last executing test programs: 33.228080314s ago: executing program 0 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000005c0)=@IORING_OP_ACCEPT={0xd, 0x8, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xffffffff}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0x0) 33.137584939s ago: executing program 0 (id=845): setns(0xc9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x48a, 0x0, 0x7}]}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000344000/0x800000)=nil, 0x800000, 0x17) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r3 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0xc0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x100, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, r4}}, './file0\x00'}) r6 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x541b, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$dri(&(0x7f0000000000), 0xa, 0x400) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000300)={0xd}) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004854) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x8040, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x2f, 0x0, @empty, @empty=0xe0000000}}}}) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000040)=0xfffffffd) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r10, 0x0) ppoll(&(0x7f0000000080)=[{r10, 0x4411}, {r10, 0x8}], 0x2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000200)={0x3a, 0x6, 0x7, 0xa, 0xa}) sendmsg$NFT_BATCH(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000400)={{0xa, 0x4, 0x400, 0x0, 'syz1\x00', 0x9}, 0x0, [0x80000001, 0xfffffffffffffffd, 0xfffffffffffff7d2, 0x6, 0x9, 0xc6, 0x4c, 0xfb, 0x1, 0x100000001, 0x1de, 0x3, 0x80000001, 0x95, 0x1, 0x4, 0xfa, 0xfffffffffffff90a, 0x0, 0x1, 0x8, 0x7, 0x0, 0x3, 0xfffffffffffff800, 0x1, 0x80, 0x100000001, 0xffff, 0x7ff, 0x9, 0x7, 0xfd, 0x8000000000000001, 0x101, 0x1000, 0x9, 0xffffffffffffffb6, 0x8, 0x5, 0x7fffffff, 0x80d, 0x2, 0x3, 0x7976, 0x6, 0x1, 0x8000, 0x8, 0x8000, 0xb7d, 0x800, 0xed08, 0x3, 0xe, 0x3, 0x80000000, 0x4, 0xfffffffffffffffc, 0x7fff, 0x7f, 0x2, 0x9, 0x2, 0x81, 0x10001, 0x2, 0xb2c, 0x4, 0x7, 0x1, 0xdc, 0x9, 0x0, 0x3, 0xfffffffffffffffa, 0x75, 0x5, 0x0, 0x7, 0x4, 0x6, 0xffff, 0x0, 0xfffffffffffffffb, 0x9, 0xffffffffffffff74, 0x8888, 0x1ff, 0x81, 0x80, 0x9aa0, 0x7f, 0x0, 0x8000000000000001, 0x7fffffffffffffff, 0x6, 0x706a, 0x7, 0x900000000000, 0x6c7, 0x6, 0x9, 0xf4, 0x95a7, 0xb8f, 0xdaac, 0x1ff, 0x2, 0x100, 0x1, 0x5, 0x5f26, 0x6, 0xfffffffffffffffb, 0x7fffffff, 0xd, 0x6c20, 0x3, 0x1, 0x75a9c009, 0x10001, 0x9, 0x9, 0x0, 0xac, 0xfffffffffffffff9, 0x3ff]}) 32.640648673s ago: executing program 0 (id=849): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe000000000000000000", 0x58) 32.529292807s ago: executing program 0 (id=850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000088e5414f670bc70eaaaaaaaaaabb86dd63e8e8da000884ff000000000000003e0000000000000000ff020000000000000000000000000001"], 0x42) 32.41840431s ago: executing program 0 (id=851): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000340)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x10110) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000340)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x10110) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x700, 0x8, 0x0, 0x200, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000280)={'gre0\x00', r6, 0x20, 0x7800, 0x5, 0x0, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x64, 0x0, 0x7, 0x4, 0x0, @local, @multicast1}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000280)={'gre0\x00', r6, 0x20, 0x7800, 0x5, 0x0, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x64, 0x0, 0x7, 0x4, 0x0, @local, @multicast1}}}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) lsm_set_self_attr(0x65, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r4, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8=r3], 0x20, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x3c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x40) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x3c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r11, 0x7003) write(r10, &(0x7f0000000100)='\x00', 0x1) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r12 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r12, r12, 0x0) (async) tgkill(r12, r12, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 31.959942083s ago: executing program 0 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000012000000000a50000000060a0b160000070000000000020000082400048020000180070001006374000014000280080001400000001108000240000000120900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040884) 16.887302681s ago: executing program 32 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000012000000000a50000000060a0b160000070000000000020000082400048020000180070001006374000014000280080001400000001108000240000000120900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040884) 5.46490112s ago: executing program 3 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1e4}}, 0x0) 5.394377325s ago: executing program 3 (id=999): modify_ldt$write2(0x11, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x10001, 0xf, 0x4000000000000004, 0xa0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x5, 0xc59}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setregs(0xd, r0, 0xd, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r0, r2) (async) ptrace$getregset(0x4205, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000004c0)=r1) (async) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) mount(&(0x7f0000000500)=@nullb, &(0x7f0000000480)='./cgroup\x00', &(0x7f0000000000)='ocfs2\x00', 0x150822, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup\x00', 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x17) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x3, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) (async) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c464a030103ff07000000000000020003000400000004000000386d26a5c84f5dfc90000000d60000100000ef00fe", @ANYBLOB="3ecdf0238e88bfc389c717626d97489dccc37d377fc32c32ac7a64ef51541ff3eb8e1a221369c2ca7ac2fa84d594d60b1166a91898abd2477b7a877217d956eefced0c219a084515e0e1c9b7f53e84c9cffc1533db5c4805e76541e4c32c6cd7d608a487c22f1d3c85d1e1e1b3ec8e0987b8115ef41586aee6b22374788bf14d93b3b8b5e11f7209bad3e1435b7452a8d8cafabc780adf2c32dd4f4f83f3ff8513cf21e7cbec00c1f483890f672247a39fbf1f0ab961d32287eeb0226381d36b2ef0bf211523a57478797eba5caf98459403f20c94"], 0x58) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x300a, 0x4008000000000002}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) (async) dup3(r7, r6, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) 5.216910103s ago: executing program 3 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 5.184094664s ago: executing program 3 (id=1003): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x6001, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000280)) io_setup(0x8, &(0x7f0000000000)=0x0) r5 = eventfd2(0x0, 0x80001) io_submit(r4, 0x2, &(0x7f00000018c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r5, &(0x7f0000000040)="6f03eb178d8d5909", 0x8, 0x8001, 0x0, 0x0, r5}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x2, 0x4, r5, 0x0, 0x0, 0x7, 0x0, 0x2}]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000640)="1b4fc2f0623b3d9c", 0x8}], 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="200f00000000442ccdaf38af4764f49a1ca5fc8d773ac94fe3e30358299ab8e4da8c0627c00bea87aa0eff56943c790551f9bce70e55f106f01f44f2f7a4a96f5d5655c2a11daab9971d5bbe88d631a2ba2640849b2b8e6b20d2b8cafc3bf8e636b28c420b410c1e38e38ab7"], 0x0, 0x0}) 4.53381091s ago: executing program 4 (id=1012): fanotify_init(0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x820c, 0x2, 0x1, 0xffffffff}, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/clear_refs\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$inet6(0xa, 0x3, 0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc60000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.41698101s ago: executing program 4 (id=1013): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000", 0x58) 4.35822373s ago: executing program 4 (id=1014): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c0c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x10, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe3, 0x16, 0x70}}}}}]}}]}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff0000000705030200020007058402000200"], 0x0) syz_usb_ep_read(r2, 0x3, 0x0, 0x0) syz_usb_ep_write(r2, 0x84, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c0c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x10, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe3, 0x16, 0x70}}}}}]}}]}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) (async) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff0000000705030200020007058402000200"], 0x0) (async) syz_usb_ep_read(r2, 0x3, 0x0, 0x0) (async) syz_usb_ep_write(r2, 0x84, 0x0, 0x0) (async) 3.844638442s ago: executing program 3 (id=1017): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000017c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, 0x0, 0x24000815) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001cc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="3d2c00004ae3afda29cb2956ff36d8225c02121dea8a161b9e56634bfdb3570d7ce5452e3a37e043b4fa9048", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf251b00000010002e800c000400000000000000000008000300", @ANYRES32=r4, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 3.560924665s ago: executing program 1 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 3.523813507s ago: executing program 1 (id=1021): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000000000000000000000000000000000000000000000fe00"/88, 0x58) 3.344912305s ago: executing program 1 (id=1022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000805000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000409911ff0f0000000000010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_usb_connect$uac3(0x6, 0x127, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x115, 0x3, 0x1, 0xa4, 0x80, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0x20, 0x30, 0xdf}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x60, 0x7}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x683, 0x1, 0xe, 0x1, 0x80, 0xd, 0x7ff, 0x2}, @selector_unit={0xc, 0x24, 0xc, 0x1, 0x7, "34c1f3c94f80b4"}, @extension_unit={0x1d, 0x24, 0xa, 0x6, 0x6, [0x1, 0x3, 0x0, 0x1, 0x2, 0x2]}, @processing_unit={0x19, 0x24, 0x9, 0x6, 0x2, [0x2, 0x2, 0x3, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x6, 0x7, 0xb6, 0x80}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0xb, 0x40, "88c7"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x6, 0xb7, {0xa, 0x25, 0x25, 0x401, 0x3, 0x68d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x12, 0x1, 0x10, 0x3, "fed230"}, @as_header={0x17, 0x24, 0x1, 0x3, 0x7fffffff, 0xc33, 0x2, 0xf, 0x7, 0xfd, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x81, 0x62, "f1"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0xe1, 0xa6, "cb55010356"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xa8, 0x8, 0x8, {0xa, 0x25, 0x25, 0x80000001, 0x3, 0x9}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x110, 0xff, 0x7, 0xd, 0x70, 0x7}, 0x2e, &(0x7f0000000640)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x1, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x6, 0x9a39}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x1, 0xcea2}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "e48b695aa980c42ac260595e7213ead7"}]}, 0x4, [{0x58, &(0x7f0000000680)=@string={0x58, 0x3, "f5c5b3dd160484461aacdaa8e0705fa6ef0aa7b7c28f82de91379372ba352a4350c68a8ee8742acc6bac2d56a2d88eed9bc5a22c9bade73f120ab8c4ac4e87e94637ddb84e5c7609877ca99d0ec177a1513938b58f45"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3c01}}, {0x73, &(0x7f0000000740)=@string={0x73, 0x3, "9186a9d98d05824240e3349117239995fbc17f6c10969f2fa3a249eef1cdd1858575b4d3a899ad9de187ceb272c330dbee8d095a001efa0d564708e41af021451b0f7e32c93f5312166e5553cb0274bda5795e346f4765b2735dd738b9856a9db43773546d449ee4fd3ee4f027df56c530"}}, {0x3d, &(0x7f00000007c0)=@string={0x3d, 0x3, "2b4de814b8811479e4aaab82bd54940558edb1f58f13773a4eaf26eb6924c0896e41ec8c9a6831a7772db810db7d706f5253ea146c682f7aeffe98"}}]}) (async) syz_usb_control_io$uac3(r4, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x89, {0x89, 0x2, "55ee5862d851ff9ed7178833eba8e5f8fe85cc29dbd433ff755dceac48cd411d4858d826c411814dbfbec3a29511403f60be16e2b52bca95900cb763f8a4fac5b9df7a0572bc7aae7ffa83f107c4ccc6afe13003a69b5285f5cbc44a978387fe14875d8968021c3376217a2a58d426193670d2f6a6f8a73a2a1c5c29e96fca50d102904add647c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "f8aaad0140d79e6d7316b7e2a6720611c517a15e6314f6581a5654fe13318728b5"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x20, 0x12, 0xdb, "5d814a0d47a478f742a9858997def89396b186aa7aaebfedaafa428e5bdd02bc6e71a27c972b8414666af4a2c4697e48a260cfc2d48c2906c916c0d66d8999d0f67215f2a6ea79357d1fe79918fc8684db59e684ff07ca2306a7baf89744af69672b7be3e94c8543746565979dd2d36872880448960a6503326e204af9de10ebf7e1067adc33951bae3cd0ec4a03a00bbf9d3f1091ca616cef9d68f05daa6b9664d7ceda9d18d4da21408b2878212c7ba47c5162b9f46983d7566afd04b5f9661e5c8e9d07dcb69b7a82e9980b1954720142270f140fafeb9c33f8"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xa8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x81, 0x1, "bd"}, &(0x7f0000000340)={0x20, 0x82, 0x1, '^'}, &(0x7f0000000380)={0x20, 0x83, 0x1, "a8"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "fa28"}, &(0x7f0000000400)={0x20, 0x85, 0x3, '{CK'}}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r7) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf250b"], 0x18}, 0x1, 0x0, 0x0, 0x4814}, 0x4000) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000c80)={[0x6, 0xa, 0x1ff, 0xa7a0, 0x3ff, 0x100, 0xffff, 0x5, 0x80000000, 0x8, 0x9c, 0x6, 0xe, 0x2, 0x9, 0x100000001], 0x9000, 0x2000}) (async) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x16c, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x840}, 0x4004000) 2.948961039s ago: executing program 3 (id=1023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in=@loopback, @in=@private=0xa010101, 0x0, 0x4, 0x4e24, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x1, 0x2, 0xf, 0x2000000000000, 0x7fffffff, 0xfffffffffffffdfd, 0x50, 0x3}, {0x5, 0x0, 0x4, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x48881) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000300000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.706790148s ago: executing program 33 (id=1023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in=@loopback, @in=@private=0xa010101, 0x0, 0x4, 0x4e24, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x1, 0x2, 0xf, 0x2000000000000, 0x7fffffff, 0xfffffffffffffdfd, 0x50, 0x3}, {0x5, 0x0, 0x4, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x48881) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000300000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.698766893s ago: executing program 2 (id=1025): socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\"', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) 2.361021983s ago: executing program 2 (id=1026): mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x10000000004, 0x4) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000088e5414f670bc70eaaaaaaaaaabb86dd63e8e8da000811ff00000000000000000000000002ff0000ff0200000000000000000000000000014e21007f000890"], 0x42) 1.764540576s ago: executing program 2 (id=1027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1a0}}, 0x0) 1.644052876s ago: executing program 2 (id=1028): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000303082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.322273441s ago: executing program 2 (id=1029): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.213101544s ago: executing program 4 (id=1030): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x852ac000) 1.15483423s ago: executing program 2 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socket$rxrpc(0x21, 0x2, 0x2) unshare(0x6a040000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, 0x0, 0x0, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008048, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000002900000000000000000004000000000000000000000000000000000000000000000000000000000000000000400000000000000000"], 0x68) 1.051381633s ago: executing program 4 (id=1032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000030a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) 732.887796ms ago: executing program 4 (id=1033): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D \r'], 0x38}}], 0x1, 0x46000) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='secret\x00', &(0x7f0000000080)='A===\x00', 0x0) syz_open_procfs(r1, &(0x7f0000000040)='mountstats\x00') r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x4}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r5, 