last executing test programs: 13.994752913s ago: executing program 1 (id=1215): open(&(0x7f0000000180)='.\x00', 0x800, 0x0) open(0x0, 0x10000, 0x2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0xd, 0x447, 0x0, 0x2, 0xffff, 0x9, 0x3}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x1ffb, 0x54000, 0x3, 0x1, 0x10, 0x3, 0x5, 0x9, 0x0, 0x7, 0xad}, {0x3000, 0x0, 0xc, 0xc3, 0x7, 0x6, 0x98, 0x0, 0x7f, 0x0, 0x4, 0x11}, {0x25000, 0x0, 0x10, 0x5, 0x16, 0x8, 0xb4, 0x93, 0x9, 0x8, 0xe, 0x3}, {0x25000, 0x1, 0x8, 0x6, 0x26, 0x1b, 0xf8, 0xfe, 0x8, 0x3, 0x4, 0x5}, {0x3000, 0xe000, 0xb, 0x3, 0x0, 0x0, 0x8, 0x81, 0x5, 0x7, 0x81, 0x4}, {0x4000, 0x100000, 0xb, 0x6, 0x3, 0x1, 0x3, 0x9, 0xc, 0xf8, 0x2}, {0xf6a80876ea535cec, 0x2, 0x9, 0x5, 0x2, 0x0, 0x1, 0x6, 0x4, 0x7, 0x12, 0x9}, {0xc000, 0x3000, 0xc, 0x6, 0x55, 0x81, 0x8, 0xff, 0xf8, 0x1, 0x4, 0x7}, {0xa000, 0x8001}, {0xffffffff, 0x6}, 0x20, 0x0, 0xf000, 0x200100, 0x23, 0x9801, 0x6000, [0x521, 0x3, 0x2, 0x1]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@uexit={0x0, 0x18, 0x7}, @code={0xa, 0x60, {"b805000000b9e8d100000f01c1f045802bbdc4417f5edd66b8dc008ed8660f104c878766460f38802cf26764440f01df266743250000008066baf80cb8289d308fef66bafc0cb81c350000ef660f08"}}, @uexit={0x0, 0x18, 0x1}, @wr_crn={0x46, 0x20, {0x2, 0x10000}}, @code={0xa, 0x64, {"8f891801b304000000b9de0a00000f32f3460faeb4d72b870000362e0fc7b9ac4100002e430f00d6f0211d002000000fc7720066baf80cb89298d58fef66bafc0c66b8121f66efc4639d787b5c0066ba6100ec"}}, @wrmsr={0x65, 0x20, {0x243, 0x3}}, @cpuid={0x14, 0x18, {0x3, 0x3}}, @rdmsr={0x32, 0x18, {0x4b564d00}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffffff00}}, @code={0xa, 0x58, {"641084b9236400000f746ff866b8a4000f00d8b9040400000f32dcf4b9d40b00000f32c40119599cb06d97676866baf80cb836f2b780ef66bafc0cb0e4eec402359ae9440f01f1"}}, @wr_crn={0x46, 0x20, {0x4, 0x6}}, @code={0xa, 0x65, {"8f88308512f066baf80cb83d74568eef66bafc0cec66baf80cb88821e88bef66bafc0cb871050000ef450f01d76566460f3882100f011d0f000000f0876da5660fc7b1030000002e0fc75800460fc79e6e3966eb"}}, @wr_crn={0x46, 0x20, {0x0, 0x8}}, @cpuid={0x14, 0x18, {0x401, 0x7}}], 0x299}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000000c0)={0x401, 0x2}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.883761553s ago: executing program 1 (id=1219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0x68b3, 0x5}, {0x68b3, 0x7}, 0xa637, 0x6}) r4 = add_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="7c60a66f0d59af31dd619eddaa4cd26bd488b126367ffc637b6c53e9ec99507dfa1d1b7ec828229d073fc4f6599e54bf96cecfedcf819f713c9cc00208fd35c21a045f88f9571f2c1c54b75a2ddc3ae667103b393e14b0bb2f255566c7ec467a629844c07a169f0871fe3f48d48a02fd45a4e36dd33e7d150e5700a96a44cdae393b12358e6b03ac524a48ef99dae255211699f6d377c3faa1e303badbde772acb1d82cf40501a309b166a199533a97807c79494e6a2960cdb0974abeec99427bbaac217ddb72a84e127c25e062fae5fc20f0d3c5791241b19b4c5fb08cfe762b3d4acda323cb0d5eda790d63809efc76663b27466afe5060a", 0xf9, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f00000002c0)=""/203, 0xcb) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) gettid() write$sndseq(0xffffffffffffffff, &(0x7f0000001380), 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) poll(&(0x7f00000003c0)=[{r0, 0x4038}, {r3, 0x20}, {0xffffffffffffffff, 0x820a}], 0x3, 0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r10, 0x5760, 0x6) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x0) 11.168258991s ago: executing program 1 (id=1227): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340), &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) dup(0xffffffffffffffff) 8.506454018s ago: executing program 3 (id=1239): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)=',8Z', 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) 8.246767714s ago: executing program 3 (id=1241): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x3, 0x0, 0x7fffffff, 0x0, 0x3, 0x5}) 6.240119282s ago: executing program 0 (id=1248): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x2000fb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x11) keyctl$dh_compute(0x17, &(0x7f0000000380), &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) 6.025688446s ago: executing program 3 (id=1249): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174652064656661756c7420757365723a1609"], 0x17, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5.920955278s ago: executing program 3 (id=1250): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac05380240000102030109022406010100000009040000"], 0x0) 4.915284797s ago: executing program 1 (id=1253): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x623, 0x4c1, 0x4, 0x0, 0x0) 4.87930871s ago: executing program 2 (id=1254): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000001800000008000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) 4.159033008s ago: executing program 4 (id=1256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0x68b3, 0x5}, {0x68b3, 0x7}, 0xa637, 0x6}) r4 = add_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="7c60a66f0d59af31dd619eddaa4cd26bd488b126367ffc637b6c53e9ec99507dfa1d1b7ec828229d073fc4f6599e54bf96cecfedcf819f713c9cc00208fd35c21a045f88f9571f2c1c54b75a2ddc3ae667103b393e14b0bb2f255566c7ec467a629844c07a169f0871fe3f48d48a02fd45a4e36dd33e7d150e5700a96a44cdae393b12358e6b03ac524a48ef99dae255211699f6d377c3faa1e303badbde772acb1d82cf40501a309b166a199533a97807c79494e6a2960cdb0974abeec99427bbaac217ddb72a84e127c25e062fae5fc20f0d3c5791241b19b4c5fb08cfe762b3d4acda323cb0d5eda790d63809efc76663b27466afe5060a", 0xf9, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f00000002c0)=""/203, 0xcb) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) gettid() write$sndseq(r6, &(0x7f0000001380), 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) poll(&(0x7f00000003c0)=[{r0, 0x4038}, {r3, 0x20}, {r6, 0x820a}], 0x3, 0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r10, 0x5760, 0x6) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x0) 3.806339158s ago: executing program 2 (id=1257): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b0001000000000904"], 0x0) 2.894322183s ago: executing program 0 (id=1258): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x168, r2, 0xb00, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd05}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}}}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x24008091}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) 2.608587584s ago: executing program 3 (id=1259): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 2.501236216s ago: executing program 0 (id=1260): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x2bb}], 0x1, 0x40000000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.251284603s ago: executing program 0 (id=1261): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x2020}, 0x38, 0x101) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706050000000059f1709500010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1.993647429s ago: executing program 2 (id=1262): unshare(0x22020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000001080)={{0x3b, @multicast2, 0x2, 0x0, 'fo\x00', 0x0, 0x9, 0x2000000}, {@broadcast, 0x4e23, 0x2000, 0x7ffffff, 0x4000000, 0x20100}}, 0x44) 1.859979717s ago: executing program 1 (id=1263): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="a5172f0000000000000080000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x41, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r10, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) ioctl$LOOP_SET_DIRECT_IO(r10, 0x4c08, 0x95) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.777284232s ago: executing program 4 (id=1264): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) 1.70570603s ago: executing program 2 (id=1265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x870bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0xf, 0x15}, {0xffe0, 0x3}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.435687315s ago: executing program 4 (id=1266): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.364081112s ago: executing program 2 (id=1267): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r6, 0x3, r0, 0x5}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000009c0), 0x400, 0x0) 654.324711ms ago: executing program 4 (id=1269): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000001800000008000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) 502.784256ms ago: executing program 4 (id=1270): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x168, r2, 0xb00, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd05}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}}}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x24008091}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) 407.16193ms ago: executing program 4 (id=1271): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000080)=0x803, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x40800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x2000009) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x7ffff004) syz_usb_connect$uac1(0x5, 0x79, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0xf7, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x11}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x7, "7113"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40bdc7ea529a16d, 0x5, 0x5, 0x74, {0x7, 0x25, 0x1, 0xc, 0x3, 0xff00}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x73, 0x7, {0x7, 0x25, 0x1, 0xc, 0x7, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0xfe, 0xb9, 0xb, 0x40, 0x2}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}}) 93.604326ms ago: executing program 2 (id=1272): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b2084063f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b18ebef230a3373685fba6e9624bd117a9bfcf08f6700"}, 0xd8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xfffffff3]}, @CTA_TUPLE_ORIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004890}, 0x200088a0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 34.453566ms ago: executing program 1 (id=1273): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40090) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 0 (id=1274): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0x68b3, 0x5}, {0x68b3, 0x7}, 0xa637, 0x6}) r4 = add_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="7c60a66f0d59af31dd619eddaa4cd26bd488b126367ffc637b6c53e9ec99507dfa1d1b7ec828229d073fc4f6599e54bf96cecfedcf819f713c9cc00208fd35c21a045f88f9571f2c1c54b75a2ddc3ae667103b393e14b0bb2f255566c7ec467a629844c07a169f0871fe3f48d48a02fd45a4e36dd33e7d150e5700a96a44cdae393b12358e6b03ac524a48ef99dae255211699f6d377c3faa1e303badbde772acb1d82cf40501a309b166a199533a97807c79494e6a2960cdb0974abeec99427bbaac217ddb72a84e127c25e062fae5fc20f0d3c5791241b19b4c5fb08cfe762b3d4acda323cb0d5eda790d63809efc76663b27466afe5060a", 0xf9, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f00000002c0)=""/203, 0xcb) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) gettid() write$sndseq(r6, &(0x7f0000001380), 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) poll(&(0x7f00000003c0)=[{r0, 0x4038}, {r3, 0x20}, {r6, 0x820a}], 0x3, 0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r10, 0x5760, 0x6) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x0) kernel console output (not intermixed with test programs): 194645][ T7] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 93.218383][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.258608][ T7] usb 1-1: config 0 descriptor?? [ 93.304931][ T4814] device syzkaller0 entered promiscuous mode [ 93.477107][ T4816] xt_hashlimit: size too large, truncated to 1048576 [ 93.683643][ T7] ft260 0003:0403:6030.0004: item fetching failed at offset 0/2 [ 93.704084][ T7] ft260 0003:0403:6030.0004: failed to parse HID [ 93.754016][ T4826] fuse: Bad value for 'user_id' [ 93.764737][ T7] ft260: probe of 0003:0403:6030.0004 failed with error -22 [ 94.271806][ T4314] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 94.307971][ T4314] usb 5-1: USB disconnect, device number 3 [ 94.323640][ T4829] binder: 4828:4829 ioctl c0306201 0 returned -14 [ 94.736797][ T4838] fuse: Unknown parameter 'group_i00000000000000000000' [ 94.877249][ T4840] device syzkaller0 entered promiscuous mode [ 94.912916][ T4840] tipc: Started in network mode [ 94.918646][ T4840] tipc: Node identity 0635f9894055, cluster identity 4711 [ 94.928354][ T4840] tipc: Enabled bearer , priority 0 [ 94.942552][ T4839] tipc: Resetting bearer [ 94.974408][ T4839] tipc: Disabling bearer [ 95.174423][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 95.393229][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 95.585076][ T4853] fuse: Bad value for 'group_id' [ 95.598011][ T22] usb 1-1: USB disconnect, device number 3 [ 96.085407][ T41] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.287072][ T41] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.312252][ T41] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.345323][ T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.374670][ T41] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 96.393965][ T41] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 96.432880][ T41] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.470036][ T41] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.488669][ T41] usb 2-1: Product: syz [ 96.500744][ T41] usb 2-1: Manufacturer: syz [ 96.546006][ T41] cdc_wdm 2-1:1.0: skipping garbage [ 96.590930][ T41] cdc_wdm 2-1:1.0: skipping garbage [ 96.629664][ T41] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 96.652496][ T41] cdc_wdm 2-1:1.0: Unknown control protocol [ 96.679753][ T4875] fuse: Unknown parameter 'group_i00000000000000000000' [ 96.788340][ T4878] device syzkaller0 entered promiscuous mode [ 96.855087][ T4878] tipc: Enabled bearer , priority 0 [ 96.866262][ T4877] tipc: Resetting bearer [ 96.911049][ T4877] tipc: Disabling bearer [ 97.494059][ T4892] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 97.510351][ T4316] usb 2-1: USB disconnect, device number 4 [ 98.009617][ T4902] fuse: Bad value for 'group_id' [ 98.255938][ T4316] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.268222][ T4906] tipc: New replicast peer: 255.255.255.255 [ 98.310966][ T4906] tipc: Enabled bearer , priority 10 [ 98.465296][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 98.475012][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.576149][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.661218][ T4316] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 98.661332][ T4915] tipc: Started in network mode [ 98.731065][ T4915] tipc: Node identity ea149b2b5c2b, cluster identity 4711 [ 98.731139][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.808818][ T4316] usb 5-1: config 0 descriptor?? [ 98.831056][ T4915] tipc: Enabled bearer , priority 0 [ 98.929084][ T4921] device syzkaller0 entered promiscuous mode [ 99.004838][ T4915] tipc: Resetting bearer [ 99.043025][ T4913] tipc: Resetting bearer [ 99.109734][ T4913] tipc: Disabling bearer [ 99.278833][ T4316] ft260 0003:0403:6030.0005: item fetching failed at offset 0/2 [ 99.326124][ T4314] tipc: Node number set to 1180760457 [ 99.375852][ T4316] ft260 0003:0403:6030.0005: failed to parse HID [ 99.454932][ T4316] ft260: probe of 0003:0403:6030.0005 failed with error -22 [ 99.595945][ T4935] fuse: Bad value for 'fd' [ 99.695365][ T4314] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.885434][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 99.896278][ T4314] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 99.910330][ T4314] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 99.923014][ T4314] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 99.941534][ T4314] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 99.951989][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.960963][ T4314] usb 