last executing test programs: 10.092209424s ago: executing program 3 (id=1035): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0x9, 0x9}, @window={0x3, 0x6, 0xff81}, @mss={0x2, 0x5}, @timestamp, @sack_perm, @window={0x3, 0xcac, 0x5}], 0x8) 10.053243122s ago: executing program 3 (id=1038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000ff03000000000000000000000000000000000000fcffffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fe652f06997f400002000000000000080000000000000000010000000400000044000500000000de010300000000000000000000fffffffc3c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 9.970401855s ago: executing program 3 (id=1039): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) shutdown(r4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pause() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000f00)={'syz1\x00', {0x0, 0x0, 0x8000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x23d, 0x400, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb39, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x2, 0x0, 0x4, 0x6, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x400000, 0x3, 0x7f, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x10000, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x400, 0x2, 0x1b, 0xbe}, {0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x6, 0x8}, {0x9, 0x5, 0x3, 0x3, 0x40, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0xfffffffffffffffc, &(0x7f0000000100)="03bd3b370c8f663aa08c22a8fe1aeb976b3d39979983cbce5666815368b4283b9f885ea5d25389e6caf8a260e26da6fa778cd5fa25adad64987dae8d64a30e92cd5158e6c7c4c3630272512b5366df9ddd71ecc0b1b81d38bffa18c2fbbe66e1be") 8.992842782s ago: executing program 2 (id=1050): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14) 8.913401002s ago: executing program 2 (id=1052): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f00000000c0)) 8.852077176s ago: executing program 0 (id=1054): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r3], 0x24}}, 0x0) 8.839340746s ago: executing program 0 (id=1055): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) shutdown(r4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pause() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28) preadv(r3, &(0x7f00000000c0), 0x0, 0x111, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000f00)={'syz1\x00', {0x0, 0x0, 0x8000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x23d, 0x400, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb39, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x2, 0x0, 0x4, 0x6, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x400000, 0x3, 0x7f, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x10000, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x400, 0x2, 0x1b, 0xbe}, {0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x6, 0x8}, {0x9, 0x5, 0x3, 0x3, 0x40, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0xfffffffffffffffc, &(0x7f0000000100)="03bd3b370c8f663aa08c22a8fe1aeb976b3d39979983cbce5666815368b4283b9f885ea5d25389e6caf8a260e26da6fa778cd5fa25adad64987dae8d64a30e92cd5158e6c7c4c3630272512b5366df9ddd71ecc0b1b81d38bffa18c2fbbe66e1be") 7.588453866s ago: executing program 1 (id=1057): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.588341664s ago: executing program 1 (id=1058): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000180034801400350069"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7.579670252s ago: executing program 1 (id=1059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x32) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4c20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x3, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x5}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in=@empty, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) 7.555150808s ago: executing program 1 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffd}]}]}, 0x30}}, 0x0) 7.476195418s ago: executing program 1 (id=1061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) shutdown(r4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pause() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x400, 0x2, 0x1b, 0xbe}, {0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x6, 0x8}, {0x9, 0x5, 0x3, 0x3, 0x40, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0xfffffffffffffffc, &(0x7f0000000100)="03bd3b370c8f663aa08c22a8fe1aeb976b3d39979983cbce5666815368b4283b9f885ea5d25389e6caf8a260e26da6fa778cd5fa25adad64987dae8d64a30e92cd5158e6c7c4c3630272512b5366df9ddd71ecc0b1b81d38bffa18c2fbbe66e1be") 7.11208183s ago: executing program 2 (id=1068): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3}]}}}}}}}}, 0x0) 7.057228441s ago: executing program 2 (id=1070): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d010140000102030109025f0003010380f40904"], 0x0) r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000001080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x23, 0x0, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x35}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xa0, 0x7}, {0x6, 0x24, 0x1a, 0x30, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x97, 0x80, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x8}}}}}}}]}}, 0x0) syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040703dfe4000000010902b9"], 0x0) 7.029493137s ago: executing program 4 (id=1071): r0 = syz_open_procfs(0x0, &(0x7f0000000740)='task\x00') r1 = syz_io_uring_setup(0x317a, &(0x7f0000000880)={0x0, 0x2036, 0x40, 0x6, 0x1f8}, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)) dup2(r1, r0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000dc0), 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, 0x0, 0x1) 6.936486478s ago: executing program 4 (id=1072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000340)='O', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) recvmmsg(r0, &(0x7f000000e800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x4}], 0x1, 0x40000103, 0x0) 4.524095719s ago: executing program 3 (id=1073): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r3, &(0x7f0000002f40)=""/4097, 0x1001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r8 = open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4001024, &(0x7f0000000340)=ANY=[], 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 4.38687765s ago: executing program 0 (id=1074): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426bd7000fedbdf2502142000050000081400000008000200ffffffff08000d000400000008000200e00000020c000c400000000020"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4.313674322s ago: executing program 4 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82c00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.165859116s ago: executing program 2 (id=1076): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x10, 0x4, 0x70bd2c, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x92, 0x0, 0x0, @fd}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @fd}]}, @nested={0x10, 0x61, 0x0, 0x1, [@nested={0x4, 0x2}, @nested={0x4, 0x7b}, @nested={0x4, 0xaa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 837.501713ms ago: executing program 0 (id=1077): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 836.449171ms ago: executing program 4 (id=1078): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e21, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1000000b}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) 810.012512ms ago: executing program 3 (id=1079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x41, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x6c, 0x1, @loopback, @loopback, [@hopopts={0x3a}], "ab"}}}}}}, 0x77) 343.761365ms ago: executing program 4 (id=1080): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14"], 0x14}}, 0x20006004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 264.053772ms ago: executing program 0 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 263.633354ms ago: executing program 2 (id=1082): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r3, &(0x7f0000002f40)=""/4097, 0x1001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r8 = open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4001024, &(0x7f0000000340)=ANY=[], 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 116.933206ms ago: executing program 1 (id=1083): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000240)=0x1, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 75.743176ms ago: executing program 4 (id=1084): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x40000043, 0x0, 0x0) 153.069µs ago: executing program 0 (id=1085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0) 0s ago: executing program 3 (id=1086): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): port 3(team0) entered blocking state [ 116.500786][ T6409] bridge0: port 3(team0) entered disabled state [ 116.528742][ T6409] team0: entered allmulticast mode [ 116.585845][ T6410] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2870834618 (5741669236 ns) > initial count (396924862 ns). Using initial count to start timer. [ 116.646397][ T6409] team_slave_0: entered allmulticast mode [ 116.663965][ T6409] team_slave_1: entered allmulticast mode [ 116.727139][ T6409] team0: entered promiscuous mode [ 116.736158][ T6409] team_slave_0: entered promiscuous mode [ 116.749829][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 116.758880][ T6409] team_slave_1: entered promiscuous mode [ 116.759191][ T6416] netlink: 76 bytes leftover after parsing attributes in process `syz.0.139'. [ 116.791331][ T6409] bridge0: port 3(team0) entered blocking state [ 116.797684][ T6409] bridge0: port 3(team0) entered forwarding state [ 116.864530][ T6398] input: syz1 as /devices/virtual/input/input12 [ 117.025728][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 117.043075][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 117.195026][ T10] usb 2-1: USB disconnect, device number 7 [ 118.300099][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 118.673028][ T5687] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.835783][ T5687] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 118.855523][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 118.876586][ T5687] usb 4-1: Product: syz [ 118.881170][ T5687] usb 4-1: SerialNumber: syz [ 118.914437][ T5687] usb 4-1: config 0 descriptor?? [ 119.307451][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.325241][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.767452][ T6457] usb usb8: usbfs: process 6457 (syz.0.148) did not claim interface 0 before use [ 120.294813][ T6467] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.150'. [ 120.404294][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 120.404311][ T29] audit: type=1326 audit(1781853444.083:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.4.151" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700f0ec code=0x0 [ 121.598672][ T5687] usb 4-1: USB disconnect, device number 10 [ 121.641468][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 121.710897][ T6485] netlink: 'syz.0.164': attribute type 13 has an invalid length. [ 122.002988][ T5687] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 122.142164][ T6493] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 122.191928][ T5687] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 122.220665][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.241249][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.257260][ T5687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.332783][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.347396][ T5687] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.361321][ T5687] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 122.377347][ T5687] usb 4-1: Manufacturer: syz [ 122.387067][ T5687] usb 4-1: config 0 descriptor?? [ 122.454801][ T6493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.537777][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 122.553827][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.575710][ T10] usb 2-1: config 0 descriptor?? [ 122.819391][ T5687] hid_parser_main: 73 callbacks suppressed [ 122.819412][ T5687] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 122.847622][ T5687] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 123.369196][ T6513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.434015][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 123.474202][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.154'. [ 123.535771][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 123.546282][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 123.573263][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 123.621641][ T10] [drm] Initialized udl on minor 2 [ 123.663710][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 123.687826][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 123.706941][ T5707] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 123.714944][ T5707] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 123.728287][ T10] usb 2-1: USB disconnect, device number 8 [ 124.302758][ T6512] syz.2.159: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 124.399488][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.2.159 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.399508][ T6512] Tainted: [L]=SOFTLOCKUP [ 124.399511][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.399522][ T6512] Call Trace: [ 124.399530][ T6512] [ 124.399535][ T6512] dump_stack_lvl+0xe8/0x150 [ 124.399551][ T6512] warn_alloc+0x249/0x340 [ 124.399566][ T6512] ? __pfx_warn_alloc+0x10/0x10 [ 124.399585][ T6512] ? __kasan_kmalloc+0x93/0xb0 [ 124.399598][ T6512] ? __kmalloc_cache_noprof+0x318/0x660 [ 124.399611][ T6512] ? xskq_create+0x56/0x170 [ 124.399622][ T6512] ? xsk_init_queue+0x8a/0xe0 [ 124.399631][ T6512] ? xsk_setsockopt+0x52a/0x960 [ 124.399639][ T6512] ? do_sock_setsockopt+0x17c/0x1b0 [ 124.399651][ T6512] ? __ia32_sys_setsockopt+0x13d/0x1b0 [ 124.399663][ T6512] ? do_fast_syscall_32+0x33/0x70 [ 124.399676][ T6512] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.399689][ T6512] __vmalloc_node_range_noprof+0x12c/0x1730 [ 124.399710][ T6512] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.399723][ T6512] ? __kasan_kmalloc+0x93/0xb0 [ 124.399736][ T6512] vmalloc_user_noprof+0xad/0xe0 [ 124.399748][ T6512] ? xskq_create+0xbf/0x170 [ 124.399758][ T6512] xskq_create+0xbf/0x170 [ 124.399768][ T6512] xsk_init_queue+0x8a/0xe0 [ 124.399778][ T6512] xsk_setsockopt+0x52a/0x960 [ 124.399787][ T6512] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.399796][ T6512] ? __pfx_aa_sk_perm+0x10/0x10 [ 124.399808][ T6512] ? lock_release+0x4b/0x3c0 [ 124.399818][ T6512] ? aa_sock_opt_perm+0xff/0x1a0 [ 124.399831][ T6512] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 124.399843][ T6512] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.399852][ T6512] do_sock_setsockopt+0x17c/0x1b0 [ 124.399865][ T6512] __ia32_sys_setsockopt+0x13d/0x1b0 [ 124.399878][ T6512] __do_fast_syscall_32+0x23e/0x6f0 [ 124.399891][ T6512] ? do_fast_syscall_32+0x33/0x70 [ 124.399903][ T6512] ? irqentry_exit+0x10f/0x8f0 [ 124.399913][ T6512] ? trace_irq_disable+0x3b/0x140 [ 124.399928][ T6512] do_fast_syscall_32+0x33/0x70 [ 124.399940][ T6512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.399951][ T6512] RIP: 0023:0xf7f130ec [ 124.399964][ T6512] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 124.399972][ T6512] RSP: 002b:00000000f53b550c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 124.399983][ T6512] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000011b [ 124.399990][ T6512] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000029 [ 124.399996][ T6512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.400001][ T6512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 124.400006][ T6512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.400015][ T6512] [ 124.400104][ T6512] Mem-Info: [ 124.815502][ T6512] active_anon:11019 inactive_anon:0 isolated_anon:0 [ 124.815502][ T6512] active_file:3274 inactive_file:40902 