0x401, 0x0, 0x1}) 158.499982ms ago: executing program 1 (id=1034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000040000000030a010200f5ffffff000000010040000900030073797a300400000014000480080002400000000008000140000000010900010073797a31"], 0x90}}, 0x0) 86.548365ms ago: executing program 1 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1a0}}, 0x0) 0s ago: executing program 1 (id=1036): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x1a4}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000001200000000000001"], 0xffe) kernel console output (not intermixed with test programs): tsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 168.050516][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.087327][ T5759] usb-storage 2-1:1.0: USB Mass Storage device detected [ 168.500231][ T6799] overlay: Unknown parameter 'loerdir' [ 168.568201][ T5759] usb-storage 2-1:1.0: probe with driver usb-storage failed with error -5 [ 168.586260][ T5759] usb 2-1: USB disconnect, device number 11 [ 168.652227][ T6811] netlink: 104 bytes leftover after parsing attributes in process `syz.2.286'. [ 168.718200][ T6813] capability: warning: `syz.2.287' uses 32-bit capabilities (legacy support in use) [ 168.727587][ T6813] mmap: syz.2.287 (6813) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.346817][ T6829] netlink: 104 bytes leftover after parsing attributes in process `syz.1.293'. [ 169.698254][ T6840] comedi comedi1: s526: I/O base address not correctly aligned [ 169.794028][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 169.796063][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 169.796439][ T9] usb 4-1: media controller created [ 169.871181][ T9] usb read operation failed. (-32) [ 169.891194][ T9] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 169.962230][ T25] usb 4-1: USB disconnect, device number 11 [ 170.025000][ T5613] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 170.081941][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 3436 [ 170.184472][ T5613] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 170.194915][ T5613] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 170.203134][ T5613] usb 2-1: config 0 has no interface number 0 [ 170.209682][ T5613] usb 2-1: config 0 interface 41 has no altsetting 0 [ 170.219218][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.228989][ T5613] usb 2-1: Product: syz [ 170.233303][ T5613] usb 2-1: Manufacturer: syz [ 170.238150][ T5613] usb 2-1: SerialNumber: syz [ 170.248478][ T5613] usb 2-1: config 0 descriptor?? [ 170.387202][ T9] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 170.545319][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 170.554784][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 170.554923][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.554998][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.555073][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.555112][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.559337][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 170.559463][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.559535][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.559609][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.559687][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.566561][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 170.566683][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.566758][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.566830][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.566904][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.593140][ T9] usb 3-1: string descriptor 0 read error: -22 [ 170.593510][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.664345][ T5759] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 170.786173][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 170.815303][ T5759] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 170.825042][ T5759] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 170.825083][ T5759] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 170.825110][ T5759] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 170.825136][ T5759] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 115 [ 170.825178][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.876283][ T6863] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 170.876903][ T6863] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 170.877046][ T6863] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 170.880430][ T6863] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 170.907091][ T5759] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 170.952138][ T9] usb 3-1: USB disconnect, device number 17 [ 171.117742][ T5613] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 171.303814][ T5759] usb 1-1: mos7720: usb_control_msg() failed: -71 [ 171.346222][ T5759] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 171.383484][ T5759] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 171.434578][ T5759] usb 1-1: USB disconnect, device number 19 [ 171.434709][ C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 171.445510][ T6883] netlink: 104 bytes leftover after parsing attributes in process `syz.3.310'. [ 171.478100][ T5759] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 171.508807][ T5759] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 171.520501][ T5759] mos7720 1-1:1.0: device disconnected [ 171.739462][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.763098][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.622125][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.622666][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.650965][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.657956][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.712418][ T6928] netlink: 104 bytes leftover after parsing attributes in process `syz.0.320'. [ 172.974215][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 173.126048][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 173.136042][ T5688] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.139690][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.139784][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.139887][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.181213][ T9] usb 3-1: config 0 descriptor?? [ 173.334734][ T5688] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 173.348278][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.356532][ T5688] usb 4-1: Product: syz [ 173.356559][ T5688] usb 4-1: Manufacturer: syz [ 173.356576][ T5688] usb 4-1: SerialNumber: syz [ 173.371927][ T30] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 173.504067][ T30] usb 1-1: device descriptor read/64, error -71 [ 173.610039][ T5688] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 173.610141][ T5688] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 173.743951][ T30] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 173.849827][ T5613] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 173.851134][ T5613] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 173.874401][ T30] usb 1-1: device descriptor read/64, error -71 [ 173.875612][ T5613] usb 2-1: USB disconnect, device number 12 [ 173.985472][ T30] usb usb1-port1: attempt power cycle [ 174.025516][ T5688] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 174.025604][ T5688] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 174.052339][ T5688] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.073572][ T5688] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 174.087074][ T6951] netlink: 'syz.1.326': attribute type 10 has an invalid length. [ 174.100024][ T6951] bond0: (slave bond_slave_0): Releasing backup interface [ 174.231116][ T5688] usb 4-1: USB disconnect, device number 12 [ 174.343959][ T30] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 174.364661][ T30] usb 1-1: device descriptor read/8, error -71 [ 174.604123][ T30] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 174.625106][ T30] usb 1-1: device descriptor read/8, error -71 [ 174.734121][ T30] usb usb1-port1: unable to enumerate USB device [ 174.813862][ T5613] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.972734][ T5613] usb 4-1: Using ep0 maxpacket: 8 [ 174.982263][ T5613] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 174.987836][ T5613] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.987952][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.051738][ T5613] usb 4-1: config 0 descriptor?? [ 175.099808][ T32] audit: type=1800 audit(1788229922.992:2): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.333" name="file0" dev="overlay" ino=429 res=0 errno=0 [ 175.393839][ T30] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.524041][ T30] usb 2-1: device descriptor read/64, error -71 [ 175.669346][ T5613] usbhid 4-1:0.0: can't add hid device: -71 [ 175.669633][ T5613] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.684189][ T5613] usb 4-1: USB disconnect, device number 13 [ 175.733312][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 175.733438][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 175.753577][ T9] usb 3-1: USB disconnect, device number 18 [ 175.763970][ T30] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.905513][ T30] usb 2-1: device descriptor read/64, error -71 [ 176.015323][ T30] usb usb2-port1: attempt power cycle [ 176.354169][ T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 176.374933][ T30] usb 2-1: device descriptor read/8, error -71 [ 176.614286][ T30] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 176.634617][ T30] usb 2-1: device descriptor read/8, error -71 [ 176.744390][ T30] usb usb2-port1: unable to enumerate USB device [ 176.839601][ T7008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.347'. [ 176.872140][ T7007] netlink: 'syz.0.348': attribute type 63 has an invalid length. [ 176.872203][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'. [ 177.453874][ T5717] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 177.614808][ T5717] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 177.624964][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.625007][ T5717] usb 4-1: Product: syz [ 177.625024][ T5717] usb 4-1: Manufacturer: syz [ 177.625066][ T5717] usb 4-1: SerialNumber: syz [ 177.633435][ T5717] usb 4-1: config 0 descriptor?? [ 177.656871][ T5717] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 177.669157][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.671621][ T5717] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 177.671844][ T5717] usb 4-1: media controller created [ 177.708353][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.817538][ T5717] DVB: Unable to find symbol mt352_attach() [ 177.883128][ T7022] overlayfs: workdir and upperdir must reside under the same mount [ 177.893572][ T5717] DVB: Unable to find symbol nxt6000_attach() [ 177.893617][ T5717] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 177.940989][ T5717] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 177.991974][ T5717] dvb-usb: schedule remote query interval to 1000 msecs. [ 177.992040][ T5717] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 177.998128][ T5717] dvb-usb: bulk message failed: -22 (7/0) [ 177.998199][ T5717] dvb-usb: bulk message failed: -22 (7/0) [ 178.021969][ T5717] usb 4-1: USB disconnect, device number 14 [ 178.226253][ T5717] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 178.276541][ T7044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.281827][ T7044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.512357][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 178.576505][ T7055] netlink: 64 bytes leftover after parsing attributes in process `syz.1.366'. [ 178.910751][ T7071] evm: overlay not supported [ 178.934686][ T4932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 179.064231][ T5687] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 179.224359][ T5687] usb 4-1: Using ep0 maxpacket: 32 [ 179.229878][ T7087] netlink: 312 bytes leftover after parsing attributes in process `syz.0.377'. [ 179.240507][ T5687] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 179.256162][ T5687] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 179.256206][ T5687] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.256248][ T5687] usb 4-1: config 0 has no interface number 0 [ 179.256302][ T5687] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 179.256334][ T5687] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 179.256366][ T5687] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 179.256397][ T5687] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 179.256428][ T5687] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 179.256457][ T5687] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 179.256488][ T5687] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 179.256516][ T5687] usb 4-1: config 0 interface 239 has no altsetting 0 [ 179.275089][ T7087] netlink: 1 bytes leftover after parsing attributes in process `syz.0.377'. [ 179.370282][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.370314][ T5687] usb 4-1: Product: syz [ 179.370330][ T5687] usb 4-1: Manufacturer: syz [ 179.370346][ T5687] usb 4-1: SerialNumber: syz [ 179.410191][ T5687] usb 4-1: config 0 descriptor?? [ 179.419150][ T7068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.419667][ T7068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.632902][ T5687] usb 4-1: USB disconnect, device number 15 [ 180.251219][ T7115] netlink: 104 bytes leftover after parsing attributes in process `syz.2.384'. [ 180.432664][ T7125] netlink: 11 bytes leftover after parsing attributes in process `syz.3.386'. [ 180.443575][ T7125] netlink: 168 bytes leftover after parsing attributes in process `syz.3.386'. [ 180.604218][ T5687] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 180.774743][ T5687] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 180.785383][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.799215][ T5687] usb 3-1: config 0 descriptor?? [ 180.825847][ T5687] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 181.019888][ T5687] gp8psk: usb in 128 operation failed. [ 181.234143][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 181.242282][ T5687] gp8psk: usb in 146 operation failed. [ 181.242302][ T5687] gp8psk: failed to get FW version [ 181.254931][ T5687] gp8psk: FPGA Version = 133 [ 181.366348][ T7156] netlink: 104 bytes leftover after parsing attributes in process `syz.3.397'. [ 181.427938][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.428034][ T9] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=a1.2e [ 181.448204][ T9] usb 2-1: config 255 has an invalid interface number: 199 but max is 0 [ 181.457544][ T9] usb 2-1: config 255 has no interface number 0 [ 181.464154][ T9] usb 2-1: config 255 interface 199 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 181.474413][ T9] usb 2-1: config 255 interface 199 has no altsetting 0 [ 181.482050][ T5687] gp8psk: usb in 138 operation failed. [ 181.482076][ T5687] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 181.482115][ T5687] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 181.511747][ T5687] usb 3-1: USB disconnect, device number 19 [ 181.519170][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.519235][ T9] usb 2-1: Product: syz [ 181.519256][ T9] usb 2-1: Manufacturer: syz [ 181.519276][ T9] usb 2-1: SerialNumber: syz [ 181.564516][ T7144] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.772818][ T7144] FAULT_INJECTION: forcing a failure. [ 181.772818][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 181.772868][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.1.393 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.772898][ T7144] Tainted: [L]=SOFTLOCKUP [ 181.772949][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.772985][ T7144] Call Trace: [ 181.773014][ T7144] [ 181.773044][ T7144] dump_stack_lvl+0xe8/0x150 [ 181.773143][ T7144] should_fail_ex+0x3eb/0x540 [ 181.773210][ T7144] should_failslab+0xa8/0x100 [ 181.773279][ T7144] ? new_userfaultfd+0x88/0x3d0 [ 181.773350][ T7144] kmem_cache_alloc_noprof+0xa1/0x600 [ 181.773424][ T7144] ? ksys_write+0x242/0x270 [ 181.773503][ T7144] ? __pfx___se_sys_futex+0x10/0x10 [ 181.773565][ T7144] ? new_userfaultfd+0x88/0x3d0 [ 181.773647][ T7144] new_userfaultfd+0x88/0x3d0 [ 181.773730][ T7144] __x64_sys_userfaultfd+0x81/0xa0 [ 181.773794][ T7144] do_syscall_64+0x166/0x520 [ 181.773868][ T7144] ? trace_irq_disable+0x3b/0x140 [ 181.773949][ T7144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.774012][ T7144] ? clear_bhb_loop+0x70/0xc0 [ 181.774081][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.774121][ T7144] RIP: 0033:0x7f593279e159 [ 181.774178][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.774243][ T7144] RSP: 002b:00007f59335aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 181.774301][ T7144] RAX: ffffffffffffffda RBX: 00007f5932a25fa0 RCX: 00007f593279e159 [ 181.774344][ T7144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 181.774392][ T7144] RBP: 00007f5932835024 R08: 0000000000000000 R09: 0000000000000000 [ 181.774418][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.774457][ T7144] R13: 00007f5932a26038 R14: 00007f5932a25fa0 R15: 00007fff7483fb08 [ 181.774545][ T7144] [ 181.826913][ T5761] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 181.970589][ T5761] usb 4-1: device descriptor read/64, error -71 [ 181.991583][ T9] kvaser_usb 2-1:255.199: error -ENODEV: Cannot get usb endpoint(s) [ 182.005993][ T9] usb 2-1: USB disconnect, device number 17 [ 182.096125][ T7167] netlink: 104 bytes leftover after parsing attributes in process `syz.2.402'. [ 182.142470][ T7165] faux_driver vgem: [drm] Unknown color mode 135162; guessing buffer size. [ 182.204244][ T5761] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 182.333951][ T5761] usb 4-1: device descriptor read/64, error -71 [ 182.444361][ T5761] usb usb4-port1: attempt power cycle [ 182.783836][ T5761] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 182.804748][ T5761] usb 4-1: device descriptor read/8, error -71 [ 182.902545][ T7185] netlink: 160 bytes leftover after parsing attributes in process `syz.1.410'. [ 183.044252][ T5761] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 183.064625][ T5761] usb 4-1: device descriptor read/8, error -71 [ 183.076266][ T7191] netlink: 104 bytes leftover after parsing attributes in process `syz.1.411'. [ 183.176571][ T5761] usb usb4-port1: unable to enumerate USB device [ 183.239097][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 183.537590][ T5688] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 183.602678][ T7202] netlink: 104 bytes leftover after parsing attributes in process `syz.2.417'. [ 183.684709][ T5688] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 183.687392][ T5688] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.687463][ T5688] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.687582][ T5688] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x25, changing to 0x5 [ 183.687654][ T5688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 183.687741][ T5688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.687848][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.726432][ T5688] ims_pcu 1-1:1.0: Control endpoint is not INTERRUPT IN [ 183.726489][ T5688] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -22 [ 183.843852][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 183.916446][ T5688] usb 1-1: USB disconnect, device number 24 [ 184.015508][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 184.023473][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice= 1.00 [ 184.034238][ T9] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 184.042332][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.052871][ T9] usb 2-1: config 1 has no interface number 0 [ 184.059074][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.059102][ T9] usb 2-1: Product: syz [ 184.059118][ T9] usb 2-1: Manufacturer: syz [ 184.059134][ T9] usb 2-1: SerialNumber: syz [ 184.087938][ T9] usb 2-1: selecting invalid altsetting 1 [ 184.095168][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 184.095202][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 184.145111][ T9] DVB: Unable to find symbol ves1820_attach() [ 184.180050][ T9] DVB: Unable to find symbol stv0297_attach() [ 184.180098][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 184.233890][ T5761] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 184.383914][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 184.389340][ T5761] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 184.399653][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.399705][ T5761] usb 3-1: Product: syz [ 184.399722][ T5761] usb 3-1: Manufacturer: syz [ 184.399756][ T5761] usb 3-1: SerialNumber: syz [ 184.414274][ T5761] usb 3-1: config 0 descriptor?? [ 184.428134][ T5761] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 184.720741][ T7224] netlink: 104 bytes leftover after parsing attributes in process `syz.3.427'. [ 184.819897][ T9] usb 2-1: USB disconnect, device number 18 [ 184.851191][ T5761] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 185.034978][ T5761] usb 3-1: USB disconnect, device number 20 [ 185.055115][ T5761] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 185.070381][ T5761] visor 3-1:0.0: device disconnected [ 185.496802][ T7244] netlink: 104 bytes leftover after parsing attributes in process `syz.1.433'. [ 185.640948][ T7250] capability: warning: `syz.2.436' uses deprecated v2 capabilities in a way that may be insecure [ 185.739452][ T7251] ima: policy update failed [ 185.746743][ T32] audit: type=1802 audit(1788229933.642:3): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.437" res=0 errno=0 [ 185.828473][ T32] audit: type=1326 audit(1788229933.722:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.2.440" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa98559e159 code=0x0 [ 185.854031][ T5761] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 186.007284][ T5761] usb 1-1: Using ep0 maxpacket: 16 [ 186.011781][ T5761] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 186.032171][ T7264] netlink: 104 bytes leftover after parsing attributes in process `syz.1.442'. [ 186.046234][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.046296][ T5761] usb 1-1: Product: syz [ 186.046334][ T5761] usb 1-1: Manufacturer: syz [ 186.046387][ T5761] usb 1-1: SerialNumber: syz [ 186.070837][ T7265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'. [ 186.112313][ T5761] usb 1-1: config 0 descriptor?? [ 186.127464][ T5761] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 186.251584][ T7270] netlink: 168 bytes leftover after parsing attributes in process `syz.3.444'. [ 186.463929][ T5688] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 186.593897][ T5688] usb 2-1: device descriptor read/64, error -71 [ 186.683883][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 186.733178][ T5761] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 186.752434][ T5761] usb 1-1: USB disconnect, device number 25 [ 186.833901][ T5688] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 186.833916][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 186.835589][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 186.838696][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 186.838762][ T9] usb 4-1: config 0 has no interface number 0 [ 186.850427][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.850501][ T9] usb 4-1: Product: syz [ 186.850545][ T9] usb 4-1: Manufacturer: syz [ 186.850597][ T9] usb 4-1: SerialNumber: syz [ 186.875790][ T9] usb 4-1: config 0 descriptor?? [ 187.023848][ T5688] usb 2-1: device descriptor read/64, error -71 [ 187.136142][ T5688] usb usb2-port1: attempt power cycle [ 187.298006][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 187.298079][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 187.429677][ T7284] netlink: 104 bytes leftover after parsing attributes in process `syz.2.450'. [ 187.475504][ T5688] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 187.500306][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.451'. [ 187.511614][ T5688] usb 2-1: device descriptor read/8, error -71 [ 187.743865][ T5688] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 187.764486][ T5688] usb 2-1: device descriptor read/8, error -71 [ 187.815205][ T7301] netlink: 104 bytes leftover after parsing attributes in process `syz.0.457'. [ 187.874247][ T5688] usb usb2-port1: unable to enumerate USB device [ 187.953082][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 188.071954][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.082413][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.168736][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.180020][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.313904][ T5687] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 188.338183][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 188.338960][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 188.366239][ T9] usb 4-1: USB disconnect, device number 20 [ 188.463858][ T5687] usb 3-1: Using ep0 maxpacket: 8 [ 188.470998][ T5687] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.472783][ T5687] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 188.478851][ T5687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.478933][ T5687] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.495056][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.495153][ T5687] usb 3-1: Product: syz [ 188.495210][ T5687] usb 3-1: Manufacturer: 莅⥷㮩愒኎炏檟贜嬋ꘃ娊Ⱘԁ롙렉휘朕蜹碍㓱㹦ஔ꣇뤭ᚰ࣒䮒ﶔੰ愞沦逶አ痨崺დ䇓ય⥈뜀ᑽ腰릅ࠓ㋒鈬诉ܶﺮ鉝뺥૖际驵আꀷ촧鏧⭍쐨螧爽㸍ꬱ寒力䄗ꟁ牁뤓䖟猀江茡솎进ザ돰䤵흪깼빉ꙿನﲲﯗ천埻Ꚍ꿢睊謚୙曒┓ꃖ⊉盱訔⥥ [ 188.495394][ T5687] usb 3-1: SerialNumber: syz [ 188.750377][ T5687] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 188.750449][ T5687] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 188.768626][ T5687] usb 3-1: USB disconnect, device number 21 [ 188.982939][ T7330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.466'. [ 189.521931][ T7348] netlink: 104 bytes leftover after parsing attributes in process `syz.0.474'. [ 189.953872][ T5688] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 190.104598][ T5688] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 190.111485][ T5688] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.111702][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.144876][ T5688] usb 1-1: config 0 descriptor?? [ 190.166465][ T5688] pwc: Askey VC010 type 2 USB webcam detected. [ 190.323840][ T986] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 190.474775][ T986] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.488125][ T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.488176][ T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.488223][ T986] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.488274][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.534139][ T986] usb 4-1: config 0 descriptor?? [ 190.565685][ T5688] pwc: recv_control_msg error -32 req 02 val 2b00 [ 190.579516][ T5688] pwc: recv_control_msg error -32 req 02 val 2700 [ 190.582926][ T5688] pwc: recv_control_msg error -32 req 02 val 2c00 [ 190.596874][ T5688] pwc: recv_control_msg error -32 req 04 val 1000 [ 190.603031][ T5688] pwc: recv_control_msg error -32 req 04 val 1300 [ 190.610707][ T5688] pwc: recv_control_msg error -32 req 04 val 1400 [ 190.616855][ T5688] pwc: recv_control_msg error -32 req 02 val 2000 [ 190.625940][ T5688] pwc: recv_control_msg error -32 req 02 val 2100 [ 190.637022][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.646291][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.647264][ T7376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.649082][ T7376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.895294][ T5688] pwc: recv_control_msg error -32 req 04 val 1500 [ 190.914917][ T5688] pwc: recv_control_msg error -32 req 02 val 2500 [ 190.924196][ T5688] pwc: recv_control_msg error -32 req 02 val 2400 [ 190.928742][ T5688] pwc: recv_control_msg error -32 req 02 val 2600 [ 190.948263][ T5688] pwc: recv_control_msg error -32 req 02 val 2900 [ 190.984077][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 191.194715][ T5688] pwc: recv_control_msg error -71 req 02 val 2800 [ 191.196273][ T5688] pwc: recv_control_msg error -71 req 04 val 1100 [ 191.197310][ T5688] pwc: recv_control_msg error -71 req 04 val 1200 [ 191.308517][ T5688] pwc: Registered as video103. [ 191.318375][ T5688] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 191.348643][ T5688] usb 1-1: USB disconnect, device number 26 [ 191.424426][ T986] usbhid 4-1:0.0: can't add hid device: -71 [ 191.424549][ T986] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 191.475660][ T986] usb 4-1: USB disconnect, device number 21 [ 191.544163][ T5687] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 191.572875][ T7406] netlink: 104 bytes leftover after parsing attributes in process `syz.1.491'. [ 191.704038][ T5687] usb 3-1: Using ep0 maxpacket: 32 [ 191.706167][ T5687] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 191.709445][ T5687] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 191.709561][ T5687] usb 3-1: config 0 has no interface number 0 [ 191.709708][ T5687] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 191.709785][ T5687] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 191.727165][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.727242][ T5687] usb 3-1: Product: syz [ 191.727284][ T5687] usb 3-1: Manufacturer: syz [ 191.727328][ T5687] usb 3-1: SerialNumber: syz [ 191.751320][ T5687] usb 3-1: config 0 descriptor?? [ 191.985118][ T5687] radio-si470x 3-1:0.35: this is not a si470x device. [ 192.016917][ T5687] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 192.035754][ T5687] usb 3-1: USB disconnect, device number 22 [ 192.361170][ T7430] netlink: 104 bytes leftover after parsing attributes in process `syz.0.501'. [ 192.475189][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.504'. [ 192.647018][ T9] hid_parser_main: 2 callbacks suppressed [ 192.648536][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 192.679679][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.860483][ T7449] 9p: Bad value for 'rfdno' [ 192.954017][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 193.083852][ T9] usb 2-1: device descriptor read/64, error -71 [ 193.343854][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 193.474156][ T9] usb 2-1: device descriptor read/64, error -71 [ 193.548831][ T7461] fuse: Unknown parameter '0x0000000000000005' [ 193.581807][ T32] audit: type=1800 audit(1788229941.472:5): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.511" name="/newroot/143/memory.current" dev="tmpfs" ino=756 res=0 errno=0 [ 193.616140][ T9] usb usb2-port1: attempt power cycle [ 193.953837][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 193.989356][ T9] usb 2-1: device descriptor read/8, error -71 [ 194.037037][ T7477] netlink: 'syz.3.519': attribute type 2 has an invalid length. [ 194.128028][ T7482] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 194.183858][ T7486] netlink: 104 bytes leftover after parsing attributes in process `syz.2.521'. [ 194.223845][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 194.244589][ T9] usb 2-1: device descriptor read/8, error -71 [ 194.296015][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.296101][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.354275][ T9] usb usb2-port1: unable to enumerate USB device [ 194.585513][ T7502] rust_binder: 7493:7502 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 112, size: 13) [ 194.597042][ T7502] rust_binder: 7493:7502 error while translating object: EINVAL [ 194.605048][ T7502] rust_binder: Failure in copy_transaction_data: EINVAL [ 194.606618][ T7502] rust_binder: 7493:7502 transaction async to 7493:0 failed EINVAL, code 0 size 88-24 [ 195.237385][ T986] rust_binder: 7493: undelivered TRANSACTION_ERROR: 29201 [ 195.349879][ T7502] syz.3.524 (7502) used greatest stack depth: 11936 bytes left [ 195.518650][ T7516] netlink: 104 bytes leftover after parsing attributes in process `syz.2.529'. [ 195.863544][ T7525] netlink: 168 bytes leftover after parsing attributes in process `syz.0.534'. [ 196.403924][ T986] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 196.534193][ T986] usb 4-1: device descriptor read/64, error -71 [ 196.773904][ T986] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 196.904992][ T986] usb 4-1: device descriptor read/64, error -71 [ 197.014815][ T986] usb usb4-port1: attempt power cycle [ 197.223829][ T5761] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 197.354635][ T986] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 197.376757][ T986] usb 4-1: device descriptor read/8, error -71 [ 197.386751][ T5761] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 197.397367][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.397412][ T5761] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.424738][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.433881][ T5761] usb 1-1: Product: syz [ 197.433929][ T5761] usb 1-1: Manufacturer: syz [ 197.433949][ T5761] usb 1-1: SerialNumber: syz [ 197.465958][ T5761] etas_es58x 1-1:1.0: Starting syz syz (Serial Number syz) [ 197.613822][ T986] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 197.664416][ T986] usb 4-1: device descriptor read/8, error -71 [ 197.774399][ T986] usb usb4-port1: unable to enumerate USB device [ 198.464798][ T5688] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 198.639658][ T5688] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.639730][ T5688] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 198.660544][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.675588][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 