last executing test programs: 2m8.135418489s ago: executing program 3 (id=1315): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, 0x0, 0x5) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000bc0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}]}}) 2m6.611694728s ago: executing program 3 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = timerfd_create(0x9, 0x80000) timerfd_settime(r3, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) 2m4.336056632s ago: executing program 3 (id=1323): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000fa070000bb6500000600000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) r0 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 2m4.176420025s ago: executing program 3 (id=1325): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) 2m3.580652277s ago: executing program 3 (id=1327): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0200, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) setxattr(0x0, &(0x7f0000000600)=@random={'user.', '\x00'}, 0x0, 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001d000100bb0000000200000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3087, 0x10, 0x100004, 0x219}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) 2m1.911637371s ago: executing program 3 (id=1329): r0 = syz_io_uring_setup(0x1b68, &(0x7f00000002c0)={0x0, 0x1040, 0x10, 0x2, 0xff}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x7ff, 0xffffffffffffffff, 0x27, {0x4, 0x1}, 0x1}, 0x1) 1m46.489098498s ago: executing program 32 (id=1329): r0 = syz_io_uring_setup(0x1b68, &(0x7f00000002c0)={0x0, 0x1040, 0x10, 0x2, 0xff}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x7ff, 0xffffffffffffffff, 0x27, {0x4, 0x1}, 0x1}, 0x1) 19.854332595s ago: executing program 2 (id=1546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 17.146116807s ago: executing program 2 (id=1548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, 0x0}, 0x20) 16.608730338s ago: executing program 4 (id=1550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e32000"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x295, @private0, 0x7}}, [0xffffffffffffffff, 0xfffffffffffffff8, 0x400, 0xb2, 0x6, 0x3, 0xfffffffffffffcd1, 0x4, 0x6, 0xfffffffffffffff9, 0x3, 0x200000004, 0x7, 0xfffffffffffffff6, 0xffffffffffffffff]}, &(0x7f0000000000)=0x100) 15.809322017s ago: executing program 2 (id=1551): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x180001, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000bc0)={0x3e}) 15.763762727s ago: executing program 1 (id=1552): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0xfffffffc, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000280)='@&\'/[]/%\\[$*\\\x00', &(0x7f0000000380)='/dev/snd/midiC#D#\x00']}, &(0x7f0000000440)={[&(0x7f0000000400)='\x00']}) io_uring_enter(0xffffffffffffffff, 0x32d7, 0x0, 0x46, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 15.616556856s ago: executing program 4 (id=1553): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port1\x00', 0x62, 0x10cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7, 0xee}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x8010000, 0x0, 0x9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0xc, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) readv(r2, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/192, 0xc0}], 0x1) readv(r4, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)=0x42) close(r3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14.436985893s ago: executing program 2 (id=1554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121c00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 14.031270172s ago: executing program 1 (id=1556): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x13) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) write$cgroup_int(r1, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x100, 0x8000002, 0x4}, 0x0, 0x0) timer_create(0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000004c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000069f4a950eaf3b3a0ae5791247bd445d5d707d4c425a9ce3786576d75efc2dcc9a2ecdaa9481b49151df6b83a03d6dc408e8fb5557af3", @ANYRES16, @ANYBLOB="01002dbd7000fedbdf25270000000c009900ff0f0000570000000a0034000101010101010000"], 0x38}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x200000000000004c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 13.782954511s ago: executing program 4 (id=1557): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 12.616674209s ago: executing program 1 (id=1558): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x46c800) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={0x0, 0xde355917d893d520, r5, 0x6, 0x80000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x68000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff35a1e107fa5c8d3cbb1fa61229a00ecd207d9e6f2a208bf148e6bc56955cb5330000000000"}) 12.384241361s ago: executing program 2 (id=1559): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000580)={0x1, {{0x2, 0x4e24, @multicast2}}}, 0x88) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) 11.881206675s ago: executing program 4 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, 0x0}, 0x20) 10.790783622s ago: executing program 4 (id=1561): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 10.691360649s ago: executing program 1 (id=1562): creat(&(0x7f0000000040)='./file0\x00', 0x140) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x48010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004050, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}], [], 0x6b}}) 8.282429528s ago: executing program 1 (id=1567): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) 3.091769156s ago: executing program 0 (id=1571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x46c800) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={0x0, 0xde355917d893d520, r5, 0x6, 0x80000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x68000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff35a1e107fa5c8d3cbb1fa61229a00ecd207d9e6f2a208bf148e6bc56955cb5330000000000"}) 2.145965162s ago: executing program 0 (id=1572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) 1.110396592s ago: executing program 0 (id=1573): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 1.043018891s ago: executing program 0 (id=1574): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa632", 0x88}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002240)}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="04", 0x1, 0x10008095, 0x0, 0x0) 961.097954ms ago: executing program 0 (id=1575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syslog(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x90) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 174.994234ms ago: executing program 2 (id=1576): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0xfffffffc, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000280)='@&\'/[]/%\\[$*\\\x00', &(0x7f0000000380)='/dev/snd/midiC#D#\x00']}, &(0x7f0000000440)={[&(0x7f0000000400)='\x00']}) io_uring_enter(0xffffffffffffffff, 0x32d7, 0x0, 0x46, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 174.25538ms ago: executing program 1 (id=1577): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) 89.56267ms ago: executing program 4 (id=1578): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000090abd5e200000b4699986a758455"], 0x0}, 0x0) 0s ago: executing program 0 (id=1579): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) kernel console output (not intermixed with test programs): IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.689608][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.715306][ T5805] veth1_vlan: entered promiscuous mode [ 90.734070][ T5802] veth1_macvtap: entered promiscuous mode [ 90.737633][ T5803] veth0_vlan: entered promiscuous mode [ 90.797230][ T5801] veth0_vlan: entered promiscuous mode [ 90.806383][ T1623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.806401][ T1623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.824795][ T5803] veth1_vlan: entered promiscuous mode [ 90.857101][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.857625][ T5801] veth1_vlan: entered promiscuous mode [ 90.895702][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.940734][ T2128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.944135][ T2128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.946227][ T2128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.947696][ T5805] veth0_macvtap: entered promiscuous mode [ 90.955692][ T2128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.971185][ T5805] veth1_macvtap: entered promiscuous mode [ 91.152156][ T5801] veth0_macvtap: entered promiscuous mode [ 91.166848][ T5803] veth0_macvtap: entered promiscuous mode [ 91.223325][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.223988][ T5801] veth1_macvtap: entered promiscuous mode [ 91.508215][ T5803] veth1_macvtap: entered promiscuous mode [ 91.515303][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.574830][ T2128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.584444][ T2128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.589109][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.589128][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.609196][ T2128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.623918][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.623991][ T2128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.654006][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.728407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.738409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.748388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.753236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.758379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.768377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.774357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.778367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.788375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.798370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.373841][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.489810][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.591037][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.591058][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.637332][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.711561][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.714055][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.715888][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.768897][ T3569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.777060][ T3569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.811736][ T3569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.856593][ T3569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.076593][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.076613][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.339094][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.339114][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.494773][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.494793][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.619201][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.673719][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.673740][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.679209][ T3889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.679230][ T3889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.810396][ T10] usb 2-1: config 0 has an invalid interface number: 252 but max is 0 [ 94.810433][ T10] usb 2-1: config 0 has no interface number 0 [ 94.810486][ T10] usb 2-1: config 0 interface 252 has no altsetting 0 [ 94.856176][ T10] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=2a.0f [ 94.856208][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.856228][ T10] usb 2-1: Product: syz [ 94.856243][ T10] usb 2-1: Manufacturer: syz [ 94.856258][ T10] usb 2-1: SerialNumber: syz [ 94.918625][ T10] usb 2-1: config 0 descriptor?? [ 94.974082][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.974102][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.004114][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 95.004638][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 95.040936][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 95.048057][ T5823] Bluetooth: hci4: hcon ffff888034040000 sent 1 < count 53361 [ 95.071431][ T10] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) error while loading driver (-19) [ 95.071691][ T10] dvb_usb_cxusb 2-1:0.252: probe with driver dvb_usb_cxusb failed with error -22 [ 95.243733][ T5823] Bluetooth: hci4: hcon ffff88803408c000 sent 1 < count 5 [ 95.251526][ T5907] usb 2-1: USB disconnect, device number 2 [ 97.297814][ T37] audit: type=1804 audit(1766936053.235:2): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.12" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=7104 res=1 errno=0 [ 97.442679][ T37] audit: type=1804 audit(1766936053.395:3): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.12" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=7104 res=1 errno=0 [ 97.698674][ T49] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.785652][ T5971] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.850879][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.850914][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.852379][ T49] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 97.852407][ T49] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 97.852427][ T49] usb 4-1: Manufacturer: syz [ 97.871474][ T49] usb 4-1: config 0 descriptor?? [ 98.849059][ T5983] use of bytesused == 0 is deprecated and will be removed in the future, [ 98.849075][ T5983] use the actual size instead. [ 99.227108][ T49] usbhid 4-1:0.0: can't add hid device: -71 [ 99.234665][ T49] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 99.272770][ T49] usb 4-1: USB disconnect, device number 2 [ 102.499129][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.650129][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 102.653496][ T5810] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 102.653524][ T5810] usb 1-1: config 0 has no interface number 1 [ 102.682167][ T5810] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 102.682199][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.682220][ T5810] usb 1-1: Product: syz [ 102.682235][ T5810] usb 1-1: Manufacturer: syz [ 102.682249][ T5810] usb 1-1: SerialNumber: syz [ 102.724561][ T5810] usb 1-1: config 0 descriptor?? [ 102.844561][ T5810] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 103.057014][ T804] usb 1-1: USB disconnect, device number 2 [ 103.102780][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.120421][ T6021] Set syz1 is full, maxelem 65536 reached [ 108.770116][ T6067] ip6erspan0: tun_chr_ioctl cmd 1074025675 [ 108.770140][ T6067] ip6erspan0: persist disabled [ 109.070312][ T6070] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.170596][ T6083] netlink: 68 bytes leftover after parsing attributes in process `syz.4.50'. [ 112.930902][ T891] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.058441][ T891] usb 4-1: device descriptor read/64, error -71 [ 114.278437][ T891] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.418463][ T891] usb 4-1: device descriptor read/64, error -71 [ 114.533027][ T891] usb usb4-port1: attempt power cycle [ 114.583120][ T5945] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.288504][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 115.533282][ T5945] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.533310][ T5945] usb 3-1: config 0 has no interface number 0 [ 115.579900][ T5945] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 115.579928][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.579947][ T5945] usb 3-1: Product: syz [ 115.579961][ T5945] usb 3-1: Manufacturer: syz [ 115.579974][ T5945] usb 3-1: SerialNumber: syz [ 115.625036][ T5945] usb 3-1: config 0 descriptor?? [ 115.674885][ T5945] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 116.260552][ T6147] netlink: 68 bytes leftover after parsing attributes in process `syz.4.71'. [ 116.793139][ T6155] netlink: 'syz.4.74': attribute type 1 has an invalid length. [ 116.793163][ T6155] netlink: 'syz.4.74': attribute type 4 has an invalid length. [ 116.793176][ T6155] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.74'. [ 117.268565][ T5999] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.320777][ T5945] gspca_spca1528: reg_w err -71 [ 117.320867][ T5945] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 117.350931][ T5945] usb 3-1: USB disconnect, device number 2 [ 118.092551][ T5999] usb 4-1: device descriptor read/64, error -71 [ 118.537908][ T5999] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.779828][ T5999] usb 4-1: device descriptor read/64, error -71 [ 118.937087][ T5999] usb usb4-port1: attempt power cycle [ 119.050212][ T6191] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 119.050233][ T6191] netlink: 'syz.1.86': attribute type 4 has an invalid length. [ 119.050247][ T6191] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.86'. [ 119.378461][ T5999] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.400008][ T5999] usb 4-1: device descriptor read/8, error -71 [ 119.569242][ T6195] mmap: syz.4.89 (6195) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.590732][ T5810] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.724863][ T5999] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.760953][ T5999] usb 4-1: device descriptor read/8, error -71 [ 119.814131][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.814166][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.839533][ T5810] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 119.839562][ T5810] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 119.839583][ T5810] usb 2-1: Manufacturer: syz [ 119.876645][ T5999] usb usb4-port1: unable to enumerate USB device [ 119.998477][ T5810] usb 2-1: config 0 descriptor?? [ 120.106884][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 120.670475][ T6222] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 120.670498][ T6222] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 120.670512][ T6222] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.100'. [ 121.106535][ T5810] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 121.106604][ T5810] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 121.106622][ T5810] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 121.106680][ T5810] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 121.106790][ T5810] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 122.689167][ T5810] usb 2-1: USB disconnect, device number 3 [ 122.793212][ T6234] binder: 6224:6234 ioctl 40182103 200000000300 returned -22 [ 123.852539][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 124.296643][ T6253] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 124.296667][ T6253] netlink: 'syz.1.113': attribute type 4 has an invalid length. [ 124.296681][ T6253] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.113'. [ 126.808658][ T6267] warning: `syz.1.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.080092][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.402826][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.431310][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.431344][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.431389][ T10] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 127.431406][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.435045][ T10] usb 3-1: config 0 descriptor?? [ 128.377972][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.377993][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.405845][ T5893] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.405877][ T5893] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 128.405898][ T5893] usb 2-1: Manufacturer: syz [ 128.454602][ T5893] usb 2-1: config 0 descriptor?? [ 128.661812][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 128.662265][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.745699][ T10] saitek 0003:06A3:0CFA.0002: unknown main item tag 0x0 [ 128.889590][ T10] saitek 0003:06A3:0CFA.0002: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.2-1/input0 [ 128.961269][ T10] usb 3-1: USB disconnect, device number 3 [ 129.178129][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.244510][ T6282] fido_id[6282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 129.274679][ T5893] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 129.274745][ T5893] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 129.274772][ T5893] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 129.274831][ T5893] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 129.274942][ T5893] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 129.330991][ T5893] usb 2-1: USB disconnect, device number 4 [ 130.999903][ T6296] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 130.999924][ T6296] netlink: 'syz.2.128': attribute type 4 has an invalid length. [ 130.999937][ T6296] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.128'. [ 132.734996][ T6235] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 133.209573][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.209669][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.358554][ T6235] usb 4-1: device descriptor read/64, error -71 [ 133.565573][ T6313] Bluetooth: MGMT ver 1.23 [ 133.567100][ T6313] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 133.598568][ T6235] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 133.728632][ T6235] usb 4-1: device descriptor read/64, error -71 [ 133.839032][ T6235] usb usb4-port1: attempt power cycle [ 134.956043][ T6235] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.125869][ T6328] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 135.553217][ T6331] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 135.553238][ T6331] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 135.553250][ T6331] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.140'. [ 135.632472][ T6235] usb 4-1: device descriptor read/8, error -71 [ 135.693435][ T6328] team0: Device veth1_macvtap failed to register rx_handler [ 144.060166][ T6401] bridge0: port 3(gretap0) entered blocking state [ 144.060286][ T6401] bridge0: port 3(gretap0) entered disabled state [ 144.060838][ T6401] gretap0: entered allmulticast mode [ 144.064515][ T6401] gretap0: entered promiscuous mode [ 144.066226][ T6401] bridge0: port 3(gretap0) entered blocking state [ 144.066380][ T6401] bridge0: port 3(gretap0) entered forwarding state [ 150.266248][ T6459] ptrace attach of "./syz-executor exec"[5801] was attempted by "./syz-executor exec"[6459] [ 151.663280][ T5814] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 151.976939][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.976973][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.978871][ T5814] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 151.978898][ T5814] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 151.978918][ T5814] usb 4-1: Manufacturer: syz [ 151.987191][ T5814] usb 4-1: config 0 descriptor?? [ 154.065640][ T5814] usbhid 4-1:0.0: can't add hid device: -71 [ 154.065766][ T5814] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.111009][ T5814] usb 4-1: USB disconnect, device number 14 [ 156.688508][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.737716][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.206'. [ 156.838474][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 156.841259][ T5893] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 156.841289][ T5893] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 156.841346][ T5893] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.841370][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.754291][ T6528] Zero length message leads to an empty skb [ 159.538046][ T6556] trusted_key: encrypted_key: insufficient parameters specified [ 159.578556][ T5893] usb 1-1: USB disconnect, device number 3 [ 159.652247][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'. [ 159.769429][ T6565] binder: 6563:6565 ioctl c0306201 200000000500 returned -11 [ 163.148461][ T6085] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.302307][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'. [ 163.320478][ T6085] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.320508][ T6085] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 163.320527][ T6085] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.320572][ T6085] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.322386][ T6085] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.322411][ T6085] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.322430][ T6085] usb 1-1: Product: syz [ 163.322444][ T6085] usb 1-1: Manufacturer: syz [ 163.352975][ T6085] cdc_wdm 1-1:1.0: skipping garbage [ 163.353016][ T6085] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 163.432326][ T6603] binder: 6602:6603 ioctl c0306201 200000000500 returned -11 [ 165.433638][ T5999] usb 1-1: USB disconnect, device number 4 [ 167.927816][ T5814] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.080059][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 168.102410][ T5814] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.102437][ T5814] usb 3-1: config 0 has no interface number 0 [ 168.124408][ T5814] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 168.124437][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.124456][ T5814] usb 3-1: Product: syz [ 168.124471][ T5814] usb 3-1: Manufacturer: syz [ 168.124485][ T5814] usb 3-1: SerialNumber: syz [ 168.160151][ T6085] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.198539][ T5814] usb 3-1: config 0 descriptor?? [ 168.233603][ T5814] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 168.331976][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.260'. [ 168.334691][ T6085] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.334723][ T6085] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 168.334751][ T6085] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.404923][ T6085] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.423744][ T6085] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.424337][ T6085] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.424361][ T6085] usb 1-1: Product: syz [ 168.424375][ T6085] usb 1-1: Manufacturer: syz [ 169.333945][ T5814] gspca_spca1528: reg_w err -110 [ 169.348528][ T5814] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 169.379717][ T6085] cdc_wdm 1-1:1.0: skipping garbage [ 169.379759][ T6085] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 171.012134][ T5880] usb 3-1: USB disconnect, device number 4 [ 171.133048][ T5997] usb 1-1: USB disconnect, device number 5 [ 171.559833][ T6718] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 171.559856][ T6718] netlink: 'syz.2.273': attribute type 4 has an invalid length. [ 171.559868][ T6718] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.273'. [ 171.873852][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.275'. [ 171.982434][ T5997] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.408564][ T5997] usb 5-1: Using ep0 maxpacket: 32 [ 172.410865][ T5997] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 172.410905][ T5997] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 172.410946][ T5997] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 172.410973][ T5997] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 172.411001][ T5997] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.415081][ T5997] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 172.415109][ T5997] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 172.415136][ T5997] usb 5-1: Product: syz [ 172.415151][ T5997] usb 5-1: Manufacturer: syz [ 172.415165][ T5997] usb 5-1: SerialNumber: syz [ 172.448064][ T5997] usb 5-1: config 0 descriptor?? [ 172.552646][ T5997] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 173.497973][ T5997] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 173.621921][ T6729] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.954645][ T5997] usb 5-1: USB disconnect, device number 2 [ 174.452979][ T5997] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 177.108595][ T5880] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.278566][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 177.482431][ T5880] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.482460][ T5880] usb 1-1: config 0 has no interface number 0 [ 177.514648][ T5880] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 177.514666][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.514677][ T5880] usb 1-1: Product: syz [ 177.514685][ T5880] usb 1-1: Manufacturer: syz [ 177.514692][ T5880] usb 1-1: SerialNumber: syz [ 177.636241][ T6764] bridge0: port 3(gretap0) entered blocking state [ 177.638838][ T6764] bridge0: port 3(gretap0) entered disabled state [ 177.647430][ T6764] gretap0: entered allmulticast mode [ 177.775506][ T6764] gretap0: entered promiscuous mode [ 177.814931][ T6764] bridge0: port 3(gretap0) entered blocking state [ 177.816560][ T6764] bridge0: port 3(gretap0) entered forwarding state [ 178.360707][ T5880] usb 1-1: config 0 descriptor?? [ 178.409885][ T6763] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 178.440617][ T5880] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 179.502185][ T6779] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 179.564315][ T6171] IPVS: starting estimator thread 0... [ 179.589771][ T6777] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 179.669390][ T6780] IPVS: using max 14 ests per chain, 33600 per kthread [ 180.383807][ T5880] gspca_spca1528: reg_w err -110 [ 180.384114][ T5880] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 180.884121][ T6085] usb 1-1: USB disconnect, device number 6 [ 186.261793][ T6171] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.734893][ T6171] usb 2-1: Using ep0 maxpacket: 32 [ 187.628160][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e666800: rx timeout, send abort [ 187.636424][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e666c00: rx timeout, send abort [ 188.129183][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e666800: abort rx timeout. Force session deactivation [ 188.142224][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e666c00: abort rx timeout. Force session deactivation [ 188.169017][ T6171] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.169043][ T6171] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.169076][ T6171] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 188.169098][ T6171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.173880][ T6171] usb 2-1: config 0 descriptor?? [ 188.469232][ T6171] usb 2-1: USB disconnect, device number 5 [ 189.778739][ T6863] binder: 6857:6863 ioctl 40182103 200000000300 returned -22 [ 192.549914][ T5950] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 192.698501][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 192.700695][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.700718][ T5950] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.700755][ T5950] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 192.700779][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.705935][ T5950] usb 2-1: config 0 descriptor?? [ 193.549553][ T6235] usb 2-1: USB disconnect, device number 6 [ 194.385875][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400529][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.322702][ T6936] capability: warning: `syz.4.341' uses deprecated v2 capabilities in a way that may be insecure [ 197.529724][ T6951] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 200.372214][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.815386][ T31] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 200.815417][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.815436][ T31] usb 4-1: Product: syz [ 200.815450][ T31] usb 4-1: Manufacturer: syz [ 200.815464][ T31] usb 4-1: SerialNumber: syz [ 201.318037][ T31] usb 4-1: config 0 descriptor?? [ 201.697854][ T6984] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 201.697889][ T6984] overlayfs: failed to set xattr on upper [ 201.697898][ T6984] overlayfs: ...falling back to redirect_dir=nofollow. [ 201.697906][ T6984] overlayfs: ...falling back to index=off. [ 201.697913][ T6984] overlayfs: ...falling back to uuid=null. [ 202.596553][ T6991] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 202.681360][ T31] usb 4-1: USB disconnect, device number 15 [ 202.829944][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.909817][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 206.911573][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 206.911605][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 206.911809][ T5120] Bluetooth: hci1: command 0x0406 tx timeout [ 206.917527][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 208.413410][ T7044] bridge0: port 3(gretap0) entered blocking state [ 208.413476][ T7044] bridge0: port 3(gretap0) entered disabled state [ 208.413612][ T7044] gretap0: entered allmulticast mode [ 208.414911][ T7044] gretap0: entered promiscuous mode [ 208.416887][ T7044] bridge0: port 3(gretap0) entered blocking state [ 208.416955][ T7044] bridge0: port 3(gretap0) entered forwarding state [ 209.888510][ T5814] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 210.040736][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.040770][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.042266][ T5814] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 210.042293][ T5814] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 210.042313][ T5814] usb 5-1: Manufacturer: syz [ 210.095748][ T5814] usb 5-1: config 0 descriptor?? [ 212.509921][ T5814] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 212.509982][ T5814] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 212.510089][ T5814] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 212.675142][ T5814] usb 5-1: USB disconnect, device number 3 [ 212.831318][ T7093] trusted_key: encrypted_key: insufficient parameters specified [ 224.845937][ T7199] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 225.737150][ T7199] team0: Device veth1_macvtap failed to register rx_handler [ 226.889034][ T7223] trusted_key: encrypted_key: insufficient parameters specified [ 227.138465][ T5945] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 227.358417][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 227.377986][ T5945] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.378015][ T5945] usb 4-1: config 0 has no interface number 0 [ 227.423059][ T5945] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 227.423080][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.423090][ T5945] usb 4-1: Product: syz [ 227.423098][ T5945] usb 4-1: Manufacturer: syz [ 227.423106][ T5945] usb 4-1: SerialNumber: syz [ 227.468199][ T5945] usb 4-1: config 0 descriptor?? [ 227.495489][ T5945] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 228.338011][ T7235] syz.4.437 uses obsolete (PF_INET,SOCK_PACKET) [ 228.960194][ T5945] gspca_spca1528: reg_w err -110 [ 228.960292][ T5945] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 230.009616][ T804] usb 4-1: USB disconnect, device number 16 [ 234.094890][ T7302] trusted_key: encrypted_key: insufficient parameters specified [ 237.171331][ T7343] trusted_key: encrypted_key: insufficient parameters specified [ 241.687506][ T5808] Bluetooth: hci2: connection err: -111 [ 245.511404][ T6034] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 246.138492][ T6034] usb 2-1: Using ep0 maxpacket: 8 [ 246.140834][ T6034] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 246.140891][ T6034] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.140915][ T6034] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.140940][ T6034] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 246.140962][ T6034] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 246.140989][ T6034] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.141031][ T6034] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.141055][ T6034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.264438][ T6034] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 247.380892][ T5808] Bluetooth: hci3: connection err: -111 [ 248.518641][ T6235] usb 2-1: USB disconnect, device number 7 [ 252.143252][ T7531] binder: 7508:7531 ioctl 40182103 200000000300 returned -22 [ 255.787743][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.787813][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.115303][ T37] audit: type=1326 audit(1766936214.065:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7571 comm="syz.1.548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2564daf749 code=0x0 [ 258.830780][ T5998] IPVS: starting estimator thread 0... [ 258.833422][ T7587] capability: warning: `syz.4.551' uses 32-bit capabilities (legacy support in use) [ 258.984790][ T7582] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 259.011409][ T7579] netlink: 'syz.0.550': attribute type 2 has an invalid length. [ 259.131025][ T7586] IPVS: using max 15 ests per chain, 36000 per kthread [ 259.468513][ T5998] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 259.618474][ T5998] usb 5-1: Using ep0 maxpacket: 8 [ 259.622320][ T5998] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 259.622355][ T5998] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.622368][ T5998] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.622381][ T5998] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.622393][ T5998] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.622417][ T5998] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.622436][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.838813][ T5998] usb 5-1: usb_control_msg returned -32 [ 259.838923][ T5998] usbtmc 5-1:16.0: can't read capabilities [ 260.360535][ T7608] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 260.365329][ T5893] usb 5-1: USB disconnect, device number 4 [ 264.298660][ T49] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 264.585421][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 264.595557][ T49] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.595584][ T49] usb 3-1: config 0 has no interface number 0 [ 264.597887][ T49] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 264.597913][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.597924][ T49] usb 3-1: Product: syz [ 264.597932][ T49] usb 3-1: Manufacturer: syz [ 264.597940][ T49] usb 3-1: SerialNumber: syz [ 264.618870][ T49] usb 3-1: config 0 descriptor?? [ 264.643461][ T49] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 266.321820][ T49] gspca_spca1528: reg_w err -110 [ 266.321927][ T49] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 266.591028][ T7643] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 266.627113][ T7643] team0: Device veth1_macvtap failed to register rx_handler [ 267.230157][ T6235] usb 3-1: USB disconnect, device number 5 [ 267.329101][ T5814] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 267.484475][ T5814] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 267.484507][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.484527][ T5814] usb 1-1: Product: syz [ 267.484542][ T5814] usb 1-1: Manufacturer: syz [ 267.484556][ T5814] usb 1-1: SerialNumber: syz [ 267.524796][ T5814] usb 1-1: config 0 descriptor?? [ 267.536712][ T5814] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 267.560438][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.563831][ T5814] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 267.563923][ T5814] usb 1-1: media controller created [ 268.942448][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.487369][ T5814] DVB: Unable to find symbol mt352_attach() [ 271.288816][ T5814] DVB: Unable to find symbol nxt6000_attach() [ 271.288832][ T5814] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 271.337458][ T5814] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 271.422023][ T5814] dvb-usb: schedule remote query interval to 1000 msecs. [ 271.422049][ T5814] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 271.422130][ T5814] dvb-usb: bulk message failed: -22 (7/0) [ 271.422146][ T5814] dvb-usb: bulk message failed: -22 (7/0) [ 271.460715][ T5814] usb 1-1: USB disconnect, device number 7 [ 271.759012][ T7691] overlayfs: failed to resolve './file1': -2 [ 271.829873][ T5814] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 272.507307][ T7705] ======================================================= [ 272.507307][ T7705] WARNING: The mand mount option has been deprecated and [ 272.507307][ T7705] and is ignored by this kernel. Remove the mand [ 272.507307][ T7705] option from the mount to silence this warning. [ 272.507307][ T7705] ======================================================= [ 272.798457][ T5922] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 272.893992][ T37] audit: type=1804 audit(1766936228.835:5): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.593" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=14719 res=1 errno=0 [ 272.959786][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 272.963532][ T5922] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.963558][ T5922] usb 5-1: config 0 has no interface number 0 [ 272.967181][ T5922] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 272.967209][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.967229][ T5922] usb 5-1: Product: syz [ 272.967244][ T5922] usb 5-1: Manufacturer: syz [ 272.967259][ T5922] usb 5-1: SerialNumber: syz [ 273.031883][ T5922] usb 5-1: config 0 descriptor?? [ 273.045320][ T5922] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 274.261179][ T7740] overlayfs: overlapping lowerdir path [ 274.812971][ T5922] gspca_spca1528: reg_r err -71 [ 274.813047][ T5922] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 274.869313][ T5922] usb 5-1: USB disconnect, device number 5 [ 274.916736][ T7751] trusted_key: encrypted_key: insufficient parameters specified [ 275.466273][ T7760] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 275.776784][ T7769] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 275.987700][ T7777] overlayfs: overlapping lowerdir path [ 276.196206][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 277.879433][ T7800] trusted_key: encrypted_key: insufficient parameters specified [ 278.119312][ T7805] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 278.932730][ T7814] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.187907][ T7823] overlayfs: overlapping lowerdir path [ 281.229610][ T7840] random: crng reseeded on system resumption [ 282.630890][ T6235] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 283.057175][ T6235] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.057234][ T6235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.561319][ T6235] usb 2-1: config 0 descriptor?? [ 284.530886][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 284.585118][ T6235] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 284.586284][ T6235] [drm:udl_init] *ERROR* Selecting channel failed [ 284.764578][ T6235] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 284.764604][ T6235] [drm] Initialized udl on minor 2 [ 284.828601][ T6235] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 284.832940][ T6235] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 284.863636][ T5922] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 284.888906][ T6235] usb 2-1: USB disconnect, device number 8 [ 284.908829][ T5922] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 284.909716][ T5922] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 284.941704][ T7849] vlan2: entered allmulticast mode [ 284.941719][ T7849] hsr0: entered allmulticast mode [ 284.941725][ T7849] hsr_slave_0: entered allmulticast mode [ 284.941738][ T7849] hsr_slave_1: entered allmulticast mode [ 285.124295][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 285.208759][ T7853] trusted_key: encrypted_key: insufficient parameters specified [ 285.671063][ T7862] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.815152][ T6235] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 286.034021][ T6235] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.034051][ T6235] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 286.034071][ T6235] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.034122][ T6235] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 286.034150][ T6235] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 286.849034][ T6235] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.849053][ T6235] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.849064][ T6235] usb 5-1: Product: syz [ 286.849072][ T6235] usb 5-1: Manufacturer: syz [ 286.917929][ T5922] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 287.004884][ T6235] cdc_wdm 5-1:1.0: skipping garbage [ 287.004905][ T6235] cdc_wdm 5-1:1.0: skipping garbage [ 287.038920][ T6235] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 287.038944][ T6235] cdc_wdm 5-1:1.0: Unknown control protocol [ 287.085666][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.085687][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.086559][ T5922] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 287.086574][ T5922] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 287.086584][ T5922] usb 1-1: Manufacturer: syz [ 287.095115][ T5922] usb 1-1: config 0 descriptor?? [ 288.452193][ T5922] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input6 [ 288.771860][ T5922] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input7 [ 288.904606][ T5922] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input8 [ 289.008816][ T5922] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input9 [ 289.070886][ T5922] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 289.122466][ T5922] usb 1-1: USB disconnect, device number 8 [ 289.464742][ T5998] usb 5-1: USB disconnect, device number 6 [ 289.899262][ T7886] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 290.009899][ T7887] fido_id[7887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 291.012120][ T7908] trusted_key: encrypted_key: insufficient parameters specified [ 292.828537][ T6235] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 294.021543][ T6235] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.021571][ T6235] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 294.021590][ T6235] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.021644][ T6235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.021672][ T6235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.024358][ T6235] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.024386][ T6235] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.024406][ T6235] usb 4-1: Product: syz [ 294.024420][ T6235] usb 4-1: Manufacturer: syz [ 294.137905][ T6235] cdc_wdm 4-1:1.0: skipping garbage [ 294.137926][ T6235] cdc_wdm 4-1:1.0: skipping garbage [ 294.158521][ T6235] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 294.158547][ T6235] cdc_wdm 4-1:1.0: Unknown control protocol [ 294.216133][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 294.423051][ T7939] trusted_key: encrypted_key: insufficient parameters specified [ 295.525529][ T7955] overlayfs: workdir and upperdir must reside under the same mount [ 297.264441][ T5922] usb 4-1: USB disconnect, device number 17 [ 298.118533][ T7983] trusted_key: encrypted_key: insufficient parameters specified [ 299.264240][ T7989] overlayfs: workdir and upperdir must reside under the same mount [ 299.297120][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 299.489251][ T5945] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 299.660114][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 300.330593][ T5945] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 300.356582][ T5945] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 300.356612][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 300.356632][ T5945] usb 3-1: Product: syz [ 300.356647][ T5945] usb 3-1: Manufacturer: syz [ 300.356662][ T5945] usb 3-1: SerialNumber: syz [ 300.403784][ T5945] usb 3-1: config 0 descriptor?? [ 300.404612][ T7990] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 300.409649][ T5945] hub 3-1:0.0: bad descriptor, ignoring hub [ 300.409685][ T5945] hub 3-1:0.0: probe with driver hub failed with error -5 [ 300.498547][ T5998] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 300.898963][ T8011] binder: 8004:8011 ioctl 40182103 200000000300 returned -22 [ 300.926545][ T5998] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 300.926575][ T5998] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 300.926592][ T5998] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 300.926621][ T5998] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 300.926636][ T5998] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 300.949043][ T5998] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 300.949072][ T5998] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 300.949092][ T5998] usb 1-1: Product: syz [ 300.949106][ T5998] usb 1-1: Manufacturer: syz [ 301.017502][ T5998] cdc_wdm 1-1:1.0: skipping garbage [ 301.017515][ T5998] cdc_wdm 1-1:1.0: skipping garbage [ 301.040564][ T5998] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 301.040585][ T5998] cdc_wdm 1-1:1.0: Unknown control protocol [ 301.231987][ T804] usb 3-1: USB disconnect, device number 6 [ 301.680851][ T8027] trusted_key: encrypted_key: insufficient parameters specified [ 302.111693][ T8037] netlink: 52 bytes leftover after parsing attributes in process `syz.3.704'. [ 303.030727][ T8041] binder: 8040:8041 ioctl 40182103 200000000300 returned -22 [ 303.067239][ T5998] usb 1-1: USB disconnect, device number 9 [ 303.588790][ T8047] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 303.623223][ T8046] netlink: 'syz.3.709': attribute type 2 has an invalid length. [ 304.293659][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.713'. [ 306.987670][ T8093] binder: 8088:8093 ioctl 40182103 200000000300 returned -22 [ 307.016804][ T8094] trusted_key: encrypted_key: insufficient parameters specified [ 307.394010][ T8099] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 307.693875][ T5997] IPVS: starting estimator thread 0... [ 307.934868][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.726'. [ 307.982523][ T8099] netlink: 'syz.2.724': attribute type 2 has an invalid length. [ 308.631385][ T8104] IPVS: using max 15 ests per chain, 36000 per kthread [ 310.434777][ T8136] ptrace attach of "./syz-executor exec"[5801] was attempted by "./syz-executor exec"[8136] [ 310.654088][ T8139] trusted_key: encrypted_key: insufficient parameters specified [ 314.077323][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034832800: rx timeout, send abort [ 314.079435][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c545800: rx timeout, send abort [ 314.577397][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034832800: abort rx timeout. Force session deactivation [ 314.583152][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c545800: abort rx timeout. Force session deactivation [ 314.743861][ T5999] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 314.888459][ T5999] usb 2-1: Using ep0 maxpacket: 32 [ 314.893240][ T5999] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 314.893269][ T5999] usb 2-1: config 0 has no interface number 0 [ 314.893318][ T5999] usb 2-1: config 0 interface 184 has no altsetting 0 [ 314.896857][ T5999] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 314.896888][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.896909][ T5999] usb 2-1: Product: syz [ 314.896923][ T5999] usb 2-1: Manufacturer: syz [ 314.896938][ T5999] usb 2-1: SerialNumber: syz [ 314.913844][ T5999] usb 2-1: config 0 descriptor?? [ 315.014417][ T5999] smsc75xx v1.0.0 [ 316.362093][ T5999] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 316.362126][ T5999] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 316.362787][ T5999] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 316.362812][ T5999] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 316.362832][ T5999] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 316.362854][ T5999] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 316.363555][ T5999] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 316.413360][ T5999] usb 2-1: USB disconnect, device number 9 [ 317.624354][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.624425][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.828301][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.739'. [ 318.191832][ T8187] trusted_key: encrypted_key: insufficient parameters specified [ 322.717739][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da5b400: rx timeout, send abort [ 322.720959][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da5bc00: rx timeout, send abort [ 323.217825][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da5b400: abort rx timeout. Force session deactivation [ 323.225259][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da5bc00: abort rx timeout. Force session deactivation [ 323.342544][ T8225] binder: 8221:8225 ioctl 40182103 200000000300 returned -22 [ 326.730243][ T8284] binder: 8280:8284 ioctl 40182103 200000000300 returned -22 [ 327.445167][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e5c5c00: rx timeout, send abort [ 327.445367][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e5c7c00: rx timeout, send abort [ 327.945225][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e5c5c00: abort rx timeout. Force session deactivation [ 327.946070][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e5c7c00: abort rx timeout. Force session deactivation [ 330.535813][ T8313] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 331.025727][ T8312] netlink: 'syz.2.788': attribute type 2 has an invalid length. [ 332.808417][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038ffbc00: rx timeout, send abort [ 332.810864][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038ff8000: rx timeout, send abort [ 334.470760][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038ffbc00: abort rx timeout. Force session deactivation [ 334.472200][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038ff8000: abort rx timeout. Force session deactivation [ 334.869413][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 336.169629][ T8361] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 336.585596][ T8361] netlink: 'syz.1.805': attribute type 2 has an invalid length. [ 336.986775][ T8372] netlink: 'syz.0.810': attribute type 3 has an invalid length. [ 337.393438][ T8380] netlink: 165 bytes leftover after parsing attributes in process `syz.2.811'. [ 338.009137][ T8383] bridge0: port 3(gretap0) entered blocking state [ 338.009343][ T8383] bridge0: port 3(gretap0) entered disabled state [ 338.009711][ T8383] gretap0: entered allmulticast mode [ 338.013953][ T8383] gretap0: entered promiscuous mode [ 338.015790][ T8383] bridge0: port 3(gretap0) entered blocking state [ 338.016005][ T8383] bridge0: port 3(gretap0) entered forwarding state [ 339.963237][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 341.595773][ T5997] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 341.990585][ T5997] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 341.990625][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.990678][ T5997] usb 4-1: Product: syz [ 341.990693][ T5997] usb 4-1: Manufacturer: syz [ 341.990744][ T5997] usb 4-1: SerialNumber: syz [ 342.166230][ T5997] usb 4-1: config 0 descriptor?? [ 342.499710][ T5997] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 342.872522][ T5997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.873425][ T5997] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 342.873477][ T5997] usb 4-1: media controller created [ 342.894455][ T5997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.865224][ T5997] DVB: Unable to find symbol mt352_attach() [ 343.942407][ T5997] DVB: Unable to find symbol nxt6000_attach() [ 343.942422][ T5997] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 343.971385][ T5997] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 344.153758][ T5997] dvb-usb: schedule remote query interval to 1000 msecs. [ 344.153781][ T5997] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 344.153797][ T5997] dvb-usb: bulk message failed: -22 (7/0) [ 344.153812][ T5997] dvb-usb: bulk message failed: -22 (7/0) [ 344.240030][ T5997] usb 4-1: USB disconnect, device number 18 [ 344.791587][ T5997] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 346.055686][ T37] audit: type=1326 audit(1766936302.005:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe73a1ff749 code=0x0 [ 347.138568][ T6235] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 348.699009][ T6235] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 348.699029][ T6235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.699040][ T6235] usb 2-1: Product: syz [ 348.699047][ T6235] usb 2-1: Manufacturer: syz [ 348.699055][ T6235] usb 2-1: SerialNumber: syz [ 348.759912][ T6235] usb 2-1: config 0 descriptor?? [ 348.794789][ T6235] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 348.840781][ T6235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 348.849299][ T6235] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 348.849355][ T6235] usb 2-1: media controller created [ 348.906039][ T6235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.159412][ T6235] DVB: Unable to find symbol mt352_attach() [ 350.559350][ T6235] DVB: Unable to find symbol nxt6000_attach() [ 350.559367][ T6235] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 350.582484][ T6235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 350.661852][ T6235] dvb-usb: schedule remote query interval to 1000 msecs. [ 350.661874][ T6235] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 350.661891][ T6235] dvb-usb: bulk message failed: -22 (7/0) [ 350.661907][ T6235] dvb-usb: bulk message failed: -22 (7/0) [ 350.702097][ T6235] usb 2-1: USB disconnect, device number 10 [ 351.626519][ T6235] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 357.568550][ T5998] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 357.852672][ T5998] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 357.852703][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.852723][ T5998] usb 5-1: Product: syz [ 357.852737][ T5998] usb 5-1: Manufacturer: syz [ 357.852751][ T5998] usb 5-1: SerialNumber: syz [ 358.670756][ T5998] usb 5-1: config 0 descriptor?? [ 358.688654][ T5998] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 358.730627][ T5998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.734466][ T5998] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 358.734504][ T5998] usb 5-1: media controller created [ 358.855332][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.363617][ T5998] DVB: Unable to find symbol mt352_attach() [ 359.639640][ T5998] DVB: Unable to find symbol nxt6000_attach() [ 359.639657][ T5998] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 359.681241][ T5998] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 361.224617][ T5998] dvb-usb: schedule remote query interval to 1000 msecs. [ 361.224644][ T5998] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 361.224661][ T5998] dvb-usb: bulk message failed: -22 (7/0) [ 361.224677][ T5998] dvb-usb: bulk message failed: -22 (7/0) [ 361.274792][ T5998] usb 5-1: USB disconnect, device number 7 [ 362.625839][ T5998] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 363.995824][ T5945] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 364.172043][ T5945] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 364.172062][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.172073][ T5945] usb 2-1: Product: syz [ 364.172080][ T5945] usb 2-1: Manufacturer: syz [ 364.172088][ T5945] usb 2-1: SerialNumber: syz [ 364.175040][ T5945] usb 2-1: config 0 descriptor?? [ 364.186699][ T5945] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 364.370147][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.372457][ T5945] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 364.372513][ T5945] usb 2-1: media controller created [ 364.407825][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.598500][ T5945] DVB: Unable to find symbol mt352_attach() [ 364.774496][ T5945] DVB: Unable to find symbol nxt6000_attach() [ 364.774507][ T5945] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 364.823080][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 364.851102][ T5945] dvb-usb: schedule remote query interval to 1000 msecs. [ 364.851125][ T5945] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 364.851142][ T5945] dvb-usb: bulk message failed: -22 (7/0) [ 364.851159][ T5945] dvb-usb: bulk message failed: -22 (7/0) [ 364.901932][ T5945] usb 2-1: USB disconnect, device number 11 [ 365.092749][ T5945] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 366.155518][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 