last executing test programs: 6.793921046s ago: executing program 3 (id=3087): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 6.617332479s ago: executing program 3 (id=3091): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="30000000120001000000002000000010100000000c00000000000000000000002378e29f6a8a94751fa60f"], 0x30}], 0x1}, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.547893575s ago: executing program 3 (id=3096): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x8080000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x3, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x1, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) 5.547265956s ago: executing program 2 (id=3106): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) 4.786322597s ago: executing program 2 (id=3101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000f98000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x2, &(0x7f0000000540)=[@cr4={0x1, 0x40100}], 0x1) 4.56354622s ago: executing program 2 (id=3103): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) 4.423207442s ago: executing program 2 (id=3105): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/136, 0x88}], 0x2, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') lseek(r2, 0x80, 0x1) 4.050512338s ago: executing program 4 (id=3108): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x795, 0x7, 0x55595659, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x7}}) 3.9181035s ago: executing program 4 (id=3109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) 3.386123398s ago: executing program 3 (id=3111): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)}], 0x2) 2.905924526s ago: executing program 4 (id=3119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[]) 2.672263149s ago: executing program 2 (id=3121): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20008405) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001900290029bd7000fbdbdf2102201000fd"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000010000000000000008000b00000000002c001300e0000001007e00000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) 2.499545592s ago: executing program 4 (id=3123): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="30000000120001000000002000000010100000000c00000000000000000000002378e29f6a8a94751fa60f"], 0x30}], 0x1}, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.499291842s ago: executing program 2 (id=3124): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @int]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xbc44) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r11 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r11) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000083667d1040206402d14e01020301090212000100000000090400000090f19c00682072f4bdc2b37c0f825d4bc41bfc78abea69b70d16442fece8a5ffa968cec6bbf13ba3bdf6e6b3f6946e75baff68e9d72dc62478bd1351025e5dadb737783035f27537e3866da73cf95e605def0252f152d3905c2d1bf646b70a627e08a720b003ddf13c8ef80f5d226494fd"], 0x0) pwrite64(r12, 0x0, 0x0, 0x3) 2.322571714s ago: executing program 1 (id=3125): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r1) 2.185880397s ago: executing program 1 (id=3126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000608000840000000013c"], 0xc8}}, 0x0) 2.047592159s ago: executing program 1 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x30, 0x10, 0x401, 0xfffffffc, 0x1080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) 2.006501959s ago: executing program 1 (id=3128): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) write$dsp(r0, 0x0, 0x0) 1.474342588s ago: executing program 4 (id=3134): r0 = syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 1.351516479s ago: executing program 4 (id=3136): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffe, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x1ff, 0x38, 0x2004, 0x8, 0x0, 0x6, 0x0, 0x2}}) 1.035732934s ago: executing program 0 (id=3139): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) 1.035463654s ago: executing program 1 (id=3140): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x8695c3813a9bd78d}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x8000, 0xfff, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f0000002180)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='sys']) 883.293007ms ago: executing program 0 (id=3141): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff0500"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x80) 833.681557ms ago: executing program 0 (id=3142): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={0x0}}, 0xc000) 654.6949ms ago: executing program 0 (id=3143): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x100}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x2}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000000000000}, {0xcb29, 0xa, 0x53e8, 0x400000000020}, 0x1, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in=@loopback, 0x1502, 0x4, 0x2, 0x0, 0x7, 0x7, 0x10}}, 0xe8) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x12, 0x9, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x40010) 529.686492ms ago: executing program 0 (id=3144): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb77, 0x1011, 0x0, 0xa, 0x9, 0x3, 0xa4de36948e08189d}}) 309.730545ms ago: executing program 0 (id=3145): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="30000000120001000000002000000010100000000c00000000000000000000002378e29f6a8a94751fa60f"], 0x30}], 0x1}, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 279.249565ms ago: executing program 3 (id=3146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB]) 75.701478ms ago: executing program 3 (id=3147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x3, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x1, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) 0s ago: executing program 1 (id=3148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000280)) kernel console output (not intermixed with test programs): short (expected 74, got 45) [ 586.049760][ T4854] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 586.079997][ T4854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 586.106275][ T4854] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 586.121891][ T4854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 586.139712][ T4854] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.162197][ T4854] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.179890][ T4854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.203991][ T4854] usbtmc: probe of 5-1:16.0 failed with error -22 [ 586.908416][T11060] fuse: Bad value for 'fd' [ 586.954857][ T4416] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 587.145407][ T4416] usb 4-1: Using ep0 maxpacket: 16 [ 587.153038][ T4416] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 587.167217][ T4416] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 587.176806][ T4416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.185859][ T4416] usb 4-1: Product: syz [ 587.190341][ T4416] usb 4-1: Manufacturer: syz [ 587.195098][ T4416] usb 4-1: SerialNumber: syz [ 587.207676][ T4416] usb 4-1: config 0 descriptor?? [ 587.243908][ T7672] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 587.420306][ T4416] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 587.428165][ T4416] pegasus_notetaker: probe of 4-1:0.0 failed with error -22 [ 587.433903][ T7672] usb 1-1: Using ep0 maxpacket: 32 [ 587.440312][ T4416] usb 4-1: USB disconnect, device number 15 [ 587.461809][ T7672] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 587.472935][ T7672] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 587.489046][ T7672] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 587.499298][ T7672] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 587.508030][ T7672] usb 1-1: Product: syz [ 587.512621][ T7672] usb 1-1: Manufacturer: syz [ 587.517705][ T7672] usb 1-1: SerialNumber: syz [ 587.556132][ T7672] appletouch 1-1:1.0: Could not find int-in endpoint [ 587.562881][ T7672] appletouch: probe of 1-1:1.0 failed with error -5 [ 587.575489][ T7672] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 587.713213][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 587.759772][ T7672] usb 1-1: USB disconnect, device number 12 [ 588.756366][ T4416] usb 5-1: USB disconnect, device number 11 [ 589.629212][T11096] device bridge_slave_0 left promiscuous mode [ 589.636612][T11098] fuse: Bad value for 'fd' [ 589.650683][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.669870][T11096] device bridge_slave_1 left promiscuous mode [ 589.716048][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.745493][T11096] bond0: (slave bond_slave_0): Releasing backup interface [ 589.762084][T11096] bond0: (slave bond_slave_1): Releasing backup interface [ 589.780288][T11096] team0: Port device team_slave_0 removed [ 589.790187][T11096] team0: Port device team_slave_1 removed [ 589.943839][ T4854] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 589.954060][ T7672] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 590.144031][ T4854] usb 5-1: Using ep0 maxpacket: 32 [ 590.151218][ T4854] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 590.167342][ T4854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.200219][ T4854] usb 5-1: config 0 descriptor?? [ 590.210901][ T4854] as10x_usb: device has been detected [ 590.217900][ T7672] usb 4-1: Using ep0 maxpacket: 16 [ 590.237347][ T4854] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 590.259548][ T4854] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 590.401880][ T4854] as10x_usb: error during firmware upload part1 [ 590.422151][ T4854] Registered device nBox DVB-T Dongle [ 590.429371][ T4854] usb 5-1: USB disconnect, device number 12 [ 590.443933][ T129] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 590.478855][ T4854] Unregistered device nBox DVB-T Dongle [ 590.480080][ T4854] as10x_usb: device has been disconnected [ 590.562834][ T7672] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 590.571354][ T7672] usb 4-1: config 0 has no interface number 0 [ 590.578895][ T7672] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 590.589652][ T7672] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 590.612638][ T7672] usb 4-1: config 0 interface 41 has no altsetting 0 [ 590.634032][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 590.641489][ T129] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 590.665574][ T7672] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 590.673537][ T129] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.675468][ T7672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.698910][ T129] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 590.701097][ T7672] usb 4-1: Product: syz [ 590.714808][ T7672] usb 4-1: Manufacturer: syz [ 590.718441][ T129] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 590.722816][ T7672] usb 4-1: SerialNumber: syz [ 590.728142][ T129] usb 1-1: Product: syz [ 590.737260][ T129] usb 1-1: Manufacturer: syz [ 590.742173][ T129] usb 1-1: SerialNumber: syz [ 590.750127][ T7672] usb 4-1: config 0 descriptor?? [ 590.757027][ T129] appletouch 1-1:1.0: Could not find int-in endpoint [ 590.765453][ T129] appletouch: probe of 1-1:1.0 failed with error -5 [ 590.772375][T11099] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 590.776441][ T129] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 590.788338][T11099] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 590.960630][ T4854] usb 1-1: USB disconnect, device number 13 [ 591.024645][ T5573] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 591.067761][T11089] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 591.077331][T11089] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 591.214244][ T5573] usb 2-1: Using ep0 maxpacket: 8 [ 591.221338][ T5573] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 591.230326][ T5573] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 591.242844][ T5573] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 591.253607][ T5573] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 591.266142][ T5573] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 591.280005][ T5573] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.297136][ T5573] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.307004][ T5573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.343453][ T5573] usbtmc: probe of 2-1:16.0 failed with error -22 [ 591.647817][ T7672] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 592.061938][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1948'. [ 592.073030][T11130] fuse: Bad value for 'fd' [ 592.083804][ T7672] dm9601 4-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 592.117875][ T7672] sr9700: probe of 4-1:0.41 failed with error -71 [ 592.148874][ T7672] usb 4-1: USB disconnect, device number 16 [ 593.503862][ T129] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 593.715339][ T129] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 593.733973][ T129] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.750490][ T129] usb 4-1: New USB device found, idVendor=0471, idProduct=2088, bcdDevice=c6.66 [ 593.766774][ T7672] usb 2-1: USB disconnect, device number 9 [ 593.776147][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.820104][ T129] usb 4-1: config 0 descriptor?? [ 594.041920][ T129] usb 4-1: string descriptor 0 read error: -71 [ 594.081974][ T129] usb 4-1: USB disconnect, device number 17 [ 596.313842][ T4854] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 596.463733][ T4854] usb 3-1: device descriptor read/64, error -71 [ 596.744389][ T4854] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 596.923785][ T4854] usb 3-1: device descriptor read/64, error -71 [ 597.054307][ T4854] usb usb3-port1: attempt power cycle [ 597.483983][ T4854] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 597.534486][ T4854] usb 3-1: device descriptor read/8, error -71 [ 597.803721][ T4854] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 597.844447][ T4854] usb 3-1: device descriptor read/8, error -71 [ 597.963809][ T4854] usb usb3-port1: unable to enumerate USB device [ 598.405122][T11248] fuse: Unknown parameter '00000000000000000000' [ 599.543867][ T129] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 599.609764][T11280] tipc: Enabled bearer , priority 10 [ 599.743829][ T129] usb 3-1: Using ep0 maxpacket: 32 [ 599.750641][ T129] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 599.772792][T11286] fuse: Unknown parameter '00000000000000000000' [ 599.791185][ T129] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 599.837336][ T129] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 599.861518][ T129] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 599.885000][ T129] usb 3-1: Product: syz [ 599.897548][ T129] usb 3-1: Manufacturer: syz [ 599.910109][ T129] usb 3-1: SerialNumber: syz [ 599.940168][ T129] appletouch 3-1:1.0: Could not find int-in endpoint [ 599.956548][ T129] appletouch: probe of 3-1:1.0 failed with error -5 [ 599.971698][ T129] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 600.142318][ T4854] usb 3-1: USB disconnect, device number 13 [ 600.543745][ T129] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 600.703980][ T129] usb 5-1: device descriptor read/64, error -71 [ 600.973947][ T129] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 601.473402][ T129] usb 5-1: device descriptor read/64, error -71 [ 601.496225][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2015'. [ 601.605178][ T129] usb usb5-port1: attempt power cycle [ 602.023972][ T129] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 