last executing test programs: 12.387620649s ago: executing program 0 (id=1771): openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x185300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r9 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000f348e7f6322d00000700000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$kcm(0x2, 0x7, 0x84) 11.817018505s ago: executing program 1 (id=1773): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000ac141400001300000000000000000000000000000000000002000020000000008d1408112db6e15da0522f586d632b9b7d088c69c58dd79fc65eea15a783aa9e86d81019327747f8477374604d701e9294a18287500332ac8ec7b706ea5faeec11b321d112d73868b583d66614297750271976f6764f68ad1c613bd3cdf38a969637a8aafacd6ad52d9518", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff00000000000000000000000044000800"/147], 0x16c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)}], 0x1}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) 10.396611486s ago: executing program 2 (id=1775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, 0x0, 0x0) socketpair(0x14, 0x5, 0x2, &(0x7f0000000040)) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f54020", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xffff, 0x0, 0x9}}}}}}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000200)=ANY=[], 0x6) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r5, @ANYBLOB="c28d4179101a1312e5061e1d202d914c121c49d07275c290c5c8f1ee51cfaef264a056278fcbd6ee41937a1e0299faec3afd56c9a41046b1e6b7236eb056e6c1cb42dc4cc0cc81fdd25bf8c5e6fa7188c441127dc6238d59615fe16972d08f87345853393e028b1ba22c15822a587d291d5c55a182", @ANYRES64=r5], 0x0) 8.750619829s ago: executing program 1 (id=1778): r0 = add_key$user(0x0, &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000007c0)="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", 0x161, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 8.702359105s ago: executing program 0 (id=1779): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.496625767s ago: executing program 1 (id=1780): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "4c5bc609e6c7daac34a4e79577c1a1cd04328de7b14fe42419f034949355897f7192490eb5a18607c9ec1a78dc17b52e840915a8891ad37149c000c20d6c9d8d", 0x37}, 0x48, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x100000001) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xabe, 0xac, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe9, 0x3}}}}}]}}]}}, 0x0) keyctl$link(0x8, r6, r6) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) pread64(r4, &(0x7f0000000380)=""/235, 0xeb, 0xb) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.460594756s ago: executing program 0 (id=1781): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) unshare(0x62040200) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f00000197c0)={&(0x7f0000019640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000019780)={&(0x7f0000019680)={0xe0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) 7.160299303s ago: executing program 4 (id=1783): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x8}, 0x94) 7.00688941s ago: executing program 4 (id=1784): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.850107375s ago: executing program 2 (id=1785): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c00000064d46c493a0a58adb720bcfe28f07d93dcbc32926cddfc42689c57d44ca65a39b314bdf1fdfdc1035f4ccd75e1d05289490e234db4d859eb80c15ae0e3cf6433e62dbfc50182008e2a4dbd1a2c2864d42508fac84ebe5c30160850645b4632d7efde501d587fa7895a5cb6399b0106", @ANYRES16=r0, @ANYBLOB="090126bd7000ffdbdf255700000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x14) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a3ff33"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4000) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) syz_io_uring_setup(0x10d5, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffc, 0x34f, 0x0, r6}, &(0x7f0000000280), &(0x7f0000000140)) write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1) close_range(0xffffffffffffffff, r4, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "c32d78e63452391a", "eb5716daa623b6397db5850576718cae", "49087fcf", "2777dd6085930d5d"}, 0x28) write$binfmt_script(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000002, 0x0) writev(r4, 0x0, 0x0) syz_usb_disconnect(r3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) clock_gettime(0x0, &(0x7f0000000040)) 6.536726944s ago: executing program 4 (id=1786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0xfa1, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @rand_addr=0x64010102}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0x8, {[@timestamp={0x8, 0xa, 0xe, 0xbb}]}}, {"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"}}}}, 0xfaf) 6.205244888s ago: executing program 4 (id=1787): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r1, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) 5.837047871s ago: executing program 4 (id=1788): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000ac141400001300000000000000000000000000000000000002000020000000008d1408112db6e15da0522f586d632b9b7d088c69c58dd79fc65eea15a783aa9e86d81019327747f8477374604d701e9294a18287500332ac8ec7b706ea5faeec11b321d112d73868b583d66614297750271976f6764f68ad1c613bd3cdf38a969637a8aafacd6ad52d9518", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff00000000000000000000000044000800"/147], 0x16c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)}], 0x1}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) 5.262464115s ago: executing program 0 (id=1789): openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x185300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039040000", @ANYRES32=r4, @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r9 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000f348e7f6322d00000700000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$kcm(0x2, 0x7, 0x84) 5.242019028s ago: executing program 3 (id=1790): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.09881082s ago: executing program 3 (id=1791): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.818750766s ago: executing program 2 (id=1792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.807494694s ago: executing program 3 (id=1793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x4}]}}}], 0x18}, 0x0) 3.929261118s ago: executing program 0 (id=1794): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003052bbd7000219d020000000000", @ANYRES32=0x0], 0x4c}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x18) connect$pptp(r1, &(0x7f0000000380)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0x13) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) 3.832698302s ago: executing program 1 (id=1795): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}}}}], 0x38}, 0xc014) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)) 3.773968112s ago: executing program 2 (id=1796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000200)={0x5, 0x1, 0x2, "438783186b0030ed39e98706fdc01d224397c35c0fdcd803eaf89e9076a11e2c", 0x41416770}) 3.526121484s ago: executing program 3 (id=1797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0xfa1, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @rand_addr=0x64010102}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0x8, {[@timestamp={0x8, 0xa, 0xe, 0xbb}]}}, {"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"}}}}, 0xfaf) 2.580880419s ago: executing program 2 (id=1798): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000b6000040"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22880, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000000)=ANY=[], 0x5a}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.580384243s ago: executing program 0 (id=1799): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) unshare(0x62040200) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f00000197c0)={&(0x7f0000019640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000019780)={&(0x7f0000019680)={0xe0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) 1.780147232s ago: executing program 1 (id=1800): socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000400)="a38d1ebaa67401aa83cea1a04052671e5687f8e3516041a71afa8e21b1b77d7f00764f0000604e03c30ab9948dd0f840e98c69febbcf358320ab61770c480fdf791feb9259ac97428ab35a663658a6c7be0250e82302c3a49ef7f584cd219f0062bd3c7429168c2ada56720bc3994c03d68d4d94ef5dde7b1dce376d47514d785fd513cb9695ead24de25f4dd027c5ff024add6679b6b25c22b79047f328d64f947d086f5f09490b56530093099f506efa155f65bbdcb8cb948eb23536c90ca6a399497977939d285c1eabcb70906b41c9affd7aa7761841d66a8b43e437b500"/233, 0xe9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r3 = fanotify_init(0x200, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000015}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) r6 = syz_open_dev$vbi(0x0, 0x1, 0x2) fcntl$dupfd(r6, 0x0, r6) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x400000, 0x3010}, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000600)={0xfffffffffffffffe, 0x10000000000000, 0x100000000000, 0x3, 0x7}, 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 1.121883971s ago: executing program 2 (id=1801): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1100"/12, @ANYBLOB="04"], 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) close(r0) r2 = syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206fede101c8d"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x81204101, 0xfffffffffffffffe) syz_usb_control_io(r2, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000102037756799068b214061751e54673d303af980cc132d41c35b471bfc0158b85018f2cf33418590ff8cea86505c64604eaa0851a263357a8b6ba3d7db4"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x3, 0x46e, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x67, 0x61, 0x6f, 0x20, 0xacd, 0x300, 0x1d75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45c, 0x2, 0x3, 0x9, 0x0, 0x5, [{{0x9, 0x4, 0x49, 0x4, 0x7, 0x9c, 0x7b, 0x44, 0x7, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xab, 0xda, 0xf7}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x0, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x9, 0x9, 0xa}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x55, 0xc9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x4}, @generic={0xdb, 0xe, "5c50c9613c2f0c032d24cff7fbc7e655bd73208d51e9583755f1b9f3bbf61ce6cba93fc997efe510e074a5ce3ff42a816a3d0ecddd66121974f65c2867dfa2157b9e9150b2a911829bd5ed1412c437656ef5c6b6b7edd366a91117b24be65ce5ed686233ca282c152ef52352b7539a45932ceba8d5d75f759a2096f73e0ec8c33852c5c27bed25d0aa995d4ed73c85232800037a8bda5639faa158cb0d355cbaca82ffa0d1182cad0281c958a03a698dceb29464b65fc9dc0644cd55c21ed132b7a657b0067c79143189118e9c0a1474d178ea7206169f1dc8"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x70, 0x7, 0x3, 0xe4, [@generic={0x60, 0x10, "89bfb1464e74574e07d27937de372fcc0b58a051007d28ac12bedd5823a6e8b3b8457a8b1443decb0684644225861ccd57f2abd83ee76de0d8d653656ce85d82425beb789a132b7b02fe255273158473a480420d14d02bb7c17530a50780"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x28, 0x12, 0x6, 0x8b, [@generic={0xc3, 0x30, "d432df35422c40974b49498f3772b050706bc79d81d4e5c9c218634bc23ebec9f22c4107e2272c40c0995f90b3a8c4ee89706b83849311193768a36f16257360a76d287493b5e800ea4a261f5eb5303b1132893dd505cd7ed91ee3b5886fcb8d2376032ee955fb2b9de227e9e5cc1cfcf89de8a69cad51df07554a3a5199f591b80b9d332e3c5a3ea46b0cc40d75373d93ba831ba2d3e1b0d971cede730f5f3301e158a806094a7462731ac602907b530d1f40e710b5809ad18584a5c931a1388f"}]}}]}}, {{0x9, 0x4, 0x75, 0x8, 0xe, 0x10, 0x88, 0x5f, 0x3f, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x10, 0x2, 0x5, 0x1, "a507", "52cc"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x80, 0x2, 0x0, "92c3f2"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xffff, 0x377, 0x6, "d5e4"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0x10, 0x7, "ce6222c8"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x81, 0x2, 0x2, 0x25, "e0b4d00c2a"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xe, 0x8}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x0, 0x9}]}], [{{0x9, 0x5, 0xa, 0xc, 0x10, 0x5, 0x6, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x0, 0x2e, 0xbf}}, {{0x9, 0x5, 0x2, 0x1, 0x332ea8a203553893, 0x5, 0x7, 0x3}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x6, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xee, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xe}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x9, 0xd, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x6, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x9, 0x9, 0x1}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x9, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x6}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0xc4, 0xfc, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xfff8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0xc6}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x0, 0x7, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xb2, 0x24, 0x8, [@generic={0x6e, 0xd, "3dbbc02711965ad3a2ae8ca2882c7e287e4bbfd4b19458035da0a6f02b3d39d9a8a3c0e83c2b26c483ecb24c6f146d70ede424d3a826b98048306935e71a970e6d16ad9923b2737f987d7544a95539bfca2a7c4e07c5801f3b6894e85abc70a4dfa733194f17344e8e641bf9"}, @generic={0x7f, 0xa, "2d59d0921756371849be8d519430f32acd34c3cc242b4abd03e98683644044683913d8117be861ce733e757a8b55f4589058cf6cf7329ac72bb9cfe77073f178148b5ef2fcbb9ad5929c439f3f0898d60ce94e13fe1f36e1acdf20000accfcf705ea53e2f848118016320bfb4d93088c7876a5d66d1322946f5a28c8f2"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x9, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc1, 0x9}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3c7, 0x2, 0xf3, 0x17}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0xd, 0xf, 0x9}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x24, 0xfc, 0xe, 0x8, 0x3}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x446}}, {0xae, &(0x7f0000000400)=@string={0xae, 0x3, "44303c9ff8d48f36a37224e9c43818aa454d9960c9dbc3be19d02b6fb9d711c2cd5686f0881afd1fbbc604702436c1198b6c1f035bf43b894e2010220becc5a598ba5ba7a353e05cbbe1e9eee4924ea3e96f99f7014dc0c7c88b7766c31da4c8dc65a9c3e4ed7ad74b90277f45c98579e2ca3fbc6d4fe9b24212d854cb916fbc0ef3f5c975f7010449113afefff1e491e7b3e8e9b301f04a8ba74372fba4a8c621edfb34e066dfcdb7f4fafa"}}, {0xce, &(0x7f00000005c0)=@string={0xce, 0x3, "5e51a1256eb5a4dbb1d887164841566a16316ce3a8195b2369e8631afa8fe4c5217bcee0895f681d1e3b313d8b40f1945dd32f3dabce2b0214e9dcbeb1af96079d0c4ecdadcf52a2188e11aa658b26c42b5775b7ce7f5e7e13ee930924abe736b0663d3604dcac13d1cbf47bdb8e50c28f0c26b15d0cb7e9e704ee3cdd025c7fd0400d74ec5a4187f4dadd82a01e23e7ffab957de64a30e2df78df8e031e606cc3742a8f14c6d1d5d06d47e1e04de8797c0cdc964055599dd574c57ac13cdbaa8845cac4efba77ce507b7a62"}}]}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) 1.117250136s ago: executing program 3 (id=1802): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x44}}, 0x0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000500)="0d84c489df01448e81c7fd52b747bdacc860a8f70792443de0737c9d615eda461d5d1c360ced01330200f8abe8d65a8dd7463a096ed6f1b70a068941817d28bdcf8d8594221761ed09a5206c6028d3d348051ae86b08c26c008751bab3356a87acd9b43e78c30fec243ee96a588b15667cf6ce3c9bd0d2f32cc019ddc54723565096117aa2d4cf98aac638ec8d1a590a0a55ac2ec05028", 0x97, r3) socket$netlink(0x10, 0x3, 0xb) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) 947.80337ms ago: executing program 4 (id=1803): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c00000064d46c493a0a58adb720bcfe28f07d93dcbc32926cddfc42689c57d44ca65a39b314bdf1fdfdc1035f4ccd75e1d05289490e234db4d859eb80c15ae0e3cf6433e62dbfc50182008e2a4dbd1a2c2864d42508fac84ebe5c30160850645b4632d7efde501d587fa7895a5cb6399b0106", @ANYRES16=r0, @ANYBLOB="090126bd7000ffdbdf255700000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x14) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a3ff33"], 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4000) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) syz_io_uring_setup(0x10d5, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffc, 0x34f, 0x0, r6}, &(0x7f0000000280), &(0x7f0000000140)) write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1) close_range(0xffffffffffffffff, r4, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "c32d78e63452391a", "eb5716daa623b6397db5850576718cae", "49087fcf", "2777dd6085930d5d"}, 0x28) write$binfmt_script(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000002, 0x0) writev(r4, 0x0, 0x0) syz_usb_disconnect(r3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) clock_gettime(0x0, &(0x7f0000000040)) 946.553106ms ago: executing program 1 (id=1804): socket$can_j1939(0x1d, 0x2, 0x7) landlock_restrict_self(0xffffffffffffffff, 0x0) open(0x0, 0x141080, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000b00)) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x5, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0xc, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0, len=0, err=-2) [ 