198.675661][ T5688] usb 2-1: Product: syz [ 198.675696][ T5688] usb 2-1: Manufacturer: syz [ 198.723661][ T5688] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 198.754633][ T5761] etas_es58x 1-1:1.0: could not parse product info: 'Б' [ 199.115747][ T5688] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 199.152966][ T5688] videodev: could not get a free minor [ 199.159079][ T5688] uvcvideo 2-1:1.1: Failed to register meta-cap device (-23). [ 199.723924][ T5761] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 199.863855][ T5761] usb 4-1: device descriptor read/64, error -71 [ 200.123894][ T5761] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 200.240566][ T986] usb 1-1: USB disconnect, device number 27 [ 200.253890][ T5761] usb 4-1: device descriptor read/64, error -71 [ 200.268797][ T986] etas_es58x 1-1:1.0: Disconnecting syz syz [ 200.375841][ T5761] usb usb4-port1: attempt power cycle [ 200.734303][ T5761] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 200.755763][ T5761] usb 4-1: device descriptor read/8, error -71 [ 200.840611][ T7594] netlink: 'syz.0.548': attribute type 2 has an invalid length. [ 200.996733][ T5761] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 201.026564][ T5761] usb 4-1: device descriptor read/8, error -71 [ 201.083375][ T5717] usb 2-1: USB disconnect, device number 27 [ 201.134585][ T5761] usb usb4-port1: unable to enumerate USB device [ 201.485165][ T986] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 201.659285][ T986] usb 1-1: Using ep0 maxpacket: 16 [ 201.675982][ T986] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 201.681123][ T986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.681207][ T986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.681268][ T986] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.681394][ T986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.731167][ T986] usb 1-1: config 0 descriptor?? [ 202.078400][ T7625] netlink: 104 bytes leftover after parsing attributes in process `syz.2.553'. [ 202.232166][ T986] hid (null): unknown global tag 0xe [ 202.290089][ T986] shield 0003:0955:7214.0006: unknown global tag 0xe [ 202.290160][ T986] shield 0003:0955:7214.0006: item 0 0 1 14 parsing failed [ 202.298531][ T986] shield 0003:0955:7214.0006: Parse failed [ 202.306762][ T986] shield 0003:0955:7214.0006: probe with driver shield failed with error -22 [ 202.466540][ T30] usb 1-1: USB disconnect, device number 28 [ 202.834859][ T5717] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 202.996172][ T5717] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 203.015370][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 203.015415][ T5717] usb 3-1: Product: syz [ 203.015453][ T5717] usb 3-1: Manufacturer: syz [ 203.015474][ T5717] usb 3-1: SerialNumber: syz [ 203.060440][ T5717] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 203.492744][ T5717] vp7045: USB control message 'in' went wrong. [ 203.492784][ T5717] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 203.492844][ T5717] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 203.680914][ T7644] fuse: Unknown parameter 'rootmu' [ 203.687648][ T7643] fuse: Unknown parameter 'rootm00' [ 203.731870][ T986] usb 3-1: USB disconnect, device number 23 [ 203.797460][ T7652] netlink: 104 bytes leftover after parsing attributes in process `syz.3.561'. [ 204.576628][ T7667] tipc: Started in network mode [ 204.576706][ T7667] tipc: Node identity 7f000001, cluster identity 4711 [ 204.577515][ T7667] tipc: Enabling of bearer rejected, failed to enable media [ 204.653852][ T5688] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 204.710630][ T30] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 204.736042][ T7659] ceph: No mds server is up or the cluster is laggy [ 204.745623][ T30] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 204.814207][ T5688] usb 4-1: Using ep0 maxpacket: 8 [ 204.823635][ T5688] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.836159][ T5688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.847524][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.911326][ T5688] usb 4-1: config 0 descriptor?? [ 205.146383][ T5688] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 205.379627][ T986] usb 4-1: USB disconnect, device number 30 [ 205.379677][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 205.687194][ T7682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.570'. [ 205.732219][ T7682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.570'. [ 205.903886][ T5613] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 206.033843][ T5759] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 206.065086][ T5613] usb 3-1: not running at top speed; connect to a high speed hub [ 206.065142][ T5613] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 206.083636][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.186180][ T5759] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 206.190890][ T5759] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.190964][ T5759] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 206.191062][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.233671][ T5759] usb 1-1: config 0 descriptor?? [ 206.341471][ T5613] ljca 3-1:1.0: probe with driver ljca failed with error -110 [ 206.372823][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.383615][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.616350][ T7670] Bluetooth: hci2: command 0x0406 tx timeout [ 206.617642][ T7670] Bluetooth: hci3: command 0x0406 tx timeout [ 206.628560][ T7670] Bluetooth: hci0: command 0x0406 tx timeout [ 206.628592][ T7670] Bluetooth: hci1: command 0x0406 tx timeout [ 207.183230][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.570'. [ 207.276505][ T7697] fuse: Bad value for 'user_id' [ 207.276548][ T7697] fuse: Bad value for 'user_id' [ 208.104005][ T5613] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 208.254881][ T5613] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.265346][ T5613] usb 4-1: too many configurations: 180, using maximum allowed: 8 [ 208.275536][ T5613] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 208.284815][ T5613] usb 4-1: can't read configurations, error -22 [ 208.413897][ T5613] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 208.574681][ T5613] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.574745][ T5613] usb 4-1: too many configurations: 180, using maximum allowed: 8 [ 208.594830][ T5613] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 208.594887][ T5613] usb 4-1: can't read configurations, error -22 [ 208.603293][ T5613] usb usb4-port1: attempt power cycle [ 208.897800][ T5759] usb 1-1: USB disconnect, device number 29 [ 208.963847][ T5613] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 208.986440][ T5613] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.986502][ T5613] usb 4-1: too many configurations: 180, using maximum allowed: 8 [ 209.005362][ T5613] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 209.005420][ T5613] usb 4-1: can't read configurations, error -22 [ 209.102313][ T7710] netlink: 'syz.0.579': attribute type 2 has an invalid length. [ 209.153519][ T5613] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 209.175319][ T5613] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.175380][ T5613] usb 4-1: too many configurations: 180, using maximum allowed: 8 [ 209.194855][ T5613] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 209.203139][ T5613] usb 4-1: can't read configurations, error -22 [ 209.209890][ T5613] usb usb4-port1: unable to enumerate USB device [ 209.452854][ T7714] netlink: zone id is out of range [ 209.460788][ T7714] netlink: zone id is out of range [ 209.473829][ T7714] netlink: zone id is out of range [ 209.479575][ T7714] netlink: zone id is out of range [ 209.491688][ T7714] netlink: zone id is out of range [ 209.491936][ T7714] netlink: zone id is out of range [ 209.506428][ T7714] netlink: zone id is out of range [ 209.511732][ T7714] netlink: zone id is out of range [ 209.517360][ T7714] netlink: zone id is out of range [ 209.524543][ T7714] netlink: zone id is out of range [ 209.605287][ T5687] usb 3-1: USB disconnect, device number 24 [ 210.225701][ T7726] netlink: 104 bytes leftover after parsing attributes in process `syz.2.584'. [ 210.738538][ T7740] netlink: 104 bytes leftover after parsing attributes in process `syz.2.590'. [ 210.850648][ T7738] netlink: 'syz.0.589': attribute type 63 has an invalid length. [ 210.850703][ T7738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.589'. [ 211.153960][ T30] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 211.167547][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.0.594'. [ 211.314277][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 211.320077][ T30] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 211.331177][ T30] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 211.331232][ T30] usb 4-1: can't read configurations, error -61 [ 211.357432][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 211.359014][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 211.473846][ T30] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 211.623875][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 211.629758][ T30] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 211.640908][ T30] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 211.640966][ T30] usb 4-1: can't read configurations, error -61 [ 211.655625][ T30] usb usb4-port1: attempt power cycle [ 211.690855][ T7761] netlink: 'syz.0.598': attribute type 7 has an invalid length. [ 211.993809][ T30] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 212.014512][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 212.020355][ T30] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.031315][ T30] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 212.031372][ T30] usb 4-1: can't read configurations, error -61 [ 212.173845][ T30] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 212.194615][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 212.200588][ T30] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.213167][ T30] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 212.213245][ T30] usb 4-1: can't read configurations, error -61 [ 212.221758][ T30] usb usb4-port1: unable to enumerate USB device [ 212.615528][ T5687] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 212.767010][ T5687] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 212.777551][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 212.777607][ T5687] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 212.777910][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.822170][ T5687] usb 2-1: config 0 descriptor?? [ 212.829573][ T7766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 213.062968][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.063030][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.063104][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.063199][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.063264][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.063333][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.063405][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.063474][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.063543][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.063617][ T5687] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 213.160749][ T5687] kone 0003:1E7D:2CED.0007: hidraw0: USB HID v80.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 213.253599][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.268960][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.756808][ T7794] netlink: 'syz.2.607': attribute type 2 has an invalid length. [ 214.363827][ T30] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 214.503858][ T30] usb 4-1: device descriptor read/64, error -71 [ 214.599522][ T7808] netlink: 104 bytes leftover after parsing attributes in process `syz.2.613'. [ 214.743875][ T30] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 214.873972][ T30] usb 4-1: device descriptor read/64, error -71 [ 214.986792][ T30] usb usb4-port1: attempt power cycle [ 215.139316][ T5688] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 215.273833][ T5688] usb 3-1: device descriptor read/64, error -71 [ 215.334079][ T30] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 215.355233][ T30] usb 4-1: device descriptor read/8, error -71 [ 215.443576][ T5687] usb 2-1: USB disconnect, device number 28 [ 215.533988][ T5688] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 215.594164][ T30] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 215.615272][ T30] usb 4-1: device descriptor read/8, error -71 [ 215.673867][ T5688] usb 3-1: device descriptor read/64, error -71 [ 215.725171][ T30] usb usb4-port1: unable to enumerate USB device [ 215.749287][ T5687] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.784294][ T5688] usb usb3-port1: attempt power cycle [ 215.857127][ T7825] netlink: 104 bytes leftover after parsing attributes in process `syz.0.619'. [ 216.145501][ T5688] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 216.184486][ T5688] usb 3-1: device descriptor read/8, error -71 [ 216.433957][ T5688] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 216.454778][ T5688] usb 3-1: device descriptor read/8, error -71 [ 216.564358][ T5688] usb usb3-port1: unable to enumerate USB device [ 216.763856][ T5687] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 216.923961][ T5687] usb 2-1: Using ep0 maxpacket: 16 [ 216.933256][ T5687] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.949441][ T5687] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.949522][ T5687] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.949590][ T5687] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.949671][ T5687] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 216.954801][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.954873][ T5687] usb 2-1: SerialNumber: syz [ 217.018238][ T5687] hub 2-1:1.0: bad descriptor, ignoring hub [ 217.018284][ T5687] hub 2-1:1.0: probe with driver hub failed with error -5 [ 217.037391][ T5687] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 217.413222][ T7822] raw-gadget.1 gadget.1: fail, usb_ep_set_wedge returned -11 [ 217.536962][ T5687] usb 2-1: USB disconnect, device number 29 [ 217.924249][ T5761] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 217.995554][ T7870] netlink: 72 bytes leftover after parsing attributes in process `syz.2.636'. [ 218.084463][ T5761] usb 1-1: Using ep0 maxpacket: 32 [ 218.095545][ T5761] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.095613][ T5761] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 218.123430][ T5761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.123479][ T5761] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.149403][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.149449][ T5761] usb 1-1: Product: syz [ 218.149487][ T5761] usb 1-1: Manufacturer: syz [ 218.149506][ T5761] usb 1-1: SerialNumber: syz [ 218.317328][ T7883] netlink: 104 bytes leftover after parsing attributes in process `syz.2.640'. [ 218.387197][ T5761] usb 1-1: unit 0 not found! [ 218.464447][ T5687] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 218.593848][ T5687] usb 2-1: device descriptor read/64, error -71 [ 218.594215][ T7868] Bluetooth: MGMT ver 1.23 [ 218.648625][ T7668] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 218.735187][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.755558][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.834991][ T5687] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 218.871449][ T5761] usb 1-1: USB disconnect, device number 30 [ 218.941536][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 218.974335][ T5687] usb 2-1: device descriptor read/64, error -71 [ 219.086641][ T5687] usb usb2-port1: attempt power cycle [ 219.210646][ T7905] netlink: 104 bytes leftover after parsing attributes in process `syz.3.648'. [ 219.277694][ T7907] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 219.286497][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.649'. [ 219.409920][ T7911] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 219.423818][ T5687] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 219.446821][ T5687] usb 2-1: device descriptor read/8, error -71 [ 219.640847][ T7916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.683906][ T5687] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 219.706707][ T5687] usb 2-1: device descriptor read/8, error -71 [ 219.816595][ T5687] usb usb2-port1: unable to enumerate USB device [ 220.053095][ T7932] netlink: 'syz.2.660': attribute type 1 has an invalid length. [ 220.053144][ T7932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'. [ 220.064305][ T5687] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 220.214137][ T5687] usb 1-1: Using ep0 maxpacket: 16 [ 