isolated_file:0 [ 124.815502][ T6512] unevictable:768 dirty:300 writeback:0 [ 124.815502][ T6512] slab_reclaimable:10240 slab_unreclaimable:96150 [ 124.815502][ T6512] mapped:33294 shmem:4160 pagetables:1331 [ 124.815502][ T6512] sec_pagetables:0 bounce:0 [ 124.815502][ T6512] kernel_misc_reclaimable:0 [ 124.815502][ T6512] free:1323259 free_pcp:11128 free_cma:0 [ 125.108173][ T6538] cifs: Unknown parameter '' [ 125.113563][ T24] usb 4-1: USB disconnect, device number 11 [ 125.122278][ T6512] Node 0 active_anon:45452kB inactive_anon:0kB active_file:13052kB inactive_file:163408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133060kB dirty:1160kB writeback:0kB shmem:15104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12784kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 125.238190][ T1167] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 125.258803][ T10] IPVS: starting estimator thread 0... [ 125.304848][ T6512] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 125.372933][ T6541] IPVS: using max 60 ests per chain, 144000 per kthread [ 125.472777][ T6546] netlink: 76 bytes leftover after parsing attributes in process `syz.4.165'. [ 125.512916][ T6512] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.593319][ T6512] lowmem_reserve[]: 0 2492 2492 2492 2492 [ 125.605119][ T6512] Node 0 DMA32 free:1331840kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48152kB inactive_anon:0kB active_file:13052kB inactive_file:163408kB unevictable:1536kB writepending:1160kB zspages:0kB present:3129332kB managed:2552104kB mlocked:0kB bounce:0kB free_pcp:37460kB local_pcp:15296kB free_cma:0kB [ 125.701564][ T6512] lowmem_reserve[]: 0 0 0 0 0 [ 125.710581][ T6512] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:648kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 125.843940][ T6512] lowmem_reserve[]: 0 0 0 0 0 [ 125.849440][ T6512] Node 1 Normal free:3931724kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12912kB local_pcp:12384kB free_cma:0kB [ 125.898357][ T6512] lowmem_reserve[]: 0 0 0 0 0 [ 125.908141][ T6512] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.945554][ T6512] Node 0 DMA32: 2324*4kB (UM) 1314*8kB (UM) 388*16kB (UME) 39*32kB (UME) 45*64kB (UME) 59*128kB (UME) 33*256kB (UME) 20*512kB (UME) 13*1024kB (UME) 2*2048kB (UM) 307*4096kB (M) = 1331264kB [ 126.021125][ T6512] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 126.065423][ T6512] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 9*16kB (UM) 9*32kB (U) 8*64kB (U) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3933920kB [ 126.123862][ T6512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.157179][ T6512] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 126.205980][ T6512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.229651][ T6512] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.288214][ T6512] 47553 total pagecache pages [ 126.298399][ T6512] 0 pages in swap cache [ 126.304895][ T6512] Free swap = 124996kB [ 126.314048][ T6512] Total swap = 124996kB [ 126.331017][ T6512] 2097051 pages RAM [ 126.346418][ T6512] 0 pages HighMem/MovableOnly [ 126.357883][ T6512] 427248 pages reserved [ 126.364468][ T6512] 0 pages cma reserved [ 127.234554][ T6564] input: syz1 as /devices/virtual/input/input13 [ 127.612921][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 127.792460][ T24] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 127.812964][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.830506][ T24] usb 4-1: config 1 has no interface number 0 [ 127.867511][ T24] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 127.891252][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 127.908749][ T24] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.933583][ T24] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 127.983652][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 127.990206][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 128.000091][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 128.013178][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.023827][ T46] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 128.037154][ T46] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 128.049530][ T24] usb 4-1: Product: syz [ 128.069895][ T46] usb 2-1: Product: syz [ 128.074348][ T24] usb 4-1: Manufacturer: syz [ 128.081863][ T46] usb 2-1: Manufacturer: syz [ 128.092892][ T24] usb 4-1: SerialNumber: syz [ 128.100519][ T46] usb 2-1: SerialNumber: syz [ 128.110692][ T6580] input: syz1 as /devices/virtual/input/input14 [ 128.135329][ T6566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.167631][ T6566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.202402][ T24] usb 4-1: Expected 3 endpoints, found: 2 [ 128.208893][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 128.227460][ T29] audit: type=1326 audit(1781853451.903:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.0.173" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x0 [ 128.252146][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 128.453026][ T46] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 128.481804][ T46] visor 2-1:1.0: probe with driver visor failed with error -110 [ 128.513369][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.694345][ T10] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 128.720680][ T10] usb 3-1: config 1 has no interface number 0 [ 128.753283][ T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 128.788134][ T10] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.803668][ T10] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 128.843460][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 128.856107][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.881770][ T10] usb 3-1: Product: syz [ 128.891254][ T10] usb 3-1: Manufacturer: syz [ 128.899686][ T10] usb 3-1: SerialNumber: syz [ 128.918871][ T6585] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 128.932554][ T6585] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 128.964743][ T10] usb 3-1: Expected 3 endpoints, found: 2 [ 129.351225][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 129.633151][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.784338][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 129.801903][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.826619][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.846723][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 129.867561][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 129.877763][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 129.893444][ T10] usb 5-1: Manufacturer: syz [ 129.913425][ T10] usb 5-1: config 0 descriptor?? [ 130.079720][ T6596] input: syz1 as /devices/virtual/input/input15 [ 130.333871][ T10] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 130.343185][ T10] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 130.506305][ T24] usb 4-1: USB disconnect, device number 12 [ 130.702148][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.730923][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 130.743204][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.174'. [ 130.883558][ T24] usb 3-1: USB disconnect, device number 7 [ 131.027040][ T10] usb 2-1: USB disconnect, device number 9 [ 131.585501][ T6616] bridge1: entered promiscuous mode [ 131.592389][ T6616] bridge1: entered allmulticast mode [ 131.605681][ T6616] team0: Port device bridge1 added [ 131.627437][ T6615] bridge0: port 3(team0) entered blocking state [ 131.637758][ T6615] bridge0: port 3(team0) entered disabled state [ 131.648578][ T6615] team0: entered allmulticast mode [ 131.661427][ T6615] team_slave_0: entered allmulticast mode [ 131.668839][ T6615] team_slave_1: entered allmulticast mode [ 131.678144][ T6615] team0: entered promiscuous mode [ 131.694595][ T6616] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2870834618 (5741669236 ns) > initial count (396924862 ns). Using initial count to start timer. [ 131.723117][ T6615] team_slave_0: entered promiscuous mode [ 131.733045][ T6615] team_slave_1: entered promiscuous mode [ 131.752724][ T6615] bridge0: port 3(team0) entered blocking state [ 131.759150][ T6615] bridge0: port 3(team0) entered forwarding state [ 131.950419][ T6619] fuse: Bad value for 'rootmode' [ 132.423835][ T46] usb 5-1: USB disconnect, device number 8 [ 132.563404][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.722944][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 132.738343][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.759033][ T24] usb 3-1: config 4 interface 0 has no altsetting 0 [ 132.798329][ T24] usb 3-1: string descriptor 0 read error: -22 [ 132.805467][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.811807][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.814575][ T24] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 132.850532][ T24] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 132.900158][ T24] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 132.956323][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.995883][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 133.022011][ T24] usb 3-1: media controller created [ 133.056195][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.163489][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 134.231883][ T24] usb 3-1: USB disconnect, device number 8 [ 134.447835][ T6676] input: syz1 as /devices/virtual/input/input16 [ 134.843176][ T994] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 134.898493][ T6701] capability: warning: `syz.4.188' uses 32-bit capabilities (legacy support in use) [ 135.056247][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 135.070568][ T6708] fuse: Bad value for 'fd' [ 135.127279][ T6705] netlink: 76 bytes leftover after parsing attributes in process `syz.1.189'. [ 135.145988][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 135.818499][ T6725] netlink: 'syz.0.191': attribute type 34 has an invalid length. [ 135.852842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.879194][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 135.957868][ T6725] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 136.712514][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 137.564194][ T6759] input: syz1 as /devices/virtual/input/input17 [ 137.610785][ T6769] vlan2: entered promiscuous mode [ 137.647337][ T6769] hsr0: entered promiscuous mode [ 137.684142][ T6772] netlink: 48 bytes leftover after parsing attributes in process `syz.4.197'. [ 137.733765][ T6769] vlan2: entered allmulticast mode [ 137.743523][ T6769] hsr0: entered allmulticast mode [ 137.751341][ T6769] hsr_slave_0: entered allmulticast mode [ 137.781440][ T6769] hsr_slave_1: entered allmulticast mode [ 137.923243][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 137.944008][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 138.025750][ T6769] hsr_slave_1 (unregistering): left promiscuous mode [ 138.104945][ T10] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 138.129321][ T10] usb 2-1: config 1 has no interface number 0 [ 138.146569][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 138.181080][ T10] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.227660][ T10] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 138.284897][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 138.312535][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.343756][ T10] usb 2-1: Product: syz [ 138.362052][ T10] usb 2-1: Manufacturer: syz [ 138.379862][ T10] usb 2-1: SerialNumber: syz [ 138.414195][ T6771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.449252][ T6771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.462258][ T6777] tipc: Enabled bearer , priority 10 [ 138.502050][ T10] usb 2-1: Expected 3 endpoints, found: 2 [ 138.579300][ T6777] tipc: Enabled bearer , priority 0 [ 139.306187][ T6789] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.200'. [ 140.963786][ T5707] usb 2-1: USB disconnect, device number 10 [ 141.191110][ T6806] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5633] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[6806] [ 141.263081][ T29] audit: type=1326 audit(1781853464.933:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 141.361300][ T29] audit: type=1326 audit(1781853464.933:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 141.433800][ T29] audit: type=1326 audit(1781853464.933:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 141.470101][ T6812] netlink: 64 bytes leftover after parsing attributes in process `syz.2.205'. [ 141.489150][ T6812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.205'. [ 141.511331][ T29] audit: type=1326 audit(1781853464.933:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 141.567319][ T29] audit: type=1326 audit(1781853464.963:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 141.596503][ T6799] random: crng reseeded on system resumption [ 141.627059][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.202'. [ 141.649557][ T29] audit: type=1326 audit(1781853464.973:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 141.752647][ T29] audit: type=1326 audit(1781853464.973:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 141.814154][ T6812] unsupported nlmsg_type 40 [ 141.848831][ T29] audit: type=1326 audit(1781853464.973:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 141.959496][ T29] audit: type=1326 audit(1781853464.973:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 141.986534][ T6799] binder: 6796:6799 ioctl c0045005 800002c0 returned -22 [ 142.053012][ T29] audit: type=1326 audit(1781853464.973:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.1.203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 142.105977][ T6819] input: syz1 as /devices/virtual/input/input18 [ 142.450749][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 142.467200][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 142.592914][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 142.905571][ T6829] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 142.952428][ T6829] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 142.966177][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 143.011212][ T6829] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 143.163029][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 143.181897][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 143.283702][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 143.339427][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.385379][ T24] usb 2-1: Product: syz [ 143.390034][ T6837] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 143.426595][ T24] usb 2-1: Manufacturer: syz [ 143.466731][ T24] usb 2-1: SerialNumber: syz [ 143.512547][ T6827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 143.557287][ T6840] netlink: 'syz.2.210': attribute type 9 has an invalid length. [ 143.617930][ T6840] macvlan2: entered promiscuous mode [ 143.645783][ T6840] macvlan2: entered allmulticast mode [ 145.053811][ T6859] netlink: 56 bytes leftover after parsing attributes in process `syz.3.215'. [ 145.194369][ T6862] input: syz1 as /devices/virtual/input/input19 [ 145.492908][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.654147][ T46] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.662453][ T46] usb 3-1: config 1 has no interface number 0 [ 145.668928][ T46] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 145.679452][ T46] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.690709][ T46] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 145.703175][ T46] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 145.712533][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.720805][ T46] usb 3-1: Product: syz [ 145.725059][ T46] usb 3-1: Manufacturer: syz [ 145.729654][ T46] usb 3-1: SerialNumber: syz [ 145.736328][ T6862] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 145.745363][ T6862] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 145.754341][ T46] usb 3-1: Expected 3 endpoints, found: 