602.064524][ T129] usb 5-1: device descriptor read/8, error -71 [ 602.118603][T11322] fuse: Bad value for 'fd' [ 602.333795][ T129] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 602.374326][ T129] usb 5-1: device descriptor read/8, error -71 [ 602.493801][ T129] usb usb5-port1: unable to enumerate USB device [ 603.100754][T11348] fuse: Bad value for 'fd' [ 603.578925][T11360] fuse: Bad value for 'fd' [ 605.998961][T11412] fuse: Bad value for 'fd' [ 606.287113][T11422] fuse: Bad value for 'fd' [ 608.413416][T11463] fuse: Bad value for 'fd' [ 609.201721][ T4418] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 610.034976][ T4418] usb 5-1: Using ep0 maxpacket: 16 [ 610.042594][ T4418] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 610.051513][ T4447] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 610.066055][ T4418] usb 5-1: config 0 has no interface number 0 [ 610.103370][ T4418] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 610.122347][T11507] fuse: Bad value for 'fd' [ 610.127796][ T4418] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 610.147623][ T4418] usb 5-1: config 0 interface 41 has no altsetting 0 [ 610.244780][T11509] netlink: 'syz.0.2088': attribute type 13 has an invalid length. [ 611.437192][ T4418] usb 5-1: string descriptor 0 read error: -71 [ 611.447503][ T4418] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 611.531953][ T4418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.607852][ T4418] usb 5-1: config 0 descriptor?? [ 611.635129][ T4418] usb 5-1: can't set config #0, error -71 [ 611.680713][ T4418] usb 5-1: USB disconnect, device number 17 [ 611.867595][T11550] netlink: 'syz.2.2101': attribute type 13 has an invalid length. [ 612.422990][T11550] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.430345][T11550] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.167141][T11550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.207783][T11550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.245117][T11550] tipc: Resetting bearer [ 613.763478][T11550] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.773416][T11550] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.783963][T11550] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.793044][T11550] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.653846][T11622] netlink: 'syz.0.2126': attribute type 13 has an invalid length. [ 617.278931][T11665] netlink: 'syz.3.2139': attribute type 13 has an invalid length. [ 618.024869][T11698] fuse: Bad value for 'fd' [ 618.176039][T11705] netlink: 'syz.1.2152': attribute type 13 has an invalid length. [ 618.412651][T11709] fuse: Unknown parameter 'user_id00000000000000000000' [ 619.669708][T11742] netlink: 'syz.2.2163': attribute type 13 has an invalid length. [ 619.686746][T11744] fuse: Bad value for 'fd' [ 620.318000][T11772] netlink: 'syz.0.2176': attribute type 13 has an invalid length. [ 620.330350][T11773] program syz.4.2175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.440829][T11777] fuse: Bad value for 'fd' [ 621.046480][T11810] netlink: 'syz.0.2190': attribute type 13 has an invalid length. [ 621.176644][T11815] fuse: Bad value for 'fd' [ 621.461255][T11821] fuse: Bad value for 'fd' [ 622.113527][T11847] netlink: 'syz.2.2203': attribute type 13 has an invalid length. [ 622.314602][T11855] fuse: Bad value for 'fd' [ 623.455162][T11880] netlink: 'syz.0.2216': attribute type 13 has an invalid length. [ 623.933821][ T4418] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 624.120200][T11905] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2224'. [ 624.133838][ T4418] usb 5-1: Using ep0 maxpacket: 32 [ 624.141151][ T4418] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 624.168871][ T4418] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 624.201165][ T4418] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.222979][ T4418] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 624.232813][ T4418] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 624.243252][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.244679][ T4418] usb 5-1: Product: syz [ 624.249846][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.265057][ T4418] usb 5-1: Manufacturer: syz [ 624.269862][ T4418] usb 5-1: SerialNumber: syz [ 624.298575][ T4418] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input12 [ 624.489588][ T41] usb 5-1: USB disconnect, device number 18 [ 624.516768][ T41] appletouch 5-1:1.0: input: appletouch disconnected [ 625.875775][T11953] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2242'. [ 626.373949][ T41] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 626.553765][ T41] usb 4-1: Using ep0 maxpacket: 32 [ 626.560443][ T41] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 626.592170][ T41] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 626.603836][ T4854] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 626.632078][ T41] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.666894][ T41] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 626.698671][ T41] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 626.734584][ T41] usb 4-1: Product: syz [ 626.754362][ T41] usb 4-1: Manufacturer: syz [ 626.772223][ T41] usb 4-1: SerialNumber: syz [ 626.793680][ T4854] usb 5-1: Using ep0 maxpacket: 8 [ 626.801434][ T4854] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 626.828303][ T41] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 626.837915][ T4854] usb 5-1: config 16 has an invalid interface number: 48 but max is 0 [ 626.865337][ T4854] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 626.901426][ T4854] usb 5-1: config 16 has no interface number 0 [ 626.907976][ T4854] usb 5-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 626.931893][ T4854] usb 5-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 626.951002][ T4854] usb 5-1: config 16 interface 48 has no altsetting 0 [ 626.972449][ T4854] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 627.002133][ T4854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.029698][ T41] usb 4-1: USB disconnect, device number 18 [ 627.072310][ T41] appletouch 4-1:1.0: input: appletouch disconnected [ 627.237917][ T4854] usb 5-1: string descriptor 0 read error: -71 [ 627.257438][ T4854] usb 5-1: USB disconnect, device number 19 [ 628.770702][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 628.770717][ T26] audit: type=1326 audit(1750567067.818:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.2.2262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3b2f8e929 code=0x0 [ 629.144246][ T4854] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 629.333640][ T4854] usb 2-1: Using ep0 maxpacket: 32 [ 629.340811][ T4854] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 629.358179][ T4854] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 629.375756][ T4854] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.406482][ T4854] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 629.419955][ T4854] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 629.434914][ T4854] usb 2-1: Product: syz [ 629.441934][ T4854] usb 2-1: Manufacturer: syz [ 629.450691][ T4854] usb 2-1: SerialNumber: syz [ 629.474271][ T4854] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14 [ 629.686381][ T4854] usb 2-1: USB disconnect, device number 10 [ 629.789673][ T4854] appletouch 2-1:1.0: input: appletouch disconnected [ 630.553955][ T4854] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 631.355641][ T4854] usb 4-1: config 0 has no interfaces? [ 631.404075][ T4854] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 631.423649][ T4854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.478489][ T4854] usb 4-1: Product: syz [ 631.508576][ T4854] usb 4-1: Manufacturer: syz [ 631.534411][ T4854] usb 4-1: SerialNumber: syz [ 631.570166][ T4854] usb 4-1: config 0 descriptor?? [ 631.695761][T12058] fuse: Unknown parameter '0xffffffffffffffff' [ 632.009427][T12067] sctp: [Deprecated]: syz.2.2279 (pid 12067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.009427][T12067] Use struct sctp_sack_info instead [ 633.362343][T12097] fuse: Unknown parameter '0x0000000000000003' [ 634.208594][ T4854] usb 4-1: USB disconnect, device number 19 [ 636.679682][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2313'. [ 637.893833][ T4416] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 638.085534][ T4416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 638.097951][ T4416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 638.109735][ T4416] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 638.123979][ T4416] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 638.135733][ T4416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.160021][ T4416] usb 1-1: config 0 descriptor?? [ 638.168605][T12202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 638.471059][ T4416] usbhid 1-1:0.0: can't add hid device: -71 [ 638.479706][ T4416] usbhid: probe of 1-1:0.0 failed with error -71 [ 638.521079][ T4416] usb 1-1: USB disconnect, device number 14 [ 640.618595][T12271] fuse: Bad value for 'group_id' [ 640.793151][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 642.100888][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2360'. [ 642.328985][T12315] fuse: Bad value for 'group_id' [ 643.398408][ T129] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 643.419608][ T129] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 643.956276][T12340] fuse: Bad value for 'group_id' [ 644.532570][ T129] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 645.430726][T12372] fuse: Bad value for 'group_id' [ 645.557227][ T129] usb 5-1: config 0 has no interfaces? [ 645.577686][T12375] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2386'. [ 645.588294][ T129] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 645.603142][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.632125][T12375] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 645.648476][ T129] usb 5-1: Product: syz [ 645.652664][ T129] usb 5-1: Manufacturer: syz [ 645.672492][ T129] usb 5-1: SerialNumber: syz [ 645.727138][ T129] usb 5-1: config 0 descriptor?? [ 646.594163][ T4416] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 646.769367][T12412] fuse: Bad value for 'group_id' [ 646.795312][ T4416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 646.808297][ T4416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 646.820503][ T4416] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 646.847174][ T4416] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 646.888157][ T4416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.925639][ T4416] usb 4-1: config 0 descriptor?? [ 646.954952][T12407] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 647.188418][ T4416] usbhid 4-1:0.0: can't add hid device: -71 [ 647.195316][ T4416] usbhid: probe of 4-1:0.0 failed with error -71 [ 647.262123][ T4416] usb 4-1: USB disconnect, device number 20 [ 647.603964][ T4418] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 647.663047][ T4416] usb 5-1: USB disconnect, device number 20 [ 647.805791][ T4418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 647.824047][ T4418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 647.845530][ T4418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 647.874352][ T4418] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 647.893614][ T4418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.908358][ T4418] usb 2-1: config 0 descriptor?? [ 647.914418][T12423] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 648.169610][ T4418] usbhid 2-1:0.0: can't add hid device: -71 [ 648.178727][ T4418] usbhid: probe of 2-1:0.0 failed with error -71 [ 648.218885][ T4418] usb 2-1: USB disconnect, device number 11 [ 648.831288][T12467] kvm: pic: non byte write [ 649.925491][T12485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2419'. [ 650.040222][T12485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2419'. [ 650.143923][ T5573] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 650.211708][T12485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2419'. [ 650.333704][ T5573] usb 5-1: Using ep0 maxpacket: 8 [ 650.340437][ T5573] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 650.349491][ T5573] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 650.391103][ T5573] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 650.408148][ T5573] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 650.419144][ T5573] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 650.432584][ T5573] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 650.442749][ T5573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.472553][ T5573] usbtmc 5-1:16.0: bulk endpoints not found [ 651.912221][ T129] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 651.931855][ T129] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 651.941941][ T4418] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 652.135326][ T4418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 652.173348][ T4418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 652.249615][ T4418] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 652.340746][ T4418] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 652.376267][ T4418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.405989][ T4418] usb 1-1: config 0 descriptor?? [ 652.435011][T12519] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 652.670340][ T4418] usbhid 1-1:0.0: can't add hid device: -71 [ 652.680607][ T4418] usbhid: probe of 1-1:0.0 failed with error -71 [ 652.731577][ T4418] usb 1-1: USB disconnect, device number 15 [ 652.923368][ T129] usb 5-1: USB disconnect, device number 21 [ 653.497990][T12550] kvm: pic: non byte write [ 654.233920][ T4416] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 654.423744][ T4416] usb 3-1: Using ep0 maxpacket: 8 [ 654.432694][ T4416] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 654.458048][ T4416] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 654.492203][ T4416] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 654.537716][ T4416] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 654.576580][ T4416] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 654.622387][ T4416] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.657720][ T4416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.704277][ T4416] usbtmc 3-1:16.0: bulk endpoints not found [ 655.793862][ T4854] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 655.999725][ T4854] usb 5-1: config 0 has no interfaces? [ 656.016857][ T4854] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 656.027484][ T4854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.036535][ T4854] usb 5-1: Product: syz [ 656.040857][ T4854] usb 5-1: Manufacturer: syz [ 656.047965][ T4854] usb 5-1: SerialNumber: syz [ 656.061478][ T4854] usb 5-1: config 0 descriptor?? [ 657.000294][ T4418] usb 3-1: USB disconnect, device number 14 [ 657.133763][ T129] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 657.333882][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 657.343362][ T129] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 657.366290][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.423993][ T129] usb 1-1: Product: syz [ 657.441273][ T129] usb 1-1: Manufacturer: syz [ 657.462192][ T129] usb 1-1: SerialNumber: syz [ 657.500199][ T129] usb 1-1: config 0 descriptor?? [ 657.536727][ T129] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 658.035129][ T129] ssu100: probe of 1-1:0.0 failed with error -110 [ 658.709657][ T7672] usb 5-1: USB disconnect, device number 22 [ 659.164011][ T7672] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 659.354023][ T7672] usb 5-1: Using ep0 maxpacket: 8 [ 659.361532][ T7672] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 659.375793][ T7672] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 659.397540][ T7672] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 659.415551][ T7672] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 659.438357][ T7672] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 659.454778][ T7672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.472803][ T7672] usbtmc 5-1:16.0: bulk endpoints not found [ 659.947597][ T7672] usb 1-1: USB disconnect, device number 16 [ 660.075883][ T22] kworker/dying (22) used greatest stack depth: 14496 bytes left [ 660.121603][T12706] fuse: Unknown parameter 'group_i00000000000000000000' [ 660.413645][ T129] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 660.595852][ T129] usb 3-1: config 0 has no interfaces? [ 660.609812][ T129] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 660.649714][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.659690][ T129] usb 3-1: Product: syz [ 660.685661][ T129] usb 3-1: Manufacturer: syz [ 660.696106][ T129] usb 3-1: SerialNumber: syz [ 660.727827][ T129] usb 3-1: config 0 descriptor?? [ 660.762747][T12721] fuse: Unknown parameter 'grou00000000000000000000' [ 661.136207][T12733] fuse: Unknown parameter 'group_i00000000000000000000' [ 661.763631][ T4854] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 661.810955][ T129] usb 5-1: USB disconnect, device number 23 [ 661.907076][T12748] fuse: Unknown parameter 'grou00000000000000000000' [ 661.967436][ T4854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 662.015247][ T4854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 662.039165][ T4854] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 662.053839][ T4854] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 662.063294][ T4854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.091380][ T4854] usb 1-1: config 0 descriptor?? [ 662.097613][T12744] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 662.324911][ T4854] usbhid 1-1:0.0: can't add hid device: -71 [ 662.333978][ T4854] usbhid: probe of 1-1:0.0 failed with error -71 [ 662.353807][ T7672] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 662.366904][ T4854] usb 1-1: USB disconnect, device number 17 [ 662.545311][ T7672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.557214][ T7672] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 662.566660][ T7672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.577029][ T7672] usb 5-1: config 0 descriptor?? [ 662.790068][ T7672] usbhid 5-1:0.0: can't add hid device: -71 [ 662.796216][ T7672] usbhid: probe of 5-1:0.0 failed with error -71 [ 662.804382][ T7672] usb 5-1: USB disconnect, device number 24 [ 663.156399][ T129] usb 3-1: USB disconnect, device number 15 [ 663.297520][T12781] fuse: Unknown parameter 'grou00000000000000000000' [ 663.383887][ T7672] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 663.404811][ T7675] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 663.583876][ T7672] usb 5-1: Using ep0 maxpacket: 32 [ 663.591233][ T7672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.602387][ T7675] usb 1-1: Using ep0 maxpacket: 8 [ 663.607754][ T7672] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 663.617721][ T7672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.626841][ T7675] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 663.636860][ T7672] usb 5-1: config 0 descriptor?? [ 663.641893][ T7675] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 663.653745][ T7675] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 663.664031][ T7675] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 663.678793][ T7672] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 663.688281][ T7675] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 663.699753][ T7672] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 663.708122][ T7675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.721936][ T7675] usbtmc 1-1:16.0: bulk endpoints not found [ 663.885843][ T129] usb 5-1: USB disconnect, device number 25 [ 663.902239][ T129] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 665.043708][ T7675] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 665.380133][T12810] fuse: Unknown parameter 'group_id00000000000000000000' [ 665.398050][ T7675] usb 3-1: config 0 has no interfaces? [ 665.428186][ T7675] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 665.458163][T12812] fuse: Unknown parameter 'group_i00000000000000000000' [ 665.489014][ T7675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.504970][ T7675] usb 3-1: Product: syz [ 665.509949][ T7675] usb 3-1: Manufacturer: syz [ 665.516283][ T7675] usb 3-1: SerialNumber: syz [ 665.528733][ T7675] usb 3-1: config 0 descriptor?? [ 666.043818][ T7672] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 666.138594][ T129] usb 1-1: USB disconnect, device number 18 [ 666.225846][ T7672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 666.238461][T12834] SET target dimension over the limit! [ 666.244434][ T7672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 666.256342][ T7672] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 666.270134][ T7672] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 666.279536][ T7672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.290319][ T7672] usb 4-1: config 0 descriptor?? [ 666.296290][T12827] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 666.520855][ T7672] usbhid 4-1:0.0: can't add hid device: -71 [ 666.530909][ T7672] usbhid: probe of 4-1:0.0 failed with error -71 [ 666.574706][ T7672] usb 4-1: USB disconnect, device number 21 [ 667.222614][T12852] fuse: Unknown parameter 'group_id00000000000000000000' [ 667.277429][T12855] fuse: Unknown parameter 'group_i00000000000000000000' [ 667.674267][ T7672] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 667.708482][ T41] usb 3-1: USB disconnect, device number 16 [ 667.863982][ T7672] usb 1-1: Using ep0 maxpacket: 8 [ 667.870772][ T7672] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 667.879270][ T7672] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 667.890779][ T7672] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 667.901294][ T7672] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 667.914519][ T7672] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 667.924327][ T7672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.935664][ T7672] usbtmc 1-1:16.0: bulk endpoints not found [ 668.051071][T12879] fuse: Unknown parameter 'group_id00000000000000000000' [ 668.098903][T12881] fuse: Unknown parameter 'group_i00000000000000000000' [ 668.733940][ T129] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 668.923637][ T7672] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 668.925015][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 668.951469][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 668.970314][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 668.983270][ T129] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 668.992571][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.009095][ T129] usb 4-1: config 0 descriptor?? [ 669.019723][T12894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 669.126454][ T7672] usb 5-1: config 0 has no interfaces? [ 669.140312][ T7672] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 669.143632][ T4418] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 669.158895][ T7672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.167393][ T7672] usb 5-1: Product: syz [ 669.176733][ T7672] usb 5-1: Manufacturer: syz [ 669.181620][ T7672] usb 5-1: SerialNumber: syz [ 669.193511][ T7672] usb 5-1: config 0 descriptor?? [ 669.239170][ T129] usbhid 4-1:0.0: can't add hid device: -71 [ 669.249278][ T129] usbhid: probe of 4-1:0.0 failed with error -71 [ 669.272396][ T129] usb 4-1: USB disconnect, device number 22 [ 669.333868][ T4418] usb 3-1: Using ep0 maxpacket: 32 [ 669.341569][ T4418] usb 3-1: config 1 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.358114][ T4418] usb 3-1: config 1 interface 0 has no altsetting 0 [ 669.368192][ T4418] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 669.379031][ T4418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.391924][ T4418] usb 3-1: Product: syz [ 669.416697][ T4418] usb 3-1: Manufacturer: syz [ 669.425297][ T4418] usb 3-1: SerialNumber: syz [ 669.617314][T12907] fuse: Bad value for 'user_id' [ 669.646316][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.657270][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.684279][ T4418] usbhid 3-1:1.0: can't add hid device: -71 [ 669.690519][ T4418] usbhid: probe of 3-1:1.0 failed with error -71 [ 669.702226][ T4418] usb 3-1: USB disconnect, device number 17 [ 669.710647][T12909] fuse: Unknown parameter 'group_id00000000000000000000' [ 670.441818][ T4418] usb 1-1: USB disconnect, device number 19 [ 670.574971][T12932] IPVS: Scheduler module ip_vs_ not found [ 670.931814][T12943] fuse: Bad value for 'user_id' [ 670.988324][T12945] fuse: Unknown parameter 'group_id00000000000000000000' [ 671.249395][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2589'. [ 671.396942][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2589'. [ 671.583311][ T4416] usb 5-1: USB disconnect, device number 26 [ 671.907433][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2589'. [ 672.064472][ T129] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 672.263663][ T129] usb 3-1: Using ep0 maxpacket: 8 [ 672.270865][ T129] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 672.299949][ T129] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 672.357523][ T129] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 672.379426][ T129] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 672.400308][ T129] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.080878][ T129] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 673.105721][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.153144][ T129] usbtmc 3-1:16.0: bulk endpoints not found [ 673.170401][T12985] fuse: Unknown parameter 'group_id00000000000000000000' [ 673.717435][T13000] fuse: Bad value for 'fd' [ 673.853873][ T4416] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 674.086609][ T4416] usb 5-1: config 0 has no interfaces? [ 674.098644][ T4416] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 674.109658][ T4416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.118429][ T4416] usb 5-1: Product: syz [ 674.124506][ T4416] usb 5-1: Manufacturer: syz [ 674.130457][ T4416] usb 5-1: SerialNumber: syz [ 674.153518][ T4416] usb 5-1: config 0 descriptor?? [ 675.373842][ T7672] usb 3-1: USB disconnect, device number 18 [ 675.391066][T13021] fuse: Bad value for 'user_id' [ 675.607201][T13028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.683221][T13028] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.760724][T13028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.771401][T13028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.763884][ T4416] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 676.959389][ T4565] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.027427][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 677.038698][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 677.048383][ T4267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 677.055348][ T4416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 677.055376][ T4416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 677.055401][ T4416] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 677.055436][ T4416] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 677.055458][ T4416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.075288][ T4416] usb 1-1: config 0 descriptor?? [ 677.124006][T13053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 677.131366][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 677.140740][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 677.149585][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 677.168331][ T7755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 677.176010][ T7755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 677.183347][ T7755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 677.191261][ T7755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 677.199042][ T7755] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 677.206475][ T7755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 677.238635][ T5573] usb 5-1: USB disconnect, device number 27 [ 677.257197][ T4565] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.343316][ T4416] usbhid 1-1:0.0: can't add hid device: -71 [ 677.354486][ T4416] usbhid: probe of 1-1:0.0 failed with error -71 [ 677.369802][ T4416] usb 1-1: USB disconnect, device number 20 [ 677.421168][ T4565] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.489641][ T4565] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.763734][ T5573] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 678.063632][ T5573] usb 5-1: Using ep0 maxpacket: 8 [ 678.147382][ T5573] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 678.420959][ T5573] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 678.432563][ T5573] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 678.442959][ T5573] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 678.455700][ T5573] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.533860][ T5573] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 678.550491][ T5573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.581757][ T5573] usbtmc 5-1:16.0: bulk endpoints not found [ 679.025987][T13059] chnl_net:caif_netlink_parms(): no params data found [ 679.035827][ T4565] tipc: Disabling bearer [ 679.059164][ T4565] tipc: Left network mode [ 679.103070][T13075] fuse: Bad value for 'user_id' [ 679.273730][ T7755] Bluetooth: hci1: command 0x0409 tx timeout [ 679.460062][T13059] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.467378][T13059] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.476309][T13059] device bridge_slave_0 entered promiscuous mode [ 679.485456][T13059] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.492861][T13059] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.511351][T13059] device bridge_slave_1 entered promiscuous mode [ 679.693295][T13059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.739630][T13059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.831716][T13059] team0: Port device team_slave_0 added [ 679.907046][T13059] team0: Port device team_slave_1 added [ 680.072101][T13059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.093692][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.170625][T13059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.233248][T13059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.248691][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.284569][T13059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.417875][ T7672] usb 5-1: USB disconnect, device number 28 [ 680.723210][T13059] device hsr_slave_0 entered promiscuous mode [ 680.743326][T13059] device hsr_slave_1 entered promiscuous mode [ 680.778331][T13059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.797002][T13059] Cannot create hsr debugfs directory [ 680.953790][ T4416] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 680.998474][ T4565] device hsr_slave_0 left promiscuous mode [ 681.011192][ T4565] device hsr_slave_1 left promiscuous mode [ 681.153899][ T4416] usb 3-1: Using