1-1: Product: syz [ 99.966284][ T4314] usb 1-1: Manufacturer: syz [ 99.971143][ T4314] usb 1-1: SerialNumber: syz [ 99.987263][ T4314] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 100.004479][ T4314] imon 1-1:155.0: unable to initialize intf0, err -19 [ 100.011642][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.042605][ T4314] imon:imon_probe: failed to initialize context! [ 100.053993][ T4314] imon 1-1:155.0: unable to register, err -19 [ 100.219598][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.229825][ T7] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 100.244782][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.255231][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 100.280238][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 100.339465][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.355450][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.368494][ T7] usb 3-1: Product: syz [ 100.373917][ T7] usb 3-1: Manufacturer: syz [ 100.401424][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 100.424394][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 100.464566][ T7] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 100.488703][ T7] cdc_wdm 3-1:1.0: Unknown control protocol [ 100.591399][ T4946] fuse: Bad value for 'group_id' [ 100.733919][ T4950] loop7: detected capacity change from 0 to 7 [ 101.109540][ T7] usb 5-1: USB disconnect, device number 4 [ 101.119884][ T4958] device syzkaller0 entered promiscuous mode [ 101.147189][ T4958] tipc: Enabled bearer , priority 0 [ 101.187022][ T4958] tipc: Resetting bearer [ 101.202143][ T4957] tipc: Resetting bearer [ 101.221323][ T4957] tipc: Disabling bearer [ 101.542882][ T4970] device syzkaller0 entered promiscuous mode [ 101.801560][ T4977] fuse: Bad value for 'fd' [ 102.467375][ T7] usb 1-1: USB disconnect, device number 4 [ 102.805706][ T4316] usb 3-1: USB disconnect, device number 3 [ 103.125373][ T129] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.165377][ T41] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.355676][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 103.360846][ T41] usb 4-1: Using ep0 maxpacket: 32 [ 103.373018][ T41] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 103.382212][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.417462][ T41] usb 4-1: config 0 has no interface number 0 [ 103.427927][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.444222][ T41] usb 4-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.465830][ T129] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 103.484482][ T41] usb 4-1: config 0 interface 89 has no altsetting 0 [ 103.492393][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.508267][ T129] usb 1-1: config 0 descriptor?? [ 103.516763][ T41] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 103.550261][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.584141][ T41] usb 4-1: Product: syz [ 103.605173][ T41] usb 4-1: Manufacturer: syz [ 103.629303][ T41] usb 4-1: SerialNumber: syz [ 103.655876][ T41] usb 4-1: config 0 descriptor?? [ 103.881711][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.895536][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.921740][ T129] ft260 0003:0403:6030.0006: item fetching failed at offset 0/2 [ 103.949507][ T129] ft260 0003:0403:6030.0006: failed to parse HID [ 103.980409][ T129] ft260: probe of 0003:0403:6030.0006 failed with error -22 [ 104.073819][ T5019] tipc: Enabling of bearer rejected, already enabled [ 104.255498][ T5021] fuse: Bad value for 'fd' [ 104.755291][ T129] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.955483][ T129] usb 5-1: Using ep0 maxpacket: 16 [ 105.003141][ T129] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 105.063951][ T129] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 105.110523][ T129] usb 5-1: Product: syz [ 105.137893][ T129] usb 5-1: Manufacturer: syz [ 105.180021][ T129] usb 5-1: SerialNumber: syz [ 105.205389][ T129] usb 5-1: config 0 descriptor?? [ 105.900030][ T129] usb 1-1: USB disconnect, device number 5 [ 105.949978][ T7] usb 4-1: USB disconnect, device number 6 [ 105.992234][ T5026] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 106.103916][ T5026] team0: Port device netdevsim0 added [ 106.114755][ T5029] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 106.185521][ T4314] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.278979][ T5029] team0: Port device netdevsim0 removed [ 106.343076][ T5029] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 106.406807][ T4314] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.454701][ T4314] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 106.465442][ T4314] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.478641][ T4314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 106.545517][ T5056] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 106.561693][ T4314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 106.611045][ T4314] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.635936][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.644152][ T4314] usb 3-1: Product: syz [ 106.648772][ T4314] usb 3-1: Manufacturer: syz [ 106.675485][ T4314] cdc_wdm 3-1:1.0: skipping garbage [ 106.680902][ T4314] cdc_wdm 3-1:1.0: skipping garbage [ 106.707433][ T4314] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 106.725482][ T4314] cdc_wdm 3-1:1.0: Unknown control protocol [ 107.059208][ T5062] tipc: Enabling of bearer rejected, already enabled [ 107.129214][ T5066] fuse: Unknown parameter 'group_id00000000000000000000' [ 107.491144][ T5077] IPVS: rr: FWM 3 0x00000003 - no destination available [ 107.505892][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 107.632512][ T129] usb 3-1: USB disconnect, device number 4 [ 107.708280][ T4314] usb 5-1: USB disconnect, device number 5 [ 108.105628][ T4316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.345372][ T4316] usb 4-1: Using ep0 maxpacket: 32 [ 108.354156][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.491364][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.571592][ T4316] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 108.640979][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.676857][ T4316] usb 4-1: config 0 descriptor?? [ 108.827644][ T5103] tipc: New replicast peer: 255.255.255.255 [ 108.834575][ T5103] tipc: Enabled bearer , priority 10 [ 109.132527][ T4316] ft260 0003:0403:6030.0007: item fetching failed at offset 0/2 [ 109.160192][ T4316] ft260 0003:0403:6030.0007: failed to parse HID [ 109.184026][ T4316] ft260: probe of 0003:0403:6030.0007 failed with error -22 [ 109.735799][ T5119] fuse: Invalid rootmode [ 109.945456][ T4314] tipc: Node number set to 3057621803 [ 110.189013][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.274395][ T5133] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 110.303475][ T5135] tipc: Enabling of bearer rejected, already enabled [ 110.391626][ T22] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.418230][ T22] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.452830][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.495521][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 110.531560][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 110.569387][ T22] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.576542][ T5141] tipc: Enabled bearer , priority 0 [ 110.602536][ T22] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.628456][ T22] usb 3-1: Product: syz [ 110.654215][ T22] usb 3-1: Manufacturer: syz [ 110.701148][ T22] cdc_wdm 3-1:1.0: skipping garbage [ 110.725108][ T22] cdc_wdm 3-1:1.0: skipping garbage [ 110.743467][ T5141] device syzkaller0 entered promiscuous mode [ 110.759864][ T5141] tipc: Resetting bearer [ 110.780008][ T22] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 110.800726][ T22] cdc_wdm 3-1:1.0: Unknown control protocol [ 110.864954][ T5140] tipc: Resetting bearer [ 111.271312][ T4316] usb 4-1: USB disconnect, device number 7 [ 113.648702][ T5140] tipc: Disabling bearer [ 113.736527][ T7] usb 3-1: USB disconnect, device number 5 [ 113.941669][ T5171] fuse: Invalid rootmode [ 114.059030][ T5176] device syzkaller0 entered promiscuous mode [ 114.097558][ T5181] fuse: Bad value for 'user_id' [ 114.132815][ T5176] tipc: Enabled bearer , priority 0 [ 114.159328][ T5176] tipc: Resetting bearer [ 114.174264][ T5175] tipc: Resetting bearer [ 114.211965][ T5175] tipc: Disabling bearer [ 114.254151][ T5185] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 114.481738][ T5198] netlink: 'syz.3.244': attribute type 11 has an invalid length. [ 115.186066][ T5205] fuse: Bad value for 'fd' [ 116.705099][ T5208] tipc: Enabled bearer , priority 0 [ 116.775482][ T5208] device syzkaller0 entered promiscuous mode [ 116.782450][ T5208] tipc: Resetting bearer [ 116.821325][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 116.854875][ T5207] tipc: Resetting bearer [ 118.099975][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.299625][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 118.319161][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.330331][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.340671][ T7] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 118.350261][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.367533][ T7] usb 1-1: config 0 descriptor?? [ 118.803933][ T7] ft260 0003:0403:6030.0008: item fetching failed at offset 0/2 [ 118.816744][ T7] ft260 0003:0403:6030.0008: failed to parse HID [ 118.823220][ T7] ft260: probe of 0003:0403:6030.0008 failed with error -22 [ 119.548135][ T5207] tipc: Disabling bearer [ 119.564429][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 119.869006][ T5230] fuse: Invalid rootmode [ 121.985234][ C1] sched: RT throttling activated [ 122.473508][ T5252] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.258'. [ 122.530232][ T5253] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 122.540770][ T129] usb 1-1: USB disconnect, device number 6 [ 122.652987][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 122.765329][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.820563][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 122.874002][ T5268] device syzkaller0 entered promiscuous mode [ 122.965612][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 122.975573][ T7] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 122.994599][ T7] usb 4-1: config 0 has no interface number 0 [ 123.002637][ T7] usb 4-1: config 0 interface 89 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 123.031338][ T7] usb 4-1: config 0 interface 89 has no altsetting 0 [ 123.055077][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 123.071375][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.080281][ T7] usb 4-1: Product: syz [ 123.099539][ T7] usb 4-1: Manufacturer: syz [ 123.115329][ T7] usb 4-1: SerialNumber: syz [ 123.146056][ T7] usb 4-1: config 0 descriptor?? [ 123.191842][ T5279] fuse: Bad value for 'rootmode' [ 123.382793][ T5255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.399299][ T5255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.626006][ T5287] fuse: Bad value for 'fd' [ 125.632185][ T129] usb 4-1: USB disconnect, device number 8 [ 126.245296][ T4315] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.352914][ T5315] device syzkaller0 entered promiscuous mode [ 126.435328][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 126.447220][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.485317][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.524495][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.553137][ T4315] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 126.592143][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.618290][ T4315] usb 4-1: config 0 descriptor?? [ 126.624932][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 126.686995][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.687620][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 126.706600][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.728702][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.745104][ T14] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.761132][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.782726][ T14] usb 5-1: config 0 descriptor?? [ 127.031069][ T4315] ft260 0003:0403:6030.0009: item fetching failed at offset 0/2 [ 127.039323][ T4315] ft260 0003:0403:6030.0009: failed to parse HID [ 127.045754][ T4315] ft260: probe of 0003:0403:6030.0009 failed with error -22 [ 127.195180][ T14] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 127.209715][ T14] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 127.400379][ T14] usb 5-1: USB disconnect, device number 6 [ 127.449307][ T5325] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.457675][ T5325] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 127.471640][ T5325] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 127.479918][ T5325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.486814][ T5325] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 127.495077][ T5325] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 127.503919][ T5325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.511193][ T5325] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 127.518507][ T5325] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 127.526104][ T5325] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.532200][ T5325] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 127.548952][ T5325] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 127.557094][ T5325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.563266][ T5325] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.571604][ T5325] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 128.235474][ T4314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.412279][ T5350] netlink: 'syz.4.288': attribute type 11 has an invalid length. [ 128.566488][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 128.577576][ T4314] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.641246][ T4314] usb 2-1: config 0 has no interface number 0 [ 128.668236][ T4314] usb 2-1: config 0 interface 184 has no altsetting 0 [ 128.704689][ T4314] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.757228][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.798268][ T4314] usb 2-1: Product: syz [ 128.808303][ T5355] device syzkaller0 entered promiscuous mode [ 128.824609][ T4314] usb 2-1: Manufacturer: syz [ 128.853902][ T4314] usb 2-1: SerialNumber: syz [ 128.871321][ T4314] usb 2-1: config 0 descriptor?? [ 128.895365][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.905864][ T4314] smsc75xx v1.0.0 [ 128.952189][ T129] usb 4-1: USB disconnect, device number 9 [ 129.120652][ T5360] netlink: 36 bytes leftover after parsing attributes in process `syz.3.292'. [ 129.164631][ T5360] netlink: 36 bytes leftover after parsing attributes in process `syz.3.292'. [ 129.408778][ T5366] fuse: Unknown parameter 'use00000000000000000000' [ 129.422083][ T5343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.286'. [ 129.535397][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.541598][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.541625][ T4273] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.616076][ T4273] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.178668][ T4316] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.378718][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.400976][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.435541][ T4316] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.483070][ T4316] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.506068][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.537558][ T4316] usb 4-1: config 0 descriptor?? [ 130.962064][ T4316] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 130.975294][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 130.996007][ T4316] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 131.162934][ T4316] usb 4-1: USB disconnect, device number 10 [ 131.403137][ T5385] fido_id[5385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 131.486475][ T5391] device syzkaller0 entered promiscuous mode [ 131.498716][ T4314] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 131.526655][ T4314] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 131.545051][ T4314] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 131.577861][ T4314] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 131.593809][ T4314] usb 2-1: USB disconnect, device number 5 [ 131.611507][ T5396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.305'. [ 131.615580][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 131.620749][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 131.626549][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 131.644960][ T5396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.305'. [ 131.695550][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 131.881644][ T5400] fuse: Unknown parameter 'use00000000000000000000' [ 132.234688][ T5419] tipc: Enabling of bearer rejected, failed to enable media [ 132.271878][ T5419] device syzkaller0 entered promiscuous mode [ 132.381493][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 132.381509][ T26] audit: type=1804 audit(1772577785.484:108): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.313" name="/newroot/68/file0" dev="fuse" ino=1 res=1 errno=0 [ 132.818490][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824904][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.096264][ T5442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.320'. [ 133.125277][ T4315] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 133.168457][ T5442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.320'. [ 133.223337][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 133.233302][ T5444] device hsr_slave_0 left promiscuous mode [ 133.240590][ T5444] device hsr_slave_1 left promiscuous mode [ 133.316958][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.348615][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.393324][ T5446] fuse: Unknown parameter 'use00000000000000000000' [ 133.420720][ T4315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.447028][ T4315] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.481356][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.549541][ T4315] usb 4-1: config 0 descriptor?? [ 133.983106][ T4315] usbhid 4-1:0.0: can't add hid device: -71 [ 133.998161][ T4315] usbhid: probe of 4-1:0.0 failed with error -71 [ 134.050389][ T4315] usb 4-1: USB disconnect, device number 11 [ 134.500880][ T26] audit: type=1804 audit(1772577787.614:109): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.331" name="/newroot/71/file0" dev="fuse" ino=1 res=1 errno=0 [ 134.616651][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.807967][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 134.814848][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.829225][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.843810][ T22] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 134.860005][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.872388][ T22] usb 3-1: config 0 descriptor?? [ 135.288289][ T22] ft260 0003:0403:6030.000C: item fetching failed at offset 0/2 [ 135.355134][ T22] ft260 0003:0403:6030.000C: failed to parse HID [ 135.404097][ T22] ft260: probe of 0003:0403:6030.000C failed with error -22 [ 135.475941][ T5492] fuse: Unknown parameter 'user_i00000000000000000000' [ 135.490946][ T22] usb 3-1: USB disconnect, device number 6 [ 136.481351][ T5512] tipc: Enabling of bearer rejected, already enabled [ 136.629815][ T5515] device syzkaller0 entered promiscuous mode [ 136.735361][ T4315] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.788576][ T5519] fuse: Unknown parameter 'user_i00000000000000000000' [ 136.955941][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.979817][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.006293][ T4315] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.038493][ T4315] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.084130][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.099582][ T4315] usb 3-1: config 0 descriptor?? [ 137.522073][ T4315] usbhid 3-1:0.0: can't add hid device: -71 [ 137.528243][ T4315] usbhid: probe of 3-1:0.0 failed with error -71 [ 137.565721][ T4315] usb 3-1: USB disconnect, device number 7 [ 138.392662][ T5552] device syzkaller0 entered promiscuous mode [ 138.613397][ T5559] tipc: Enabling of bearer rejected, failed to enable media [ 138.724919][ T5565] device syzkaller0 entered promiscuous mode [ 138.936830][ T5560] device ip6gre1 entered promiscuous mode [ 139.976397][ T5588] device syzkaller0 entered promiscuous mode [ 140.036345][ T5588] tipc: Enabled bearer , priority 0 [ 140.068418][ T5588] tipc: Resetting bearer [ 140.095080][ T5587] tipc: Resetting bearer [ 140.138279][ T5587] tipc: Disabling bearer [ 140.355868][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 140.451062][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.488956][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.511720][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.710366][ T5597] device syzkaller0 entered promiscuous mode [ 140.742146][ T5604] tipc: Enabling of bearer rejected, already enabled [ 140.777404][ T5603] fuse: Unknown parameter 'user_id00000000000000000000' [ 140.904602][ T5610] device syzkaller0 entered promiscuous mode [ 141.470731][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029f4dc00: rx timeout, send abort [ 141.971139][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029f4fc00: rx timeout, send abort [ 141.980097][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029f4dc00: abort rx timeout. Force session deactivation [ 142.479507][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029f4fc00: abort rx timeout. Force session deactivation [ 144.259146][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 144.293931][ T5637] tipc: Enabled bearer , priority 0 [ 144.317098][ T5632] device syzkaller0 entered promiscuous mode [ 144.506003][ T5632] tipc: Resetting bearer [ 144.563117][ T5632] tipc: Disabling bearer [ 144.589283][ T5661] loop7: detected capacity change from 0 to 7 [ 144.597835][ T5659] tipc: New replicast peer: 255.255.255.255 [ 144.636350][ T5659] tipc: Enabled bearer , priority 10 [ 144.688486][ T5663] fuse: Unknown parameter 'user_id00000000000000000000' [ 144.918048][ T26] audit: type=1326 audit(1772577798.034:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5668 comm="syz.0.389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc122f9c799 code=0x0 [ 145.484530][ T5684] device syzkaller0 entered promiscuous mode [ 145.757705][ T4315] tipc: Node number set to 2018759117 [ 146.071552][ T5696] loop7: detected capacity change from 0 to 7 [ 146.081072][ T5692] device syzkaller0 entered promiscuous mode [ 146.173086][ T5692] tipc: Enabled bearer , priority 0 [ 146.250477][ T5691] tipc: Resetting bearer [ 146.352481][ T5691] tipc: Disabling bearer [ 146.362703][ T5706] fuse: Unknown parameter 'user_id00000000000000000000' [ 146.580137][ T5714] device syzkaller0 entered promiscuous mode [ 148.557951][ T5752] device syzkaller0 entered promiscuous mode [ 148.659418][ T5752] tipc: Enabled bearer , priority 0 [ 148.738612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.747077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.795628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.809281][ T5751] tipc: Resetting bearer [ 148.867228][ T5751] tipc: Disabling bearer [ 148.961758][ T5758] device syzkaller0 entered promiscuous mode [ 153.410393][ T5797] device syzkaller0 entered promiscuous mode [ 153.422891][ T5821] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 153.486366][ T5821] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 153.576335][ T5824] tipc: Enabled bearer , priority 0 [ 153.584088][ T5824] device syzkaller0 entered promiscuous mode [ 153.675719][ T5824] tipc: Resetting bearer [ 153.699152][ T5823] tipc: Resetting bearer [ 153.760432][ T5823] tipc: Disabling bearer [ 153.803343][ T5831] device syzkaller0 entered promiscuous mode [ 154.146161][ T5845] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 154.637443][ T5854] device syzkaller0 entered promiscuous mode [ 155.124347][ T5866] tipc: Enabled bearer , priority 0 [ 155.133040][ T5866] device syzkaller0 entered promiscuous mode [ 155.187016][ T5869] netlink: 112 bytes leftover after parsing attributes in process `syz.1.446'. [ 155.258939][ T5866] tipc: Resetting bearer [ 155.277903][ T5865] tipc: Resetting bearer [ 155.339443][ T5865] tipc: Disabling bearer [ 155.539876][ T5873] team0: Device ipip0 is up. Set it down before adding it as a team port [ 155.690777][ T5875] device syzkaller0 entered promiscuous mode [ 155.954851][ T5883] fuse: Unknown parameter 'user_i00000000000000000000' [ 156.429525][ T5890] can0: slcan on pty28. [ 156.429817][ T5889] device syzkaller0 entered promiscuous mode [ 157.362952][ T5905] tipc: Enabling of bearer rejected, already enabled [ 157.624907][ T5917] device syzkaller0 entered promiscuous mode [ 158.166008][ T5880] can0 (unregistered): slcan off pty28. [ 158.634318][ T5935] device syzkaller0 entered promiscuous mode [ 159.134796][ T5955] tipc: Enabling of bearer rejected, already enabled [ 159.846902][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.057437][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.089765][ T5985] Cannot find del_set index 2 as target [ 160.102025][ T22] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 160.138709][ T22] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 160.170340][ T22] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 160.221102][ T22] usb 1-1: config 129 has no interface number 0 [ 160.245402][ T22] usb 1-1: config 129 has no interface number 1 [ 160.289834][ T22] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 160.390553][ T22] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 160.462722][ T22] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 160.570304][ T22] usb 1-1: config 129 interface 135 has no altsetting 0 [ 160.621519][ T5993] device syzkaller0 entered promiscuous mode [ 160.639447][ T22] usb 1-1: config 129 interface 5 has no altsetting 0 [ 160.694389][ T22] usb 1-1: string descriptor 0 read error: -22 [ 160.722007][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 160.826718][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.906823][ T22] usb 1-1: MIDIStreaming interface descriptor not found [ 161.236703][ T14] usb 1-1: USB disconnect, device number 7 [ 161.681979][ T6010] tipc: Enabling of bearer rejected, already enabled [ 162.006352][ T6023] fuse: Unknown parameter '0x0000000000000007' [ 162.612492][ T6039] device syzkaller0 entered promiscuous mode [ 162.870221][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.065382][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 163.072929][ T14] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 163.101181][ T14] usb 2-1: config 0 has no interface number 0 [ 163.119463][ T14] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.139890][ T14] usb 2-1: config 0 interface 89 has no altsetting 0 [ 163.160434][ T14] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 163.171863][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.193202][ T14] usb 2-1: Product: syz [ 163.199313][ T14] usb 2-1: Manufacturer: syz [ 163.204259][ T14] usb 2-1: SerialNumber: syz [ 163.229281][ T14] usb 2-1: config 0 descriptor?? [ 163.257617][ T14] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 163.270011][ T14] em28xx 2-1:0.89: Video interface 89 found: [ 163.462293][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.475730][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.641189][ T6059] tipc: Enabling of bearer rejected, already enabled [ 163.716404][ T6061] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 163.814886][ T6063] fuse: Unknown parameter '0x0000000000000007' [ 163.928588][ T14] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 164.553846][ T14] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 164.595520][ T14] em28xx 2-1:0.89: board has no eeprom [ 164.662968][ T6078] device syzkaller0 entered promiscuous mode [ 164.685388][ T14] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 164.702958][ T14] em28xx 2-1:0.89: analog set to bulk mode. [ 164.722113][ T4315] em28xx 2-1:0.89: Registering V4L2 extension [ 164.775710][ T14] usb 2-1: USB disconnect, device number 6 [ 164.798099][ T14] em28xx 2-1:0.89: Disconnecting em28xx [ 164.970984][ T4315] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 164.993873][ T4315] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 165.027252][ T4315] em28xx 2-1:0.89: No AC97 audio processor [ 165.095137][ T4315] usb 2-1: Decoder not found [ 165.138170][ T4315] em28xx 2-1:0.89: failed to create media graph [ 165.144490][ T4315] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 165.223679][ T4315] em28xx 2-1:0.89: Registering snapshot button... [ 165.242431][ T4315] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9 [ 165.265658][ T6089] device syzkaller0 entered promiscuous mode [ 165.326077][ T4315] em28xx 2-1:0.89: Remote control support is not available for this card. [ 165.342153][ T14] em28xx 2-1:0.89: Closing input extension [ 165.349797][ T14] em28xx 2-1:0.89: Deregistering snapshot button [ 165.496225][ T14] em28xx 2-1:0.89: Freeing device [ 165.871926][ T6103] tipc: Enabling of bearer rejected, already enabled [ 165.989884][ T6105] fuse: Unknown parameter '0x0000000000000007' [ 166.354493][ T6118] netlink: 44 bytes leftover after parsing attributes in process `syz.3.517'. [ 166.412477][ T6120] netlink: 'syz.3.517': attribute type 5 has an invalid length. [ 166.508028][ T6118] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.608828][ T6118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.625070][ T6118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.672636][ T6123] input: syz1 as /devices/virtual/input/input10 [ 166.735986][ T6128] fuse: Bad value for 'fd' [ 167.039717][ T6133] device syzkaller0 entered promiscuous mode [ 167.106375][ T4359] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 167.295392][ T4359] usb 4-1: Using ep0 maxpacket: 32 [ 167.301975][ T4359] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 167.327135][ T4359] usb 4-1: config 0 has no interface number 0 [ 167.348341][ T4359] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.358461][ T6135] syz.1.521 uses obsolete (PF_INET,SOCK_PACKET) [ 167.388210][ T4359] usb 4-1: config 0 interface 89 has no altsetting 0 [ 167.450339][ T4359] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 167.470160][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.492496][ T4359] usb 4-1: Product: syz [ 167.502276][ T4359] usb 4-1: Manufacturer: syz [ 167.509298][ T4359] usb 4-1: SerialNumber: syz [ 167.534644][ T4359] usb 4-1: config 0 descriptor?? [ 167.547081][ T4359] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 167.578151][ T4359] em28xx 4-1:0.89: Video interface 89 found: [ 167.749894][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.837592][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.871045][ T6139] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 168.324604][ T4359] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 168.376813][ T6147] netlink: 'syz.2.523': attribute type 11 has an invalid length. [ 168.566074][ T6150] tipc: Enabling of bearer rejected, already enabled [ 168.767116][ T6155] fuse: Unknown parameter '0x0000000000000007' [ 168.942613][ T4359] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 168.988116][ T4359] em28xx 4-1:0.89: board has no eeprom [ 169.105588][ T4359] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 169.123365][ T4359] em28xx 4-1:0.89: analog set to bulk mode. [ 169.159028][ T14] em28xx 4-1:0.89: Registering V4L2 extension [ 169.187146][ T4359] usb 4-1: USB disconnect, device number 12 [ 169.211214][ T4359] em28xx 4-1:0.89: Disconnecting em28xx [ 169.337629][ T14] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 169.356486][ T14] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 169.363535][ T14] em28xx 4-1:0.89: No AC97 audio processor [ 169.440083][ T14] usb 4-1: Decoder not found [ 169.490519][ T14] em28xx 4-1:0.89: failed to create media graph [ 169.555392][ T14] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 169.599723][ T14] em28xx 4-1:0.89: Registering snapshot button... [ 169.631685][ T14] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input11 [ 169.688291][ T14] em28xx 4-1:0.89: Remote control support is not available for this card. [ 169.735411][ T4359] em28xx 4-1:0.89: Closing input extension [ 169.741331][ T4359] em28xx 4-1:0.89: Deregistering snapshot button [ 169.943553][ T4359] em28xx 4-1:0.89: Freeing device [ 169.993318][ T6170] fuse: Bad value for 'rootmode' [ 170.134621][ T6172] device syzkaller0 entered promiscuous mode [ 170.751111][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'. [ 170.804777][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'. [ 170.867616][ T6182] device ip6gretap0 entered promiscuous mode [ 170.900722][ T6182] device syz_tun entered promiscuous mode [ 170.939906][ T6182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.987357][ T6182] Cannot create hsr debugfs directory [ 171.009809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.106874][ T6190] fuse: Unknown parameter '0x0000000000000007' [ 171.354310][ T6193] device syzkaller0 entered promiscuous mode [ 172.536055][ T6208] fuse: Bad value for 'rootmode' [ 172.577999][ T6207] device syzkaller0 entered promiscuous mode [ 172.629646][ T6210] netlink: 48 bytes leftover after parsing attributes in process `syz.4.544'. [ 172.666572][ T6210] netlink: 48 bytes leftover after parsing attributes in process `syz.4.544'. [ 172.780824][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 172.849885][ T6217] netlink: 'syz.0.545': attribute type 11 has an invalid length. [ 172.858793][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.874536][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.945622][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.093428][ T6228] fuse: Unknown parameter '0x0000000000000007' [ 173.120574][ T6230] device syzkaller0 entered promiscuous mode [ 173.335340][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.525972][ T22] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 173.540815][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.574418][ T22] usb 2-1: config 0 has no interfaces? [ 173.594882][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.636168][ T22] usb 2-1: config 0 has no interfaces? [ 173.652265][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.685291][ T4316] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.734265][ T22] usb 2-1: config 0 has no interfaces? [ 173.756796][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.918819][ T22] usb 2-1: config 0 has no interfaces? [ 173.937422][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.017723][ T22] usb 2-1: config 0 has no interfaces? [ 174.036393][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.052231][ T4316] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 174.061321][ T22] usb 2-1: config 0 has no interfaces? [ 174.070181][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.082466][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.103691][ T4316] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 174.114123][ T22] usb 2-1: config 0 has no interfaces? [ 174.120190][ T4316] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 174.129160][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.149269][ T4316] usb 5-1: Manufacturer: syz [ 174.181765][ T22] usb 2-1: config 0 has no interfaces? [ 174.195758][ T4316] usb 5-1: config 0 descriptor?? [ 174.216859][ T22] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 174.228876][ T22] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 174.237883][ T22] usb 2-1: Product: syz [ 174.242152][ T22] usb 2-1: Manufacturer: syz [ 174.247166][ T22] usb 2-1: SerialNumber: syz [ 174.258454][ T22] usb 2-1: config 0 descriptor?? [ 174.415413][ T4316] rc_core: IR keymap rc-hauppauge not found [ 174.421340][ T4316] Registered IR keymap rc-empty [ 174.446402][ T4316] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 174.479846][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.506148][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.514345][ T4316] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 174.738627][ T6255] fuse: Bad value for 'rootmode' [ 175.116806][ T6257] netlink: 48 bytes leftover after parsing attributes in process `syz.0.557'. [ 175.222091][ T6257] netlink: 48 bytes leftover after parsing attributes in process `syz.0.557'. [ 175.653715][ T6263] device syzkaller0 entered promiscuous mode [ 176.008571][ T6270] fuse: Unknown parameter 'fd0x0000000000000007' [ 176.314328][ T6275] fuse: Bad value for 'fd' [ 176.814912][ T4316] usb 5-1: USB disconnect, device number 7 [ 177.082055][ T14] usb 2-1: USB disconnect, device number 7 [ 177.170548][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 177.240280][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.349298][ T6292] fuse: Unknown parameter 'use00000000000000000000' [ 177.419122][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.451572][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.924714][ T6297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.569'. [ 177.955481][ T6297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.569'. [ 178.354429][ T6306] fuse: Unknown parameter 'fd0x0000000000000007' [ 178.504787][ T6308] fuse: Bad value for 'fd' [ 178.692112][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 178.943363][ T6323] fuse: Unknown parameter 'use00000000000000000000' [ 179.245431][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.277121][ T6328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.580'. [ 179.316847][ T6328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.580'. [ 179.437679][ T14] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 179.449543][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.626278][ T14] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 179.694573][ T14] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 179.726669][ T14] usb 3-1: Manufacturer: syz [ 179.801820][ T14] usb 3-1: config 0 descriptor?? [ 179.847252][ T6343] fuse: Bad value for 'fd' [ 179.856689][ T6339] fuse: Unknown parameter 'fd0x0000000000000007' [ 179.871639][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 179.984385][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.054059][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.077825][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.103147][ T6355] fuse: Unknown parameter 'use00000000000000000000' [ 180.112395][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.136220][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.266162][ T14] rc_core: IR keymap rc-hauppauge not found [ 180.273415][ T14] Registered IR keymap rc-empty [ 180.299261][ T14] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 180.322011][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 180.377497][ T14] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 181.342440][ T6374] netlink: 'syz.1.593': attribute type 11 has an invalid length. [ 182.542189][ T4315] usb 3-1: USB disconnect, device number 8 [ 182.832038][ T6398] tipc: Enabling of bearer rejected, already enabled [ 183.275323][ T4316] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.453583][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 183.485417][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 183.494877][ T4316] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 183.581830][ T4316] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 183.634587][ T4316] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.649526][ T6409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.676708][ T6409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.694432][ T4316] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.712870][ T6412] binder: BINDER_SET_CONTEXT_MGR already set [ 183.737722][ T6412] binder: 6411:6412 ioctl 4018620d 200000004a80 returned -16 [ 183.753209][ T4316] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.784350][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.239864][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.264684][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.276530][ T4316] usb 5-1: usb_control_msg returned -71 [ 184.282165][ T4316] usbtmc 5-1:16.0: can't read capabilities [ 184.302380][ T6419] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 184.309252][ T6419] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.321707][ T4316] usb 5-1: USB disconnect, device number 8 [ 184.339621][ T6419] vhci_hcd vhci_hcd.0: Device attached [ 184.398230][ T6420] vhci_hcd: connection closed [ 184.401515][ T4337] vhci_hcd: stop threads [ 184.418582][ T4337] vhci_hcd: release socket [ 184.427963][ T4337] vhci_hcd: disconnect device [ 185.222366][ T6438] tipc: Enabling of bearer rejected, already enabled [ 185.722512][ T6444] netlink: 'syz.0.613': attribute type 11 has an invalid length. [ 186.095334][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 186.101427][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 186.101479][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 186.107623][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 186.113541][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 186.885934][ T6462] device syzkaller0 entered promiscuous mode [ 187.279885][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 187.304574][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.327046][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.580046][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.588499][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.645270][ T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 188.815408][ T22] usb 3-1: device descriptor read/64, error -71 [ 188.828090][ T6487] fuse: Unknown parameter '0x0000000000000004' [ 189.095393][ T22] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 189.255279][ T22] usb 3-1: device descriptor read/64, error -71 [ 189.301421][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.361581][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.392137][ T22] usb usb3-port1: attempt power cycle [ 189.691355][ T6481] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.700957][ T6481] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.710158][ T6481] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.720486][ T6481] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.805360][ T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 189.831703][ T6496] tipc: Enabling of bearer rejected, already enabled [ 189.846039][ T22] usb 3-1: device descriptor read/8, error -71 [ 189.852509][ T6491] device syzkaller0 entered promiscuous mode [ 190.125302][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.156029][ T22] usb 3-1: device descriptor read/8, error -71 [ 190.277572][ T22] usb usb3-port1: unable to enumerate USB device [ 190.569401][ T6526] netlink: 'syz.1.636': attribute type 11 has an invalid length. [ 190.709570][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 191.309962][ T6535] fuse: Unknown parameter '0x0000000000000004' [ 191.829034][ T6543] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 191.914307][ T6543] netlink: 'syz.2.642': attribute type 2 has an invalid length. [ 192.479076][ T6550] tipc: Enabling of bearer rejected, already enabled [ 192.568284][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 192.696407][ T6552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.704107][ T6552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.753896][ T6555] device syzkaller0 entered promiscuous mode [ 193.146047][ T6559] fuse: Unknown parameter 'user_id00000000000000000000' [ 193.905455][ T4312] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.097089][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.108334][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.118478][ T4312] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.127977][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.156931][ T4312] usb 5-1: config 0 descriptor?? [ 194.262930][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269348][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.295283][ T4315] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 194.389420][ T4312] usbhid 5-1:0.0: can't add hid device: -71 [ 194.407431][ T4312] usbhid: probe of 5-1:0.0 failed with error -71 [ 194.439057][ T4312] usb 5-1: USB disconnect, device number 9 [ 194.465321][ T4315] usb 3-1: device descriptor read/64, error -71 [ 194.553803][ T6585] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 194.735331][ T4315] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 194.895561][ T4315] usb 3-1: device descriptor read/64, error -71 [ 195.026549][ T4315] usb usb3-port1: attempt power cycle [ 195.037448][ T4312] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 195.228969][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.248303][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.274948][ T4312] usb 5-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 195.319566][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.354559][ T4312] usb 5-1: config 0 descriptor?? [ 195.455379][ T4315] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 195.496582][ T4315] usb 3-1: device descriptor read/8, error -71 [ 195.776550][ T129] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.785299][ T4315] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 195.792845][ T4312] plantronics 0003:047F:3333.000D: unknown main item tag 0x0 [ 195.835928][ T4312] plantronics 0003:047F:3333.000D: No inputs registered, leaving [ 195.859271][ T4315] usb 3-1: device descriptor read/8, error -71 [ 195.926125][ T4312] plantronics 0003:047F:3333.