last executing test programs: 12.770591947s ago: executing program 1 (id=870): r0 = syz_ublk_setup_io_uring(0x7c0, &(0x7f0000000040)={0x0, 0x455c, 0x1000, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, 0x0, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x40000, 0x2, 0x3ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x4, 0x0, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21af, 0x10, 0x2, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1, 0x2, 0x821a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 12.664585518s ago: executing program 1 (id=873): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x2, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000880)) syz_open_dev$hidraw(&(0x7f0000000080), 0xfff7fffeffffffff, 0x264001) r2 = syz_io_uring_setup(0x3b59, &(0x7f0000000240)={0x0, 0xbe23, 0x100, 0x1, 0x37f}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)) r3 = io_uring_setup(0x522, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xfffffffc, 0x20002f4, 0x0, r2}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/95) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x2}) 12.389297629s ago: executing program 3 (id=875): syz_usb_connect(0x0, 0x2d, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x72, 0x68, 0xc, 0x40, 0x100d, 0x3342, 0x99ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0xfe, 0x40, 0xd5, "", [{{0x9, 0x4, 0x9e, 0x8, 0x1, 0x9e, 0xa1, 0x54, 0xca, [], [{{0x9, 0x5, 0x1, 0xc, 0x10, 0x5, 0xf8, 0x6}}]}}]}}]}}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}) 9.310058344s ago: executing program 3 (id=893): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 9.257888195s ago: executing program 1 (id=894): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f0000000480)='adfs\x00', 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(0x0, &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*']}, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha512\x00'}}) syz_usb_disconnect(0xffffffffffffffff) 6.936090039s ago: executing program 2 (id=904): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000880)) syz_open_dev$hidraw(&(0x7f0000000080), 0xfff7fffeffffffff, 0x264001) r2 = syz_io_uring_setup(0x3b59, &(0x7f0000000240)={0x0, 0xbe23, 0x100, 0x1, 0x37f}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)) r3 = io_uring_setup(0x522, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xfffffffc, 0x20002f4, 0x0, r2}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/95) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x2}) 6.786302519s ago: executing program 1 (id=905): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000000009"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x0, 0x8, 0xd, "b92906b751cd721bf26a611446"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0xd0, 0x0, 0x0, 0x0}], 0x1}) 6.157814006s ago: executing program 3 (id=907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000340)=0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702800000000000850000008600000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) close_range(r2, r2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) writev(r7, &(0x7f0000000680), 0x1000000000000294) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000020601020a0000000000000000001ffd0900020073797a32000000000900020073797a3200000004000300"/64], 0x40}}, 0x40880) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000040)) 5.358326166s ago: executing program 4 (id=910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='100000', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x40) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000f6dbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050007000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 5.167303299s ago: executing program 2 (id=911): syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa0100000035f200182c00fe8000000000000000000000000000bbfe800000bf35ce68e77462de68eb210000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010ffff907800006ae0228d"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008b100000000000000000000000000000d810cc71debeeb84d5b494a04606c60fde9430a3b8093ce7ffd3a98f8c5d6ad1481cad0f633f2c741a04d7b6bd8d9bcb760a1f760bcf8ff32ef8eced96588ba17ff1d87ec007248455e6464cd8ead6eb8169352661cf8f338fa60e9d6f1f3526fba179d1e579a7393723e0ef6b09d813dca2065624b54aa10636c78a54b79e580c13cc958b52f5145712", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000", @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x50) listen(r0, 0x3) write$tun(r3, &(0x7f0000000780)={@val={0x0, 0x8847}, @void, @ipv4=@igmp={{0x8, 0x4, 0x3, 0x9, 0xa4, 0x67, 0x0, 0x0, 0x2, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x0, 0x8, "8fa697b9ab1f"}, @ra={0x94, 0x4, 0x1}]}}, {0x15, 0xf7, 0x0, @multicast1, "592697f95b4ec56a90c09bcc4636f84c8b5ba10b8bb0e4bf9d8098cafb158d18fbd8a8ad59b13a8b727860fd1e6cae81740b34b0f41764ddafd810532adb79eb12e88e1a42a15cbb60ea58fe1218030ae85d13add168c0a8f80129a205738ff49656570bebbadbb591f9fdf1038633c960d9c57ddbc587db25122d5c"}}}, 0xa8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000070000000500000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00ee7b0800e900", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x108) 4.002530474s ago: executing program 3 (id=912): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) 3.629909633s ago: executing program 1 (id=916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f1020301090212"], 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.333190561s ago: executing program 2 (id=917): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @private0, 0xfffffffc}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2e7}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000540)="e5", 0x1}], 0x1}}], 0x2, 0x4008040) 3.197702685s ago: executing program 4 (id=918): lsetxattr$security_capability(0x0, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x1000000, [{0x3, 0xffff}]}, 0xc, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000240)=@urb_type_iso={0x0, {0x5}, 0x3, 0x80, 0x0, 0x0, 0x2, 0x6512c6de, 0x37, 0xc, 0x100, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33) 3.168929028s ago: executing program 3 (id=919): syz_usb_connect(0x0, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x72, 0x68, 0xc, 0x40, 0x100d, 0x3342, 0x99ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x8, 0xfe, 0x40, 0xd5, "", [{{0x9, 0x4, 0x81, 0x0, 0x0, 0xaf, 0x8e, 0xc8, 0x5}}, {{0x9, 0x4, 0x9e, 0x8, 0x1, 0x9e, 0xa1, 0x54, 0xca, [], [{{0x9, 0x5, 0x1, 0xc, 0x10, 0x5, 0xf8, 0x6}}]}}]}}]}}, 0x0) 3.166293516s ago: executing program 2 (id=920): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000001c0)="00c962", 0x3}], 0x1, 0x0, 0x0, 0x4040}, 0xc851) 2.947830376s ago: executing program 2 (id=921): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000880)) syz_open_dev$hidraw(&(0x7f0000000080), 0xfff7fffeffffffff, 0x264001) r2 = syz_io_uring_setup(0x3b59, &(0x7f0000000240)={0x0, 0xbe23, 0x100, 0x1, 0x37f}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)) r3 = io_uring_setup(0x522, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xfffffffc, 0x20002f4, 0x0, r2}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/95) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x2}) 2.614022028s ago: executing program 4 (id=922): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000340)=0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702800000000000850000008600000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) close_range(r2, r2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) writev(r7, &(0x7f0000000680), 0x1000000000000294) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000020601020a0000000000000000001ffd0900020073797a32000000000900020073797a3200000004000300"/64], 0x40}}, 0x40880) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000040)) 1.709950638s ago: executing program 4 (id=923): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x2, 0x80, {}, {0x0, 0xb846941ed94b4582, 0xff, 0x80, 0x0, 0xfe, "8200"}, 0x2002000, 0x2, {}, 0x20800}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1.582192572s ago: executing program 4 (id=924): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfffe, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) 1.286499241s ago: executing program 2 (id=926): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x5db) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 1.182047902s ago: executing program 0 (id=927): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x86e, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 1.076520617s ago: executing program 0 (id=928): syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa0100000035f200182c00fe8000000000000000000000000000bbfe800000bf35ce68e77462de68eb210000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010ffff907800006ae0228d"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008b100000000000000000000000000000d810cc71debeeb84d5b494a04606c60fde9430a3b8093ce7ffd3a98f8c5d6ad1481cad0f633f2c741a04d7b6bd8d9bcb760a1f760bcf8ff32ef8eced96588ba17ff1d87ec007248455e6464cd8ead6eb8169352661cf8f338fa60e9d6f1f3526fba179d1e579a7393723e0ef6b09d813dca2065624b54aa10636c78a54b79e580c13cc958b52f5145712", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000", @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x50) listen(r0, 0x3) write$tun(r3, &(0x7f0000000780)={@val={0x0, 0x8847}, @void, @ipv4=@igmp={{0x8, 0x4, 0x3, 0x9, 0xa4, 0x67, 0x0, 0x0, 0x2, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x0, 0x8, "8fa697b9ab1f"}, @ra={0x94, 0x4, 0x1}]}}, {0x15, 0xf7, 0x0, @multicast1, "592697f95b4ec56a90c09bcc4636f84c8b5ba10b8bb0e4bf9d8098cafb158d18fbd8a8ad59b13a8b727860fd1e6cae81740b34b0f41764ddafd810532adb79eb12e88e1a42a15cbb60ea58fe1218030ae85d13add168c0a8f80129a205738ff49656570bebbadbb591f9fdf1038633c960d9c57ddbc587db25122d5c"}}}, 0xa8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000070000000500000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00ee7b0800e900", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000e400000035337b5f4febdd2ccff38c603ef30fee6e891187a50bb57e95ef76c7789318a7a9532cf5dc4d0d63d8155a9e7467289a7d7b64178c451cda62c56b13ee6badb8db2436fb09289f5cd63ed15398fcab97c4e4475cfc2f037d8e0000478a65290b2cee303c014f3e3c159a77dee3c8411bed02ec1522dd47c0010a0407e2b2a2650f25c863e58ac1c0d138b1c77dd7587bc744b0252af941f2e458cdf23aec04dcc8a64ad45ef1df60cd431142ad211dcdf667fa893282edaa6ee2d3a2fe03cdfea855a236388a2a41823532b10d101f49c1cdcd465905c0b786ed5b3979dcb27a6ea2e8e82fd99b39"], &(0x7f0000000140)=0x108) 885.133782ms ago: executing program 0 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="f5af25bd7000000000000e20000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 710.027087ms ago: executing program 0 (id=930): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) 575.739859ms ago: executing program 4 (id=931): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$inet6(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 559.690115ms ago: executing program 0 (id=932): lsetxattr$security_capability(0x0, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x1000000, [{0x3, 0xffff}]}, 0xc, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000240)=@urb_type_iso={0x0, {0x5}, 0x3, 0x80, 0x0, 0x0, 0x2, 0x6512c6de, 0x37, 0xc, 0x100, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33) 273.774056ms ago: executing program 1 (id=933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000340)=0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000080000000000000000000000f2a0000000000565154f077cc97b16eb00b2b192c2b87f5aea88de91ebb4f5a10547ef154dfd5ed3289d3024d29ca179675a890793b89833ac206bc734376981d2ee957e05390d92e4e1fd2859e93520fe729fc480e4ded55250044a40916facd606c75227a39df3b47c771628fc4c4aa6ec9caec46b5f7a6596f43c68a0748f71644e5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702800000000000850000008600000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) close_range(r2, r2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) writev(r7, &(0x7f0000000680), 0x1000000000000294) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000020601020a0000000000000000001ffd0900020073797a32000000000900020073797a3200000004000300"/64], 0x40}}, 0x40880) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000040)) 229.350884ms ago: executing program 0 (id=934): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, r0, 0xffffff65, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400a2e0000004e1e8a"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000280), 0x800, 0x200400) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r4, 0x603, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x10) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0xa, 0x26, {0x26, 0xe, "0ca0707759a8b4c958297a7548aeceb8f27108f6802b5ee7c1ff7b3c598b9460ad5b2c4e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="003179000000fd502df3fd9f633c2968ee14fb"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}}) syz_usb_connect(0x1, 0x36, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x42081, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000280)=0x10001) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=935): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f0000000480)='adfs\x00', 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(0x0, &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*']}, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha512\x00'}}) syz_usb_disconnect(0xffffffffffffffff) kernel console output (not intermixed with test programs): b 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 185.999631][ T5712] usb 5-1: vub300 testing BULK IN EndPoint(1) 83 [ 185.999656][ T5712] usb 5-1: vub300 testing BULK OUT EndPoint(2) 04 [ 185.999674][ T5712] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 186.068516][ T5712] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 186.083336][ T10] hdpvr 1-1:0.0: firmware version 0x0 dated [ 186.083475][ T10] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 186.298259][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.370597][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.464340][ T7097] syzkaller0: entered promiscuous mode [ 186.471456][ T7097] syzkaller0: entered allmulticast mode [ 186.724855][ T7097] tipc: Started in network mode [ 186.725877][ T7097] tipc: Node identity 7a0560f98fe4, cluster identity 4711 [ 186.888284][ T6625] udevd[6625]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.013614][ T7097] tipc: Enabled bearer , priority 0 [ 187.302045][ T7095] tipc: Resetting bearer [ 187.500289][ T10] hdpvr 1-1:0.0: Could not setup controls [ 187.502071][ T10] hdpvr 1-1:0.0: registering videodev failed [ 187.763318][ T10] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 187.837286][ T10] usb 1-1: USB disconnect, device number 13 [ 187.878539][ T7095] tipc: Disabling bearer [ 188.265762][ T6439] tipc: Node number set to 4125188345 [ 189.642802][ T5601] usb 5-1: USB disconnect, device number 16 [ 190.810937][ T5712] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 190.863087][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 190.995181][ T5712] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 190.999761][ T9] usb 4-1: device descriptor read/64, error -71 [ 191.016529][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.259994][ T5712] dln2 1-1:1.0: USB write failed: -110 [ 191.265708][ T5712] dln2 1-1:1.0: failed to initialize hardware [ 191.269367][ T5712] dln2 1-1:1.0: probe with driver dln2 failed with error -110 [ 191.301224][ T6439] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 191.303433][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 191.460402][ T9] usb 4-1: device descriptor read/64, error -71 [ 191.495580][ T6439] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 191.511695][ T6439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 191.511723][ T6439] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 191.511744][ T6439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 191.511763][ T6439] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 191.511800][ T6439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.570470][ T9] usb usb4-port1: attempt power cycle [ 191.578830][ T6439] usb 5-1: config 0 descriptor?? [ 191.825243][ T6439] hdpvr 5-1:0.0: firmware version 0x0 dated [ 191.834194][ T6439] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 191.906917][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.920119][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.924006][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.941116][ T9] usb 4-1: device descriptor read/8, error -71 [ 192.109911][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.122230][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.180380][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 