ep0 maxpacket: 8 [ 681.160982][ T4416] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 681.241214][ T4416] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 681.311553][ T4416] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 681.354554][ T7755] Bluetooth: hci1: command 0x041b tx timeout [ 681.411603][ T4416] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.456295][ T4416] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 681.517818][ T4416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.899869][ T4416] usb 3-1: GET_CAPABILITIES returned 0 [ 681.906584][ T4416] usbtmc 3-1:16.0: can't read capabilities [ 681.937334][T13142] fuse: Bad value for 'user_id' [ 682.138449][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 682.185557][T13117] usbtmc 3-1:16.0: Unable to send data, error -71 [ 682.296205][T13148] kvm: pic: non byte write [ 682.833835][ T5573] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 683.024961][ T5573] usb 5-1: Using ep0 maxpacket: 8 [ 683.031730][ T5573] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 683.040495][ T5573] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 683.054396][ T5573] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 683.066803][ T5573] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 683.079620][ T5573] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.095849][ T5573] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 683.106894][ T5573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.124733][ T5573] usbtmc 5-1:16.0: bulk endpoints not found [ 683.445727][ T7755] Bluetooth: hci1: command 0x040f tx timeout [ 683.691411][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 683.702983][T13165] usbtmc 3-1:16.0: Unable to send data, error -71 [ 683.736935][ T4565] bond0 (unregistering): Released all slaves [ 684.505363][ T7672] usb 3-1: USB disconnect, device number 19 [ 684.824887][T13059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 684.899254][T13059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 684.953487][T13059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 684.985175][T13059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 685.277410][T13059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.310171][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 685.333810][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.401626][T13059] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.424705][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 685.448852][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.463797][ T5573] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 685.477157][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.485735][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.513805][ T7755] Bluetooth: hci1: command 0x0419 tx timeout [ 685.526128][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 685.538371][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 685.549313][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.559644][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.566754][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.600239][ T7561] usb 5-1: USB disconnect, device number 29 [ 685.636507][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 685.656712][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 685.675518][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.681887][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.690778][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 685.693174][ T5573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 685.733916][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 685.733913][ T5573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 685.733942][ T5573] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 685.773057][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 685.800513][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.853662][ T5573] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 685.855971][T13059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.893198][ T5573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.922816][T13059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.944541][ T5573] usb 3-1: config 0 descriptor?? [ 685.949932][T13190] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.979496][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.996912][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 686.024997][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 686.064467][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 686.090057][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 686.126075][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 686.171568][ T5573] usbhid 3-1:0.0: can't add hid device: -71 [ 686.184583][ T5573] usbhid: probe of 3-1:0.0 failed with error -71 [ 686.259457][ T5573] usb 3-1: USB disconnect, device number 20 [ 687.041986][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 687.057926][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 687.091171][T13059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.136972][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 687.148304][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 687.189303][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 687.213171][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 687.267145][T13059] device veth0_vlan entered promiscuous mode [ 687.287645][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 687.305562][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 687.372839][T13059] device veth1_vlan entered promiscuous mode [ 687.439581][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 687.471307][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 687.528592][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 687.550287][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 687.573000][T13059] device veth0_macvtap entered promiscuous mode [ 687.590571][T13059] device veth1_macvtap entered promiscuous mode [ 687.672651][T13059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.706484][T13245] futex_wake_op: syz.2.2657 tries to shift op by -33; fix this program [ 687.716335][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 687.727569][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 687.736347][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 687.788523][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 687.842381][T13059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.852465][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 687.884949][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 687.909092][T13245] netdevsim netdevsim2: Direct firmware load for . [ 687.909092][T13245] failed with error -2 [ 687.921993][T13059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.936434][T13059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.965937][T13245] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 687.965937][T13245] [ 687.981713][T13059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.991713][T13059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.101589][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.120309][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.160481][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 688.181450][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.193430][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.212345][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 688.234103][ T41] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 688.335420][T13253] fuse: Bad value for 'fd' [ 688.465697][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 688.506970][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 688.563293][ T41] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 688.637632][ T41] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 688.685581][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.717763][ T41] usb 4-1: config 0 descriptor?? [ 688.725382][T13249] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 688.950321][ T41] usbhid 4-1:0.0: can't add hid device: -71 [ 688.963258][ T41] usbhid: probe of 4-1:0.0 failed with error -71 [ 689.011706][ T41] usb 4-1: USB disconnect, device number 23 [ 689.983901][ T129] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 690.042411][T13295] fuse: Bad value for 'fd' [ 690.173782][ T7561] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 690.196391][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 690.235310][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 690.284055][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 690.347849][ T129] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 690.363660][ T7561] usb 3-1: Using ep0 maxpacket: 16 [ 690.375057][ T7561] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.403748][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.432210][ T7561] usb 3-1: config 0 has no interfaces? [ 690.439786][ T129] usb 4-1: config 0 descriptor?? [ 690.465804][ T7561] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 690.482546][T13288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 690.507716][ T7561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.547619][ T7561] usb 3-1: config 0 descriptor?? [ 690.706582][ T129] usbhid 4-1:0.0: can't add hid device: -71 [ 690.722952][ T129] usbhid: probe of 4-1:0.0 failed with error -71 [ 690.799369][ T129] usb 4-1: USB disconnect, device number 24 [ 690.801761][ T5573] usb 3-1: USB disconnect, device number 21 [ 691.023637][ T7561] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 691.236487][ T7561] usb 1-1: config 0 has no interfaces? [ 691.261606][ T7561] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 691.301246][ T7561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.432572][ T7561] usb 1-1: Product: syz [ 691.535328][ T7561] usb 1-1: Manufacturer: syz [ 691.539987][ T7561] usb 1-1: SerialNumber: syz [ 691.617909][ T7561] usb 1-1: config 0 descriptor?? [ 692.150766][T13341] fuse: Bad value for 'fd' [ 692.304274][ T7672] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 692.495678][ T7672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 692.527553][ T7672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 692.573063][ T7672] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 692.606768][ T7672] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 692.618795][ T7672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.651352][ T7672] usb 3-1: config 0 descriptor?? [ 692.659449][T13335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 692.925863][ T7672] usbhid 3-1:0.0: can't add hid device: -71 [ 692.934965][ T7672] usbhid: probe of 3-1:0.0 failed with error -71 [ 692.970769][ T7672] usb 3-1: USB disconnect, device number 22 [ 693.724267][T13371] fuse: Bad value for 'fd' [ 694.184608][ T4416] usb 1-1: USB disconnect, device number 21 [ 694.394112][ T41] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 694.597691][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 694.630450][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 694.679238][ T41] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 694.710301][ T41] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 694.750653][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.760312][T13397] fuse: Bad value for 'fd' [ 694.790791][ T41] usb 3-1: config 0 descriptor?? [ 694.814739][T13386] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 695.155282][ T41] usbhid 3-1:0.0: can't add hid device: -71 [ 695.173853][ T41] usbhid: probe of 3-1:0.0 failed with error -71 [ 695.231984][ T41] usb 3-1: USB disconnect, device number 23 [ 695.620408][T13415] fuse: Invalid rootmode [ 696.223365][T13431] fuse: Bad value for 'fd' [ 696.453834][ T7672] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 696.654237][ T7672] usb 4-1: config 0 has no interfaces? [ 696.683691][ T7672] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 696.705599][ T7672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.725999][ T7672] usb 4-1: Product: syz [ 696.747995][ T7672] usb 4-1: Manufacturer: syz [ 696.789954][ T7672] usb 4-1: SerialNumber: syz [ 696.817747][ T7672] usb 4-1: config 0 descriptor?? [ 697.271774][T13453] fuse: Invalid rootmode [ 697.703924][ T7672] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 697.894576][ T7672] usb 5-1: Using ep0 maxpacket: 16 [ 697.902553][ T7672] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.967016][T13470] netlink: 'syz.1.2711': attribute type 12 has an invalid length. [ 697.979887][ T7672] usb 5-1: config 0 has no interfaces? [ 697.986742][ T7672] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 698.016806][T13472] fuse: Invalid rootmode [ 698.024627][ T7672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.050923][ T7672] usb 5-1: config 0 descriptor?? [ 698.883241][ T4416] usb 5-1: USB disconnect, device number 30 [ 699.576553][ T41] usb 4-1: USB disconnect, device number 25 [ 699.792413][T13490] fuse: Invalid rootmode [ 700.073323][T13500] xt_NFQUEUE: number of total queues is 0 [ 700.329661][T13508] fuse: Invalid rootmode [ 700.581178][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2728'. [ 701.533689][ T41] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 701.633804][ T5573] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 701.759653][ T41] usb 5-1: config 0 has no interfaces? [ 701.833729][ T5573] usb 2-1: Using ep0 maxpacket: 16 [ 701.839699][ T41] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 701.850464][ T5573] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.862801][T13537] fuse: Bad value for 'rootmode' [ 701.870789][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.900898][ T5573] usb 2-1: config 0 has no interfaces? [ 701.917602][ T41] usb 5-1: Product: syz [ 701.921796][ T41] usb 5-1: Manufacturer: syz [ 701.935821][ T5573] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 701.953682][ T41] usb 5-1: SerialNumber: syz [ 701.960992][ T5573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.977402][ T41] usb 5-1: config 0 descriptor?? [ 702.029848][ T5573] usb 2-1: config 0 descriptor?? [ 702.330082][T13547] fuse: Invalid rootmode [ 702.546808][ T5573] usb 2-1: USB disconnect, device number 12 [ 702.772247][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'. [ 702.979993][T13573] fuse: Bad value for 'rootmode' [ 702.994993][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2741'. [ 704.706180][ T4416] usb 5-1: USB disconnect, device number 31 [ 705.128477][T13590] fuse: Bad value for 'rootmode' [ 705.662526][T13600] fuse: Bad value for 'rootmode' [ 705.985717][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 706.813828][ T4416] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 706.941691][T13627] fuse: Bad value for 'rootmode' [ 707.053181][ T4416] usb 5-1: config 0 has no interfaces? [ 707.078609][ T4416] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 707.104724][ T4416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.139146][ T4416] usb 5-1: Product: syz [ 707.151156][ T4416] usb 5-1: Manufacturer: syz [ 707.168583][ T4416] usb 5-1: SerialNumber: syz [ 707.189704][ T4416] usb 5-1: config 0 descriptor?? [ 707.603714][ T4416] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 707.798824][ T4416] usb 3-1: config 0 has no interfaces? [ 707.816120][T13643] fuse: Unknown parameter 'use00000000000000000000' [ 707.823163][ T4416] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 707.844944][ T4416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.867892][ T4416] usb 3-1: Product: syz [ 707.877789][ T4416] usb 3-1: Manufacturer: syz [ 707.900032][ T4416] usb 3-1: SerialNumber: syz [ 707.919975][ T4416] usb 3-1: config 0 descriptor?? [ 709.302315][T13658] input: syz1 as /devices/virtual/input/input15 [ 709.424719][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2776'. [ 710.590315][T13675] fuse: Unknown parameter 'use00000000000000000000' [ 711.058891][ T4416] usb 5-1: USB disconnect, device number 32 [ 711.277760][T13686] netlink: 'syz.3.2786': attribute type 1 has an invalid length. [ 711.300706][T13686] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 711.470177][ T7561] usb 3-1: USB disconnect, device number 24 [ 711.564071][ T4416] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 711.609475][T13696] fuse: Unknown parameter 'use00000000000000000000' [ 711.687752][T13700] fuse: Unknown parameter 'use00000000000000000000' [ 711.758113][ T4416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 711.770369][ T4416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 711.783234][ T4416] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 711.798664][ T4416] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 711.808229][ T4416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.819642][ T4416] usb 5-1: config 0 descriptor?? [ 711.825362][T13679] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 712.048853][ T4416] usbhid 5-1:0.0: can't add hid device: -71 [ 712.056577][ T4416] usbhid: probe of 5-1:0.0 failed with error -71 [ 712.066156][ T4416] usb 5-1: USB disconnect, device number 33 [ 712.173834][ T41] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 712.367592][ T41] usb 3-1: config 0 has no interfaces? [ 712.386609][ T41] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 712.435267][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.501934][ T41] usb 3-1: Product: syz [ 712.520031][ T41] usb 3-1: Manufacturer: syz [ 712.537185][ T41] usb 3-1: SerialNumber: syz [ 712.556422][ T41] usb 3-1: config 0 descriptor?? [ 712.606747][T13715] input: syz1 as /devices/virtual/input/input16 [ 713.031380][T13726] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 713.042937][T13726] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 713.386188][T13737] fuse: Unknown parameter 'user_i00000000000000000000' [ 713.619988][T13742] fuse: Unknown parameter 'use00000000000000000000' [ 713.732166][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 714.163629][ T7561] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 714.263682][ T4416] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 714.366389][ T7561] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 714.402531][ T7561] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 714.462235][T13764] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2813'. [ 714.483920][ T7561] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 714.535031][ T7561] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 714.548170][ T4416] usb 1-1: config 0 has no interfaces? [ 714.605681][ T7561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.637577][ T4416] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 714.658379][ T4416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.671874][ T7561] usb 5-1: config 0 descriptor?? [ 714.697987][T13755] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 714.713476][ T4416] usb 1-1: Product: syz [ 714.739358][ T4416] usb 1-1: Manufacturer: syz [ 714.761363][ T4416] usb 1-1: SerialNumber: syz [ 714.797569][ T4416] usb 1-1: config 0 descriptor?? [ 714.932678][ T7561] usbhid 5-1:0.0: can't add hid device: -71 [ 714.943415][ T7561] usbhid: probe of 5-1:0.0 failed with error -71 [ 714.957189][ T7561] usb 5-1: USB disconnect, device number 34 [ 715.380563][ T7561] usb 3-1: USB disconnect, device number 25 [ 715.449495][T13779] fuse: Unknown parameter 'user_i00000000000000000000' [ 715.648289][T13783] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2817'. [ 715.915554][T13790] fuse: Unknown parameter 'user_i00000000000000000000' [ 716.223851][ T7561] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 716.261234][T13798] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 716.440270][ T7561] usb 2-1: not running at top speed; connect to a high speed hub [ 716.477893][ T7561] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 716.529690][ T7561] usb 2-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 716.596363][ T7561] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.865763][ T7561] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.885449][ T7561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.931976][ T7561] usb 2-1: SerialNumber: syz [ 717.679062][ T7672] usb 1-1: USB disconnect, device number 22 [ 717.941045][T13817] fuse: Unknown parameter 'user_i00000000000000000000' [ 718.033649][ T41] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 718.236656][ T41] usb 4-1: config 0 has no interfaces? [ 718.286059][ T41] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 718.305968][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.355613][ T41] usb 4-1: Product: syz [ 718.364218][ T41] usb 4-1: Manufacturer: syz [ 718.372999][ T41] usb 4-1: SerialNumber: syz [ 718.405094][ T41] usb 4-1: config 0 descriptor?? [ 718.405301][T13825] fuse: Unknown parameter 'user_i00000000000000000000' [ 718.668996][T13829] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 718.765349][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'. [ 719.609693][ T7561] usb 2-1: 0:2 : does not exist [ 719.665757][ T7561] usb 2-1: USB disconnect, device number 13 [ 719.723433][T13852] fuse: Unknown parameter 'user_id00000000000000000000' [ 719.785497][T13854] tipc: Bearer : already 2 bearers with priority 10 [ 719.793025][T13854] tipc: Bearer : trying with adjusted priority [ 719.811135][T13854] tipc: Enabling of bearer rejected, failed to enable media [ 719.961019][T13859] fuse: Unknown parameter 'user_i00000000000000000000' [ 720.100731][ T26] audit: type=1326 audit(1750567159.148:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.210222][ T26] audit: type=1326 audit(1750567159.148:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.240615][ T26] audit: type=1326 audit(1750567159.148:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.268204][T13868] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 720.330488][ T26] audit: type=1326 audit(1750567159.158:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.447866][ T26] audit: type=1326 audit(1750567159.158:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.470895][ T7561] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 720.552854][ T26] audit: type=1326 audit(1750567159.158:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.635563][ T26] audit: type=1326 audit(1750567159.158:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.668238][ T26] audit: type=1326 audit(1750567159.158:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.693944][ T7561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 720.706251][ T26] audit: type=1326 audit(1750567159.158:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.715240][ T7561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 720.779881][ T26] audit: type=1326 audit(1750567159.158:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc38e929 code=0x7ffc0000 [ 720.820600][T13882] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2853'. [ 720.830016][ T7561] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 720.863494][T13884] fuse: Unknown parameter 'user_id00000000000000000000' [ 720.886596][ T7561] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 720.915436][ T7561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.960780][ T7561] usb 2-1: config 0 descriptor?? [ 720.980597][T13866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 721.178738][ T4262] usb 4-1: USB disconnect, device number 26 [ 721.200032][ T7561] usbhid 2-1:0.0: can't add hid device: -71 [ 721.209685][ T7561] usbhid: probe of 2-1:0.0 failed with error -71 [ 721.240033][ T7561] usb 2-1: USB disconnect, device number 14 [ 721.340825][T13891] fuse: Unknown parameter 'user_id00000000000000000000' [ 721.355363][ T41] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 721.627575][ T41] usb 3-1: not running at top speed; connect to a high speed hub [ 721.687939][ T41] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 721.705220][ T41] usb 3-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 721.722460][ T41] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.824044][ T41] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.847817][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.882279][ T41] usb 3-1: SerialNumber: syz [ 721.887736][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 721.943245][T13911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2866'. [ 721.953737][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2866'. [ 721.968647][T13911] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2866'. [ 722.114561][T13914] fuse: Unknown parameter 'user_id00000000000000000000' [ 722.608036][T13929] fuse: Unknown parameter 'user_id00000000000000000000' [ 723.137467][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 723.693770][ T7672] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 723.916683][ T7672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 723.946411][ T7672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 724.015127][ T7672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 724.088734][ T7672] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 724.133272][ T7672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.177398][ T7672] usb 1-1: config 0 descriptor?? [ 724.183052][T13946] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 724.362031][T13956] fuse: Bad value for 'fd' [ 724.398533][T13958] tipc: Enabling of bearer rejected, failed to enable media [ 724.405020][ T7672] usbhid 1-1:0.0: can't add hid device: -71 [ 724.415221][ T7672] usbhid: probe of 1-1:0.0 failed with error -71 [ 724.442241][ T7672] usb 1-1: USB disconnect, device number 23 [ 724.481042][ T41] usb 3-1: 0:2 : does not exist [ 724.548453][ T41] usb 3-1: USB disconnect, device number 26 [ 724.614777][T13964] fuse: Unknown parameter 'user_id00000000000000000000' [ 724.655324][T13960] kvm: pic: non byte write [ 724.778091][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.948304][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 725.313831][ T4262] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 725.503813][ T4262] usb 1-1: Using ep0 maxpacket: 16 [ 725.510595][ T4262] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.520874][ T4262] usb 1-1: config 0 has no interfaces? [ 725.526399][ T4262] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 725.535749][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.545280][ T4262] usb 1-1: config 0 descriptor?? [ 725.622916][T13984] fuse: Bad value for 'fd' [ 725.948009][T13999] tipc: Enabling of bearer rejected, failed to enable media [ 725.965534][T13996] kvm: pic: non byte write [ 726.262560][ T4262] usb 1-1: USB disconnect, device number 24 [ 726.290505][T14013] fuse: Bad value for 'fd' [ 726.727063][T14029] fuse: Bad value for 'fd' [ 726.949336][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 727.436354][T14052] fuse: Unknown parameter '0x0000000000000003' [ 727.523650][ T4262] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 727.713907][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 727.727106][ T4262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.743161][ T4262] usb 3-1: config 0 has no interfaces? [ 727.767635][ T4262] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 727.794283][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.809218][ T4262] usb 3-1: config 0 descriptor?? [ 727.834015][T14063] fuse: Bad value for 'fd' [ 727.968932][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 727.968947][ T26] audit: type=1326 audit(1750567167.018:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.001113][ T26] audit: type=1326 audit(1750567167.048:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.031473][ T26] audit: type=1326 audit(1750567167.078:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.093644][ T26] audit: type=1326 audit(1750567167.078:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.116739][ T26] audit: type=1326 audit(1750567167.078:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.144060][ T26] audit: type=1326 audit(1750567167.078:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.169456][ T26] audit: type=1326 audit(1750567167.078:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.184450][T14078] fuse: Unknown parameter '0x0000000000000003' [ 728.192480][ T26] audit: type=1326 audit(1750567167.078:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.221003][ T26] audit: type=1326 audit(1750567167.078:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.254183][ T26] audit: type=1326 audit(1750567167.078:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4a18e929 code=0x7ffc0000 [ 728.598247][T14096] fuse: Unknown parameter '0x0000000000000003' [ 728.616476][ T129] usb 3-1: USB disconnect, device number 27 [ 728.797024][T14104] fuse: Unknown parameter '0x0000000000000003' [ 729.248638][T14124] fuse: Unknown parameter '0x0000000000000003' [ 729.332378][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2945'. [ 729.614974][ T129] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 729.803681][ T129] usb 2-1: Using ep0 maxpacket: 16 [ 729.811069][ T129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.870283][ T129] usb 2-1: config 0 has no interfaces? [ 729.901271][ T129] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 729.960737][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.998756][ T129] usb 2-1: config 0 descriptor?? [ 730.153936][ T4267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 730.167287][ T4267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 730.176566][ T4267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 730.184610][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 730.194481][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 730.205436][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 730.269513][T14142] fuse: Unknown parameter '0x0000000000000003' [ 730.754778][ T7561] usb 2-1: USB disconnect, device number 15 [ 730.933236][T14135] chnl_net:caif_netlink_parms(): no params data found [ 730.952179][T14156] fuse: Unknown parameter '0x0000000000000003' [ 731.235715][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 731.246448][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 731.288562][T14178] fuse: Unknown parameter '0x0000000000000003' [ 731.327907][T14171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2962'. [ 731.373417][T14171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2962'. [ 731.387626][T14135] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.435763][T14135] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.443229][T14171] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2962'. [ 731.476409][T14135] device bridge_slave_0 entered promiscuous mode [ 731.490447][T14172] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2959'. [ 731.529174][T14135] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.541962][T14135] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.550972][T14185] fuse: Unknown parameter '0x0000000000000003' [ 731.558295][T14135] device bridge_slave_1 entered promiscuous mode [ 731.650406][T14135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.714565][ T129] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 731.771401][T14135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.905927][T14135] team0: Port device team_slave_0 added [ 731.917274][ T129] usb 4-1: not running at top speed; connect to a high speed hub [ 731.942030][ T129] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 731.958221][ T129] usb 4-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 731.980099][ T129] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 732.005664][ T129] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 732.023179][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.039739][ T129] usb 4-1: SerialNumber: syz [ 732.130116][T14135] team0: Port device team_slave_1 added [ 732.182757][T14135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.199851][T14135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.234726][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 732.287034][T14135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.314166][T14135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.321491][T14135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.353949][T14135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.513831][T14135] device hsr_slave_0 entered promiscuous mode [ 732.531601][T14135] device hsr_slave_1 entered promiscuous mode [ 732.549543][T14135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.561535][T14135] Cannot create hsr debugfs directory [ 732.819818][ T4889] tipc: Disabling bearer [ 732.830712][ T4889] tipc: Disabling bearer [ 732.856961][ T4889] tipc: Left network mode [ 733.197250][T14213] fuse: Unknown parameter '0x0000000000000003' [ 733.848735][T14222] fuse: Unknown parameter '0x0000000000000003' [ 734.314027][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 734.505797][T14135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 734.526541][T14135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 734.687154][T14135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 734.732061][T14135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 734.875825][ T129] usb 4-1: 0:2 : does not exist [ 734.950102][ T129] usb 4-1: USB disconnect, device number 27 [ 735.092043][T14251] fuse: Unknown parameter '0x0000000000000003' [ 735.322597][ T4889] device hsr_slave_0 left promiscuous mode [ 735.331018][ T4889] device hsr_slave_1 left promiscuous mode [ 735.346067][ T4889] device bridge_slave_1 left promiscuous mode [ 735.362040][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.371277][ T4889] device bridge_slave_0 left promiscuous mode [ 735.383936][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.433693][ T4416] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 735.646589][ T4889] team0 (unregistering): Port device geneve0 removed [ 735.676535][ T4416] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 735.693819][ T4416] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 735.713893][ T4416] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.737594][ T4416] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 735.762327][ T4416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.796668][ T4416] usb 3-1: invalid MIDI out EP 0 [ 735.873805][ T5573] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 735.967214][ T4416] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 736.023153][ T4243] udevd[4243]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.074412][ T5573] usb 2-1: Using ep0 maxpacket: 8 [ 736.082738][ T5573] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 736.106738][ T5573] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 736.144179][ T5573] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 736.170575][ T5573] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 736.190859][ T5573] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.231464][ T5573] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 736.249968][T14249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.272022][ T5573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.295962][T14249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.326074][ T5573] usbtmc 2-1:16.0: bulk endpoints not found [ 736.375968][T14249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.393829][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 736.446638][T14249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.558969][ T5573] usb 3-1: USB disconnect, device number 28 [ 737.144184][ T4889] team0 (unregistering): Port device team_slave_1 removed [ 737.231067][ T4889] team0 (unregistering): Port device team_slave_0 removed [ 737.322883][ T4889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.405098][ T4889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.021252][ T4889] bond0 (unregistering): Released all slaves [ 738.119083][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'. [ 738.134890][T14135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.190739][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 738.215860][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 738.258978][T14135] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.273033][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 738.283708][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 738.292515][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.299706][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.309336][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 738.349985][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 738.361242][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 738.370232][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.377367][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.392706][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 738.402489][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 738.412561][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 738.423251][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 738.432133][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 738.450107][T14135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 738.464261][T14135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.473859][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 738.479446][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 738.491340][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 738.501289][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 738.509883][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 738.518620][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 738.527286][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 738.535873][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 738.562699][ T129] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 738.594994][ T5573] usb 2-1: USB disconnect, device number 16 [ 738.747930][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 738.765460][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 738.790892][ T129] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 738.805663][ T129] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 738.815984][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.827005][ T129] usb 5-1: config 0 descriptor?? [ 738.833370][T14288] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 738.918053][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 738.934672][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.951125][T14135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.985566][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 738.995256][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 739.017539][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 739.026906][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 739.039577][T14135] device veth0_vlan entered promiscuous mode [ 739.059495][ T129] usbhid 5-1:0.0: can't add hid device: -71 [ 739.059809][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 739.066966][ T129] usbhid: probe of 5-1:0.0 failed with error -71 [ 739.082616][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 739.098774][ T129] usb 5-1: USB disconnect, device number 35 [ 739.102415][T14135] device veth1_vlan entered promiscuous mode [ 739.115729][T14303] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2991'. [ 739.133900][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 739.148684][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 739.173911][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 739.183427][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 739.203003][T14135] device veth0_macvtap entered promiscuous mode [ 739.222763][T14135] device veth1_macvtap entered promiscuous mode [ 739.257886][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.286557][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.313489][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 739.318002][T14135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.340865][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 739.362370][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 739.376667][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 739.389015][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 739.416996][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.439927][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.456553][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 739.466586][T14135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.474923][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 739.484144][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 739.493113][T14309] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2995'. [ 739.504656][T14135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.513389][T14135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.522639][T14311] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2994'. [ 739.533004][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2994'. [ 739.542390][T14135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.551277][T14135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.554017][T14311] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2994'. [ 739.592313][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2995'. [ 739.600325][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 739.600338][ T26] audit: type=1326 audit(1750567178.648:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3b2f8e929 code=0x0 [ 739.831840][T14309] device hsr_slave_1 left promiscuous mode [ 739.904112][ T5573] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 739.939608][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.959654][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.983410][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 740.007995][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.024027][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.049764][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 740.104948][ T5573] usb 2-1: Using ep0 maxpacket: 8 [ 740.113863][ T5573] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.153789][ T129] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 740.163320][ T5573] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 740.176129][ T5573] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 740.193487][ T5573] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 740.235590][ T5573] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 740.289678][ T5573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.355234][ T129] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.373291][ T129] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.401595][ T5573] hub 2-1:1.0: bad descriptor, ignoring hub [ 740.409815][ T129] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 740.429308][ T5573] hub: probe of 2-1:1.0 failed with error -5 [ 740.435912][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.454954][ T129] usb 4-1: Product: syz [ 740.459156][ T129] usb 4-1: Manufacturer: syz [ 740.467887][ T129] usb 4-1: SerialNumber: syz [ 740.472859][ T5573] cdc_wdm 2-1:1.0: skipping garbage [ 740.482020][ T129] usb 4-1: config 0 descriptor?? [ 740.503925][ T5573] cdc_wdm 2-1:1.0: skipping garbage [ 740.541893][ T5573] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 740.555078][ T5573] cdc_wdm 2-1:1.0: Unknown control protocol [ 740.637356][ T7561] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 740.693941][ T7675] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 740.707682][ T129] usb 4-1: USB disconnect, device number 28 [ 740.823661][ T7561] usb 1-1: Using ep0 maxpacket: 32 [ 740.831035][ T7561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 740.840869][ T7561] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 740.858321][ T7561] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 740.873242][ T7561] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 740.882040][ T7561] usb 1-1: Product: syz [ 740.886281][ T7561] usb 1-1: Manufacturer: syz [ 740.891409][ T7561] usb 1-1: SerialNumber: syz [ 740.901588][ T7561] usb 1-1: config 0 descriptor?? [ 740.913792][ T7675] usb 5-1: Using ep0 maxpacket: 16 [ 740.930177][ T7675] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 740.931107][ T7561] hub 1-1:0.0: bad descriptor, ignoring hub [ 740.953143][ T7675] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 740.961647][ T7561] hub: probe of 1-1:0.0 failed with error -5 [ 740.971224][ T7675] usb 5-1: Product: syz [ 740.976253][ T7675] usb 5-1: Manufacturer: syz [ 740.980937][ T7675] usb 5-1: SerialNumber: syz [ 740.999907][ T7675] usb 5-1: config 0 descriptor?? [ 741.097119][T14309] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 741.257544][ T7561] usb 1-1: USB disconnect, device number 25 [ 741.285149][T14330] loop6: detected capacity change from 0 to 7 [ 741.327876][T14330] Dev loop6: unable to read RDB block 7 [ 741.342881][T14330] loop6: unable to read partition table [ 741.353233][T14330] loop6: partition table beyond EOD, truncated [ 741.366685][T14330] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 741.613840][ T4416] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 741.745487][ T5573] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 741.825418][ T4416] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.839957][ T4416] usb 1-1: config 0 has no interfaces? [ 741.891294][ T4416] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.960529][ T5573] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 741.979613][ T5573] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 742.001066][ T5573] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 742.014550][ T4416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.016404][ T5573] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 742.034545][ T5573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.052819][ T4416] usb 1-1: Product: syz [ 742.060650][ T4416] usb 1-1: Manufacturer: syz [ 742.072433][ T4416] usb 1-1: SerialNumber: syz [ 742.087037][ T5573] usb 4-1: invalid MIDI out EP 0 [ 742.099383][ T4416] usb 1-1: config 0 descriptor?? [ 742.223483][ T5573] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 742.243233][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 742.446109][T14334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.458501][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 742.469137][T14334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.500550][T14334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.517127][T14334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.659399][ T4854] usb 4-1: USB disconnect, device number 29 [ 742.706331][ T5573] usb 2-1: USB disconnect, device number 17 [ 742.919957][T14356] loop8: detected capacity change from 0 to 7 [ 742.931486][ T4377] loop8: [POWERTEC] p1 p2 p3 p4 [ 742.938955][ T4377] loop8: p1 size 8519680 extends beyond EOD, truncated [ 742.957018][ T4377] loop8: p2 size 3670016 extends beyond EOD, truncated [ 742.979385][ T4377] loop8: p3 start 3932160 is beyond EOD, truncated [ 742.987832][ T4377] loop8: p4 start 524288 is beyond EOD, truncated [ 743.011957][T14356] loop8: [POWERTEC] p1 p2 p3 p4 [ 743.018132][T14356] loop8: p1 size 8519680 extends beyond EOD, truncated [ 743.035581][T14356] loop8: p2 size 3670016 extends beyond EOD, truncated [ 743.055723][T14356] loop8: p3 start 3932160 is beyond EOD, truncated [ 743.071760][T14356] loop8: p4 start 524288 is beyond EOD, truncated [ 743.083675][ T4416] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 743.124041][ T5565] udevd[5565]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 743.126769][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 743.226193][ T5565] udevd[5565]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 743.226529][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 743.315467][ T4416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 743.342187][ T4416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 743.369124][ T4416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 743.393073][ T4416] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 743.402503][ T4416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.420373][ T4416] usb 3-1: config 0 descriptor?? [ 743.426687][T14351] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 743.437112][ T129] usb 1-1: USB disconnect, device number 26 [ 743.589803][ T7561] usb 5-1: USB disconnect, device number 36 [ 743.683945][ T4416] usbhid 3-1:0.0: can't add hid device: -71 [ 743.702567][ T4416] usbhid: probe of 3-1:0.0 failed with error -71 [ 743.733841][ T4416] usb 3-1: USB disconnect, device number 29 [ 744.063807][ T7561] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 744.265451][ T7561] usb 5-1: config 0 has no interfaces? [ 744.273540][ T7561] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 744.301222][ T7561] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 744.327260][ T7561] usb 5-1: Product: syz [ 744.338799][ T7561] usb 5-1: Manufacturer: syz [ 744.352896][ T7561] usb 5-1: SerialNumber: syz [ 744.407603][ T7561] usb 5-1: config 0 descriptor?? [ 744.448348][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 744.639733][ T4854] usb 5-1: USB disconnect, device number 37 [ 744.788911][T14390] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3019'. [ 744.841679][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3019'. [ 744.925570][T14392] device hsr_slave_1 left promiscuous mode [ 745.185434][ T7561] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 745.368640][T14401] sctp: [Deprecated]: syz.0.3023 (pid 14401) Use of int in max_burst socket option. [ 745.368640][T14401] Use struct sctp_assoc_value instead [ 745.393220][T14403] loop8: detected capacity change from 0 to 7 [ 745.403756][ T7561] usb 4-1: Using ep0 maxpacket: 8 [ 745.410211][T14403] loop8: [POWERTEC] p1 p2 p3 p4 [ 745.410640][ T7561] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.423791][T14403] loop8: p1 size 8519680 extends beyond EOD, truncated [ 745.441259][T14403] loop8: p2 size 3670016 extends beyond EOD, truncated [ 745.458754][T14403] loop8: p3 start 3932160 is beyond EOD, truncated [ 745.477739][ T7561] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 745.495306][ T7561] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 745.499121][T14403] loop8: p4 start 524288 is beyond EOD, [ 745.509158][ T7561] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 745.522507][T14403] truncated [ 745.526598][ T7561] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 745.539165][ T7561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.577786][ T7561] hub 4-1:1.0: bad descriptor, ignoring hub [ 745.593911][ T7561] hub: probe of 4-1:1.0 failed with error -5 [ 745.615458][ T7561] cdc_wdm 4-1:1.0: skipping garbage [ 745.626635][ T7561] cdc_wdm 4-1:1.0: skipping garbage [ 745.637362][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 745.639071][ T4880] udevd[4880]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 745.658964][ T7561] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 745.671636][ T7561] cdc_wdm 4-1:1.0: Unknown control protocol [ 745.844003][ T4854] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 746.045148][ T4854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 746.093713][ T7561] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 746.093773][ T4854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 746.114659][ T4854] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 746.127984][ T4854] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 746.138020][ T4854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.149639][ T4854] usb 2-1: config 0 descriptor?? [ 746.157835][T14408] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 746.226506][T14390] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 746.298044][ T7561] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 746.312461][ T7561] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 746.323775][ T7561] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.337160][ T7561] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 746.348102][ T7561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.385748][ T4854] usbhid 2-1:0.0: can't add hid device: -71 [ 746.401300][ T4854] usbhid: probe of 2-1:0.0 failed with error -71 [ 746.404111][ T7561] usb 1-1: invalid MIDI out EP 0 [ 746.458877][ T4854] usb 2-1: USB disconnect, device number 18 [ 746.480231][ T7561] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 746.518771][ T4243] udevd[4243]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.534924][ T4416] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 746.726557][ T4416] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 746.746807][ T4416] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.764667][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.773372][ T4416] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 746.798952][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.808587][ T4416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.842695][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.859066][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.028804][ T4416] usb 3-1: usb_control_msg returned -32 [ 747.034710][ T4416] usbtmc 3-1:16.0: can't read capabilities [ 747.049274][ T7675] usb 1-1: USB disconnect, device number 27 [ 747.115905][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.125030][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.775461][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 747.782329][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 747.789117][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 747.795714][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 747.802098][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 747.808703][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 747.815357][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 747.821970][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 747.828310][ T7675] usb 4-1: USB disconnect, device number 30 [ 747.843974][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 747.850621][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 747.856692][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 749.296797][ T7561] usb 3-1: USB disconnect, device number 30 [ 749.825518][ T7561] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 750.035392][ T7561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 750.052978][ T7561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 750.108884][ T7561] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 750.122291][ T7561] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 750.131889][ T7561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.173164][ T7561] usb 3-1: config 0 descriptor?? [ 750.173797][T14472] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 750.353654][ T7675] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 750.381048][ T7561] usbhid 3-1:0.0: can't add hid device: -71 [ 750.398098][ T7561] usbhid: probe of 3-1:0.0 failed with error -71 [ 750.426109][ T7561] usb 3-1: USB disconnect, device number 31 [ 750.831652][ T7675] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 750.882056][ T7675] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 750.922096][ T7675] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 750.941766][ T7675] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 750.962147][ T7675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.000717][ T7675] usb 5-1: invalid MIDI out EP 0 [ 751.087083][ T7675] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 751.130616][ T4243] udevd[4243]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.256517][T14492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.271216][T14492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.405885][T14492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.418412][T14492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.684431][ T7561] usb 5-1: USB disconnect, device number 38 [ 751.943819][ T7675] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 751.997293][T14530] kvm: pic: non byte write [ 752.123738][ T7675] usb 3-1: Using ep0 maxpacket: 8 [ 752.130721][ T7675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.190847][ T7675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.263651][ T7675] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 752.328420][ T7675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.386921][ T7675] usb 3-1: config 0 descriptor?? [ 752.832315][T14523] Disabled LAPIC found during irq injection [ 752.857993][ T7675] usbhid 3-1:0.0: can't add hid device: -71 [ 752.865254][ T7675] usbhid: probe of 3-1:0.0 failed with error -71 [ 752.905930][ T7675] usb 3-1: USB disconnect, device number 32 [ 754.094695][T14577] capability: warning: `syz.2.3089' uses 32-bit capabilities (legacy support in use) [ 755.743649][ T7675] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 755.943642][ T7675] usb 4-1: Using ep0 maxpacket: 8 [ 755.950503][ T7675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.022936][ T7675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.064878][ T7675] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 756.140054][ T7675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.162918][ T7675] usb 4-1: config 0 descriptor?? [ 756.282526][T14619] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 756.580613][T14601] Disabled LAPIC found during irq injection [ 756.595602][ T7675] usbhid 4-1:0.0: can't add hid device: -71 [ 756.604950][ T7675] usbhid: probe of 4-1:0.0 failed with error -71 [ 756.657746][ T7675] usb 4-1: USB disconnect, device number 31 [ 757.733636][ T129] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 757.934066][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 757.941365][ T129] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 757.974896][ T129] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 758.011501][ T129] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 758.036068][ T129] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 758.067198][ T129] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.097045][ T129] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 758.106399][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.117719][ T129] usbtmc 4-1:16.0: bulk endpoints not found [ 758.197939][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3121'. [ 758.280233][T14672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3124'. [ 758.291193][T14669] Disabled LAPIC found during irq injection [ 758.358980][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 758.486658][T14672] device hsr_slave_1 left promiscuous mode [ 758.734080][ T129] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 758.933985][ T129] usb 3-1: Using ep0 maxpacket: 8 [ 758.946748][ T129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.958929][ T129] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 758.977702][ T129] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 758.989267][ T129] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 759.004191][ T129] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 759.032099][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.059407][ T129] hub 3-1:1.0: bad descriptor, ignoring hub [ 759.073849][ T129] hub: probe of 3-1:1.0 failed with error -5 [ 759.090512][ T129] cdc_wdm 3-1:1.0: skipping garbage [ 759.096016][ T129] cdc_wdm 3-1:1.0: skipping garbage [ 759.109021][ T129] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 759.118031][ T129] cdc_wdm 3-1:1.0: Unknown control protocol [ 759.422553][T14702] Disabled LAPIC found during irq injection [ 759.685535][T14672] usb 3-1: reset high-speed USB device number 33 using dummy_hcd [ 759.941704][ T7755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 759.954457][ T7755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 759.962800][ T7755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 759.972014][ T7755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 759.980218][ T7755] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 759.987738][ T7755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 760.281201][T14714] chnl_net:caif_netlink_parms(): no params data found [ 760.453893][ T5573] usb 4-1: USB disconnect, device number 32 [ 760.522053][T14714] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.542299][T14714] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.556328][T14714] device bridge_slave_0 entered promiscuous mode [ 760.580626][T14714] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.595237][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.610309][T14714] device bridge_slave_1 entered promiscuous mode [ 760.760351][T14714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.847272][T14737] Disabled LAPIC found during irq injection [ 760.865904][T14714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.875216][ C1] ------------[ cut here ]------------ [ 760.875345][ C1] refcount_t: addition on 0; use-after-free. [ 760.875718][ C1] WARNING: CPU: 1 PID: 14714 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 760.875766][ C1] Modules linked in: [ 760.875792][ C1] CPU: 1 PID: 14714 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 760.875814][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.875831][ C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 760.875857][ C1] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 760.875879][ C1] RSP: 0018:ffffc900001e0828 EFLAGS: 00010246 [ 760.875899][ C1] RAX: 6ace7b3fd5779500 RBX: 0000000000000002 RCX: ffff88802ef21dc0 [ 760.875914][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 760.875927][ C1] RBP: ffffc900001e0990 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 760.875969][ C1] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: ffff88805a4c1c40 [ 760.875984][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888056c4c048 [ 760.876007][ C1] FS: 000055555a148500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 760.876025][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.876039][ C1] CR2: 00002000000bd038 CR3: 0000000068cdc000 CR4: 00000000003526e0 [ 760.876058][ C1] DR0: 0000000000000000 DR1: 0000000000000400 DR2: 0000000000000000 [ 760.876070][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 760.876082][ C1] Call Trace: [ 760.876091][ C1] [ 760.876100][ C1] tipc_crypto_xmit+0x17a9/0x2300 [ 760.876144][ C1] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 760.876180][ C1] tipc_bearer_xmit_skb+0x242/0x3f0 [ 760.876207][ C1] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 760.876232][ C1] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 760.876264][ C1] tipc_disc_timeout+0x568/0x6b0 [ 760.876290][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 760.876325][ C1] call_timer_fn+0x1a0/0x670 [ 760.876345][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 760.876363][ C1] ? call_timer_fn+0xc1/0x670 [ 760.876382][ C1] ? __run_timers+0x7c0/0x7c0 [ 760.876407][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 760.876430][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 760.876449][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 760.876481][ C1] __run_timers+0x525/0x7c0 [ 760.876509][ C1] ? detach_timer+0x350/0x350 [ 760.876533][ C1] ? lock_chain_count+0x20/0x20 [ 760.876562][ C1] run_timer_softirq+0x63/0xf0 [ 760.876589][ C1] handle_softirqs+0x2a1/0x920 [ 760.876620][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 760.876649][ C1] ? do_softirq+0x200/0x200 [ 760.876676][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 760.876705][ C1] __irq_exit_rcu+0x12f/0x220 [ 760.876729][ C1] ? irq_exit_rcu+0x20/0x20 [ 760.876761][ C1] irq_exit_rcu+0x5/0x20 [ 760.876782][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 760.876809][ C1] [ 760.876815][ C1] [ 760.876823][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 760.876843][ C1] RIP: 0010:console_emit_next_record+0xab0/0xc90 [ 760.876868][ C1] Code: 86 6c 1a 00 4d 85 ff 75 16 e8 7c 6c 1a 00 eb 15 e8 75 6c 1a 00 e8 20 27 a9 08 4d 85 ff 74 ea e8 66 6c 1a 00 fb 48 8b 5c 24 48 <48> c7 84 24 80 00 00 00 0e 36 e0 45 4a c7 04 2b 00 00 00 00 4a c7 [ 760.876883][ C1] RSP: 0018:ffffc900033fe740 EFLAGS: 00000293 [ 760.876902][ C1] RAX: ffffffff81666a0a RBX: 1ffff9200067fcf8 RCX: ffff88802ef21dc0 [ 760.876917][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 760.876928][ C1] RBP: ffffc900033fe980 R08: dffffc0000000000 R09: fffffbfff2117049 [ 760.876943][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: ffffffff8166678d [ 760.876957][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000200 [ 760.876974][ C1] ? console_emit_next_record+0x82d/0xc90 [ 760.877007][ C1] ? console_emit_next_record+0xaaa/0xc90 [ 760.877043][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 760.877068][ C1] ? info_print_prefix+0x300/0x300 [ 760.877100][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 760.877132][ C1] ? __down_trylock_console_sem+0xeb/0x1e0 [ 760.877159][ C1] ? __down_trylock_console_sem+0x184/0x1e0 [ 760.877181][ C1] ? _printk+0xcc/0x110 [ 760.877199][ C1] ? ib_device_get_by_netdev+0x81/0x4d0 [ 760.877219][ C1] ? _printk+0xcc/0x110 [ 760.877236][ C1] ? console_trylock+0x160/0x160 [ 760.877260][ C1] console_unlock+0x223/0x630 [ 760.877286][ C1] ? _printk+0xcc/0x110 [ 760.877305][ C1] vprintk_emit+0x489/0x680 [ 760.877330][ C1] ? printk_sprint+0x460/0x460 [ 760.877352][ C1] ? ib_device_get_by_netdev+0x81/0x4d0 [ 760.877371][ C1] ? vxlan_netdevice_event+0x29e/0x300 [ 760.877393][ C1] ? ib_device_get_netdev+0x390/0x390 [ 760.877413][ C1] ? vxlan_fdb_offloaded_set+0x7d0/0x7d0 [ 760.877435][ C1] ? udp_tunnel_nic_netdevice_event+0x1b1/0x13d0 [ 760.877462][ C1] _printk+0xcc/0x110 [ 760.877485][ C1] ? load_image+0x3b0/0x3b0 [ 760.877505][ C1] ? netdev_change_features+0x8a/0xc0 [ 760.877530][ C1] ? __netdev_printk+0x192/0x3d0 [ 760.877558][ C1] netdev_info+0x107/0x14e [ 760.877579][ C1] ? bond_slave_ns_maddrs_add+0x138/0x3e0 [ 760.877605][ C1] ? skb_panic+0x160/0x160 [ 760.877623][ C1] ? bond_set_carrier+0x2c7/0x330 [ 760.877653][ C1] ? netdev_is_rx_handler_busy+0x6a/0x130 [ 760.877674][ C1] ? slave_enable_netpoll+0xd0/0xd0 [ 760.877698][ C1] bond_enslave+0x2cd9/0x3930 [ 760.877744][ C1] ? bond_lower_state_changed+0x150/0x150 [ 760.877780][ C1] ? is_bpf_text_address+0x28b/0x2a0 [ 760.877802][ C1] ? is_bpf_text_address+0x22/0x2a0 [ 760.877829][ C1] ? mutex_is_locked+0xe/0x40 [ 760.877853][ C1] do_setlink+0xdc0/0x3c40 [ 760.877887][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 760.877911][ C1] ? stack_trace_save+0x98/0xe0 [ 760.877934][ C1] ? __stack_depot_save+0x35/0x460 [ 760.877975][ C1] ? __nla_validate_parse+0x1fd2/0x2990 [ 760.878006][ C1] ? netlink_rcv_skb+0x1de/0x420 [ 760.878029][ C1] ? netlink_unicast+0x74c/0x8c0 [ 760.878068][ C1] ? __nla_validate+0x50/0x50 [ 760.878106][ C1] ? validate_linkmsg+0x3db/0x4c0 [ 760.878129][ C1] ? mutex_is_locked+0xe/0x40 [ 760.878150][ C1] rtnl_newlink+0x17d6/0x1ff0 [ 760.878184][ C1] ? rtnl_newlink+0x4d1/0x1ff0 [ 760.878218][ C1] ? rtnl_setlink+0x450/0x450 [ 760.878241][ C1] ? __rwlock_init+0x140/0x140 [ 760.878270][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 760.878295][ C1] ? __mutex_lock+0x803/0xaf0 [ 760.878318][ C1] ? __mutex_lock+0x3a5/0xaf0 [ 760.878355][ C1] ? rtnl_setlink+0x450/0x450 [ 760.878380][ C1] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 760.878402][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 760.878435][ C1] ? rtnetlink_bind+0x80/0x80 [ 760.878457][ C1] ? mark_lock+0x94/0x320 [ 760.878482][ C1] ? __lock_acquire+0x12e5/0x7c50 [ 760.878524][ C1] ? netlink_sendmsg+0x645/0xbc0 [ 760.878549][ C1] ? verify_lock_unused+0x140/0x140 [ 760.878599][ C1] netlink_rcv_skb+0x1de/0x420 [ 760.878624][ C1] ? rtnetlink_bind+0x80/0x80 [ 760.878649][ C1] ? netlink_ack+0x1100/0x1100 [ 760.878682][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.878711][ C1] netlink_unicast+0x74c/0x8c0 [ 760.878743][ C1] netlink_sendmsg+0x89e/0xbc0 [ 760.878775][ C1] ? netlink_getsockopt+0x540/0x540 [ 760.878803][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 760.878823][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 760.878844][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 760.878865][ C1] __sys_sendto+0x44f/0x5c0 [ 760.878893][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 760.878946][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 760.878973][ C1] ? lock_chain_count+0x20/0x20 [ 760.879007][ C1] __x64_sys_sendto+0xda/0xf0 [ 760.879034][ C1] do_syscall_64+0x4c/0xa0 [ 760.879056][ C1] ? clear_bhb_loop+0x60/0xb0 [ 760.879073][ C1] ? clear_bhb_loop+0x60/0xb0 [ 760.879093][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.879117][ C1] RIP: 0033:0x7f72c1b907bc [ 760.879142][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 760.879158][ C1] RSP: 002b:00007ffe10b85250 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 760.879180][ C1] RAX: ffffffffffffffda RBX: 00007f72c28e4620 RCX: 00007f72c1b907bc [ 760.879194][ C1] RDX: 0000000000000028 RSI: 00007f72c28e4670 RDI: 0000000000000003 [ 760.879206][ C1] RBP: 0000000000000000 R08: 00007ffe10b852a4 R09: 000000000000000c [ 760.879220][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 760.879232][ C1] R13: 0000000000000000 R14: 00007f72c28e4670 R15: 0000000000000000 [ 760.879258][ C1] [ 760.879273][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 760.879282][ C1] CPU: 1 PID: 14714 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 760.879301][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.879310][ C1] Call Trace: [ 760.879316][ C1] [ 760.879322][ C1] dump_stack_lvl+0x168/0x22e [ 760.879344][ C1] ? memcpy+0x3c/0x60 [ 760.879364][ C1] ? show_regs_print_info+0x12/0x12 [ 760.879385][ C1] ? load_image+0x3b0/0x3b0 [ 760.879413][ C1] panic+0x2c9/0x710 [ 760.879435][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 760.879464][ C1] __warn+0x2f8/0x4f0 [ 760.879479][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 760.879502][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 760.879522][ C1] report_bug+0x2ba/0x4f0 [ 760.879545][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 760.879569][ C1] handle_bug+0x3a/0x70 [ 760.879589][ C1] exc_invalid_op+0x16/0x40 [ 760.879610][ C1] asm_exc_invalid_op+0x16/0x20 [ 760.879626][ C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 760.879647][ C1] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 760.879661][ C1] RSP: 0018:ffffc900001e0828 EFLAGS: 00010246 [ 760.879677][ C1] RAX: 6ace7b3fd5779500 RBX: 0000000000000002 RCX: ffff88802ef21dc0 [ 760.879689][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 760.879699][ C1] RBP: ffffc900001e0990 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 760.879713][ C1] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: ffff88805a4c1c40 [ 760.879726][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888056c4c048 [ 760.879751][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 760.879772][ C1] tipc_crypto_xmit+0x17a9/0x2300 [ 760.879811][ C1] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 760.879842][ C1] tipc_bearer_xmit_skb+0x242/0x3f0 [ 760.879866][ C1] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 760.879889][ C1] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 760.879921][ C1] tipc_disc_timeout+0x568/0x6b0 [ 760.879944][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 760.879977][ C1] call_timer_fn+0x1a0/0x670 [ 760.880066][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 760.880084][ C1] ? call_timer_fn+0xc1/0x670 [ 760.880100][ C1] ? __run_timers+0x7c0/0x7c0 [ 760.880123][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 760.880144][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 760.880161][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 760.880180][ C1] __run_timers+0x525/0x7c0 [ 760.880207][ C1] ? detach_timer+0x350/0x350 [ 760.880228][ C1] ? lock_chain_count+0x20/0x20 [ 760.880319][ C1] run_timer_softirq+0x63/0xf0 [ 760.880352][ C1] handle_softirqs+0x2a1/0x920 [ 760.880377][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 760.880429][ C1] ? do_softirq+0x200/0x200 [ 760.880453][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 760.880480][ C1] __irq_exit_rcu+0x12f/0x220 [ 760.880504][ C1] ? irq_exit_rcu+0x20/0x20 [ 760.880535][ C1] irq_exit_rcu+0x5/0x20 [ 760.880558][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 760.880583][ C1] [ 760.880590][ C1] [ 760.880597][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 760.880616][ C1] RIP: 0010:console_emit_next_record+0xab0/0xc90 [ 760.880640][ C1] Code: 86 6c 1a 00 4d 85 ff 75 16 e8 7c 6c 1a 00 eb 15 e8 75 6c 1a 00 e8 20 27 a9 08 4d 85 ff 74 ea e8 66 6c 1a 00 fb 48 8b 5c 24 48 <48> c7 84 24 80 00 00 00 0e 36 e0 45 4a c7 04 2b 00 00 00 00 4a c7 [ 760.880656][ C1] RSP: 0018:ffffc900033fe740 EFLAGS: 00000293 [ 760.880674][ C1] RAX: ffffffff81666a0a RBX: 1ffff9200067fcf8 RCX: ffff88802ef21dc0 [ 760.880689][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 760.880700][ C1] RBP: ffffc900033fe980 R08: dffffc0000000000 R09: fffffbfff2117049 [ 760.880713][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: ffffffff8166678d [ 760.880727][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000200 [ 760.880741][ C1] ? console_emit_next_record+0x82d/0xc90 [ 760.880768][ C1] ? console_emit_next_record+0xaaa/0xc90 [ 760.880802][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 760.880827][ C1] ? info_print_prefix+0x300/0x300 [ 760.880859][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 760.880886][ C1] ? __down_trylock_console_sem+0xeb/0x1e0 [ 760.880912][ C1] ? __down_trylock_console_sem+0x184/0x1e0 [ 760.880932][ C1] ? _printk+0xcc/0x110 [ 760.880951][ C1] ? ib_device_get_by_netdev+0x81/0x4d0 [ 760.880981][ C1] ? _printk+0xcc/0x110 [ 760.880997][ C1] ? console_trylock+0x160/0x160 [ 760.881021][ C1] console_unlock+0x223/0x630 [ 760.881046][ C1] ? _printk+0xcc/0x110 [ 760.881064][ C1] vprintk_emit+0x489/0x680 [ 760.881088][ C1] ? printk_sprint+0x460/0x460 [ 760.881108][ C1] ? ib_device_get_by_netdev+0x81/0x4d0 [ 760.881126][ C1] ? vxlan_netdevice_event+0x29e/0x300 [ 760.881145][ C1] ? ib_device_get_netdev+0x390/0x390 [ 760.881165][ C1] ? vxlan_fdb_offloaded_set+0x7d0/0x7d0 [ 760.881185][ C1] ? udp_tunnel_nic_netdevice_event+0x1b1/0x13d0 [ 760.881210][ C1] _printk+0xcc/0x110 [ 760.881232][ C1] ? load_image+0x3b0/0x3b0 [ 760.881250][ C1] ? netdev_change_features+0x8a/0xc0 [ 760.881276][ C1] ? __netdev_printk+0x192/0x3d0 [ 760.881301][ C1] netdev_info+0x107/0x14e [ 760.881321][ C1] ? bond_slave_ns_maddrs_add+0x138/0x3e0 [ 760.881346][ C1] ? skb_panic+0x160/0x160 [ 760.881362][ C1] ? bond_set_carrier+0x2c7/0x330 [ 760.881391][ C1] ? netdev_is_rx_handler_busy+0x6a/0x130 [ 760.881411][ C1] ? slave_enable_netpoll+0xd0/0xd0 [ 760.881433][ C1] bond_enslave+0x2cd9/0x3930 [ 760.881478][ C1] ? bond_lower_state_changed+0x150/0x150 [ 760.881512][ C1] ? is_bpf_text_address+0x28b/0x2a0 [ 760.881534][ C1] ? is_bpf_text_address+0x22/0x2a0 [ 760.881561][ C1] ? mutex_is_locked+0xe/0x40 [ 760.881582][ C1] do_setlink+0xdc0/0x3c40 [ 760.881615][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 760.881636][ C1] ? stack_trace_save+0x98/0xe0 [ 760.881658][ C1] ? __stack_depot_save+0x35/0x460 [ 760.881690][ C1] ? __nla_validate_parse+0x1fd2/0x2990 [ 760.881708][ C1] ? netlink_rcv_skb+0x1de/0x420 [ 760.881729][ C1] ? netlink_unicast+0x74c/0x8c0 [ 760.881767][ C1] ? __nla_validate+0x50/0x50 [ 760.881803][ C1] ? validate_linkmsg+0x3db/0x4c0 [ 760.881823][ C1] ? mutex_is_locked+0xe/0x40 [ 760.881845][ C1] rtnl_newlink+0x17d6/0x1ff0 [ 760.881877][ C1] ? rtnl_newlink+0x4d1/0x1ff0 [ 760.881908][ C1] ? rtnl_setlink+0x450/0x450 [ 760.881929][ C1] ? __rwlock_init+0x140/0x140 [ 760.881954][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 760.881988][ C1] ? __mutex_lock+0x803/0xaf0 [ 760.882010][ C1] ? __mutex_lock+0x3a5/0xaf0 [ 760.882046][ C1] ? rtnl_setlink+0x450/0x450 [ 760.882068][ C1] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 760.882091][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 760.882121][ C1] ? rtnetlink_bind+0x80/0x80 [ 760.882141][ C1] ? mark_lock+0x94/0x320 [ 760.882165][ C1] ? __lock_acquire+0x12e5/0x7c50 [ 760.882205][ C1] ? netlink_sendmsg+0x645/0xbc0 [ 760.882226][ C1] ? verify_lock_unused+0x140/0x140 [ 760.882274][ C1] netlink_rcv_skb+0x1de/0x420 [ 760.882297][ C1] ? rtnetlink_bind+0x80/0x80 [ 760.882322][ C1] ? netlink_ack+0x1100/0x1100 [ 760.882352][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.882379][ C1] netlink_unicast+0x74c/0x8c0 [ 760.882419][ C1] netlink_sendmsg+0x89e/0xbc0 [ 760.882449][ C1] ? netlink_getsockopt+0x540/0x540 [ 760.882474][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 760.882496][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 760.882513][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 760.882534][ C1] __sys_sendto+0x44f/0x5c0 [ 760.882562][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 760.882605][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 760.882642][ C1] ? lock_chain_count+0x20/0x20 [ 760.882669][ C1] __x64_sys_sendto+0xda/0xf0 [ 760.882694][ C1] do_syscall_64+0x4c/0xa0 [ 760.882715][ C1] ? clear_bhb_loop+0x60/0xb0 [ 760.882730][ C1] ? clear_bhb_loop+0x60/0xb0 [ 760.882750][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.882772][ C1] RIP: 0033:0x7f72c1b907bc [ 760.882789][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 760.882803][ C1] RSP: 002b:00007ffe10b85250 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 760.882825][ C1] RAX: ffffffffffffffda RBX: 00007f72c28e4620 RCX: 00007f72c1b907bc [ 760.882838][ C1] RDX: 0000000000000028 RSI: 00007f72c28e4670 RDI: 0000000000000003 [ 760.882851][ C1] RBP: 0000000000000000 R08: 00007ffe10b852a4 R09: 000000000000000c [ 760.882862][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 760.882872][ C1] R13: 0000000000000000 R14: 00007f72c28e4670 R15: 0000000000000000 [ 760.882898][ C1] [ 760.883223][ C1] Kernel Offset: disabled [ 762.579577][ C1] Rebooting in 86400 seconds..