220.215498][ T5687] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 220.218430][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.218550][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.242875][ T5687] usb 1-1: config 0 descriptor?? [ 220.371997][ T7944] netlink: 72 bytes leftover after parsing attributes in process `syz.2.665'. [ 220.383849][ T5761] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 220.518984][ T7950] netlink: 180 bytes leftover after parsing attributes in process `syz.2.667'. [ 220.543860][ T5761] usb 4-1: Using ep0 maxpacket: 8 [ 220.551914][ T5761] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.559883][ T5761] usb 4-1: New USB device found, idVendor=2040, idProduct=4200, bcdDevice=d2.2c [ 220.572369][ T5761] usb 4-1: config 6 has an invalid interface number: 213 but max is 1 [ 220.580874][ T5761] usb 4-1: config 6 has an invalid interface number: 10 but max is 1 [ 220.589107][ T5761] usb 4-1: config 6 has no interface number 0 [ 220.589132][ T5761] usb 4-1: config 6 has no interface number 1 [ 220.589184][ T5761] usb 4-1: config 6 interface 213 altsetting 16 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 220.589216][ T5761] usb 4-1: config 6 interface 213 has no altsetting 0 [ 220.589236][ T5761] usb 4-1: config 6 interface 10 has no altsetting 0 [ 220.635280][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.635328][ T5761] usb 4-1: Product: syz [ 220.635364][ T5761] usb 4-1: Manufacturer: syz [ 220.635385][ T5761] usb 4-1: SerialNumber: syz [ 220.664088][ T7926] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 220.684375][ T5687] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 220.712551][ T7952] netlink: 104 bytes leftover after parsing attributes in process `syz.2.668'. [ 220.906692][ T5761] em28xx 4-1:6.213: New device syz syz @ 480 Mbps (2040:4200, interface 213, class 213) [ 220.906757][ T5761] em28xx 4-1:6.213: Video interface 213 found: [ 220.987569][ T5761] em28xx 4-1:6.213: unknown em28xx chip ID (0) [ 221.056757][ T5761] em28xx 4-1:6.213: reading from i2c device at 0xa0 failed (error=-5) [ 221.056861][ T5761] em28xx 4-1:6.213: board has no eeprom [ 221.080755][ T5687] usb 1-1: USB disconnect, device number 31 [ 221.080964][ T7959] netlink: 'syz.2.671': attribute type 1 has an invalid length. [ 221.080988][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.671'. [ 221.113865][ T5761] em28xx 4-1:6.213: Identified as Hauppauge WinTV USB 2 (card=4) [ 221.113926][ T5761] em28xx 4-1:6.213: analog set to bulk mode. [ 221.117918][ T5613] em28xx 4-1:6.213: Registering V4L2 extension [ 221.162053][ T5761] usb 4-1: USB disconnect, device number 43 [ 221.188654][ T5761] em28xx 4-1:6.213: Disconnecting em28xx [ 221.448993][ T7969] netlink: 56 bytes leftover after parsing attributes in process `syz.2.674'. [ 221.472220][ T5613] em28xx 4-1:6.213: Config register raw data: 0xffffffed [ 221.472274][ T5613] em28xx 4-1:6.213: AC97 chip type couldn't be determined [ 221.472322][ T5613] em28xx 4-1:6.213: No AC97 audio processor [ 221.472676][ T5613] em28xx 4-1:6.213: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19] [ 221.503344][ T5613] em28xx 4-1:6.213: Registering input extension [ 221.614096][ T5613] rc_core: IR keymap rc-hauppauge not found [ 221.614135][ T5613] Registered IR keymap rc-empty [ 221.681171][ T5613] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.213/rc/rc0 [ 221.697178][ T5613] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.213/rc/rc0/input10 [ 221.719465][ T7979] netlink: 104 bytes leftover after parsing attributes in process `syz.0.678'. [ 221.761862][ T5613] em28xx 4-1:6.213: Input extension successfully initialized [ 221.769861][ T5761] em28xx 4-1:6.213: Closing input extension [ 221.965176][ T7990] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 221.973615][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.680'. [ 222.140256][ T5761] em28xx: Freeing device [ 222.385465][ T986] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 222.524589][ T986] usb 2-1: device descriptor read/64, error -71 [ 222.533886][ T5613] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 222.696027][ T5613] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 222.699691][ T5613] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 222.699805][ T5613] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.699881][ T5613] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 222.699973][ T5613] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 222.700044][ T5613] usb 3-1: config 0 interface 0 has no altsetting 0 [ 222.700125][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.724670][ T5613] usb 3-1: config 0 descriptor?? [ 222.730748][ T8000] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 222.834351][ T986] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 222.963951][ T986] usb 2-1: device descriptor read/64, error -71 [ 223.072381][ T8045] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 223.072424][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 223.081597][ T986] usb usb2-port1: attempt power cycle [ 223.163355][ T5613] waltop 0003:172F:0500.000A: item fetching failed at offset 6/7 [ 223.168637][ T5613] waltop 0003:172F:0500.000A: probe with driver waltop failed with error -22 [ 223.382921][ T8000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.403610][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.412394][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.414064][ T986] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 223.433529][ T5613] usb 3-1: USB disconnect, device number 29 [ 223.440425][ T986] usb 2-1: device descriptor read/8, error -71 [ 223.674466][ T986] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 223.704510][ T986] usb 2-1: device descriptor read/8, error -71 [ 223.763976][ T30] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 223.818128][ T986] usb usb2-port1: unable to enumerate USB device [ 223.926696][ T30] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 223.938285][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.938343][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.938370][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.938509][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.966193][ T30] usb 1-1: config 0 descriptor?? [ 224.058296][ T8053] netlink: 72 bytes leftover after parsing attributes in process `syz.2.695'. [ 224.377833][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.387127][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.406648][ T30] ortek 0003:1223:3F07.000B: Fixing up logical maximum in report descriptor (Skycable) [ 224.407137][ T30] hid_parser_main: 35 callbacks suppressed [ 224.409211][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 224.409325][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 224.409405][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x1 [ 224.409480][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 224.409555][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 224.409594][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 224.409632][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 224.409720][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 224.409797][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 224.409871][ T30] ortek 0003:1223:3F07.000B: unknown main item tag 0x0 [ 224.410156][ T30] ortek 0003:1223:3F07.000B: unexpected long global item [ 224.416673][ T30] ortek 0003:1223:3F07.000B: probe with driver ortek failed with error -22 [ 224.604428][ T5687] usb 1-1: USB disconnect, device number 32 [ 225.483947][ T30] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 225.593911][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 225.635065][ T30] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 225.645169][ T30] usb 2-1: config 1 has an invalid descriptor of length 217, skipping remainder of the config [ 225.645241][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.645324][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.744144][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 225.748138][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 225.756522][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 199, changing to 11 [ 225.756617][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 25715, setting to 1024 [ 225.768153][ T9] usb 3-1: string descriptor 0 read error: -22 [ 225.768533][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.786582][ T8090] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 225.810611][ T5687] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 225.820903][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.820993][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 225.908228][ T30] usb 2-1: string descriptor 0 read error: -32 [ 225.965750][ T5687] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 225.994806][ T5687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.994880][ T5687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.994975][ T5687] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.995058][ T5687] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.995181][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.117223][ T30] usb 3-1: USB disconnect, device number 30 [ 226.688318][ T5687] gud 1-1:1.0: Failed to add properties (error=-5) [ 226.688377][ T5687] gud 1-1:1.0: probe with driver gud failed with error -5 [ 227.140059][ T8123] net_ratelimit: 13 callbacks suppressed [ 227.140129][ T8123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.275910][ T8126] __nla_validate_parse: 2 callbacks suppressed [ 227.275965][ T8126] netlink: 72 bytes leftover after parsing attributes in process `syz.2.725'. [ 227.500231][ T8136] netlink: 104 bytes leftover after parsing attributes in process `syz.3.728'. [ 228.090110][ T8151] netlink: 104 bytes leftover after parsing attributes in process `syz.2.735'. [ 228.172624][ T5687] usb 2-1: USB disconnect, device number 38 [ 228.283997][ T5761] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 228.454804][ T5761] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 228.466116][ T5761] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 228.466201][ T5761] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.466267][ T5761] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.466370][ T5761] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 228.466485][ T5761] usb 4-1: config 0 interface 0 has no altsetting 0 [ 228.522563][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.522610][ T5761] usb 4-1: Product: syz [ 228.522628][ T5761] usb 4-1: Manufacturer: syz [ 228.522643][ T5761] usb 4-1: SerialNumber: syz [ 228.546643][ T5761] usb 4-1: config 0 descriptor?? [ 228.552142][ T8149] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 228.726753][ T30] usb 1-1: USB disconnect, device number 33 [ 228.759596][ T8149] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 228.781432][ T5761] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 228.982929][ T30] usb 4-1: USB disconnect, device number 44 [ 228.991906][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 229.001638][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 229.164186][ T5687] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 229.326135][ T5687] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 229.340406][ T5687] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.350477][ T5687] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 229.350556][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.757760][ T8190] Bluetooth: MGMT ver 1.23 [ 229.902548][ T8194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'. [ 230.161114][ T8210] netlink: 104 bytes leftover after parsing attributes in process `syz.1.759'. [ 230.324371][ T5759] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 230.408494][ T8220] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 230.408518][ T8220] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.422440][ T8220] vhci_hcd vhci_hcd.0: Device attached [ 230.474872][ T5759] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 230.478149][ T5759] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 230.483507][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 230.483592][ T5759] usb 4-1: Product: syz [ 230.483636][ T5759] usb 4-1: Manufacturer: syz [ 230.484190][ T5613] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 230.653989][ T9] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 230.663853][ T5687] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 230.673818][ T5613] usb 2-1: Using ep0 maxpacket: 16 [ 230.675890][ T5613] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.679123][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.679155][ T5613] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.688429][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.725449][ T5613] usb 2-1: config 0 descriptor?? [ 230.813828][ T5687] usb 1-1: Using ep0 maxpacket: 32 [ 230.820631][ T5687] usb 1-1: New USB device found, idVendor=05c6, idProduct=9003, bcdDevice=ef.b0 [ 230.827053][ T5687] usb 1-1: config 1 has an invalid interface number: 156 but max is 2 [ 230.827191][ T5687] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 230.827248][ T5687] usb 1-1: config 1 has an invalid interface number: 5 but max is 2 [ 230.827364][ T5687] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 230.827422][ T5687] usb 1-1: config 1 has an invalid interface number: 128 but max is 2 [ 230.827531][ T5687] usb 1-1: config 1 has an invalid interface number: 57 but max is 2 [ 230.827585][ T5687] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 230.827695][ T5687] usb 1-1: config 1 has no interface number 0 [ 230.827746][ T5687] usb 1-1: config 1 has no interface number 1 [ 230.827865][ T5687] usb 1-1: config 1 has no interface number 2 [ 230.827907][ T5687] usb 1-1: config 1 has no interface number 3 [ 230.828212][ T5687] usb 1-1: config 1 interface 156 altsetting 128 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 230.828292][ T5687] usb 1-1: config 1 interface 156 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 230.828398][ T5687] usb 1-1: config 1 interface 156 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 230.828504][ T5687] usb 1-1: config 1 interface 156 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 230.829570][ T5687] usb 1-1: config 1 interface 156 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 230.829713][ T5687] usb 1-1: config 1 interface 156 altsetting 128 has a duplicate endpoint with address 0xB, skipping [ 230.829748][ T5687] usb 1-1: config 1 interface 156 altsetting 128 has a duplicate endpoint with address 0xB, skipping [ 230.829775][ T5687] usb 1-1: config 1 interface 156 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 230.829813][ T5687] usb 1-1: config 1 interface 5 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 230.829863][ T5687] usb 1-1: config 1 interface 5 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 230.829887][ T5687] usb 1-1: config 1 interface 5 altsetting 1 endpoint 0xF has an invalid bInterval 250, changing to 11 [ 230.829915][ T5687] usb 1-1: config 1 interface 5 altsetting 1 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 230.829951][ T5687] usb 1-1: config 1 interface 5 altsetting 1 endpoint 0x8F has an invalid bInterval 112, changing to 10 [ 230.830100][ T5687] usb 1-1: config 1 interface 5 altsetting 1 endpoint 0x8F has invalid maxpacket 50812, setting to 1024 [ 230.830171][ T5687] usb 1-1: config 1 interface 5 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 230.830281][ T5687] usb 1-1: config 1 interface 5 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 230.830348][ T5687] usb 1-1: config 1 interface 5 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 230.830460][ T5687] usb 1-1: config 1 interface 5 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 230.830524][ T5687] usb 1-1: config 1 interface 5 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 230.830650][ T5687] usb 1-1: too many endpoints for config 1 interface 128 altsetting 196: 122, using maximum allowed: 30 [ 230.830827][ T5687] usb 1-1: config 1 interface 128 altsetting 196 has an invalid descriptor for endpoint zero, skipping [ 230.830888][ T5687] usb 1-1: config 1 interface 128 altsetting 196 has 1 endpoint descriptor, different from the interface descriptor's value: 122 [ 230.831071][ T5687] usb 1-1: config 1 interface 57 altsetting 127 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 230.831246][ T5687] usb 1-1: config 1 interface 57 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 230.831310][ T5687] usb 1-1: config 1 interface 57 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 230.831440][ T5687] usb 1-1: config 1 interface 156 has no altsetting 0 [ 230.831521][ T5687] usb 1-1: config 1 interface 5 has no altsetting 0 [ 230.831649][ T5687] usb 1-1: config 1 interface 128 has no altsetting 0 [ 230.831695][ T5687] usb 1-1: config 