2 [ 146.045784][ T6869] netlink: 192 bytes leftover after parsing attributes in process `syz.0.226'. [ 146.288895][ T24] usb 2-1: selecting invalid altsetting 1 [ 146.375964][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 146.405545][ T6880] dummy0: Caught tx_queue_len zero misconfig [ 146.426234][ T24] usb 2-1: USB disconnect, device number 11 [ 146.507808][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.805095][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 146.992901][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 147.017173][ T24] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 147.142919][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 147.152220][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 147.168824][ T24] usb 2-1: Product: syz [ 147.179352][ T24] usb 2-1: Manufacturer: syz [ 147.189830][ T24] usb 2-1: SerialNumber: syz [ 147.205797][ T24] usb 2-1: config 0 descriptor?? [ 147.228171][ T24] pwc: Philips SPC 880NC USB webcam detected. [ 147.465431][ T24] pwc: Warning: more than 1 configuration available. [ 147.479594][ T24] pwc: Failed to set LED on/off time (-71) [ 147.489471][ T24] pwc: send_video_command error -71 [ 147.495237][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 147.544028][ T24] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 147.560753][ T24] usb 2-1: USB disconnect, device number 12 [ 147.942499][ T24] usb 3-1: USB disconnect, device number 9 [ 148.175256][ T6904] netlink: 'syz.1.223': attribute type 4 has an invalid length. [ 148.203268][ T6905] syz_tun: entered allmulticast mode [ 148.258273][ T6905] dvmrp8: entered allmulticast mode [ 149.231190][ T6921] netlink: 'syz.1.227': attribute type 26 has an invalid length. [ 149.397706][ T6922] input: syz1 as /devices/virtual/input/input20 [ 149.549105][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.232'. [ 149.581700][ T6932] syzkaller0: entered promiscuous mode [ 149.607095][ T6932] syzkaller0: entered allmulticast mode [ 149.655980][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 149.928786][ T6897] syz_tun: left allmulticast mode [ 150.045085][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 150.081604][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 150.452377][ T6946] input: syz1 as /devices/virtual/input/input21 [ 151.024838][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.199056][ T46] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 151.207313][ T46] usb 3-1: config 1 has no interface number 0 [ 151.214643][ T46] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 151.224686][ T46] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.278459][ T46] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 151.320334][ T46] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 151.345547][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.402896][ T46] usb 3-1: Product: syz [ 151.422376][ T46] usb 3-1: Manufacturer: syz [ 151.440903][ T46] usb 3-1: SerialNumber: syz [ 151.455873][ T6951] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.468920][ T6951] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.500864][ T46] usb 3-1: Expected 3 endpoints, found: 2 [ 151.662882][ T5700] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 151.814210][ T5700] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.834311][ T5700] usb 2-1: config 0 has no interface number 0 [ 151.856498][ T5700] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 151.876875][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.898434][ T5700] usb 2-1: config 0 descriptor?? [ 151.920899][ T5700] usb 2-1: selecting invalid altsetting 1 [ 151.941410][ T5700] dvb_ttusb_budget: ttusb_init_controller: error [ 151.964907][ T5700] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 152.074442][ T5700] DVB: Unable to find symbol cx22700_attach() [ 152.150131][ T5700] DVB: Unable to find symbol tda10046_attach() [ 152.166469][ T5700] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 152.201144][ T5700] usb 2-1: USB disconnect, device number 13 [ 152.983143][ T6972] vlan2: entered promiscuous mode [ 152.996325][ T6972] hsr0: entered promiscuous mode [ 153.009475][ T6972] vlan2: entered allmulticast mode [ 153.065496][ T6972] hsr0: entered allmulticast mode [ 153.109871][ T6972] hsr_slave_0: entered allmulticast mode [ 153.130339][ T6974] netlink: 48 bytes leftover after parsing attributes in process `syz.3.239'. [ 153.155310][ T6972] hsr_slave_1: entered allmulticast mode [ 153.251227][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 153.326193][ T6972] hsr_slave_1 (unregistering): left promiscuous mode [ 153.581538][ T46] usb 3-1: USB disconnect, device number 10 [ 154.268584][ T6986] input: syz1 as /devices/virtual/input/input22 [ 154.612914][ T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 154.766942][ T46] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 154.790365][ T46] usb 2-1: config 1 has no interface number 0 [ 154.804324][ T46] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 154.835354][ T46] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.854855][ T46] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 154.901766][ T46] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 154.924965][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.948357][ T46] usb 2-1: Product: syz [ 154.984764][ T46] usb 2-1: Manufacturer: syz [ 155.002375][ T46] usb 2-1: SerialNumber: syz [ 155.032024][ T6986] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.064197][ T6986] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.086064][ T46] usb 2-1: Expected 3 endpoints, found: 2 [ 156.275666][ T6996] random: crng reseeded on system resumption [ 156.485861][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.244'. [ 156.639420][ T6993] binder: 6992:6993 ioctl c0045005 800002c0 returned -22 [ 156.911267][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 156.911283][ T29] audit: type=1800 audit(1781853480.583:299): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.248" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 156.994580][ T46] usb 2-1: USB disconnect, device number 14 [ 157.223417][ T7026] input: syz1 as /devices/virtual/input/input23 [ 157.514756][ T7040] input: syz1 as /devices/virtual/input/input24 [ 157.707478][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.843166][ T5700] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 157.921708][ T46] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 157.941057][ T46] usb 5-1: config 1 has no interface number 0 [ 157.957709][ T46] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 157.987003][ T46] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.017600][ T46] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 158.038036][ T5700] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 158.057842][ T5700] usb 2-1: config 1 has no interface number 0 [ 158.070248][ T5700] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 158.097363][ T46] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 158.112901][ T5700] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.133045][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.153593][ T46] usb 5-1: Product: syz [ 158.157887][ T5700] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 158.162850][ T46] usb 5-1: Manufacturer: syz [ 158.195706][ T46] usb 5-1: SerialNumber: syz [ 158.207546][ T5700] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 158.225017][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.235089][ T7026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.246720][ T5700] usb 2-1: Product: syz [ 158.253082][ T5700] usb 2-1: Manufacturer: syz [ 158.258350][ T7026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.270010][ T5700] usb 2-1: SerialNumber: syz [ 158.284885][ T7040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 158.296629][ T7040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 158.306575][ T46] usb 5-1: Expected 3 endpoints, found: 2 [ 158.336765][ T5700] usb 2-1: Expected 3 endpoints, found: 2 [ 158.708489][ T7059] fuse: Bad value for 'fd' [ 158.761685][ T7059] ipip0: entered promiscuous mode [ 158.772912][ T46] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 158.782574][ T7059] ipip0: entered allmulticast mode [ 158.869424][ T7059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.257'. [ 158.908583][ T7059] netlink: 88 bytes leftover after parsing attributes in process `syz.3.257'. [ 158.948891][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 158.982890][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 158.998407][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 159.019762][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 159.039192][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 159.089147][ T46] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 159.110357][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.131516][ T46] usb 3-1: Product: syz [ 159.139006][ T46] usb 3-1: Manufacturer: syz [ 159.150404][ T46] usb 3-1: SerialNumber: syz [ 159.166827][ T46] usb 3-1: config 0 descriptor?? [ 159.427414][ T46] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 160.035197][ T10] usb 5-1: USB disconnect, device number 10 [ 160.142917][ T46] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.302946][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 160.309692][ T46] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 160.318309][ T46] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 160.327484][ T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 160.336726][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 160.346684][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 160.356746][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.366835][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 160.376657][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 160.390611][ T46] usb 4-1: New USB device found, idVendor=07f0, idProduct=6c17, bcdDevice= 0.40 [ 160.399851][ T46] usb 4-1: New USB device strings: Mfr=7, Product=0, SerialNumber=0 [ 160.408068][ T46] usb 4-1: Manufacturer: syz [ 160.414750][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 160.424898][ T46] usb 4-1: config 0 descriptor?? [ 160.577650][ T5672] usb 2-1: USB disconnect, device number 15 [ 160.587552][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.597960][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.610551][ T10] usb 5-1: config 0 descriptor?? [ 160.625655][ T10] cp210x 5-1:0.0: cp210x converter detected [ 160.646750][ T5700] usb 4-1: USB disconnect, device number 14 [ 160.710932][ T7066] netlink: 'syz.1.260': attribute type 9 has an invalid length. [ 160.722012][ T7066] macvlan2: entered promiscuous mode [ 160.727550][ T7066] macvlan2: entered allmulticast mode [ 161.026466][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 161.047128][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 161.336595][ T7085] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 161.453515][ T10] usb 3-1: USB disconnect, device number 11 [ 161.949471][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 162.194134][ T10] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 162.205747][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.223028][ T10] usb 3-1: Product: syz [ 162.227311][ T10] usb 3-1: Manufacturer: syz [ 162.231928][ T10] usb 3-1: SerialNumber: syz [ 162.689666][ T7091] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 162.825530][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 162.871729][ T10] usb 3-1: USB disconnect, device number 12 [ 162.895708][ T10] usblp0: removed [ 162.955487][ T5620] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 163.069583][ T7105] input: syz1 as /devices/virtual/input/input25 [ 163.152331][ T10] usb 5-1: USB disconnect, device number 11 [ 163.175914][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 163.196478][ T10] cp210x 5-1:0.0: device disconnected [ 163.337367][ T7126] syz_tun: entered allmulticast mode [ 163.434950][ T7126] lo: Caught tx_queue_len zero misconfig [ 163.468050][ T7119] input: syz1 as /devices/virtual/input/input26 [ 163.545549][ T7126] dvmrp8: entered allmulticast mode [ 163.606347][ T29] audit: type=1800 audit(1781853487.263:300): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 163.832883][ T46] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 164.048838][ T46] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 164.069883][ T46] usb 4-1: config 1 has no interface number 0 [ 164.083787][ T46] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 164.119294][ T46] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.166073][ T46] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 164.689486][ T7114] syz_tun: left allmulticast mode [ 165.032934][ T5620] Bluetooth: hci4: unexpected event 0x34 length: 13 > 6 [ 165.204810][ T5620] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 165.223674][ T5620] Bluetooth: hci0: Injecting HCI hardware error event [ 165.230638][ T5620] Bluetooth: hci0: hardware error 0x00 [ 165.462881][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 165.612871][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 165.619759][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.630590][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.645793][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.655666][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.667491][ T24] usb 2-1: Product: syz [ 165.675379][ T24] usb 2-1: Manufacturer: syz [ 165.682061][ T24] usb 2-1: SerialNumber: syz [ 165.694335][ T24] usb 2-1: 0:2 : does not exist [ 165.702746][ T24] usb 2-1: unit 9 not found! [ 165.723026][ T5680] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 165.871114][ T7157] IPv6: addrconf: prefix option has invalid lifetime [ 165.882912][ T5680] usb 3-1: Using ep0 maxpacket: 32 [ 165.894741][ T5680] usb 3-1: too many configurations: 21, using maximum allowed: 8 [ 165.909765][ T24] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 165.920098][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.933544][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.944555][ T24] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 165.953375][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.977542][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.000090][ T24] usb 2-1: USB disconnect, device number 16 [ 166.012139][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.028596][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.041145][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.053884][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.071111][ T5680] usb 3-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 166.081540][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.098434][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.108826][ T5680] usb 3-1: Product: syz [ 166.114641][ T5680] usb 3-1: Manufacturer: syz [ 166.120490][ T5680] usb 3-1: SerialNumber: syz [ 166.139401][ T5680] usb 3-1: config 0 descriptor?? [ 166.360382][ T5680] rndis_host 3-1:0.0: rndis: master #0/ffff88807b345000 slave #1/0000000000000000 [ 166.390875][ T5680] cdc_acm 3-1:0.0: Zero length descriptor references [ 166.405918][ T46] usb 4-1: string descriptor 0 read error: -71 [ 166.420947][ T5680] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 166.431298][ T46] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 166.475017][ T5680] usb 3-1: USB disconnect, device number 13 [ 166.483543][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.515549][ T46] usb 4-1: can't set config #1, error -71 [ 166.535470][ T46] usb 4-1: USB disconnect, device number 15 [ 166.732920][ T5672] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 166.895491][ T5672] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.913385][ T5672] usb 2-1: not running at top speed; connect to a high speed hub [ 166.943211][ T5672] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.966101][ T5672] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 