 777.034611][T14870] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 777.046654][T14870] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 777.092981][T14880] device syzkaller0 entered promiscuous mode [ 777.283385][T14894] netlink: 'syz.4.2817': attribute type 49 has an invalid length. [ 780.742544][T14902] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2819'. [ 780.856942][T14931] device syzkaller0 entered promiscuous mode [ 780.994027][T14947] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 781.942597][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'. [ 783.856112][ T26] audit: type=1800 audit(1785541150.562:4): pid=14974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2834" name="UDC" dev="configfs" ino=83238 res=0 errno=0 [ 784.450496][T14945] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 784.466839][T14945] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 784.483382][T14945] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 784.732021][T14985] device syzkaller0 entered promiscuous mode [ 784.752448][T14987] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2838'. [ 784.807410][T14986] kvm: pic: level sensitive irq not supported [ 785.123405][ T33] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 785.345417][ T33] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.371729][ T33] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 785.393610][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 785.413004][ T33] usb 4-1: Product: syz [ 785.423183][ T33] usb 4-1: Manufacturer: syz [ 785.434928][ T33] usb 4-1: SerialNumber: syz [ 785.498079][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 785.657809][ T33] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 785.909323][ C1] usblp0: nonzero write bulk status received: -71 [ 785.920917][ T7] usb 4-1: USB disconnect, device number 44 [ 785.950397][ T7] usblp0: removed [ 786.216159][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 786.295750][T15020] device syzkaller0 entered promiscuous mode [ 786.649632][T15027] device syzkaller0 entered promiscuous mode [ 787.513075][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 787.885744][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2858'. [ 787.927452][T15055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.953710][T15055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.974741][T15055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.038078][T15058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 788.077052][T15055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.192031][T15066] device syzkaller0 entered promiscuous mode [ 789.322404][T15069] device syzkaller0 entered promiscuous mode [ 790.320891][T15095] input: syz1 as /devices/virtual/input/input34 [ 791.628507][T15095] loop3: detected capacity change from 0 to 4096 [ 792.435155][T15090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2867'. [ 795.761965][T15136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2873'. [ 797.702495][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'. [ 797.721293][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 797.831065][T15138] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 797.888611][T15138] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 797.920373][T15138] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 797.992302][ T26] audit: type=1800 audit(1785541164.702:5): pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2879" name="UDC" dev="configfs" ino=83721 res=0 errno=0 [ 798.238568][T15153] device syzkaller0 entered promiscuous mode [ 798.555819][T15149] loop2: detected capacity change from 0 to 32768 [ 798.606612][T15149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2880 (15149) [ 798.680690][T15149] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 798.693897][T15149] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 798.702888][T15149] BTRFS info (device loop2): using free space tree [ 798.927971][T15149] BTRFS info (device loop2): enabling ssd optimizations [ 799.261755][ T4275] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 799.297052][T15181] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 799.680680][T15186] device syzkaller0 entered promiscuous mode [ 800.342023][T15210] input: syz1 as /devices/virtual/input/input35 [ 800.512858][T15210] loop0: detected capacity change from 0 to 4096 [ 802.721586][T15215] device syzkaller0 entered promiscuous mode [ 803.700251][T15237] loop0: detected capacity change from 0 to 64 [ 803.981117][T15239] device syzkaller0 entered promiscuous mode [ 804.435802][ T4271] hfs: node 4:3 still has 1 user(s)! [ 804.895353][T15253] loop0: detected capacity change from 0 to 4096 [ 805.254752][T15263] loop2: detected capacity change from 0 to 256 [ 805.427519][ T26] audit: type=1800 audit(1785541172.142:6): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2909" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 806.575360][T15277] loop1: detected capacity change from 0 to 64 [ 806.882678][T15267] loop0: detected capacity change from 0 to 32768 [ 806.965944][T15281] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2917'. [ 806.988691][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2917'. [ 808.125593][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 808.625840][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.632263][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.835932][T15321] loop1: detected capacity change from 0 to 64 [ 810.323897][T15337] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2934'. [ 810.357967][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2934'. [ 811.338105][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2930'. [ 811.955070][T15350] loop3: detected capacity change from 0 to 4096 [ 813.081912][T15358] loop4: detected capacity change from 0 to 64 [ 813.240148][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 813.249502][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 813.266927][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 813.299963][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 813.333626][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 813.341188][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 813.780425][T13694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.090098][T15370] device syzkaller0 entered promiscuous mode [ 814.149102][T13694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.488127][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 817.321541][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2958'. [ 817.583504][T15362] Bluetooth: hci3: command 0x041b tx timeout [ 818.838719][T13694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.906374][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2955'. [ 819.012075][T13694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.421249][T15359] chnl_net:caif_netlink_parms(): no params data found [ 819.663507][T15362] Bluetooth: hci3: command 0x040f tx timeout [ 819.970569][T15359] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.014144][T15359] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.035831][T15359] device bridge_slave_0 entered promiscuous mode [ 820.100246][T13694] tipc: Left network mode [ 820.102698][T15359] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.112457][T15359] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.163613][T15359] device bridge_slave_1 entered promiscuous mode [ 820.271444][T15445] input: syz1 as /devices/virtual/input/input36 [ 820.519238][T15445] loop0: detected capacity change from 0 to 4096 [ 821.745572][T15362] Bluetooth: hci3: command 0x0419 tx timeout [ 821.801371][T15444] device syzkaller0 entered promiscuous mode [ 822.576312][T15359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.765315][T15359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.233916][T15359] team0: Port device team_slave_0 added [ 823.309354][T15359] team0: Port device team_slave_1 added [ 