1 interface 57 has no altsetting 0 [ 230.857103][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.857132][ T5687] usb 1-1: Product: ꢓ呷䢔㿥ள㫲ꎛ突歠땴㋁濨鈬쭬Ꞵ႙꠨줘钆ǵⓋꐤ舶顡䂾ኑᣗꆢ嫷⒊짳傔ւ䚌亢쩛₍늲똦곸o馿驉궟腟ᑾ뼾缃⣆Ӯκ薠ꈷ閛릠퉻ᨼ䐨齔ₖ塘䱣䘷濋祙Ꜿ謭腾崃橛솄捫㛥袄徍矱᷿⬩欿ࡀἸ曽험㎺螭똏얒幬鿩ㄻ蟪ọ뇓⏣淑쎝錌 [ 230.857301][ T5687] usb 1-1: Manufacturer: и [ 230.857351][ T5687] usb 1-1: SerialNumber: Л [ 230.899113][ T8219] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 230.953267][ T8212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.998923][ T8212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.324625][ T8226] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 231.331742][ T8226] syzkaller1: group set to 776 [ 231.338086][ T8221] vhci_hcd: connection reset by peer [ 231.350419][ T5687] option 1-1:1.156: GSM modem (1-port) converter detected [ 231.358950][ T31] vhci_hcd vhci_hcd.0: stop threads [ 231.365135][ T31] vhci_hcd vhci_hcd.0: release socket [ 231.372063][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 231.406542][ T5687] option 1-1:1.5: GSM modem (1-port) converter detected [ 231.452748][ T5687] option 1-1:1.128: GSM modem (1-port) converter detected [ 231.468547][ T5613] usbhid 2-1:0.0: can't add hid device: -71 [ 231.476503][ T5613] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 231.489130][ T5613] usb 2-1: USB disconnect, device number 39 [ 231.503122][ T5687] option 1-1:1.57: GSM modem (1-port) converter detected [ 231.531829][ T5687] usb 1-1: USB disconnect, device number 34 [ 231.554897][ T5687] option 1-1:1.156: device disconnected [ 231.569061][ T5687] option 1-1:1.5: device disconnected [ 231.586756][ T5687] option 1-1:1.128: device disconnected [ 231.606098][ T5687] option 1-1:1.57: device disconnected [ 231.828256][ T8223] infiniband syz1: set down [ 231.828301][ T8223] infiniband syz1: added ipvlan1 [ 231.856476][ T8223] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 231.872094][ T8223] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 231.889899][ T8223] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 231.958208][ T8223] RDS/IB: syz1: added [ 231.965965][ T8223] smc: adding ib device syz1 with port count 1 [ 231.972457][ T8223] smc: ib device syz1 port 1 has no pnetid [ 231.989788][ T5687] usb 3-1: USB disconnect, device number 31 [ 232.151895][ T8232] netlink: 104 bytes leftover after parsing attributes in process `syz.2.766'. [ 232.256264][ T5759] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12 [ 233.073804][ T30] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 233.235301][ T30] usb 3-1: New USB device found, idVendor=19d2, idProduct=0019, bcdDevice=1e.fd [ 233.246703][ T30] usb 3-1: config 248 has an invalid interface number: 216 but max is 2 [ 233.246751][ T30] usb 3-1: config 248 has an invalid interface number: 106 but max is 2 [ 233.246779][ T30] usb 3-1: config 248 contains an unexpected descriptor of type 0x1, skipping [ 233.246805][ T30] usb 3-1: config 248 contains an unexpected descriptor of type 0x1, skipping [ 233.246830][ T30] usb 3-1: config 248 has an invalid interface number: 100 but max is 2 [ 233.246858][ T30] usb 3-1: config 248 has an invalid interface number: 125 but max is 2 [ 233.246885][ T30] usb 3-1: config 248 contains an unexpected descriptor of type 0x1, skipping [ 233.246908][ T30] usb 3-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config [ 233.246933][ T30] usb 3-1: config 248 has 4 interfaces, different from the descriptor's value: 3 [ 233.246959][ T30] usb 3-1: config 248 has no interface number 0 [ 233.246981][ T30] usb 3-1: config 248 has no interface number 1 [ 233.247002][ T30] usb 3-1: config 248 has no interface number 2 [ 233.247025][ T30] usb 3-1: config 248 has no interface number 3 [ 233.247099][ T30] usb 3-1: config 248 interface 216 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 233.247134][ T30] usb 3-1: too many endpoints for config 248 interface 106 altsetting 99: 183, using maximum allowed: 30 [ 233.247183][ T30] usb 3-1: config 248 interface 106 altsetting 99 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 233.247216][ T30] usb 3-1: config 248 interface 106 altsetting 99 has an invalid descriptor for endpoint zero, skipping [ 233.247251][ T30] usb 3-1: config 248 interface 106 altsetting 99 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 233.247284][ T30] usb 3-1: config 248 interface 106 altsetting 99 endpoint 0x8C has an invalid bInterval 63, changing to 9 [ 233.247317][ T30] usb 3-1: config 248 interface 106 altsetting 99 endpoint 0x8C has invalid maxpacket 26151, setting to 1024 [ 233.247351][ T30] usb 3-1: config 248 interface 106 altsetting 99 endpoint 0x3 has invalid maxpacket 528, setting to 64 [ 233.247384][ T30] usb 3-1: config 248 interface 106 altsetting 99 has a duplicate endpoint with address 0x3, skipping [ 233.247413][ T30] usb 3-1: config 248 interface 106 altsetting 99 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 233.247447][ T30] usb 3-1: config 248 interface 106 altsetting 99 endpoint 0x8 has invalid wMaxPacketSize 0 [ 233.247476][ T30] usb 3-1: config 248 interface 106 altsetting 99 bulk endpoint 0x8 has invalid maxpacket 0 [ 233.247506][ T30] usb 3-1: config 248 interface 106 altsetting 99 has an invalid descriptor for endpoint zero, skipping [ 233.247533][ T30] usb 3-1: config 248 interface 106 altsetting 99 has an invalid descriptor for endpoint zero, skipping [ 233.247562][ T30] usb 3-1: config 248 interface 106 altsetting 99 has a duplicate endpoint with address 0x1, skipping [ 233.247591][ T30] usb 3-1: config 248 interface 106 altsetting 99 has an invalid descriptor for endpoint zero, skipping [ 233.247618][ T30] usb 3-1: config 248 interface 106 altsetting 99 has a duplicate endpoint with address 0x6, skipping [ 233.247663][ T30] usb 3-1: config 248 interface 106 altsetting 99 has 16 endpoint descriptors, different from the interface descriptor's value: 183 [ 233.247719][ T30] usb 3-1: config 248 interface 100 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 233.247749][ T30] usb 3-1: config 248 interface 100 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 233.247777][ T30] usb 3-1: config 248 interface 100 altsetting 5 endpoint 0xB has invalid maxpacket 1041, setting to 1024 [ 233.247805][ T30] usb 3-1: config 248 interface 100 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024 [ 233.247837][ T30] usb 3-1: config 248 interface 100 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 233.247863][ T30] usb 3-1: config 248 interface 100 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 233.247891][ T30] usb 3-1: config 248 interface 100 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 233.247925][ T30] usb 3-1: config 248 interface 100 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 233.247954][ T30] usb 3-1: config 248 interface 100 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 233.247982][ T30] usb 3-1: config 248 interface 100 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 233.248011][ T30] usb 3-1: config 248 interface 100 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 233.248048][ T30] usb 3-1: config 248 interface 125 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 233.248076][ T30] usb 3-1: config 248 interface 125 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 233.248105][ T30] usb 3-1: config 248 interface 125 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 233.370039][ T30] usb 3-1: config 248 interface 125 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 233.370077][ T30] usb 3-1: config 248 interface 125 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 233.370101][ T30] usb 3-1: config 248 interface 125 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 233.370123][ T30] usb 3-1: config 248 interface 125 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 233.370144][ T30] usb 3-1: config 248 interface 125 altsetting 3 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 233.370178][ T30] usb 3-1: config 248 interface 216 has no altsetting 0 [ 233.370196][ T30] usb 3-1: config 248 interface 106 has no altsetting 0 [ 233.370214][ T30] usb 3-1: config 248 interface 100 has no altsetting 0 [ 233.370232][ T30] usb 3-1: config 248 interface 125 has no altsetting 0 [ 233.554624][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.554656][ T30] usb 3-1: Product: syz [ 233.554670][ T30] usb 3-1: Manufacturer: syz [ 233.554694][ T30] usb 3-1: SerialNumber: syz [ 233.870757][ T30] option 3-1:248.216: GSM modem (1-port) converter detected [ 233.913600][ T30] cdc_acm 3-1:248.125: skipping garbage [ 233.935525][ T30] usb 3-1: USB disconnect, device number 32 [ 233.944182][ T30] option 3-1:248.216: device disconnected [ 234.994499][ T30] usb 4-1: USB disconnect, device number 45 [ 235.098178][ T8303] netlink: 104 bytes leftover after parsing attributes in process `syz.0.789'. [ 235.499612][ T8312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.509118][ T8312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.551094][ T8318] netlink: 104 bytes leftover after parsing attributes in process `syz.0.796'. [ 235.583905][ T30] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 235.733852][ T5759] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 235.746275][ T30] usb 4-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00 [ 235.758279][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.769051][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.804964][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 235.864885][ T8330] overlayfs: failed to resolve 'nfs_export=on': -2 [ 235.890124][ T5759] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.896860][ T5759] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.896932][ T5759] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.896989][ T5759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.897097][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.922643][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.922715][ T5759] usb 3-1: Product: syz [ 235.922755][ T5759] usb 3-1: Manufacturer: syz [ 235.969946][ T5759] cdc_wdm 3-1:1.0: skipping garbage [ 235.970000][ T5759] cdc_wdm 3-1:1.0: skipping garbage [ 235.993179][ T30] mxuport 4-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 236.002653][ T30] mxuport 4-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 236.002875][ T30] mxuport 4-1:1.0: probe with driver mxuport failed with error -71 [ 236.026369][ T30] usb 4-1: USB disconnect, device number 46 [ 236.039912][ T5759] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 236.039983][ T5759] cdc_wdm 3-1:1.0: Unknown control protocol [ 236.195044][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.195171][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.195443][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.195466][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.202213][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.202237][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.208489][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.208514][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.209069][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.209093][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.216124][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.216149][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.222438][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.222461][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.229246][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.229268][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.235490][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.235515][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.242209][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 236.242235][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 236.297491][ T5613] usb 3-1: USB disconnect, device number 33 [ 236.297554][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 236.855397][ T5613] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 237.014868][ T5613] usb 4-1: Using ep0 maxpacket: 32 [ 237.020743][ T5613] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 237.024899][ T5613] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 18, changing to 7 [ 237.030302][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.030325][ T5613] usb 4-1: Product: syz [ 237.030338][ T5613] usb 4-1: Manufacturer: syz [ 237.030352][ T5613] usb 4-1: SerialNumber: syz [ 237.288811][ T5613] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 237.315396][ T8366] netlink: 104 bytes leftover after parsing attributes in process `syz.1.817'. [ 237.701766][ T5613] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 237.719925][ T5613] usb 4-1: USB disconnect, device number 47 [ 237.835102][ T8383] netlink: 104 bytes leftover after parsing attributes in process `syz.0.823'. [ 237.875527][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 238.004063][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 238.043874][ T5759] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 238.155414][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 238.159580][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 238.182616][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 238.182678][ T9] usb 3-1: config 0 has no interface number 0 [ 238.193042][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.193115][ T9] usb 3-1: Product: syz [ 238.193164][ T9] usb 3-1: Manufacturer: syz [ 238.193208][ T9] usb 3-1: SerialNumber: syz [ 238.197635][ T5759] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.231961][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.232017][ T5759] usb 2-1: Product: syz [ 238.232035][ T5759] usb 2-1: Manufacturer: syz [ 238.232079][ T5759] usb 2-1: SerialNumber: syz [ 238.261745][ T9] usb 3-1: config 0 descriptor?? [ 238.683046][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 238.683138][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 238.733907][ T30] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 238.895288][ T30] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 238.904788][ T30] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.904817][ T30] usb 4-1: config 0 has no interface number 0 [ 238.904858][ T30] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.904888][ T30] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.904913][ T30] usb 4-1: config 0 interface 1 has no altsetting 0 [ 238.904949][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.965072][ T30] usb 4-1: config 0 descriptor?? [ 239.328492][ T5759] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 239.578831][ T30] uclogic 0003:2179:0053.000C: failed retrieving string descriptor #100: -71 [ 239.578927][ T30] uclogic 0003:2179:0053.000C: failed retrieving pen parameters: -71 [ 239.579094][ T30] uclogic 0003:2179:0053.000C: pen probing failed: -71 [ 239.579172][ T30] uclogic 0003:2179:0053.000C: failed probing parameters: -71 [ 239.579455][ T30] uclogic 0003:2179:0053.000C: probe with driver uclogic failed with error -71 [ 239.590937][ T30] usb 4-1: USB disconnect, device number 48 [ 239.605418][ T5717] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 239.742009][ T5759] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 239.760693][ T5717] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 239.774081][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 239.774131][ T5717] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 239.774164][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 219, changing to 7 [ 239.774195][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9103, setting to 1024 [ 239.774242][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.831744][ T5717] usb 1-1: config 0 descriptor?? [ 239.843949][ T5717] em28xx 1-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 239.852857][ T5717] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 239.934364][ T5759] usb 2-1: USB disconnect, device number 40 [ 239.942580][ T5759] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 240.095028][ T5717] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 240.101409][ T5717] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 240.110784][ T5717] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 240.110822][ T5717] em28xx 1-1:0.0: No AC97 audio processor [ 240.147360][ T5717] usb 1-1: USB disconnect, device number 35 [ 240.158038][ T5717] em28xx 1-1:0.0: Disconnecting em28xx [ 240.176020][ T5717] em28xx: Freeing device [ 241.285345][ T8468] netlink: 104 bytes leftover after parsing attributes in process `syz.3.846'. [ 241.542528][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 241.556482][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 242.003167][ T5613] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 242.153827][ T5613] usb 4-1: Using ep0 maxpacket: 8 [ 242.159788][ T5613] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 242.173171][ T5613] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 