166.988689][ T7179] syz_tun: entered allmulticast mode [ 167.025676][ T5672] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 167.062613][ T5672] usb 2-1: config 1 interface 2 has no altsetting 0 [ 167.088887][ T7179] lo: Caught tx_queue_len zero misconfig [ 167.101732][ T5672] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 167.128579][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.146666][ T5672] usb 2-1: Product: syz [ 167.159592][ T5672] usb 2-1: Manufacturer: syz [ 167.174337][ T5672] usb 2-1: SerialNumber: syz [ 167.207622][ T7185] dvmrp8: entered allmulticast mode [ 167.282913][ T5620] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 167.412982][ T5672] usb 2-1: selecting invalid altsetting 0 [ 167.432988][ T5672] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 167.460735][ T5672] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 167.480292][ T5672] usb 2-1: selecting invalid altsetting 0 [ 167.508307][ T5672] usb 2-1: 2:1: cannot set freq 13115191 to ep 0x82 [ 167.527033][ T5672] usb 2-1: selecting invalid altsetting 0 [ 167.608569][ T5672] usb 2-1: USB disconnect, device number 17 [ 167.811365][ T7196] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 167.829926][ T7196] netlink: 'syz.3.294': attribute type 2 has an invalid length. [ 167.911191][ T7192] input: syz1 as /devices/virtual/input/input27 [ 168.142918][ T7173] syz_tun: left allmulticast mode [ 168.171549][ T7207] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 168.262906][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.356361][ T7210] input: syz1 as /devices/virtual/input/input28 [ 168.445606][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 168.459903][ T10] usb 5-1: config 1 has no interface number 0 [ 168.471038][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 168.502951][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.540847][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 168.588509][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 168.608016][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.620533][ T10] usb 5-1: Product: syz [ 168.628885][ T10] usb 5-1: Manufacturer: syz [ 168.635960][ T10] usb 5-1: SerialNumber: syz [ 168.660240][ T7203] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.682350][ T7203] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.699405][ T10] usb 5-1: Expected 3 endpoints, found: 2 [ 168.722909][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 168.885789][ T46] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 168.906062][ T46] usb 4-1: config 1 has no interface number 0 [ 168.925310][ T46] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 168.951352][ T46] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.984671][ T46] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 169.018393][ T46] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 169.049730][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.072907][ T46] usb 4-1: Product: syz [ 169.085352][ T46] usb 4-1: Manufacturer: syz [ 169.097818][ T46] usb 4-1: SerialNumber: syz [ 169.117609][ T7215] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 169.143991][ T7215] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 169.176478][ T46] usb 4-1: Expected 3 endpoints, found: 2 [ 169.348038][ T7221] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 169.374202][ T7221] netlink: 'syz.2.300': attribute type 2 has an invalid length. [ 169.623153][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 169.632070][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 170.052957][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 170.212884][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 170.220078][ T46] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 170.250640][ T46] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 170.264636][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.272963][ T46] usb 3-1: Product: syz [ 170.278737][ T46] usb 3-1: Manufacturer: syz [ 170.297789][ T46] usb 3-1: SerialNumber: syz [ 170.312519][ T7232] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 170.705811][ T7237] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 170.717494][ T7237] netlink: 'syz.1.305': attribute type 2 has an invalid length. [ 170.819195][ T7241] netlink: 'syz.1.307': attribute type 9 has an invalid length. [ 170.869968][ T10] usb 5-1: USB disconnect, device number 12 [ 170.943533][ T7244] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 171.195964][ T5687] usb 4-1: USB disconnect, device number 16 [ 171.313404][ T7262] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 171.662919][ T5687] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 171.823106][ T5687] usb 4-1: Using ep0 maxpacket: 8 [ 171.839711][ T5687] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.862485][ T5687] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.887465][ T5687] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 171.898065][ T7274] input: syz1 as /devices/virtual/input/input29 [ 171.905399][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.913857][ T5687] usb 4-1: Product: syz [ 171.922760][ T5687] usb 4-1: Manufacturer: syz [ 171.928901][ T5687] usb 4-1: SerialNumber: syz [ 172.215777][ T5687] usb 4-1: unit 5 not found! [ 172.223954][ T5687] usb 4-1: unit 0 not found! [ 172.287224][ T5687] usb 4-1: USB disconnect, device number 17 [ 172.437519][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 172.530061][ T46] usb 3-1: selecting invalid altsetting 1 [ 172.565417][ T7283] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 172.616990][ T46] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 172.643742][ T46] usb 3-1: USB disconnect, device number 14 [ 172.692333][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.713323][ T7287] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 172.890208][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'. [ 172.937861][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'. [ 173.045394][ T7312] validate_nla: 1 callbacks suppressed [ 173.045414][ T7312] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 173.078882][ T7312] netlink: 'syz.3.332': attribute type 2 has an invalid length. [ 173.193337][ T7320] netlink: 'syz.3.340': attribute type 9 has an invalid length. [ 173.206589][ T7320] netlink: 'syz.3.340': attribute type 8 has an invalid length. [ 173.242916][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 173.313173][ T5680] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 173.333442][ T7330] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 173.355929][ T7330] netlink: 'syz.1.342': attribute type 2 has an invalid length. [ 173.404223][ T46] usb 5-1: config 1 has an invalid interface number: 40 but max is 0 [ 173.421270][ T46] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 173.461015][ T46] usb 5-1: config 1 has no interface number 0 [ 173.481771][ T46] usb 5-1: config 1 interface 40 has no altsetting 0 [ 173.496742][ T46] usb 5-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=ee.46 [ 173.506885][ T7340] netlink: 'syz.3.349': attribute type 8 has an invalid length. [ 173.517243][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.526656][ T46] usb 5-1: Product: syz [ 173.531567][ T46] usb 5-1: Manufacturer: syz [ 173.536490][ T46] usb 5-1: SerialNumber: syz [ 173.545136][ T5680] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 173.558733][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.589989][ T5680] usb 3-1: config 0 has no interfaces? [ 173.603136][ T5680] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 173.621620][ T7343] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 173.634185][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.644438][ T7343] netlink: 'syz.3.350': attribute type 2 has an invalid length. [ 173.666034][ T5680] usb 3-1: config 0 descriptor?? [ 173.789534][ T46] rndis_host 5-1:1.40: invalid descriptor buffer length [ 173.813075][ T46] rndis_host 5-1:1.40: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 173.826601][ T7350] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 173.839889][ T46] cdc_acm 5-1:1.40: invalid descriptor buffer length [ 173.855188][ T46] usb 5-1: USB disconnect, device number 13 [ 173.967705][ T7353] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 174.769540][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 174.966504][ T7377] input: syz1 as /devices/virtual/input/input30 [ 175.363056][ T5672] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 175.550331][ T5672] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 175.587207][ T5672] usb 4-1: config 1 has no interface number 0 [ 175.629730][ T5672] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 175.669259][ T7416] trusted_key: encrypted_key: keylen parameter is missing [ 175.684313][ T5672] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.715736][ T5672] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 175.817248][ T5680] usb 3-1: string descriptor 0 read error: -71 [ 175.853832][ T5672] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 175.854240][ T5680] usb 3-1: USB disconnect, device number 15 [ 175.926301][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.987421][ T5672] usb 4-1: Product: syz [ 176.010841][ T5672] usb 4-1: Manufacturer: syz [ 176.049337][ T5672] usb 4-1: SerialNumber: syz [ 176.087102][ T7399] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.131434][ T7399] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.163835][ T5672] usb 4-1: Expected 3 endpoints, found: 2 [ 176.569928][ T7455] input: syz1 as /devices/virtual/input/input31 [ 176.589940][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 176.614849][ T7452] input: syz1 as /devices/virtual/input/input32 [ 176.923655][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 177.022948][ T5680] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 177.126079][ T10] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 177.162775][ T10] usb 3-1: config 1 has no interface number 0 [ 177.182188][ T5680] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 177.198530][ T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 177.213827][ T5680] usb 2-1: config 1 has no interface number 0 [ 177.234775][ T5680] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 177.256001][ T10] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.279504][ T5680] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.300790][ T10] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 177.328374][ T5680] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 177.348602][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.393'. [ 177.369233][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 177.385144][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.394129][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.393'. [ 177.411358][ T10] usb 3-1: Product: syz [ 177.415973][ T5680] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 177.426119][ T10] usb 3-1: Manufacturer: syz [ 177.435932][ T10] usb 3-1: SerialNumber: syz [ 177.453253][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.454706][ T7458] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 177.484912][ T7458] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 177.503442][ T5680] usb 2-1: Product: syz [ 177.517078][ T5680] usb 2-1: Manufacturer: syz [ 177.531824][ T5680] usb 2-1: SerialNumber: syz [ 177.552319][ T10] usb 3-1: Expected 3 endpoints, found: 2 [ 177.559865][ T7459] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 177.587413][ T7459] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 177.631119][ T5680] usb 2-1: Expected 3 endpoints, found: 2 [ 178.720844][ T10] usb 4-1: USB disconnect, device number 18 [ 178.791805][ T7468] validate_nla: 21 callbacks suppressed [ 178.806866][ T7468] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 178.891668][ T7470] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 178.926898][ T7470] netlink: 'syz.3.395': attribute type 2 has an invalid length. [ 178.984502][ T7472] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 179.004925][ T7472] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 179.235401][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 179.244487][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 179.552860][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 179.713223][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 179.720803][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 179.734018][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 179.743333][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.751564][ T10] usb 4-1: Product: syz [ 179.756010][ T10] usb 4-1: Manufacturer: syz [ 179.760607][ T10] usb 4-1: SerialNumber: syz [ 179.767217][ T7479] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.945546][ T5672] usb 3-1: USB disconnect, device number 16 [ 180.111469][ T5680] usb 2-1: USB disconnect, device number 18 [ 180.197343][ T7488] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 180.226464][ T7488] netlink: 'syz.2.401': attribute type 2 has an invalid length. [ 180.307248][ T7492] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 180.533400][ T7510] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 180.539981][ T7512] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 180.557014][ T7510] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.559786][ T7512] netlink: 'syz.2.413': attribute type 2 has an invalid length. [ 180.910311][ T5707] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 180.967276][ T4940] Bluetooth: hci3: command 0x0406 tx timeout [ 180.967787][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 180.979530][ T4940] Bluetooth: hci1: command 0x0406 tx timeout [ 180.979627][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 181.107991][ T5707] usb 2-1: config 0 has no interfaces? [ 181.125751][ T5707] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 181.176862][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 181.204113][ T5707] usb 2-1: Product: syz [ 181.224546][ T5707] usb 2-1: SerialNumber: syz [ 181.256361][ T5707] usb 2-1: config 0 descriptor?? [ 181.551529][ T5622] Bluetooth: hci4: Malformed LE Event: 0x02 [ 181.552100][ T46] usb 2-1: USB disconnect, device number 19 [ 182.069030][ T7561] dummy0: mtu less than device minimum [ 182.139206][ T10] usb 4-1: selecting invalid altsetting 1 [ 182.225044][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 182.257627][ T10] usb 4-1: USB disconnect, device number 19 [ 182.335764][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.741406][ T5622] Bluetooth: hci2: unexpected event for opcode 0x201c [ 182.802998][ T5680] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 182.963509][ T5680] usb 3-1: Using ep0 maxpacket: 16 [ 182.973762][ T5680] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 182.990167][ T5680] usb 3-1: config 0 has no interface number 0 [ 183.018014][ T5680] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 183.042343][ T5680] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9 [ 183.071388][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 183.080361][ T5680] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 183.091408][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 183.107690][ T5680] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 183.118106][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.126413][ T5680] usb 3-1: Product: syz [ 183.131092][ T5680] usb 3-1: Manufacturer: syz [ 183.141944][ T5680] usb 3-1: SerialNumber: syz [ 183.149915][ T5680] usb 3-1: config 0 descriptor?? [ 183.162442][ T7588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.390226][ T5680] usb 3-1: USB disconnect, device number 17 [ 183.573183][ T5707] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.742983][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 183.767892][ T5707] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 183.793584][ T5707] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 183.804667][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.814196][ T5707] usb 5-1: Product: syz [ 183.818664][ T5707] usb 5-1: Manufacturer: syz [ 183.824376][ T5707] usb 5-1: SerialNumber: syz [ 183.854961][ T7607] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 183.895570][ T7641] validate_nla: 17 callbacks suppressed [ 183.895588][ T7641] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 183.916114][ T7641] netlink: 'syz.1.470': attribute type 2 has an invalid length. [ 183.984131][ T7644] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 184.081524][ T7652] netlink: 288 bytes leftover after parsing attributes in process `syz.0.484'. [ 184.161091][ T7658] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 184.181572][ T7658] netlink: 'syz.1.478': attribute type 2 has an invalid length. [ 184.247987][ T7663] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 184.334878][ T7668] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 184.362951][ T7668] netlink: 'syz.3.482': attribute type 8 has an invalid length. [ 184.721873][ T7687] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 184.853159][ T7691] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 185.132281][ T7695] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 186.151268][ T7737] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.170235][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 186.486756][ T7759] sg_write: data in/out 209152/1 bytes for SCSI command 0x5-- guessing data in; [ 186.486756][ T7759] program syz.3.526 not setting count and/or reply_len properly [ 186.726053][ T5707] usb 5-1: selecting invalid altsetting 1 [ 186.837250][ T5707] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 186.860583][ T5707] usb 5-1: USB disconnect, device number 14 [ 186.913325][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.890533][ T7868] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.580' resets device [ 188.212981][ T5707] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 188.305917][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 188.389047][ T5707] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 188.407441][ T5707] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 188.417200][ T5707] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 188.428903][ T5707] usb 2-1: config 220 has no interface number 2 [ 188.436626][ T5707] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 188.450088][ T5707] usb 2-1: config 220 interface 0 has no altsetting 0 [ 188.457058][ T5707] usb 2-1: config 220 interface 76 has no altsetting 0 [ 188.464151][ T5707] usb 2-1: config 220 interface 1 has no altsetting 0 [ 188.481468][ T5707] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 188.498073][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.511896][ T5707] usb 2-1: Product: syz [ 188.519424][ T5707] usb 2-1: Manufacturer: syz [ 188.527501][ T5707] usb 2-1: SerialNumber: syz [ 188.744373][ T5707] usb 2-1: selecting invalid altsetting 0 [ 188.750433][ T5707] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 188.757910][ T5707] uvcvideo 2-1:220.0: No valid video chain found. [ 188.769180][ T5707] usb 2-1: selecting invalid altsetting 0 [ 188.775254][ T5707] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 188.787786][ T5707] usb 2-1: USB disconnect, device number 20 [ 189.051285][ T7905] input: syz1 as /devices/virtual/input/input34 [ 189.296223][ T7909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.597'. [ 189.324547][ T5680] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 189.350007][ T7911] validate_nla: 41 callbacks suppressed [ 189.350024][ T7911] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 189.363755][ T7911] netlink: 'syz.2.598': attribute type 2 has an invalid length. [ 189.486835][ T5680] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 189.499842][ T5680] usb 4-1: config 1 has no interface number 0 [ 189.507605][ T5680] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 189.518577][ T5680] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.531392][ T5680] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 189.552725][ T5680] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 189.562231][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.570673][ T5680] usb 4-1: Product: syz [ 189.576977][ T5680] usb 4-1: Manufacturer: syz [ 189.581653][ T5680] usb 4-1: SerialNumber: syz [ 189.593061][ T7905] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.604427][ T7924] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 189.612415][ T7905] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.623073][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 189.636709][ T5680] usb 4-1: Expected 3 endpoints, found: 2 [ 189.879986][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 189.889427][ T7926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.908886][ T7926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.011675][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.186282][ T7938] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 190.200283][ T7938] netlink: 'syz.4.610': attribute type 2 has an invalid length. [ 191.672887][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 191.835581][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.854428][ T10] usb 2-1: config 0 has no interface number 0 [ 191.860912][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.887693][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.902659][ T5700] usb 4-1: USB disconnect, device number 20 [ 191.921517][ T10] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.935371][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 191.959105][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.994517][ T10] usb 2-1: config 0 descriptor?? [ 192.340331][ T8029] tipc: Started in network mode [ 192.351251][ T8029] tipc: Node identity 4246, cluster identity 4711 [ 192.365762][ T8029] tipc: Node number set to 16966 [ 192.416973][ T10] hid (null): bogus close delimiter [ 192.554297][ T5680] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 192.614299][ T8037] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 192.615842][ T8039] random: crng reseeded on system resumption [ 192.622134][ T8037] netlink: 'syz.3.655': attribute type 8 has an invalid length. [ 192.639165][ T10] uclogic 0003:28BD:0042.0007: failed retrieving string descriptor #100: -71 [ 192.651670][ T10] uclogic 0003:28BD:0042.0007: failed retrieving pen parameters: -71 [ 192.668977][ T10] uclogic 0003:28BD:0042.0007: pen probing failed: -71 [ 192.676559][ T10] uclogic 0003:28BD:0042.0007: failed probing parameters: -71 [ 192.684358][ T10] uclogic 0003:28BD:0042.0007: probe with driver uclogic failed with error -71 [ 192.705758][ T10] usb 2-1: USB disconnect, device number 21 [ 192.734748][ T5680] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 192.753963][ T5680] usb 3-1: config 0 has no interface number 0 [ 192.765519][ T5680] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.799075][ T5680] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 192.812414][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.822888][ T5680] usb 3-1: Product: syz [ 192.828745][ T5680] usb 3-1: Manufacturer: syz [ 192.834250][ T8047] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 192.835298][ T5680] usb 3-1: SerialNumber: syz [ 192.851258][ T5680] usb 3-1: config 0 descriptor?? [ 192.852866][ T8047] netlink: 'syz.4.659': attribute type 2 has an invalid length. [ 192.872634][ T5680] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 193.093600][ T10] usb 3-1: USB disconnect, device number 18 [ 193.100719][ T10] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 193.702513][ T8068] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.669' resets device [ 194.045536][ T8092] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.681' resets device [ 194.248299][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.254823][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.535776][ T8119] mac80211_hwsim hwsim10 wlan1: Caught tx_queue_len zero misconfig [ 194.782869][ T5680] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 194.871517][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 194.942903][ T5680] usb 5-1: Using ep0 maxpacket: 32 [ 194.961196][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.992131][ T5680] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 195.027463][ T5680] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 195.040836][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.065138][ T5680] usb 5-1: Product: syz [ 195.080502][ T5680] usb 5-1: Manufacturer: syz [ 195.100248][ T5680] usb 5-1: SerialNumber: syz [ 195.118335][ T5680] usb 5-1: config 0 descriptor?? [ 195.340371][ T5687] usb 5-1: USB disconnect, device number 15 [ 195.472864][ T46] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 195.634819][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.645960][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.656322][ T46] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 195.665523][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.674748][ T46] usb 3-1: config 0 descriptor?? [ 196.089447][ T46] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 196.096561][ T46] elan 0003:04F3:0755.0008: item fetching failed at offset 3/5 [ 196.106485][ T46] elan 0003:04F3:0755.0008: Hid Parse failed [ 196.112579][ T46] elan 0003:04F3:0755.0008: probe with driver elan failed with error -22 [ 196.113185][ T5700] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 196.284072][ T5700] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 196.295161][ T5700] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.308209][ T5700] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.314879][ T5700] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 196.318276][ T46] usb 3-1: USB disconnect, device number 19 [ 196.324017][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.344273][ T5700] usb 5-1: config 0 descriptor?? [ 196.350690][ T8159] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 196.768484][ T5700] elecom 0003:056E:00FC.0009: unknown main item tag 0x2 [ 196.775748][ T5700] elecom 0003:056E:00FC.0009: unknown main item tag 0x0 [ 196.782750][ T5700] elecom 0003:056E:00FC.0009: unknown main item tag 0x0 [ 196.789920][ T5700] elecom 0003:056E:00FC.0009: unknown main item tag 0x0 [ 196.796945][ T5700] elecom 0003:056E:00FC.0009: unknown main item tag 0x0 [ 196.804649][ T5700] elecom 0003:056E:00FC.0009: unknown main item tag 0x0 [ 196.811661][ T5700] elecom 0003:056E:00FC.0009: unknown main item tag 0x0 [ 196.819059][ T5700] elecom 0003:056E:00FC.0009: unknown main item tag 0x0 [ 196.826113][ T5700] elecom 0003:056E:00FC.0009: unknown main item tag 0x0 [ 196.835166][ T5700] elecom 0003:056E:00FC.0009: hidraw0: USB HID v0.0c Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 196.948415][ T8168] netlink: 'syz.1.714': attribute type 1 has an invalid length. [ 196.964896][ T8168] netlink: 'syz.1.714': attribute type 2 has an invalid length. [ 197.036636][ T5700] usb 5-1: USB disconnect, device number 16 [ 197.117678][ T8178] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 197.125739][ T8178] netlink: 'syz.1.719': attribute type 2 has an invalid length. [ 197.187176][ T8182] netlink: 'syz.1.721': attribute type 12 has an invalid length. [ 197.196307][ T8182] netlink: 'syz.1.721': attribute type 44 has an invalid length. [ 197.281428][ T5622] Bluetooth: hci4: unexpected event for opcode 0x203c [ 197.582381][ T8200] capability: warning: `syz.3.730' uses deprecated v2 capabilities in a way that may be insecure [ 197.623589][ T8202] netlink: 72 bytes leftover after parsing attributes in process `syz.4.731'. [ 197.642976][ T5700] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 197.689058][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.814059][ T5700] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.824076][ T5700] usb 2-1: config 0 has no interface number 0 [ 197.841857][ T5700] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 197.861734][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.888906][ T5700] usb 2-1: Product: syz [ 197.900962][ T5700] usb 2-1: Manufacturer: syz [ 197.914222][ T5700] usb 2-1: SerialNumber: syz [ 197.926052][ T5700] usb 2-1: config 0 descriptor?? [ 197.942235][ T5700] usb 2-1: selecting invalid altsetting 1 [ 197.963118][ T5700] dvb_ttusb_budget: ttusb_init_controller: error [ 197.978124][ T5700] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 197.979942][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 198.033190][ T5700] DVB: Unable to find symbol stv0299_attach() [ 198.061704][ T5700] DVB: Unable to find symbol tda8083_attach() [ 198.068524][ T5700] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 198.184094][ T5687] usb 2-1: USB disconnect, device number 22 [ 198.543081][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 198.559836][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.577414][ T8251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.806317][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.758'. [ 198.839506][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.758'. [ 198.853021][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.760'. [ 199.204057][ T8298] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.772'. [ 199.214797][ T5687] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 199.222488][ T8298] openvswitch: netlink: Message has 4 unknown bytes. [ 199.292994][ T46] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 199.384221][ T5687] usb 5-1: config 246 has an invalid interface number: 166 but max is 0 [ 199.392715][ T5687] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 199.403192][ T5687] usb 5-1: config 246 has no interface number 0 [ 199.409605][ T5687] usb 5-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 199.423709][ T5687] usb 5-1: config 246 interface 166 has no altsetting 0 [ 199.432457][ T5687] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 199.432938][ T5700] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 199.442398][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.457639][ T5687] usb 5-1: Product: syz [ 199.461951][ T5687] usb 5-1: Manufacturer: syz [ 199.466868][ T5687] usb 5-1: SerialNumber: syz [ 199.472172][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.483652][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.494205][ T5680] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 199.502900][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.516115][ T46] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.525655][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.534926][ T46] usb 4-1: config 0 descriptor?? [ 199.592969][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 199.599612][ T5700] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 199.609021][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.618395][ T5700] usb 2-1: config 0 descriptor?? [ 199.662874][ T5680] usb 3-1: Using ep0 maxpacket: 16 [ 199.669338][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.680598][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.691466][ T5680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.706886][ T5680] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 199.716756][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.726288][ T5680] usb 3-1: config 0 descriptor?? [ 199.833087][ T5700] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 199.841382][ T5700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.855932][ T5700] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 199.863351][ T5700] usb 2-1: media controller created [ 199.874786][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.949825][ T46] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 200.041009][ T5700] az6027: usb out operation failed. (-71) [ 200.047160][ T5700] az6027: usb out operation failed. (-71) [ 200.053003][ T5700] stb0899_attach: Driver disabled by Kconfig [ 200.058998][ T5700] az6027: no front-end attached [ 200.058998][ T5700] [ 200.066615][ T5700] az6027: usb out operation failed. (-71) [ 200.072343][ T5700] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 200.081031][ T5700] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 200.094289][ T5700] dvb-usb: schedule remote query interval to 400 msecs. [ 200.102495][ T5700] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 200.113499][ T5700] usb 2-1: USB disconnect, device number 23 [ 200.121654][ T5687] usb 5-1: Limiting number of CPorts to U8_MAX [ 200.129343][ T5687] usb 5-1: Not enough endpoints found in device, aborting! [ 200.155328][ T5680] waterforce 0003:1044:7A4D.000B: hidraw1: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 200.189468][ T5700] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 200.199128][ T8310] veth0_macvtap: Caught tx_queue_len zero misconfig [ 200.239612][ T5687] usb 4-1: USB disconnect, device number 21 [ 200.250117][ T5680] waterforce 0003:1044:7A4D.000B: fw version request failed with -38 [ 200.327580][ T5680] usb 5-1: USB disconnect, device number 17 [ 200.355336][ T46] usb 3-1: USB disconnect, device number 20 [ 200.609645][ T8316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.781'. [ 200.620971][ T8316] veth1: entered promiscuous mode [ 200.627206][ T8316] veth1: left promiscuous mode [ 200.735391][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.785291][ T8325] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 200.793477][ T8325] netlink: 'syz.1.784': attribute type 2 has an invalid length. [ 201.123125][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 201.254372][ T5700] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.282974][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 201.290683][ T46] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 201.299888][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.308142][ T46] usb 5-1: Product: syz [ 201.312351][ T46] usb 5-1: Manufacturer: syz [ 201.316978][ T46] usb 5-1: SerialNumber: syz [ 201.412907][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 201.419532][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.430783][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.441735][ T5700] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 201.450904][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.460133][ T5700] usb 3-1: config 0 descriptor?? [ 201.711470][ T8365] netlink: 'syz.3.804': attribute type 12 has an invalid length. [ 201.719821][ T8365] netlink: 'syz.3.804': attribute type 29 has an invalid length. [ 201.729490][ T8365] netlink: 148 bytes leftover after parsing attributes in process `syz.3.804'. [ 201.873571][ T5700] hid_parser_main: 97 callbacks suppressed [ 201.873593][ T5700] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 201.889302][ T5700] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 202.071157][ T5700] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 202.141573][ T46] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 202.166690][ T46] usb 5-1: USB disconnect, device number 18 [ 202.186079][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 202.270893][ T8374] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 202.272164][ T5700] ft260 0003:0403:6030.000C: failed to retrieve system status [ 202.305136][ T5700] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -71 [ 202.316979][ T5700] usb 3-1: USB disconnect, device number 21 [ 202.337861][ T8382] netlink: 76 bytes leftover after parsing attributes in process `syz.1.808'. [ 203.082974][ T5700] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 203.232863][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 203.241153][ T5700] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 203.250613][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.258691][ T5700] usb 3-1: Product: syz [ 203.262956][ T5700] usb 3-1: Manufacturer: syz [ 203.267569][ T5700] usb 3-1: SerialNumber: syz [ 203.273945][ T5700] usb 3-1: config 0 descriptor?? [ 203.280627][ T5700] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 203.288371][ T5700] dvb-usb: bulk message failed: -22 (2/0) [ 203.295665][ T5700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.305737][ T5700] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 203.313814][ T5700] usb 3-1: media controller created [ 203.328542][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.349673][ T5700] usb 3-1: selecting invalid altsetting 7 [ 203.359996][ T5700] cxusb: set interface failed [ 203.365023][ T5700] dvb-usb: bulk message failed: -22 (1/0) [ 203.400017][ T5700] DVB: Unable to find symbol lgdt330x_attach() [ 203.406287][ T5700] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 203.464960][ T5700] rc_core: IR keymap rc-dvico-portable not found [ 203.481121][ T5700] Registered IR keymap rc-empty [ 203.493369][ T5700] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 203.497354][ T8404] dvb-usb: bulk message failed: -22 (3/0) [ 203.507290][ T5700] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input37 [ 203.523416][ T5700] dvb-usb: schedule remote query interval to 100 msecs. [ 203.530506][ T5700] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 203.618934][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'. [ 203.633318][ T5700] dvb-usb: bulk message failed: -22 (1/0) [ 203.651373][ T8420] bridge_slave_0: default FDB implementation only supports local addresses [ 203.655824][ T46] usb 3-1: USB disconnect, device number 22 [ 203.707380][ T46] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 204.278450][ T8451] input: syz1 as /devices/virtual/input/input38 [ 204.602889][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 204.693041][ T5700] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 204.755721][ T10] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 204.772925][ T10] usb 2-1: config 0 has no interface number 0 [ 204.787052][ T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.799635][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.801816][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 204.817741][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.829189][ T10] usb 2-1: Product: syz [ 204.833523][ T10] usb 2-1: Manufacturer: syz [ 204.838274][ T10] usb 2-1: SerialNumber: syz [ 204.844108][ T5700] usb 3-1: Using ep0 maxpacket: 16 [ 204.859249][ T5700] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 204.873350][ T10] usb 2-1: config 0 descriptor?? [ 204.878437][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.887881][ T5700] usb 3-1: Product: syz [ 204.892490][ T5700] usb 3-1: Manufacturer: syz [ 204.901567][ T5700] usb 3-1: SerialNumber: syz [ 204.906664][ T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 205.110911][ T10] usb 2-1: USB disconnect, device number 24 [ 205.118823][ T10] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 205.138183][ T5700] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 205.166789][ T5700] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 205.187260][ T5700] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 205.213456][ T5700] usb 3-1: media controller created [ 205.232347][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.463102][ T5700] zl10353_read_register: readreg error (reg=127, ret==-110) [ 205.501253][ T5700] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 205.518149][ T5700] usb 3-1: USB disconnect, device number 23 [ 206.048130][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.856'. [ 206.265413][ T8521] netlink: 'syz.1.864': attribute type 12 has an invalid length. [ 206.273561][ T8521] netlink: 'syz.1.864': attribute type 29 has an invalid length. [ 206.281375][ T8521] netlink: 148 bytes leftover after parsing attributes in process `syz.1.864'. [ 206.294171][ T8521] netlink: 'syz.1.864': attribute type 3 has an invalid length. [ 206.306612][ T8521] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 206.315462][ T8521] netlink: 35 bytes leftover after parsing attributes in process `syz.1.864'. [ 206.373113][ T46] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 206.402959][ T8527] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 206.409423][ T8527] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 206.527192][ T46] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 206.537259][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.545401][ T46] usb 3-1: Product: syz [ 206.549950][ T46] usb 3-1: Manufacturer: syz [ 206.555403][ T46] usb 3-1: SerialNumber: syz [ 206.813554][ T5680] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 206.840669][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 206.975732][ T5680] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.986742][ T5680] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.997893][ T5680] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.007356][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.015973][ T5680] usb 2-1: SerialNumber: syz [ 207.180530][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 207.231241][ T5680] usb 2-1: 0:2 : does not exist [ 207.270355][ T5680] usb 2-1: USB disconnect, device number 25 [ 207.293656][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.417372][ T46] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 207.431925][ T46] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 207.446657][ T46] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 207.457237][ T46] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 207.468972][ T46] usb 3-1: USB disconnect, device number 24 [ 208.454087][ T5700] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 208.624427][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 208.639753][ T5700] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.663298][ T5700] usb 3-1: config 0 has no interface number 0 [ 208.682107][ T5700] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.703759][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.725157][ T5700] usb 3-1: Product: syz [ 208.741653][ T5700] usb 3-1: Manufacturer: syz [ 208.756505][ T5700] usb 3-1: SerialNumber: syz [ 208.775535][ T5700] usb 3-1: config 0 descriptor?? [ 208.794716][ T5700] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.996822][ T5700] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 209.017399][ T5700] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 209.072906][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 209.127591][ T8641] netlink: 'syz.3.919': attribute type 5 has an invalid length. [ 209.203531][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 115 [ 209.222605][ T8647] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.922'. [ 209.232021][ T8647] openvswitch: netlink: Message has 512 unknown bytes. [ 209.244830][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.262848][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.276069][ T46] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 209.287256][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.293500][ T8651] bond0: Caught tx_queue_len zero misconfig [ 209.304510][ T46] usb 5-1: config 0 descriptor?? [ 209.413196][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.421849][ T5700] usb 3-1: USB disconnect, device number 25 [ 209.432642][ T5700] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.447467][ T5700] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 209.462051][ T5700] quatech2 3-1:0.51: device disconnected [ 209.473912][ T5687] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.507992][ T8659] netlink: 48 bytes leftover after parsing attributes in process `syz.1.928'. [ 209.642993][ T5687] usb 4-1: Using ep0 maxpacket: 16 [ 209.649319][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.660482][ T5687] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 209.669768][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.679235][ T5687] usb 4-1: config 0 descriptor?? [ 209.718507][ T46] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 209.727793][ T46] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 209.735354][ T46] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 209.742823][ T46] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 209.750286][ T46] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 209.759941][ T46] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 209.814085][ T5680] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 209.962942][ T5680] usb 2-1: Using ep0 maxpacket: 16 [ 209.973623][ T5680] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.985001][ T5680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.996427][ T5680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.007550][ T5680] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 210.017773][ T5680] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.031843][ T5680] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.042633][ T5680] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.050779][ T5680] usb 2-1: Manufacturer: syz [ 210.056616][ T5680] usb 2-1: config 0 descriptor?? [ 210.092254][ T5687] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 210.120019][ T46] playstation 0003:054C:0DF2.000D: Failed to retrieve feature with reportID 32: -71 [ 210.129876][ T46] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense firmware info: -71 [ 210.142079][ T46] playstation 0003:054C:0DF2.000D: Failed to get firmware info from DualSense [ 210.152464][ T46] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 210.162406][ T46] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -71 [ 210.187100][ T46] usb 5-1: USB disconnect, device number 19 [ 210.252921][ T8675] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.935'. [ 210.262280][ T8675] openvswitch: netlink: Message has 512 unknown bytes. [ 210.322932][ T5680] rc_core: IR keymap rc-hauppauge not found [ 210.333323][ T5680] Registered IR keymap rc-empty [ 210.343072][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.373104][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.393699][ T5680] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 210.407442][ T5680] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 210.424639][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.444076][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.464015][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.497357][ T5700] usb 4-1: USB disconnect, device number 22 [ 210.503000][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.533559][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.555132][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.592929][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.612946][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.647195][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.674240][ T5680] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 210.694221][ T5680] mceusb 2-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 210.705031][ T5680] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.735124][ T5680] usb 2-1: USB disconnect, device number 26 [ 211.172298][ T8714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.951'. [ 211.202393][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 211.212610][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 211.222572][ T8716] netlink: 104 bytes leftover after parsing attributes in process `syz.3.952'. [ 211.232879][ T8716] netlink: 104 bytes leftover after parsing attributes in process `syz.3.952'. [ 211.287387][ T8720] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.954'. [ 211.300025][ T8720] openvswitch: netlink: Message has 512 unknown bytes. [ 211.498808][ T8735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.961'. [ 211.588946][ T8737] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 211.596046][ T5680] IPVS: starting estimator thread 0... [ 211.692876][ T8739] IPVS: using max 50 ests per chain, 120000 per kthread [ 211.723903][ T8743] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 211.982902][ T5700] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 