321.866366][ T5904] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 322.016362][ T5904] usb 4-1: device descriptor read/64, error -71 [ 322.189276][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.972'. [ 322.266106][ T5904] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 322.406508][ T5904] usb 4-1: device descriptor read/64, error -71 [ 322.518073][ T5904] usb usb4-port1: attempt power cycle [ 322.868536][ T5904] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 322.933502][ T9105] netlink: 'syz.0.976': attribute type 33 has an invalid length. [ 322.960793][ T5904] usb 4-1: device descriptor read/8, error -71 [ 323.216172][ T5904] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 323.246993][ T5904] usb 4-1: device descriptor read/8, error -71 [ 323.289370][ T977] usb 2-1: USB disconnect, device number 24 [ 323.312158][ T9105] netlink: 152 bytes leftover after parsing attributes in process `syz.0.976'. [ 323.356659][ T5904] usb usb4-port1: unable to enumerate USB device [ 323.411518][ T9105] netlink: 'syz.0.976': attribute type 10 has an invalid length. [ 323.552386][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.562201][ T9105] team0: Port device bond0 added [ 324.520046][ T9121] sctp: [Deprecated]: syz.1.981 (pid 9121) Use of int in max_burst socket option deprecated. [ 324.520046][ T9121] Use struct sctp_assoc_value instead [ 324.571032][ T9119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.979'. [ 324.686244][ T5957] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 325.569721][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.638592][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.650050][ T5957] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 325.660676][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.706100][ T5957] usb 5-1: config 0 descriptor?? [ 326.149364][ T5957] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 326.247380][ T5957] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 326.455403][ T5957] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x4D [ 326.709291][ T5957] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 327.397619][ T5957] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -32 [ 327.438314][ T5957] usb 5-1: USB disconnect, device number 33 [ 330.263753][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 330.848516][ T5912] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 331.256672][ T9167] hsr_slave_1 (unregistering): left promiscuous mode [ 331.301105][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 331.985113][ T5912] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 332.065729][ T5912] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 332.162979][ T5912] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.290329][ T5912] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.447754][ T5912] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.636639][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.906508][ T5911] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 334.088978][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.260055][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.501632][ T5911] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 334.629912][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.777820][ T5911] usb 5-1: config 0 descriptor?? [ 334.894860][ T5912] usb 4-1: can't set config #16, error -71 [ 334.942888][ T5912] usb 4-1: USB disconnect, device number 23 [ 335.034065][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 335.328188][ T5911] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 335.406466][ T5911] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 335.629424][ T5911] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x4D [ 335.843776][ T5911] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 335.940477][ T5911] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 336.201705][ T5911] usb 5-1: USB disconnect, device number 34 [ 337.260961][ T9219] syzkaller0: entered promiscuous mode [ 337.295245][ T9219] syzkaller0: entered allmulticast mode [ 337.540444][ T5911] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 337.711569][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 338.332567][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.390166][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.400254][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 338.412520][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 338.424782][ T5911] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 338.434911][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.532718][ T5911] hub 2-1:1.0: bad descriptor, ignoring hub [ 338.674523][ T9240] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 338.815987][ T5911] hub 2-1:1.0: probe with driver hub failed with error -5 [ 338.824857][ T5911] cdc_wdm 2-1:1.0: skipping garbage [ 338.830253][ T5911] cdc_wdm 2-1:1.0: skipping garbage [ 338.838973][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.839136][ T5911] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 338.855864][ T5911] cdc_wdm 2-1:1.0: Unknown control protocol [ 338.883837][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.139292][ T5911] usb 2-1: USB disconnect, device number 25 [ 340.369973][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 340.523340][ T5911] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 340.574399][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.603237][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.694709][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 340.704825][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.717228][ T10] usb 5-1: config 0 descriptor?? [ 340.825187][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.836705][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.847220][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 340.861100][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 340.893330][ T5911] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 340.919745][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.957665][ T5911] cdc_wdm 2-1:1.0: skipping garbage [ 341.036484][ T5911] cdc_wdm 2-1:1.0: skipping garbage [ 341.048464][ T5911] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 341.054705][ T5911] cdc_wdm 2-1:1.0: Unknown control protocol [ 341.216023][ T10] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 341.226613][ T5911] usb 2-1: USB disconnect, device number 26 [ 341.244790][ T10] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 341.417431][ T10] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 341.631376][ T10] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 341.673085][ T10] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -32 [ 341.704991][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 341.717605][ T10] usb 5-1: USB disconnect, device number 35 [ 341.881291][ T9265] hsr_slave_1 (unregistering): left promiscuous mode [ 342.596603][ T5957] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 342.800525][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 342.885889][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 342.943297][ T5957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 342.955039][ T5957] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.980841][ T5957] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 342.992850][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.001080][ T5957] usb 4-1: Product: syz [ 343.105050][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.239849][ T5957] usb 4-1: Manufacturer: syz [ 343.258538][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.292300][ T5957] usb 4-1: SerialNumber: syz [ 343.345793][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 343.367088][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.411665][ T10] usb 3-1: config 0 descriptor?? [ 343.710804][ T5912] usb 3-1: USB disconnect, device number 21 [ 343.861437][ T9290] net_ratelimit: 16 callbacks suppressed [ 343.861447][ T9290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.889029][ T5911] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 345.101257][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 345.131609][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 345.220102][ T5911] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 345.235448][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.332110][ T5911] usb 5-1: config 0 descriptor?? [ 345.359639][ T5843] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 345.581680][ T5911] ath6kl: Failed to submit usb control message: -71 [ 345.597673][ T5911] ath6kl: unable to send the bmi data to the device: -71 [ 345.617740][ T5911] ath6kl: Unable to send get target info: -71 [ 345.646539][ T5911] ath6kl: Failed to init ath6kl core: -71 [ 345.724470][ T5911] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 345.823728][ T5911] usb 5-1: USB disconnect, device number 36 [ 346.150776][ T5957] usbhid 4-1:1.0: can't add hid device: -71 [ 346.178502][ T5957] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 346.232204][ T5957] usb 4-1: USB disconnect, device number 24 [ 346.766760][ T977] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 347.411549][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.810912][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.005160][ T977] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 348.030968][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.071424][ T977] usb 5-1: config 0 descriptor?? [ 348.574990][ T977] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 348.616503][ T977] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 348.773173][ T977] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00 [ 348.990249][ T977] cp2112 0003:10C4:EA90.000B: error requesting SMBus config [ 349.023399][ T977] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -32 [ 349.110858][ T977] usb 5-1: USB disconnect, device number 37 [ 352.041547][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 352.079795][ T5911] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 352.307842][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 352.359509][ T9371] tipc: Enabled bearer , priority 0 [ 352.372159][ T9371] tipc: Resetting bearer [ 352.378919][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 352.391225][ T5911] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 352.401729][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.422516][ T5911] usb 3-1: config 0 descriptor?? [ 352.430078][ T9370] tipc: Disabling bearer [ 352.706083][ T5911] ath6kl: Failed to submit usb control message: -71 [ 352.860109][ T5911] ath6kl: unable to send the bmi data to the device: -71 [ 352.867284][ T5911] ath6kl: Unable to send get target info: -71 [ 352.877046][ T5911] ath6kl: Failed to init ath6kl core: -71 [ 352.898237][ T9382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1059'. [ 352.908769][ T5911] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 352.913970][ T5911] usb 3-1: USB disconnect, device number 22 [ 352.990242][ T5912] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 353.173895][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.556423][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.654843][ T5912] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 353.667881][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.700375][ T5912] usb 1-1: config 0 descriptor?? [ 354.850461][ T5912] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 354.861111][ T5912] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 355.522867][ T5912] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 355.751115][ T5912] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 355.769024][ T5912] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -32 [ 355.843186][ T5912] usb 1-1: USB disconnect, device number 22 [ 356.969225][ T5912] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 357.181340][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 357.266004][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.278028][ T5912] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.290954][ T5912] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 357.313955][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.322717][ T5912] usb 4-1: Product: syz [ 357.326882][ T5912] usb 4-1: Manufacturer: syz [ 357.339346][ T5912] usb 4-1: SerialNumber: syz [ 357.356425][ T5912] usb 4-1: config 0 descriptor?? [ 357.587117][ T9424] sctp: [Deprecated]: syz.0.1071 (pid 9424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.587117][ T9424] Use struct sctp_sack_info instead [ 357.610949][ T5912] usb 4-1: USB disconnect, device number 25 [ 357.890430][ T9434] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1074'. [ 358.690321][ T9438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.878917][ T977] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 359.074002][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.118778][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.141307][ T9438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.160129][ T977] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 359.176938][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.274255][ T977] usb 5-1: config 0 descriptor?? [ 359.654253][ T9438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.672784][ T9455] fuse: Bad value for 'fd' [ 359.745077][ T977] usbhid 5-1:0.0: can't add hid device: -71 [ 359.753038][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 359.783989][ T977] usb 5-1: USB disconnect, device number 38 [ 360.048453][ T9438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.248748][ T9438] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.351345][ T9438] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.413888][ T9438] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.508830][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 361.616923][ T9438] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.648020][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 361.782741][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 362.624097][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 362.752004][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 362.809752][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.829481][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.843786][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.854050][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.231830][ T9481] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1087'. [ 363.266627][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 363.284412][ T24] usbtmc 1-1:16.0: can't read capabilities [ 363.484259][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 363.493914][ T9469] usbtmc 1-1:16.0: Unable to send data, error -71 [ 364.234993][ T5964] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 364.761166][ T5964] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 364.815857][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 364.844207][ T5964] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.853376][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.894427][ T5964] usb 5-1: config 0 descriptor?? [ 364.923166][ T5964] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 366.374899][ T5957] usb 1-1: USB disconnect, device number 23 [ 367.432260][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 367.599644][ T5957] usb 5-1: USB disconnect, device number 39 [ 367.636630][ T5843] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 367.709124][ T9525] tipc: Enabling of bearer rejected, failed to enable media [ 368.048652][ T9533] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1103'. [ 368.638805][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 368.638825][ T30] audit: type=1326 audit(1753537074.424:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.4.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e98e9a9 code=0x7fc00000 [ 368.766019][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 368.828596][ T30] audit: type=1326 audit(1753537074.424:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.4.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e98e9a9 code=0x7fc00000 [ 368.912746][ T30] audit: type=1326 audit(1753537074.424:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.4.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e98e9a9 code=0x7fc00000 [ 368.950921][ T30] audit: type=1326 audit(1753537074.424:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.4.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e98e9a9 code=0x7fc00000 [ 368.978063][ T30] audit: type=1326 audit(1753537074.424:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.4.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e98e9a9 code=0x7fc00000 [ 369.120475][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 369.159966][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.171232][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.185704][ T24] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 369.196168][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.204542][ T24] usb 1-1: Product: syz [ 369.210496][ T24] usb 1-1: Manufacturer: syz [ 369.215382][ T24] usb 1-1: SerialNumber: syz [ 369.895870][ T24] usb 1-1: config 0 descriptor?? [ 370.122684][ T24] usb 1-1: USB disconnect, device number 24 [ 370.403583][ T5964] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 370.617935][ T5964] usb 2-1: Using ep0 maxpacket: 8 [ 370.692025][ T5964] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 370.794834][ T5964] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.881094][ T5843] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 370.902366][ T5964] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 370.917108][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.936092][ T5964] usb 2-1: Product: syz [ 370.944643][ T5964] usb 2-1: Manufacturer: syz [ 370.959517][ T5964] usb 2-1: SerialNumber: syz [ 371.460128][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 371.522392][ T9580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.634660][ T9583] tipc: Enabling of bearer rejected, failed to enable media [ 373.731894][ T5964] usbhid 2-1:1.0: can't add hid device: -71 [ 373.765750][ T5964] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 373.897659][ T5964] usb 2-1: USB disconnect, device number 27 [ 373.925119][ T9610] netlink: 'syz.3.1121': attribute type 10 has an invalid length. [ 374.092784][ T9613] binfmt_misc: register: failed to install interpreter file ./file0 [ 374.112976][ T9610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.130257][ T9610] team0: Port device bond0 added [ 374.433972][ T5964] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 375.183169][ T5964] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.205437][ T5964] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 376.048799][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 376.074566][ T5964] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 376.098491][ T9625] netlink: 'syz.4.1127': attribute type 5 has an invalid length. [ 376.118917][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 376.136356][ T9625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1127'. [ 376.155547][ T5964] usb 2-1: SerialNumber: syz [ 376.225680][ T5964] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 376.239165][ T9625] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 376.257166][ T9625] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 376.268865][ T5964] usb-storage 2-1:1.0: USB Mass Storage device detected [ 376.288535][ T9625] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 376.301860][ T5964] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 376.327014][ T5964] scsi host1: usb-storage 2-1:1.0 [ 376.346852][ T9625] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 376.365492][ T9625] geneve2: entered promiscuous mode [ 376.371568][ T9625] geneve2: entered allmulticast mode [ 377.913730][ T5964] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 377.929966][ T5964] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 377.957756][ T9650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1131'. [ 378.578993][ T9642] hid-generic 0000:0000:0000.000D: pid 9642 passed too short report [ 379.552979][ T9659] netlink: zone id is out of range [ 379.578776][ T9659] netlink: zone id is out of range [ 379.612295][ T9659] netlink: zone id is out of range [ 379.661621][ T9659] netlink: zone id is out of range [ 380.613432][ T9659] netlink: zone id is out of range [ 380.618713][ T9659] netlink: zone id is out of range [ 380.673588][ T9659] netlink: zone id is out of range [ 380.720040][ T9659] netlink: zone id is out of range [ 380.725213][ T9659] netlink: zone id is out of range [ 380.762827][ T9659] netlink: zone id is out of range [ 381.139032][ T5957] usb 2-1: USB disconnect, device number 28 [ 382.281526][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.451777][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.602567][ T9701] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 384.967761][ T9698] binfmt_misc: register: failed to install interpreter file ./file0 [ 385.381128][ T977] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 386.000859][ T977] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.532823][ T977] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 386.677097][ T977] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 386.742257][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 386.872805][ T977] usb 3-1: SerialNumber: syz [ 386.939748][ T977] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 387.017883][ T2152] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 387.047762][ T977] usb-storage 3-1:1.0: USB Mass Storage device detected [ 387.071922][ T977] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 387.129446][ T977] scsi host1: usb-storage 3-1:1.0 [ 387.223279][ T2152] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 387.333595][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 387.387609][ T2152] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 387.434694][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.493249][ T2152] usb 1-1: config 0 descriptor?? [ 387.771509][ T5911] usb 3-1: USB disconnect, device number 23 [ 388.083764][ T2152] ath6kl: Failed to submit usb control message: -71 [ 388.118804][ T2152] ath6kl: unable to send the bmi data to the device: -71 [ 388.139996][ T2152] ath6kl: Unable to send get target info: -71 [ 388.200935][ T2152] ath6kl: Failed to init ath6kl core: -71 [ 388.228836][ T2152] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 388.276635][ T2152] usb 1-1: USB disconnect, device number 25 [ 389.524646][ T9751] tipc: Enabled bearer , priority 0 [ 390.007108][ T9754] syzkaller0: entered promiscuous mode [ 390.014449][ T9754] syzkaller0: entered allmulticast mode [ 390.024107][ T9754] tipc: Resetting bearer [ 390.034119][ T9760] net_ratelimit: 16 callbacks suppressed [ 390.034132][ T9760] netlink: zone id is out of range [ 390.048477][ T9760] netlink: zone id is out of range [ 390.054425][ T9760] netlink: zone id is out of range [ 390.059970][ T9760] netlink: zone id is out of range [ 390.070052][ T9760] netlink: zone id is out of range [ 390.108567][ T977] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 390.153799][ T9760] netlink: zone id is out of range [ 390.345236][ T9760] netlink: zone id is out of range [ 390.354312][ T9760] netlink: zone id is out of range [ 390.362750][ T9760] netlink: zone id is out of range [ 390.373697][ T9760] netlink: zone id is out of range [ 390.529386][ T9748] tipc: Resetting bearer [ 390.536023][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 390.559459][ T977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 391.175662][ T5957] tipc: Node number set to 1572806425 [ 391.189297][ T977] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 391.217380][ T977] usb 2-1: can't read configurations, error -71 [ 392.344325][ T9780] binfmt_misc: register: failed to install interpreter file ./file0 [ 392.495474][ T9779] program syz.3.1165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.704833][ T2152] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 393.334973][ C1] sd 0:0:1:0: [sda] tag#6646 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 393.345522][ C1] sd 0:0:1:0: [sda] tag#6646 CDB: Write(6) 0a 00 00 00 00 00 [ 393.390492][ T2152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.402053][ T2152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 393.435353][ T2152] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 393.449528][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.461005][ T2152] usb 5-1: SerialNumber: syz [ 393.551986][ T2152] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 393.584946][ T2152] usb-storage 5-1:1.0: USB Mass Storage device detected [ 393.605012][ T2152] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 393.628574][ T2152] scsi host1: usb-storage 5-1:1.0 [ 394.306079][ T9802] netlink: 'syz.4.1166': attribute type 3 has an invalid length. [ 395.953998][ T5911] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 396.127873][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 396.141289][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 396.157902][ T5911] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 396.169701][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.196856][ T5911] usb 4-1: config 0 descriptor?? [ 396.454517][ T5911] ath6kl: Failed to submit usb control message: -71 [ 396.467063][ T5911] ath6kl: unable to send the bmi data to the device: -71 [ 396.475871][ T5911] ath6kl: Unable to send get target info: -71 [ 396.494339][ T5911] ath6kl: Failed to init ath6kl core: -71 [ 396.512793][ T5911] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 396.528437][ T5911] usb 4-1: USB disconnect, device number 26 [ 396.959418][ T5911] usb 5-1: USB disconnect, device number 40 [ 398.183237][ T9748] tipc: Disabling bearer [ 399.055600][ T9823] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 399.357838][ T2152] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 400.263457][ T2152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.277993][ T2152] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 400.292010][ T2152] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.315618][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.415796][ T2152] usb 1-1: config 0 descriptor?? [ 400.459823][ T2152] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 401.084824][ T977] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 402.048304][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 402.409239][ T977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 402.450710][ T977] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 402.470581][ T977] usb 2-1: can't read configurations, error -71 [ 402.702539][ T9859] kvm_pr_unimpl_wrmsr: 4357 callbacks suppressed [ 402.702555][ T9859] kvm: kvm [9857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf448 [ 402.794341][ T9859] kvm: kvm [9857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfa49 [ 403.042050][ T9859] kvm: kvm [9857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb67a [ 403.059351][ T9859] kvm: kvm [9857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbd05 [ 403.076552][ T9859] kvm: kvm [9857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb43c [ 403.118201][ T9859] kvm: kvm [9857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa695 [ 403.134478][ T9859] kvm: kvm [9857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xdca3 [ 403.140949][ T5957] usb 1-1: USB disconnect, device number 26 [ 403.824346][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 403.957990][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 404.075519][ T9881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1195'. [ 405.491785][ T9903] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 406.518027][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.905110][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.535020][ T5911] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 408.552050][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 408.954846][ T9940] overlayfs: missing 'lowerdir' [ 409.983526][ T5911] usb 1-1: unable to get BOS descriptor or descriptor too short [ 410.439715][ T5911] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 410.447343][ T5911] usb 1-1: can't read configurations, error -71 [ 412.988824][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 413.184615][ T9973] input: syz0 as /devices/virtual/input/input38 [ 416.821946][ T5957] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 417.732367][ T5957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 417.754672][ T5957] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 417.765121][ T5957] usb 3-1: can't read configurations, error -71 [ 419.403547][T10009] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1232'. [ 419.574978][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x25e Unhandled WRMSR(0xc2) = 0x219 [ 419.575073][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x239 [ 419.575135][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x289 [ 419.575192][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x2b9 [ 419.575282][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x219 [ 419.575343][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x239 [ 419.575415][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x289 [ 419.575471][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x2b9 [ 419.575528][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x219 [ 419.575584][T10011] kvm: kvm [10010]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x239 [ 420.202226][ T5911] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 420.373184][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 420.380671][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.400681][ T5911] usb 3-1: config 0 has no interfaces? [ 420.408153][ T5911] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.421353][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.440701][ T5911] usb 3-1: config 0 descriptor?? [ 420.675951][ T5843] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 420.695685][ T5957] usb 3-1: USB disconnect, device number 26 [ 423.749419][ T5911] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 424.005679][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 424.024397][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.036312][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.059816][ T5964] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 424.316801][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.517384][ T5964] usb 5-1: unable to get BOS descriptor or descriptor too short [ 424.534394][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.548877][ T5964] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 424.561960][ T5911] usb 2-1: Product: syz [ 424.568172][ T5964] usb 5-1: can't read configurations, error -71 [ 424.575634][ T5911] usb 2-1: Manufacturer: syz [ 424.581976][ T5911] usb 2-1: SerialNumber: syz [ 425.071657][ T6800] Bluetooth: hci5: Frame reassembly failed (-84) [ 425.343898][T10050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.384474][T10050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.434948][ T5911] usb 2-1: 0:2 : does not exist [ 425.474162][ T5911] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 425.557278][ T5911] usb 2-1: USB disconnect, device number 33 [ 425.639426][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.909066][ T5912] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 426.087881][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.788411][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.823604][ T5912] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 426.921266][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.938923][ T5912] usb 4-1: config 0 descriptor?? [ 426.949167][ T5912] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 427.141800][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 427.149685][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 427.331198][T10093] loop6: detected capacity change from 0 to 63 [ 427.350631][ T6053] buffer_io_error: 1942 callbacks suppressed [ 427.350644][ T6053] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.368896][T10092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1258'. [ 427.392253][ T6053] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.402017][ T6053] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.414110][ T6053] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.432405][ T6053] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.586067][T10093] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.613100][T10093] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.621859][T10093] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.631474][T10093] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.641785][T10093] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.847627][ T5912] usb 4-1: USB disconnect, device number 27 [ 429.223361][ T5912] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 429.410128][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 429.440726][ T5912] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 429.582673][ T5912] usb 4-1: can't read configurations, error -71 [ 429.977748][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 432.822536][T10151] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.829558][T10151] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 432.840978][ T5957] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 432.869023][T10151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.874966][T10151] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 