366.371990][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.372025][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.372066][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 366.372090][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.642773][ T10] usb 5-1: config 0 descriptor?? [ 368.502840][ T10] pyra 0003:1E7D:2CF6.0006: item fetching failed at offset 0/7 [ 368.503612][ T10] pyra 0003:1E7D:2CF6.0006: parse failed [ 368.503681][ T10] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -22 [ 368.568951][ T10] usb 5-1: USB disconnect, device number 8 [ 369.968486][ T6584] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 370.132049][ T6584] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 370.132067][ T6584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.132078][ T6584] usb 2-1: Product: syz [ 370.132085][ T6584] usb 2-1: Manufacturer: syz [ 370.132093][ T6584] usb 2-1: SerialNumber: syz [ 370.184144][ T6584] usb 2-1: config 0 descriptor?? [ 370.187742][ T6584] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 370.226707][ T6584] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.227550][ T6584] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 370.227604][ T6584] usb 2-1: media controller created [ 370.292938][ T6584] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.427002][ T6584] DVB: Unable to find symbol mt352_attach() [ 370.473670][ T6584] DVB: Unable to find symbol nxt6000_attach() [ 370.473686][ T6584] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 370.495160][ T6584] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 370.514271][ T6584] dvb-usb: schedule remote query interval to 1000 msecs. [ 370.514296][ T6584] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 370.514313][ T6584] dvb-usb: bulk message failed: -22 (7/0) [ 370.514329][ T6584] dvb-usb: bulk message failed: -22 (7/0) [ 370.551086][ T6584] usb 2-1: USB disconnect, device number 12 [ 371.856268][ T6584] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 371.935335][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 375.667524][ T8644] syz.0.899 (8644): drop_caches: 2 [ 375.737261][ T6584] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 375.965703][ T6584] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 375.965743][ T6584] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 375.965766][ T6584] usb 3-1: config 150 has no interface number 0 [ 375.965811][ T6584] usb 3-1: config 150 interface 204 has no altsetting 0 [ 375.979403][ T6584] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 375.979433][ T6584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.979446][ T6584] usb 3-1: Product: syz [ 375.979453][ T6584] usb 3-1: Manufacturer: syz [ 375.979461][ T6584] usb 3-1: SerialNumber: syz [ 376.345130][ T6584] xr_serial 3-1:150.204: skipping garbage [ 376.345171][ T6584] xr_serial 3-1:150.204: xr_serial converter detected [ 376.967462][ T6584] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 376.967509][ T6584] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 377.048838][ T6584] usb 3-1: USB disconnect, device number 7 [ 377.052847][ T6584] xr_serial 3-1:150.204: device disconnected [ 377.099890][ T5879] udevd[5879]: setting mode of /dev/bus/usb/003/007 to 020664 failed: No such file or directory [ 377.100083][ T5879] udevd[5879]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory [ 377.240175][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.909'. [ 379.209415][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.209486][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.805009][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 379.948546][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 379.949541][ T10] usb 5-1: no configurations [ 379.949558][ T10] usb 5-1: can't read configurations, error -22 [ 380.078481][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 381.088484][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 381.090020][ T10] usb 5-1: no configurations [ 381.090072][ T10] usb 5-1: can't read configurations, error -22 [ 381.097761][ T10] usb usb5-port1: attempt power cycle [ 381.459022][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 381.502671][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 381.505059][ T10] usb 5-1: no configurations [ 381.505078][ T10] usb 5-1: can't read configurations, error -22 [ 382.018681][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 382.039018][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 382.040047][ T10] usb 5-1: no configurations [ 382.040057][ T10] usb 5-1: can't read configurations, error -22 [ 382.044195][ T10] usb usb5-port1: unable to enumerate USB device [ 383.241116][ T8711] netlink: 'syz.2.920': attribute type 10 has an invalid length. [ 386.294373][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880629fa800: rx timeout, send abort [ 386.294524][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880629fac00: rx timeout, send abort [ 386.825956][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880629fa800: abort rx timeout. Force session deactivation [ 386.829723][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880629fac00: abort rx timeout. Force session deactivation [ 388.408489][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 388.648452][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 388.743182][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.743250][ T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 388.941302][ T31] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 388.941333][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.941353][ T31] usb 2-1: Product: syz [ 388.941368][ T31] usb 2-1: Manufacturer: syz [ 388.941382][ T31] usb 2-1: SerialNumber: syz [ 389.095969][ T31] usb 2-1: config 0 descriptor?? [ 392.493465][ T31] usb 2-1: USB disconnect, device number 13 [ 396.411940][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806396bc00: rx timeout, send abort [ 396.412110][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063969400: rx timeout, send abort [ 396.912006][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806396bc00: abort rx timeout. Force session deactivation [ 396.913363][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063969400: abort rx timeout. Force session deactivation [ 402.979883][ T8812] binder: 8806:8812 ioctl 40182103 200000000300 returned -22 [ 405.839905][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e188800: rx timeout, send abort [ 406.455047][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e188800: abort rx timeout. Force session deactivation [ 407.258552][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 407.555375][ T10] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 407.555406][ T10] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 407.555427][ T10] usb 4-1: config 150 has no interface number 0 [ 407.555472][ T10] usb 4-1: config 150 interface 204 has no altsetting 0 [ 407.593945][ T10] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 407.593977][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.593997][ T10] usb 4-1: Product: syz [ 407.594010][ T10] usb 4-1: Manufacturer: syz [ 407.594023][ T10] usb 4-1: SerialNumber: syz [ 407.850226][ T10] xr_serial 4-1:150.204: skipping garbage [ 407.850282][ T10] xr_serial 4-1:150.204: xr_serial converter detected [ 407.950113][ T6235] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 408.098466][ T6235] usb 3-1: Using ep0 maxpacket: 32 [ 408.121281][ T6235] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 408.121311][ T6235] usb 3-1: config 0 has no interface number 0 [ 408.147887][ T6235] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 408.148281][ T6235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.148303][ T6235] usb 3-1: Product: syz [ 408.149941][ T6235] usb 3-1: Manufacturer: syz [ 408.149960][ T6235] usb 3-1: SerialNumber: syz [ 408.311505][ T10] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 408.311566][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 408.376527][ T6235] usb 3-1: config 0 descriptor?? [ 408.398425][ T6235] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 408.399131][ T10] usb 4-1: USB disconnect, device number 19 [ 408.433234][ T10] xr_serial 4-1:150.204: device disconnected [ 409.589812][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 409.817290][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 409.852525][ T6235] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 409.878094][ T6235] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 409.945996][ T6235] usb 3-1: USB disconnect, device number 8 [ 409.982104][ T6235] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 410.027421][ T6235] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 410.027979][ T6235] quatech2 3-1:0.51: device disconnected [ 410.538461][ T5999] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 411.901923][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 411.903994][ T5999] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.904011][ T5999] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.906257][ T5999] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 411.906273][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.906284][ T5999] usb 4-1: Product: syz [ 411.906292][ T5999] usb 4-1: Manufacturer: syz [ 411.906299][ T5999] usb 4-1: SerialNumber: syz [ 411.977401][ T5999] usb 4-1: config 0 descriptor?? [ 413.335981][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e024000: rx timeout, send abort [ 413.818043][ T31] usb 4-1: USB disconnect, device number 20 [ 413.836045][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e024000: abort rx timeout. Force session deactivation [ 414.036519][ T8887] overlayfs: failed to resolve './file1': -2 [ 415.618541][ T5811] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 415.799821][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 415.802185][ T5811] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 415.802211][ T5811] usb 5-1: config 0 has no interface number 0 [ 415.802265][ T5811] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.806954][ T5811] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 415.806983][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.807004][ T5811] usb 5-1: Product: syz [ 415.807019][ T5811] usb 5-1: Manufacturer: syz [ 415.807034][ T5811] usb 5-1: SerialNumber: syz [ 415.877431][ T5811] usb 5-1: config 0 descriptor?? [ 415.912570][ T5811] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 415.912612][ T5811] em28xx 5-1:0.132: Video interface 132 found: [ 417.285074][ T5811] em28xx 5-1:0.132: chip ID is em2874 [ 417.958771][ T6584] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 418.108514][ T6584] usb 4-1: Using ep0 maxpacket: 16 [ 418.159638][ T6584] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.159659][ T6584] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 418.170141][ T5811] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 418.170169][ T5811] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 418.170204][ T5811] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 418.233749][ T6584] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 418.233768][ T6584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.233779][ T6584] usb 4-1: Product: syz [ 418.233786][ T6584] usb 4-1: Manufacturer: syz [ 418.233794][ T6584] usb 4-1: SerialNumber: syz [ 418.238444][ T5811] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 418.238472][ T5811] em28xx 5-1:0.132: analog set to bulk mode. [ 418.239253][ T5950] em28xx 5-1:0.132: Registering V4L2 extension [ 418.254063][ T6584] usb 4-1: config 0 descriptor?? [ 418.315453][ T5811] usb 5-1: USB disconnect, device number 13 [ 418.330568][ T5811] em28xx 5-1:0.132: Disconnecting em28xx [ 420.141854][ T5950] usb 5-1: Decoder not found [ 420.141874][ T5950] em28xx 5-1:0.132: failed to create media graph [ 420.141934][ T5950] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 420.217002][ T5950] em28xx 5-1:0.132: Remote control support is not available for this card. [ 420.217202][ T5811] em28xx 5-1:0.132: Closing input extension [ 420.328191][ T5811] em28xx 5-1:0.132: Freeing device [ 421.274919][ T6235] usb 4-1: USB disconnect, device number 21 [ 424.913654][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 425.488503][ T5950] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 425.668504][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 425.689476][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.689504][ T5950] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 425.698036][ T5950] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 425.698066][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.698087][ T5950] usb 3-1: Product: syz [ 425.698100][ T5950] usb 3-1: Manufacturer: syz [ 425.698115][ T5950] usb 3-1: SerialNumber: syz [ 425.755373][ T5950] usb 3-1: config 0 descriptor?? [ 428.416247][ T5811] usb 3-1: USB disconnect, device number 9 [ 431.217785][ T7314] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 431.388517][ T7314] usb 1-1: Using ep0 maxpacket: 16 [ 431.394514][ T7314] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 431.394532][ T7314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.394543][ T7314] usb 1-1: Product: syz [ 431.394550][ T7314] usb 1-1: Manufacturer: syz [ 431.394558][ T7314] usb 1-1: SerialNumber: syz [ 431.465419][ T7314] usb 1-1: config 0 descriptor?? [ 435.160565][ T5811] usb 1-1: USB disconnect, device number 10 [ 435.538147][ T9106] 9p: Bad value for 'wfdno' [ 437.029086][ T5999] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 437.801860][ T5999] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 437.801891][ T5999] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 437.801914][ T5999] usb 5-1: config 150 has no interface number 0 [ 437.801959][ T5999] usb 5-1: config 150 interface 204 has no altsetting 0 [ 437.807880][ T5999] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 437.807910][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.807930][ T5999] usb 5-1: Product: syz [ 437.807940][ T5999] usb 5-1: Manufacturer: syz [ 437.807948][ T5999] usb 5-1: SerialNumber: syz [ 439.305838][ T5999] xr_serial 5-1:150.204: skipping garbage [ 439.305893][ T5999] xr_serial 5-1:150.204: xr_serial converter detected [ 439.559919][ T5999] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 439.559982][ T5999] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 439.618858][ T5999] usb 5-1: USB disconnect, device number 14 [ 439.621747][ T5999] xr_serial 5-1:150.204: device disconnected [ 441.089819][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.089906][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.409115][ T5950] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 442.296039][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 442.315841][ T5950] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 442.315873][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.315893][ T5950] usb 1-1: Product: syz [ 442.315908][ T5950] usb 1-1: Manufacturer: syz [ 442.315922][ T5950] usb 1-1: SerialNumber: syz [ 442.377607][ T5950] usb 1-1: config 0 descriptor?? [ 443.640853][ T5945] usb 1-1: USB disconnect, device number 11 [ 445.240879][ T9174] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1072'. [ 447.047521][ T9190] netlink: 