212.133607][ T5700] usb 5-1: Using ep0 maxpacket: 16 [ 212.140084][ T5700] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 212.151120][ T5700] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 212.160476][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.168985][ T5700] usb 5-1: Product: syz [ 212.173405][ T5700] usb 5-1: Manufacturer: syz [ 212.183000][ T5700] usb 5-1: SerialNumber: syz [ 212.191919][ T5700] usb 5-1: config 0 descriptor?? [ 212.201333][ T5700] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 212.212019][ T5700] usb 5-1: Detected FT232R [ 212.285585][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'. [ 212.410217][ T5700] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 212.628522][ T5700] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 212.721442][ T8775] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.977'. [ 212.731928][ T8775] openvswitch: netlink: Message has 16 unknown bytes. [ 212.840827][ T46] usb 5-1: USB disconnect, device number 20 [ 212.854790][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 212.866023][ T46] ftdi_sio 5-1:0.0: device disconnected [ 213.397738][ T8791] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.982'. [ 213.409897][ T8791] openvswitch: netlink: Message has 512 unknown bytes. [ 213.663049][ T5700] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 213.844963][ T5700] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 213.862989][ T5700] usb 4-1: config 1 has no interface number 0 [ 213.879231][ T5700] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 213.910241][ T5700] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.934014][ T5707] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 213.969718][ T5700] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 214.009195][ T5700] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 214.067082][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.109726][ T5700] usb 4-1: Product: syz [ 214.117761][ T5700] usb 4-1: Manufacturer: syz [ 214.126784][ T5700] usb 4-1: SerialNumber: syz [ 214.132889][ T5707] usb 3-1: Using ep0 maxpacket: 32 [ 214.141248][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 214.153392][ T8792] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.160668][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 214.178394][ T8792] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.192932][ T5707] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 214.206444][ T5700] usb 4-1: Expected 3 endpoints, found: 2 [ 214.221258][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 214.240688][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 214.253295][ T5707] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 214.262635][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.290155][ T5707] usb 3-1: Product: syz [ 214.299146][ T5707] usb 3-1: Manufacturer: syz [ 214.310329][ T5707] usb 3-1: SerialNumber: syz [ 214.341481][ T5707] usb 3-1: config 0 descriptor?? [ 214.358703][ T5707] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 214.372853][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 214.554889][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.568950][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.578412][ T5729] usb 3-1: USB disconnect, device number 26 [ 214.591810][ T10] usb 2-1: config 0 descriptor?? [ 214.604940][ T10] cp210x 2-1:0.0: cp210x converter detected [ 215.008960][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 215.019787][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 215.239975][ T5729] usb 2-1: USB disconnect, device number 27 [ 215.252141][ T5729] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.261297][ T5729] cp210x 2-1:0.0: device disconnected [ 215.414058][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 215.573317][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 215.582913][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 215.597321][ T8844] vlan0: Caught tx_queue_len zero misconfig [ 215.604562][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.623302][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.636023][ T10] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.651301][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.664033][ T46] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 215.690092][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.708700][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.728741][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 215.739545][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 215.747991][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.759983][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.778083][ T10] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.825713][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.849329][ T46] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 215.868196][ T46] usb 5-1: config 1 has no interface number 0 [ 215.878572][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.898276][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.898299][ T46] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 215.925887][ T46] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 215.940036][ T46] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 215.958309][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 215.968097][ T8852] input: syz1 as /devices/virtual/input/input41 [ 215.978390][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 215.986760][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.988909][ T46] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 216.027317][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 216.033412][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.039332][ T10] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.074997][ T46] usb 5-1: Product: syz [ 216.079211][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.083659][ T46] usb 5-1: Manufacturer: syz [ 216.107291][ T46] usb 5-1: SerialNumber: syz [ 216.108923][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.125533][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.139560][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 216.141447][ T8842] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.154058][ T8842] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.164500][ T10] usb 3-1: string descriptor 0 read error: -22 [ 216.166121][ T46] usb 5-1: Expected 3 endpoints, found: 2 [ 216.180309][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 216.190370][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.212529][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 216.260214][ T46] usb 4-1: USB disconnect, device number 23 [ 216.572846][ T46] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 216.743045][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 216.750330][ T46] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 216.760591][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.773661][ T46] usb 4-1: config 0 descriptor?? [ 216.992800][ T46] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 217.009624][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.030011][ T46] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 217.042193][ T46] usb 4-1: media controller created [ 217.060505][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.194418][ T46] az6027: usb out operation failed. (-71) [ 217.203099][ T46] az6027: usb out operation failed. (-71) [ 217.208900][ T46] stb0899_attach: Driver disabled by Kconfig [ 217.215828][ T46] az6027: no front-end attached [ 217.215828][ T46] [ 217.223897][ T46] az6027: usb out operation failed. (-71) [ 217.229814][ T46] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 217.239296][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 217.251353][ T46] dvb-usb: schedule remote query interval to 400 msecs. [ 217.258980][ T46] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 217.272111][ T46] usb 4-1: USB disconnect, device number 24 [ 217.295432][ T46] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 217.770379][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 217.843628][ T46] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 218.014194][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.025361][ T46] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x94, changing to 0x84 [ 218.037067][ T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 218.049440][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.058750][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.066803][ T46] usb 2-1: Product: syz [ 218.070982][ T46] usb 2-1: Manufacturer: syz [ 218.075654][ T46] usb 2-1: SerialNumber: syz [ 218.252005][ T10] usb 5-1: USB disconnect, device number 21 [ 218.484200][ T10] usb 3-1: USB disconnect, device number 27 [ 218.531814][ T8885] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1018'. [ 218.535411][ T8887] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 218.541715][ T8885] openvswitch: netlink: Message has 512 unknown bytes. [ 218.859904][ T8910] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 218.868200][ T8910] netlink: 'syz.0.1030': attribute type 2 has an invalid length. [ 218.879288][ T8910] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 218.888772][ T8910] netlink: 'syz.0.1030': attribute type 2 has an invalid length. [ 218.925694][ T8914] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1032'. [ 218.935519][ T8914] openvswitch: netlink: Message has 512 unknown bytes. [ 219.091411][ T46] cdc_ncm 2-1:1.0: bind() failure [ 219.100740][ T46] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 219.109400][ T46] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 219.121369][ T46] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 219.134483][ T46] usb 2-1: USB disconnect, device number 28 [ 219.388160][ T8935] input: syz1 as /devices/virtual/input/input43 [ 219.673488][ T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 219.837204][ T46] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 219.851948][ T46] usb 4-1: config 1 has no interface number 0 [ 219.860945][ T46] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 219.896023][ T46] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 219.915941][ T46] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 219.972049][ T46] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 219.992710][ T8954] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1047'. [ 220.031075][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.039518][ T8954] openvswitch: netlink: Message has 512 unknown bytes. [ 220.049477][ T46] usb 4-1: Product: syz [ 220.060080][ T46] usb 4-1: Manufacturer: syz [ 220.067748][ T46] usb 4-1: SerialNumber: syz [ 220.079487][ T8935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.102929][ T994] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 220.113703][ T8935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.139404][ T46] usb 4-1: Expected 3 endpoints, found: 2 [ 220.154376][ T8961] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1051'. [ 220.204661][ T8966] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1053'. [ 220.214556][ T8966] openvswitch: netlink: Message has 512 unknown bytes. [ 220.285022][ T994] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 220.294361][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.303757][ T994] usb 5-1: config 0 descriptor?? [ 220.316684][ T994] cp210x 5-1:0.0: cp210x converter detected [ 220.422879][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 220.455333][ T8974] input: syz1 as /devices/virtual/input/input44 [ 220.574632][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 220.594523][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.622993][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.640370][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.663991][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.676300][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.702026][ T10] usb 3-1: config 0 descriptor?? [ 220.716494][ T994] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 220.939253][ T994] usb 5-1: cp210x converter now attached to ttyUSB0 [ 221.116735][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.127934][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.140325][ T5707] usb 5-1: USB disconnect, device number 22 [ 221.149013][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.163489][ T5707] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 221.178690][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.193760][ T5707] cp210x 5-1:0.0: device disconnected [ 221.205967][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.229755][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.252213][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.272886][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.280947][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.291029][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 221.306623][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 221.391331][ T5707] usb 3-1: USB disconnect, device number 28 [ 222.015660][ T9009] sctp: [Deprecated]: syz.4.1069 (pid 9009) Use of int in max_burst socket option. [ 222.015660][ T9009] Use struct sctp_assoc_value instead [ 222.092860][ T5707] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 222.334460][ T994] usb 4-1: USB disconnect, device number 25 [ 222.352876][ T46] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 224.714105][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.798820][ T46] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 224.860549][ T46] usb 3-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 224.888140][ T9022] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1074'. [ 227.293535][ T46] usb 3-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config [ 227.818669][ T9022] openvswitch: netlink: Message has 512 unknown bytes. [ 227.970419][ T46] usb 3-1: config 63 has no interface number 0 [ 228.056449][ T5707] usb 2-1: device descriptor read/64, error -110 [ 228.127255][ T46] usb 3-1: config 63 interface 66 has no altsetting 0 [ 228.271071][ T46] usb 3-1: string descriptor 0 read error: -71 [ 228.372543][ T9029] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1076'. [ 228.434742][ T5707] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 228.451197][ T46] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 228.465530][ T9029] openvswitch: netlink: Message has 512 unknown bytes. [ 228.638882][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.670395][ T5707] usb 2-1: device descriptor read/64, error -32 [ 228.691259][ T46] usb 3-1: can't set config #63, error -71 [ 228.761284][ T46] usb 3-1: USB disconnect, device number 29 [ 228.857276][ T5707] usb usb2-port1: attempt power cycle [ 229.395505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 229.437717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 229.467707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 229.496453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 229.876493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 229.895116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 229.935115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 229.955539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 230.014198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 235.514771][ C1] sched: DL replenish lagged too much [ 258.131775][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.146699][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.222791][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.233426][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.172741][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 363.179718][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9055/1:b..l P4989/1:b..l [ 363.188778][ C0] rcu: (detected by 0, t=10502 jiffies, g=38145, q=829 ncpus=2) [ 363.196516][ C0] task:udevd state:R running task stack:23704 pid:4989 tgid:4989 ppid:1 