432.956902][T10151] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.962926][T10151] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 432.978504][T10151] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 432.984466][T10151] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 433.118199][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.130053][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.181685][ T5957] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 433.298522][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.340829][ T5957] usb 5-1: config 0 descriptor?? [ 433.452090][ T5957] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 434.324168][ T5912] usb 5-1: USB disconnect, device number 43 [ 434.531414][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 434.703480][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 436.377736][T10178] hsr_slave_1 (unregistering): left promiscuous mode [ 437.024653][ T5912] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 437.636436][ T5912] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 437.660775][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.728105][ T5912] usb 5-1: Product: syz [ 437.737397][ T5912] usb 5-1: Manufacturer: syz [ 437.743903][ T5912] usb 5-1: SerialNumber: syz [ 437.805430][ T5912] usb 5-1: config 0 descriptor?? [ 437.818705][ T5912] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 438.203279][ T5957] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 438.379557][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.412169][ T5957] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 438.425131][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.500341][ T5957] usb 1-1: config 0 descriptor?? [ 438.560193][ T5957] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 438.603948][T10231] netlink: 'syz.3.1290': attribute type 10 has an invalid length. [ 438.681281][ T5912] usb 5-1: USB disconnect, device number 44 [ 441.139810][ T5911] usb 1-1: USB disconnect, device number 29 [ 441.993634][T10288] tipc: Enabling of bearer rejected, failed to enable media [ 442.279506][T10297] input: syz0 as /devices/virtual/input/input39 [ 442.683048][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 442.789991][ T5837] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 442.877396][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.899563][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 442.921578][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.952556][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 442.987048][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 442.993754][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 443.021012][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.046201][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.068668][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 443.079293][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 443.103004][ T10] usb 4-1: Product: syz [ 443.109028][ T5837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.118099][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.137503][ T10] usb 4-1: Manufacturer: syz [ 443.168350][ T5837] usb 2-1: Product: syz [ 443.174126][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 443.179365][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 443.197567][ T5837] usb 2-1: Manufacturer: syz [ 443.210583][ T5837] usb 2-1: SerialNumber: syz [ 443.246162][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 443.292014][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 443.394854][ T10] usb 4-1: USB disconnect, device number 30 [ 443.931413][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.077353][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.340823][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 444.351915][ T5837] usb 2-1: 0:2 : does not exist [ 444.395710][ T5837] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 444.496382][ T5837] usb 2-1: USB disconnect, device number 34 [ 444.547494][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 444.587735][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 444.618741][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.645587][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.657364][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 444.670407][ T5911] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 444.701162][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 444.866692][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 444.868039][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 444.876010][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 444.876036][ T10] usb 4-1: Product: syz [ 444.876052][ T10] usb 4-1: Manufacturer: syz [ 444.908855][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.925077][ T5911] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 444.928654][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 444.936925][ T5911] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 444.943202][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 444.966769][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 444.973855][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 445.026146][ T5911] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.065173][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 445.107938][ T5911] usb 5-1: SerialNumber: syz [ 445.161117][T10335] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 445.207144][ T5911] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 445.428672][ T5911] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 445.542882][ T5911] usb 5-1: USB disconnect, device number 45 [ 445.576140][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.581881][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 445.589373][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.595292][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.601785][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.607654][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.614785][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.620651][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.627703][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.634852][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.640715][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.647621][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.654524][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.660397][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.667865][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.673781][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.680651][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.683821][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.687518][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.702592][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.708937][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.714809][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.720883][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.726699][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.733102][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.740007][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.745840][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.752099][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.757913][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.764237][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.770052][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.776432][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.783279][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.789124][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.795459][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.801302][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.808196][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.815092][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.821112][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.827642][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.828205][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.842800][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.849631][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.855483][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.861778][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.868264][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.874077][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.880445][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.886270][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.892381][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.898214][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.904691][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.911024][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.916861][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.923787][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.929662][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.936598][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.943453][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.949360][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.956198][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.962084][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.969029][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.975981][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.981877][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.988758][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 445.994665][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.001492][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.007908][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.015370][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.021656][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.027335][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 446.033330][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.040175][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.046157][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.052622][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.058446][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.065368][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.072092][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.078004][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.083672][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 446.089997][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.095696][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 446.101885][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.107575][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 446.113804][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.119475][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 446.126080][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.131749][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 446.137984][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.143790][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.150113][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.156966][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.162780][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.169129][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.174959][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.181298][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.187119][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.193435][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.200276][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.206198][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.212282][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.218077][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.224453][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.230260][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.236322][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.242638][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.248448][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.254757][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.260572][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.266866][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.272689][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.279031][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.285815][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.291628][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.297915][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.303719][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.310160][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.315998][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.322307][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.328424][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.334225][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.340277][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.346078][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.352146][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.357950][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.364253][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.370918][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.376732][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.383038][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.388836][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.395171][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.400979][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.407308][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.414128][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.419940][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.426243][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.432036][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.438335][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.444137][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.450466][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.456805][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.462722][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.469078][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.474891][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.481205][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.487017][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.493328][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.499654][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.505492][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.511826][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.517626][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.523727][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.529540][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.535604][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.542023][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.547942][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.554243][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.560045][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.566754][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.572674][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.578991][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.585307][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.591112][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.597419][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.603253][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.609602][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.616722][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.622534][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.628882][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.634750][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.640876][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.646691][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.653152][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.659553][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.665399][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.671809][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.677618][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.683953][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.689762][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.696075][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.702795][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.708630][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.714924][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.720730][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.727051][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.732860][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.739230][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.745580][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.751396][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.757707][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.763540][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.769855][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.775669][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.781983][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.788305][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.794119][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.800427][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.806257][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.812586][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.818402][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.824733][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.830856][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.836663][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.842729][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.848528][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.854600][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.860421][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.866760][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.873428][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.879244][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.885596][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.891425][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.897832][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.903700][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.910033][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.916383][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.922201][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.928566][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.934418][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.940760][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.946570][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.952732][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.959140][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.964955][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.971022][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.976919][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.983261][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.989075][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 446.995409][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.002127][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.007937][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.014241][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.020047][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.026396][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.032206][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.038541][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.045292][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.050963][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.057111][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.062933][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.069195][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.075041][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.080732][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.087381][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.093080][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.099957][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.105686][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.112494][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.118211][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.127525][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.133263][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.140256][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.145980][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.152804][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.158517][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.165164][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.171070][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.177129][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.182804][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.188739][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.194986][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.200801][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.206515][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.213311][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.219044][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.227099][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.232821][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.239602][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.245312][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.252035][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.257828][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.264609][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.270321][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.277200][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.282918][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.290246][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.295933][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.301899][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.307726][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.313426][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.319770][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.325469][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.331716][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.337440][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.344223][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.349909][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.356148][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.361960][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.368278][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.374086][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.380410][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.387116][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.392925][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.399211][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.405024][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.411269][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.418536][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.424367][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.430604][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.436473][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.442757][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.448566][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.454818][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.461422][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.467234][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.473462][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.479265][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.485504][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.491311][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.497357][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.503781][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.509672][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.515690][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.521493][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.527734][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.533560][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.539827][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.546705][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.552550][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.558830][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.564638][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.570897][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.576702][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.582996][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.589691][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.595501][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.601731][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.607532][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.613780][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.619591][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.625650][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.631928][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.637730][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.643766][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.649735][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.656058][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.661876][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.668287][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.675197][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.681098][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.688004][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.693884][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.700810][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.707705][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.713664][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.720008][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.726034][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.732400][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.739255][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.745079][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.751408][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.757223][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.763561][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.769463][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.775783][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.782609][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.788451][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.795361][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.801314][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.807561][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.813966][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.819796][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.825871][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.831704][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.838223][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.844058][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.850940][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.857831][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.863520][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.870629][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.876446][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.882768][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.889503][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.895303][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.901605][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.907411][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.913708][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.919635][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.926018][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.932280][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.938099][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.944439][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.950267][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.956320][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.962178][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.967843][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 447.974067][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.979879][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.986153][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 447.991848][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.998663][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 448.004329][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.011148][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 448.018114][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 448.023930][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 448.030656][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 448.036372][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 448.043072][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 448.085959][ T5912] usb 4-1: USB disconnect, device number 31 [ 448.242824][T10366] tipc: Enabling of bearer rejected, failed to enable media [ 451.642438][T10439] program syz.4.1338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.739994][T10440] bpq0: left promiscuous mode [ 451.744778][T10440] bpq0: left allmulticast mode [ 453.841804][T10451] ALSA: seq fatal error: cannot create timer (-22) [ 454.865560][T10462] overlayfs: missing 'lowerdir' [ 456.052097][T10484] net_ratelimit: 16 callbacks suppressed [ 456.052112][T10484] netlink: zone id is out of range [ 456.088540][ T5911] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 456.129790][T10484] netlink: zone id is out of range [ 456.137512][T10484] netlink: zone id is out of range [ 456.291851][T10484] netlink: zone id is out of range [ 456.306508][T10484] netlink: zone id is out of range [ 456.318057][T10484] netlink: zone id is out of range [ 456.329379][T10484] netlink: zone id is out of range [ 456.944901][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 456.950205][T10484] netlink: zone id is out of range [ 456.965937][ T5911] usb 4-1: config 0 has an invalid interface number: 149 but max is 0 [ 456.987903][T10484] netlink: zone id is out of range [ 456.998508][T10484] netlink: zone id is out of range [ 457.004108][ T5911] usb 4-1: config 0 has no interface number 0 [ 457.157565][ T5911] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 457.166674][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.215769][ T5911] usb 4-1: Product: syz [ 457.272087][ T5911] usb 4-1: Manufacturer: syz [ 457.286004][ T5911] usb 4-1: SerialNumber: syz [ 457.308261][ T5911] usb 4-1: config 0 descriptor?? [ 457.483077][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 457.502855][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 458.062569][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.118183][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.132065][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 458.394608][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 458.487445][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.548534][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.590173][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.645378][ T10] usb 5-1: config 0 descriptor?? [ 459.010074][T10520] sctp: [Deprecated]: syz.2.1355 (pid 10520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.010074][T10520] Use struct sctp_sack_info instead [ 459.360124][T10524] netlink: 'syz.0.1356': attribute type 3 has an invalid length. [ 459.368001][T10524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1356'. [ 460.207988][ T10] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 460.336073][ T10] usb 5-1: USB disconnect, device number 46 [ 460.880489][T10528] fido_id[10528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 461.062059][ T5911] peak_usb 4-1:0.149 can0: unable to request usb[type=0 value=1] err=-71 [ 461.098742][ T5911] peak_usb 4-1:0.149: unable to read PCAN-Chip USB firmware info (err -71) [ 461.626344][ T5911] peak_usb 4-1:0.149: probe with driver peak_usb failed with error -71 [ 461.746550][ T5911] usb 4-1: USB disconnect, device number 32 [ 463.398569][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 464.704840][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 465.394030][ T5911] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 465.623089][T10589] syzkaller1: entered promiscuous mode [ 465.651376][T10589] syzkaller1: entered allmulticast mode [ 465.673502][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.697771][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.712271][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 465.728449][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.812202][ T5911] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.848527][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.884500][ T5911] usb 2-1: config 0 descriptor?? [ 466.011154][T10601] random: crng reseeded on system resumption [ 467.147081][ T5911] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 467.170678][ T5911] usb 2-1: USB disconnect, device number 35 [ 467.405669][T10610] kvm_pr_unimpl_wrmsr: 29 callbacks suppressed [ 467.405693][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x25e Unhandled WRMSR(0xc2) = 0x289e [ 467.434712][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x28cf [ 467.446493][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x28f8 [ 467.456429][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x280c [ 467.474560][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x28de [ 467.489082][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x2871 [ 467.498883][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x2848 [ 467.508604][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x2802 [ 467.520099][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x50a5 [ 467.542233][T10610] kvm: kvm [10602]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0xc8d5 [ 467.872971][T10620] sctp: [Deprecated]: syz.3.1376 (pid 10620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.872971][T10620] Use struct sctp_sack_info instead [ 468.016128][T10613] fido_id[10613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 469.149246][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 470.717445][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 472.017639][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 472.189872][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.212829][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 472.774920][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 472.979927][T10675] overlayfs: missing 'lowerdir' [ 473.205997][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 473.215915][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 473.222717][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.236271][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.245422][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.439307][ T10] usb 3-1: config 0 descriptor?? [ 473.928325][T10690] sctp: [Deprecated]: syz.3.1392 (pid 10690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.928325][T10690] Use struct sctp_sack_info instead [ 473.958891][ T10] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 474.011517][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 474.180557][ T5911] usb 3-1: USB disconnect, device number 27 [ 474.198710][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.217544][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 474.231400][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.312084][ T24] usb 1-1: config 0 descriptor?? [ 474.562896][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 474.569567][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 474.602884][ T24] usb 1-1: USB disconnect, device number 30 [ 475.226459][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 475.930392][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 475.937576][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.949273][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 475.960826][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.389581][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 476.738913][ T24] usb 1-1: config 0 descriptor?? [ 476.754541][ T24] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 476.775427][ T24] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 476.960263][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 477.002033][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 477.025739][ T24] usb 1-1: USB disconnect, device number 31 [ 477.049221][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 477.070324][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.127955][T10708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 477.156106][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.243722][ T24] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 477.519894][ T6691] Bluetooth: hci5: Frame reassembly failed (-84) [ 478.958168][ T24] usb 2-1: USB disconnect, device number 36 [ 479.005311][T10728] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 479.202782][T10730] syzkaller1: entered promiscuous mode [ 479.217499][T10730] syzkaller1: entered allmulticast mode [ 479.575842][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 479.650819][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 479.816359][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.828452][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.913934][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 479.967982][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.011095][T10741] tipc: Enabled bearer , priority 0 [ 480.011786][ T24] usb 4-1: config 0 descriptor?? [ 480.116598][T10741] tipc: Resetting bearer [ 480.325809][T10740] tipc: Disabling bearer [ 481.172011][T10752] syz_tun: entered allmulticast mode [ 481.192917][T10751] syz_tun: left allmulticast mode [ 481.374102][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 481.380395][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 481.395824][ T24] usb 4-1: USB disconnect, device number 33 [ 481.598360][T10764] syzkaller1: entered promiscuous mode [ 481.603885][T10764] syzkaller1: entered allmulticast mode [ 481.612609][T10762] sctp: [Deprecated]: syz.1.1413 (pid 10762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.612609][T10762] Use struct sctp_sack_info instead [ 482.478548][T10774] net_ratelimit: 16 callbacks suppressed [ 482.478563][T10774] netlink: zone id is out of range [ 483.126763][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 483.185019][T10774] netlink: zone id is out of range [ 483.194899][T10774] netlink: zone id is out of range [ 483.358064][T10774] netlink: zone id is out of range [ 483.371411][T10774] netlink: zone id is out of range [ 484.063359][T10774] netlink: zone id is out of range [ 484.157041][T10774] netlink: zone id is out of range [ 484.205064][T10774] netlink: zone id is out of range [ 484.225727][T10774] netlink: zone id is out of range [ 484.263213][T10774] netlink: zone id is out of range [ 484.821485][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 485.305755][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 485.313463][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 485.392841][T10801] tipc: Enabled bearer , priority 0 [ 485.730261][T10801] tipc: Resetting bearer [ 485.752535][T10800] tipc: Disabling bearer [ 486.017872][T10808] syzkaller1: entered promiscuous mode [ 486.052447][T10808] syzkaller1: entered allmulticast mode [ 487.377359][T10816] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 487.843943][T10828] net_ratelimit: 16 callbacks suppressed [ 487.843958][T10828] netlink: zone id is out of range [ 488.045670][T10828] netlink: zone id is out of range [ 488.052995][T10828] netlink: zone id is out of range [ 488.059329][T10828] netlink: zone id is out of range [ 488.068010][T10828] netlink: zone id is out of range [ 488.075830][T10828] netlink: zone id is out of range [ 488.084153][T10828] netlink: zone id is out of range [ 488.171224][ T977] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 488.762612][T10828] netlink: zone id is out of range [ 488.775486][T10828] netlink: zone id is out of range [ 488.787208][T10828] netlink: zone id is out of range [ 488.914400][T10835] sctp: [Deprecated]: syz.1.1435 (pid 10835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.914400][T10835] Use struct sctp_sack_info instead [ 488.977610][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.033342][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.163872][ T977] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 489.180107][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.194055][ T977] usb 4-1: config 0 descriptor?? [ 489.252439][T10841] syzkaller0: entered promiscuous mode [ 489.335957][T10841] syzkaller0: entered allmulticast mode [ 489.457361][T10845] syzkaller1: entered promiscuous mode [ 489.462989][T10845] syzkaller1: entered allmulticast mode [ 489.596991][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 489.607490][T10849] netlink: 'syz.0.1442': attribute type 5 has an invalid length. [ 489.617902][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1442'. [ 489.641559][T10849] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 489.651701][T10849] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 489.662091][T10849] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 489.672334][T10849] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 489.682882][T10849] geneve2: entered promiscuous mode [ 489.689349][T10849] geneve2: entered allmulticast mode [ 489.884752][ T977] usbhid 4-1:0.0: can't add hid device: -32 [ 489.890832][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 489.919258][ T977] usb 4-1: USB disconnect, device number 34 [ 490.867653][T10866] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 491.249999][ T977] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 491.446751][T10868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1449'. [ 491.627679][T10868] vlan2: entered promiscuous mode [ 491.632777][T10868] batadv0: entered promiscuous mode [ 492.295467][ T977] usb 3-1: unable to get BOS descriptor or descriptor too short [ 492.338297][ T977] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 492.503348][ T977] usb 3-1: can't read configurations, error -71 [ 492.573753][T10889] program syz.1.1454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.590310][T10896] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1455'. [ 492.597475][T10897] futex_wake_op: syz.3.1457 tries to shift op by -1; fix this program [ 492.615209][T10893] syzkaller1: entered promiscuous mode [ 492.622092][T10893] syzkaller1: entered allmulticast mode [ 492.739840][ C1] sd 0:0:1:0: [sda] tag#6610 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 492.750378][ C1] sd 0:0:1:0: [sda] tag#6610 CDB: Write(6) 0a 00 00 00 00 00 [ 497.412496][ T6691] Bluetooth: hci5: Frame reassembly failed (-84) [ 499.074575][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 499.172254][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 500.285326][T10960] Bluetooth: hci5: Frame reassembly failed (-84) [ 500.337643][ T3552] Bluetooth: hci5: Frame reassembly failed (-84) [ 502.220043][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 502.498358][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 502.510828][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 502.768644][T10990] program syz.4.1484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.378592][ T5843] Bluetooth: hci6: command 0x1003 tx timeout [ 504.382382][ T5855] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 505.147919][ T5912] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 505.236551][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1490'. [ 505.281799][T11008] netlink: 'syz.0.1490': attribute type 5 has an invalid length. [ 505.302674][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1490'. [ 505.329571][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 505.342563][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.363858][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.422449][ T5912] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.438557][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.454824][ T5912] usb 4-1: Product: syz [ 505.463997][ T5912] usb 4-1: Manufacturer: syz [ 505.518242][ T5912] usb 4-1: SerialNumber: syz [ 506.264651][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.324112][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.357359][ T5912] usb 4-1: 0:2 : does not exist [ 506.388884][ T5912] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 506.512613][ T5912] usb 4-1: USB disconnect, device number 35 [ 506.618826][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.869384][T11027] syz_tun: entered allmulticast mode [ 506.888733][T11027] lo: entered allmulticast mode [ 506.987550][T11028] Bluetooth: hci5: Frame reassembly failed (-84) [ 507.088599][ T6691] Bluetooth: hci5: Frame reassembly failed (-84) [ 507.777189][ T5911] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 508.413262][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.435798][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.451935][ T5911] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 508.462444][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.470545][ T5911] usb 5-1: Product: syz [ 508.476674][ T5911] usb 5-1: Manufacturer: syz [ 508.481386][ T5911] usb 5-1: SerialNumber: syz [ 508.854526][ T49] Bluetooth: hci6: Frame reassembly failed (-84) [ 508.944192][ T5911] usb 5-1: config 0 descriptor?? [ 508.954622][ T5911] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 508.970915][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.018034][ T5911] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 509.041645][ T5911] usb 5-1: media controller created [ 509.075972][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.150550][ T5911] DVB: Unable to find symbol tda10046_attach() [ 509.160081][ T5911] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 509.174427][ T5911] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 509.253456][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 509.409508][ T5911] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 509.420479][T11023] syz_tun: left allmulticast mode [ 509.438412][ T5911] usb 5-1: USB disconnect, device number 47 [ 509.635347][T11046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 509.643042][T11046] IPv6: NLM_F_CREATE should be set when creating new route [ 510.526540][T11053] input: syz1 as /devices/virtual/input/input43 [ 510.795968][ T5843] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 512.623752][T11079] overlayfs: missing 'lowerdir' [ 513.632689][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.650402][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.854699][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 515.018726][T11100] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 515.045909][T11100] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 515.923898][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 515.935135][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 516.791601][T11118] overlayfs: missing 'lowerdir' [ 518.057528][T11133] binder: 11131:11133 ioctl 4018620d 0 returned -22 [ 519.523632][T11141] 8021q: adding VLAN 0 to HW filter on device  [ 520.163223][T11141] net_ratelimit: 16 callbacks suppressed [ 520.163233][T11141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.294168][T11146] syzkaller1: entered promiscuous mode [ 520.314256][T11146] syzkaller1: entered allmulticast mode [ 523.037826][T11183] binder_alloc: 11176: binder_alloc_buf, no vma [ 523.052616][T11183] binder: 11176:11183 ioctl c0306201 0 returned -14 [ 523.693134][ T30] audit: type=1326 audit(1753537218.916:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.4.1543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f697e98e9a9 code=0x0 [ 524.012862][T11195] input: syz1 as /devices/virtual/input/input44 [ 524.091733][ T5911] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 524.099527][T11195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1550'. [ 524.284932][ T5911] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 524.307841][ T5911] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 524.476402][ T5911] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 524.555671][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.337911][T11187] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 525.363779][ T5912] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 525.701627][ T5911] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.734286][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 525.749693][ T5912] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 525.807799][ T5912] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.901851][ T5912] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 525.913099][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.974943][ T5911] usb 5-1: USB disconnect, device number 48 [ 526.080090][ T5912] usb 2-1: Product: syz [ 526.089141][ T5912] usb 2-1: Manufacturer: syz [ 526.096485][ T5912] usb 2-1: SerialNumber: syz [ 527.262566][T11203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.218476][T10074] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 528.399333][T10074] usb 3-1: Using ep0 maxpacket: 8 [ 