823.442423][T15359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.463563][T15359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.506453][T15359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.528668][T15359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.547591][T15359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.597614][T15359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.652593][T15359] device hsr_slave_0 entered promiscuous mode [ 823.670915][T15359] device hsr_slave_1 entered promiscuous mode [ 824.018411][T15359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.126182][T15359] Cannot create hsr debugfs directory [ 825.408412][T13694] bond1: (slave gretap1): Releasing active interface [ 826.700202][T15513] device syzkaller0 entered promiscuous mode [ 826.783453][T15362] Bluetooth: hci3: command 0x0405 tx timeout [ 827.360341][T15517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2980'. [ 827.922771][T15523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 827.950163][T15523] loop5: detected capacity change from 0 to 7 [ 828.151710][T15522] CacheFiles: Empty directory specified [ 828.178567][T15523] Dev loop5: unable to read RDB block 7 [ 828.184865][T15523] loop5: unable to read partition table [ 828.191762][T15523] loop5: partition table beyond EOD, truncated [ 828.201155][T15523] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 828.230332][ T4411] Dev loop5: unable to read RDB block 7 [ 828.284807][ T4411] loop5: unable to read partition table [ 828.380822][ T4411] loop5: partition table beyond EOD, truncated [ 828.595371][T15524] Dev loop5: unable to read RDB block 7 [ 828.601054][T15524] loop5: unable to read partition table [ 828.669019][T15524] loop5: partition table beyond EOD, truncated [ 828.727834][T15524] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 829.185999][T13694] device hsr_slave_0 left promiscuous mode [ 829.205222][T13694] device hsr_slave_1 left promiscuous mode [ 829.267970][T13694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.302079][T13694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.320949][T15506] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2978'. [ 829.345767][T13694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.380575][T13694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.435636][T13694] device bridge_slave_1 left promiscuous mode [ 829.450819][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.521988][T13694] device bridge_slave_0 left promiscuous mode [ 829.583964][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.830717][T13694] device veth1_macvtap left promiscuous mode [ 829.860991][T13694] device veth0_macvtap left promiscuous mode [ 829.892754][T13694] device veth1_vlan left promiscuous mode [ 829.925324][T13694] device veth0_vlan left promiscuous mode [ 831.224972][T13694] bond2 (unregistering): Released all slaves [ 831.796139][T13694] bond1 (unregistering): Released all slaves [ 832.776504][T13694] team0 (unregistering): Port device team_slave_1 removed [ 832.835416][T13694] team0 (unregistering): Port device team_slave_0 removed [ 832.891573][T13694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.939612][T13694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.287791][T13694] bond0 (unregistering): Released all slaves [ 833.443006][T15561] tipc: Enabling of bearer rejected, failed to enable media [ 833.763413][T15604] loop0: detected capacity change from 0 to 64 [ 833.833500][ T26] audit: type=1800 audit(1785541200.532:7): pid=15601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2993" name="UDC" dev="configfs" ino=86389 res=0 errno=0 [ 834.913151][T15621] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 835.157876][T15621] 8021q: adding VLAN 0 to HW filter on device bond5 [ 835.328231][T15359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 835.443517][ T4320] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 835.502844][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'. [ 835.521329][T15359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 835.547878][T15359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 835.576603][T15359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 835.645980][ T4320] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 835.679667][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.890449][T15640] device syzkaller0 entered promiscuous mode [ 836.008835][T15647] loop3: detected capacity change from 0 to 256 [ 836.052592][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.102016][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.623652][ T4320] cxacru 4-1:1.0: send of cm 0x84 failed (-104) [ 838.631719][ T4320] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -104 [ 838.671576][ T4320] ------------[ cut here ]------------ [ 838.678834][ T4320] URB ffff88807072ad00 submitted while active [ 838.709500][ T4320] WARNING: CPU: 1 PID: 4320 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfb8/0x18d0 [ 838.719344][ T4320] Modules linked in: [ 838.723567][ T4320] CPU: 1 PID: 4320 Comm: kworker/1:4 Not tainted syzkaller #0 [ 838.731188][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 838.741308][ T4320] Workqueue: usb_hub_wq hub_event [ 838.746437][ T4320] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 838.752073][ T4320] Code: 2e 8b 44 89 ea e8 49 d3 fd 03 e9 bb fb ff ff e8 de 18 57 fb c6 05 32 8d e1 07 01 48 c7 c7 40 e8 2e 8b 48 89 de e8 18 a3 22 fb <0f> 0b e9 be f0 ff ff e8 bc 18 57 fb eb 1f e8 b5 18 57 fb 44 8b 64 [ 838.771790][ T4320] RSP: 0018:ffffc900042969f8 EFLAGS: 00010246 [ 838.778014][ T4320] RAX: 86a18eb92adeaf00 RBX: ffff88807072ad00 RCX: 0000000000100000 [ 838.786085][ T4320] RDX: ffffc900198df000 RSI: 00000000000369f1 RDI: 00000000000369f2 [ 838.794126][ T4320] RBP: ffffc90004296c70 R08: ffffc90004296707 R09: 1ffff92000852ce0 [ 838.802123][ T4320] R10: dffffc0000000000 R11: fffff52000852ce1 R12: 0000000000000cc0 [ 838.810161][ T4320] R13: 0000000000000000 R14: ffff88807072ad08 R15: dffffc0000000000 [ 838.818188][ T4320] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 838.827186][ T4320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.833843][ T4320] CR2: 0000001b2f920ff8 CR3: 000000005ce41000 CR4: 00000000003506e0 [ 838.841875][ T4320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 838.849940][ T4320] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 838.857964][ T4320] Call Trace: [ 838.861302][ T4320] [ 838.864357][ T4320] ? __init_swait_queue_head+0xa4/0x140 [ 838.870054][ T4320] cxacru_cm+0x216/0x11c0 [ 838.874508][ T4320] ? bus_for_each_drv+0x184/0x210 [ 838.879622][ T4320] ? __device_attach+0x2a7/0x480 [ 838.884676][ T4320] ? bus_probe_device+0xba/0x1d0 [ 838.889649][ T4320] ? usb_generic_driver_probe+0x89/0x150 [ 838.895362][ T4320] ? bus_for_each_drv+0x184/0x210 [ 838.900405][ T4320] ? cxacru_poll_status+0x10c0/0x10c0 [ 838.905814][ T4320] ? kthread+0x29d/0x330 [ 838.910108][ T4320] ? ret_from_fork+0x1f/0x30 [ 838.914786][ T4320] cxacru_poll_status+0x175/0x10c0 [ 838.919923][ T4320] ? cxacru_blocking_completion+0x40/0x40 [ 838.925699][ T4320] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 838.931403][ T4320] ? atm_register_sysfs+0x18a/0x380 [ 838.936673][ T4320] cxacru_atm_start+0x1ac/0x320 [ 838.941566][ T4320] usbatm_atm_init+0x149/0x3a0 [ 838.946439][ T4320] usbatm_usb_probe+0x15ba/0x1d20 [ 838.951510][ T4320] cxacru_usb_probe+0x179/0x220 [ 838.956434][ T4320] ? dbgp_control_msg+0x2c0/0x2c0 [ 838.961531][ T4320] usb_probe_interface+0x5be/0xae0 [ 838.966698][ T4320] ? usb_register_driver+0x3c0/0x3c0 [ 838.972021][ T4320] really_probe+0x24a/0xb40 [ 838.976585][ T4320] ? pm_runtime_barrier+0x147/0x1c0 [ 838.981876][ T4320] __driver_probe_device+0x1f5/0x390 [ 838.987206][ T4320] driver_probe_device+0x4f/0x420 [ 838.992251][ T4320] __device_attach_driver+0x2c6/0x510 [ 838.997683][ T4320] ? coredump_store+0x90/0x90 [ 839.002377][ T4320] bus_for_each_drv+0x184/0x210 [ 839.007286][ T4320] ? coredump_store+0x90/0x90 [ 839.011991][ T4320] ? subsys_find_device_by_id+0x360/0x360 [ 839.017763][ T4320] ? __mutex_lock+0x1ab/0xae0 [ 839.022465][ T4320] __device_attach+0x2a7/0x480 [ 839.027309][ T4320] ? device_attach+0x20/0x20 [ 839.031917][ T4320] ? kobject_uevent_env+0x364/0x890 [ 839.037243][ T4320] bus_probe_device+0xba/0x1d0 [ 839.042067][ T4320] device_add+0xbcf/0x1050 [ 839.046655][ T4320] usb_set_configuration+0x19d5/0x2030 [ 839.052153][ T4320] usb_generic_driver_probe+0x89/0x150 [ 839.057674][ T4320] usb_probe_device+0x126/0x250 [ 839.062552][ T4320] ? usb_register_device_driver+0x230/0x230 [ 839.068489][ T4320] really_probe+0x24a/0xb40 [ 839.073039][ T4320] ? pm_runtime_barrier+0x147/0x1c0 [ 839.078316][ T4320] __driver_probe_device+0x1f5/0x390 [ 839.083677][ T4320] driver_probe_device+0x4f/0x420 [ 839.088809][ T4320] __device_attach_driver+0x2c6/0x510 [ 839.094226][ T4320] ? coredump_store+0x90/0x90 [ 839.098921][ T4320] bus_for_each_drv+0x184/0x210 [ 839.103820][ T4320] ? coredump_store+0x90/0x90 [ 839.108516][ T4320] ? subsys_find_device_by_id+0x360/0x360 [ 839.114292][ T4320] __device_attach+0x2a7/0x480 [ 839.119077][ T4320] ? device_attach+0x20/0x20 [ 839.123716][ T4320] ? kobject_uevent_env+0x364/0x890 [ 839.128932][ T4320] bus_probe_device+0xba/0x1d0 [ 839.133737][ T4320] device_add+0xbcf/0x1050 [ 839.138175][ T4320] usb_new_device+0xa01/0x15e0 [ 839.142975][ T4320] ? usb_disconnect+0x8a0/0x8a0 [ 839.147880][ T4320] ? _raw_spin_unlock_irq+0x1f/0x40 [ 839.153120][ T4320] ? lockdep_hardirqs_on+0x94/0x140 [ 839.158425][ T4320] hub_event+0x2b2f/0x5200 [ 839.162909][ T4320] ? hub_post_resume+0x120/0x120 [ 839.167908][ T4320] ? read_lock_is_recursive+0x10/0x10 [ 839.173374][ T4320] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 839.179329][ T4320] ? _raw_spin_unlock+0x40/0x40 [ 839.184234][ T4320] ? _raw_spin_unlock_irq+0x1f/0x40 [ 839.189464][ T4320] ? process_one_work+0x7b4/0x1160 [ 839.194692][ T4320] process_one_work+0x8ab/0x1160 [ 839.199659][ T4320] ? worker_detach_from_pool+0x240/0x240 [ 839.205336][ T4320] ? _raw_spin_lock_irq+0xb7/0xf0 [ 839.210373][ T4320] ? _raw_spin_lock_irqsave+0x100/0x100 [ 839.215967][ T4320] ? wq_worker_running+0x97/0x190 [ 839.221075][ T4320] worker_thread+0xaf5/0x12a0 [ 839.225807][ T4320] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 839.231725][ T4320] kthread+0x29d/0x330 [ 839.235832][ T4320] ? worker_clr_flags+0x1a0/0x1a0 [ 839.240869][ T4320] ? kthread_blkcg+0xd0/0xd0 [ 839.245516][ T4320] ret_from_fork+0x1f/0x30 [ 839.249986][ T4320] [ 839.253026][ T4320] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 839.260313][ T4320] CPU: 1 PID: 4320 Comm: kworker/1:4 Not tainted syzkaller #0 [ 839.267779][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.277837][ T4320] Workqueue: usb_hub_wq hub_event [ 839.282886][ T4320] Call Trace: [ 839.286168][ T4320] [ 839.289126][ T4320] dump_stack_lvl+0x188/0x24e [ 839.293850][ T4320] ? memcpy+0x3c/0x60 [ 839.297913][ T4320] ? show_regs_print_info+0x12/0x12 [ 839.303135][ T4320] ? load_image+0x410/0x410 [ 839.307804][ T4320] panic+0x2d3/0x710 [ 839.311709][ T4320] ? bpf_jit_dump+0xd0/0xd0 [ 839.316237][ T4320] ? ret_from_fork+0x1f/0x30 [ 839.320837][ T4320] __warn+0x2f8/0x4f0 [ 839.324819][ T4320] ? usb_submit_urb+0xfb8/0x18d0 [ 839.329787][ T4320] ? usb_submit_urb+0xfb8/0x18d0 [ 839.334737][ T4320] report_bug+0x2ba/0x4f0 [ 839.339104][ T4320] ? usb_submit_urb+0xfb8/0x18d0 [ 839.344058][ T4320] handle_bug+0x3a/0x70 [ 839.348236][ T4320] exc_invalid_op+0x16/0x40 [ 839.352752][ T4320] asm_exc_invalid_op+0x16/0x20 [ 839.357700][ T4320] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 839.363258][ T4320] Code: 2e 8b 44 89 ea e8 49 d3 fd 03 e9 bb fb ff ff e8 de 18 57 fb c6 05 32 8d e1 07 01 48 c7 c7 40 e8 2e 8b 48 89 de e8 18 a3 22 fb <0f> 0b e9 be f0 ff ff e8 bc 18 57 fb eb 1f e8 b5 18 57 fb 44 8b 64 [ 839.382897][ T4320] RSP: 0018:ffffc900042969f8 EFLAGS: 00010246 [ 839.388985][ T4320] RAX: 86a18eb92adeaf00 RBX: ffff88807072ad00 RCX: 0000000000100000 [ 839.396976][ T4320] RDX: ffffc900198df000 RSI: 00000000000369f1 RDI: 00000000000369f2 [ 839.404984][ T4320] RBP: ffffc90004296c70 R08: ffffc90004296707 R09: 1ffff92000852ce0 [ 839.412967][ T4320] R10: dffffc0000000000 R11: fffff52000852ce1 R12: 0000000000000cc0 [ 839.420941][ T4320] R13: 0000000000000000 R14: ffff88807072ad08 R15: dffffc0000000000 [ 839.428929][ T4320] ? usb_submit_urb+0xfb8/0x18d0 [ 839.433885][ T4320] ? __init_swait_queue_head+0xa4/0x140 [ 839.439484][ T4320] cxacru_cm+0x216/0x11c0 [ 839.443851][ T4320] ? bus_for_each_drv+0x184/0x210 [ 839.448886][ T4320] ? __device_attach+0x2a7/0x480 [ 839.453837][ T4320] ? bus_probe_device+0xba/0x1d0 [ 839.458800][ T4320] ? usb_generic_driver_probe+0x89/0x150 [ 839.464441][ T4320] ? bus_for_each_drv+0x184/0x210 [ 839.469474][ T4320] ? cxacru_poll_status+0x10c0/0x10c0 [ 839.474850][ T4320] ? kthread+0x29d/0x330 [ 839.479094][ T4320] ? ret_from_fork+0x1f/0x30 [ 839.483748][ T4320] cxacru_poll_status+0x175/0x10c0 [ 839.488882][ T4320] ? cxacru_blocking_completion+0x40/0x40 [ 839.494626][ T4320] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 839.500372][ T4320] ? atm_register_sysfs+0x18a/0x380 [ 839.505590][ T4320] cxacru_atm_start+0x1ac/0x320 [ 839.510452][ T4320] usbatm_atm_init+0x149/0x3a0 [ 839.515241][ T4320] usbatm_usb_probe+0x15ba/0x1d20 [ 839.520296][ T4320] cxacru_usb_probe+0x179/0x220 [ 839.525159][ T4320] ? dbgp_control_msg+0x2c0/0x2c0 [ 839.530200][ T4320] usb_probe_interface+0x5be/0xae0 [ 839.535330][ T4320] ? usb_register_driver+0x3c0/0x3c0 [ 839.540637][ T4320] really_probe+0x24a/0xb40 [ 839.545153][ T4320] ? pm_runtime_barrier+0x147/0x1c0 [ 839.550359][ T4320] __driver_probe_device+0x1f5/0x390 [ 839.555656][ T4320] driver_probe_device+0x4f/0x420 [ 839.560691][ T4320] __device_attach_driver+0x2c6/0x510 [ 839.566074][ T4320] ? coredump_store+0x90/0x90 [ 839.570758][ T4320] bus_for_each_drv+0x184/0x210 [ 839.575622][ T4320] ? coredump_store+0x90/0x90 [ 839.580302][ T4320] ? subsys_find_device_by_id+0x360/0x360 [ 839.586031][ T4320] ? __mutex_lock+0x1ab/0xae0 [ 839.590738][ T4320] __device_attach+0x2a7/0x480 [ 839.596039][ T4320] ? device_attach+0x20/0x20 [ 839.600643][ T4320] ? kobject_uevent_env+0x364/0x890 [ 839.605850][ T4320] bus_probe_device+0xba/0x1d0 [ 839.610628][ T4320] device_add+0xbcf/0x1050 [ 839.615078][ T4320] usb_set_configuration+0x19d5/0x2030 [ 839.620579][ T4320] usb_generic_driver_probe+0x89/0x150 [ 839.626063][ T4320] usb_probe_device+0x126/0x250 [ 839.630918][ T4320] ? usb_register_device_driver+0x230/0x230 [ 839.636831][ T4320] really_probe+0x24a/0xb40 [ 839.641346][ T4320] ? pm_runtime_barrier+0x147/0x1c0 [ 839.646551][ T4320] __driver_probe_device+0x1f5/0x390 [ 839.651850][ T4320] driver_probe_device+0x4f/0x420 [ 839.656887][ T4320] __device_attach_driver+0x2c6/0x510 [ 839.662268][ T4320] ? coredump_store+0x90/0x90 [ 839.666961][ T4320] bus_for_each_drv+0x184/0x210 [ 839.671813][ T4320] ? coredump_store+0x90/0x90 [ 839.676493][ T4320] ? subsys_find_device_by_id+0x360/0x360 [ 839.682220][ T4320] __device_attach+0x2a7/0x480 [ 839.687008][ T4320] ? device_attach+0x20/0x20 [ 839.691609][ T4320] ? kobject_uevent_env+0x364/0x890 [ 839.696813][ T4320] bus_probe_device+0xba/0x1d0 [ 839.701591][ T4320] device_add+0xbcf/0x1050 [ 839.706048][ T4320] usb_new_device+0xa01/0x15e0 [ 839.710848][ T4320] ? usb_disconnect+0x8a0/0x8a0 [ 839.715716][ T4320] ? _raw_spin_unlock_irq+0x1f/0x40 [ 839.720932][ T4320] ? lockdep_hardirqs_on+0x94/0x140 [ 839.726136][ T4320] hub_event+0x2b2f/0x5200 [ 839.730614][ T4320] ? hub_post_resume+0x120/0x120 [ 839.735579][ T4320] ? read_lock_is_recursive+0x10/0x10 [ 839.740951][ T4320] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 839.746838][ T4320] ? _raw_spin_unlock+0x40/0x40 [ 839.751702][ T4320] ? _raw_spin_unlock_irq+0x1f/0x40 [ 839.756900][ T4320] ? process_one_work+0x7b4/0x1160 [ 839.762014][ T4320] process_one_work+0x8ab/0x1160 [ 839.766963][ T4320] ? worker_detach_from_pool+0x240/0x240 [ 839.772601][ T4320] ? _raw_spin_lock_irq+0xb7/0xf0 [ 839.777626][ T4320] ? _raw_spin_lock_irqsave+0x100/0x100 [ 839.783181][ T4320] ? wq_worker_running+0x97/0x190 [ 839.788259][ T4320] worker_thread+0xaf5/0x12a0 [ 839.792954][ T4320] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 839.798860][ T4320] kthread+0x29d/0x330 [ 839.802926][ T4320] ? worker_clr_flags+0x1a0/0x1a0 [ 839.807957][ T4320] ? kthread_blkcg+0xd0/0xd0 [ 839.812553][ T4320] ret_from_fork+0x1f/0x30 [ 839.817005][ T4320] [ 839.820634][ T4320] Kernel Offset: disabled [ 839.825024][ T4320] Rebooting in 86400 seconds..