task_flags:0x400140 flags:0x00080000 [ 363.210034][ C0] Call Trace: [ 363.213325][ C0] [ 363.216252][ C0] __schedule+0x17d9/0x56c0 [ 363.220742][ C0] ? __kernel_text_address+0xd/0x30 [ 363.225927][ C0] ? arch_stack_walk+0xfb/0x150 [ 363.230791][ C0] ? __pfx___schedule+0x10/0x10 [ 363.235660][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.240430][ C0] preempt_schedule_irq+0x4d/0xa0 [ 363.245463][ C0] irqentry_exit+0x14f/0x8f0 [ 363.250058][ C0] ? trace_irq_disable+0x3b/0x140 [ 363.255095][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.261078][ C0] RIP: 0010:unwind_next_frame+0x229/0x2550 [ 363.266890][ C0] Code: 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d 24 85 7c b8 72 91 4c 89 e0 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 66 1d 00 00 45 8b 04 24 <41> ff c0 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 34 45 a0 5d bd 90 [ 363.286485][ C0] RSP: 0018:ffffc90002ddf760 EFLAGS: 00000246 [ 363.292565][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000080000000 [ 363.300543][ C0] RDX: 00000000000ab109 RSI: ffffffff8c293c00 RDI: ffffffff8c293bc0 [ 363.308531][ C0] RBP: ffffffff8224ceec R08: 000000000003aa7a R09: 0000000000000000 [ 363.316512][ C0] R10: ffffc90002ddf858 R11: ffffffff81b116c0 R12: ffffffff91774bb8 [ 363.324476][ C0] R13: 000000000003aa7a R14: ffffc90002ddf808 R15: 00000000000124ce [ 363.332453][ C0] ? __free_frozen_pages+0xc0c/0xd20 [ 363.337755][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 363.343930][ C0] ? __free_frozen_pages+0xc0d/0xd20 [ 363.349226][ C0] ? unwind_next_frame+0x8f/0x2550 [ 363.354347][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 363.360511][ C0] arch_stack_walk+0x11b/0x150 [ 363.365280][ C0] ? __free_frozen_pages+0xc0d/0xd20 [ 363.370546][ C0] stack_trace_save+0xa9/0x100 [ 363.375300][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 363.380682][ C0] ? stack_depot_save_flags+0x33/0x800 [ 363.386155][ C0] save_stack+0x122/0x230 [ 363.390494][ C0] ? __pfx_save_stack+0x10/0x10 [ 363.395347][ C0] ? __free_frozen_pages+0xc0d/0xd20 [ 363.400644][ C0] ? lock_release+0x4b/0x3c0 [ 363.405232][ C0] ? page_ext_get+0x22/0x2e0 [ 363.409832][ C0] __reset_page_owner+0x71/0x1f0 [ 363.414770][ C0] __free_frozen_pages+0xc0d/0xd20 [ 363.419865][ C0] ? __free_slab+0x172/0x280 [ 363.424440][ C0] __slab_free+0x274/0x2c0 [ 363.428872][ C0] qlist_free_all+0x99/0x100 [ 363.433465][ C0] ? do_getname+0x2e/0x250 [ 363.437879][ C0] kasan_quarantine_reduce+0x148/0x160 [ 363.443351][ C0] __kasan_slab_alloc+0x22/0x80 [ 363.448311][ C0] kmem_cache_alloc_noprof+0x2b8/0x650 [ 363.453790][ C0] ? do_getname+0x2e/0x250 [ 363.458211][ C0] ? kmem_cache_alloc_noprof+0x156/0x650 [ 363.463941][ C0] do_getname+0x2e/0x250 [ 363.468170][ C0] ? getname_flags+0x11/0x20 [ 363.472741][ C0] vfs_fstatat+0x45/0x170 [ 363.477074][ C0] __x64_sys_newfstatat+0x151/0x200 [ 363.482284][ C0] ? lock_release+0x4b/0x3c0 [ 363.486882][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 363.492610][ C0] ? kill_proc_info+0x21/0x180 [ 363.497388][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.502162][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.506935][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.513006][ C0] do_syscall_64+0x174/0x580 [ 363.517605][ C0] ? clear_bhb_loop+0x40/0x90 [ 363.522275][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.528164][ C0] RIP: 0033:0x7fcf72f11b0a [ 363.532593][ C0] RSP: 002b:00007ffdca850ba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 363.541014][ C0] RAX: ffffffffffffffda RBX: 0000558010110420 RCX: 00007fcf72f11b0a [ 363.548995][ C0] RDX: 00007ffdca850bb0 RSI: 00005580100feef3 RDI: 00000000ffffff9c [ 363.556974][ C0] RBP: 000055804e48f148 R08: 00063478c1c69200 R09: 3fffffffffffffff [ 363.564946][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.572907][ C0] R13: 00007ffdca850bb0 R14: 0000000000000000 R15: 00063478c1c69200 [ 363.580888][ C0] [ 363.583906][ C0] task:syz.3.1086 state:R running task stack:26152 pid:9055 tgid:9055 ppid:5633 task_flags:0x40044c flags:0x08080002 [ 363.597402][ C0] Call Trace: [ 363.600682][ C0] [ 363.603614][ C0] __schedule+0x17d9/0x56c0 [ 363.608134][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 363.613166][ C0] ? __pfx___schedule+0x10/0x10 [ 363.618017][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.622762][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 363.628141][ C0] preempt_schedule_common+0x82/0xd0 [ 363.633439][ C0] preempt_schedule_thunk+0x16/0x40 [ 363.638662][ C0] _raw_spin_unlock+0x3f/0x50 [ 363.643346][ C0] __zap_vma_range+0x3e40/0x4c70 [ 363.648316][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 363.653621][ C0] ? mas_find+0xab1/0xcf0 [ 363.657963][ C0] unmap_vmas+0x390/0x550 [ 363.662307][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 363.667168][ C0] exit_mmap+0x293/0x9f0 [ 363.671394][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 363.676154][ C0] ? __pfx_exit_aio+0x10/0x10 [ 363.680841][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 363.686484][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 363.691693][ C0] __mmput+0x118/0x420 [ 363.695777][ C0] exit_mm+0x221/0x2d0 [ 363.699850][ C0] do_exit+0x6cd/0x2360 [ 363.704009][ C0] ? __pfx_do_exit+0x10/0x10 [ 363.708602][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 363.713630][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.718394][ C0] do_group_exit+0x22d/0x2f0 [ 363.723054][ C0] ? trace_irq_enable+0x3b/0x140 [ 363.728035][ C0] get_signal+0x121b/0x12c0 [ 363.732564][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 363.738122][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 363.744314][ C0] ? __fget_files+0x2a/0x420 [ 363.748916][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.753688][ C0] exit_to_user_mode_loop+0x104/0x730 [ 363.759074][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.763843][ C0] ? do_fast_syscall_32+0x33/0x70 [ 363.768875][ C0] __do_fast_syscall_32+0x45b/0x6f0 [ 363.774065][ C0] ? do_fast_syscall_32+0x33/0x70 [ 363.779096][ C0] ? irqentry_exit+0x10f/0x8f0 [ 363.783864][ C0] ? trace_irq_disable+0x3b/0x140 [ 363.788900][ C0] do_fast_syscall_32+0x33/0x70 [ 363.793756][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.800096][ C0] RIP: 0023:0xf7f170ec [ 363.804164][ C0] RSP: 002b:00000000f74ffad0 EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 363.812584][ C0] RAX: 0000000033c64000 RBX: 0000000033c64000 RCX: 00000000005c0000 [ 363.820557][ C0] RDX: 0000000000000003 RSI: 0000000000100001 RDI: 0000000000000004 [ 363.828517][ C0] RBP: 0000000000000040 R08: 0000000000000000 R09: 0000000000000000 [ 363.836490][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 363.844462][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.852441][ C0] [ 363.855463][ C0] rcu: rcu_preempt kthread starved for 8029 jiffies! g38145 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 363.866565][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 363.876523][ C0] rcu: RCU grace-period kthread stack dump: [ 363.882411][ C0] task:rcu_preempt state:R running task stack:28056 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 363.895917][ C0] Call Trace: [ 363.899198][ C0] [ 363.902133][ C0] __schedule+0x17d9/0x56c0 [ 363.906644][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.911420][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.916186][ C0] ? __pfx___schedule+0x10/0x10 [ 363.921021][ C0] ? schedule+0x90/0x360 [ 363.925256][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.930027][ C0] ? lock_release+0x4b/0x3c0 [ 363.934626][ C0] schedule+0x164/0x360 [ 363.938786][ C0] schedule_timeout+0x152/0x2c0 [ 363.943646][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 363.949026][ C0] ? __pfx_process_timeout+0x10/0x10 [ 363.954326][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 363.960138][ C0] ? prepare_to_swait_event+0x322/0x350 [ 363.965684][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 363.970514][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 363.976649][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 363.981934][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 363.987141][ C0] ? trace_irq_enable+0x3b/0x140 [ 363.992091][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 363.996681][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 364.001877][ C0] ? __kthread_parkme+0x71/0x1f0 [ 364.006829][ C0] ? __kthread_parkme+0x196/0x1f0 [ 364.011866][ C0] kthread+0x388/0x470 [ 364.015929][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 364.021105][ C0] ? __pfx_kthread+0x10/0x10 [ 364.025678][ C0] ret_from_fork+0x514/0xb70 [ 364.030271][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 364.035385][ C0] ? __switch_to+0xc89/0x1420 [ 364.040071][ C0] ? __pfx_kthread+0x10/0x10 [ 364.044671][ C0] ret_from_fork_asm+0x1a/0x30 [ 364.049447][ C0] [ 364.052461][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 364.058786][ C0] Sending NMI from CPU 0 to CPUs 1: [ 364.063996][ C1] NMI backtrace for cpu 1 [ 364.064021][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.064044][ C1] Tainted: [L]=SOFTLOCKUP [ 364.064050][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.064061][ C1] RIP: 0010:unwind_next_frame+0xb86/0x2550 [ 364.064086][ C1] Code: fc ff df 41 80 3c 04 00 74 09 e8 c5 92 bc 00 4c 8b 04 24 49 8d 50 f8 4d 8b 6e 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 10 <0f> b6 04 01 84 c0 0f 85 3b 14 00 00 41 83 3e 00 0f 95 c0 49 39 d7 [ 364.064100][ C1] RSP: 0000:ffffc90000a07de0 EFLAGS: 00000246 [ 364.064116][ C1] RAX: dffffc0000000000 RBX: 1ffff92000140fd2 RCX: 1ffff92000140fd1 [ 364.064129][ C1] RDX: ffffc90000197e48 RSI: 0000000000000002 RDI: ffffc90000a07e98 [ 364.064141][ C1] RBP: 1ffffffff22dc1d4 R08: ffffc90000197e50 R09: 0000000000000000 [ 364.064152][ C1] R10: ffffc90000a07ed8 R11: ffffffff81b116c0 R12: 1ffff92000140fd3 [ 364.064165][ C1] R13: ffffc90000198000 R14: ffffc90000a07e88 R15: ffffc90000190000 [ 364.064177][ C1] FS: 0000000000000000(0000) GS:ffff88812535d000(0000) knlGS:0000000000000000 [ 364.064191][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.064203][ C1] CR2: 0000000080023000 CR3: 0000000060368000 CR4: 00000000003526f0 [ 364.064217][ C1] Call Trace: [ 364.064223][ C1] [ 364.064232][ C1] ? default_idle+0x9/0x20 [ 364.064254][ C1] ? unwind_next_frame+0x8f/0x2550 [ 364.064274][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 364.064298][ C1] arch_stack_walk+0x11b/0x150 [ 364.064320][ C1] ? default_idle+0x9/0x20 [ 364.064341][ C1] stack_trace_save+0xa9/0x100 [ 364.064363][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 364.064386][ C1] ? stack_depot_save_flags+0x33/0x800 [ 364.064409][ C1] ? common_startup_64+0x128/0x157 [ 364.064431][ C1] kasan_save_track+0x3e/0x80 [ 364.064451][ C1] ? kasan_save_track+0x3e/0x80 [ 364.064470][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 364.064490][ C1] ? kmem_cache_alloc_node_noprof+0x380/0x680 [ 364.064510][ C1] ? __alloc_skb+0x276/0x7a0 [ 364.064534][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 364.064560][ C1] ? nft_synproxy_eval_v4+0x37b/0x530 [ 364.064576][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 364.064592][ C1] ? nft_do_chain+0x48d/0x1b10 [ 364.064608][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 364.064625][ C1] ? nf_hook_slow+0xc5/0x220 [ 364.064648][ C1] ? NF_HOOK+0x21f/0x3c0 [ 364.064670][ C1] ? NF_HOOK+0x336/0x3c0 [ 364.064690][ C1] ? process_backlog+0xa34/0x1860 [ 364.064707][ C1] ? __napi_poll+0xaa/0x330 [ 364.064722][ C1] ? net_rx_action+0x61d/0xf50 [ 364.064738][ C1] ? handle_softirqs+0x225/0x840 [ 364.064759][ C1] ? __irq_exit_rcu+0xca/0x220 [ 364.064779][ C1] ? irq_exit_rcu+0x9/0x30 [ 364.064799][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 364.064816][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.064833][ C1] ? pv_native_safe_halt+0xf/0x20 [ 364.064850][ C1] ? default_idle+0x9/0x20 [ 364.064882][ C1] __kasan_slab_alloc+0x6c/0x80 [ 364.064903][ C1] kmem_cache_alloc_node_noprof+0x380/0x680 [ 364.064924][ C1] ? __alloc_skb+0x276/0x7a0 [ 364.064941][ C1] ? kmem_cache_alloc_node_noprof+0x23a/0x680 [ 364.064962][ C1] __alloc_skb+0x276/0x7a0 [ 364.064982][ C1] synproxy_send_client_synack+0x175/0xde0 [ 364.065007][ C1] ? synproxy_pernet+0x45/0x270 [ 364.065023][ C1] ? rcu_is_watching+0x15/0xb0 [ 364.065040][ C1] ? synproxy_pernet+0x45/0x270 [ 364.065056][ C1] ? rcu_is_watching+0x15/0xb0 [ 364.065072][ C1] ? synproxy_pernet+0x45/0x270 [ 364.065088][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 364.065114][ C1] ? synproxy_pernet+0x45/0x270 [ 364.065132][ C1] nft_synproxy_eval_v4+0x37b/0x530 [ 364.065151][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 364.065168][ C1] ? __ip_vs_conn_in_get+0x2db/0x10f0 [ 364.065186][ C1] ? nf_ip_checksum+0x13c/0x510 [ 364.065206][ C1] nft_synproxy_do_eval+0x335/0x550 [ 364.065223][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 364.065241][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 364.065259][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 364.065279][ C1] nft_do_chain+0x48d/0x1b10 [ 364.065301][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 364.065321][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 364.065354][ C1] nft_do_chain_inet+0x360/0x4b0 [ 364.065371][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 364.065392][ C1] ? rcu_is_watching+0x15/0xb0 [ 364.065409][ C1] ? lock_acquire+0x5f/0x350 [ 364.065423][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 364.065441][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 364.065458][ C1] nf_hook_slow+0xc5/0x220 [ 364.065483][ C1] NF_HOOK+0x21f/0x3c0 [ 364.065505][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 364.065533][ C1] ? NF_HOOK+0x9e/0x3c0 [ 364.065554][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 364.065576][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 364.065601][ C1] ? ip_local_deliver+0x113/0x190 [ 364.065624][ C1] NF_HOOK+0x336/0x3c0 [ 364.065647][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 364.065668][ C1] ? NF_HOOK+0x9e/0x3c0 [ 364.065690][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 364.065712][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 364.065734][ C1] ? ip_rcv_core+0x88d/0xd50 [ 364.065757][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 364.065779][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 364.065801][ C1] process_backlog+0xa34/0x1860 [ 364.065820][ C1] ? process_backlog+0x3c3/0x1860 [ 364.065842][ C1] __napi_poll+0xaa/0x330 [ 364.065858][ C1] net_rx_action+0x61d/0xf50 [ 364.065883][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 364.065912][ C1] ? rcu_is_watching+0x15/0xb0 [ 364.065931][ C1] handle_softirqs+0x225/0x840 [ 364.065953][ C1] ? __irq_exit_rcu+0xca/0x220 [ 364.065976][ C1] __irq_exit_rcu+0xca/0x220 [ 364.065997][ C1] irq_exit_rcu+0x9/0x30 [ 364.066016][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 364.066034][ C1] [ 364.066039][ C1] [ 364.066045][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.066062][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 364.066081][ C1] Code: 9c 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 48 1c 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 364.066095][ C1] RSP: 0000:ffffc90000197e40 EFLAGS: 00000246 [ 364.066108][ C1] RAX: ffff88812535d000 RBX: ffffffff819a612c RCX: 0000000080000001 [ 364.066120][ C1] RDX: 0000000000000001 RSI: ffffffff8c293c00 RDI: ffffffff819a612c [ 364.066132][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 364.066144][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 364.066156][ C1] R13: 1ffff11003b5f000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 364.066170][ C1] ? do_idle+0x1cc/0x540 [ 364.066195][ C1] ? do_idle+0x1cc/0x540 [ 364.066218][ C1] default_idle+0x9/0x20 [ 364.066237][ C1] default_idle_call+0x72/0xb0 [ 364.066258][ C1] do_idle+0x1cc/0x540 [ 364.066281][ C1] ? __pfx_do_idle+0x10/0x10 [ 364.066307][ C1] cpu_startup_entry+0x43/0x60 [ 364.066330][ C1] start_secondary+0x101/0x110 [ 364.066345][ C1] common_startup_64+0x13e/0x157 [ 364.066371][ C1]