192.200468][ T9] usb 4-1: device descriptor read/8, error -71 [ 192.310122][ T9] usb usb4-port1: unable to enumerate USB device [ 192.554501][ T7150] syzkaller0: entered promiscuous mode [ 192.554792][ T7150] syzkaller0: entered allmulticast mode [ 192.655574][ T6439] hdpvr 5-1:0.0: Could not setup controls [ 192.662168][ T6439] hdpvr 5-1:0.0: registering videodev failed [ 192.716550][ T6439] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 192.751362][ T6439] usb 5-1: USB disconnect, device number 17 [ 193.779803][ T10] usb 1-1: USB disconnect, device number 14 [ 193.869715][ T5601] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 194.021706][ T5601] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 194.025844][ T5601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.262525][ C0] dln2 3-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 194.324162][ T5601] dln2 3-1:1.0: USB write failed: -110 [ 194.324285][ T5601] dln2 3-1:1.0: failed to initialize hardware [ 194.360166][ T5601] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 194.367321][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.367383][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.599222][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.612213][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.699806][ T5730] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 194.852200][ T5730] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 194.866991][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.871687][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.871734][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.932892][ T5730] usb 5-1: config 0 descriptor?? [ 195.474827][ T5730] usbhid 5-1:0.0: can't add hid device: -71 [ 195.479871][ T5730] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 195.512199][ T5730] usb 5-1: USB disconnect, device number 18 [ 196.961828][ T5712] usb 3-1: USB disconnect, device number 16 [ 197.189838][ T5601] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 197.342160][ T5601] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 197.343654][ T5601] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 197.343712][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.356046][ T5601] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 197.356088][ T5601] usb 5-1: Manufacturer: syz [ 197.382939][ T5601] usb 5-1: config 0 descriptor?? [ 197.700412][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.759721][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 197.864133][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 197.864244][ T10] usb 3-1: no configurations [ 197.864256][ T10] usb 3-1: can't read configurations, error -22 [ 197.874308][ T5601] rc_core: IR keymap rc-hauppauge not found [ 197.874326][ T5601] Registered IR keymap rc-empty [ 197.884031][ T5601] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 197.906156][ T5601] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 197.911137][ T9] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 197.916162][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.019723][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 198.051464][ T5601] usb 5-1: USB disconnect, device number 19 [ 198.212061][ C0] dln2 4-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 198.218162][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 198.218270][ T10] usb 3-1: no configurations [ 198.218282][ T10] usb 3-1: can't read configurations, error -22 [ 198.218674][ T10] usb usb3-port1: attempt power cycle [ 198.273158][ T9] dln2 4-1:1.0: USB write failed: -110 [ 198.273282][ T9] dln2 4-1:1.0: failed to initialize hardware [ 198.277342][ T9] dln2 4-1:1.0: probe with driver dln2 failed with error -110 [ 198.529339][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.540232][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.699753][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 198.721043][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 198.721183][ T10] usb 3-1: no configurations [ 198.721195][ T10] usb 3-1: can't read configurations, error -22 [ 198.796956][ T7216] syzkaller0: entered promiscuous mode [ 198.797022][ T7216] syzkaller0: entered allmulticast mode [ 198.849752][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 198.871783][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 198.871951][ T10] usb 3-1: no configurations [ 198.871963][ T10] usb 3-1: can't read configurations, error -22 [ 198.882105][ T10] usb usb3-port1: unable to enumerate USB device [ 198.895803][ T7215] tipc: Started in network mode [ 198.895830][ T7215] tipc: Node identity ae2d68201278, cluster identity 4711 [ 199.066189][ T7215] tipc: Enabled bearer , priority 0 [ 199.179328][ T7214] tipc: Resetting bearer [ 199.511818][ T7214] tipc: Disabling bearer [ 200.722189][ T10] usb 4-1: USB disconnect, device number 18 [ 200.999721][ T5730] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.175019][ T5730] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 201.213850][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.218502][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.218547][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.343181][ T5730] usb 3-1: config 0 descriptor?? [ 201.419689][ T5583] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 201.591274][ T5583] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 201.618314][ T5583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.909804][ C1] dln2 1-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 201.930494][ T5583] dln2 1-1:1.0: USB write failed: -110 [ 201.936481][ T5583] dln2 1-1:1.0: failed to initialize hardware [ 201.949988][ T5583] dln2 1-1:1.0: probe with driver dln2 failed with error -110 [ 201.991005][ T5730] usbhid 3-1:0.0: can't add hid device: -71 [ 201.993287][ T5730] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 202.022771][ T5730] usb 3-1: USB disconnect, device number 21 [ 202.141158][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 202.203962][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.206744][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.310726][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 202.315207][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 202.315267][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.328855][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 202.328884][ T9] usb 4-1: Manufacturer: syz [ 202.408587][ T9] usb 4-1: config 0 descriptor?? [ 202.529823][ T9] rc_core: IR keymap rc-hauppauge not found [ 202.530561][ T9] Registered IR keymap rc-empty [ 202.542407][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 202.557703][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 202.746875][ T9] usb 4-1: USB disconnect, device number 19 [ 203.145880][ T7253] syzkaller0: entered promiscuous mode [ 203.152217][ T7253] syzkaller0: entered allmulticast mode [ 203.539742][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 203.682858][ T5783] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 203.730646][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 203.732118][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.732139][ T9] usb 3-1: config 0 has no interfaces? [ 203.736804][ T9] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 203.736827][ T9] usb 3-1: Product: syz [ 203.736839][ T9] usb 3-1: Manufacturer: syz [ 203.736851][ T9] usb 3-1: SerialNumber: syz [ 203.762617][ T9] usb 3-1: config 0 descriptor?? [ 203.861139][ T5783] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 203.872138][ T5783] usb 2-1: no configurations [ 203.872155][ T5783] usb 2-1: can't read configurations, error -22 [ 203.989432][ T6439] usb 3-1: USB disconnect, device number 22 [ 204.009703][ T5783] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 204.172189][ T5783] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 204.177766][ T5783] usb 2-1: no configurations [ 204.177779][ T5783] usb 2-1: can't read configurations, error -22 [ 204.179841][ T9] usb 1-1: USB disconnect, device number 15 [ 204.206448][ T5783] usb usb2-port1: attempt power cycle [ 204.692139][ T5783] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 204.726924][ T5783] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 204.735185][ T5783] usb 2-1: no configurations [ 204.735203][ T5783] usb 2-1: can't read configurations, error -22 [ 204.763188][ T7273] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 204.899730][ T5783] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 204.972503][ T5783] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 204.982994][ T5783] usb 2-1: no configurations [ 204.983012][ T5783] usb 2-1: can't read configurations, error -22 [ 204.983386][ T5783] usb usb2-port1: unable to enumerate USB device [ 205.459704][ T5783] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 205.619768][ T5783] usb 5-1: Using ep0 maxpacket: 8 [ 205.627675][ T5783] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 205.637383][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.690652][ T5783] usb 5-1: config 0 descriptor?? [ 205.740236][ T5783] usb 5-1: probing VID:PID(0424:012C) [ 205.770831][ T5783] usb 5-1: vub300 testing BULK OUT EndPoint(0) 02 [ 205.779635][ T5783] usb 5-1: vub300 testing BULK IN EndPoint(1) 83 [ 205.779659][ T5783] usb 5-1: vub300 testing BULK OUT EndPoint(2) 04 [ 205.779688][ T5783] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 205.862282][ T5783] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 206.189789][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 206.439767][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 206.444206][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.444259][ T10] usb 1-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 206.448308][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.448331][ T10] usb 1-1: Product: syz [ 206.448344][ T10] usb 1-1: Manufacturer: syz [ 206.448356][ T10] usb 1-1: SerialNumber: syz [ 206.477400][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 206.649736][ T4909] Bluetooth: hci0: command 0x0406 tx timeout [ 206.732361][ T4909] Bluetooth: hci1: command 0x0406 tx timeout [ 206.741982][ T4909] Bluetooth: hci3: command 0x0406 tx timeout [ 206.742014][ T4909] Bluetooth: hci4: command 0x0406 tx timeout [ 206.742119][ T4909] Bluetooth: hci2: command 0x0406 tx timeout [ 206.869681][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 206.979739][ T10] usb 1-1: USB disconnect, device number 16 [ 207.362002][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.552631][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 207.701728][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 207.701812][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 207.709501][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.709769][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.709791][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 207.709882][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.761534][ T10] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 208.073239][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 208.073365][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 208.327735][ T5730] usb 5-1: USB disconnect, device number 20 [ 208.409724][ T5783] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 208.575115][ T5783] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 208.584314][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 208.598761][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.606905][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 208.606991][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 208.725043][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 208.883977][ T10] usb 2-1: USB disconnect, device number 27 [ 208.904445][ C1] dln2 1-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 209.000466][ T5783] dln2 1-1:1.0: USB write failed: -110 [ 209.006189][ T5783] dln2 1-1:1.0: failed to initialize hardware [ 209.034738][ T5783] dln2 1-1:1.0: probe with driver dln2 failed with error -110 [ 209.182350][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.191396][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.543596][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 209.607915][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 209.616799][ T10] keyspan 2-1:1.0: device disconnected [ 209.659463][ T7330] capability: warning: `syz.1.477' uses deprecated v2 capabilities in a way that may be insecure [ 209.769723][ T5601] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 209.924985][ T7323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.958538][ T5601] usb 5-1: Using ep0 maxpacket: 8 [ 209.959796][ T5601] usb 5-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 209.963612][ T5601] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.963635][ T5601] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 209.967287][ T5601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.967309][ T5601] usb 5-1: Product: syz [ 209.967323][ T5601] usb 5-1: Manufacturer: syz [ 209.967335][ T5601] usb 5-1: SerialNumber: syz [ 210.080022][ T5730] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 210.287655][ T5730] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 210.301181][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 210.308557][ T5730] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 210.308589][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 210.308608][ T5730] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 210.308651][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.395986][ T5730] usb 3-1: config 0 descriptor?? [ 210.640377][ T5730] hdpvr 3-1:0.0: firmware version 0x1e dated [ 210.868112][ T7334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.875524][ T7334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.655794][ T5583] usb 1-1: USB disconnect, device number 17 [ 211.710524][ T5730] hdpvr 3-1:0.0: Could not setup controls [ 211.718041][ T5730] hdpvr 3-1:0.0: registering videodev failed [ 211.973797][ T5730] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 212.034223][ T5730] usb 3-1: USB disconnect, device number 23 [ 212.067740][ T7335] bridge_slave_0: left allmulticast mode [ 212.075228][ T7335] bridge_slave_0: left promiscuous mode [ 212.141258][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.546370][ T7335] bridge_slave_1: left allmulticast mode [ 212.546449][ T7335] bridge_slave_1: left promiscuous mode [ 212.546686][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.643545][ T5601] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 212.667105][ T5601] usb 5-1: USB disconnect, device number 21 [ 212.873672][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.981636][ T7335] bond0: (slave bond_slave_0): Releasing backup interface [ 213.080657][ T7335] bond0: (slave bond_slave_1): Releasing backup interface [ 213.199296][ T7335] team0: Port device team_slave_0 removed [ 213.300294][ T7335] team0: Port device team_slave_1 removed [ 213.311711][ T7335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.311781][ T7335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.338800][ T7335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.365428][ T7335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.408488][ T7335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.939816][ T5601] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 215.093865][ T5601] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 215.095197][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.095225][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.095258][ T5601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.145372][ T5601] usb 5-1: config 0 descriptor?? [ 215.956657][ T5601] usbhid 5-1:0.0: can't add hid device: -71 [ 215.956982][ T5601] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 216.184883][ T5601] usb 5-1: USB disconnect, device number 22 [ 216.589691][ T6439] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 216.750572][ T7379] socket: no more sockets [ 216.765881][ T6439] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 216.781569][ T6439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 216.791312][ T6439] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 216.791341][ T6439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 216.791361][ T6439] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 216.791402][ T6439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.857445][ T6439] usb 2-1: config 0 descriptor?? [ 217.076233][ T6439] hdpvr 2-1:0.0: firmware version 0x1e dated Š [ 217.301623][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.321004][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.677041][ T7393] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 217.730545][ T6439] hdpvr 2-1:0.0: Could not setup controls [ 217.737099][ T6439] hdpvr 2-1:0.0: registering videodev failed [ 217.770440][ T6439] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 217.844383][ T6439] usb 2-1: USB disconnect, device number 28 [ 218.248962][ T7395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.469424][ T7406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.049697][ T6439] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 219.069511][ T7427] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 219.179699][ T6439] usb 3-1: device descriptor read/64, error -71 [ 219.429911][ T6439] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 219.580164][ T6439] usb 3-1: device descriptor read/64, error -71 [ 219.690538][ T6439] usb usb3-port1: attempt power cycle [ 220.073735][ T6439] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 220.094635][ T6439] usb 3-1: device descriptor read/8, error -71 [ 220.130746][ T36] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 220.300332][ T36] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 220.310782][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 220.310799][ T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 220.310811][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 220.310821][ T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 220.310841][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.318004][ T36] usb 2-1: config 0 descriptor?? [ 220.381633][ T6439] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 220.410409][ T6439] usb 3-1: device descriptor read/8, error -71 [ 220.455011][ T7447] loop5: detected capacity change from 0 to 7 [ 220.473360][ T7447] Dev loop5: unable to read RDB block 7 [ 220.480854][ T7447] loop5: AHDI p1 p2 p3 [ 220.480881][ T7447] loop5: partition table partially beyond EOD, truncated [ 220.481093][ T7447] loop5: p1 start 1818582900 is beyond EOD, truncated [ 220.481112][ T7447] loop5: p3 start 335544320 is beyond EOD, truncated [ 220.526970][ T6439] usb usb3-port1: unable to enumerate USB device [ 220.574747][ T36] hdpvr 2-1:0.0: firmware version 0x1e dated Š [ 220.776630][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.778461][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.893150][ T6439] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 221.042540][ T6439] usb 4-1: device descriptor read/64, error -71 [ 221.133692][ T36] hdpvr 2-1:0.0: max device number reached, device register failed [ 221.271465][ T36] usb 2-1: USB disconnect, device number 29 [ 221.308925][ T6439] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 221.482661][ T7453] netlink: 52 bytes leftover after parsing attributes in process `syz.4.524'. [ 221.493419][ T6439] usb 4-1: device descriptor read/64, error -71 [ 221.513372][ T7453] netlink: 52 bytes leftover after parsing attributes in process `syz.4.524'. [ 221.600126][ T6439] usb usb4-port1: attempt power cycle [ 221.849803][ T36] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 221.940990][ T10] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 222.011816][ T6439] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 222.032213][ T6439] usb 4-1: device descriptor read/8, error -71 [ 222.035344][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.035397][ T36] usb 5-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 222.036489][ T36] usb 5-1: config 8 has an invalid interface number: 129 but max is 1 [ 222.036509][ T36] usb 5-1: config 8 has an invalid interface number: 158 but max is 1 [ 222.036526][ T36] usb 5-1: config 8 has no interface number 0 [ 222.036540][ T36] usb 5-1: config 8 has no interface number 1 [ 222.036593][ T36] usb 5-1: config 8 interface 158 has no altsetting 0 [ 222.038803][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.038824][ T36] usb 5-1: Product: syz [ 222.038837][ T36] usb 5-1: Manufacturer: syz [ 222.038850][ T36] usb 5-1: SerialNumber: syz [ 222.113858][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.129069][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.134098][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.134148][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.323081][ T36] cxacru 5-1:8.129: cxacru_bind: interface has incorrect endpoints [ 222.323274][ T36] cxacru 5-1:8.129: usbatm_usb_probe: bind failed: -19! [ 222.341560][ T6439] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 222.351455][ T36] cxacru 5-1:8.158: cxacru_bind: interface has incorrect endpoints [ 222.351638][ T36] cxacru 5-1:8.158: usbatm_usb_probe: bind failed: -19! [ 222.368304][ T6439] usb 4-1: device descriptor read/8, error -71 [ 222.408971][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 222.409885][ T10] usbtmc 2-1:16.0: can't read capabilities [ 222.451661][ T36] usb 5-1: USB disconnect, device number 23 [ 222.471014][ T6439] usb usb4-port1: unable to enumerate USB device [ 222.638736][ T10] usb 2-1: USB disconnect, device number 30 [ 223.119830][ T7476] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcmmio) [ 223.429990][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 223.590815][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 223.602358][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 223.604405][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 223.604435][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 223.604455][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 223.604496][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.658247][ T10] usb 5-1: config 0 descriptor?? [ 223.879230][ T10] hdpvr 5-1:0.0: firmware version 0x1e dated Š [ 224.120554][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.121571][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.622604][ T5583] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 224.642187][ T10] hdpvr 5-1:0.0: max device number reached, device register failed [ 224.734186][ T10] usb 5-1: USB disconnect, device number 24 [ 224.799801][ T5583] usb 4-1: Using ep0 maxpacket: 32 [ 224.800648][ T5583] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 224.801831][ T5583] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 224.801858][ T5583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 224.802020][ T5583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 224.802042][ T5583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 224.802066][ T5583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 224.823761][ T5583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.823789][ T5583] usb 4-1: Product: syz [ 224.823802][ T5583] usb 4-1: Manufacturer: syz [ 224.823814][ T5583] usb 4-1: SerialNumber: syz [ 224.854720][ T5583] usb 4-1: config 0 descriptor?? [ 225.018130][ T7512] netlink: 52 bytes leftover after parsing attributes in process `syz.2.545'. [ 225.125330][ T7513] netlink: 52 bytes leftover after parsing attributes in process `syz.2.545'. [ 225.359141][ T5583] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 225.359222][ T5583] input input19: Device does not respond to id packet M [ 225.368799][ T5583] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 225.368846][ T5583] input input19: Device does not respond to id packet P [ 225.370647][ T5583] input input19: Device does not respond to id packet B [ 225.410111][ T6439] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 225.575691][ T6439] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.575777][ T6439] usb 3-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 225.587652][ T6439] usb 3-1: config 8 has an invalid interface number: 129 but max is 1 [ 225.587677][ T6439] usb 3-1: config 8 has an invalid interface number: 158 but max is 1 [ 225.587695][ T6439] usb 3-1: config 8 has no interface number 0 [ 225.587710][ T6439] usb 3-1: config 8 has no interface number 1 [ 225.587816][ T6439] usb 3-1: config 8 interface 158 has no altsetting 0 [ 225.599536][ T6439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.599877][ T6439] usb 3-1: Product: syz [ 225.599892][ T6439] usb 3-1: Manufacturer: syz [ 225.599905][ T6439] usb 3-1: SerialNumber: syz [ 225.804422][ T7508] loop2: detected capacity change from 0 to 7 [ 225.923603][ T6439] cxacru 3-1:8.129: cxacru_bind: interface has incorrect endpoints [ 225.939528][ T6439] cxacru 3-1:8.129: usbatm_usb_probe: bind failed: -19! [ 225.957350][ T7508] Dev loop2: unable to read RDB block 7 [ 225.957616][ T7508] loop2: unable to read partition table [ 225.998419][ T6439] cxacru 3-1:8.158: cxacru_bind: interface has incorrect endpoints [ 225.998899][ T6439] cxacru 3-1:8.158: usbatm_usb_probe: bind failed: -19! [ 226.021723][ T7508] loop2: partition table beyond EOD, truncated [ 226.021856][ T7508] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.024465][ T5583] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 226.024493][ T5583] input input19: Device does not respond to id packet N [ 226.024802][ T5583] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 226.025111][ T5583] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 226.025425][ T5583] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 226.025730][ T5583] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 226.048568][ T5583] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 226.100148][ T6439] usb 3-1: USB disconnect, device number 28 [ 226.199905][ T5583] usb 4-1: USB disconnect, device number 24 [ 226.429844][ T36] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 226.590516][ T36] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.595022][ T36] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.595052][ T36] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.595090][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.829372][ T36] usb 2-1: GET_CAPABILITIES returned 0 [ 226.829714][ T36] usbtmc 2-1:16.0: can't read capabilities [ 227.064568][ T36] usb 2-1: USB disconnect, device number 31 [ 227.189729][ T5783] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 227.205737][ T7535] loop5: detected capacity change from 0 to 7 [ 227.208356][ T7535] Dev loop5: unable to read RDB block 7 [ 227.208373][ T7535] loop5: AHDI p2 [ 227.208384][ T7535] loop5: partition table partially beyond EOD, truncated [ 227.346705][ T5783] usb 3-1: device descriptor read/64, error -71 [ 227.579878][ T5783] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 227.709763][ T5783] usb 3-1: device descriptor read/64, error -71 [ 227.719708][ T5601] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 227.831831][ T5783] usb usb3-port1: attempt power cycle [ 227.870396][ T5601] usb 1-1: Using ep0 maxpacket: 8 [ 227.878208][ T5601] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.878271][ T5601] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 227.905368][ T5601] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 211, changing to 7 [ 227.927505][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.935735][ T5601] usb 1-1: Product: syz [ 227.935754][ T5601] usb 1-1: Manufacturer: syz [ 227.935768][ T5601] usb 1-1: SerialNumber: syz [ 228.081058][ T6439] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 228.097491][ T7537] Could not create tracefs 'copy_trace_marker' entry [ 228.117678][ T7537] Could not create tracefs 'pause-on-trace' entry [ 228.176334][ T7537] Could not create tracefs 'stacktrace' entry [ 228.179726][ T5783] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 228.201302][ T5783] usb 3-1: device descriptor read/8, error -71 [ 228.231559][ T5601] usb 1-1: unit 2 not found! [ 228.231683][ T7537] ERROR: Could not create tracefs directory 'per_cpu/0' [ 228.244532][ T5601] usb 1-1: unit 119 not found! [ 228.249976][ T6439] usb 2-1: Using ep0 maxpacket: 32 [ 228.250922][ T6439] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 228.252366][ T6439] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 228.252393][ T6439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 228.252415][ T6439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 228.252435][ T6439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 228.252457][ T6439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 228.283120][ T6439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.283145][ T6439] usb 2-1: Product: syz [ 228.283158][ T6439] usb 2-1: Manufacturer: syz [ 228.283179][ T6439] usb 2-1: SerialNumber: syz [ 228.299435][ T6439] usb 2-1: config 0 descriptor?? [ 228.366410][ T7537] Could not create tracefs 'free_buffer' entry [ 228.449697][ T5783] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 228.473936][ T5601] usb 1-1: USB disconnect, device number 18 [ 228.480629][ T5783] usb 3-1: device descriptor read/8, error -71 [ 228.527153][ T7537] Could not create tracefs 'buffer_percent' entry [ 228.584490][ T6424] udevd[6424]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.591615][ T5783] usb usb3-port1: unable to enumerate USB device [ 228.617594][ T7537] Could not create tracefs 'syscall_user_buf_size' entry [ 228.657679][ T7537] Could not create tracefs 'tracing_on' entry [ 228.686501][ T7537] Could not create tracefs 'error_log' entry [ 228.714305][ T7537] Could not create tracefs 'test_nop_accept' entry [ 228.716477][ T6439] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 228.716524][ T6439] input input20: Device does not respond to id packet M [ 228.718979][ T6439] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 228.719023][ T6439] input input20: Device does not respond to id packet P [ 228.723860][ T6439] input input20: Device does not respond to id packet B [ 228.757178][ T7537] ERROR: Failed to create trace option: test_nop_accept [ 228.774197][ T7537] Could not create tracefs 'test_nop_refuse' entry [ 228.956622][ T7547] loop2: detected capacity change from 0 to 7 [ 229.066864][ T7547] Dev loop2: unable to read RDB block 7 [ 229.067018][ T7547] loop2: unable to read partition table [ 229.067674][ T7547] loop2: partition table beyond EOD, truncated [ 229.067706][ T7547] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.133599][ T6439] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 229.133790][ T6439] input input20: Device does not respond to id packet N [ 229.136693][ T6439] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 229.137324][ T6439] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 229.137776][ T6439] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 229.142174][ T6439] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 229.175582][ T6439] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 229.263679][ T7560] loop5: detected capacity change from 0 to 7 [ 229.318414][ T7560] Dev loop5: unable to read RDB block 7 [ 229.318494][ T7560] loop5: AHDI p2 [ 229.318511][ T7560] loop5: partition table partially beyond EOD, truncated [ 229.333185][ T6439] usb 2-1: USB disconnect, device number 32 [ 230.091964][ T6439] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 230.263536][ T6439] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.267423][ T6439] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.267443][ T6439] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.267466][ T6439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.618112][ T6439] usb 4-1: GET_CAPABILITIES returned 0 [ 230.625353][ T6439] usbtmc 4-1:16.0: can't read capabilities [ 230.700461][ T7582] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcmmio) [ 230.873305][ T9] usb 4-1: USB disconnect, device number 25 [ 231.201207][ T7575] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.240145][ T5583] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 231.289850][ T5601] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 231.401228][ T5583] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 231.402752][ T5583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.436104][ T7593] loop5: detected capacity change from 0 to 7 [ 231.437202][ T7593] Dev loop5: unable to read RDB block 7 [ 231.437226][ T7593] loop5: AHDI p2 [ 231.437245][ T7593] loop5: partition table partially beyond EOD, truncated [ 231.440619][ T5601] usb 5-1: Using ep0 maxpacket: 8 [ 231.448295][ T5601] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.448351][ T5601] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 231.455650][ T5601] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 211, changing to 7 [ 231.501084][ T5601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.510202][ T5601] usb 5-1: Product: syz [ 231.510220][ T5601] usb 5-1: Manufacturer: syz [ 231.510232][ T5601] usb 5-1: SerialNumber: syz [ 231.636293][ C1] dln2 3-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 231.789952][ T5583] dln2 3-1:1.0: USB write failed: -110 [ 231.790080][ T5583] dln2 3-1:1.0: failed to initialize hardware [ 231.793928][ T5583] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 231.850951][ T5601] usb 5-1: unit 2 not found! [ 231.857332][ T5601] usb 5-1: unit 119 not found! [ 231.979835][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.980419][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.003980][ T5601] usb 5-1: USB disconnect, device number 25 [ 232.192705][ T6625] udevd[6625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.866596][ T7614] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcmmio) [ 233.093450][ T7621] sctp: [Deprecated]: syz.4.590 (pid 7621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.093450][ T7621] Use struct sctp_sack_info instead [ 233.261707][ T7626] loop5: detected capacity change from 0 to 7 [ 233.265296][ T7626] Dev loop5: unable to read RDB block 7 [ 233.265325][ T7626] loop5: AHDI p2 [ 233.265342][ T7626] loop5: partition table partially beyond EOD, truncated [ 233.292900][ T5601] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 233.451469][ T5601] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.462101][ T5601] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.462132][ T5601] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.462198][ T5601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.757031][ T5601] usb 2-1: usb_control_msg returned -71 [ 233.759133][ T5601] usbtmc 2-1:16.0: can't read capabilities [ 233.827225][ T5601] usb 2-1: USB disconnect, device number 33 [ 233.974282][ T36] usb 3-1: USB disconnect, device number 33 [ 234.341250][ T7647] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcmmio) [ 234.693931][ T7655] sctp: [Deprecated]: syz.3.603 (pid 7655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.693931][ T7655] Use struct sctp_sack_info instead [ 234.801617][ T7658] loop5: detected capacity change from 0 to 7 [ 234.936330][ T7663] netlink: 52 bytes leftover after parsing attributes in process `syz.0.607'. [ 234.988259][ T7658] Dev loop5: unable to read RDB block 7 [ 234.988334][ T7658] loop5: AHDI p2 [ 234.988353][ T7658] loop5: partition table partially beyond EOD, truncated [ 235.032280][ T7665] netlink: 52 bytes leftover after parsing attributes in process `syz.0.607'. [ 235.431675][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 235.593526][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.602703][ T10] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 235.608519][ T10] usb 1-1: config 8 has an invalid interface number: 129 but max is 1 [ 235.608548][ T10] usb 1-1: config 8 has an invalid interface number: 158 but max is 1 [ 235.608568][ T10] usb 1-1: config 8 has no interface number 0 [ 235.608585][ T10] usb 1-1: config 8 has no interface number 1 [ 235.608642][ T10] usb 1-1: config 8 interface 158 has no altsetting 0 [ 235.662763][ T5601] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 235.677889][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.686338][ T10] usb 1-1: Product: syz [ 235.686352][ T10] usb 1-1: Manufacturer: syz [ 235.686360][ T10] usb 1-1: SerialNumber: syz [ 235.820640][ T5601] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 235.832576][ T5601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.968265][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.970137][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.099822][ T10] cxacru 1-1:8.129: cxacru_bind: interface has incorrect endpoints [ 236.104671][ T10] cxacru 1-1:8.129: usbatm_usb_probe: bind failed: -19! [ 236.109526][ C0] dln2 4-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 236.134088][ T10] cxacru 1-1:8.158: cxacru_bind: interface has incorrect endpoints [ 236.134938][ T10] cxacru 1-1:8.158: usbatm_usb_probe: bind failed: -19! [ 236.162526][ T10] usb 1-1: USB disconnect, device number 19 [ 236.200048][ T5601] dln2 4-1:1.0: USB write failed: -110 [ 236.200323][ T5601] dln2 4-1:1.0: failed to initialize hardware [ 236.206769][ T5601] dln2 4-1:1.0: probe with driver dln2 failed with error -110 [ 236.289753][ T36] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 236.333782][ T7677] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcmmio) [ 236.444049][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.452913][ T36] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.454889][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.472668][ T36] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.472756][ T36] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.472795][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.798699][ T36] usb 3-1: usb_control_msg returned -71 [ 236.798815][ T36] usbtmc 3-1:16.0: can't read capabilities [ 236.842242][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 236.907552][ T36] usb 3-1: USB disconnect, device number 34 [ 237.006287][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.006389][ T10] usb 2-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 237.022919][ T10] usb 2-1: config 8 has an invalid interface number: 129 but max is 1 [ 237.022954][ T10] usb 2-1: config 8 has an invalid interface number: 158 but max is 1 [ 237.022973][ T10] usb 2-1: config 8 has no interface number 0 [ 237.022987][ T10] usb 2-1: config 8 has no interface number 1 [ 237.023044][ T10] usb 2-1: config 8 interface 158 has no altsetting 0 [ 237.066381][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.067681][ T10] usb 2-1: Product: syz [ 237.067699][ T10] usb 2-1: Manufacturer: syz [ 237.067713][ T10] usb 2-1: SerialNumber: syz [ 237.119729][ T5783] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 237.269701][ T5783] usb 1-1: Using ep0 maxpacket: 32 [ 237.280792][ T5783] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.285734][ T5783] usb 1-1: no configurations [ 237.285753][ T5783] usb 1-1: can't read configurations, error -22 [ 237.317470][ T10] cxacru 2-1:8.129: cxacru_bind: interface has incorrect endpoints [ 237.317918][ T10] cxacru 2-1:8.129: usbatm_usb_probe: bind failed: -19! [ 237.336800][ T10] cxacru 2-1:8.158: cxacru_bind: interface has incorrect endpoints [ 237.336886][ T10] cxacru 2-1:8.158: usbatm_usb_probe: bind failed: -19! [ 237.349469][ T10] usb 2-1: USB disconnect, device number 34 [ 237.439771][ T5783] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 237.599726][ T5783] usb 1-1: Using ep0 maxpacket: 32 [ 237.605392][ T5783] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.605449][ T5783] usb 1-1: no configurations [ 237.605461][ T5783] usb 1-1: can't read configurations, error -22 [ 237.608602][ T5783] usb usb1-port1: attempt power cycle [ 237.906784][ T7704] bridge_slave_0: left allmulticast mode [ 237.906858][ T7704] bridge_slave_0: left promiscuous mode [ 237.907099][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.959721][ T5783] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 237.990436][ T5783] usb 1-1: Using ep0 maxpacket: 32 [ 238.000017][ T5783] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 238.005768][ T5783] usb 1-1: no configurations [ 238.005787][ T5783] usb 1-1: can't read configurations, error -22 [ 238.047126][ T7710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.625'. [ 238.070101][ T7710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.625'. [ 238.102807][ T7704] bridge_slave_1: left allmulticast mode [ 238.103859][ T7704] bridge_slave_1: left promiscuous mode [ 238.117430][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.149677][ T5783] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 238.170628][ T5783] usb 1-1: Using ep0 maxpacket: 32 [ 238.176581][ T5783] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 238.176616][ T5783] usb 1-1: no configurations [ 238.176623][ T5783] usb 1-1: can't read configurations, error -22 [ 238.202337][ T5783] usb usb1-port1: unable to enumerate USB device [ 238.316993][ T5601] usb 4-1: USB disconnect, device number 26 [ 238.406750][ T7704] bond0: (slave bond_slave_0): Releasing backup interface [ 238.461706][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 238.509315][ T7704] bond0: (slave bond_slave_1): Releasing backup interface [ 238.619025][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.619106][ T9] usb 2-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 238.630273][ T9] usb 2-1: config 8 has an invalid interface number: 129 but max is 1 [ 238.630300][ T9] usb 2-1: config 8 has an invalid interface number: 158 but max is 1 [ 238.630318][ T9] usb 2-1: config 8 has no interface number 0 [ 238.630332][ T9] usb 2-1: config 8 has no interface number 1 [ 238.630387][ T9] usb 2-1: config 8 interface 158 has no altsetting 0 [ 238.636574][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.636599][ T9] usb 2-1: Product: syz [ 238.636612][ T9] usb 2-1: Manufacturer: syz [ 238.636624][ T9] usb 2-1: SerialNumber: syz [ 238.691477][ T7704] team0: Port device team_slave_0 removed [ 238.778526][ T7704] team0: Port device team_slave_1 removed [ 238.800400][ T7704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.800462][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.841808][ T7704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.841873][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.849826][ T5601] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 238.881986][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.892836][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.923250][ T9] cxacru 2-1:8.129: cxacru_bind: interface has incorrect endpoints [ 238.923387][ T9] cxacru 2-1:8.129: usbatm_usb_probe: bind failed: -19! [ 238.943231][ T7704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.977166][ T9] cxacru 2-1:8.158: cxacru_bind: interface has incorrect endpoints [ 238.977322][ T9] cxacru 2-1:8.158: usbatm_usb_probe: bind failed: -19! [ 239.000279][ T5601] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 239.002024][ T5601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 239.002050][ T5601] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 239.002072][ T5601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 239.002091][ T5601] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 239.002126][ T5601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.063489][ T5601] usb 4-1: config 0 descriptor?? [ 239.095845][ T9] usb 2-1: USB disconnect, device number 35 [ 239.363057][ T5601] hdpvr 4-1:0.0: firmware version 0x1e dated Š [ 239.554980][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.565516][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.779683][ T5583] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 239.961698][ T5583] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.973580][ T5583] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.973612][ T5583] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.973660][ T5583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.209013][ T5601] hdpvr 4-1:0.0: max device number reached, device register failed [ 240.387540][ T5583] usb 3-1: usb_control_msg returned -71 [ 240.397232][ T5583] usbtmc 3-1:16.0: can't read capabilities [ 240.406422][ T7731] loop5: detected capacity change from 0 to 7 [ 240.423331][ T7731] Dev loop5: unable to read RDB block 7 [ 240.429181][ T7731] loop5: AHDI p2 [ 240.432963][ T7731] loop5: partition table partially beyond EOD, truncated [ 240.602070][ T5583] usb 3-1: USB disconnect, device number 35 [ 240.635710][ T5601] usb 4-1: USB disconnect, device number 27 [ 240.734277][ T7729] bridge0: port 3(netdevsim0) entered blocking state [ 240.805652][ T7729] bridge0: port 3(netdevsim0) entered disabled state [ 240.877779][ T7729] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 241.008773][ T7729] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 241.067806][ T7729] bridge0: port 3(netdevsim0) entered blocking state [ 241.083612][ T7729] bridge0: port 3(netdevsim0) entered forwarding state [ 241.361858][ T7745] loop5: detected capacity change from 0 to 7 [ 241.366492][ T7745] Dev loop5: unable to read RDB block 7 [ 241.366522][ T7745] loop5: AHDI p1 p2 p3 [ 241.366540][ T7745] loop5: partition table partially beyond EOD, truncated [ 241.366747][ T7745] loop5: p1 start 1818582900 is beyond EOD, truncated [ 241.366764][ T7745] loop5: p3 start 335544320 is beyond EOD, truncated [ 241.490593][ T5601] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 241.636345][ T7749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.672491][ T5601] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.672577][ T5601] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 241.673686][ T5601] usb 1-1: config 8 has an invalid interface number: 129 but max is 1 [ 241.673708][ T5601] usb 1-1: config 8 has an invalid interface number: 158 but max is 1 [ 241.673725][ T5601] usb 1-1: config 8 has no interface number 0 [ 241.673740][ T5601] usb 1-1: config 8 has no interface number 1 [ 241.673792][ T5601] usb 1-1: config 8 interface 158 has no altsetting 0 [ 241.675994][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.676015][ T5601] usb 1-1: Product: syz [ 241.676027][ T5601] usb 1-1: Manufacturer: syz [ 241.676041][ T5601] usb 1-1: SerialNumber: syz [ 241.889965][ T7751] syzkaller0: entered promiscuous mode [ 241.890031][ T7751] syzkaller0: entered allmulticast mode [ 241.937236][ T5601] cxacru 1-1:8.129: cxacru_bind: interface has incorrect endpoints [ 241.937387][ T5601] cxacru 1-1:8.129: usbatm_usb_probe: bind failed: -19! [ 241.969892][ T5601] cxacru 1-1:8.158: cxacru_bind: interface has incorrect endpoints [ 241.970696][ T5601] cxacru 1-1:8.158: usbatm_usb_probe: bind failed: -19! [ 241.997385][ T5601] usb 1-1: USB disconnect, device number 24 [ 242.024602][ T7743] syz.2.634 (7743) used greatest stack depth: 19008 bytes left [ 242.166392][ T7756] netlink: 52 bytes leftover after parsing attributes in process `syz.4.640'. [ 242.202244][ T7759] warning: `syz.3.642' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 242.232609][ T7761] netlink: 52 bytes leftover after parsing attributes in process `syz.4.640'. [ 242.510495][ T6439] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 242.529805][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 242.548900][ T7767] syzkaller0: entered promiscuous mode [ 242.548954][ T7767] syzkaller0: entered allmulticast mode [ 242.680765][ T6439] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 242.691022][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.691028][ T6439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 242.691048][ T6439] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 242.691069][ T6439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 242.691088][ T6439] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 242.691122][ T6439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.692638][ T9] usb 5-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 242.707306][ T6439] usb 2-1: config 0 descriptor?? [ 242.729473][ T9] usb 5-1: config 8 has an invalid interface number: 129 but max is 1 [ 242.729501][ T9] usb 5-1: config 8 has an invalid interface number: 158 but max is 1 [ 242.729519][ T9] usb 5-1: config 8 has no interface number 0 [ 242.748341][ T9] usb 5-1: config 8 has no interface number 1 [ 242.748413][ T9] usb 5-1: config 8 interface 158 has no altsetting 0 [ 242.798627][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.798708][ T9] usb 5-1: Product: syz [ 242.798723][ T9] usb 5-1: Manufacturer: syz [ 242.798737][ T9] usb 5-1: SerialNumber: syz [ 242.799740][ T5611] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 242.961490][ T5611] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 242.986804][ T5611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.986932][ T5611] usb 1-1: config 0 has no interfaces? [ 242.997924][ T6439] hdpvr 2-1:0.0: firmware version 0x1e dated Š [ 243.024073][ T5611] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 243.024194][ T5611] usb 1-1: Product: syz [ 243.024208][ T5611] usb 1-1: Manufacturer: syz [ 243.024218][ T5611] usb 1-1: SerialNumber: syz [ 243.050697][ T5611] usb 1-1: config 0 descriptor?? [ 243.077989][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.091355][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.147070][ T9] cxacru 5-1:8.129: cxacru_bind: interface has incorrect endpoints [ 243.147231][ T9] cxacru 5-1:8.129: usbatm_usb_probe: bind failed: -19! [ 243.190913][ T9] cxacru 5-1:8.158: cxacru_bind: interface has incorrect endpoints [ 243.191087][ T9] cxacru 5-1:8.158: usbatm_usb_probe: bind failed: -19! [ 243.212449][ T7763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.226568][ T7763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.227738][ T9] usb 5-1: USB disconnect, device number 26 [ 243.277389][ T7767] tipc: Enabled bearer , priority 0 [ 243.281170][ T5611] usb 1-1: USB disconnect, device number 25 [ 243.315880][ T7766] tipc: Resetting bearer [ 243.513189][ T7766] tipc: Disabling