528.406217][T10074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.418732][T10074] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.423807][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 528.493868][T10074] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 528.511897][T10074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.524071][ T5912] usbhid 2-1:1.0: can't add hid device: -71 [ 528.531402][ T5912] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 528.541498][T10074] usb 3-1: Product: syz [ 528.545706][T10074] usb 3-1: Manufacturer: syz [ 528.551876][T10074] usb 3-1: SerialNumber: syz [ 528.560597][ T5912] usb 2-1: USB disconnect, device number 37 [ 528.607216][T10074] usb 3-1: config 0 descriptor?? [ 528.692548][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 528.701079][ T10] usb 4-1: config 0 has an invalid interface number: 149 but max is 0 [ 528.712010][ T10] usb 4-1: config 0 has no interface number 0 [ 528.789876][T11238] input: syz1 as /devices/virtual/input/input45 [ 528.791330][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 528.818667][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.833371][ T10] usb 4-1: Product: syz [ 528.853274][ T10] usb 4-1: Manufacturer: syz [ 528.861013][ T10] usb 4-1: SerialNumber: syz [ 528.873436][T11238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1562'. [ 528.880367][ T10] usb 4-1: config 0 descriptor?? [ 533.236022][ T977] usb 3-1: USB disconnect, device number 30 [ 533.530033][T11270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1571'. [ 533.562056][T11270] program syz.4.1571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.269282][ T10] peak_usb 4-1:0.149 can0: unable to request usb[type=0 value=1] err=-71 [ 535.350047][ T10] peak_usb 4-1:0.149: unable to read PCAN-Chip USB firmware info (err -71) [ 535.360712][T11283] input: syz1 as /devices/virtual/input/input46 [ 535.452714][T11283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1574'. [ 535.487711][ T977] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 535.567571][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1575'. [ 535.607322][ T10] peak_usb 4-1:0.149: probe with driver peak_usb failed with error -71 [ 535.758772][ T10] usb 4-1: USB disconnect, device number 36 [ 535.765828][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 536.092207][ T977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 536.146371][ T977] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.197722][ T977] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 536.228392][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.355958][ T977] usb 5-1: Product: syz [ 536.369995][ T977] usb 5-1: Manufacturer: syz [ 536.376103][ T977] usb 5-1: SerialNumber: syz [ 537.200966][T11306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1579'. [ 537.296783][T11280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 537.925579][T10074] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 538.129595][T10074] usb 3-1: Using ep0 maxpacket: 8 [ 538.158879][T10074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.592656][T10074] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.667280][T10074] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 538.750661][ T977] usbhid 5-1:1.0: can't add hid device: -71 [ 538.769858][T10074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.785126][ T977] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 539.251813][T10074] usb 3-1: Product: syz [ 539.328194][T10074] usb 3-1: Manufacturer: syz [ 539.503676][T10074] usb 3-1: SerialNumber: syz [ 539.785558][ T977] usb 5-1: USB disconnect, device number 49 [ 539.802626][T10074] usb 3-1: config 0 descriptor?? [ 540.138336][T10074] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 540.309158][T10074] usb 1-1: Using ep0 maxpacket: 32 [ 540.332817][T11328] input: syz1 as /devices/virtual/input/input47 [ 540.339675][T10074] usb 1-1: config 0 has an invalid interface number: 149 but max is 0 [ 540.385052][T10074] usb 1-1: config 0 has no interface number 0 [ 540.413956][T10074] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 540.448138][T10074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.456199][T10074] usb 1-1: Product: syz [ 540.470622][T11328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1588'. [ 540.540865][T10074] usb 1-1: Manufacturer: syz [ 540.558712][T10074] usb 1-1: SerialNumber: syz [ 540.572269][T10074] usb 1-1: config 0 descriptor?? [ 540.642048][T11332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'. [ 540.787690][T11334] syzkaller1: entered promiscuous mode [ 540.796250][T11334] syzkaller1: entered allmulticast mode [ 542.772533][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 542.968578][ T977] usb 3-1: USB disconnect, device number 31 [ 544.373729][T11370] input: syz1 as /devices/virtual/input/input48 [ 544.476611][T11370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1601'. [ 544.491693][T10074] peak_usb 1-1:0.149 can0: unable to request usb[type=0 value=1] err=-71 [ 544.628356][T11374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1600'. [ 544.691980][T10074] peak_usb 1-1:0.149: unable to read PCAN-Chip USB firmware info (err -71) [ 544.821462][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1602'. [ 544.918297][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 544.925826][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 545.165833][T10074] peak_usb 1-1:0.149: probe with driver peak_usb failed with error -71 [ 545.309577][T10074] usb 1-1: USB disconnect, device number 32 [ 546.016355][T11399] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 546.023196][T11399] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 546.088604][T11399] vhci_hcd vhci_hcd.0: Device attached [ 546.159739][T11401] vhci_hcd: connection closed [ 546.170571][T10066] vhci_hcd: stop threads [ 546.233700][T10066] vhci_hcd: release socket [ 546.250718][T10066] vhci_hcd: disconnect device [ 546.853096][ T5957] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 547.061717][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 547.092906][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.134866][ T5957] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.200789][ T5957] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 547.231872][T11416] input: syz1 as /devices/virtual/input/input49 [ 547.233291][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.254904][ T5957] usb 4-1: Product: syz [ 547.260760][ T5957] usb 4-1: Manufacturer: syz [ 547.266085][ T5957] usb 4-1: SerialNumber: syz [ 547.296726][ T5957] usb 4-1: config 0 descriptor?? [ 547.312132][T11416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1614'. [ 547.386812][T10074] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 547.589605][T10074] usb 5-1: Using ep0 maxpacket: 32 [ 547.680425][T10074] usb 5-1: config 0 has an invalid interface number: 149 but max is 0 [ 547.726112][T10074] usb 5-1: config 0 has no interface number 0 [ 547.772554][T10074] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 547.953769][T10074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.047728][T10074] usb 5-1: Product: syz [ 548.405849][T10074] usb 5-1: Manufacturer: syz [ 548.469815][T10074] usb 5-1: SerialNumber: syz [ 548.554838][T10074] usb 5-1: config 0 descriptor?? [ 548.648706][T11435] syzkaller1: entered promiscuous mode [ 548.658447][T11435] syzkaller1: entered allmulticast mode [ 548.733351][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 548.949805][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.993669][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.043052][ T10] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 549.056338][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.397400][ T10] usb 1-1: config 0 descriptor?? [ 549.481924][ T5911] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 549.684370][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 549.691972][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 549.706829][ T5911] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 549.735153][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.744911][ T5911] usb 3-1: Product: syz [ 549.750837][ T5911] usb 3-1: Manufacturer: syz [ 549.767764][ T5911] usb 3-1: SerialNumber: syz [ 549.823273][ T5911] usb 3-1: config 0 descriptor?? [ 549.836063][ T5911] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 549.899032][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 549.906612][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 549.915062][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 549.922230][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 549.972111][ T10] usb 1-1: USB disconnect, device number 33 [ 550.667305][ T977] usb 4-1: USB disconnect, device number 37 [ 550.789661][T10074] peak_usb 5-1:0.149 can0: unable to request usb[type=0 value=1] err=-71 [ 550.831990][T10074] peak_usb 5-1:0.149: unable to read PCAN-Chip USB firmware info (err -71) [ 551.498891][T10074] peak_usb 5-1:0.149: probe with driver peak_usb failed with error -71 [ 551.573381][T10074] usb 5-1: USB disconnect, device number 50 [ 552.830641][ T5912] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 552.874583][T11471] syzkaller1: entered promiscuous mode [ 552.902674][T11471] syzkaller1: entered allmulticast mode [ 553.183978][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.464365][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.475682][ T5912] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 553.486015][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.150595][ T5911] gspca_zc3xx: reg_r err -32 [ 554.164831][ T5912] usb 2-1: config 0 descriptor?? [ 554.421866][T11489] process 'syz.3.1636' launched './file0' with NULL argv: empty string added [ 554.561845][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 554.795119][ T5911] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 554.801567][ T5911] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 554.818638][ T5911] usb 3-1: USB disconnect, device number 32 [ 554.837835][ T5912] hid-steam 0003:28DE:1142.0011: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 554.871644][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.927845][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.945322][ T5912] hid-steam 0003:28DE:1142.0011: Steam wireless receiver connected [ 554.981827][ T24] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 555.001177][ T5912] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 555.015687][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.035177][T11498] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1638'. [ 555.070705][ T24] usb 1-1: config 0 descriptor?? [ 556.163607][ T5911] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 556.288733][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 556.295903][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 556.474728][ T24] usb 1-1: USB disconnect, device number 34 [ 556.749362][T11506] syzkaller0: entered promiscuous mode [ 556.758351][T11506] syzkaller0: entered allmulticast mode [ 557.236862][ T5912] usb 2-1: USB disconnect, device number 38 [ 557.279721][ T5912] hid-steam 0003:28DE:1142.0011: Steam wireless receiver disconnected [ 557.478293][ T5957] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 557.631157][T11523] syzkaller1: entered promiscuous mode [ 557.684519][T11523] syzkaller1: entered allmulticast mode [ 557.954641][ T5957] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.125279][ T5957] usb 1-1: not running at top speed; connect to a high speed hub [ 558.153118][ T5957] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 558.180680][ T5957] usb 1-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 558.212753][ T5957] usb 1-1: config 12 interface 0 altsetting 7 endpoint 0x8 has invalid wMaxPacketSize 0 [ 558.252898][ T5957] usb 1-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.305061][ T5957] usb 1-1: config 12 interface 0 has no altsetting 0 [ 558.328188][ T5957] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 558.353250][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.381227][ T5957] usb 1-1: Product: syz [ 558.396356][ T5957] usb 1-1: Manufacturer: syz [ 558.404053][ T5957] usb 1-1: SerialNumber: syz [ 558.445086][T11530] usb usb8: usbfs: process 11530 (syz.4.1648) did not claim interface 0 before use [ 558.685346][ T5957] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.709302][ T5957] usb 1-1: selecting invalid altsetting 0 [ 558.764223][T11536] ======================================================= [ 558.764223][T11536] WARNING: The mand mount option has been deprecated and [ 558.764223][T11536] and is ignored by this kernel. Remove the mand [ 558.764223][T11536] option from the mount to silence this warning. [ 558.764223][T11536] ======================================================= [ 558.799247][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.808511][T11536] overlayfs: unescaped trailing colons in lowerdir mount option. [ 559.493065][ T5957] snd-usb-audio 1-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 559.565851][ T5957] usb 1-1: USB disconnect, device number 35 [ 559.686625][ T8029] udevd[8029]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.129190][ T977] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 560.278710][ T5957] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 560.312423][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.328196][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.349060][ T977] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 560.367932][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.390854][ T977] usb 5-1: config 0 descriptor?? [ 560.467017][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.479595][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.503533][ T5957] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 560.561532][T11547] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1654'. [ 560.682161][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.904063][ T977] usbhid 5-1:0.0: can't add hid device: -71 [ 560.939304][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 561.604792][ T5957] usb 1-1: config 0 descriptor?? [ 561.613699][ T977] usb 5-1: USB disconnect, device number 51 [ 561.976575][T11556] kvm_pr_unimpl_wrmsr: 5270 callbacks suppressed [ 561.976619][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x25e Unhandled WRMSR(0xc2) = 0x1e2f [ 561.992780][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x1e97 [ 562.002295][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x1e21 [ 562.012858][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x1e77 [ 562.022448][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x1e77 [ 562.097276][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x1e9b [ 562.107412][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x1e88 [ 562.116295][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x1e85 [ 562.126215][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x1ed5 [ 562.135694][T11556] kvm: kvm [11553]: vcpu0, guest rIP: 0x23e Unhandled WRMSR(0xc2) = 0x1ea5 [ 562.199461][ T5957] hid-steam 0003:28DE:1142.0013: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 562.350648][ T5957] hid-steam 0003:28DE:1142.0013: Steam wireless receiver connected [ 562.375169][ T5957] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 562.559569][T11565] syzkaller1: entered promiscuous mode [ 562.579852][T11565] syzkaller1: entered allmulticast mode [ 562.970650][ T5957] usb 1-1: USB disconnect, device number 36 [ 562.986114][ T5957] hid-steam 0003:28DE:1142.0013: Steam wireless receiver disconnected [ 564.662541][ T5911] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 564.668310][ T977] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 564.846786][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.102949][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.176454][ T977] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 565.211924][ T5911] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 565.238267][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.290317][ T5911] usb 2-1: config 0 descriptor?? [ 566.046145][T11603] syzkaller1: entered promiscuous mode [ 566.053031][T11603] syzkaller1: entered allmulticast mode [ 566.310164][ T5911] usbhid 2-1:0.0: can't add hid device: -71 [ 566.379779][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 566.465479][ T5911] usb 2-1: USB disconnect, device number 39 [ 566.699451][T11613] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 568.553986][ T5911] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 568.764952][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 568.804863][T11628] netlink: 'syz.0.1677': attribute type 29 has an invalid length. [ 568.922635][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.029692][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.062884][ T5911] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 