242.185552][ T5613] usb 4-1: config 0 has no interface number 0 [ 242.185779][ T5613] usb 4-1: too many endpoints for config 0 interface 253 altsetting 247: 32, using maximum allowed: 30 [ 242.185835][ T5613] usb 4-1: config 0 interface 253 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 242.185874][ T5613] usb 4-1: config 0 interface 253 has no altsetting 0 [ 242.230161][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.238468][ T5613] usb 4-1: Product: syz [ 242.242860][ T5613] usb 4-1: Manufacturer: syz [ 242.242883][ T5613] usb 4-1: SerialNumber: syz [ 242.259328][ T5613] usb 4-1: config 0 descriptor?? [ 242.305246][ T8487] netlink: 596 bytes leftover after parsing attributes in process `syz.0.851'. [ 242.480418][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 242.512516][ T5613] usb 4-1: USB disconnect, device number 49 [ 242.665354][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 242.665639][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 242.685657][ T9] usb 3-1: USB disconnect, device number 34 [ 242.700455][ T5831] udevd[5831]: setting mode of /dev/bus/usb/003/034 to 020664 failed: No such file or directory [ 242.700762][ T5831] udevd[5831]: setting owner of /dev/bus/usb/003/034 to uid=0, gid=0 failed: No such file or directory [ 242.769935][ T8500] netlink: 104 bytes leftover after parsing attributes in process `syz.2.853'. [ 243.193915][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 243.355316][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 243.358490][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 243.358560][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.358611][ T9] usb 3-1: config 0 has no interface number 0 [ 243.358720][ T9] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 243.358791][ T9] usb 3-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.358878][ T9] usb 3-1: config 0 interface 2 has no altsetting 0 [ 243.365551][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.365620][ T9] usb 3-1: Product: syz [ 243.365663][ T9] usb 3-1: Manufacturer: syz [ 243.365706][ T9] usb 3-1: SerialNumber: syz [ 243.448012][ T9] usb 3-1: config 0 descriptor?? [ 243.459261][ T8504] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 243.481891][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.525948][ T9] usb 3-1: invalid MIDI in EP 0 [ 243.865246][ T9] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 243.928174][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 243.947048][ T5613] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 244.103811][ T5613] usb 2-1: Using ep0 maxpacket: 32 [ 244.112709][ T5613] usb 2-1: unable to get BOS descriptor or descriptor too short [ 244.112793][ T5613] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=6f.96 [ 244.131259][ T5613] usb 2-1: config 64 has an invalid interface number: 74 but max is 0 [ 244.139683][ T5613] usb 2-1: config 64 has no interface number 0 [ 244.139722][ T5613] usb 2-1: config 64 interface 74 has no altsetting 0 [ 244.158709][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.158754][ T5613] usb 2-1: Product: syz [ 244.158787][ T5613] usb 2-1: Manufacturer: syz [ 244.158807][ T5613] usb 2-1: SerialNumber: syz [ 244.428412][ T5613] usb 2-1: USB disconnect, device number 41 [ 245.915738][ T5759] usb 3-1: USB disconnect, device number 35 [ 246.363835][ T5759] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 246.514484][ T5759] usb 3-1: Using ep0 maxpacket: 32 [ 246.515757][ T5759] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 246.538419][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.538475][ T5759] usb 3-1: Product: syz [ 246.541772][ T5759] usb 3-1: Manufacturer: syz [ 246.541829][ T5759] usb 3-1: SerialNumber: syz [ 246.580330][ T5759] usb 3-1: config 0 descriptor?? [ 246.696287][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 246.864285][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 246.869283][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.871714][ T9] usb 4-1: config 0 has no interfaces? [ 246.871871][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.905958][ T9] usb 4-1: config 0 descriptor?? [ 247.125529][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.127481][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.160640][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.178322][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.203663][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.214132][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.227831][ T5759] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 247.227909][ T5759] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 247.228173][ T5759] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 247.247183][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.262273][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.273628][ T9] usb 4-1: USB disconnect, device number 50 [ 247.405492][ T5759] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 247.875468][ T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 248.036697][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 248.064058][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.064144][ T9] usb 2-1: Product: syz [ 248.064191][ T9] usb 2-1: Manufacturer: syz [ 248.064245][ T9] usb 2-1: SerialNumber: syz [ 248.088916][ T9] usb 2-1: config 0 descriptor?? [ 248.139130][ T8571] netlink: 104 bytes leftover after parsing attributes in process `syz.3.878'. [ 248.296512][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.593823][ T5717] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 248.733913][ T5717] usb 4-1: device descriptor read/64, error -71 [ 248.973996][ T5717] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 249.103841][ T5717] usb 4-1: device descriptor read/64, error -71 [ 249.116579][ T986] usb 3-1: USB disconnect, device number 36 [ 249.214111][ T5717] usb usb4-port1: attempt power cycle [ 249.553858][ T5717] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 249.577237][ T5717] usb 4-1: device descriptor read/8, error -71 [ 249.826479][ T5717] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 249.855894][ T5717] usb 4-1: device descriptor read/8, error -71 [ 249.965359][ T5717] usb usb4-port1: unable to enumerate USB device [ 250.103408][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 250.142407][ T9] usb 2-1: USB disconnect, device number 42 [ 250.775758][ T8590] netlink: 104 bytes leftover after parsing attributes in process `syz.1.886'. [ 251.011916][ T8594] syzkaller1: entered allmulticast mode [ 251.022779][ T8594] openvswitch: netlink: IP tunnel dst address not specified [ 251.624560][ T8611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.097753][ T8619] netlink: 'syz.1.899': attribute type 8 has an invalid length. [ 252.587782][ T8630] netlink: 'syz.2.903': attribute type 2 has an invalid length. [ 253.346555][ T8648] netlink: 104 bytes leftover after parsing attributes in process `syz.1.909'. [ 253.804162][ T986] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 253.976742][ T986] usb 2-1: Using ep0 maxpacket: 8 [ 253.979744][ T986] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 253.999769][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.999820][ T986] usb 2-1: Product: syz [ 253.999838][ T986] usb 2-1: Manufacturer: syz [ 253.999854][ T986] usb 2-1: SerialNumber: syz [ 254.025491][ T986] usb 2-1: config 0 descriptor?? [ 254.039285][ T986] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 254.275783][ T8666] netlink: 104 bytes leftover after parsing attributes in process `syz.2.917'. [ 254.918728][ T8671] serio: Serial port ptm0 [ 254.967925][ T8685] syzkaller1: entered promiscuous mode [ 254.974731][ T8685] syzkaller1: entered allmulticast mode [ 255.233811][ T5717] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 255.386999][ T5717] usb 4-1: not running at top speed; connect to a high speed hub [ 255.387055][ T5717] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 255.408817][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 255.425380][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.425425][ T5717] usb 4-1: Product: syz [ 255.425456][ T5717] usb 4-1: Manufacturer: syz [ 255.425478][ T5717] usb 4-1: SerialNumber: syz [ 255.465122][ T5717] oti6858 4-1:1.0: oti6858 converter detected [ 255.479192][ T5717] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 255.752405][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.752494][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.985653][ T986] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 255.991971][ T986] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 256.009988][ T5687] usb 4-1: USB disconnect, device number 55 [ 256.074740][ T5687] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 256.084765][ T5687] oti6858 4-1:1.0: device disconnected [ 256.534225][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 256.701289][ T5717] usb 2-1: USB disconnect, device number 43 [ 257.253802][ T5613] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 257.404541][ T5613] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 257.415842][ T5613] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 257.427883][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 257.437761][ T5613] usb 2-1: Product: syz [ 257.442365][ T5613] usb 2-1: Manufacturer: syz [ 257.537477][ T8726] netlink: 104 bytes leftover after parsing attributes in process `syz.3.940'. [ 257.848816][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.861384][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.871599][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.882919][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.890691][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.171613][ T5613] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14 [ 258.214883][ T5613] usb 2-1: USB disconnect, device number 44 [ 258.461444][ T1005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.695843][ T30] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 258.762473][ T1005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.842808][ T8759] netlink: 104 bytes leftover after parsing attributes in process `syz.1.947'. [ 258.854746][ T30] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 258.865151][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.878788][ T30] usb 3-1: config 0 descriptor?? [ 258.908349][ T30] gspca_main: spca505-2.14.0 probing 0733:0430 [ 259.108029][ T1005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.256082][ T1005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.403876][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 259.425516][ T30] gspca_spca505: reg write: error -110 [ 259.431190][ T30] spca505 3-1:0.0: probe with driver spca505 failed with error -5 [ 259.554738][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 259.556681][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 259.560097][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.560200][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.560251][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 259.560314][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.580123][ T9] usb 2-1: config 0 descriptor?? [ 259.748679][ T1005] bridge_slave_1: left allmulticast mode [ 259.748799][ T1005] bridge_slave_1: left promiscuous mode [ 259.759576][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.780082][ T1005] bridge_slave_0: left allmulticast mode [ 259.780130][ T1005] bridge_slave_0: left promiscuous mode [ 259.781095][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.975192][ T5614] Bluetooth: hci4: command tx timeout [ 260.072474][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input15 [ 260.141907][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.158272][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.178557][ T1005] bond0 (unregistering): Released all slaves [ 260.212208][ T9] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 260.364825][ T1005] tipc: Left network mode [ 260.598725][ T5613] usb 2-1: USB disconnect, device number 45 [ 261.888890][ T1005] hsr_slave_0: left promiscuous mode [ 261.899076][ T1005] hsr_slave_1: left promiscuous mode [ 261.900089][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.900134][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.927240][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.936489][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.021629][ T1005] veth1_macvtap: left promiscuous mode [ 262.021721][ T1005] veth0_macvtap: left promiscuous mode [ 262.021856][ T1005] veth1_vlan: left promiscuous mode [ 262.021911][ T1005] veth0_vlan: left promiscuous mode [ 262.055372][ T5614] Bluetooth: hci4: command tx timeout [ 262.347868][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 262.368342][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 262.503805][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 262.540728][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 262.557054][ T8816] syzkaller1: entered promiscuous mode [ 262.567283][ T8816] syzkaller1: entered allmulticast mode [ 262.681216][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 262.699677][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.699722][ T9] usb 4-1: Product: syz [ 262.699754][ T9] usb 4-1: Manufacturer: syz [ 262.699773][ T9] usb 4-1: SerialNumber: syz [ 262.879622][ T5687] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 263.101844][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.101997][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.102480][ T8735] bridge_slave_0: entered allmulticast mode [ 263.112798][ T8735] bridge_slave_0: entered promiscuous mode [ 263.132340][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.134318][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.134769][ T8735] bridge_slave_1: entered allmulticast mode [ 263.149010][ T8735] bridge_slave_1: entered promiscuous mode [ 263.315866][ T8735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.321085][ T1005] IPVS: stop unused estimator thread 0... [ 263.343122][ T8735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.491306][ T8735] team0: Port device team_slave_0 added [ 263.509088][ T8854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.512601][ T8735] team0: Port device team_slave_1 added [ 263.524948][ T8854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.610290][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.610332][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.610361][ T8735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.690949][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.690991][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.695951][ T8735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.725093][ T30] usb 4-1: USB disconnect, device number 56 [ 263.874004][ T8735] hsr_slave_0: entered promiscuous mode [ 263.881349][ T8735] hsr_slave_1: entered promiscuous mode [ 263.975429][ T5687] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 263.975674][ T5687] ath9k_htc: Failed to initialize the device [ 263.977919][ T30] usb 4-1: ath9k_htc: USB layer deinitialized [ 264.084599][ T8866] netlink: 'syz.1.968': attribute type 23 has an invalid length. [ 264.132517][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 264.139301][ T5614] Bluetooth: hci4: command tx timeout [ 264.161179][ T8873] netlink: 'syz.1.968': attribute type 23 has an invalid length. [ 264.600863][ T8735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.618828][ T8888] netlink: 104 bytes leftover after parsing attributes in process `syz.1.973'. [ 264.643075][ T8735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.655004][ T8735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.672883][ T8735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.683068][ T8735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.699369][ T8735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.708684][ T8735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.744428][ T5613] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 264.747523][ T8735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.893981][ T5613] usb 4-1: Using ep0 maxpacket: 32 [ 264.898546][ T5613] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 264.916203][ T5613] usb 4-1: config 123 interface 0 has no altsetting 0 [ 264.931203][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.931267][ T5613] usb 4-1: Product: syz [ 264.931303][ T5613] usb 4-1: Manufacturer: syz [ 264.931370][ T5613] usb 4-1: SerialNumber: syz [ 265.037743][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.101561][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.145370][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.145658][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.199961][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.200148][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.225047][ T5613] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 265.240518][ T5613] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.248914][ T5613] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 265.249057][ T5613] usb 4-1: media controller created [ 265.370192][ T5613] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.483422][ T5613] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 265.483469][ T5613] error writing reg: 0xff, val: 0x00 [ 265.490787][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 265.711728][ T5613] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 265.759496][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.770759][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.826370][ T8930] netlink: 104 bytes leftover after parsing attributes in process `syz.1.980'. [ 266.225305][ T5614] Bluetooth: hci4: command tx timeout [ 266.363529][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 266.682392][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.186162][ T8735] veth0_vlan: entered promiscuous mode [ 267.240574][ T8735] veth1_vlan: entered promiscuous mode [ 267.328918][ T8735] veth0_macvtap: entered promiscuous mode [ 267.355066][ T8735] veth1_macvtap: entered promiscuous mode [ 267.445547][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.491972][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.556572][ T5761] usb 4-1: USB disconnect, device number 57 [ 267.625864][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.855022][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.855091][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.956498][ T1173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.260863][ T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.260903][ T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.439424][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.450314][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.501171][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.501225][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.638531][ T9001] rust_binder: 9000:9001 performed invalid weak decrement on ref [ 268.640416][ T9001] rust_binder: Write failure EINVAL in pid:824 [ 269.307625][ T9030] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1005'. [ 269.395447][ T1173] Bluetooth: hci0: Frame reassembly failed (-90) [ 269.404735][ T9034] Bluetooth: hci0: Frame reassembly failed (-84) [ 269.406704][ T9033] Bluetooth: hci0: Frame reassembly failed (-84) [ 269.413560][ T9035] Bluetooth: hci0: Frame reassembly failed (-84) [ 269.419972][ T986] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 269.433518][ T9032] Bluetooth: hci0: Frame reassembly failed (-84) [ 269.596772][ T986] usb 4-1: Using ep0 maxpacket: 8 [ 269.604283][ T986] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 269.619665][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.619708][ T986] usb 4-1: Product: syz [ 269.619752][ T986] usb 4-1: Manufacturer: syz [ 269.619773][ T986] usb 4-1: SerialNumber: syz [ 269.649845][ T986] usb 4-1: config 0 descriptor?? [ 269.659440][ T986] gspca_main: se401-2.14.0 probing 047d:5003 [ 269.727643][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1010'. [ 270.064639][ T986] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 270.353059][ T9059] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1015'. [ 270.908624][ T780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.945598][ T986] gspca_se401: read req failed req 0x06 error -19 [ 270.955061][ T986] usb 4-1: USB disconnect, device number 58 [ 271.171892][ T780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.278950][ T780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.325948][ T5687] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 271.413595][ T780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.414865][ T5614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 271.503914][ T5687] usb 2-1: Using ep0 maxpacket: 32 [ 271.509840][ T5687] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 271.523936][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.532056][ T5687] usb 2-1: Product: syz [ 271.536476][ T5687] usb 2-1: Manufacturer: syz [ 271.537058][ T5687] usb 2-1: SerialNumber: syz [ 271.563094][ T5687] usb 2-1: config 0 descriptor?? [ 271.722776][ T9079] tipc: Failed to remove unknown binding: 66,0,0/0:773027655/773027656 [ 271.726301][ T9079] tipc: Failed to remove unknown binding: 66,0,0/0:773027655/773027656 [ 271.777510][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.788649][ T5687] airspy 2-1:0.0: usb_control_msg() failed -32 request 09 [ 271.788692][ T5687] airspy 2-1:0.0: Could not detect board [ 271.788797][ T5687] airspy 2-1:0.0: probe with driver airspy failed with error -32 [ 271.795960][ T9071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.797035][ T9071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.837265][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.848656][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.866428][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.869940][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'. [ 271.883960][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.065536][ T780] bridge_slave_1: left allmulticast mode [ 272.071785][ T780] bridge_slave_1: left promiscuous mode [ 272.078428][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.096010][ T780] bridge_slave_0: left allmulticast mode [ 272.096064][ T780] bridge_slave_0: left promiscuous mode [ 272.096615][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.123445][ T780] pim6reg: left allmulticast mode [ 272.285449][ T780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.305117][ T780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.315414][ T780] bond0 (unregistering): Released all slaves [ 273.360243][ T780] hsr_slave_0: left promiscuous mode [ 273.369420][ T780] hsr_slave_1: left promiscuous mode [ 273.372393][ T780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.372461][ T780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.397378][ T780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.397431][ T780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.457318][ T780] veth1_macvtap: left promiscuous mode [ 273.465403][ T780] veth0_macvtap: left promiscuous mode [ 273.466018][ T780] veth1_vlan: left promiscuous mode [ 273.466221][ T780] veth0_vlan: left promiscuous mode [ 273.704703][ T9124] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 273.864159][ T50] smc: removing ib device syz1 [ 273.974160][ T5614] Bluetooth: hci0: command tx timeout [ 274.002801][ T780] team0 (unregistering): Port device team_slave_1 removed [ 274.026149][ T780] team0 (unregistering): Port device team_slave_0 removed [ 274.059460][ T5688] usb 2-1: USB disconnect, device number 46 [ 274.295284][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 274.368279][ T5613] ================================================================== [ 274.368306][ T5613] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 274.368351][ T5613] Read of s ** replaying previous printk message ** [ 274.368351][ T5613] Read of size 1 at addr ffff888033edee09 by task kworker/1:3/5613 [ 274.368370][ T5613] [ 274.368384][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.368413][ T5613] Tainted: [L]=SOFTLOCKUP [ 274.368422][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.368436][ T5613] Workqueue: events smc_ib_port_event_work [ 274.368465][ T5613] Call Trace: [ 274.368475][ T5613] [ 274.368484][ T5613] dump_stack_lvl+0xe8/0x150 [ 274.368513][ T5613] print_address_description+0x55/0x1e0 [ 274.368544][ T5613] ? __ethtool_get_link_ksettings+0x230/0x250 [ 274.368574][ T5613] print_report+0x58/0x70 [ 274.368601][ T5613] kasan_report+0x117/0x150 [ 274.368626][ T5613] ? __ethtool_get_link_ksettings+0x230/0x250 [ 274.368661][ T5613] __ethtool_get_link_ksettings+0x230/0x250 [ 274.368694][ T5613] __ethtool_get_link_ksettings+0x11f/0x250 [ 274.368726][ T5613] ib_get_eth_speed+0x180/0x7f0 [ 274.368754][ T5613] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 274.368783][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 274.368811][ T5613] ? rxe_query_port+0x6b/0x3d0 [ 274.368909][ T5613] rxe_query_port+0x93/0x3d0 [ 274.368938][ T5613] ib_query_port+0x16e/0x830 [ 274.368968][ T5613] smc_ib_port_event_work+0x147/0x920 [ 274.368997][ T5613] ? rcu_is_watching+0x16/0xb0 [ 274.369021][ T5613] ? process_scheduled_works+0x97a/0x1630 [ 274.369047][ T5613] process_scheduled_works+0xc3d/0x1630 [ 274.369087][ T5613] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.369116][ T5613] ? assign_work+0x3cf/0x5d0 [ 274.369148][ T5613] worker_thread+0xa47/0xfb0 [ 274.369188][ T5613] kthread+0x38b/0x480 [ 274.369218][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 274.369243][ T5613] ? __pfx_kthread+0x10/0x10 [ 274.369273][ T5613] ret_from_fork+0x514/0xb70 [ 274.369308][ T5613] ? __pfx_ret_from_fork+0x10/0x10 [ 274.369338][ T5613] ? __switch_to+0xc89/0x1420 [ 274.369365][ T5613] ? __pfx_kthread+0x10/0x10 [ 274.369396][ T5613] ret_from_fork_asm+0x1a/0x30 [ 274.369433][ T5613] [ 274.369442][ T5613] [ 274.369447][ T5613] Allocated by task 5625: [ 274.369458][ T5613] kasan_save_track+0x3e/0x80 [ 274.369488][ T5613] __kasan_kmalloc+0x93/0xb0 [ 274.369505][ T5613] __kvmalloc_node_noprof+0x50f/0x820 [ 274.369535][ T5613] alloc_netdev_mqs+0xa9/0x12a0 [ 274.369558][ T5613] rtnl_create_link+0x321/0xd70 [ 274.369580][ T5613] rtnl_newlink_create+0x258/0x7b0 [ 274.369604][ T5613] rtnl_newlink+0x166d/0x1c30 [ 274.369632][ T5613] rtnetlink_rcv_msg+0x802/0xc00 [ 274.369659][ T5613] netlink_rcv_skb+0x226/0x4a0 [ 274.369679][ T5613] netlink_unicast+0x7bd/0x940 [ 274.369697][ T5613] netlink_sendmsg+0x813/0xb40 [ 274.369719][ T5613] sock_sendmsg_nosec+0x13a/0x180 [ 274.369742][ T5613] __sys_sendto+0x408/0x5a0 [ 274.369770][ T5613] __x64_sys_sendto+0xde/0x100 [ 274.369798][ T5613] do_syscall_64+0x166/0x520 [ 274.369833][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.369854][ T5613] [ 274.369859][ T5613] Freed by task 780: [ 274.369869][ T5613] kasan_save_track+0x3e/0x80 [ 274.369898][ T5613] kasan_save_free_info+0x40/0x50 [ 274.369923][ T5613] __kasan_slab_free+0x5c/0x80 [ 274.369940][ T5613] kfree+0x1c5/0x650 [ 274.369964][ T5613] device_release+0xc4/0x1f0 [ 274.369989][ T5613] kobject_put+0x222/0x550 [ 274.370006][ T5613] netdev_run_todo+0xeee/0x1060 [ 274.370026][ T5613] default_device_exit_batch+0x923/0x9a0 [ 274.370056][ T5613] ops_undo_list+0x4b4/0x8d0 [ 274.370083][ T5613] cleanup_net+0x572/0x810 [ 274.370110][ T5613] process_scheduled_works+0xc3d/0x1630 [ 274.370132][ T5613] worker_thread+0xa47/0xfb0 [ 274.370154][ T5613] kthread+0x38b/0x480 [ 274.370180][ T5613] ret_from_fork+0x514/0xb70 [ 274.370207][ T5613] ret_from_fork_asm+0x1a/0x30 [ 274.370233][ T5613] [ 274.370238][ T5613] The buggy address belongs to the object at ffff888033ede000 [ 274.370238][ T5613] which belongs to the cache kmalloc-cg-4k of size 4096 [ 274.370257][ T5613] The buggy address is located 3593 bytes inside of [ 274.370257][ T5613] freed 4096-byte region [ffff888033ede000, ffff888033edf000) [ 274.370279][ T5613] [ 274.370285][ T5613] The buggy address belongs to the physical page: [ 274.370304][ T5613] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033edc000 pfn:0x33ed8 [ 274.370325][ T5613] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 274.370342][ T5613] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 274.370362][ T5613] page_type: f5(slab) [ 274.370382][ T5613] raw: 00fff00000000240 ffff88813ff23500 ffffea000143b810 ffffea0001f6c410 [ 274.370400][ T5613] raw: ffff888033edc000 0000000200040003 00000000f5000000 0000000000000000 [ 274.370420][ T5613] head: 00fff00000000240 ffff88813ff23500 ffffea000143b810 ffffea0001f6c410 [ 274.370439][ T5613] head: ffff888033edc000 0000000200040003 00000000f5000000 0000000000000000 [ 274.370459][ T5613] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 274.370478][ T5613] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 274.370489][ T5613] page dumped because: kasan: bad access detected [ 274.370507][ T5613] page_owner tracks the page as allocated [ 274.370515][ T5613] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5612, tgid 5612 (syz-executor), ts 84743043315 [ 274.370550][ T5613] post_alloc_hook+0x1f9/0x250 [ 274.370577][ T5613] get_page_from_freelist+0x2209/0x2280 [ 274.370607][ T5613] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 274.370636][ T5613] allocate_slab+0x7d/0x620 [ 274.370657][ T5613] refill_objects+0x2d5/0x350 [ 274.370678][ T5613] __pcs_replace_empty_main+0x2c8/0x6c0 [ 274.370699][ T5613] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 274.370729][ T5613] kmemdup_noprof+0x2b/0x70 [ 274.370758][ T5613] __addrconf_sysctl_register+0xa7/0x4b0 [ 274.370787][ T5613] addrconf_sysctl_register+0x168/0x1c0 [ 274.370829][ T5613] ipv6_add_dev+0xd26/0x13a0 [ 274.370854][ T5613] addrconf_notify+0x771/0x1050 [ 274.370883][ T5613] notifier_call_chain+0x1a5/0x3d0 [ 274.370911][ T5613] register_netdevice+0x18a4/0x1eb0 [ 274.370931][ T5613] macsec_newlink+0x706/0x1200 [ 274.370959][ T5613] rtnl_newlink_create+0x305/0x7b0 [ 274.370978][ T5613] page last free pid 5496 tgid 5496 ts 67302943979 stack trace: [ 274.370994][ T5613] __free_frozen_pages+0xc93/0xd90 [ 274.371021][ T5613] __slab_free+0x274/0x2c0 [ 274.371049][ T5613] qlist_free_all+0x99/0x100 [ 274.371076][ T5613] kasan_quarantine_reduce+0x148/0x160 [ 274.371105][ T5613] __kasan_slab_alloc+0x22/0x80 [ 274.371123][ T5613] kmem_cache_alloc_lru_noprof+0x2a3/0x5f0 [ 274.371150][ T5613] alloc_inode+0xb8/0x1b0 [ 274.371170][ T5613] create_pipe_files+0x52/0x7c0 [ 274.371200][ T5613] __do_pipe_flags+0x46/0x1f0 [ 274.371229][ T5613] do_pipe2+0xaa/0x190 [ 274.371247][ T5613] __x64_sys_pipe2+0x5a/0x70 [ 274.371284][ T5613] do_syscall_64+0x166/0x520 [ 274.371311][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.371395][ T5613] [ 274.371402][ T5613] Memory state around the buggy address: [ 274.371414][ T5613] ffff888033eded00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.371429][ T5613] ffff888033eded80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.371444][ T5613] >ffff888033edee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.371455][ T5613] ^ [ 274.371467][ T5613] ffff888033edee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.371482][ T5613] ffff888033edef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.371493][ T5613] ================================================================== [ 274.394758][ T5613] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 275.133368][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.144326][ T5613] Tainted: [L]=SOFTLOCKUP [ 275.148667][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.158738][ T5613] Workqueue: events smc_ib_port_event_work [ 275.164576][ T5613] Call Trace: [ 275.167869][ T5613] [ 275.170811][ T5613] vpanic+0x56d/0xa60 [ 275.174825][ T5613] ? __pfx_vpanic+0x10/0x10 [ 275.179363][ T5613] panic+0xc5/0xd0 [ 275.183127][ T5613] ? __pfx_panic+0x10/0x10 [ 275.187569][ T5613] ? preempt_schedule_thunk+0x16/0x40 [ 275.192975][ T5613] ? __ethtool_get_link_ksettings+0x230/0x250 [ 275.199068][ T5613] ? preempt_schedule_thunk+0x16/0x40 [ 275.204468][ T5613] ? __ethtool_get_link_ksettings+0x230/0x250 [ 275.210564][ T5613] check_panic_on_warn+0x89/0xb0 [ 275.215531][ T5613] ? __ethtool_get_link_ksettings+0x230/0x250 [ 275.221651][ T5613] end_report+0x73/0x170 [ 275.225918][ T5613] ? __ethtool_get_link_ksettings+0x230/0x250 [ 275.232005][ T5613] kasan_report+0x128/0x150 [ 275.236531][ T5613] ? __ethtool_get_link_ksettings+0x230/0x250 [ 275.242625][ T5613] __ethtool_get_link_ksettings+0x230/0x250 [ 275.248560][ T5613] __ethtool_get_link_ksettings+0x11f/0x250 [ 275.254496][ T5613] ib_get_eth_speed+0x180/0x7f0 [ 275.259409][ T5613] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 275.264815][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 275.269953][ T5613] ? rxe_query_port+0x6b/0x3d0 [ 275.274746][ T5613] rxe_query_port+0x93/0x3d0 [ 275.279365][ T5613] ib_query_port+0x16e/0x830 [ 275.283990][ T5613] smc_ib_port_event_work+0x147/0x920 [ 275.289395][ T5613] ? rcu_is_watching+0x16/0xb0 [ 275.294190][ T5613] ? process_scheduled_works+0x97a/0x1630 [ 275.299940][ T5613] process_scheduled_works+0xc3d/0x1630 [ 275.305538][ T5613] ? __pfx_process_scheduled_works+0x10/0x10 [ 275.311579][ T5613] ? assign_work+0x3cf/0x5d0 [ 275.316207][ T5613] worker_thread+0xa47/0xfb0 [ 275.320843][ T5613] kthread+0x38b/0x480 [ 275.324945][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 275.330085][ T5613] ? __pfx_kthread+0x10/0x10 [ 275.334705][ T5613] ret_from_fork+0x514/0xb70 [ 275.339337][ T5613] ? __pfx_ret_from_fork+0x10/0x10 [ 275.344480][ T5613] ? __switch_to+0xc89/0x1420 [ 275.349187][ T5613] ? __pfx_kthread+0x10/0x10 [ 275.353816][ T5613] ret_from_fork_asm+0x1a/0x30 [ 275.358610][ T5613] [ 275.361817][ T5613] Kernel Offset: disabled [ 275.366172][ T5613] Rebooting in 86400 seconds..