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:3333] on usb-dummy_hcd.4-1/input0 [ 195.985772][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 195.994514][ T4315] usb usb3-port1: unable to enumerate USB device [ 196.003732][ T129] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 196.063355][ T129] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 196.083469][ T129] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 196.107762][ T4315] usb 5-1: USB disconnect, device number 10 [ 196.134252][ T129] usb 2-1: Product: syz [ 196.138598][ T129] usb 2-1: Manufacturer: syz [ 196.151433][ T129] usb 2-1: SerialNumber: syz [ 196.171701][ T129] usb 2-1: config 0 descriptor?? [ 196.188883][ T6605] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 196.298559][ T6608] fido_id[6608]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 196.531943][ T4315] usb 2-1: USB disconnect, device number 8 [ 196.651556][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 197.345504][ T129] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 197.549096][ T129] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 197.559180][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.571520][ T129] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 197.580913][ T129] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 197.589345][ T129] usb 4-1: Manufacturer: syz [ 197.596265][ T129] usb 4-1: config 0 descriptor?? [ 197.638204][ T6628] tipc: Enabling of bearer rejected, already enabled [ 197.785317][ T129] rc_core: IR keymap rc-hauppauge not found [ 197.791269][ T129] Registered IR keymap rc-empty [ 197.831728][ T129] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 197.872016][ T129] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 197.979565][ T6631] kvm: pic: non byte write [ 198.030821][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.094395][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.539457][ T6640] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 198.671772][ T6647] fuse: Unknown parameter 'user_id00000000000000000000' [ 199.415386][ T4359] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.585281][ T4359] usb 5-1: device descriptor read/64, error -71 [ 199.866950][ T4359] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.045950][ T4359] usb 5-1: device descriptor read/64, error -71 [ 200.162764][ T6662] tipc: Enabling of bearer rejected, already enabled [ 200.175693][ T4359] usb usb5-port1: attempt power cycle [ 200.495703][ T4312] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 200.603375][ T127] usb 4-1: USB disconnect, device number 13 [ 200.609443][ T4359] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 200.651573][ T6668] fuse: Unknown parameter 'fd0x0000000000000004' [ 200.670956][ T4359] usb 5-1: device descriptor read/8, error -71 [ 200.685552][ T4312] usb 1-1: Using ep0 maxpacket: 32 [ 200.706633][ T4312] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 200.741929][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.770846][ T4312] usb 1-1: Product: syz [ 200.780950][ T4312] usb 1-1: Manufacturer: syz [ 200.801287][ T4312] usb 1-1: SerialNumber: syz [ 200.807941][ T4312] usb 1-1: config 0 descriptor?? [ 200.847137][ T4312] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 200.902094][ T4312] dvb-usb: bulk message failed: -22 (4/0) [ 200.919502][ T4312] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 200.939892][ T4312] dvb-usb: bulk message failed: -22 (5/0) [ 200.946600][ T4312] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 200.947748][ T6674] fuse: Bad value for 'fd' [ 200.961585][ T4359] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 200.971068][ T4312] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.983971][ T4312] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 201.001096][ T4359] usb 5-1: device descriptor read/8, error -71 [ 201.002534][ T4312] usb 1-1: media controller created [ 201.049128][ T6664] dvb-usb: bulk message failed: -22 (7/0) [ 201.055181][ T6664] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 201.061125][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.080546][ T6664] ttusb2: i2c transfer failed. [ 201.128564][ T4359] usb usb5-port1: unable to enumerate USB device [ 201.154109][ T4312] usb 1-1: selecting invalid altsetting 3 [ 201.159932][ T4312] ttusb2: set interface to alts=3 failed [ 201.200565][ T4312] DVB: Unable to find symbol tda10086_attach() [ 201.207537][ T4312] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 201.216731][ T4312] dvb-usb: bulk message failed: -22 (4/0) [ 201.222487][ T4312] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.233523][ T4312] dvb-usb: bulk message failed: -22 (5/0) [ 201.256305][ T4312] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.268405][ T4312] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 201.306604][ T4312] usb 1-1: USB disconnect, device number 8 [ 201.327572][ T4312] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 201.993762][ T6684] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.048559][ T6684] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.109684][ T6684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.202611][ T6684] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.299651][ T6684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.665722][ T4359] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 202.690855][ T6693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.690'. [ 202.906385][ T4359] usb 2-1: Using ep0 maxpacket: 8 [ 202.917531][ T4359] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 203.041386][ T6693] netlink: 'syz.0.690': attribute type 5 has an invalid length. [ 203.086666][ T4359] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.254053][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.375360][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.105365][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.175353][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.265344][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.336280][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.784678][ T6702] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 204.972579][ T6708] fuse: Unknown parameter 'fd0x0000000000000004' [ 205.109274][ T6714] fuse: Bad value for 'fd' [ 205.215562][ T129] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 205.385314][ T129] usb 5-1: device descriptor read/64, error -71 [ 205.665453][ T129] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.862192][ T129] usb 5-1: device descriptor read/64, error -71 [ 205.916969][ T127] usb 2-1: USB disconnect, device number 9 [ 206.026153][ T129] usb usb5-port1: attempt power cycle [ 206.279907][ T6732] tipc: Enabling of bearer rejected, already enabled [ 206.395379][ T127] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 206.399340][ T6736] netlink: 44 bytes leftover after parsing attributes in process `syz.0.704'. [ 206.446042][ T129] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 206.469634][ T6739] netlink: 'syz.0.704': attribute type 5 has an invalid length. [ 206.496020][ T129] usb 5-1: device descriptor read/8, error -71 [ 206.575466][ T127] usb 2-1: device descriptor read/64, error -71 [ 206.633722][ T6742] fuse: Unknown parameter 'fd0x0000000000000004' [ 206.775401][ T129] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 206.828123][ T129] usb 5-1: device descriptor read/8, error -71 [ 206.871906][ T6748] fuse: Bad value for 'fd' [ 206.885394][ T127] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 206.950406][ T129] usb usb5-port1: unable to enumerate USB device [ 207.085466][ T127] usb 2-1: device descriptor read/64, error -71 [ 207.206247][ T127] usb usb2-port1: attempt power cycle [ 207.375539][ T4359] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.595807][ T4359] usb 1-1: Using ep0 maxpacket: 8 [ 207.609071][ T4359] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 207.635479][ T127] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.697814][ T127] usb 2-1: device descriptor read/8, error -71 [ 207.713032][ T4359] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.813899][ T4359] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.874463][ T4359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.005821][ T127] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 208.051500][ T4359] usbtmc 1-1:16.0: bulk endpoints not found [ 208.067234][ T127] usb 2-1: device descriptor read/8, error -71 [ 208.251421][ T127] usb usb2-port1: unable to enumerate USB device [ 210.279966][ T22] usb 1-1: USB disconnect, device number 9 [ 210.357751][ T6768] tipc: Enabling of bearer rejected, already enabled [ 210.373430][ T6771] netlink: 44 bytes leftover after parsing attributes in process `syz.1.716'. [ 210.484147][ T6771] netlink: 'syz.1.716': attribute type 5 has an invalid length. [ 210.513144][ T6776] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 210.620564][ T6771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.685641][ T6771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.135466][ T4312] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 211.215361][ T129] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 211.341048][ T4312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.359687][ T4312] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 211.368391][ T129] usb 2-1: device descriptor read/64, error -71 [ 211.416619][ T4312] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 211.431840][ T4312] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 211.462699][ T4312] usb 5-1: config 129 has no interface number 0 [ 211.469217][ T22] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 211.502746][ T4312] usb 5-1: config 129 has no interface number 1 [ 211.509211][ T4312] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 211.532041][ T4312] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 211.552308][ T4312] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 211.572619][ T4312] usb 5-1: config 129 interface 135 has no altsetting 0 [ 211.645311][ T22] usb 3-1: device descriptor read/64, error -71 [ 211.715317][ T129] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 211.995634][ T4359] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 213.143501][ T4312] usb 5-1: config 129 interface 5 has no altsetting 0 [ 213.237659][ T4312] usb 5-1: string descriptor 0 read error: -22 [ 213.245361][ T4312] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 213.254752][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.272198][ T4312] usb 5-1: MIDIStreaming interface descriptor not found [ 213.365371][ T22] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 213.376039][ T129] usb 2-1: device descriptor read/64, error -71 [ 213.386645][ T4359] usb 4-1: Using ep0 maxpacket: 8 [ 213.399964][ T4359] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 213.430833][ T4359] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.454427][ T4359] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.464344][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.495559][ T129] usb usb2-port1: attempt power cycle [ 213.513566][ T4359] usbtmc 4-1:16.0: bulk endpoints not found [ 213.515349][ T22] usb 3-1: device descriptor read/64, error -71 [ 213.546395][ T4312] usb 5-1: USB disconnect, device number 19 [ 213.665429][ T22] usb usb3-port1: attempt power cycle [ 213.818370][ T6816] tipc: Enabling of bearer rejected, already enabled [ 213.925340][ T129] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 213.972697][ T129] usb 2-1: device descriptor read/8, error -71 [ 214.075387][ T22] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 214.126064][ T22] usb 3-1: device descriptor read/8, error -71 [ 214.956976][ T6838] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 215.234158][ T4313] usb 4-1: USB disconnect, device number 14 [ 215.276774][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 215.418499][ T6848] fuse: Unknown parameter '0x0000000000000004' [ 215.716410][ T6855] tipc: Enabling of bearer rejected, already enabled [ 216.975339][ T22] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 217.175373][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 217.182551][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.197737][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.213534][ T22] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 217.234909][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.776239][ T22] usb 4-1: config 0 descriptor?? [ 219.035437][ T4312] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 219.190587][ T22] ft260 0003:0403:6030.000E: item fetching failed at offset 0/2 [ 219.235344][ T4312] usb 3-1: Using ep0 maxpacket: 8 [ 219.270645][ T4312] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 219.281392][ T22] ft260 0003:0403:6030.000E: failed to parse HID [ 219.295362][ T22] ft260: probe of 0003:0403:6030.000E failed with error -22 [ 219.327912][ T4312] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.379398][ T4312] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.390534][ T4313] usb 4-1: USB disconnect, device number 15 [ 219.415505][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.476343][ T4312] usbtmc 3-1:16.0: bulk endpoints not found [ 219.719744][ T6892] fuse: Unknown parameter '0x0000000000000004' [ 219.869485][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 220.112465][ T6903] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 221.105144][ T129] usb 3-1: USB disconnect, device number 21 [ 221.237365][ T6927] tipc: Enabled bearer , priority 0 [ 221.251558][ T6927] device syzkaller0 entered promiscuous mode [ 221.308901][ T6926] tipc: Resetting bearer [ 221.356746][ T6926] tipc: Disabling bearer [ 221.962864][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 223.485458][ T4359] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 223.696986][ T4359] usb 2-1: Using ep0 maxpacket: 8 [ 223.707949][ T4359] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 223.844728][ T4359] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.993533][ T4359] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.146575][ T4359] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 224.334792][ T4359] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.486526][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.769629][ T4359] usbtmc 2-1:16.0: bulk endpoints not found [ 226.312020][ T6973] tipc: Enabled bearer , priority 0 [ 226.348673][ T4315] usb 2-1: USB disconnect, device number 18 [ 226.351252][ T6973] device syzkaller0 entered promiscuous mode [ 226.374785][ T6973] tipc: Resetting bearer [ 226.409777][ T6970] tipc: Resetting bearer [ 226.477486][ T6970] tipc: Disabling bearer [ 226.652774][ T6981] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 229.015523][ T4312] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 230.395445][ T4312] usb 3-1: Using ep0 maxpacket: 8 [ 230.402152][ T4312] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 230.433141][ T4312] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.433351][ T7029] tipc: Enabled bearer , priority 0 [ 230.455166][ T4312] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.485307][ T4312] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 230.516696][ T4312] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.541092][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.551327][ T7032] device syzkaller0 entered promiscuous mode [ 230.588644][ T4312] usbtmc 3-1:16.0: bulk endpoints not found [ 230.666310][ T7029] tipc: Resetting bearer [ 230.705851][ T7028] tipc: Resetting bearer [ 230.776166][ T7028] tipc: Disabling bearer [ 230.821517][ T26] audit: type=1326 audit(1772577883.934:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d56b9c799 code=0x0 [ 231.912378][ T7062] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 232.183374][ T4312] usb 3-1: USB disconnect, device number 22 [ 232.314684][ T7069] device syzkaller0 entered promiscuous mode [ 233.278354][ T7077] tipc: Enabled bearer , priority 0 [ 233.325145][ T7077] device syzkaller0 entered promiscuous mode [ 233.407240][ T7080] tipc: Resetting bearer [ 233.447978][ T7076] tipc: Resetting bearer [ 233.503232][ T7076] tipc: Disabling bearer [ 234.505727][ T4315] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 237.255515][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 237.265543][ T4315] usb 4-1: device descriptor read/all, error -71 [ 237.484359][ T7119] tipc: Enabled bearer , priority 0 [ 237.498225][ T7119] device syzkaller0 entered promiscuous mode [ 237.525023][ T7119] tipc: Resetting bearer [ 237.538062][ T7118] tipc: Resetting bearer [ 237.572898][ T7118] tipc: Disabling bearer [ 238.498271][ T7133] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 238.941148][ T7141] device syzkaller0 entered promiscuous mode [ 239.405297][ T4255] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 239.515396][ T4315] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 240.819636][ T4255] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.840693][ T4255] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 240.862617][ T4255] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 240.885361][ T4315] usb 1-1: Using ep0 maxpacket: 8 [ 240.894453][ T4315] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.924707][ T4255] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 240.945465][ T4315] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.968287][ T4255] usb 3-1: config 129 has no interface number 0 [ 240.979480][ T4255] usb 3-1: config 129 has no interface number 1 [ 240.986447][ T4315] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 240.997399][ T4255] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 241.011201][ T4315] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.024467][ T4255] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 241.036012][ T4315] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.045358][ T4255] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 241.062026][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.070223][ T4255] usb 3-1: config 129 interface 135 has no altsetting 0 [ 241.086190][ T4315] usbtmc 1-1:16.0: bulk endpoints not found [ 241.092885][ T4255] usb 3-1: config 129 interface 5 has no altsetting 0 [ 241.120735][ T4255] usb 3-1: string descriptor 0 read error: -22 [ 241.128286][ T4255] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 241.142725][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.174800][ T4255] usb 3-1: MIDIStreaming interface descriptor not found [ 241.265398][ T7105] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 241.422036][ T41] usb 3-1: USB disconnect, device number 23 [ 241.466975][ T7105] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.479484][ T7105] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 241.495605][ T7105] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.504806][ T7105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.532325][ T7105] usb 5-1: config 0 descriptor?? [ 241.548262][ T7105] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 242.634915][ T7163] tipc: Enabled bearer , priority 0 [ 242.702836][ T7163] device syzkaller0 entered promiscuous mode [ 242.719524][ T4315] usb 1-1: USB disconnect, device number 10 [ 242.754576][ T7163] tipc: Resetting bearer [ 242.791716][ T7162] tipc: Resetting bearer [ 242.822601][ T7162] tipc: Disabling bearer [ 243.436079][ T4315] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 243.633941][ T4315] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 243.665656][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.703975][ T4315] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 243.715377][ T4315] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 243.723724][ T4315] usb 3-1: Manufacturer: syz [ 243.745990][ T4315] usb 3-1: config 0 descriptor?? [ 243.760831][ T7191] device syzkaller0 entered promiscuous mode [ 243.833769][ T22] usb 5-1: USB disconnect, device number 20 [ 243.943946][ T7196] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 243.980365][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.991872][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.005554][ T4315] rc_core: IR keymap rc-hauppauge not found [ 244.013019][ T4315] Registered IR keymap rc-empty [ 244.031247][ T4315] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 244.077772][ T4315] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 246.620097][ T4255] usb 3-1: USB disconnect, device number 24 [ 247.258401][ T7235] device syzkaller0 entered promiscuous mode [ 247.425319][ T4255] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 247.648724][ T4255] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.669992][ T4255] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 247.717127][ T4255] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.749836][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.779566][ T4255] usb 4-1: config 0 descriptor?? [ 247.803267][ T4255] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 247.924344][ T7248] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 248.515319][ T4255] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 248.742970][ T4255] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 248.760599][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.822126][ T4255] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 248.885545][ T4255] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 248.934332][ T4255] usb 1-1: Manufacturer: syz [ 248.964215][ T4255] usb 1-1: config 0 descriptor?? [ 249.198798][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.305691][ T4255] rc_core: IR keymap rc-hauppauge not found [ 249.316672][ T4255] Registered IR keymap rc-empty [ 249.351851][ T4255] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 249.397844][ T4255] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 249.837768][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.217596][ T41] usb 4-1: USB disconnect, device number 18 [ 251.464123][ T7294] device syzkaller0 entered promiscuous mode [ 251.792960][ T4255] usb 1-1: USB disconnect, device number 11 [ 252.200485][ T7312] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 252.355363][ T4255] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 252.548513][ T4255] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.565666][ T7317] netlink: 44 bytes leftover after parsing attributes in process `syz.1.875'. [ 252.588438][ T4255] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 252.619811][ T7318] netlink: 'syz.1.875': attribute type 5 has an invalid length. [ 252.628989][ T4255] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.653488][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.654734][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.688089][ T4255] usb 1-1: config 0 descriptor?? [ 252.699418][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.721170][ T4255] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 254.432019][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 254.459134][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.474553][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.485942][ T4255] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 254.494248][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.688182][ T4255] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 254.701390][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.744241][ T4255] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 254.764541][ T4255] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 254.788384][ T4255] usb 5-1: Manufacturer: syz [ 254.808780][ T4255] usb 5-1: config 0 descriptor?? [ 254.965277][ T4255] rc_core: IR keymap rc-hauppauge not found [ 254.973917][ T4255] Registered IR keymap rc-empty [ 255.001704][ T4255] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 255.032968][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.057791][ T4255] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 255.072522][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.097437][ T7105] usb 1-1: USB disconnect, device number 12 [ 255.329651][ T7366] netlink: 44 bytes leftover after parsing attributes in process `syz.2.887'. [ 255.353185][ T7366] netlink: 'syz.2.887': attribute type 5 has an invalid length. [ 255.404909][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.431751][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.451280][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.707980][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.714547][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.203643][ T7377] kvm: pic: level sensitive irq not supported [ 256.233053][ T7377] kvm: pic: non byte write [ 256.341373][ T7380] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 256.367681][ T7377] kvm: pic: non byte write [ 257.056676][ T4315] usb 5-1: USB disconnect, device number 21 [ 257.795283][ T4315] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 258.008961][ T4315] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.035310][ T4315] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 258.091716][ T4315] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.142278][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.226199][ T4315] usb 3-1: config 0 descriptor?? [ 258.253004][ T7404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.898'. [ 258.288221][ T4315] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 258.304624][ T7404] netlink: 'syz.3.898': attribute type 5 has an invalid length. [ 258.383811][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.448454][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.195301][ T4312] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 260.389254][ T4312] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 260.401298][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.434061][ T4312] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 260.455076][ T4312] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 260.476853][ T4312] usb 4-1: Manufacturer: syz [ 260.504415][ T4312] usb 4-1: config 0 descriptor?? [ 260.594918][ T4315] usb 3-1: USB disconnect, device number 25 [ 260.705559][ T4312] rc_core: IR keymap rc-hauppauge not found [ 260.711707][ T4312] Registered IR keymap rc-empty [ 260.729072][ T4312] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 260.759708][ T7443] tipc: Enabling of bearer rejected, already enabled [ 260.773664][ T4312] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 262.175337][ T7455] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 262.835428][ T7461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.911'. [ 263.011443][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.051426][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.120080][ T129] usb 4-1: USB disconnect, device number 19 [ 263.463295][ T7473] tipc: Enabled bearer , priority 0 [ 263.530423][ T7473] device syzkaller0 entered promiscuous mode [ 263.598074][ T7473] tipc: Resetting bearer [ 263.621817][ T7472] tipc: Resetting bearer [ 263.670807][ T7472] tipc: Disabling bearer [ 264.399389][ T7486] tipc: Enabling of bearer rejected, already enabled [ 266.055310][ T4312] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.248661][ T4312] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 266.260593][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.275036][ T4312] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 266.287576][ T4312] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 266.296735][ T4312] usb 5-1: Manufacturer: syz [ 266.316776][ T4312] usb 5-1: config 0 descriptor?? [ 266.485459][ T4312] rc_core: IR keymap rc-hauppauge not found [ 266.491491][ T4312] Registered IR keymap rc-empty [ 266.512229][ T4312] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 266.528803][ T4312] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 267.252763][ T7522] can0: slcan on pty22. [ 268.036009][ T7527] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 268.767549][ T7515] can0 (unregistered): slcan off pty22. [ 269.002644][ T129] usb 5-1: USB disconnect, device number 22 [ 270.490995][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 272.195282][ T7105] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 272.435504][ T7105] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 272.451514][ T7105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.481374][ T7105] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 272.501961][ T7105] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 272.533892][ T7105] usb 2-1: Manufacturer: syz [ 272.555088][ T7105] usb 2-1: config 0 descriptor?? [ 272.835330][ T7105] rc_core: IR keymap rc-hauppauge not found [ 272.841323][ T7105] Registered IR keymap rc-empty [ 272.873398][ T7105] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 272.892427][ T7105] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 273.660504][ T7625] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 274.983576][ T4315] usb 2-1: USB disconnect, device number 19 [ 275.208174][ T7646] fuse: Bad value for 'fd' [ 275.508234][ T7642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.532143][ T7642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.548852][ T7642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.576238][ T7642] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.611969][ T7642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 276.215544][ T4312] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 276.417511][ T4312] usb 4-1: Using ep0 maxpacket: 32 [ 276.428301][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.459730][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.498118][ T4312] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 276.523812][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.567053][ T4312] usb 4-1: config 0 descriptor?? [ 276.895399][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.986257][ T4312] usbhid 4-1:0.0: can't add hid device: -71 [ 276.994356][ T4312] usbhid: probe of 4-1:0.0 failed with error -71 [ 277.031595][ T4312] usb 4-1: USB disconnect, device number 20 [ 277.535414][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.615416][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.621505][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 277.628224][ T4273] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.692783][ T7680] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 277.906920][ T7684] device syzkaller0 entered promiscuous mode [ 279.752382][ T7707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.761560][ T7707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.797165][ T7707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.805640][ T7707] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.838996][ T7707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.411318][ T7734] tipc: Enabled bearer , priority 0 [ 280.447992][ T7734] device syzkaller0 entered promiscuous mode [ 280.528378][ T7734] tipc: Resetting bearer [ 280.579386][ T7733] tipc: Resetting bearer [ 280.684627][ T7733] tipc: Disabling bearer [ 281.135299][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.286339][ T7747] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 281.395025][ T7751] netlink: 'syz.3.981': attribute type 11 has an invalid length. [ 281.785478][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.855399][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.855437][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 281.867594][ T4273] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.356244][ T7776] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.384327][ T7776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.416144][ T7776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 284.422378][ T7776] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.434166][ T7776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.085475][ T22] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 285.326380][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 285.333410][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.376128][ T7811] netlink: 'syz.0.996': attribute type 11 has an invalid length. [ 285.396726][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.431944][ T22] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 285.460480][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.489962][ T22] usb 5-1: config 0 descriptor?? [ 285.775395][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.865457][ T4312] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 285.915839][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 285.924661][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 285.944065][ T22] usb 5-1: USB disconnect, device number 23 [ 286.056985][ T4312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 286.093349][ T4312] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 286.167873][ T4312] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 286.223696][ T4312] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 286.253687][ T4312] usb 3-1: config 129 has no interface number 0 [ 286.285094][ T4312] usb 3-1: config 129 has no interface number 1 [ 286.305308][ T4312] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 286.347549][ T4312] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 286.416049][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.426172][ T4312] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 286.451345][ T4312] usb 3-1: config 129 interface 135 has no altsetting 0 [ 286.462443][ T4312] usb 3-1: config 129 interface 5 has no altsetting 0 [ 286.479117][ T4312] usb 3-1: string descriptor 0 read error: -22 [ 286.485813][ T4312] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 286.494952][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.503403][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 286.510012][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 286.516054][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.564367][ T4312] usb 3-1: MIDIStreaming interface descriptor not found [ 286.799473][ T7826] tipc: Enabling of bearer rejected, already enabled [ 287.332867][ T7831] tipc: Enabled bearer , priority 0 [ 287.383849][ T7831] device syzkaller0 entered promiscuous mode [ 287.419594][ T7831] tipc: Resetting bearer [ 287.435071][ T7830] tipc: Resetting bearer [ 287.461163][ T7830] tipc: Disabling bearer [ 288.653046][ T4315] usb 3-1: USB disconnect, device number 26 [ 289.056067][ T7860] tipc: Enabling of bearer rejected, already enabled [ 289.115655][ T4312] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 289.307448][ T4312] usb 1-1: Using ep0 maxpacket: 32 [ 289.324144][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.355324][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.375404][ T4312] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 289.404159][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.428785][ T4312] usb 1-1: config 0 descriptor?? [ 289.655333][ T41] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 289.835647][ T41] usb 2-1: device descriptor read/64, error -71 [ 289.905979][ T4312] usbhid 1-1:0.0: can't add hid device: -71 [ 289.913767][ T4312] usbhid: probe of 1-1:0.0 failed with error -71 [ 289.968306][ T4312] usb 1-1: USB disconnect, device number 13 [ 290.115401][ T41] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 290.170307][ T7875] tipc: Enabled bearer , priority 0 [ 290.188326][ T7875] device syzkaller0 entered promiscuous mode [ 290.275372][ T41] usb 2-1: device descriptor read/64, error -71 [ 290.287682][ T7875] tipc: Resetting bearer [ 290.298751][ T7874] tipc: Resetting bearer [ 290.331898][ T7874] tipc: Disabling bearer [ 290.406631][ T41] usb usb2-port1: attempt power cycle [ 290.785307][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 290.845334][ T41] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 290.885932][ T41] usb 2-1: device descriptor read/8, error -71 [ 290.994549][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 291.009313][ T22] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 291.025378][ T22] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 291.042828][ T22] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 291.055398][ T22] usb 1-1: config 129 has no interface number 0 [ 291.061894][ T22] usb 1-1: config 129 has no interface number 1 [ 291.085638][ T22] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 291.099490][ T22] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 291.110971][ T22] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 291.124568][ T22] usb 1-1: config 129 interface 135 has no altsetting 0 [ 291.131876][ T22] usb 1-1: config 129 interface 5 has no altsetting 0 [ 291.147468][ T22] usb 1-1: string descriptor 0 read error: -22 [ 291.160574][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 291.170484][ T41] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 291.203424][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.212172][ T41] usb 2-1: device descriptor read/8, error -71 [ 291.262434][ T22] usb 1-1: MIDIStreaming interface descriptor not found [ 291.345606][ T41] usb usb2-port1: unable to enumerate USB device [ 293.574287][ T4315] usb 1-1: USB disconnect, device number 14 [ 294.353837][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 294.397638][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.438745][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.455925][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.974514][ T7949] tipc: Enabling of bearer rejected, already enabled [ 295.745429][ T7105] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 295.925308][ T7105] usb 3-1: device descriptor read/64, error -71 [ 296.205383][ T7105] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 296.395361][ T7105] usb 3-1: device descriptor read/64, error -71 [ 296.525984][ T7105] usb usb3-port1: attempt power cycle [ 296.975356][ T7105] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 297.028019][ T7105] usb 3-1: device descriptor read/8, error -71 [ 297.325335][ T7105] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 297.370217][ T7105] usb 3-1: device descriptor read/8, error -71 [ 297.495483][ T7105] usb usb3-port1: unable to enumerate USB device [ 297.549868][ T7981] can0: slcan on pty28. [ 297.725936][ T41] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 297.788297][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 297.812582][ T7986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.839745][ T7986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.932912][ T41] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.949266][ T41] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 297.992086][ T41] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.024739][ T41] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.085008][ T41] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 298.110953][ T41] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.139494][ T41] usb 1-1: Product: syz [ 298.148359][ T41] usb 1-1: Manufacturer: syz [ 298.179418][ T41] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 298.418349][ T7975] can0 (unregistered): slcan off pty28. [ 298.635576][ T8005] tipc: Enabling of bearer rejected, already enabled [ 299.925406][ T7105] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 300.131913][ T7105] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 300.144447][ T7105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.188636][ T7105] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 300.219300][ T7105] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 300.243624][ T7105] usb 2-1: Manufacturer: syz [ 300.276030][ T7105] usb 2-1: config 0 descriptor?? [ 300.466188][ T7105] rc_core: IR keymap rc-hauppauge not found [ 300.475388][ T7105] Registered IR keymap rc-empty [ 300.495154][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.521111][ T4313] usb 1-1: USB disconnect, device number 15 [ 300.625127][ T7105] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 300.641292][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.651321][ T7105] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 301.045293][ T4313] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 301.247003][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.278700][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.329663][ T4313] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 301.374069][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.436070][ T4313] usb 1-1: config 0 descriptor?? [ 301.662345][ T4313] usbhid 1-1:0.0: can't add hid device: -71 [ 301.674197][ T4313] usbhid: probe of 1-1:0.0 failed with error -71 [ 301.716261][ T4313] usb 1-1: USB disconnect, device number 16 [ 302.335365][ T4313] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 302.537478][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.558707][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.566317][ T4348] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 302.581566][ T4313] usb 1-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 302.613297][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.644426][ T4313] usb 1-1: config 0 descriptor?? [ 302.766314][ T4348] usb 4-1: Using ep0 maxpacket: 32 [ 302.773593][ T4348] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 302.827238][ T4348] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 302.845053][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 302.869187][ T4348] usb 4-1: Product: syz [ 302.873407][ T4348] usb 4-1: Manufacturer: syz [ 302.890307][ T4348] usb 4-1: SerialNumber: syz [ 302.911026][ T4348] usb 4-1: config 0 descriptor?? [ 302.924137][ T8049] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 302.936007][ T41] usb 2-1: USB disconnect, device number 24 [ 302.960441][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 303.052992][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.071129][ T4313] plantronics 0003:047F:3333.000F: unknown main item tag 0x0 [ 303.080197][ T4313] plantronics 0003:047F:3333.000F: No inputs registered, leaving [ 303.101170][ T4313] plantronics 0003:047F:3333.000F: hiddev1,hidraw0: USB HID v0.00 Device [HID 047f:3333] on usb-dummy_hcd.0-1/input0 [ 303.118698][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.193876][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.322092][ T41] usb 4-1: USB disconnect, device number 21 [ 303.444157][ T4315] usb 1-1: USB disconnect, device number 17 [ 303.636273][ T8068] tipc: Enabling of bearer rejected, already enabled [ 303.986181][ T41] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 304.176852][ T41] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 304.189198][ T41] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 304.200059][ T41] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.209527][ T41] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.224968][ T41] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.234601][ T41] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.242976][ T41] usb 5-1: Product: syz [ 304.249296][ T41] usb 5-1: Manufacturer: syz [ 304.269689][ T41] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 306.765726][ T4312] usb 5-1: USB disconnect, device number 24 [ 306.959100][ T8110] tipc: Enabling of bearer rejected, already enabled [ 307.078036][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 307.092961][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.101343][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.297321][ T8118] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1076'. [ 307.356620][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.364423][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.218477][ T8123] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.225658][ T8123] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.234987][ T8123] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.250207][ T8123] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.272644][ T8123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.755343][ T4348] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 308.763196][ T4312] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 308.955390][ T4348] usb 5-1: device descriptor read/64, error -71 [ 308.987135][ T4312] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 309.012672][ T4312] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 309.026318][ T8150] tipc: Enabling of bearer rejected, already enabled [ 309.094893][ T4312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 309.167709][ T4312] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.225310][ T4348] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 309.278786][ T4312] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 309.321717][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 309.340130][ T4312] usb 2-1: Product: syz [ 309.344346][ T4312] usb 2-1: Manufacturer: syz [ 309.395413][ T4348] usb 5-1: device descriptor read/64, error -71 [ 309.405804][ T4312] cdc_wdm 2-1:1.0: skipping garbage [ 309.422684][ T4312] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 309.515479][ T4348] usb usb5-port1: attempt power cycle [ 309.535919][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.925311][ T4348] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 309.965921][ T4348] usb 5-1: device descriptor read/8, error -71 [ 310.027305][ T8160] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1089'. [ 310.200191][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 310.241893][ T4348] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 310.255754][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.261885][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.268915][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.277491][ T4348] usb 5-1: device descriptor read/8, error -71 [ 310.341197][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.395964][ T4348] usb usb5-port1: unable to enumerate USB device [ 311.043914][ T8183] tipc: Enabling of bearer rejected, already enabled [ 311.518306][ T41] usb 2-1: USB disconnect, device number 25 [ 311.564276][ T8194] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1101'. [ 311.594740][ T8194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1101'. [ 311.633167][ T8194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.645069][ T8194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.654821][ T8194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.676747][ T7105] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 311.925398][ T7105] usb 3-1: Using ep0 maxpacket: 32 [ 311.938859][ T7105] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.993372][ T7105] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.023029][ T7105] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 312.070598][ T7105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.121668][ T7105] usb 3-1: config 0 descriptor?? [ 312.470423][ T8206] device syzkaller0 entered promiscuous mode [ 312.752807][ T7105] usbhid 3-1:0.0: can't add hid device: -71 [ 312.767771][ T8211] tipc: Enabled bearer , priority 0 [ 312.774631][ T7105] usbhid: probe of 3-1:0.0 failed with error -71 [ 312.795132][ T7105] usb 3-1: USB disconnect, device number 31 [ 312.805756][ T8211] device syzkaller0 entered promiscuous mode [ 312.885054][ T8211] tipc: Resetting bearer [ 312.935108][ T8210] tipc: Resetting bearer [ 312.996424][ T8210] tipc: Disabling bearer [ 313.228326][ T8219] tipc: Enabling of bearer rejected, already enabled [ 313.519415][ T4315] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 313.548530][ T8231] device syzkaller0 entered promiscuous mode [ 313.735602][ T4315] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 313.753663][ T4315] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 313.771418][ T4315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 313.811314][ T4315] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.853156][ T4315] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 313.879256][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 313.891708][ T4315] usb 2-1: Product: syz [ 313.897961][ T4315] usb 2-1: Manufacturer: syz [ 313.909857][ T4315] cdc_wdm 2-1:1.0: skipping garbage [ 313.916332][ T4315] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 314.631438][ T8249] tipc: Enabled bearer , priority 0 [ 314.695779][ T8250] device syzkaller0 entered promiscuous mode [ 314.850415][ T8249] tipc: Resetting bearer [ 314.907442][ T8248] tipc: Resetting bearer [ 314.932523][ T8248] tipc: Disabling bearer [ 314.952246][ T8260] tipc: Enabling of bearer rejected, already enabled [ 315.115433][ T4315] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 315.305327][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 