'syz.3.1079': attribute type 4 has an invalid length. [ 447.116818][ T9190] netlink: 'syz.3.1079': attribute type 4 has an invalid length. [ 447.208497][ T5986] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 447.378493][ T5986] usb 3-1: Using ep0 maxpacket: 32 [ 447.381133][ T5986] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 447.381159][ T5986] usb 3-1: config 0 has no interface number 0 [ 447.381486][ T5986] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.435663][ T5986] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 447.435683][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.435694][ T5986] usb 3-1: Product: syz [ 447.435701][ T5986] usb 3-1: Manufacturer: syz [ 447.435709][ T5986] usb 3-1: SerialNumber: syz [ 447.468836][ T5986] usb 3-1: config 0 descriptor?? [ 447.504461][ T5986] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 447.504484][ T5986] em28xx 3-1:0.132: Video interface 132 found: [ 447.928502][ T5986] em28xx 3-1:0.132: chip ID is em2874 [ 448.638674][ T5986] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 448.638709][ T5986] em28xx 3-1:0.132: board has no eeprom [ 448.709105][ T5986] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 448.709181][ T5986] em28xx 3-1:0.132: analog set to bulk mode. [ 449.449749][ T5945] em28xx 3-1:0.132: Registering V4L2 extension [ 449.469971][ T5986] usb 3-1: USB disconnect, device number 10 [ 449.472198][ T5986] em28xx 3-1:0.132: Disconnecting em28xx [ 451.102374][ T9216] bridge0: port 3(gretap0) entered blocking state [ 451.102438][ T9216] bridge0: port 3(gretap0) entered disabled state [ 451.102573][ T9216] gretap0: entered allmulticast mode [ 451.103958][ T9216] gretap0: entered promiscuous mode [ 451.104397][ T9216] bridge0: port 3(gretap0) entered blocking state [ 451.104471][ T9216] bridge0: port 3(gretap0) entered forwarding state [ 452.540381][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038cdd000: rx timeout, send abort [ 453.040484][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038cdd000: abort rx timeout. Force session deactivation [ 453.280180][ T5945] usb 3-1: Decoder not found [ 453.280200][ T5945] em28xx 3-1:0.132: failed to create media graph [ 453.280235][ T5945] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 453.284984][ T5945] em28xx 3-1:0.132: Remote control support is not available for this card. [ 453.285040][ T5986] em28xx 3-1:0.132: Closing input extension [ 453.303870][ T5986] em28xx 3-1:0.132: Freeing device [ 454.028565][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 455.509469][ T9257] 9pnet_virtio: no channels available for device syz [ 457.488555][ T804] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 457.800898][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.800934][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.800972][ T804] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 457.800996][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.854708][ T804] usb 3-1: config 0 descriptor?? [ 458.663868][ T804] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 458.663907][ T804] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 458.663934][ T804] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 458.663961][ T804] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 458.663986][ T804] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 458.664012][ T804] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 458.664039][ T804] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 458.688858][ T804] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 458.727893][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 458.898518][ T804] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 458.898575][ T804] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 459.011349][ T804] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 459.055087][ T804] usb 3-1: USB disconnect, device number 11 [ 463.248488][ T5950] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 463.400941][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.400977][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.401016][ T5950] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 463.401040][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.459776][ T5950] usb 3-1: config 0 descriptor?? [ 463.913573][ T5950] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 463.913614][ T5950] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 463.913639][ T5950] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 463.913668][ T5950] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 463.913692][ T5950] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 463.913717][ T5950] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 463.913742][ T5950] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 464.035195][ T5950] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 464.071785][ T5950] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 464.071842][ T5950] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 464.098623][ T5950] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 464.103291][ T5950] usb 3-1: USB disconnect, device number 12 [ 464.395493][ T9344] fido_id[9344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 466.605846][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 476.910196][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 478.181697][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'. [ 478.273060][ T9468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.918545][ T9488] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 479.918590][ T9488] overlayfs: overlapping lowerdir path [ 480.644174][ T9496] ubi0: attaching mtd0 [ 480.647310][ T9496] ubi0: scanning is finished [ 480.647324][ T9496] ubi0: empty MTD device detected [ 481.213395][ T9496] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 481.213426][ T9496] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 481.213444][ T9496] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 481.213460][ T9496] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 481.213472][ T9496] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 481.213480][ T9496] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 481.213489][ T9496] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 566580604 [ 481.213500][ T9496] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 481.216045][ T9504] ubi0: background thread "ubi_bgt0d" started, PID 9504 [ 484.207872][ T9521] random: crng reseeded on system resumption [ 493.169402][ T9566] random: crng reseeded on system resumption [ 495.219886][ T5808] Bluetooth: hci4: connection err: -111 [ 495.220013][ T5808] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 495.222082][ T5808] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 497.429409][ T9599] random: crng reseeded on system resumption [ 499.234107][ T5808] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 499.234283][ T5808] Bluetooth: hci4: Injecting HCI hardware error event [ 499.236348][ T61] Bluetooth: hci4: hardware error 0x00 [ 499.348635][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 499.517437][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 499.528903][ T31] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 499.528920][ T31] usb 2-1: config 0 has no interface number 0 [ 499.528955][ T31] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.530967][ T31] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 499.530983][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.530993][ T31] usb 2-1: Product: syz [ 499.531001][ T31] usb 2-1: Manufacturer: syz [ 499.531008][ T31] usb 2-1: SerialNumber: syz [ 499.596551][ T31] usb 2-1: config 0 descriptor?? [ 499.827529][ T31] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 499.827553][ T31] em28xx 2-1:0.132: Video interface 132 found: [ 500.049786][ T31] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 500.462596][ T31] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 500.462621][ T31] em28xx 2-1:0.132: board has no eeprom [ 500.518455][ T31] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 500.518484][ T31] em28xx 2-1:0.132: analog set to bulk mode. [ 500.518709][ T6584] em28xx 2-1:0.132: Registering V4L2 extension [ 500.594518][ T31] usb 2-1: USB disconnect, device number 14 [ 500.596752][ T31] em28xx 2-1:0.132: Disconnecting em28xx [ 501.556605][ T61] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 501.590889][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.593677][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.004814][ T6584] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 502.008444][ T6584] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 502.014528][ T6584] em28xx 2-1:0.132: No AC97 audio processor [ 502.071563][ T6584] usb 2-1: Decoder not found [ 502.071583][ T6584] em28xx 2-1:0.132: failed to create media graph [ 502.071616][ T6584] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 502.190290][ T6584] em28xx 2-1:0.132: Remote control support is not available for this card. [ 502.190348][ T31] em28xx 2-1:0.132: Closing input extension [ 502.277942][ T31] em28xx 2-1:0.132: Freeing device [ 502.909403][ T9653] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1226'. [ 505.108539][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 505.308474][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 505.327928][ T31] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 505.327955][ T31] usb 3-1: config 0 has no interface number 0 [ 505.330592][ T31] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 505.330619][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.330638][ T31] usb 3-1: Product: syz [ 505.330652][ T31] usb 3-1: Manufacturer: syz [ 505.330665][ T31] usb 3-1: SerialNumber: syz [ 505.357659][ T31] usb 3-1: config 0 descriptor?? [ 505.560319][ T31] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 505.647305][ T31] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 505.709003][ T31] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 505.973626][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 505.974327][ T7314] usb 3-1: USB disconnect, device number 13 [ 505.989634][ T7314] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 505.994808][ T7314] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 505.995656][ T7314] quatech2 3-1:0.51: device disconnected [ 506.783451][ T9691] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1237'. [ 506.864394][ T9693] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 506.919088][ T9696] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 507.216509][ T9700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1240'. [ 508.091624][ T9711] unsupported nla_type 33542 [ 508.334155][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1247'. [ 508.335690][ T9719] process 'syz.2.1248' launched '/dev/fd/4' with NULL argv: empty string added [ 510.138302][ T9730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1250'. [ 511.067582][ T9737] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 511.132296][ T9739] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 513.110267][ T9752] @: renamed from vlan0 (while UP) [ 514.286299][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'. [ 515.955074][ T9772] @: renamed from vlan0 (while UP) [ 517.581709][ T9787] macvtap1: entered promiscuous mode [ 517.581910][ T9787] macvtap1: entered allmulticast mode [ 517.581924][ T9787] veth1_vlan: entered allmulticast mode [ 520.660359][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 520.909380][ T9814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1276'. [ 523.038542][ T5811] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 524.347310][ T9836] macvtap1: entered promiscuous mode [ 524.347515][ T9836] macvtap1: entered allmulticast mode [ 524.347529][ T9836] veth1_vlan: entered allmulticast mode [ 524.568515][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 524.761429][ T5811] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.761461][ T5811] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 524.761488][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 524.761521][ T5811] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 524.761544][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.766729][ T5811] usb 2-1: config 0 descriptor?? [ 524.941170][ T9844] Driver unsupported XDP return value 0 on prog (id 181) dev N/A, expect packet loss! [ 525.052109][ T9848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1290'. [ 525.373428][ T5811] corsair-cpro 0003:1B1C:0C10.0009: item fetching failed at offset 2/5 [ 525.374336][ T5811] corsair-cpro 0003:1B1C:0C10.0009: probe with driver corsair-cpro failed with error -22 [ 525.478525][ T5893] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 525.563439][ T31] usb 2-1: USB disconnect, device number 15 [ 525.658510][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 525.660858][ T5893] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 525.660886][ T5893] usb 5-1: config 0 has no interface number 0 [ 525.894145][ T5893] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 525.894177][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.894197][ T5893] usb 5-1: Product: syz [ 525.894212][ T5893] usb 5-1: Manufacturer: syz [ 525.894227][ T5893] usb 5-1: SerialNumber: syz [ 525.979919][ T5893] usb 5-1: config 0 descriptor?? [ 526.017784][ T5893] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 526.278814][ T5893] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 526.447549][ T5893] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 526.753853][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 526.840312][ T5893] usb 5-1: USB disconnect, device number 15 [ 526.888169][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 526.940168][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 526.941093][ T5893] quatech2 5-1:0.51: device disconnected [ 527.566805][ T9876] macvtap0: entered promiscuous mode [ 527.567012][ T9876] macvtap0: entered allmulticast mode [ 527.567025][ T9876] veth1_vlan: entered allmulticast mode [ 531.497387][ T9898] fuseblk: Bad value for 'fd' [ 534.931410][ T9919] macvtap1: entered promiscuous mode [ 534.931527][ T9919] macvtap1: entered allmulticast mode [ 537.249802][ T9939] fuseblk: Bad value for 'fd' [ 542.801164][ T9989] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 542.817093][ T9989] netlink: 'syz.2.1330': attribute type 2 has an invalid length. [ 551.902856][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da50400: rx timeout, send abort [ 552.402921][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da50400: abort rx timeout. Force session deactivation [ 553.628506][T10015] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 553.778800][T10015] usb 1-1: Using ep0 maxpacket: 32 [ 553.845125][T10015] usb 1-1: unable to get BOS descriptor or descriptor too short [ 553.845264][T10015] usb 1-1: no configurations [ 553.845547][T10015] usb 1-1: can't read configurations, error -22 [ 554.088627][T10015] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 554.245938][T10015] usb 1-1: Using ep0 maxpacket: 32 [ 554.355687][T10015] usb 1-1: unable to get BOS descriptor or descriptor too short [ 554.356007][T10015] usb 1-1: no configurations [ 554.356049][T10015] usb 1-1: can't read configurations, error -22 [ 554.361345][T10015] usb