bearer [ 243.571376][ T6439] hdpvr 2-1:0.0: max device number reached, device register failed [ 243.601966][ T6439] usb 2-1: USB disconnect, device number 36 [ 243.688364][ T7777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.324419][ T7817] netlink: 52 bytes leftover after parsing attributes in process `syz.0.662'. [ 245.378759][ T7817] netlink: 52 bytes leftover after parsing attributes in process `syz.0.662'. [ 245.780435][ T5611] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 245.948258][ T5611] usb 1-1: unable to get BOS descriptor or descriptor too short [ 245.948378][ T5611] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 245.949801][ T5611] usb 1-1: config 8 has an invalid interface number: 129 but max is 1 [ 245.949826][ T5611] usb 1-1: config 8 has an invalid interface number: 158 but max is 1 [ 245.949931][ T5611] usb 1-1: config 8 has no interface number 0 [ 245.949946][ T5611] usb 1-1: config 8 has no interface number 1 [ 245.950004][ T5611] usb 1-1: config 8 interface 158 has no altsetting 0 [ 245.959681][ T5583] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 246.014594][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.014663][ T5611] usb 1-1: Product: syz [ 246.014677][ T5611] usb 1-1: Manufacturer: syz [ 246.014689][ T5611] usb 1-1: SerialNumber: syz [ 246.119659][ T5583] usb 2-1: Using ep0 maxpacket: 16 [ 246.125536][ T5583] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 246.156109][ T5583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.160200][ T5583] usb 2-1: Product: syz [ 246.160221][ T5583] usb 2-1: Manufacturer: syz [ 246.160234][ T5583] usb 2-1: SerialNumber: syz [ 246.195571][ T5583] usb 2-1: config 0 descriptor?? [ 246.213114][ T5583] usb 2-1: selecting invalid altsetting 1 [ 246.219060][ T5583] technisat-usb2: could not set alternate setting to 0 [ 246.288542][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.289511][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.366615][ T5611] cxacru 1-1:8.129: cxacru_bind: interface has incorrect endpoints [ 246.366902][ T5611] cxacru 1-1:8.129: usbatm_usb_probe: bind failed: -19! [ 246.377907][ T7837] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcmmio) [ 246.379154][ T5611] cxacru 1-1:8.158: cxacru_bind: interface has incorrect endpoints [ 246.379287][ T5611] cxacru 1-1:8.158: usbatm_usb_probe: bind failed: -19! [ 246.396112][ T5611] usb 1-1: USB disconnect, device number 26 [ 246.417034][ T5583] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 246.449157][ T5583] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 246.460194][ T5583] usb 2-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 246.728367][ T7850] bridge0: port 1(netdevsim0) entered blocking state [ 246.728575][ T7850] bridge0: port 1(netdevsim0) entered disabled state [ 246.728774][ T7850] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 246.744613][ T7850] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 246.745801][ T7850] bridge0: port 1(netdevsim0) entered blocking state [ 246.753584][ T7850] bridge0: port 1(netdevsim0) entered forwarding state [ 246.775347][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.775939][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.889347][ T7853] syzkaller0: entered promiscuous mode [ 246.889411][ T7853] syzkaller0: entered allmulticast mode [ 247.079472][ T7856] Bluetooth: ISO socket layer initialized [ 247.336040][ T7865] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcmmio) [ 247.639476][ T7871] socket: no more sockets [ 247.856837][ T7882] netlink: 52 bytes leftover after parsing attributes in process `syz.0.686'. [ 247.888191][ T7882] netlink: 52 bytes leftover after parsing attributes in process `syz.0.686'. [ 248.241151][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 248.392043][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.392128][ T9] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 248.393317][ T9] usb 1-1: config 8 has an invalid interface number: 129 but max is 1 [ 248.393340][ T9] usb 1-1: config 8 has an invalid interface number: 158 but max is 1 [ 248.393358][ T9] usb 1-1: config 8 has no interface number 0 [ 248.393373][ T9] usb 1-1: config 8 has no interface number 1 [ 248.393425][ T9] usb 1-1: config 8 interface 158 has no altsetting 0 [ 248.396044][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.396067][ T9] usb 1-1: Product: syz [ 248.396080][ T9] usb 1-1: Manufacturer: syz [ 248.396094][ T9] usb 1-1: SerialNumber: syz [ 248.509755][ T5601] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 248.670789][ T5601] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 248.672849][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 248.672882][ T5601] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 248.672904][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 248.672924][ T5601] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 248.673007][ T5601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.768453][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.782719][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.864221][ T9] cxacru 1-1:8.129: cxacru_bind: interface has incorrect endpoints [ 248.864379][ T9] cxacru 1-1:8.129: usbatm_usb_probe: bind failed: -19! [ 248.874729][ T5601] usb 5-1: config 0 descriptor?? [ 248.910628][ T9] cxacru 1-1:8.158: cxacru_bind: interface has incorrect endpoints [ 248.910850][ T9] cxacru 1-1:8.158: usbatm_usb_probe: bind failed: -19! [ 248.959306][ T9] usb 1-1: USB disconnect, device number 27 [ 249.101360][ T5601] hdpvr 5-1:0.0: firmware version 0x1e dated Š [ 249.269669][ T6439] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 249.466381][ T6439] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 249.487969][ T6439] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 249.489745][ T6439] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.513028][ T6439] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 249.518591][ T6439] usb 4-1: Manufacturer: syz [ 249.518612][ T6439] usb 4-1: SerialNumber: syz [ 249.834250][ T5601] hdpvr 5-1:0.0: max device number reached, device register failed [ 249.869405][ T6439] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 249.894447][ T6439] usb 4-1: USB disconnect, device number 28 [ 250.045629][ T5601] usb 5-1: USB disconnect, device number 27 [ 250.351422][ T7910] bridge_slave_0: left allmulticast mode [ 250.359305][ T7910] bridge_slave_0: left promiscuous mode [ 250.369094][ T7914] ima: policy update failed [ 250.375783][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.417916][ T37] audit: type=1802 audit(1788499976.296:2): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.700" res=0 errno=0 [ 250.557415][ T7925] loop5: detected capacity change from 0 to 7 [ 250.586748][ T7910] bridge_slave_1: left allmulticast mode [ 250.590417][ T7910] bridge_slave_1: left promiscuous mode [ 250.590690][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.609487][ T7925] Dev loop5: unable to read RDB block 7 [ 250.622355][ T7925] loop5: AHDI p2 [ 250.622384][ T7925] loop5: partition table partially beyond EOD, truncated [ 250.735384][ T7926] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 250.816841][ T7932] netlink: 52 bytes leftover after parsing attributes in process `syz.2.705'. [ 250.826373][ T7910] bond0: (slave bond_slave_0): Releasing backup interface [ 250.841492][ T7932] netlink: 52 bytes leftover after parsing attributes in process `syz.2.705'. [ 250.900489][ T7910] bond0: (slave bond_slave_1): Releasing backup interface [ 250.963233][ T7910] team0: Port device team_slave_0 removed [ 251.004401][ T7910] team0: Port device team_slave_1 removed [ 251.005621][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.005647][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.045238][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.046088][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.083885][ T7910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.121476][ T5601] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 251.279475][ T5601] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.279786][ T5601] usb 3-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 251.284707][ T5601] usb 3-1: config 8 has an invalid interface number: 129 but max is 1 [ 251.284732][ T5601] usb 3-1: config 8 has an invalid interface number: 158 but max is 1 [ 251.284750][ T5601] usb 3-1: config 8 has no interface number 0 [ 251.284764][ T5601] usb 3-1: config 8 has no interface number 1 [ 251.284819][ T5601] usb 3-1: config 8 interface 158 has no altsetting 0 [ 251.293408][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.293432][ T5601] usb 3-1: Product: syz [ 251.293445][ T5601] usb 3-1: Manufacturer: syz [ 251.293458][ T5601] usb 3-1: SerialNumber: syz [ 251.558537][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.567971][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.593951][ T5601] cxacru 3-1:8.129: cxacru_bind: interface has incorrect endpoints [ 251.594102][ T5601] cxacru 3-1:8.129: usbatm_usb_probe: bind failed: -19! [ 251.607305][ T5601] cxacru 3-1:8.158: cxacru_bind: interface has incorrect endpoints [ 251.607443][ T5601] cxacru 3-1:8.158: usbatm_usb_probe: bind failed: -19! [ 251.632093][ T5601] usb 3-1: USB disconnect, device number 36 [ 252.129731][ T5601] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 252.209738][ T5730] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 252.280706][ T5601] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 252.283296][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 252.283323][ T5601] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 252.283345][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 252.283365][ T5601] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 252.283401][ T5601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.299529][ T5601] usb 1-1: config 0 descriptor?? [ 252.313898][ T7959] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.441386][ T7962] loop5: detected capacity change from 0 to 7 [ 252.442577][ T5730] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 252.444675][ T5730] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 252.444727][ T5730] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.462755][ T7962] Dev loop5: unable to read RDB block 7 [ 252.462786][ T7962] loop5: AHDI p2 [ 252.462803][ T7962] loop5: partition table partially beyond EOD, truncated [ 252.474483][ T5730] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 252.474510][ T5730] usb 5-1: Manufacturer: syz [ 252.474524][ T5730] usb 5-1: SerialNumber: syz [ 252.515915][ T5601] hdpvr 1-1:0.0: firmware version 0x1e dated Š [ 252.772433][ T5730] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 252.783834][ T5730] usb 5-1: USB disconnect, device number 28 [ 253.002611][ T5601] hdpvr 1-1:0.0: max device number reached, device register failed [ 253.051358][ T5601] usb 1-1: USB disconnect, device number 28 [ 253.098729][ T7968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.364122][ T7975] syzkaller0: entered promiscuous mode [ 253.365721][ T7975] syzkaller0: entered allmulticast mode [ 253.534501][ T7981] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 253.631920][ T5730] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 253.780504][ T5730] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 253.781736][ T5730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.781757][ T5730] usb 3-1: config 0 has no interfaces? [ 253.789660][ T5730] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 253.789686][ T5730] usb 3-1: Product: syz [ 253.789700][ T5730] usb 3-1: Manufacturer: syz [ 253.789712][ T5730] usb 3-1: SerialNumber: syz [ 253.817121][ T5730] usb 3-1: config 0 descriptor?? [ 254.010083][ T7991] bridge0: port 1(netdevsim0) entered blocking state [ 254.017005][ T7991] bridge0: port 1(netdevsim0) entered disabled state [ 254.017208][ T7991] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 254.042328][ T7991] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 254.051404][ T7991] bridge0: port 1(netdevsim0) entered blocking state [ 254.051547][ T7991] bridge0: port 1(netdevsim0) entered forwarding state [ 254.056198][ T7975] tipc: Enabled bearer , priority 0 [ 254.065989][ T5783] usb 3-1: USB disconnect, device number 37 [ 254.114923][ T7994] sctp: [Deprecated]: syz.1.727 (pid 7994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.114923][ T7994] Use struct sctp_sack_info instead [ 254.233006][ T7974] tipc: Resetting bearer [ 254.412046][ T7974] tipc: Disabling bearer [ 254.641511][ T8007] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.949780][ T5601] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 255.089728][ T5601] usb 5-1: device descriptor read/64, error -71 [ 255.134563][ T8027] loop5: detected capacity change from 0 to 7 [ 255.142525][ T8027] Dev loop5: unable to read RDB block 7 [ 255.142567][ T8027] loop5: unable to read partition table [ 255.142746][ T8027] loop5: partition table beyond EOD, truncated [ 255.143331][ T8027] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 255.250670][ T5611] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 255.330525][ T5601] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 255.409138][ T8029] sctp: [Deprecated]: syz.2.739 (pid 8029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.409138][ T8029] Use struct sctp_sack_info instead [ 255.461647][ T5611] usb 4-1: Using ep0 maxpacket: 16 [ 255.467970][ T5611] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 255.479771][ T5601] usb 5-1: device descriptor read/64, error -71 [ 255.497236][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.499672][ T5611] usb 4-1: Product: syz [ 255.499693][ T5611] usb 4-1: Manufacturer: syz [ 255.499705][ T5611] usb 4-1: SerialNumber: syz [ 255.530207][ T5611] usb 4-1: config 0 descriptor?? [ 255.550755][ T5611] usb 4-1: selecting invalid altsetting 1 [ 255.557897][ T5611] technisat-usb2: could not set alternate setting to 0 [ 255.590135][ T5601] usb usb5-port1: attempt power cycle [ 255.756331][ T5611] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 255.769136][ T8045] loop5: detected capacity change from 0 to 7 [ 255.771140][ T8045] Dev loop5: unable to read RDB block 7 [ 255.771174][ T8045] loop5: AHDI p2 [ 255.771190][ T8045] loop5: partition table partially beyond EOD, truncated [ 255.805054][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.805177][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.979728][ T5601] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 256.000682][ T5601] usb 5-1: device descriptor read/8, error -71 [ 256.009716][ T5783] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 256.129051][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.134504][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.170788][ T5783] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.184165][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=243 [ 256.184192][ T5783] usb 1-1: Product: syz [ 256.184206][ T5783] usb 1-1: Manufacturer: syz [ 256.184218][ T5783] usb 1-1: SerialNumber: syz [ 256.231031][ T36] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.259852][ T5601] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 256.280792][ T5601] usb 5-1: device descriptor read/8, error -71 [ 256.402808][ T5601] usb usb5-port1: unable to enumerate USB device [ 256.456671][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.458576][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.468294][ T5601] usb 1-1: USB disconnect, device number 29 [ 257.012724][ T8064] syzkaller0: entered promiscuous mode [ 257.012786][ T8064] syzkaller0: entered allmulticast mode [ 257.369667][ T36] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 257.409916][ T36] ath9k_htc: Failed to initialize the device [ 257.410757][ T5601] usb 1-1: ath9k_htc: USB layer deinitialized [ 257.535091][ T8068] loop5: detected capacity change from 0 to 7 [ 257.544207][ T8068] Dev loop5: unable to read RDB block 7 [ 257.544250][ T8068] loop5: unable to read partition table [ 257.544518][ T8068] loop5: partition table beyond EOD, truncated [ 257.546634][ T8068] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 257.829021][ T8077] loop5: detected capacity change from 0 to 7 [ 257.897223][ T8077] Dev loop5: unable to read RDB block 7 [ 257.897314][ T8077] loop5: AHDI p2 [ 257.897333][ T8077] loop5: partition table partially beyond EOD, truncated [ 258.362620][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 258.469720][ T5730] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 258.590461][ T8095] loop5: detected capacity change from 0 to 7 [ 258.600789][ T8095] Dev loop5: unable to read RDB block 7 [ 258.606491][ T8095] loop5: unable to read partition table [ 258.606623][ T8095] loop5: partition table beyond EOD, truncated [ 258.606650][ T8095] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 258.619685][ T5730] usb 3-1: Using ep0 maxpacket: 8 [ 258.620473][ T5730] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.621090][ T5730] usb 3-1: config 0 has no interfaces? [ 258.623416][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.623437][ T5730] usb 3-1: Product: syz [ 258.623450][ T5730] usb 3-1: Manufacturer: syz [ 258.623463][ T5730] usb 3-1: SerialNumber: syz [ 258.633035][ T5730] usb 3-1: config 0 descriptor?? [ 258.836994][ T6439] usb 3-1: USB disconnect, device number 38 [ 259.019724][ T36] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 259.150023][ T36] usb 5-1: device descriptor read/64, error -71 [ 259.408285][ T8109] loop5: detected capacity change from 0 to 7 [ 259.409949][ T36] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 259.426646][ T8109] Dev loop5: unable to read RDB block 7 [ 259.426671][ T8109] loop5: AHDI p2 [ 259.426692][ T8109] loop5: partition table partially beyond EOD, truncated [ 259.539717][ T36] usb 5-1: device descriptor read/64, error -71 [ 259.652477][ T5730] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 259.653131][ T36] usb usb5-port1: attempt power cycle [ 259.820984][ T5730] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 259.830920][ T5730] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 259.831015][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.850507][ T5730] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 259.850563][ T5730] usb 1-1: Manufacturer: syz [ 259.855804][ T5730] usb 1-1: config 0 descriptor?? [ 259.919683][ T5730] rc_core: IR keymap rc-hauppauge not found [ 259.919764][ T5730] Registered IR keymap rc-empty [ 259.922090][ T5730] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 259.925022][ T5730] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 259.929841][ T5783] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 260.011545][ T36] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 260.061678][ T36] usb 5-1: device descriptor read/8, error -71 [ 260.089452][ T5783] usb 3-1: device descriptor read/64, error -71 [ 260.121248][ T5880] usb 1-1: USB disconnect, device number 30 [ 260.320951][ T36] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 260.342608][ T36] usb 5-1: device descriptor read/8, error -71 [ 260.349708][ T5783] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 260.450625][ T36] usb usb5-port1: unable to enumerate USB device [ 260.479741][ T5783] usb 3-1: device descriptor read/64, error -71 [ 260.590019][ T5783] usb usb3-port1: attempt power cycle [ 260.834949][ T8121] loop5: detected capacity change from 0 to 7 [ 260.845081][ T8121] Dev loop5: unable to read RDB block 7 [ 260.845177][ T8121] loop5: AHDI p1 p2 [ 260.845198][ T8121] loop5: partition table partially beyond EOD, truncated [ 260.845971][ T8121] loop5: p1 start 1818582900 is beyond EOD, truncated [ 260.959676][ T5783] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 260.984924][ T5783] usb 3-1: device descriptor read/8, error -71 [ 261.219901][ T5783] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 261.251734][ T5783] usb 3-1: device descriptor read/8, error -71 [ 261.360604][ T5783] usb usb3-port1: unable to enumerate USB device [ 261.897665][ T8136] loop5: detected capacity change from 0 to 7 [ 261.920372][ T5880] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 261.924287][ T8136] Dev loop5: unable to read RDB block 7 [ 261.924314][ T8136] loop5: AHDI p2 [ 261.924347][ T8136] loop5: partition table partially beyond EOD, truncated [ 262.100597][ T5880] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 262.113525][ T5880] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 262.113583][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.117037][ T5880] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 262.117063][ T5880] usb 1-1: Manufacturer: syz [ 262.160571][ T5880] usb 1-1: config 0 descriptor?? [ 262.269710][ T5880] rc_core: IR keymap rc-hauppauge not found [ 262.275789][ T5880] Registered IR keymap rc-empty [ 262.298205][ T5880] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 262.324495][ T5880] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 262.411515][ T5712] usb 1-1: USB disconnect, device number 31 [ 262.945514][ T8153] netlink: 'syz.4.785': attribute type 4 has an invalid length. [ 263.400882][ T5880] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 263.529853][ T5880] usb 1-1: device descriptor read/64, error -71 [ 263.769910][ T5880] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 263.909679][ T5880] usb 1-1: device descriptor read/64, error -71 [ 264.020556][ T5880] usb usb1-port1: attempt power cycle [ 264.359744][ T5880] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 264.380329][ T5880] usb 1-1: device descriptor read/8, error -71 [ 264.409661][ T5783] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 264.539654][ T5783] usb 5-1: device descriptor read/64, error -71 [ 264.619670][ T5880] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 264.650760][ T5880] usb 1-1: device descriptor read/8, error -71 [ 264.760248][ T5880] usb usb1-port1: unable to enumerate USB device [ 264.789665][ T5783] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 264.919802][ T5783] usb 5-1: device descriptor read/64, error -71 [ 265.030743][ T5783] usb usb5-port1: attempt power cycle [ 265.069727][ T5880] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 265.220249][ T5880] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 265.229922][ T5880] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 265.230016][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.250832][ T5880] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 265.250898][ T5880] usb 3-1: Manufacturer: syz [ 265.258759][ T5880] usb 3-1: config 0 descriptor?? [ 265.319827][ T5880] rc_core: IR keymap rc-hauppauge not found [ 265.319882][ T5880] Registered IR keymap rc-empty [ 265.321577][ T5880] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 265.326895][ T5880] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 265.380838][ T5783] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 265.400226][ T5783] usb 5-1: device descriptor read/8, error -71 [ 265.500754][ T36] usb 3-1: USB disconnect, device number 43 [ 265.659733][ T5783] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 265.680210][ T5783] usb 5-1: device descriptor read/8, error -71 [ 265.790024][ T5783] usb usb5-port1: unable to enumerate USB device [ 265.960526][ T8187] netlink: 'syz.3.797': attribute type 4 has an invalid length. [ 266.660647][ T8202] loop5: detected capacity change from 0 to 7 [ 266.691054][ T8202] Dev loop5: unable to read RDB block 7 [ 266.697013][ T8202] loop5: AHDI p2 [ 266.697038][ T8202] loop5: partition table partially beyond EOD, truncated [ 267.024299][ T36] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 267.189673][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 267.192103][ T36] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 267.207607][ T36] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.215610][ T36] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.237084][ T36] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 267.238609][ T36] usb 1-1: Product: syz [ 267.238625][ T36] usb 1-1: Manufacturer: syz [ 267.238639][ T36] usb 1-1: SerialNumber: syz [ 267.361344][ T36] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input24 [ 267.409340][ T8218] netlink: 'syz.2.809': attribute type 4 has an invalid length. [ 267.546475][ T36] usb 1-1: USB disconnect, device number 36 [ 267.673444][ T36] appletouch 1-1:1.0: input: appletouch disconnected [ 267.709736][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 267.873130][ T10] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 267.876297][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.143846][ C0] dln2 5-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 268.160039][ T10] dln2 5-1:1.0: USB write failed: -110 [ 268.160154][ T10] dln2 5-1:1.0: failed to initialize hardware [ 268.160206][ T5880] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 268.163953][ T10] dln2 5-1:1.0: probe with driver dln2 failed with error -110 [ 268.272616][ T8228] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 268.332522][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.332623][ T5880] usb 3-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 268.333723][ T5880] usb 3-1: config 8 has an invalid interface number: 129 but max is 1 [ 268.333746][ T5880] usb 3-1: config 8 has an invalid interface number: 158 but max is 1 [ 268.333763][ T5880] usb 3-1: config 8 has no interface number 0 [ 268.333778][ T5880] usb 3-1: config 8 has no interface number 1 [ 268.333816][ T5880] usb 3-1: config 8 interface 158 has no altsetting 0 [ 268.336125][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.336148][ T5880] usb 3-1: Product: syz [ 268.336160][ T5880] usb 3-1: Manufacturer: syz [ 268.336173][ T5880] usb 3-1: SerialNumber: syz [ 268.521718][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.537943][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.612032][ T5880] cxacru 3-1:8.129: usbatm_usb_probe: bind failed: -19! [ 268.622640][ T5880] cxacru 3-1:8.158: usbatm_usb_probe: bind failed: -19! [ 268.630881][ T5880] usb 3-1: USB disconnect, device number 44 [ 269.699756][ T5880] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 269.829766][ T5880] usb 1-1: device descriptor read/64, error -71 [ 269.979436][ T8246] netlink: 'syz.2.821': attribute type 4 has an invalid length. [ 270.069762][ T5880] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 270.199702][ T5880] usb 1-1: device descriptor read/64, error -71 [ 270.309962][ T5880] usb usb1-port1: attempt power cycle [ 270.447556][ T10] usb 5-1: USB disconnect, device number 41 [ 270.632611][ T36] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 270.664626][ T5880] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 270.681899][ T5880] usb 1-1: device descriptor read/8, error -71 [ 270.800291][ T36] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 270.811027][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 270.811054][ T36] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 270.811077][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 270.811097][ T36] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 270.811134][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.816034][ T36] usb 3-1: config 0 descriptor?? [ 270.949755][ T5880] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 270.970619][ T5880] usb 1-1: device descriptor read/8, error -71 [ 271.025706][ T36] hdpvr 3-1:0.0: firmware version 0x1e dated Š [ 271.081549][ T5880] usb usb1-port1: unable to enumerate USB device [ 271.257162][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.257795][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.730090][ T5730] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 271.844821][ T36] hdpvr 3-1:0.0: max device number reached, device register failed [ 271.907216][ T36] usb 3-1: USB disconnect, device number 45 [ 271.921038][ T5730] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.928836][ T5730] usb 5-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 271.949111][ T5730] usb 5-1: config 8 has an invalid interface number: 129 but max is 1 [ 271.957382][ T5730] usb 5-1: config 8 has an invalid interface number: 158 but max is 1 [ 271.957406][ T5730] usb 5-1: config 8 has no interface number 0 [ 271.957420][ T5730] usb 5-1: config 8 has no interface number 1 [ 271.957463][ T5730] usb 5-1: config 8 interface 158 has no altsetting 0 [ 271.987622][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.996491][ T5730] usb 5-1: Product: syz [ 271.996511][ T5730] usb 5-1: Manufacturer: syz [ 271.996524][ T5730] usb 5-1: SerialNumber: syz [ 272.264988][ T5730] cxacru 5-1:8.129: usbatm_usb_probe: bind failed: -19! [ 272.281674][ T5730] cxacru 5-1:8.158: usbatm_usb_probe: bind failed: -19! [ 272.285476][ T5730] usb 5-1: USB disconnect, device number 42 [ 272.799753][ T5730] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 272.960583][ T5730] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 272.962117][ T5730] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 272.962168][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.966908][ T5730] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 272.966931][ T5730] usb 1-1: Manufacturer: syz [ 272.980281][ T5730] usb 1-1: config 0 descriptor?? [ 273.149658][ T5730] rc_core: IR keymap rc-hauppauge not found [ 273.149720][ T5730] Registered IR keymap rc-empty [ 273.159924][ T5730] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 273.166130][ T5730] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 273.280918][ T6439] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 273.301834][ T5730] usb 1-1: USB disconnect, device number 41 [ 273.445825][ T6439] usb 5-1: device descriptor read/64, error -71 [ 273.479695][ T5880] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 273.637197][ T5880] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 273.647612][ T5880] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 273.658722][ T5880] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.658756][ T5880] usb 3-1: config 0 interface 0 has no altsetting 0 [ 273.658794][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.709434][ T5880] usb 3-1: config 0 descriptor?? [ 273.711436][ T6439] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 273.736321][ T8297] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 273.851069][ T6439] usb 5-1: device descriptor read/64, error -71 [ 273.880908][ T8302] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 273.925651][ T48] rtrs_client L2020: : CM error (CM event: address error, err: -ENODEV) [ 273.953749][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 273.953902][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 273.968124][ T6439] usb usb5-port1: attempt power cycle [ 273.987243][ T5880] usb 3-1: USB disconnect, device number 46 [ 274.076559][ T8302] rtrs_client L2638: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 274.148917][ T8305] C: renamed from veth1_to_team (while UP) [ 274.221790][ T8305] netlink: 164 bytes leftover after parsing attributes in process `syz.1.843'. [ 274.298931][ T8305] block nbd0: not configured, cannot reconfigure [ 274.359722][ T6439] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 274.382931][ T6439] usb 5-1: device descriptor read/8, error -71 [ 274.630631][ T6439] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 274.651105][ T6439] usb 5-1: device descriptor read/8, error -71 [ 274.759966][ T6439] usb usb5-port1: unable to enumerate USB device [ 274.929834][ T5783] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 275.097654][ T5783] usb 3-1: unable to get BOS descriptor or descriptor too short [ 275.097755][ T5783] usb 3-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 275.101213][ T5783] usb 3-1: config 8 has an invalid interface number: 129 but max is 1 [ 275.101237][ T5783] usb 3-1: config 8 has an invalid interface number: 158 but max is 1 [ 275.101254][ T5783] usb 3-1: config 8 has no interface number 0 [ 275.101269][ T5783] usb 3-1: config 8 has no interface number 1 [ 275.101329][ T5783] usb 3-1: config 8 interface 158 has no altsetting 0 [ 275.104270][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.104292][ T5783] usb 3-1: Product: syz [ 275.104305][ T5783] usb 3-1: Manufacturer: syz [ 275.104325][ T5783] usb 3-1: SerialNumber: syz [ 275.394417][ T5783] cxacru 3-1:8.129: usbatm_usb_probe: bind failed: -19! [ 275.440397][ T5783] cxacru 3-1:8.158: usbatm_usb_probe: bind failed: -19! [ 275.464288][ T5783] usb 3-1: USB disconnect, device number 47 [ 275.729695][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 275.879748][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 275.886714][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 275.890354][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.890385][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.929898][ T10] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 275.929978][ T10] usb 1-1: Product: syz [ 275.929992][ T10] usb 1-1: Manufacturer: syz [ 275.930005][ T10] usb 1-1: SerialNumber: syz [ 276.003027][ T10] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input26 [ 276.265020][ T6439] usb 1-1: USB disconnect, device number 42 [ 276.265184][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 276.376446][ T6439] appletouch 1-1:1.0: input: appletouch disconnected [ 276.642353][ T8337] netlink: 164 bytes leftover after parsing attributes in process `syz.2.856'. [ 276.664634][ T8337] block nbd0: not configured, cannot reconfigure [ 276.721719][ T5730] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 276.744601][ T8339] loop5: detected capacity change from 0 to 7 [ 276.790165][ T8339] Dev loop5: unable to read RDB block 7 [ 276.796885][ T8339] loop5: AHDI p2 [ 276.796912][ T8339] loop5: partition table partially beyond EOD, truncated [ 276.870599][ T5730] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 276.872142][ T5730] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 276.872192][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.873449][ T5730] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 276.873471][ T5730] usb 5-1: Manufacturer: syz [ 276.890575][ T5730] usb 5-1: config 0 descriptor?? [ 276.999651][ T5730] rc_core: IR keymap rc-hauppauge not found [ 276.999856][ T5730] Registered IR keymap rc-empty [ 277.012870][ T5730] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 277.031969][ T5730] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 277.142162][ T5730] usb 5-1: USB disconnect, device number 47 [ 277.909698][ T5601] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 278.070035][ T5601] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 278.081663][ T5601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.310499][ C0] dln2 3-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 278.319841][ T5880] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 278.333599][ T5601] dln2 3-1:1.0: USB write failed: -110 [ 278.340840][ T5601] dln2 3-1:1.0: failed to initialize hardware [ 278.364406][ T5601] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 278.524656][ T8365] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 278.533510][ T5601] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 278.560502][ T5880] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 278.579683][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.581372][ T5880] usb 5-1: Product: syz [ 278.581390][ T5880] usb 5-1: Manufacturer: syz [ 278.581403][ T5880] usb 5-1: SerialNumber: syz [ 278.605102][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.606958][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.685567][ T5601] usb 1-1: device descriptor read/64, error -71 [ 278.702820][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 278.928655][ T8368] netlink: 164 bytes leftover after parsing attributes in process `syz.3.867'. [ 278.935799][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.936388][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.949245][ T5730] usb 5-1: USB disconnect, device number 48 [ 278.959213][ T5601] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 279.044376][ T8368] block nbd0: not configured, cannot reconfigure [ 279.119728][ T5601] usb 1-1: device descriptor read/64, error -71 [ 279.230141][ T5601] usb usb1-port1: attempt power cycle [ 279.570369][ T5601] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 279.590730][ T8384] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 279.590841][ T8384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.592582][ T8384] IPv6: NLM_F_CREATE should be set when creating new route [ 279.592616][ T8384] IPv6: NLM_F_CREATE should be set when creating new route [ 279.610329][ T5601] usb 1-1: device descriptor read/8, error -71 [ 279.770026][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 279.830566][ T10] ath9k_htc: Failed to initialize the device [ 279.836725][ T5730] usb 5-1: ath9k_htc: USB layer deinitialized [ 279.849816][ T5601] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 279.870435][ T5601] usb 1-1: device descriptor read/8, error -71 [ 280.001017][ T5601] usb usb1-port1: unable to enumerate USB device [ 280.159710][ T5730] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 280.329916][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 280.330778][ T5730] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 280.345185][ T5730] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.345245][ T5730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 280.345282][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.355573][ T5730] usb 5-1: config 0 descriptor?? [ 280.691051][ T5601] usb 3-1: USB disconnect, device number 48 [ 280.841695][ T8392] netlink: 164 bytes leftover after parsing attributes in process `syz.2.878'. [ 280.854482][ T8392] block nbd0: not configured, cannot reconfigure [ 281.222359][ T8400] loop0: detected capacity change from 0 to 3904 [ 281.299007][ T8400] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 281.317556][ T8400] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 281.317578][ T8400] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 281.317651][ T8400] loop0: [ 281.801220][ T8413] syz.0.887: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 281.801720][ T8413] CPU: 1 UID: 0 PID: 8413 Comm: syz.0.887 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 281.801756][ T8413] Tainted: [L]=SOFTLOCKUP [ 281.801763][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.801782][ T8413] Call Trace: [ 281.801790][ T8413] [ 281.801799][ T8413] dump_stack_lvl+0xe8/0x150 [ 281.801840][ T8413] warn_alloc+0x24d/0x270 [ 281.801873][ T8413] ? __pfx_warn_alloc+0x10/0x10 [ 281.801903][ T8413] ? alloc_pages_mpol+0x11b/0x280 [ 281.801934][ T8413] ? alloc_pages_noprof+0x17c/0x2f0 [ 281.801962][ T8413] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 281.802011][ T8413] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.802032][ T8413] ? bpf_check+0xb9/0x2e20 [ 281.802055][ T8413] ? rcu_is_watching+0x16/0xb0 [ 281.802080][ T8413] ? bpf_check+0xb9/0x2e20 [ 281.802102][ T8413] ? rcu_is_watching+0x16/0xb0 [ 281.802128][ T8413] ? bpf_check+0xb9/0x2e20 [ 281.802150][ T8413] __kvmalloc_node_noprof+0x646/0x890 [ 281.802175][ T8413] ? bpf_check+0xb9/0x2e20 [ 281.802201][ T8413] ? bpf_check+0xb9/0x2e20 [ 281.802229][ T8413] bpf_check+0xb9/0x2e20 [ 281.802253][ T8413] ? lock_acquire+0x115/0x350 [ 281.802282][ T8413] ? ktime_get_with_offset+0x93/0x2d0 [ 281.802309][ T8413] ? __pfx_bpf_check+0x10/0x10 [ 281.802332][ T8413] ? __asan_memset+0x22/0x50 [ 281.802354][ T8413] ? bpf_obj_name_cpy+0x194/0x1e0 [ 281.802378][ T8413] bpf_prog_load+0x14d6/0x1c20 [ 281.802414][ T8413] ? __pfx_bpf_prog_load+0x10/0x10 [ 281.802462][ T8413] __sys_bpf+0xd0d/0xd90 [ 281.802495][ T8413] ? __pfx___sys_bpf+0x10/0x10 [ 281.802521][ T8413] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 281.802547][ T8413] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 281.802589][ T8413] ? kfree+0x4d/0x6d0 [ 281.802614][ T8413] ? __pfx_kcov_ioctl+0x10/0x10 [ 281.802638][ T8413] __x64_sys_bpf+0xba/0xd0 [ 281.802662][ T8413] do_syscall_64+0x166/0x520 [ 281.802679][ T8413] ? trace_irq_disable+0x3b/0x140 [ 281.802702][ T8413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.802721][ T8413] ? clear_bhb_loop+0x70/0xc0 [ 281.802752][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.802772][ T8413] RIP: 0033:0x7f7961ede159 [ 281.802797][ T8413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.802814][ T8413] RSP: 002b:00007f7960115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.802834][ T8413] RAX: ffffffffffffffda RBX: 00007f7962166090 RCX: 00007f7961ede159 [ 281.802849][ T8413] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 281.802862][ T8413] RBP: 00007f7961f75024 R08: 0000000000000000 R09: 0000000000000000 [ 281.802875][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.802886][ T8413] R13: 00007f7962166128 R14: 00007f7962166090 R15: 00007ffd30b495c8 [ 281.802917][ T8413] [ 281.802952][ T8413] Mem-Info: [ 281.802962][ T8413] active_anon:190 inactive_anon:6290 isolated_anon:0 [ 281.802962][ T8413] active_file:21708 inactive_file:36670 isolated_file:0 [ 281.802962][ T8413] unevictable:0 dirty:180 writeback:0 [ 281.802962][ T8413] slab_reclaimable:11708 slab_unreclaimable:102922 [ 281.802962][ T8413] mapped:30778 shmem:521 pagetables:1313 [ 281.802962][ T8413] sec_pagetables:0 bounce:0 [ 281.802962][ T8413] kernel_misc_reclaimable:0 [ 281.802962][ T8413] free:1288883 free_pcp:5802 free_cma:0 [ 281.803018][ T8413] Node 0 active_anon:760kB inactive_anon:25160kB active_file:86636kB inactive_file:146680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123112kB dirty:720kB writeback:0kB shmem:2084kB kernel_stack:13376kB pagetables:5096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 281.803067][ T8413] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 281.803128][ T8413] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.803185][ T8413] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 281.803222][ T8413] Node 0 DMA32 free:1208180kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:760kB inactive_anon:25160kB active_file:86636kB inactive_file:146680kB unevictable:0kB writepending:720kB zspages:0kB present:3129332kB managed:2558876kB mlocked:0kB bounce:0kB free_pcp:23204kB local_pcp:10508kB free_cma:0kB [ 281.803281][ T8413] lowmem_reserve[]: 0 0 1 1 1 [ 281.803314][ T8413] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1816kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 281.803367][ T8413] lowmem_reserve[]: 0 0 0 0 0 [ 281.803400][ T8413] Node 1 Normal free:3931992kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.803455][ T8413] lowmem_reserve[]: 0 0 0 0 0 [ 281.803488][ T8413] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 281.803607][ T8413] Node 0 DMA32: 1006*4kB (UME) 1139*8kB (UME) 894*16kB (UM) 773*32kB (UME) 537*64kB (UME) 347*128kB (UME) 196*256kB (UME) 84*512kB (UM) 39*1024kB (UM) 21*2048kB (M) 220*4096kB (UM) = 1208208kB [ 281.803769][ T8413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 281.803870][ T8413] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 5*16kB (UM) 1*32kB (M) 5*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (M) 958*4096kB (M) = 3931992kB [ 281.804027][ T8413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.804044][ T8413] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 281.804060][ T8413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.804075][ T8413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 281.804091][ T8413] 58895 total pagecache pages [ 281.804103][ T8413] 0 pages in swap cache [ 281.804109][ T8413] Free swap = 124996kB [ 281.804117][ T8413] Total swap = 124996kB [ 281.804124][ T8413] 2097051 pages RAM [ 281.804130][ T8413] 0 pages HighMem/MovableOnly [ 281.804137][ T8413] 425262 pages reserved [ 281.804144][ T8413] 0 pages cma reserved [ 282.059116][ T8417] C: renamed from veth1_to_team (while UP) [ 282.173374][ T8417] netlink: 164 bytes leftover after parsing attributes in process `syz.0.889'. [ 282.174843][ T8417] block nbd0: not configured, cannot reconfigure [ 282.262494][ T6439] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 282.461843][ T6439] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 282.463243][ T6439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.695063][ C1] dln2 3-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 282.714388][ T6439] dln2 3-1:1.0: USB write failed: -110 [ 282.714522][ T6439] dln2 3-1:1.0: failed to initialize hardware [ 282.719041][ T6439] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 282.792099][ T6439] usb 5-1: USB disconnect, device number 49 [ 282.840433][ T8424] FAULT_INJECTION: forcing a failure. [ 282.840433][ T8424] name failslab, interval 1, probability 0, space 0, times 1 [ 282.868552][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: syz.0.892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 282.868584][ T8424] Tainted: [L]=SOFTLOCKUP [ 282.868591][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.868601][ T8424] Call Trace: [ 282.868609][ T8424] [ 282.868621][ T8424] dump_stack_lvl+0xe8/0x150 [ 282.868654][ T8424] should_fail_ex+0x46b/0x600 [ 282.868680][ T8424] should_failslab+0xa8/0x100 [ 282.868707][ T8424] ? radix_tree_node_alloc+0xd0/0x400 [ 282.868727][ T8424] kmem_cache_alloc_noprof+0x9e/0x690 [ 282.868749][ T8424] ? radix_tree_node_alloc+0xd0/0x400 [ 282.868765][ T8424] ? radix_tree_node_alloc+0xd0/0x400 [ 282.868791][ T8424] radix_tree_node_alloc+0xd0/0x400 [ 282.868818][ T8424] idr_get_free+0x295/0xa20 [ 282.868849][ T8424] idr_alloc_u32+0x190/0x340 [ 282.868876][ T8424] ? __pfx_idr_alloc_u32+0x10/0x10 [ 282.868900][ T8424] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 282.868921][ T8424] ? mutex_lock_nested+0x152/0x1d0 [ 282.868945][ T8424] ? tcf_idr_check_alloc+0x603/0x7f0 [ 282.868969][ T8424] tcf_idr_check_alloc+0x623/0x7f0 [ 282.868989][ T8424] ? tcf_idr_check_alloc+0xc8/0x7f0 [ 282.869009][ T8424] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 282.869032][ T8424] ? __nla_parse+0x40/0x60 [ 282.869067][ T8424] tcf_mpls_init+0x2fd/0x1330 [ 282.869098][ T8424] ? __pfx_tcf_mpls_init+0x10/0x10 [ 282.869127][ T8424] ? __kasan_kmalloc+0x93/0xb0 [ 282.869154][ T8424] ? nla_memcpy+0x5b/0xc0 [ 282.869185][ T8424] tcf_action_init_1+0x4ba/0x740 [ 282.869210][ T8424] ? __pfx_tcf_action_init_1+0x10/0x10 [ 282.869232][ T8424] ? tc_action_load_ops+0x247/0x540 [ 282.869267][ T8424] ? is_bpf_text_address+0x292/0x2b0 [ 282.869297][ T8424] ? __nla_parse+0x40/0x60 [ 282.869322][ T8424] tcf_action_init+0x30e/0xb10 [ 282.869353][ T8424] ? __pfx_tcf_action_init+0x10/0x10 [ 282.869395][ T8424] ? netlink_sendmsg+0x813/0xb40 [ 282.869419][ T8424] ? sock_sendmsg_nosec+0x13a/0x180 [ 282.869438][ T8424] ? __pfx___nla_validate_parse+0x10/0x10 [ 282.869457][ T8424] ? do_syscall_64+0x166/0x520 [ 282.869476][ T8424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.869530][ T8424] tc_ctl_action+0x43b/0xc70 [ 282.869560][ T8424] ? __pfx_tc_ctl_action+0x10/0x10 [ 282.869587][ T8424] ? __lock_acquire+0x6df/0x2e40 [ 282.869647][ T8424] ? __pfx_tc_ctl_action+0x10/0x10 [ 282.869667][ T8424] rtnetlink_rcv_msg+0x7b9/0xc00 [ 282.869692][ T8424] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 282.869712][ T8424] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.869729][ T8424] ? ref_tracker_free+0x668/0x820 [ 282.869754][ T8424] ? __pfx_ref_tracker_free+0x10/0x10 [ 282.869775][ T8424] ? __asan_memcpy+0x40/0x70 [ 282.869794][ T8424] ? __skb_clone+0x5c/0x6c0 [ 282.869824][ T8424] netlink_rcv_skb+0x226/0x4a0 [ 282.869852][ T8424] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.869872][ T8424] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.869910][ T8424] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.869934][ T8424] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.869965][ T8424] netlink_unicast+0x7f5/0x990 [ 282.869998][ T8424] netlink_sendmsg+0x813/0xb40 [ 282.870024][ T8424] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 282.870066][ T8424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.870095][ T8424] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 282.870129][ T8424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.870153][ T8424] sock_sendmsg_nosec+0x13a/0x180 [ 282.870176][ T8424] ____sys_sendmsg+0x565/0x870 [ 282.870209][ T8424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.870243][ T8424] ? import_iovec+0x73/0xa0 [ 282.870268][ T8424] ___sys_sendmsg+0x2a5/0x360 [ 282.870291][ T8424] ? __lock_acquire+0x6df/0x2e40 [ 282.870316][ T8424] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.870344][ T8424] ? futex_wait+0x2a2/0x390 [ 282.870394][ T8424] ? __fget_files+0x2a/0x420 [ 282.870411][ T8424] ? __fget_files+0x3a8/0x420 [ 282.870439][ T8424] __x64_sys_sendmsg+0x1b7/0x290 [ 282.870467][ T8424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.870511][ T8424] do_syscall_64+0x166/0x520 [ 282.870531][ T8424] ? trace_irq_disable+0x3b/0x140 [ 282.870551][ T8424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.870571][ T8424] ? clear_bhb_loop+0x70/0xc0 [ 282.870593][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.870611][ T8424] RIP: 0033:0x7f7961ede159 [ 282.870630][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.870645][ T8424] RSP: 002b:00007f7960136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.870667][ T8424] RAX: ffffffffffffffda RBX: 00007f7962165fa0 RCX: 00007f7961ede159 [ 282.870681][ T8424] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 282.870693][ T8424] RBP: 00007f7961f75024 R08: 0000000000000000 R09: 0000000000000000 [ 282.870705][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.870716][ T8424] R13: 00007f7962166038 R14: 00007f7962165fa0 R15: 00007ffd30b495c8 [ 282.870746][ T8424] [ 283.034498][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.035082][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.167886][ T8433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.219738][ T5601] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 284.391051][ T5601] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 284.402529][ T5601] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.412790][ T5601] usb 1-1: config 0 has no interfaces? [ 284.418368][ T5601] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 284.418385][ T5601] usb 1-1: Product: syz [ 284.418392][ T5601] usb 1-1: Manufacturer: syz [ 284.418399][ T5601] usb 1-1: SerialNumber: syz [ 284.456103][ T5601] usb 1-1: config 0 descriptor?? [ 284.574413][ T8448] C: renamed from veth1_to_team (while UP) [ 284.610938][ T8448] netlink: 164 bytes leftover after parsing attributes in process `syz.4.900'. [ 284.621967][ T8448] block nbd0: not configured, cannot reconfigure [ 284.699866][ T8444] tipc: Enabled bearer , priority 0 [ 284.720165][ T5601] usb 1-1: USB disconnect, device number 47 [ 285.024351][ T36] usb 3-1: USB disconnect, device number 49 [ 285.209817][ T5601] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 285.387335][ T5601] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.395132][ T5601] usb 5-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 285.411155][ T5601] usb 5-1: config 8 has an invalid interface number: 158 but max is 0 [ 285.419504][ T5601] usb 5-1: config 8 has no interface number 0 [ 285.425855][ T5601] usb 5-1: config 8 interface 158 has no altsetting 0 [ 285.437714][ T5601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.445835][ T5601] usb 5-1: Product: syz [ 285.445853][ T5601] usb 5-1: Manufacturer: syz [ 285.445867][ T5601] usb 5-1: SerialNumber: syz [ 285.509648][ T36] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 285.660486][ T36] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 285.671724][ T36] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 285.673344][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.691853][ T36] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 285.691919][ T36] usb 3-1: Manufacturer: syz [ 285.738926][ T36] usb 3-1: config 0 descriptor?? [ 285.752202][ T5601] cxacru 5-1:8.158: cxacru_bind: interface has incorrect endpoints [ 285.753997][ T5601] cxacru 5-1:8.158: usbatm_usb_probe: bind failed: -19! [ 285.779668][ T5783] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 285.789177][ T5601] usb 5-1: USB disconnect, device number 50 [ 285.805668][ T10] tipc: Node number set to 1308552187 [ 285.899721][ T36] rc_core: IR keymap rc-hauppauge not found [ 285.899772][ T36] Registered IR keymap rc-empty [ 285.914135][ T36] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 285.928818][ T36] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 285.943424][ T5783] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 285.950054][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.950081][ T5783] usb 1-1: Product: syz [ 285.950093][ T5783] usb 1-1: Manufacturer: syz [ 285.950106][ T5783] usb 1-1: SerialNumber: syz [ 286.031574][ T36] usb 3-1: USB disconnect, device number 50 [ 286.106929][ T5730] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 286.367577][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.372175][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.056518][ T8482] block nbd0: not configured, cannot reconfigure [ 287.337680][ T5730] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 287.377441][ T6439] usb 1-1: USB disconnect, device number 48 [ 287.469909][ T5730] ath9k_htc: Failed to initialize the device [ 287.485194][ T6439] usb 1-1: ath9k_htc: USB layer deinitialized [ 287.990307][ T8467] syzkaller0: left promiscuous mode [ 288.664575][ T8480] netlink: 164 bytes leftover after parsing attributes in process `syz.2.911'. [ 289.003143][ T8506] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 289.187283][ T12] rtrs_client L2020: : CM error (CM event: address error, err: -ENODEV) [ 289.292923][ T8506] rtrs_client L2638: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 289.509678][ T5730] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 289.660485][ T5730] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 289.671894][ T5730] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 289.680370][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.682211][ T5730] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 289.682235][ T5730] usb 3-1: Manufacturer: syz [ 289.718908][ T5730] usb 3-1: config 0 descriptor?? [ 289.829688][ T5730] rc_core: IR keymap rc-hauppauge not found [ 289.835827][ T5730] Registered IR keymap rc-empty [ 289.853189][ T5730] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 289.868410][ T5730] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 289.982341][ T5601] usb 3-1: USB disconnect, device number 51 [ 290.387218][ T8521] loop5: detected capacity change from 0 to 7 [ 290.390417][ T8521] Dev loop5: unable to read RDB block 7 [ 290.390442][ T8521] loop5: AHDI p2 [ 290.390460][ T8521] loop5: partition table partially beyond EOD, truncated [ 291.064287][ T8534] netlink: 164 bytes leftover after parsing attributes in process `syz.0.928'. [ 291.089711][ T8534] block nbd0: not configured, cannot reconfigure [ 291.577555][ T8541] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 291.610191][ T1379] rtrs_client L2020: : CM error (CM event: address error, err: -ENODEV) [ 291.611726][ T8541] rtrs_client L2638: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 291.773991][ T8542] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 291.782776][ T8542] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 292.080590][ T8542] udc dummy ** replaying previous printk message ** [ 292.080590][ T8542] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 292.080673][ T8542] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 292.081094][ T8542] ================================================================== [ 292.081106][ T8542] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0xd8/0xae0 [ 292.081134][ T8542] Write of size 8 at addr ffff888032af7100 by task syz.4.931/8542 [ 292.081149][ T8542] [ 292.081163][ T8542] CPU: 0 UID: 0 PID: 8542 Comm: syz.4.931 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 292.081188][ T8542] Tainted: [L]=SOFTLOCKUP [ 292.081196][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.081206][ T8542] Call Trace: [ 292.081214][ T8542] [ 292.081230][ T8542] dump_stack_lvl+0xe8/0x150 [ 292.081261][ T8542] print_address_description+0x55/0x1e0 [ 292.081286][ T8542] ? gadgetfs_bind+0xd8/0xae0 [ 292.081305][ T8542] print_report+0x58/0x70 [ 292.081326][ T8542] kasan_report+0x117/0x150 [ 292.081351][ T8542] ? gadgetfs_bind+0xd8/0xae0 [ 292.081373][ T8542] gadgetfs_bind+0xd8/0xae0 [ 292.081396][ T8542] ? __pfx_gadgetfs_bind+0x10/0x10 [ 292.081415][ T8542] gadget_bind_driver+0x2ca/0x9e0 [ 292.081439][ T8542] ? __pfx_gadget_bind_driver+0x10/0x10 [ 292.081456][ T8542] really_probe+0x254/0xae0 [ 292.081479][ T8542] __driver_probe_device+0x1e8/0x360 [ 292.081501][ T8542] driver_probe_device+0x4f/0x240 [ 292.081524][ T8542] __driver_attach+0x339/0x600 [ 292.081546][ T8542] bus_for_each_dev+0x23e/0x2c0 [ 292.081564][ T8542] ? __pfx___driver_attach+0x10/0x10 [ 292.081585][ T8542] ? __pfx_bus_for_each_dev+0x10/0x10 [ 292.081602][ T8542] ? rt_spin_unlock+0x159/0x200 [ 292.081627][ T8542] ? rt_spin_unlock+0x165/0x200 [ 292.081650][ T8542] bus_add_driver+0x348/0x670 [ 292.081671][ T8542] driver_register+0x23a/0x320 [ 292.081695][ T8542] usb_gadget_register_driver_owner+0xf9/0x270 [ 292.081714][ T8542] dev_config+0xe4e/0x12c0 [ 292.081736][ T8542] ? __pfx_dev_config+0x10/0x10 [ 292.081757][ T8542] ? __pfx_dev_config+0x10/0x10 [ 292.081775][ T8542] vfs_write+0x29f/0xbb0 [ 292.081796][ T8542] ? __pfx_vfs_write+0x10/0x10 [ 292.081814][ T8542] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 292.081834][ T8542] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 292.081853][ T8542] ? mutex_lock_nested+0x152/0x1d0 [ 292.081874][ T8542] ? fdget_pos+0x252/0x320 [ 292.081895][ T8542] ksys_write+0x156/0x270 [ 292.081913][ T8542] ? __pfx_ksys_write+0x10/0x10 [ 292.081935][ T8542] do_syscall_64+0x166/0x520 [ 292.081954][ T8542] ? trace_irq_disable+0x3b/0x140 [ 292.081974][ T8542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.081992][ T8542] ? clear_bhb_loop+0x70/0xc0 [ 292.082011][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.082028][ T8542] RIP: 0033:0x7f9e7f06e159 [ 292.082044][ T8542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.082060][ T8542] RSP: 002b:00007f9e7d2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.082080][ T8542] RAX: ffffffffffffffda RBX: 00007f9e7f2f5fa0 RCX: 00007f9e7f06e159 [ 292.082093][ T8542] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000006 [ 292.082117][ T8542] RBP: 00007f9e7f105024 R08: 0000000000000000 R09: 0000000000000000 [ 292.082130][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.082141][ T8542] R13: 00007f9e7f2f6038 R14: 00007f9e7f2f5fa0 R15: 00007ffcc53ae7b8 [ 292.082163][ T8542] [ 292.082169][ T8542] [ 292.082174][ T8542] Allocated by task 5593: [ 292.082184][ T8542] kasan_save_track+0x3e/0x80 [ 292.082203][ T8542] __kasan_kmalloc+0x93/0xb0 [ 292.082229][ T8542] __kmalloc_cache_noprof+0x3d5/0x680 [ 292.082250][ T8542] gadgetfs_fill_super+0x27b/0x7a0 [ 292.082268][ T8542] get_tree_single+0xc0/0x150 [ 292.082285][ T8542] vfs_get_tree+0x92/0x2a0 [ 292.082302][ T8542] do_new_mount+0x319/0xdc0 [ 292.082325][ T8542] __se_sys_mount+0x31d/0x420 [ 292.082339][ T8542] do_syscall_64+0x166/0x520 [ 292.082356][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.082372][ T8542] [ 292.082376][ T8542] Freed by task 8542: [ 292.082384][ T8542] kasan_save_track+0x3e/0x80 [ 292.082402][ T8542] kasan_save_free_info+0x40/0x50 [ 292.082417][ T8542] __kasan_slab_free+0x5c/0x80 [ 292.082436][ T8542] kfree+0x1c5/0x6d0 [ 292.082452][ T8542] gadgetfs_bind+0x942/0xae0 [ 292.082469][ T8542] gadget_bind_driver+0x2ca/0x9e0 [ 292.082484][ T8542] really_probe+0x254/0xae0 [ 292.082504][ T8542] __driver_probe_device+0x1e8/0x360 [ 292.082523][ T8542] driver_probe_device+0x4f/0x240 [ 292.082542][ T8542] __driver_attach+0x339/0x600 [ 292.082561][ T8542] bus_for_each_dev+0x23e/0x2c0 [ 292.082575][ T8542] bus_add_driver+0x348/0x670 [ 292.082589][ T8542] driver_register+0x23a/0x320 [ 292.082610][ T8542] usb_gadget_register_driver_owner+0xf9/0x270 [ 292.082625][ T8542] dev_config+0xe4e/0x12c0 [ 292.082642][ T8542] vfs_write+0x29f/0xbb0 [ 292.082656][ T8542] ksys_write+0x156/0x270 [ 292.082670][ T8542] do_syscall_64+0x166/0x520 [ 292.082686][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.082701][ T8542] [ 292.082706][ T8542] The buggy address belongs to the object at ffff888032af7000 [ 292.082706][ T8542] which belongs to the cache kmalloc-1k of size 1024 [ 292.082721][ T8542] The buggy address is located 256 bytes inside of [ 292.082721][ T8542] freed 1024-byte region [ffff888032af7000, ffff888032af7400) [ 292.082739][ T8542] [ 292.082744][ T8542] The buggy address belongs to the physical page: [ 292.082754][ T8542] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32af0 [ 292.082770][ T8542] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 292.082784][ T8542] flags: 0x80000000000040(head|node=0|zone=1) [ 292.082799][ T8542] page_type: f5(slab) [ 292.082814][ T8542] raw: 0080000000000040 ffff88813ffbbdc0 dead000000000100 dead000000000122 [ 292.082830][ T8542] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 292.082847][ T8542] head: 0080000000000040 ffff88813ffbbdc0 dead000000000100 dead000000000122 [ 292.082862][ T8542] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 292.082876][ T8542] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 292.082890][ T8542] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 292.082899][ T8542] page dumped because: kasan: bad access detected [ 292.082919][ T8542] page_owner tracks the page as allocated [ 292.082926][ T8542] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1010, tgid 1010 (kworker/u8:8), ts 19324044890 [ 292.082954][ T8542] post_alloc_hook+0x1f9/0x250 [ 292.082972][ T8542] get_page_from_freelist+0x2591/0x2600 [ 292.082992][ T8542] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 292.083013][ T8542] allocate_slab+0x7d/0x620 [ 292.083028][ T8542] refill_objects+0x2d8/0x350 [ 292.083043][ T8542] __pcs_replace_empty_main+0x339/0x690 [ 292.083066][ T8542] __kmalloc_node_noprof+0x620/0x7b0 [ 292.083084][ T8542] blk_alloc_flush_queue+0xe7/0x240 [ 292.083104][ T8542] blk_mq_alloc_and_init_hctx+0x7bd/0xc70 [ 292.083121][ T8542] __blk_mq_realloc_hw_ctxs+0x2b2/0x660 [ 292.083137][ T8542] blk_mq_init_allocated_queue+0x35f/0x1400 [ 292.083159][ T8542] blk_mq_alloc_queue+0x1ba/0x2e0 [ 292.083180][ T8542] scsi_alloc_sdev+0x7a5/0xc70 [ 292.083194][ T8542] scsi_probe_and_add_lun+0x156/0x47b0 [ 292.083210][ T8542] __scsi_scan_target+0x199/0xd10 [ 292.083231][ T8542] scsi_scan_host_selected+0x394/0x6c0 [ 292.083247][ T8542] page_owner free stack trace missing [ 292.083253][ T8542] [ 292.083257][ T8542] Memory state around the buggy address: [ 292.083267][ T8542] ffff888032af7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.083278][ T8542] ffff888032af7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.083289][ T8542] >ffff888032af7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.083297][ T8542] ^ [ 292.083306][ T8542] ffff888032af7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.083316][ T8542] ffff888032af7200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.083325][ T8542] ================================================================== [ 292.083443][ T8542] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 292.878674][ T8542] CPU: 0 UID: 0 PID: 8542 Comm: syz.4.931 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 292.889944][ T8542] Tainted: [L]=SOFTLOCKUP [ 292.894251][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.904290][ T8542] Call Trace: [ 292.907566][ T8542] [ 292.910499][ T8542] vpanic+0x56d/0xa60 [ 292.914487][ T8542] ? rcu_is_watching+0x16/0xb0 [ 292.919250][ T8542] ? __pfx_vpanic+0x10/0x10 [ 292.923746][ T8542] panic+0xc5/0xd0 [ 292.927456][ T8542] ? __pfx_panic+0x10/0x10 [ 292.931858][ T8542] ? preempt_schedule_thunk+0x16/0x40 [ 292.937222][ T8542] ? gadgetfs_bind+0xd8/0xae0 [ 292.941887][ T8542] ? preempt_schedule_thunk+0x16/0x40 [ 292.947273][ T8542] ? gadgetfs_bind+0xd8/0xae0 [ 292.951956][ T8542] check_panic_on_warn+0x89/0xb0 [ 292.956899][ T8542] ? gadgetfs_bind+0xd8/0xae0 [ 292.961615][ T8542] end_report+0x73/0x170 [ 292.965891][ T8542] ? gadgetfs_bind+0xd8/0xae0 [ 292.970613][ T8542] kasan_report+0x128/0x150 [ 292.975136][ T8542] ? gadgetfs_bind+0xd8/0xae0 [ 292.979834][ T8542] gadgetfs_bind+0xd8/0xae0 [ 292.984355][ T8542] ? __pfx_gadgetfs_bind+0x10/0x10 [ 292.989462][ T8542] gadget_bind_driver+0x2ca/0x9e0 [ 292.994486][ T8542] ? __pfx_gadget_bind_driver+0x10/0x10 [ 293.000020][ T8542] really_probe+0x254/0xae0 [ 293.004518][ T8542] __driver_probe_device+0x1e8/0x360 [ 293.009801][ T8542] driver_probe_device+0x4f/0x240 [ 293.014818][ T8542] __driver_attach+0x339/0x600 [ 293.019575][ T8542] bus_for_each_dev+0x23e/0x2c0 [ 293.024412][ T8542] ? __pfx___driver_attach+0x10/0x10 [ 293.029691][ T8542] ? __pfx_bus_for_each_dev+0x10/0x10 [ 293.035056][ T8542] ? rt_spin_unlock+0x159/0x200 [ 293.039901][ T8542] ? rt_spin_unlock+0x165/0x200 [ 293.044757][ T8542] bus_add_driver+0x348/0x670 [ 293.049450][ T8542] driver_register+0x23a/0x320 [ 293.054221][ T8542] usb_gadget_register_driver_owner+0xf9/0x270 [ 293.060369][ T8542] dev_config+0xe4e/0x12c0 [ 293.064784][ T8542] ? __pfx_dev_config+0x10/0x10 [ 293.069624][ T8542] ? __pfx_dev_config+0x10/0x10 [ 293.074463][ T8542] vfs_write+0x29f/0xbb0 [ 293.078719][ T8542] ? __pfx_vfs_write+0x10/0x10 [ 293.083485][ T8542] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 293.089285][ T8542] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 293.095098][ T8542] ? mutex_lock_nested+0x152/0x1d0 [ 293.100199][ T8542] ? fdget_pos+0x252/0x320 [ 293.104605][ T8542] ksys_write+0x156/0x270 [ 293.108943][ T8542] ? __pfx_ksys_write+0x10/0x10 [ 293.113784][ T8542] do_syscall_64+0x166/0x520 [ 293.118364][ T8542] ? trace_irq_disable+0x3b/0x140 [ 293.123394][ T8542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.129447][ T8542] ? clear_bhb_loop+0x70/0xc0 [ 293.134110][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.139995][ T8542] RIP: 0033:0x7f9e7f06e159 [ 293.144406][ T8542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.163996][ T8542] RSP: 002b:00007f9e7d2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 293.172399][ T8542] RAX: ffffffffffffffda RBX: 00007f9e7f2f5fa0 RCX: 00007f9e7f06e159 [ 293.180357][ T8542] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000006 [ 293.188316][ T8542] RBP: 00007f9e7f105024 R08: 0000000000000000 R09: 0000000000000000 [ 293.196281][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.204263][ T8542] R13: 00007f9e7f2f6038 R14: 00007f9e7f2f5fa0 R15: 00007ffcc53ae7b8 [ 293.212238][ T8542] [ 293.215508][ T8542] Kernel Offset: disabled [ 293.219841][ T8542] Rebooting in 86400 seconds..