569.592505][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.607101][ T5911] usb 4-1: config 0 descriptor?? [ 570.091043][ T5911] hid-steam 0003:28DE:1142.0016: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 570.189675][ T5911] hid-steam 0003:28DE:1142.0016: Steam wireless receiver connected [ 570.251700][ T5911] hid-steam 0003:28DE:1142.0017: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 570.852572][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 570.864957][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 572.735976][ T10] usb 4-1: USB disconnect, device number 38 [ 572.871362][ T10] hid-steam 0003:28DE:1142.0016: Steam wireless receiver disconnected [ 573.693719][T11675] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1692'. [ 574.444486][T11690] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1694'. [ 574.716188][ T5911] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 575.130097][ T5911] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 575.142639][ T5911] usb 4-1: config 0 has no interface number 0 [ 575.170025][ T5911] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 575.246237][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.376421][ T5911] usb 4-1: config 0 descriptor?? [ 575.403589][ T5911] gspca_main: spca561-2.14.0 probing abcd:cdee [ 575.617354][T11686] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.626990][T11686] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.636244][T11686] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.645360][T11686] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.723083][T11686] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 575.900189][ T5911] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 575.966808][ T5911] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 576.011496][ T5911] usb 4-1: MIDIStreaming interface descriptor not found [ 576.173033][ T5911] usb 4-1: USB disconnect, device number 39 [ 578.498932][T11722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.320955][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 579.345175][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.866194][T11742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1710'. [ 582.174356][T11752] netlink: 'syz.0.1713': attribute type 12 has an invalid length. [ 582.791371][T11761] afs: Unknown parameter 'GPL' [ 585.568727][T11779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 586.129230][ T5957] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 586.310755][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 586.326620][ T5957] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 586.439701][ T5957] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.467653][ T5957] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 586.498979][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.573426][ T5957] usb 5-1: Product: syz [ 586.646169][ T5957] usb 5-1: Manufacturer: syz [ 586.650836][ T5957] usb 5-1: SerialNumber: syz [ 587.667204][T11794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.398196][ T5957] usbhid 5-1:1.0: can't add hid device: -71 [ 590.438769][ T5957] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 590.478362][ T5957] usb 5-1: USB disconnect, device number 52 [ 594.746826][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 594.757056][T11877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1751'. [ 594.823522][T11877] geneve3: entered promiscuous mode [ 594.828966][T11877] geneve3: entered allmulticast mode [ 595.424282][T11876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1747'. [ 595.605672][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.863502][T11886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.905206][ T5911] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 597.933580][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 598.017766][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.034839][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 598.067435][ T5911] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 598.102146][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.114873][ T5911] usb 2-1: Product: syz [ 598.119071][ T5911] usb 2-1: Manufacturer: syz [ 598.132374][ T5911] usb 2-1: SerialNumber: syz [ 598.142754][ T5911] usb 2-1: config 0 descriptor?? [ 599.158522][T11916] usb usb9: usbfs: process 11916 (syz.3.1764) did not claim interface 0 before use [ 599.612801][T11916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.706369][T11916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.719260][T11916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.729289][T11916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.442277][ T5912] usb 2-1: USB disconnect, device number 40 [ 600.925057][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 601.113013][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 601.129236][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 601.184928][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 601.368422][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.421822][ T10] usb 4-1: config 0 descriptor?? [ 601.782433][ T10] ath6kl: Failed to submit usb control message: -71 [ 601.817487][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 601.992286][T11956] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1773'. [ 602.094783][ T10] ath6kl: Unable to send get target info: -71 [ 602.886274][ T10] ath6kl: Failed to init ath6kl core: -71 [ 602.943372][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 603.150754][ T10] usb 4-1: USB disconnect, device number 40 [ 605.650436][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 606.056458][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 606.063612][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 606.077864][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.221240][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 606.345903][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.361985][ T10] usb 2-1: Product: syz [ 606.371572][ T10] usb 2-1: Manufacturer: syz [ 606.381236][ T10] usb 2-1: SerialNumber: syz [ 606.908039][T12002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 606.978064][T12004] syzkaller1: entered promiscuous mode [ 606.986734][ T5911] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 607.004087][T12004] syzkaller1: entered allmulticast mode [ 607.233378][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 607.250549][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 607.294136][ T5911] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 607.310974][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.332695][ T5911] usb 3-1: config 0 descriptor?? [ 607.590836][ T5911] ath6kl: Failed to submit usb control message: -71 [ 607.601690][ T5911] ath6kl: unable to send the bmi data to the device: -71 [ 607.629221][ T5911] ath6kl: Unable to send get target info: -71 [ 607.641159][ T5911] ath6kl: Failed to init ath6kl core: -71 [ 607.647970][ T5911] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 607.671366][ T5911] usb 3-1: USB disconnect, device number 33 [ 607.944924][T12011] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1788'. [ 608.658014][T12019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1789'. [ 608.971563][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'. [ 609.461600][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 609.518489][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 609.613826][ T10] usb 2-1: USB disconnect, device number 41 [ 610.843184][T12042] overlayfs: missing 'lowerdir' [ 611.453687][T12040] syzkaller1: entered promiscuous mode [ 611.539419][T12040] syzkaller1: entered allmulticast mode [ 612.529309][ T5911] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 613.593134][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 614.209685][ T2152] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 614.242421][T12068] ------------[ cut here ]------------ [ 614.249850][T12068] WARNING: CPU: 1 PID: 12068 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 614.261140][T12068] Modules linked in: [ 614.265979][T12068] CPU: 1 UID: 0 PID: 12068 Comm: syz.3.1805 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 614.279509][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.290613][T12068] RIP: 0010:folio_memcg+0x1a8/0x310 [ 614.295898][T12068] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 614.316366][T12068] RSP: 0018:ffffc900033e7250 EFLAGS: 00010287 [ 614.323521][T12068] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 614.332289][T12068] RDX: ffffc9000c489000 RSI: 000000000000185b RDI: 000000000000185c [ 614.340308][T12068] RBP: 0000000000000000 R08: ffffea0000ca7b87 R09: 1ffffd4000194f70 [ 614.348935][T12068] R10: dffffc0000000000 R11: fffff94000194f71 R12: ffffea0000ca7bb0 [ 614.357559][T12068] R13: dffffc0000000000 R14: ffff88802451e380 R15: 0000000000000002 [ 614.366117][T12068] FS: 00007f2d48b8c6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 614.375688][T12068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.382271][T12068] CR2: 0000000000000000 CR3: 0000000032170000 CR4: 00000000003526f0 [ 614.390833][T12068] Call Trace: [ 614.395245][T12068] [ 614.398203][T12068] workingset_activation+0x5f/0x4a0 [ 614.403397][T12068] ? folio_mark_accessed+0x361/0x4a0 [ 614.409501][T12068] folio_mark_accessed+0x3b5/0x4a0 [ 614.414659][T12068] kvm_release_page_clean+0x9a/0xe0 [ 614.419973][T12068] kvm_tdp_page_fault+0x2dd/0x370 [ 614.425686][T12068] kvm_mmu_do_page_fault+0x2c5/0x640 [ 614.431817][T12068] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 614.438252][T12068] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 614.443828][T12068] kvm_mmu_page_fault+0x22f/0xb70 [ 614.450282][T12068] ? __pfx_handle_ept_violation+0x10/0x10 [ 614.456044][T12068] vmx_handle_exit+0x1090/0x18a0 [ 614.462009][T12068] ? vcpu_run+0x361c/0x6f70 [ 614.466563][T12068] vcpu_run+0x432e/0x6f70 [ 614.471901][T12068] ? vcpu_run+0x361c/0x6f70 [ 614.476501][T12068] ? __pfx_vcpu_run+0x10/0x10 [ 614.482435][T12068] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 614.488181][T12068] ? rcu_is_watching+0x15/0xb0 [ 614.493776][T12068] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 614.499528][T12068] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 614.506174][T12068] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 614.513495][T12068] ? rcu_is_watching+0x15/0xb0 [ 614.518285][T12068] ? look_up_lock_class+0x74/0x170 [ 614.524191][T12068] ? register_lock_class+0x51/0x320 [ 614.529404][T12068] ? __lock_acquire+0xab9/0xd20 [ 614.534911][T12068] kvm_vcpu_ioctl+0x95c/0xe90 [ 614.539605][T12068] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 614.545824][T12068] ? __lock_acquire+0xab9/0xd20 [ 614.550686][T12068] ? __asan_memset+0x22/0x50 [ 614.555811][T12068] ? smack_file_ioctl+0x302/0x340 [ 614.560837][T12068] ? __pfx_smack_file_ioctl+0x10/0x10 [ 614.566999][T12068] ? __fget_files+0x2a/0x420 [ 614.571590][T12068] ? __fget_files+0x3a0/0x420 [ 614.577617][T12068] ? __fget_files+0x2a/0x420 [ 614.582216][T12068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 614.587930][T12068] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 614.593126][T12068] __se_sys_ioctl+0xfc/0x170 [ 614.598267][T12068] do_syscall_64+0xfa/0x3b0 [ 614.602765][T12068] ? lockdep_hardirqs_on+0x9c/0x150 [ 614.608683][T12068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.614745][T12068] ? clear_bhb_loop+0x60/0xb0 [ 614.619990][T12068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.625893][T12068] RIP: 0033:0x7f2d47d8e9a9 [ 614.630848][T12068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.651126][T12068] RSP: 002b:00007f2d48b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.659562][T12068] RAX: ffffffffffffffda RBX: 00007f2d47fb5fa0 RCX: 00007f2d47d8e9a9 [ 614.668146][T12068] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 614.676705][T12068] RBP: 00007f2d47e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 614.685223][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.694612][T12068] R13: 0000000000000000 R14: 00007f2d47fb5fa0 R15: 00007fff4b313058 [ 614.702617][T12068] [ 614.706183][T12068] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 614.713456][T12068] CPU: 1 UID: 0 PID: 12068 Comm: syz.3.1805 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 614.725509][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.735570][T12068] Call Trace: [ 614.738851][T12068] [ 614.741769][T12068] dump_stack_lvl+0x99/0x250 [ 614.746348][T12068] ? __asan_memcpy+0x40/0x70 [ 614.750929][T12068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 614.756113][T12068] ? __pfx__printk+0x10/0x10 [ 614.760696][T12068] panic+0x2db/0x790 [ 614.764582][T12068] ? __pfx_panic+0x10/0x10 [ 614.769024][T12068] __warn+0x31b/0x4b0 [ 614.773012][T12068] ? folio_memcg+0x1a8/0x310 [ 614.777614][T12068] ? folio_memcg+0x1a8/0x310 [ 614.782193][T12068] report_bug+0x2be/0x4f0 [ 614.786525][T12068] ? folio_memcg+0x1a8/0x310 [ 614.791123][T12068] ? folio_memcg+0x1a8/0x310 [ 614.795713][T12068] ? folio_memcg+0x1aa/0x310 [ 614.800319][T12068] handle_bug+0x84/0x160 [ 614.804572][T12068] exc_invalid_op+0x1a/0x50 [ 614.809090][T12068] asm_exc_invalid_op+0x1a/0x20 [ 614.813939][T12068] RIP: 0010:folio_memcg+0x1a8/0x310 [ 614.819155][T12068] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 614.838842][T12068] RSP: 0018:ffffc900033e7250 EFLAGS: 00010287 [ 614.844901][T12068] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 614.852885][T12068] RDX: ffffc9000c489000 RSI: 000000000000185b RDI: 000000000000185c [ 614.860851][T12068] RBP: 0000000000000000 R08: ffffea0000ca7b87 R09: 1ffffd4000194f70 [ 614.868814][T12068] R10: dffffc0000000000 R11: fffff94000194f71 R12: ffffea0000ca7bb0 [ 614.876778][T12068] R13: dffffc0000000000 R14: ffff88802451e380 R15: 0000000000000002 [ 614.884841][T12068] ? folio_memcg+0x1a7/0x310 [ 614.889437][T12068] workingset_activation+0x5f/0x4a0 [ 614.894626][T12068] ? folio_mark_accessed+0x361/0x4a0 [ 614.899907][T12068] folio_mark_accessed+0x3b5/0x4a0 [ 614.905013][T12068] kvm_release_page_clean+0x9a/0xe0 [ 614.910199][T12068] kvm_tdp_page_fault+0x2dd/0x370 [ 614.915229][T12068] kvm_mmu_do_page_fault+0x2c5/0x640 [ 614.920514][T12068] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 614.926334][T12068] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 614.931876][T12068] kvm_mmu_page_fault+0x22f/0xb70 [ 614.936899][T12068] ? __pfx_handle_ept_violation+0x10/0x10 [ 614.942606][T12068] vmx_handle_exit+0x1090/0x18a0 [ 614.947552][T12068] ? vcpu_run+0x361c/0x6f70 [ 614.952073][T12068] vcpu_run+0x432e/0x6f70 [ 614.956405][T12068] ? vcpu_run+0x361c/0x6f70 [ 614.960924][T12068] ? __pfx_vcpu_run+0x10/0x10 [ 614.965691][T12068] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 614.971417][T12068] ? rcu_is_watching+0x15/0xb0 [ 614.976195][T12068] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 614.981734][T12068] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 614.987453][T12068] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 614.993457][T12068] ? rcu_is_watching+0x15/0xb0 [ 614.998227][T12068] ? look_up_lock_class+0x74/0x170 [ 615.003334][T12068] ? register_lock_class+0x51/0x320 [ 615.008546][T12068] ? __lock_acquire+0xab9/0xd20 [ 615.013407][T12068] kvm_vcpu_ioctl+0x95c/0xe90 [ 615.018077][T12068] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 615.023261][T12068] ? __lock_acquire+0xab9/0xd20 [ 615.028095][T12068] ? __asan_memset+0x22/0x50 [ 615.032692][T12068] ? smack_file_ioctl+0x302/0x340 [ 615.037707][T12068] ? __pfx_smack_file_ioctl+0x10/0x10 [ 615.043070][T12068] ? __fget_files+0x2a/0x420 [ 615.047644][T12068] ? __fget_files+0x3a0/0x420 [ 615.052307][T12068] ? __fget_files+0x2a/0x420 [ 615.056884][T12068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 615.061806][T12068] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 615.066987][T12068] __se_sys_ioctl+0xfc/0x170 [ 615.071568][T12068] do_syscall_64+0xfa/0x3b0 [ 615.076053][T12068] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.081232][T12068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.087280][T12068] ? clear_bhb_loop+0x60/0xb0 [ 615.091950][T12068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.097826][T12068] RIP: 0033:0x7f2d47d8e9a9 [ 615.102225][T12068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.121814][T12068] RSP: 002b:00007f2d48b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.130210][T12068] RAX: ffffffffffffffda RBX: 00007f2d47fb5fa0 RCX: 00007f2d47d8e9a9 [ 615.138162][T12068] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 615.146138][T12068] RBP: 00007f2d47e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 615.154095][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.162044][T12068] R13: 0000000000000000 R14: 00007f2d47fb5fa0 R15: 00007fff4b313058 [ 615.170007][T12068] [ 615.173285][T12068] Kernel Offset: disabled [ 615.177605][T12068] Rebooting in 86400 seconds..