usb1-port1: attempt power cycle [ 554.838527][T10015] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 554.863803][T10015] usb 1-1: Using ep0 maxpacket: 32 [ 554.868175][T10015] usb 1-1: unable to get BOS descriptor or descriptor too short [ 554.868257][T10015] usb 1-1: no configurations [ 554.868269][T10015] usb 1-1: can't read configurations, error -22 [ 555.228529][T10015] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 555.249275][T10015] usb 1-1: Using ep0 maxpacket: 32 [ 555.252136][T10015] usb 1-1: unable to get BOS descriptor or descriptor too short [ 555.252216][T10015] usb 1-1: no configurations [ 555.252229][T10015] usb 1-1: can't read configurations, error -22 [ 555.252768][T10015] usb usb1-port1: unable to enumerate USB device [ 557.070139][ T61] Bluetooth: hci1: connection err: -111 [ 557.075180][ T61] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 557.076074][ T61] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 560.918782][T10100] Bluetooth: hci0: connection err: -111 [ 560.921964][T10100] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 560.923017][T10100] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 560.929203][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 560.969837][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 560.973238][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 560.997441][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 561.004248][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 561.153450][ T61] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 561.187589][ T61] Bluetooth: hci1: Injecting HCI hardware error event [ 561.194501][ T5808] Bluetooth: hci1: hardware error 0x00 [ 562.166413][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 562.298589][ T10] usb 2-1: device descriptor read/64, error -71 [ 562.538488][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 562.668711][ T10] usb 2-1: device descriptor read/64, error -71 [ 562.779173][ T10] usb usb2-port1: attempt power cycle [ 563.083790][ T61] Bluetooth: hci5: command tx timeout [ 563.371051][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.371121][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.428716][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 563.449217][ T10] usb 2-1: device descriptor read/8, error -71 [ 563.698649][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 563.719299][ T10] usb 2-1: device descriptor read/8, error -71 [ 564.041437][ T5808] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 564.041682][ T10] usb usb2-port1: unable to enumerate USB device [ 564.616460][ T5808] Bluetooth: hci3: connection err: -111 [ 564.616835][ T5808] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 564.617879][ T5808] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 564.988790][ T5808] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 564.989090][ T5808] Bluetooth: hci0: Injecting HCI hardware error event [ 564.992059][ T61] Bluetooth: hci0: hardware error 0x00 [ 565.143751][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1375'. [ 565.154620][ T2128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.415014][ T5814] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 565.415187][ T5808] Bluetooth: hci5: command tx timeout [ 566.394969][T10149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.641001][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.641032][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.641111][ T5814] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 566.641133][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.649624][ T5814] usb 1-1: config 0 descriptor?? [ 566.851864][ T2128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.199468][ T61] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 567.427683][ T5814] usbhid 1-1:0.0: can't add hid device: -71 [ 567.427812][ T5814] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 567.469143][ T61] Bluetooth: hci5: command tx timeout [ 567.498929][ T5814] usb 1-1: USB disconnect, device number 16 [ 568.048826][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 568.179336][ T31] usb 2-1: device descriptor read/64, error -71 [ 568.730440][ T61] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 568.785486][ T61] Bluetooth: hci3: Injecting HCI hardware error event [ 568.813106][ T61] Bluetooth: hci3: hardware error 0x00 [ 568.958713][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 569.022529][ T2128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.109277][ T31] usb 2-1: device descriptor read/64, error -71 [ 569.220741][ T31] usb usb2-port1: attempt power cycle [ 570.748462][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 570.789147][ T31] usb 2-1: device descriptor read/8, error -71 [ 570.793417][ T5808] Bluetooth: hci5: command tx timeout [ 570.911705][ T2128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.301081][ T61] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 572.345037][T10094] chnl_net:caif_netlink_parms(): no params data found [ 575.272135][T10094] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.272254][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.272457][T10094] bridge_slave_0: entered allmulticast mode [ 575.274645][T10094] bridge_slave_0: entered promiscuous mode [ 575.277781][T10094] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.277901][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.278062][T10094] bridge_slave_1: entered allmulticast mode [ 575.351479][T10094] bridge_slave_1: entered promiscuous mode [ 575.652859][ T2128] gretap0: left allmulticast mode [ 575.652982][ T2128] gretap0: left promiscuous mode [ 575.655897][ T2128] bridge0: port 3(gretap0) entered disabled state [ 575.772614][ T2128] bridge_slave_1: left allmulticast mode [ 575.772712][ T2128] bridge_slave_1: left promiscuous mode [ 575.772993][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.899712][ T2128] bridge_slave_0: left allmulticast mode [ 575.899734][ T2128] bridge_slave_0: left promiscuous mode [ 575.899920][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.283719][T10276] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 581.286522][ T7314] IPVS: starting estimator thread 0... [ 581.388578][T10277] IPVS: using max 9 ests per chain, 21600 per kthread [ 581.447762][T10280] netlink: 'syz.4.1410': attribute type 2 has an invalid length. [ 583.155549][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.219943][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.240956][ T2128] bond0 (unregistering): Released all slaves [ 583.904199][T10298] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1419'. [ 583.955575][T10094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.140627][T10323] random: crng reseeded on system resumption [ 585.685805][T10094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.883261][T10339] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 586.914013][ T5945] IPVS: starting estimator thread 0... [ 587.001679][T10339] netlink: 'syz.1.1430': attribute type 2 has an invalid length. [ 587.048596][T10341] IPVS: using max 15 ests per chain, 36000 per kthread [ 587.506558][T10094] team0: Port device team_slave_0 added [ 587.532751][T10094] team0: Port device team_slave_1 added [ 587.625993][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1434'. [ 588.965148][T10094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.965160][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.965175][T10094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.043323][T10094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.043336][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.043352][T10094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.259286][ T2128] hsr_slave_0: left promiscuous mode [ 589.429150][ T2128] hsr_slave_1: left promiscuous mode [ 589.441710][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.441828][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.991066][ T5945] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 591.122778][T10387] random: crng reseeded on system resumption [ 591.286359][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 591.352902][ T5945] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.352930][ T5945] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.551077][ T5945] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.551108][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.551129][ T5945] usb 3-1: Product: syz [ 591.551144][ T5945] usb 3-1: Manufacturer: syz [ 591.551159][ T5945] usb 3-1: SerialNumber: syz [ 591.753138][ T2128] veth1_vlan: left allmulticast mode [ 591.753838][ T2128] veth0_macvtap: left promiscuous mode [ 591.754016][ T2128] veth1_vlan: left promiscuous mode [ 591.754427][ T2128] veth0_vlan: left promiscuous mode [ 593.896965][ T7314] usb 3-1: USB disconnect, device number 14 [ 594.877790][T10420] netlink: 'syz.2.1449': attribute type 4 has an invalid length. [ 594.990325][T10421] netlink: 'syz.2.1449': attribute type 4 has an invalid length. [ 597.028911][T10435] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1453'. [ 597.152365][ T2128] team0 (unregistering): Port device team_slave_1 removed [ 597.446879][ T2128] team0 (unregistering): Port device team_slave_0 removed [ 600.435629][ T5894] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 600.610196][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.610231][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.610271][ T5894] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 600.610295][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.665628][ T5894] usb 2-1: config 0 descriptor?? [ 601.276991][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 601.277162][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 601.324249][ T5894] usb 2-1: USB disconnect, device number 24 [ 604.052388][T10094] hsr_slave_0: entered promiscuous mode [ 604.053902][T10094] hsr_slave_1: entered promiscuous mode [ 605.331236][T10505] netlink: 'syz.0.1473': attribute type 4 has an invalid length. [ 605.444043][T10506] netlink: 'syz.0.1473': attribute type 4 has an invalid length. [ 606.022508][T10516] random: crng reseeded on system resumption [ 607.646224][ T6034] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 607.769534][ T2128] IPVS: stop unused estimator thread 0... [ 607.848585][ T6034] usb 1-1: Using ep0 maxpacket: 16 [ 607.861463][ T6034] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.861480][ T6034] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.865082][ T6034] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 607.865100][ T6034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.865111][ T6034] usb 1-1: Product: syz [ 607.865119][ T6034] usb 1-1: Manufacturer: syz [ 607.865127][ T6034] usb 1-1: SerialNumber: syz [ 608.079941][T10531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1477'. [ 611.171496][ T5894] usb 1-1: USB disconnect, device number 17 [ 611.992878][T10094] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 612.060740][T10094] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.096488][T10094] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 612.097206][T10569] netlink: 'syz.0.1484': attribute type 4 has an invalid length. [ 612.148713][T10570] netlink: 'syz.0.1484': attribute type 4 has an invalid length. [ 612.258307][T10094] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 612.609451][T10094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.709619][T10094] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.721543][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.828300][T10596] random: crng reseeded on system resumption [ 614.126196][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.621407][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.621579][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.807928][T10609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1489'. [ 618.268668][T10627] netlink: 'syz.2.1494': attribute type 4 has an invalid length. [ 618.331388][T10630] netlink: 'syz.2.1494': attribute type 4 has an invalid length. [ 619.129242][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034b55c00: rx timeout, send abort [ 619.129378][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc5bc00: rx timeout, send abort [ 619.129548][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888034b55c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 619.242992][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cc5bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 619.775614][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 619.806230][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 619.826309][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 619.861517][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 619.865610][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 621.774001][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1501'. [ 621.948629][ T5808] Bluetooth: hci4: command tx timeout [ 622.308568][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 622.317135][T10647] chnl_net:caif_netlink_parms(): no params data found [ 622.493471][ T10] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 622.493502][ T10] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 622.493522][ T10] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 622.493544][ T10] usb 1-1: config 150 has no interface number 0 [ 622.493577][ T10] usb 1-1: config 150 interface 204 has no altsetting 0 [ 622.515849][ T10] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 622.515880][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.515902][ T10] usb 1-1: Product: syz [ 622.515924][ T10] usb 1-1: Manufacturer: syz [ 622.515939][ T10] usb 1-1: SerialNumber: syz [ 623.899790][T10672] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.198838][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 624.603547][ T5808] Bluetooth: hci4: command tx timeout [ 624.609155][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.609231][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.639619][ T10] xr_serial 1-1:150.204: skipping garbage [ 625.278827][T10683] netlink: 'syz.2.1504': attribute type 4 has an invalid length. [ 625.330783][T10685] netlink: 'syz.2.1504': attribute type 4 has an invalid length. [ 625.409897][ T6034] usb 1-1: USB disconnect, device number 18 [ 626.668650][ T61] Bluetooth: hci4: command tx timeout [ 628.264714][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806336ec00: rx timeout, send abort [ 628.467014][T10721] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1511'. [ 628.748772][ T61] Bluetooth: hci4: command tx timeout [ 628.764806][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806336ec00: abort rx timeout. Force session deactivation [ 628.947547][T10717] tun0: tun_chr_ioctl cmd 1074025675 [ 628.947563][T10717] tun0: persist enabled [ 628.950050][T10718] tun0: tun_chr_ioctl cmd 1074025675 [ 628.950073][T10718] tun0: persist disabled [ 629.055312][T10720] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 629.055336][T10720] netlink: 'syz.1.1510': attribute type 2 has an invalid length. [ 629.075982][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.076210][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.076450][T10647] bridge_slave_0: entered allmulticast mode [ 629.109419][T10647] bridge_slave_0: entered promiscuous mode [ 629.371531][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.371683][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.371907][T10647] bridge_slave_1: entered allmulticast mode [ 629.373875][T10647] bridge_slave_1: entered promiscuous mode [ 629.778500][ T7314] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 629.899919][T10746] netlink: 'syz.4.1516': attribute type 4 has an invalid length. [ 629.944310][ T7314] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 629.944339][ T7314] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 629.944360][ T7314] usb 3-1: config 150 has no interface number 0 [ 629.944392][ T7314] usb 3-1: config 150 interface 204 has no altsetting 0 [ 629.951493][T10749] netlink: 'syz.4.1516': attribute type 4 has an invalid length. [ 629.989212][ T7314] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 629.989242][ T7314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.989263][ T7314] usb 3-1: Product: syz [ 629.989276][ T7314] usb 3-1: Manufacturer: syz [ 629.989291][ T7314] usb 3-1: SerialNumber: syz [ 630.198522][ T6584] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 630.258049][ T7314] xr_serial 3-1:150.204: skipping garbage [ 630.258072][ T7314] xr_serial 3-1:150.204: skipping garbage [ 630.390293][ T6584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.390327][ T6584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.390366][ T6584] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 630.390390][ T6584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.631003][ T6584] usb 1-1: config 0 descriptor?? [ 632.300494][ T5997] usb 3-1: USB disconnect, device number 15 [ 632.313687][ T6584] usbhid 1-1:0.0: can't add hid device: -71 [ 632.313807][ T6584] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 632.355691][ T6584] usb 1-1: USB disconnect, device number 19 [ 632.445431][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1522'. [ 632.525735][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dc37c00: rx timeout, send abort [ 632.525842][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802604f000: rx timeout, send abort [ 632.525950][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dc37c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 632.526049][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802604f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 632.600678][T10647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.614131][T10647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.718545][ T6584] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 632.868583][ T6584] usb 5-1: Using ep0 maxpacket: 32 [ 632.872316][ T6584] usb 5-1: config 0 has no interfaces? [ 632.872354][ T6584] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 632.872378][ T6584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.879899][ T6584] usb 5-1: config 0 descriptor?? [ 633.109445][ T10] usb 5-1: USB disconnect, device number 16 [ 633.408599][ T7314] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 633.417637][T10647] team0: Port device team_slave_0 added [ 633.447728][T10647] team0: Port device team_slave_1 added [ 633.605904][ T7314] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 633.605935][ T7314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.605959][ T7314] usb 1-1: Product: syz [ 633.605972][ T7314] usb 1-1: Manufacturer: syz [ 633.605986][ T7314] usb 1-1: SerialNumber: syz [ 633.678487][ T7314] usb 1-1: config 0 descriptor?? [ 633.898582][ T7314] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 634.012804][T10647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.012819][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.012844][T10647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.015060][T10647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.015076][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.015100][T10647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.160042][T10647] hsr_slave_0: entered promiscuous mode [ 636.177582][T10647] hsr_slave_1: entered promiscuous mode [ 636.192069][T10647] debugfs: 'hsr0' already exists in 'hsr' [ 636.192097][T10647] Cannot create hsr debugfs directory [ 636.282234][ T7314] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 636.288869][ T7314] usb 1-1: USB disconnect, device number 20 [ 636.322909][T10559] udevd[10559]: setting owner of /dev/bus/usb/001/020 to uid=0, gid=0 failed: No such file or directory [ 636.735561][T10820] netlink: 'syz.4.1529': attribute type 4 has an invalid length. [ 636.788264][T10821] netlink: 'syz.4.1529': attribute type 4 has an invalid length. [ 637.328474][ T1623] bridge_slave_1: left allmulticast mode [ 637.328503][ T1623] bridge_slave_1: left promiscuous mode [ 637.328752][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.604110][T10841] netlink: 'syz.4.1534': attribute type 4 has an invalid length. [ 638.835970][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036ce8c00: rx timeout, send abort [ 638.839506][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036ceb800: rx timeout, send abort [ 638.955632][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888036ceb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 638.956713][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888036ce8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 638.970565][T10844] netlink: 'syz.4.1534': attribute type 4 has an invalid length. [ 638.982497][ T1623] bridge_slave_0: left allmulticast mode [ 638.982523][ T1623] bridge_slave_0: left promiscuous mode [ 638.982758][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.683831][T10854] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.280660][T10880] netlink: 'syz.1.1544': attribute type 4 has an invalid length. [ 643.332663][T10881] netlink: 'syz.1.1544': attribute type 4 has an invalid length. [ 644.583278][ T1623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.619295][ T1623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.667254][ T1623] bond0 (unregistering): Released all slaves [ 645.044008][T10862] @: renamed from vlan0 (while UP) [ 647.087890][T10894] binder: 10892:10894 ioctl 40182103 200000000300 returned -22 [ 647.276897][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803497f400: rx timeout, send abort [ 647.277052][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803497d400: rx timeout, send abort [ 647.277267][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803497f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 647.277408][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803497d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 649.804222][ T1623] hsr_slave_0: left promiscuous mode [ 649.821022][ T1623] hsr_slave_1: left promiscuous mode [ 649.822095][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.876520][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.239941][ T5894] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 651.430533][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 651.434869][ T5894] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.434889][ T5894] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 651.434904][ T5894] usb 1-1: config 0 interface 0 has no altsetting 0 [ 651.434923][ T5894] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 651.434936][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.504969][ T5894] usb 1-1: config 0 descriptor?? [ 652.164118][T10946] binder: 10944:10946 ioctl 4018620d 0 returned -22 [ 652.314595][T10948] binder: 10944:10948 ioctl 40182103 200000000300 returned -22 [ 652.595650][ T5894] usbhid 1-1:0.0: can't add hid device: -71 [ 652.595723][ T5894] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 652.615393][ T5894] usb 1-1: USB disconnect, device number 21 [ 652.715483][T10953] netlink: 'syz.2.1559': attribute type 4 has an invalid length. [ 652.783326][T10955] netlink: 'syz.2.1559': attribute type 4 has an invalid length. [ 653.880488][T10966] netlink: 'syz.4.1561': attribute type 4 has an invalid length. [ 653.938185][T10970] netlink: 'syz.4.1561': attribute type 4 has an invalid length. [ 656.367616][T10993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1567'. [ 656.815110][ T1623] team0 (unregistering): Port device team_slave_1 removed [ 657.129106][ T1623] team0 (unregistering): Port device team_slave_0 removed [ 660.493557][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e3eb400: rx timeout, send abort [ 660.493672][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e3ebc00: rx timeout, send abort [ 660.493779][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e3eb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 660.493879][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e3ebc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 661.514490][T11005] binder: 11004:11005 ioctl 4018620d 0 returned -22 [ 661.745958][T11007] binder: 11004:11007 ioctl 40182103 200000000300 returned -22 [ 665.003548][ T7314] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 672.378061][ T2128] ------------[ cut here ]------------ [ 672.378074][ T2128] kernel BUG at net/ipv6/route.c:1473! [ 672.399607][ T2128] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 672.399649][ T2128] CPU: 0 UID: 0 PID: 2128 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 672.399677][ T2128] Tainted: [L]=SOFTLOCKUP [ 672.399684][ T2128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.399696][ T2128] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 672.399728][ T2128] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 672.399754][ T2128] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 7e 6e 9d f8 e9 f6 fa ff ff e8 44 37 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 672.399770][ T2128] RSP: 0018:ffffc900060bf160 EFLAGS: 00010293 [ 672.399785][ T2128] RAX: ffffffff898472dc RBX: ffff888126cef000 RCX: ffff888028fd5ac0 [ 672.399800][ T2128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.399811][ T2128] RBP: ffffc900060bf280 R08: ffffe8ffffc3a477 R09: 1ffffd1ffff8748e [ 672.399825][ T2128] R10: dffffc0000000000 R11: fffff91ffff8748f R12: ffff88803bc57780 [ 672.399838][ T2128] R13: ffffffff898462c2 R14: dffffc0000000000 R15: 0000607ed8f4b470 [ 672.399853][ T2128] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 672.399868][ T2128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 672.399881][ T2128] CR2: 0000200000007000 CR3: 000000004e24e000 CR4: 00000000003526f0 [ 672.399897][ T2128] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 672.399909][ T2128] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 672.399921][ T2128] Call Trace: [ 672.399933][ T2128] [ 672.399942][ T2128] ? ip6_pol_route+0x162/0x1180 [ 672.399966][ T2128] ? __pfx_ip6_pol_route+0x10/0x10 [ 672.399990][ T2128] ? fib_rules_lookup+0x96/0xe90 [ 672.400013][ T2128] ? fib_rules_lookup+0x96/0xe90 [ 672.400036][ T2128] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 672.400058][ T2128] fib6_rule_action+0x206/0x7d0 [ 672.400083][ T2128] ? __pfx_fib6_rule_action+0x10/0x10 [ 672.400107][ T2128] fib_rules_lookup+0x767/0xe90 [ 672.400133][ T2128] ? fib_rules_lookup+0x96/0xe90 [ 672.400155][ T2128] ? __pfx_fib_rules_lookup+0x10/0x10 [ 672.400176][ T2128] ? l3mdev_update_flow+0x29/0x640 [ 672.400202][ T2128] ? l3mdev_update_flow+0x4d1/0x640 [ 672.400222][ T2128] fib6_rule_lookup+0x18e/0x6f0 [ 672.400246][ T2128] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 672.400246][ T2128] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 672.400268][ T2128] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 672.400296][ T2128] ? ip6_route_output_flags+0x2e/0x5d0 [ 672.400319][ T2128] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 672.400347][ T2128] ip6_route_output_flags+0x364/0x5d0 [ 672.400370][ T2128] ? ip6_route_output_flags+0x2e/0x5d0 [ 672.400394][ T2128] ip6_dst_lookup_tail+0x1ae/0x1510 [ 672.400420][ T2128] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 672.400439][ T2128] ? lockdep_hardirqs_on+0x7b/0x110 [ 672.400457][ T2128] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 672.400476][ T2128] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 672.400502][ T2128] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 672.400526][ T2128] ? rt_spin_unlock+0x150/0x200 [ 672.400550][ T2128] ? rt_spin_unlock+0x161/0x200 [ 672.400573][ T2128] ip6_dst_lookup_flow+0x47/0xe0 [ 672.400599][ T2128] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 672.400623][ T2128] send6+0x4ce/0x8d0 [ 672.400642][ T2128] ? rt_read_lock+0x203/0x490 [ 672.400664][ T2128] ? send6+0x220/0x8d0 [ 672.400684][ T2128] ? __pfx_send6+0x10/0x10 [ 672.400701][ T2128] ? rcu_is_watching+0x15/0xb0 [ 672.400722][ T2128] ? __local_bh_disable_ip+0x3c/0x420 [ 672.400743][ T2128] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 672.400764][ T2128] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 672.400783][ T2128] wg_socket_send_skb_to_peer+0x128/0x200 [ 672.400805][ T2128] wg_packet_handshake_send_worker+0x1db/0x320 [ 672.400826][ T2128] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 672.400854][ T2128] ? process_scheduled_works+0x9ef/0x1770 [ 672.400874][ T2128] ? process_scheduled_works+0x9ef/0x1770 [ 672.400894][ T2128] process_scheduled_works+0xad1/0x1770 [ 672.400925][ T2128] ? __pfx_process_scheduled_works+0x10/0x10 [ 672.400944][ T2128] ? do_raw_spin_lock+0x121/0x290 [ 672.400970][ T2128] worker_thread+0x8a0/0xda0 [ 672.401006][ T2128] ? __kthread_parkme+0x7b/0x200 [ 672.401031][ T2128] kthread+0x711/0x8a0 [ 672.401055][ T2128] ? __pfx_worker_thread+0x10/0x10 [ 672.401075][ T2128] ? __pfx_kthread+0x10/0x10 [ 672.401096][ T2128] ? rt_spin_unlock+0x150/0x200 [ 672.401120][ T2128] ? rt_spin_unlock+0x161/0x200 [ 672.401141][ T2128] ? __pfx_kthread+0x10/0x10 [ 672.401164][ T2128] ret_from_fork+0x510/0xa50 [ 672.401185][ T2128] ? __pfx_ret_from_fork+0x10/0x10 [ 672.401210][ T2128] ? __switch_to+0xc9e/0x1480 [ 672.401236][ T2128] ? __pfx_kthread+0x10/0x10 [ 672.401259][ T2128] ret_from_fork_asm+0x1a/0x30 [ 672.401291][ T2128] [ 672.401302][ T2128] Modules linked in: [ 672.401337][ T2128] ---[ end trace 0000000000000000 ]--- [ 672.661261][ T2128] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 672.661807][ T2128] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 7e 6e 9d f8 e9 f6 fa ff ff e8 44 37 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 672.661831][ T2128] RSP: 0018:ffffc900060bf160 EFLAGS: 00010293 [ 672.661869][ T2128] RAX: ffffffff898472dc RBX: ffff888126cef000 RCX: ffff888028fd5ac0 [ 672.661903][ T2128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.661939][ T2128] RBP: ffffc900060bf280 R08: ffffe8ffffc3a477 R09: 1ffffd1ffff8748e [ 672.661961][ T2128] R10: dffffc0000000000 R11: fffff91ffff8748f R12: ffff88803bc57780 [ 672.661999][ T2128] R13: ffffffff898462c2 R14: dffffc0000000000 R15: 0000607ed8f4b470 [ 672.662039][ T2128] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 672.662061][ T2128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 672.662097][ T2128] CR2: 00007efdf1dd7206 CR3: 000000004e24e000 CR4: 00000000003526f0 [ 672.662137][ T2128] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 672.662156][ T2128] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 672.662204][ T2128] Kernel panic - not syncing: Fatal exception in interrupt [ 672.662569][ T2128] Kernel Offset: disabled