315.312651][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.355863][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.427601][ T4315] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 315.437168][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.470129][ T4315] usb 5-1: config 0 descriptor?? [ 315.763510][ T8272] device syzkaller0 entered promiscuous mode [ 316.090381][ T4315] usbhid 5-1:0.0: can't add hid device: -71 [ 316.098735][ T4315] usbhid: probe of 5-1:0.0 failed with error -71 [ 316.123465][ T4315] usb 5-1: USB disconnect, device number 29 [ 316.281074][ T41] usb 2-1: USB disconnect, device number 26 [ 316.887530][ T8294] tipc: Enabling of bearer rejected, already enabled [ 317.140214][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.149743][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.488325][ T8305] device syzkaller0 entered promiscuous mode [ 319.564099][ T8335] tipc: Enabling of bearer rejected, already enabled [ 319.805043][ T8338] device syzkaller0 entered promiscuous mode [ 320.254172][ T8345] device syzkaller0 entered promiscuous mode [ 320.544712][ T8350] tipc: Enabled bearer , priority 0 [ 320.557208][ T8350] device syzkaller0 entered promiscuous mode [ 320.596192][ T8350] tipc: Resetting bearer [ 320.610663][ T8349] tipc: Resetting bearer [ 320.656244][ T8349] tipc: Disabling bearer [ 321.384817][ T8374] device syzkaller0 entered promiscuous mode [ 321.673513][ T8382] device syzkaller0 entered promiscuous mode [ 324.714389][ T8411] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.739594][ T8411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.756146][ T8411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.764495][ T8411] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.772685][ T8411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.095450][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 326.736635][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.825541][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 326.825601][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.831573][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.857048][ T8464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 327.864648][ T8464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.890753][ T8464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 327.903126][ T8464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 327.909864][ T8464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.143961][ T8487] kvm: pic: single mode not supported [ 328.143983][ T8487] kvm: pic: level sensitive irq not supported [ 328.156231][ T8487] kvm: pic: non byte write [ 328.167273][ T8487] kvm: pic: non byte write [ 328.171967][ T8487] kvm: pic: single mode not supported [ 328.171982][ T8487] kvm: pic: level sensitive irq not supported [ 328.631689][ T8497] nvme_fabrics: missing parameter 'transport=%s' [ 328.646210][ T8497] nvme_fabrics: missing parameter 'nqn=%s' [ 329.299734][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 329.935319][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 329.941466][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 329.943820][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.947919][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.910838][ T8529] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1210'. [ 331.000993][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1210'. [ 331.088964][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.203644][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.335176][ T8581] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1226'. [ 334.373679][ T8581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1226'. [ 335.765729][ T4348] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 335.957104][ T4348] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 335.969075][ T4348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.994041][ T4348] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 336.025795][ T4348] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 336.063606][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.089214][ T4348] usb 4-1: Product: syz [ 336.111656][ T4348] usb 4-1: Manufacturer: syz [ 336.121706][ T4348] usb 4-1: SerialNumber: syz [ 336.348637][ T4348] usb 4-1: USB disconnect, device number 22 [ 337.575364][ T7105] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 337.776994][ T7105] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 337.818035][ T7105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.862726][ T7105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.874159][ T7105] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 337.911872][ T7105] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 337.979745][ T7105] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 338.025150][ T7105] usb 4-1: Manufacturer: syz [ 338.097361][ T7105] usb 4-1: config 0 descriptor?? [ 338.515594][ T7105] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 338.533087][ T7105] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 338.569179][ T7105] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 338.787922][ T4348] usb 4-1: USB disconnect, device number 23 [ 339.446917][ T8659] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 339.810180][ T8662] can0: slcan on pty20. [ 339.855455][ T4348] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 340.046941][ T4348] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 340.085332][ T4348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.141267][ T4348] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 340.166244][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.209796][ T4348] usb 4-1: Product: syz [ 340.214183][ T4348] usb 4-1: Manufacturer: syz [ 340.245369][ T4348] usb 4-1: SerialNumber: syz [ 340.489713][ T4348] usb 4-1: USB disconnect, device number 24 [ 340.640668][ T8652] can0 (unregistered): slcan off pty20. [ 342.055330][ T7105] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 342.276698][ T7105] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.432409][ T7105] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 342.489078][ T7105] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 342.558175][ T7105] usb 3-1: Product: syz [ 342.562357][ T7105] usb 3-1: Manufacturer: syz [ 342.590427][ T7105] usb 3-1: SerialNumber: syz [ 342.610856][ T7105] usb 3-1: config 0 descriptor?? [ 342.725924][ T7105] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 342.777262][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.845845][ T41] usb 3-1: USB disconnect, device number 32 [ 343.813633][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 345.096856][ T8752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.105598][ T8752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.122747][ T8752] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.132173][ T8752] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.178858][ T8752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.610750][ T8769] [ 345.613100][ T8769] ====================================================== [ 345.620103][ T8769] WARNING: possible circular locking dependency detected [ 345.627118][ T8769] syzkaller #0 Not tainted [ 345.631510][ T8769] ------------------------------------------------------ [ 345.638513][ T8769] syz.2.1272/8769 is trying to acquire lock: [ 345.644480][ T8769] ffff888076e02e58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 345.654135][ T8769] [ 345.654135][ T8769] but task is already holding lock: [ 345.661487][ T8769] ffff888077b0ce50 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 345.672360][ T8769] [ 345.672360][ T8769] which lock already depends on the new lock. [ 345.672360][ T8769] [ 345.682758][ T8769] [ 345.682758][ T8769] the existing dependency chain (in reverse order) is: [ 345.691756][ T8769] [ 345.691756][ T8769] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 345.700431][ T8769] down_write+0x36/0x60 [ 345.705101][ T8769] process_measurement+0x3a2/0x1c30 [ 345.710811][ T8769] ima_file_mmap+0x102/0x150 [ 345.715920][ T8769] __se_sys_remap_file_pages+0x559/0x7b0 [ 345.722065][ T8769] do_syscall_64+0x4c/0xa0 [ 345.726999][ T8769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.733410][ T8769] [ 345.733410][ T8769] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 345.740951][ T8769] __lock_acquire+0x2d07/0x7d10 [ 345.746314][ T8769] lock_acquire+0x1bb/0x4a0 [ 345.751351][ T8769] down_read_killable+0x4c/0x340 [ 345.756808][ T8769] mmap_read_lock_killable+0x1d/0x60 [ 345.762599][ T8769] lock_mm_and_find_vma+0x2b1/0x2f0 [ 345.768339][ T8769] do_user_addr_fault+0x2db/0xb10 [ 345.773879][ T8769] exc_page_fault+0x60/0x100 [ 345.778976][ T8769] asm_exc_page_fault+0x22/0x30 [ 345.784342][ T8769] fault_in_readable+0x13e/0x1f0 [ 345.789801][ T8769] fault_in_iov_iter_readable+0xbb/0x2e0 [ 345.795946][ T8769] generic_perform_write+0x3f8/0x5c0 [ 345.801737][ T8769] __generic_file_write_iter+0x148/0x2a0 [ 345.807883][ T8769] generic_file_write_iter+0xab/0x2e0 [ 345.813765][ T8769] vfs_write+0x4b1/0xa30 [ 345.818524][ T8769] ksys_write+0x14c/0x250 [ 345.823358][ T8769] do_syscall_64+0x4c/0xa0 [ 345.828286][ T8769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.834686][ T8769] [ 345.834686][ T8769] other info that might help us debug this: [ 345.834686][ T8769] [ 345.844910][ T8769] Possible unsafe locking scenario: [ 345.844910][ T8769] [ 345.852342][ T8769] CPU0 CPU1 [ 345.857703][ T8769] ---- ---- [ 345.863055][ T8769] lock(&sb->s_type->i_mutex_key#13); [ 345.868502][ T8769] lock(&mm->mmap_lock); [ 345.875381][ T8769] lock(&sb->s_type->i_mutex_key#13); [ 345.883345][ T8769] lock(&mm->mmap_lock); [ 345.887668][ T8769] [ 345.887668][ T8769] *** DEADLOCK *** [ 345.887668][ T8769] [ 345.895879][ T8769] 3 locks held by syz.2.1272/8769: [ 345.900966][ T8769] #0: ffff8880255a0ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 345.910178][ T8769] #1: ffff8880540b8460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 345.919057][ T8769] #2: ffff888077b0ce50 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 345.930355][ T8769] [ 345.930355][ T8769] stack backtrace: [ 345.936238][ T8769] CPU: 0 PID: 8769 Comm: syz.2.1272 Not tainted syzkaller #0 [ 345.943590][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.953640][ T8769] Call Trace: [ 345.956925][ T8769] [ 345.959858][ T8769] dump_stack_lvl+0x188/0x24e [ 345.964583][ T8769] ? load_image+0x400/0x400 [ 345.969509][ T8769] ? show_regs_print_info+0x12/0x12 [ 345.974697][ T8769] ? print_circular_bug+0x12b/0x1a0 [ 345.979910][ T8769] check_noncircular+0x296/0x330 [ 345.984848][ T8769] ? add_chain_block+0x940/0x940 [ 345.989786][ T8769] ? lockdep_lock+0xf1/0x1f0 [ 345.994374][ T8769] ? _find_first_zero_bit+0xcf/0x100 [ 345.999646][ T8769] __lock_acquire+0x2d07/0x7d10 [ 346.004581][ T8769] ? cmp_ex_search+0x1a/0x70 [ 346.009182][ T8769] ? verify_lock_unused+0x140/0x140 [ 346.014467][ T8769] ? bsearch+0x8a/0xb0 [ 346.018528][ T8769] ? search_extable+0xd0/0xd0 [ 346.023195][ T8769] ? copy_user_enhanced_fast_string+0x27/0x40 [ 346.029288][ T8769] ? search_extable+0x8c/0xd0 [ 346.033982][ T8769] ? trim_init_extable+0x3b0/0x3b0 [ 346.039098][ T8769] ? copy_user_enhanced_fast_string+0x27/0x40 [ 346.045159][ T8769] ? verify_lock_unused+0x140/0x140 [ 346.050350][ T8769] ? verify_lock_unused+0x140/0x140 [ 346.055536][ T8769] ? copy_user_enhanced_fast_string+0x27/0x40 [ 346.061598][ T8769] lock_acquire+0x1bb/0x4a0 [ 346.066189][ T8769] ? mmap_read_lock_killable+0x1d/0x60 [ 346.071645][ T8769] ? mark_lock+0x94/0x320 [ 346.075965][ T8769] ? read_lock_is_recursive+0x10/0x10 [ 346.081324][ T8769] ? cmp_ex_search+0x1a/0x70 [ 346.085902][ T8769] ? bsearch+0x8a/0xb0 [ 346.089964][ T8769] ? fault_in_readable+0x13e/0x1f0 [ 346.095445][ T8769] ? search_extable+0x8c/0xd0 [ 346.100121][ T8769] ? trim_init_extable+0x3b0/0x3b0 [ 346.105316][ T8769] ? mmap_read_lock_killable+0x1d/0x60 [ 346.110777][ T8769] down_read_killable+0x4c/0x340 [ 346.115722][ T8769] ? mmap_read_lock_killable+0x1d/0x60 [ 346.121164][ T8769] mmap_read_lock_killable+0x1d/0x60 [ 346.126435][ T8769] lock_mm_and_find_vma+0x2b1/0x2f0 [ 346.131623][ T8769] do_user_addr_fault+0x2db/0xb10 [ 346.136676][ T8769] exc_page_fault+0x60/0x100 [ 346.141267][ T8769] asm_exc_page_fault+0x22/0x30 [ 346.146107][ T8769] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 346.151816][ T8769] Code: d8 60 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 b7 60 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 9a 60 [ 346.171513][ T8769] RSP: 0018:ffffc9000570fab0 EFLAGS: 00050287 [ 346.177567][ T8769] RAX: ffffffff81be1469 RBX: 0000000000001000 RCX: 0000000000080000 [ 346.185526][ T8769] RDX: ffffc9000f632000 RSI: 00000000000446a2 RDI: 00000000000446a3 [ 346.193483][ T8769] RBP: 0000000000000000 R08: ffff888024bc0000 R09: 0000000000000002 [ 346.201585][ T8769] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000258000 [ 346.209543][ T8769] R13: 0000000000000000 R14: 0000200000257000 R15: 0000200000257000 [ 346.217502][ T8769] ? fault_in_readable+0x139/0x1f0 [ 346.222609][ T8769] fault_in_iov_iter_readable+0xbb/0x2e0 [ 346.228234][ T8769] generic_perform_write+0x3f8/0x5c0 [ 346.233512][ T8769] ? generic_file_direct_write+0x330/0x330 [ 346.239317][ T8769] ? __file_remove_privs+0x5f0/0x5f0 [ 346.244587][ T8769] ? rwsem_write_trylock+0x135/0x1c0 [ 346.249858][ T8769] ? clear_nonspinnable+0x60/0x60 [ 346.254867][ T8769] ? generic_write_checks_count+0x3d9/0x4c0 [ 346.260755][ T8769] __generic_file_write_iter+0x148/0x2a0 [ 346.266379][ T8769] generic_file_write_iter+0xab/0x2e0 [ 346.271740][ T8769] vfs_write+0x4b1/0xa30 [ 346.275971][ T8769] ? file_end_write+0x250/0x250 [ 346.280823][ T8769] ? __fget_files+0x43d/0x4b0 [ 346.285497][ T8769] ? __fdget_pos+0x2ae/0x360 [ 346.290080][ T8769] ? ksys_write+0x71/0x250 [ 346.294497][ T8769] ksys_write+0x14c/0x250 [ 346.298815][ T8769] ? __ia32_sys_read+0x80/0x80 [ 346.303570][ T8769] ? lockdep_hardirqs_on+0x94/0x140 [ 346.308757][ T8769] do_syscall_64+0x4c/0xa0 [ 346.313166][ T8769] ? clear_bhb_loop+0x60/0xb0 [ 346.317926][ T8769] ? clear_bhb_loop+0x60/0xb0 [ 346.322592][ T8769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.328574][ T8769] RIP: 0033:0x7fa69759c799 [ 346.332987][ T8769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.352586][ T8769] RSP: 002b:00007fa698404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.360987][ T8769] RAX: ffffffffffffffda RBX: 00007fa697816090 RCX: 00007fa69759c799 [ 346.368944][ T8769] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 346.376905][ T8769] RBP: 00007fa697632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 346.384899][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.392856][ T8769] R13: 00007fa697816128 R14: 00007fa697816090 R15: 00007ffd256c3ce8 [ 346.400820][ T8769] [ 346.415333][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.555282][ T4313] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 346.777381][ T4313] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 41325, setting to 1024 [ 346.798133][ T4313] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 346.859718][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.895642][ T4313] usb 5-1: Product: syz [ 346.899991][ T4313] usb 5-1: Manufacturer: syz [ 346.904597][ T4313] usb 5-1: SerialNumber: syz [ 347.127542][ T4313] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 347.134646][ T4313] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 347.142111][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.142131][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 347.150634][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 347.178867][ T4313] usb 5-1: USB disconnect, device number 30 [ 347.215487][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 347.387349][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory