last executing test programs: 20.503538471s ago: executing program 0 (id=3786): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xb1, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x6a, r0, &(0x7f0000000480)="bdfd8c94", 0x4, 0x7fffffffffffffff, 0x0, 0x1}]) 20.174282507s ago: executing program 0 (id=3789): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000001, 0x80000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000040)={0x80}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000000f2ff05ffe1000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') syz_pidfd_open(0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c000280050001000400000078fef434774529b83efc442c643b3c69dea16c04ba6fa24d674ea60135ce1448dd78e40bb24a6d935ffb2ef1cb846eafb00905bc5ee2c1bfa6908c1cab7846265806c96f35e279e6da62097f1a2ca2423803918f212cadd3bc48f3aea221c531f44e26d4eb08a672621c"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x2, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x2, 0x2, 0x6dd, 0xfffffffffffffff9, 0xb482, 0x9, 0xfffffffffffffffc, 0x7ff, 0xa, 0x0, 0x9], 0x80a0000, 0x148800}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x3, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x600000) 19.827088206s ago: executing program 0 (id=3791): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7c, 0x8006) epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 19.562119104s ago: executing program 0 (id=3793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x56, &(0x7f00000018c0)=""/176}}, {{&(0x7f0000001700)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/213}, {&(0x7f0000001e00)=""/53}, {&(0x7f0000001e40)=""/2}], 0x0, &(0x7f0000001ec0)}, 0x3}], 0x15cbc1ab4c0933f, 0x0, 0x0) 10.279709533s ago: executing program 0 (id=3879): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 9.459088119s ago: executing program 0 (id=3889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x56, &(0x7f00000018c0)=""/176}}, {{&(0x7f0000001700)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/213}, {&(0x7f0000001e00)=""/53}, {&(0x7f0000001e40)=""/2}], 0x0, &(0x7f0000001ec0)}, 0x3}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 8.528384206s ago: executing program 3 (id=3894): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="2023b0000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.429171897s ago: executing program 3 (id=3895): r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x1) r1 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "305be7ad", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x6f7, 0xffffffffffffffff, 'id1\x00'}) wait4(r1, 0x0, 0x40000000, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') 8.210565621s ago: executing program 3 (id=3897): io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffc01, 0xa0001) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000b80)={{0x7, 0x5, 0xc, 0xd, 'syz0\x00', 0x401}, 0x1, [0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0x4, 0x0, 0x7db6, 0xd, 0x2, 0x10, 0x6, 0xffff, 0x81, 0xc5e, 0x81, 0x1ff, 0xc5b, 0x1, 0x6, 0x4, 0x7, 0x6, 0x1, 0x0, 0x9, 0x10000, 0x4e0, 0x8, 0x1000, 0x844, 0x7, 0x0, 0x0, 0x10, 0x6, 0x0, 0x5, 0x3, 0x3, 0x80, 0x280, 0x100000000, 0x3, 0x81, 0xe, 0x5, 0x3, 0xffffffffffffffff, 0x3, 0x3ff, 0xd69, 0x8, 0x1, 0x4, 0xfffffffffffffff7, 0x3, 0x7, 0xa1, 0x6, 0x5, 0x2, 0x3, 0xce, 0x1, 0xf1d, 0x6, 0xa9, 0x1, 0x4, 0x0, 0x7, 0x7f, 0x2, 0xa6, 0x6, 0x1, 0x6, 0x80, 0x34a, 0xc, 0x7fffffffffffffff, 0xfffffffffffffff1, 0x6, 0xf, 0xb4c, 0xffffffff80000000, 0xb3, 0x1, 0xb, 0x7, 0x1ff, 0x9, 0x8, 0x0, 0x198, 0x53, 0x8, 0xffffffffffffffe2, 0x6, 0x3f800, 0x7, 0xfff, 0xb6, 0x5, 0x5, 0xffff, 0x8, 0xf, 0x7, 0x7, 0x8, 0x100000000, 0x7, 0x7ff, 0xfffffffffffffffe, 0x0, 0x4, 0x5, 0x7, 0x0, 0x8, 0x6f, 0x5, 0x7fff, 0x0, 0x9]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 8.02629669s ago: executing program 3 (id=3898): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 7.825440928s ago: executing program 3 (id=3899): connect$unix(0xffffffffffffffff, 0x0, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 7.687531513s ago: executing program 3 (id=3900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)="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", &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) 4.469026414s ago: executing program 1 (id=3910): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x3) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x8000057, r2, 0x0) r3 = dup(r1) write$binfmt_elf64(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f454c4604ff7fa3360200000000000002003e00c9000000c9030000010000004000000000000000ea02000000000000000001000500380064"], 0x240) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.23001367s ago: executing program 1 (id=3911): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0) 4.179978713s ago: executing program 1 (id=3912): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x2084, 0x81, &(0x7f0000000000)="0000000000000002", 0x4) socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x214b, 0x1, 0x3}, 0x18, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_open_dev$vcsu(0x0, 0x4a, 0xa4003) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r1, 0x6, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008801}, 0x4006001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae03, 0x95) r9 = fsmount(r7, 0x1, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x7ff) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r12, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_RUN(r13, 0xae80, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.856896417s ago: executing program 1 (id=3916): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) 3.09686423s ago: executing program 4 (id=3921): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0) 2.936649848s ago: executing program 4 (id=3922): io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffc01, 0xa0001) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000b80)={{0x7, 0x5, 0xc, 0xd, 'syz0\x00', 0x401}, 0x1, [0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0x4, 0x0, 0x7db6, 0xd, 0x2, 0x10, 0x6, 0xffff, 0x81, 0xc5e, 0x81, 0x1ff, 0xc5b, 0x1, 0x6, 0x4, 0x7, 0x6, 0x1, 0x0, 0x9, 0x10000, 0x4e0, 0x8, 0x1000, 0x844, 0x7, 0x0, 0x0, 0x10, 0x6, 0x0, 0x5, 0x3, 0x3, 0x80, 0x280, 0x100000000, 0x3, 0x81, 0xe, 0x5, 0x3, 0xffffffffffffffff, 0x3, 0x3ff, 0xd69, 0x8, 0x1, 0x4, 0xfffffffffffffff7, 0x3, 0x7, 0xa1, 0x6, 0x5, 0x2, 0x3, 0xce, 0x1, 0xf1d, 0x6, 0xa9, 0x1, 0x4, 0x0, 0x7, 0x7f, 0x2, 0xa6, 0x6, 0x1, 0x6, 0x80, 0x34a, 0xc, 0x7fffffffffffffff, 0xfffffffffffffff1, 0x6, 0xf, 0xb4c, 0xffffffff80000000, 0xb3, 0x1, 0xb, 0x7, 0x1ff, 0x9, 0x8, 0x0, 0x198, 0x53, 0x8, 0xffffffffffffffe2, 0x6, 0x3f800, 0x7, 0xfff, 0xb6, 0x5, 0x5, 0xffff, 0x8, 0xf, 0x7, 0x7, 0x8, 0x100000000, 0x7, 0x7ff, 0xfffffffffffffffe, 0x0, 0x4, 0x5, 0x7, 0x0, 0x8, 0x6f, 0x5, 0x7fff, 0x0, 0x9]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) 2.680802588s ago: executing program 4 (id=3924): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2.591430133s ago: executing program 1 (id=3925): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x40000006, 0x0, 0x3, 0x6, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x81, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3d, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4d, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x8, 0x2, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x2000000000000, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x7b07, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xabc2, 0x3, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}) keyctl$instantiate(0xc, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB], 0x2a, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187013, &(0x7f00000000c0)) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @multicast2}, 0x3, 0x6}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="a3c9b1756fe7990264c67ecf1d2e91497a863cebc9e28abc6f36592bbb95b9ebd190e81020f074f9cc841b3240974908e6bed0584709f3e876dcb2f95bd00464e26cc5fc148aa8ae6c1e24390ce0eadaf5ff046e9d8c5c71a01e27590e866312ac475e0f09b53f3439a3e6a45e6f7035c90673618a8ec7b6c2a0ee8a23", 0x7d}, {&(0x7f0000000840)="540e74d41870146a31aee62c1fc16ce72adccb88a0817ba4b16576b19325f95a4eba4ccf8613d0272aa6ce0a7b21d947fb8a57723587cd7af0edc9e41609b9ad7b3a9b03e51ee4811890123ac128433fe577112f7dd2fc9133ae894016b75991c06fb76e2ea1d6aaf15abec747118361a2ca070747071276657f935d87123af33030fb2d222e28703bb69c861879a804501c0ac1424794b1876a6643f33790fb30a075e562f41e16c4410685865378437e60d9f72aca76b7e244b36d88cb900dbb8b7c0ca32ba2900d490f5bd37c6a2ce13ecb", 0xd3}, {&(0x7f00000000c0)}, {0x0}, {&(0x7f0000000500)="a15235bca3fde2f8909f8fb4a82fa85766a6ad488977f5904643a1ced86af507d93a7be2fa6d", 0x26}, {&(0x7f0000000b40)="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", 0xcf7}], 0x6, &(0x7f0000001b40)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}], 0x60}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) 2.590522517s ago: executing program 4 (id=3926): connect$unix(0xffffffffffffffff, 0x0, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.40825265s ago: executing program 2 (id=3927): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) syz_open_dev$vim2m(0x0, 0x5bc, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x4e45732a10f03f0a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 2.003335793s ago: executing program 2 (id=3928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x2}) 1.824682758s ago: executing program 2 (id=3929): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x190, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c0a4c8303a0f7fbda34fb8825f80200e3c0aba61ffdfa424e37"], 0xdd12}], 0x1}, 0x40) 1.517038979s ago: executing program 4 (id=3930): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x8, 0x3) 1.516309562s ago: executing program 2 (id=3931): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0) 1.214102901s ago: executing program 2 (id=3932): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) recvmsg$can_j1939(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/139, 0x8b}], 0x1}, 0x0) 563.487023ms ago: executing program 4 (id=3933): syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x2a000, 0x1000}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x4, 0x0, {0x0, 0x3}}, 0x80, 0x0}}], 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7195f2800000000000000000272ffb71"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x22}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 369.617µs ago: executing program 1 (id=3934): io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffc01, 0xa0001) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000b80)={{0x7, 0x5, 0xc, 0xd, 'syz0\x00', 0x401}, 0x1, [0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0x4, 0x0, 0x7db6, 0xd, 0x2, 0x10, 0x6, 0xffff, 0x81, 0xc5e, 0x81, 0x1ff, 0xc5b, 0x1, 0x6, 0x4, 0x7, 0x6, 0x1, 0x0, 0x9, 0x10000, 0x4e0, 0x8, 0x1000, 0x844, 0x7, 0x0, 0x0, 0x10, 0x6, 0x0, 0x5, 0x3, 0x3, 0x80, 0x280, 0x100000000, 0x3, 0x81, 0xe, 0x5, 0x3, 0xffffffffffffffff, 0x3, 0x3ff, 0xd69, 0x8, 0x1, 0x4, 0xfffffffffffffff7, 0x3, 0x7, 0xa1, 0x6, 0x5, 0x2, 0x3, 0xce, 0x1, 0xf1d, 0x6, 0xa9, 0x1, 0x4, 0x0, 0x7, 0x7f, 0x2, 0xa6, 0x6, 0x1, 0x6, 0x80, 0x34a, 0xc, 0x7fffffffffffffff, 0xfffffffffffffff1, 0x6, 0xf, 0xb4c, 0xffffffff80000000, 0xb3, 0x1, 0xb, 0x7, 0x1ff, 0x9, 0x8, 0x0, 0x198, 0x53, 0x8, 0xffffffffffffffe2, 0x6, 0x3f800, 0x7, 0xfff, 0xb6, 0x5, 0x5, 0xffff, 0x8, 0xf, 0x7, 0x7, 0x8, 0x100000000, 0x7, 0x7ff, 0xfffffffffffffffe, 0x0, 0x4, 0x5, 0x7, 0x0, 0x8, 0x6f, 0x5, 0x7fff, 0x0, 0x9]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) 0s ago: executing program 2 (id=3935): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): USB disconnect, device number 64 [ 480.933505][ T5329] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 481.103105][ T5329] usb 2-1: Using ep0 maxpacket: 32 [ 481.105843][ T5329] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 481.105867][ T5329] usb 2-1: config 0 has no interface number 0 [ 481.105911][ T5329] usb 2-1: config 0 interface 12 has no altsetting 0 [ 481.111482][ T5329] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 481.111507][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.111526][ T5329] usb 2-1: Product: syz [ 481.111539][ T5329] usb 2-1: Manufacturer: syz [ 481.111553][ T5329] usb 2-1: SerialNumber: syz [ 481.234543][ T5329] usb 2-1: config 0 descriptor?? [ 481.802059][ T5734] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 481.952033][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 481.954619][ T5734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.954644][ T5734] usb 3-1: config 0 has no interfaces? [ 481.959189][ T5734] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 481.959209][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 481.959227][ T5734] usb 3-1: Product: syz [ 481.959241][ T5734] usb 3-1: Manufacturer: syz [ 481.959254][ T5734] usb 3-1: SerialNumber: syz [ 481.987493][ T5734] usb 3-1: config 0 descriptor?? [ 482.230472][ T5609] usb 3-1: USB disconnect, device number 90 [ 482.546123][T13126] netlink: 'syz.0.2727': attribute type 4 has an invalid length. [ 482.556093][T13126] netlink: 'syz.0.2727': attribute type 4 has an invalid length. [ 482.692119][ T5609] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 482.843836][ T5609] usb 3-1: Using ep0 maxpacket: 32 [ 482.850187][ T5609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.850212][ T5609] usb 3-1: config 0 has no interfaces? [ 482.876348][ T5609] usb 3-1: language id specifier not provided by device, defaulting to English [ 482.900872][ T5609] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 482.900898][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 482.900971][ T5609] usb 3-1: Product: syz [ 482.936588][ T5609] usb 3-1: config 0 descriptor?? [ 483.106791][ T5329] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 483.106847][ T5329] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 483.106863][ T5329] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 483.106953][ T5329] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 483.151799][ T5329] usb 2-1: USB disconnect, device number 50 [ 483.157605][ T5726] usb 3-1: USB disconnect, device number 91 [ 483.798585][T13156] netlink: 'syz.2.2739': attribute type 4 has an invalid length. [ 483.840329][T13156] netlink: 'syz.2.2739': attribute type 4 has an invalid length. [ 484.152139][ T5329] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 484.314841][ T5329] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 484.314872][ T5329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.314892][ T5329] usb 4-1: Product: syz [ 484.314906][ T5329] usb 4-1: Manufacturer: syz [ 484.314920][ T5329] usb 4-1: SerialNumber: syz [ 484.376130][ T5329] usb 4-1: config 0 descriptor?? [ 484.406980][ T5329] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 484.669639][T13175] batadv_slave_1: entered promiscuous mode [ 484.682060][ T5734] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 484.816977][ T5734] usb 1-1: device descriptor read/64, error -71 [ 484.844708][ T5859] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 484.962168][ T5726] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 485.004844][ T5859] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.004878][ T5859] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.004901][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 485.004933][ T5859] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 485.004955][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.015918][ T5859] usb 3-1: config 0 descriptor?? [ 485.062234][ T5734] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 485.112122][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 485.117341][ T5726] usb 2-1: config 0 has no interfaces? [ 485.193607][ T5734] usb 1-1: device descriptor read/64, error -71 [ 485.219532][ T5726] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 485.219612][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.219633][ T5726] usb 2-1: Product: syz [ 485.219648][ T5726] usb 2-1: Manufacturer: syz [ 485.219661][ T5726] usb 2-1: SerialNumber: syz [ 485.303103][ T5734] usb usb1-port1: attempt power cycle [ 485.400334][ T5329] gspca_sunplus: reg_w_riv err -71 [ 485.400422][ T5329] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 485.415881][ T5726] usb 2-1: config 0 descriptor?? [ 485.426037][ T5329] usb 4-1: USB disconnect, device number 65 [ 485.490875][ T5859] hid (null): invalid report_count -710626699 [ 485.546852][ T5859] chicony 0003:04F2:1236.0007: unknown main item tag 0x4 [ 485.546876][ T5859] chicony 0003:04F2:1236.0007: unknown main item tag 0x4 [ 485.546892][ T5859] chicony 0003:04F2:1236.0007: ignoring exceeding usage max [ 485.552668][ T5859] chicony 0003:04F2:1236.0007: invalid report_count -710626699 [ 485.552705][ T5859] chicony 0003:04F2:1236.0007: item 0 4 1 9 parsing failed [ 485.553653][ T5859] chicony 0003:04F2:1236.0007: Chicony hid parse failed: -22 [ 485.553780][ T5859] chicony 0003:04F2:1236.0007: probe with driver chicony failed with error -22 [ 485.689227][ T5859] usb 2-1: USB disconnect, device number 51 [ 485.700177][ T5726] usb 3-1: USB disconnect, device number 92 [ 485.718976][T13173] batadv_slave_1: left promiscuous mode [ 485.762235][ T5734] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 485.783331][ T5734] usb 1-1: device descriptor read/8, error -71 [ 486.037025][ T5734] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 486.072111][ T5734] usb 1-1: device descriptor read/8, error -71 [ 486.182410][ T5734] usb usb1-port1: unable to enumerate USB device [ 486.472956][ T5859] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 486.632115][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 486.635904][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.635927][ T5859] usb 4-1: config 0 has no interfaces? [ 486.638220][ T5859] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 486.638247][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 486.638267][ T5859] usb 4-1: Product: syz [ 486.638282][ T5859] usb 4-1: Manufacturer: syz [ 486.638296][ T5859] usb 4-1: SerialNumber: syz [ 486.657050][ T5859] usb 4-1: config 0 descriptor?? [ 486.822473][ T5329] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 486.879869][ T9] usb 4-1: USB disconnect, device number 66 [ 486.974565][ T5329] usb 3-1: config 0 has no interfaces? [ 486.974600][ T5329] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 486.974624][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.981301][ T5329] usb 3-1: config 0 descriptor?? [ 487.191139][ T5329] usb 3-1: USB disconnect, device number 93 [ 487.202075][ T5606] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 487.332063][ T5859] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 487.352039][ T5606] usb 2-1: Using ep0 maxpacket: 32 [ 487.354125][ T5606] usb 2-1: unable to get BOS descriptor or descriptor too short [ 487.355215][ T5606] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 487.357256][ T5606] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 487.357279][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.357290][ T5606] usb 2-1: Product: syz [ 487.357297][ T5606] usb 2-1: Manufacturer: syz [ 487.357305][ T5606] usb 2-1: SerialNumber: syz [ 487.427410][ T5606] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 487.502262][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 487.503830][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.503853][ T5859] usb 4-1: config 0 has no interfaces? [ 487.508242][ T5859] usb 4-1: language id specifier not provided by device, defaulting to English [ 487.545152][ T5859] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 487.545180][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 487.545199][ T5859] usb 4-1: Product: syz [ 487.566657][ T5859] usb 4-1: config 0 descriptor?? [ 487.581799][ T5606] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 487.770354][ T5606] usb 2-1: USB disconnect, device number 52 [ 487.811199][ T5859] usb 4-1: USB disconnect, device number 67 [ 489.432065][ T5329] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 489.592005][ T5329] usb 1-1: Using ep0 maxpacket: 32 [ 489.593605][ T5329] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.593635][ T5329] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.596112][ T5329] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 489.596128][ T5329] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 489.596139][ T5329] usb 1-1: Product: syz [ 489.596146][ T5329] usb 1-1: Manufacturer: syz [ 489.596153][ T5329] usb 1-1: SerialNumber: syz [ 489.676333][ T5329] usb 1-1: config 0 descriptor?? [ 489.694137][ T5329] hub 1-1:0.0: bad descriptor, ignoring hub [ 489.694167][ T5329] hub 1-1:0.0: probe with driver hub failed with error -5 [ 489.982174][ T5859] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 490.012416][ T5329] usb 1-1: USB disconnect, device number 69 [ 490.142209][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 490.144886][ T5859] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 490.144901][ T5859] usb 4-1: config 0 has no interface number 0 [ 490.144927][ T5859] usb 4-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 490.144941][ T5859] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 490.148979][ T5859] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 490.148994][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.149005][ T5859] usb 4-1: Product: syz [ 490.149012][ T5859] usb 4-1: Manufacturer: syz [ 490.149019][ T5859] usb 4-1: SerialNumber: syz [ 490.157183][ T5859] usb 4-1: config 0 descriptor?? [ 490.158302][T13275] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 490.372086][ T5329] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 490.410681][ T5859] ath6kl: Failed to submit usb control message: -71 [ 490.410710][ T5859] ath6kl: unable to send the bmi data to the device: -71 [ 490.410718][ T5859] ath6kl: Unable to send get target info: -71 [ 490.422128][ T5859] ath6kl: Failed to init ath6kl core: -71 [ 490.462544][ T5859] ath6kl_usb 4-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 490.495975][ T5859] usb 4-1: USB disconnect, device number 68 [ 490.562077][ T5329] usb 1-1: Using ep0 maxpacket: 32 [ 490.566229][ T5329] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.566278][ T5329] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.569816][ T5329] usb 1-1: language id specifier not provided by device, defaulting to English [ 490.669345][ T5329] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.669377][ T5329] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 490.669397][ T5329] usb 1-1: Product: syz [ 490.699176][ T5329] usb 1-1: config 0 descriptor?? [ 490.700969][ T5329] hub 1-1:0.0: bad descriptor, ignoring hub [ 490.701007][ T5329] hub 1-1:0.0: probe with driver hub failed with error -5 [ 491.022697][ T5726] usb 1-1: USB disconnect, device number 70 [ 491.023260][ T5329] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 491.140924][T13272] vivid-002: disconnect [ 491.172185][ T5329] usb 5-1: Using ep0 maxpacket: 32 [ 491.175279][ T5329] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 491.175304][ T5329] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.175322][ T5329] usb 5-1: config 0 has no interface number 0 [ 491.175347][ T5329] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 491.175361][ T5329] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 23074, setting to 1024 [ 491.175375][ T5329] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 491.175386][ T5329] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.177511][ T5329] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 491.177538][ T5329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.177558][ T5329] usb 5-1: Product: syz [ 491.177572][ T5329] usb 5-1: Manufacturer: syz [ 491.177586][ T5329] usb 5-1: SerialNumber: syz [ 491.293396][ T5329] usb 5-1: config 0 descriptor?? [ 491.301275][T13298] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 491.301493][T13298] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 491.647196][T13272] vivid-002: reconnect [ 491.800243][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2801'. [ 491.816504][T13321] bridge0: port 3(vlan4) entered blocking state [ 491.830532][T13321] bridge0: port 3(vlan4) entered disabled state [ 491.831217][T13321] vlan4: entered allmulticast mode [ 491.831236][T13321] geneve0: entered allmulticast mode [ 491.852804][T13321] vlan4: entered promiscuous mode [ 491.852824][T13321] geneve0: entered promiscuous mode [ 492.148805][T13303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.866397][ T5329] usb 5-1: probing VID:PID(0424:012C) [ 493.882321][ T5329] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 493.882346][ T5329] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0F [ 493.882367][ T5329] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 493.948219][ T5329] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 493.967511][ T5329] usb 5-1: USB disconnect, device number 62 [ 494.052096][T13348] bridge0: port 3(vlan2) entered blocking state [ 494.052320][T13348] bridge0: port 3(vlan2) entered disabled state [ 494.052500][T13348] vlan2: entered allmulticast mode [ 494.052515][T13348] geneve0: entered allmulticast mode [ 494.057334][T13348] vlan2: entered promiscuous mode [ 494.057352][T13348] geneve0: entered promiscuous mode [ 494.482591][ T5329] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 494.532151][ T5726] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 494.592060][ T5734] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 494.632084][ T5329] usb 5-1: Using ep0 maxpacket: 32 [ 494.641301][ T5329] usb 5-1: unable to get BOS descriptor or descriptor too short [ 494.656080][ T5329] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 494.656114][ T5329] usb 5-1: can't read configurations, error -71 [ 494.662926][ T5726] usb 4-1: device descriptor read/64, error -71 [ 494.749122][ T5734] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.749176][ T5734] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 494.749199][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.786196][ T5734] usb 1-1: config 0 descriptor?? [ 494.802253][ T5734] option 1-1:0.0: GSM modem (1-port) converter detected [ 494.902157][ T5726] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 495.042070][ T5726] usb 4-1: device descriptor read/64, error -71 [ 495.079915][ T5606] usb 1-1: USB disconnect, device number 71 [ 495.091015][ T5606] option 1-1:0.0: device disconnected [ 495.152490][ T5726] usb usb4-port1: attempt power cycle [ 495.472140][ T5606] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 495.502103][ T5726] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 495.534252][ T5726] usb 4-1: device descriptor read/8, error -71 [ 495.625876][ T5606] usb 1-1: config 0 has no interfaces? [ 495.625910][ T5606] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.625932][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.631445][ T5606] usb 1-1: config 0 descriptor?? [ 495.783166][ T5726] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 495.802812][ T5726] usb 4-1: device descriptor read/8, error -71 [ 495.813568][ T5329] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 495.914174][ T5726] usb usb4-port1: unable to enumerate USB device [ 495.973664][ T5329] usb 5-1: Using ep0 maxpacket: 32 [ 495.976888][ T5329] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 495.976914][ T5329] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.976932][ T5329] usb 5-1: config 0 has no interface number 0 [ 495.976975][ T5329] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 495.977002][ T5329] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 23074, setting to 1024 [ 495.977028][ T5329] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 495.977050][ T5329] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.013201][ T5329] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 496.013228][ T5329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.013247][ T5329] usb 5-1: Product: syz [ 496.013261][ T5329] usb 5-1: Manufacturer: syz [ 496.013274][ T5329] usb 5-1: SerialNumber: syz [ 496.041030][T13442] mmap: syz.1.2866 (13442) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 496.144744][ T5329] usb 5-1: config 0 descriptor?? [ 496.147663][T13426] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 496.147760][T13426] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 496.389740][ T5726] usb 1-1: USB disconnect, device number 72 [ 496.583146][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2858'. [ 497.482196][ T5726] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 497.633712][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 497.637892][ T5726] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 497.637916][ T5726] usb 2-1: config 0 has no interface number 0 [ 497.637961][ T5726] usb 2-1: config 0 interface 12 has no altsetting 0 [ 497.641576][ T5726] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 497.641602][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.641622][ T5726] usb 2-1: Product: syz [ 497.641634][ T5726] usb 2-1: Manufacturer: syz [ 497.641647][ T5726] usb 2-1: SerialNumber: syz [ 497.679221][ T5726] usb 2-1: config 0 descriptor?? [ 498.477999][T13507] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2897'. [ 498.478950][T13507] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2897'. [ 498.677852][ T31] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 498.719866][T13507] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2897'. [ 498.822014][ T31] usb 4-1: device descriptor read/64, error -71 [ 498.929749][ T5726] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 498.929817][ T5726] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 498.929835][ T5726] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 498.929925][ T5726] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 499.002034][ T5726] usb 2-1: USB disconnect, device number 53 [ 499.054038][ T31] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 499.171652][ T5329] usb 5-1: probing VID:PID(0424:012C) [ 499.184391][ T5329] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 499.184415][ T5329] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0F [ 499.184434][ T5329] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 499.192068][ T31] usb 4-1: device descriptor read/64, error -71 [ 499.236085][ T5329] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 499.255756][ T5329] usb 5-1: USB disconnect, device number 65 [ 499.312976][ T31] usb usb4-port1: attempt power cycle [ 499.427333][T13523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.643031][T13538] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2912'. [ 499.645154][T13538] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2912'. [ 499.645794][T13538] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2912'. [ 499.662848][ T31] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 499.683030][ T31] usb 4-1: device descriptor read/8, error -71 [ 499.932102][ T31] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 499.952959][ T31] usb 4-1: device descriptor read/8, error -71 [ 500.062476][ T31] usb usb4-port1: unable to enumerate USB device [ 500.112246][ T5726] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 500.142128][ T5329] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 500.282308][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 500.284473][ T5726] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 500.284497][ T5726] usb 2-1: config 0 has no interface number 0 [ 500.284539][ T5726] usb 2-1: config 0 interface 12 has no altsetting 0 [ 500.288529][ T5726] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 500.288555][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.288565][ T5726] usb 2-1: Product: syz [ 500.288572][ T5726] usb 2-1: Manufacturer: syz [ 500.288579][ T5726] usb 2-1: SerialNumber: syz [ 500.297776][ T5329] usb 5-1: config 0 has no interfaces? [ 500.297808][ T5329] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 500.297830][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.378489][ T5726] usb 2-1: config 0 descriptor?? [ 500.382476][ T5329] usb 5-1: config 0 descriptor?? [ 500.787149][ T31] usb 5-1: USB disconnect, device number 66 [ 501.402011][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.402070][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.479994][T13624] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2951'. [ 501.483763][ T5329] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 501.612160][ T5329] usb 1-1: device descriptor read/64, error -71 [ 501.852480][ T5329] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 501.982086][ T5329] usb 1-1: device descriptor read/64, error -71 [ 502.026347][ T5726] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 502.026399][ T5726] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 502.026416][ T5726] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 502.026504][ T5726] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 502.071600][ T5726] usb 2-1: USB disconnect, device number 54 [ 502.092636][ T5329] usb usb1-port1: attempt power cycle [ 502.173673][T13648] netlink: 'syz.3.2962': attribute type 13 has an invalid length. [ 502.173688][T13648] netlink: 'syz.3.2962': attribute type 17 has an invalid length. [ 502.432218][ T5329] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 502.452898][ T5329] usb 1-1: device descriptor read/8, error -71 [ 502.683274][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.683734][T13648] bridge0: port 2(bridge_slave_1) entered listening state [ 502.708533][ T5329] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 502.723564][ T5329] usb 1-1: device descriptor read/8, error -71 [ 502.724267][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.727531][T13648] bridge0: port 1(bridge_slave_0) entered listening state [ 502.754870][T13668] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2968'. [ 502.833772][ T5329] usb usb1-port1: unable to enumerate USB device [ 503.307634][T13648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.556993][T13648] bridge0: port 3(vlan2) entered blocking state [ 503.557155][T13648] bridge0: port 3(vlan2) entered listening state [ 503.963571][ T5726] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 504.122018][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 504.124191][ T5726] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 504.124215][ T5726] usb 4-1: config 0 has no interface number 0 [ 504.124259][ T5726] usb 4-1: config 0 interface 12 has no altsetting 0 [ 504.128993][ T5726] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 504.129020][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.129039][ T5726] usb 4-1: Product: syz [ 504.129053][ T5726] usb 4-1: Manufacturer: syz [ 504.129066][ T5726] usb 4-1: SerialNumber: syz [ 504.208117][ T5726] usb 4-1: config 0 descriptor?? [ 504.212932][ T5606] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 504.348153][T13715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2990'. [ 504.362066][ T5606] usb 5-1: Using ep0 maxpacket: 32 [ 504.366807][ T5606] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 504.366831][ T5606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.378582][ T5606] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 504.378607][ T5606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.378627][ T5606] usb 5-1: Product: syz [ 504.378647][ T5606] usb 5-1: Manufacturer: syz [ 504.378660][ T5606] usb 5-1: SerialNumber: syz [ 504.420124][ T5606] usb 5-1: config 0 descriptor?? [ 504.459559][ T5606] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 505.408055][T13745] netlink: 'syz.1.3005': attribute type 13 has an invalid length. [ 505.408076][T13745] netlink: 'syz.1.3005': attribute type 17 has an invalid length. [ 505.473315][ T5609] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 505.602123][ T5609] usb 1-1: device descriptor read/64, error -71 [ 505.672593][ T5606] gspca_sunplus: reg_r err -32 [ 505.705292][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.705509][T13745] bridge0: port 2(bridge_slave_1) entered listening state [ 505.706051][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.706182][T13745] bridge0: port 1(bridge_slave_0) entered listening state [ 505.854770][ T5726] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 505.854823][ T5726] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 505.854841][ T5726] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 505.854931][ T5726] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 505.868800][ T5609] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 505.920066][ T5726] usb 4-1: USB disconnect, device number 77 [ 506.012184][ T5609] usb 1-1: device descriptor read/64, error -71 [ 506.112416][T13745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.122623][ T5609] usb usb1-port1: attempt power cycle [ 506.342374][ T5329] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.429733][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 506.462650][ T5609] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 506.465555][T13783] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3023'. [ 506.482728][ T5609] usb 1-1: device descriptor read/8, error -71 [ 506.532754][T13783] bridge0: port 3(vlan2) entered disabled state [ 506.533311][T13783] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.533569][T13783] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.540344][T13788] netlink: 'syz.1.3025': attribute type 13 has an invalid length. [ 506.540361][T13788] netlink: 'syz.1.3025': attribute type 17 has an invalid length. [ 506.613049][ T5859] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.672385][ T5606] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 506.752093][ T5609] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 506.772985][ T5609] usb 1-1: device descriptor read/8, error -71 [ 506.873904][ T4087] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 506.882519][ T5609] usb usb1-port1: unable to enumerate USB device [ 506.884810][ T4087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.894971][ T5609] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 506.972210][ T5609] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 507.009440][ T5726] usb 5-1: USB disconnect, device number 67 [ 507.360781][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 507.384020][ T5726] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.760191][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3043'. [ 507.942795][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.943091][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 508.247810][T13844] could not allocate digest TFM handle [ 508.309736][T13854] netlink: 'syz.3.3048': attribute type 13 has an invalid length. [ 508.309757][T13854] netlink: 'syz.3.3048': attribute type 17 has an invalid length. [ 508.340881][T13854] bridge0: port 3(vlan2) entered blocking state [ 508.341028][T13854] bridge0: port 3(vlan2) entered listening state [ 508.341189][T13854] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.341274][T13854] bridge0: port 2(bridge_slave_1) entered listening state [ 508.341422][T13854] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.341498][T13854] bridge0: port 1(bridge_slave_0) entered listening state [ 508.452423][ T5726] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 508.604403][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.604507][ T5726] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 508.604531][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.655761][ T5726] usb 2-1: config 0 descriptor?? [ 508.672649][ T5726] option 2-1:0.0: GSM modem (1-port) converter detected [ 508.753643][T13874] loop9: detected capacity change from 0 to 7 [ 508.774476][T13874] Dev loop9: unable to read RDB block 7 [ 508.774518][T13874] loop9: unable to read partition table [ 508.774723][T13874] loop9: partition table beyond EOD, truncated [ 508.774755][T13874] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 509.455129][ T5329] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 509.602046][ T5329] usb 1-1: Using ep0 maxpacket: 8 [ 509.604403][ T5329] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 509.604429][ T5329] usb 1-1: config 0 has no interface number 0 [ 509.604474][ T5329] usb 1-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 509.604500][ T5329] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 509.606880][ T5329] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 509.606907][ T5329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.606926][ T5329] usb 1-1: Product: syz [ 509.606939][ T5329] usb 1-1: Manufacturer: syz [ 509.606953][ T5329] usb 1-1: SerialNumber: syz [ 509.621268][ T5329] usb 1-1: config 0 descriptor?? [ 509.626092][T13887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 509.840381][ T5329] ath6kl: Failed to submit usb control message: -71 [ 509.840433][ T5329] ath6kl: unable to send the bmi data to the device: -71 [ 509.840448][ T5329] ath6kl: Unable to send get target info: -71 [ 509.875110][ T5329] ath6kl: Failed to init ath6kl core: -71 [ 509.879233][ T5329] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 509.932975][ T5329] usb 1-1: USB disconnect, device number 81 [ 510.382276][ T5606] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 510.536351][ T5606] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 510.536382][ T5606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.536401][ T5606] usb 5-1: Product: syz [ 510.536415][ T5606] usb 5-1: Manufacturer: syz [ 510.536430][ T5606] usb 5-1: SerialNumber: syz [ 510.546952][ T5606] usb 5-1: config 0 descriptor?? [ 510.762682][ T5606] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 511.579465][ T9] usb 2-1: USB disconnect, device number 55 [ 511.648446][ T9] option 2-1:0.0: device disconnected [ 511.774851][ T5606] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 511.782295][ C0] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 511.782311][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 511.788172][ T5606] usb 5-1: USB disconnect, device number 68 [ 511.862629][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 511.901703][T13962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3101'. [ 512.112064][ T5329] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 512.262430][ T5329] usb 4-1: Using ep0 maxpacket: 8 [ 512.264981][ T5329] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.265009][ T5329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.265033][ T5329] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 512.265053][ T5329] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.265094][ T5329] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 512.265117][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.267238][ T5616] Bluetooth: hci5: unexpected event for opcode 0x080e [ 512.300194][ T5329] usbtmc 4-1:16.0: bulk endpoints not found [ 513.063587][ T5606] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 513.216516][ T5606] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 513.216546][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.216565][ T5606] usb 2-1: Product: syz [ 513.216578][ T5606] usb 2-1: Manufacturer: syz [ 513.216588][ T5606] usb 2-1: SerialNumber: syz [ 513.224750][ T5606] usb 2-1: config 0 descriptor?? [ 513.422014][ T5734] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 513.453334][ T5606] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 513.582247][ T5734] usb 1-1: Using ep0 maxpacket: 32 [ 513.584672][ T5734] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 513.584697][ T5734] usb 1-1: config 0 has no interface number 0 [ 513.584742][ T5734] usb 1-1: config 0 interface 12 has no altsetting 0 [ 513.588530][ T5734] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 513.588557][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.588576][ T5734] usb 1-1: Product: syz [ 513.588590][ T5734] usb 1-1: Manufacturer: syz [ 513.588603][ T5734] usb 1-1: SerialNumber: syz [ 513.602438][ T5734] usb 1-1: config 0 descriptor?? [ 513.879847][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 513.879879][T14059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3148'. [ 514.048587][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.054984][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.055079][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.055114][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.462796][ T5606] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 514.485660][ T5606] usb 2-1: USB disconnect, device number 56 [ 514.510505][ T5626] udevd[5626]: setting owner of /dev/bus/usb/002/056 to uid=0, gid=0 failed: No such file or directory [ 514.867879][ T5734] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 514.867931][ T5734] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 514.867948][ T5734] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 514.868092][ T5734] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 514.900182][ T5734] usb 1-1: USB disconnect, device number 82 [ 514.914624][ T5726] usb 4-1: USB disconnect, device number 78 [ 515.382255][ T5726] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 515.532111][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 515.535379][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 515.535407][ T5726] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 515.540157][ T5726] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 515.540186][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 515.540206][ T5726] usb 4-1: Product: syz [ 515.540219][ T5726] usb 4-1: Manufacturer: syz [ 515.540231][ T5726] usb 4-1: SerialNumber: syz [ 515.581454][ T5726] usb 4-1: config 0 descriptor?? [ 515.596801][ T5726] hub 4-1:0.0: bad descriptor, ignoring hub [ 515.596834][ T5726] hub 4-1:0.0: probe with driver hub failed with error -5 [ 515.802376][ T5734] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 515.912462][ T5859] usb 4-1: USB disconnect, device number 79 [ 515.962959][ T5734] usb 5-1: Using ep0 maxpacket: 8 [ 515.964665][ T5734] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 515.964682][ T5734] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 515.964704][ T5734] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 515.964721][ T5734] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.964743][ T5734] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 515.964755][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.073524][ T5734] usbtmc 5-1:16.0: bulk endpoints not found [ 516.302281][ T5726] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 516.462329][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 516.464403][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 516.464419][ T5726] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 516.467855][ T5726] usb 4-1: language id specifier not provided by device, defaulting to English [ 516.505184][ T5726] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 516.505212][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 516.505232][ T5726] usb 4-1: Product: syz [ 516.517581][ T5726] usb 4-1: config 0 descriptor?? [ 516.523339][ T5726] hub 4-1:0.0: bad descriptor, ignoring hub [ 516.523373][ T5726] hub 4-1:0.0: probe with driver hub failed with error -5 [ 516.582719][ T5734] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 516.732830][ T5734] usb 1-1: Using ep0 maxpacket: 32 [ 516.734449][ T5734] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 516.734473][ T5734] usb 1-1: config 0 has no interface number 0 [ 516.734511][ T5734] usb 1-1: config 0 interface 12 has no altsetting 0 [ 516.741590][ T5734] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 516.741606][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.741616][ T5734] usb 1-1: Product: syz [ 516.741627][ T5734] usb 1-1: Manufacturer: syz [ 516.741640][ T5734] usb 1-1: SerialNumber: syz [ 516.791615][ T5734] usb 1-1: config 0 descriptor?? [ 516.863032][ T5726] usb 4-1: USB disconnect, device number 80 [ 518.038720][ T5734] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 518.038751][ T5734] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 518.038760][ T5734] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 518.038813][ T5734] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 518.057296][ T5734] usb 1-1: USB disconnect, device number 83 [ 518.401697][T14193] netlink: 'syz.3.3210': attribute type 13 has an invalid length. [ 518.401711][T14193] netlink: 'syz.3.3210': attribute type 17 has an invalid length. [ 518.512359][ T5329] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 518.516595][ T9] usb 5-1: USB disconnect, device number 69 [ 518.665520][ T5329] usb 2-1: config 0 has no interfaces? [ 518.665555][ T5329] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 518.665579][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.702447][ T5329] usb 2-1: config 0 descriptor?? [ 518.922064][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 518.952928][ T5734] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 518.969695][ T5733] usb 2-1: USB disconnect, device number 57 [ 519.072045][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 519.076193][ T9] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 519.076222][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.078345][ T9] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 519.078372][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.078384][ T9] usb 5-1: Product: syz [ 519.078391][ T9] usb 5-1: Manufacturer: syz [ 519.078398][ T9] usb 5-1: SerialNumber: syz [ 519.112101][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 519.135405][ T5734] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 519.135431][ T5734] usb 1-1: config 0 has no interface number 0 [ 519.135473][ T5734] usb 1-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 519.135497][ T5734] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 519.164208][ T5734] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 519.164237][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.164256][ T5734] usb 1-1: Product: syz [ 519.164269][ T5734] usb 1-1: Manufacturer: syz [ 519.164282][ T5734] usb 1-1: SerialNumber: syz [ 519.180515][ T5734] usb 1-1: config 0 descriptor?? [ 519.208339][T14205] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 519.227325][ T9] usb 5-1: config 0 descriptor?? [ 519.242329][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 519.302126][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 519.426545][ T5734] ath6kl: Failed to submit usb control message: -71 [ 519.426594][ T5734] ath6kl: unable to send the bmi data to the device: -71 [ 519.426607][ T5734] ath6kl: Unable to send get target info: -71 [ 519.431570][ T5734] ath6kl: Failed to init ath6kl core: -71 [ 519.471641][ T5734] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 519.495340][ T5734] usb 1-1: USB disconnect, device number 84 [ 519.942104][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 520.052519][ T5734] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 520.201975][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 520.204714][ T5734] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 520.204739][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.204759][ T5734] usb 4-1: config 0 has no interface number 0 [ 520.204801][ T5734] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 520.204836][ T5734] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 23074, setting to 1024 [ 520.204862][ T5734] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 520.204884][ T5734] usb 4-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.208732][ T5734] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 520.208759][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.208778][ T5734] usb 4-1: Product: syz [ 520.208792][ T5734] usb 4-1: Manufacturer: syz [ 520.208806][ T5734] usb 4-1: SerialNumber: syz [ 520.225985][ T5734] usb 4-1: config 0 descriptor?? [ 520.228054][T14248] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.228412][T14248] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.633581][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 520.633745][T14265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3244'. [ 520.675816][ T9] gspca_sunplus: reg_r err -32 [ 520.887657][ T3635] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.888418][ T3635] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.888461][ T3635] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.888495][ T3635] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.046033][T14248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3232'. [ 521.168046][T14281] netlink: 'syz.0.3249': attribute type 13 has an invalid length. [ 521.168062][T14281] netlink: 'syz.0.3249': attribute type 17 has an invalid length. [ 521.662716][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 521.786041][ T5859] usb 5-1: USB disconnect, device number 70 [ 522.602160][ T5859] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 522.782273][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 522.784695][ T5859] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 522.784745][ T5859] usb 5-1: config 0 has no interface number 0 [ 522.784772][ T5859] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 522.784784][ T5859] usb 5-1: config 0 interface 89 has no altsetting 0 [ 522.786845][ T5859] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 522.786862][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.786873][ T5859] usb 5-1: Product: syz [ 522.786880][ T5859] usb 5-1: Manufacturer: syz [ 522.786887][ T5859] usb 5-1: SerialNumber: syz [ 522.816281][ T5859] usb 5-1: config 0 descriptor?? [ 522.847873][ T5859] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 522.847910][ T5859] em28xx 5-1:0.89: Video interface 89 found: [ 522.912957][T14281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.919084][T14281] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.975384][T14281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.449402][ T5859] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 523.738391][T14281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.864280][T14281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.967120][T14281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.967137][T14281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.061549][T14281] veth1_vlan: left promiscuous mode [ 524.093385][T14281] veth0_vlan: left promiscuous mode [ 524.095275][T14281] veth0_vlan: entered promiscuous mode [ 524.101013][T14281] veth1_vlan: entered promiscuous mode [ 524.390920][T14281] bridge0: port 3(vlan4) entered blocking state [ 524.399732][T14281] bridge0: port 3(vlan4) entered listening state [ 524.492270][ T5606] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 524.534869][T14281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.630351][T14281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 524.645276][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.645304][ T5606] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.645346][ T5606] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.645362][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.697290][ T5606] usb 2-1: config 0 descriptor?? [ 524.718351][ T5606] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 524.785008][T14281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 524.879987][T14281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.065330][ T5859] em28xx 5-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 525.065583][ T5859] em28xx 5-1:0.89: failed to read eeprom (err=-5) [ 525.065634][ T5859] em28xx 5-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 525.122070][ T5859] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 525.122107][ T5859] em28xx 5-1:0.89: analog set to bulk mode. [ 525.155851][ T5733] em28xx 5-1:0.89: Registering V4L2 extension [ 525.163622][T14281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.248158][ T5859] usb 5-1: USB disconnect, device number 71 [ 525.263053][ T5859] em28xx 5-1:0.89: Disconnecting em28xx [ 525.330967][T14281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.359411][ T5734] usb 4-1: probing VID:PID(0424:012C) [ 525.360785][ T5734] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 525.360808][ T5734] usb 4-1: vub300 testing BULK OUT EndPoint(1) 0F [ 525.360826][ T5734] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 525.365004][ T5733] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 525.365023][ T5733] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 525.365046][ T5733] em28xx 5-1:0.89: No AC97 audio processor [ 525.388468][T14281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.421753][ T5734] vub300 4-1:0.133: probe with driver vub300 failed with error -22 [ 525.484788][ T5734] usb 4-1: USB disconnect, device number 81 [ 525.494602][T14281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.584465][T14281] 8021q: adding VLAN 0 to HW filter on device bond5 [ 525.596206][ T5733] usb 5-1: Decoder not found [ 525.596225][ T5733] em28xx 5-1:0.89: failed to create media graph [ 525.596279][ T5733] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 525.664995][T14281] 8021q: adding VLAN 0 to HW filter on device bond6 [ 525.705705][T14281] 8021q: adding VLAN 0 to HW filter on device bond7 [ 525.756018][ T5733] em28xx 5-1:0.89: Registering snapshot button... [ 525.783214][T14281] 8021q: adding VLAN 0 to HW filter on device bond8 [ 525.861252][ T36] audit: type=1326 audit(1777897248.663:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.861312][ T36] audit: type=1326 audit(1777897248.663:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.861356][ T36] audit: type=1326 audit(1777897248.663:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.868925][ T36] audit: type=1326 audit(1777897248.663:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.868970][ T36] audit: type=1326 audit(1777897248.663:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.869008][ T36] audit: type=1326 audit(1777897248.673:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.869047][ T36] audit: type=1326 audit(1777897248.673:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.869084][ T36] audit: type=1326 audit(1777897248.673:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.869121][ T36] audit: type=1326 audit(1777897248.673:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.875988][ T36] audit: type=1326 audit(1777897248.673:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.4.3280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d5abcdd9 code=0x7ffc0000 [ 525.939063][ T5733] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input18 [ 526.201579][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.270426][ T2972] bridge0: port 1(bridge_slave_0) entered listening state [ 526.316535][ T5733] em28xx 5-1:0.89: Remote control support is not available for this card. [ 526.319447][ T5859] em28xx 5-1:0.89: Closing input extension [ 526.345253][ T5859] em28xx 5-1:0.89: Deregistering snapshot button [ 526.448529][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.448614][ T2972] bridge0: port 2(bridge_slave_1) entered listening state [ 526.688650][ T1118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.689615][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3280'. [ 526.691377][ T1118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.692083][ T5734] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 526.814798][ T1118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.818575][ T1118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.822954][ T5734] usb 1-1: device descriptor read/64, error -71 [ 526.963451][ T31] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 527.089350][ T31] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 527.102182][ T5606] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 527.123161][ T5734] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 527.211228][ T9] usb 2-1: USB disconnect, device number 58 [ 527.252042][ T5734] usb 1-1: device descriptor read/64, error -71 [ 527.252115][ T5606] usb 4-1: Using ep0 maxpacket: 8 [ 527.254431][ T5606] usb 4-1: config 129 has an invalid interface number: 164 but max is 0 [ 527.254456][ T5606] usb 4-1: config 129 has no interface number 0 [ 527.254486][ T5606] usb 4-1: config 129 interface 164 has no altsetting 0 [ 527.257101][ T5606] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 527.257127][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.257147][ T5606] usb 4-1: Product: syz [ 527.257160][ T5606] usb 4-1: Manufacturer: syz [ 527.257174][ T5606] usb 4-1: SerialNumber: syz [ 527.364225][ T5734] usb usb1-port1: attempt power cycle [ 527.450965][ T4087] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 527.712368][ T5734] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 527.724263][ T5606] ums_eneub6250 4-1:129.164: USB Mass Storage device detected [ 527.732919][ T5734] usb 1-1: device descriptor read/8, error -71 [ 527.840467][ T5859] em28xx 5-1:0.89: Freeing device [ 527.924008][ T5606] usb 4-1: USB disconnect, device number 82 [ 527.982066][ T5734] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 528.002708][ T5734] usb 1-1: device descriptor read/8, error -71 [ 528.117855][ T5734] usb usb1-port1: unable to enumerate USB device [ 528.657351][ T2972] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 528.670012][ T2972] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 528.822275][ T5726] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 529.992138][ T31] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 530.164705][ T31] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 530.164737][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.164757][ T31] usb 1-1: Product: syz [ 530.164771][ T31] usb 1-1: Manufacturer: syz [ 530.164785][ T31] usb 1-1: SerialNumber: syz [ 530.218980][ T31] usb 1-1: config 0 descriptor?? [ 530.233191][ T31] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 530.592166][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 530.743034][ T9] usb 5-1: no configurations [ 530.743055][ T9] usb 5-1: can't read configurations, error -22 [ 530.872153][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 531.023202][ T9] usb 5-1: no configurations [ 531.023223][ T9] usb 5-1: can't read configurations, error -22 [ 531.023895][ T9] usb usb5-port1: attempt power cycle [ 531.112118][ T5726] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 531.232149][ T31] gspca_sunplus: reg_w_riv err -71 [ 531.232242][ T31] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 531.244387][ T31] usb 1-1: USB disconnect, device number 89 [ 531.282069][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 531.287365][ T5726] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 531.287389][ T5726] usb 2-1: config 0 has no interface number 0 [ 531.287433][ T5726] usb 2-1: config 0 interface 12 has no altsetting 0 [ 531.290499][ T5726] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 531.290526][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.290546][ T5726] usb 2-1: Product: syz [ 531.290560][ T5726] usb 2-1: Manufacturer: syz [ 531.290574][ T5726] usb 2-1: SerialNumber: syz [ 531.304983][ T5726] usb 2-1: config 0 descriptor?? [ 531.342138][ T5606] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 531.422318][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 531.443334][ T9] usb 5-1: no configurations [ 531.443353][ T9] usb 5-1: can't read configurations, error -22 [ 531.502773][ T5606] usb 4-1: Using ep0 maxpacket: 32 [ 531.508784][ T5606] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 531.508810][ T5606] usb 4-1: config 0 has no interface number 0 [ 531.508855][ T5606] usb 4-1: config 0 interface 12 has no altsetting 0 [ 531.511632][ T5606] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 531.511659][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.511678][ T5606] usb 4-1: Product: syz [ 531.511691][ T5606] usb 4-1: Manufacturer: syz [ 531.511712][ T5606] usb 4-1: SerialNumber: syz [ 531.578384][ T5606] usb 4-1: config 0 descriptor?? [ 531.602149][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 531.626858][ T9] usb 5-1: no configurations [ 531.626876][ T9] usb 5-1: can't read configurations, error -22 [ 531.627298][ T9] usb usb5-port1: unable to enumerate USB device [ 531.933808][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 531.933826][ T36] audit: type=1326 audit(1777897254.743:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.0.3378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1069dcdd9 code=0x0 [ 532.743138][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 533.010457][ T5606] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 533.010511][ T5606] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 533.010529][ T5606] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 533.010625][ T5606] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 533.059141][ T5606] usb 4-1: USB disconnect, device number 83 [ 533.399056][ T5726] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 533.399109][ T5726] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 533.399126][ T5726] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 533.399213][ T5726] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 533.451904][ T5726] usb 2-1: USB disconnect, device number 59 [ 533.490593][T14603] netlink: 'syz.4.3398': attribute type 13 has an invalid length. [ 533.490615][T14603] netlink: 'syz.4.3398': attribute type 17 has an invalid length. [ 533.759665][ T36] audit: type=1326 audit(1777897256.563:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14615 comm="syz.3.3402" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28db1bcdd9 code=0x0 [ 534.022117][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.182704][T14603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.212109][ T5606] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 534.363265][ T5606] usb 1-1: too many configurations: 33, using maximum allowed: 8 [ 534.366332][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.366356][ T5606] usb 1-1: config 0 has no interfaces? [ 534.367717][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.367740][ T5606] usb 1-1: config 0 has no interfaces? [ 534.369339][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.369360][ T5606] usb 1-1: config 0 has no interfaces? [ 534.371183][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.371206][ T5606] usb 1-1: config 0 has no interfaces? [ 534.407453][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.407478][ T5606] usb 1-1: config 0 has no interfaces? [ 534.459830][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.459855][ T5606] usb 1-1: config 0 has no interfaces? [ 534.461146][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.461169][ T5606] usb 1-1: config 0 has no interfaces? [ 534.494399][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.494434][ T5606] usb 1-1: config 0 has no interfaces? [ 534.497736][ T5606] usb 1-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 534.497762][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.497782][ T5606] usb 1-1: Product: syz [ 534.497795][ T5606] usb 1-1: Manufacturer: syz [ 534.497871][ T5606] usb 1-1: SerialNumber: syz [ 534.557252][ T5606] usb 1-1: config 0 descriptor?? [ 534.767389][ T5606] usb 1-1: USB disconnect, device number 90 [ 534.808816][T14603] bridge0: port 3(vlan2) entered blocking state [ 534.808931][T14603] bridge0: port 3(vlan2) entered listening state [ 534.831309][ T43] bridge1: port 2(veth0_to_bond) entered blocking state [ 534.831388][ T43] bridge1: port 2(veth0_to_bond) entered forwarding state [ 534.842841][ T43] bridge1: port 1(veth3) entered blocking state [ 534.850173][ T43] bridge1: port 1(veth3) entered forwarding state [ 534.858037][ T43] bridge1: port 3(veth5) entered blocking state [ 534.858154][ T43] bridge1: port 3(veth5) entered forwarding state [ 534.871329][ T5859] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.927165][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 535.028431][T14665] loop9: detected capacity change from 0 to 7 [ 535.031487][T14665] Dev loop9: unable to read RDB block 7 [ 535.031527][T14665] loop9: unable to read partition table [ 535.031734][T14665] loop9: partition table beyond EOD, truncated [ 535.036757][T14665] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 535.194264][ T5859] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 535.302151][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 535.334845][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3432'. [ 535.346148][ T36] audit: type=1326 audit(1777897258.153:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.1.3432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb872c9cdd9 code=0x7ffc0000 [ 535.346195][ T36] audit: type=1326 audit(1777897258.153:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.1.3432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb872c9cdd9 code=0x7ffc0000 [ 535.346234][ T36] audit: type=1326 audit(1777897258.153:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.1.3432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb872c9cdd9 code=0x7ffc0000 [ 535.371447][ T36] audit: type=1326 audit(1777897258.173:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.1.3432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb872c9cdd9 code=0x7ffc0000 [ 535.401808][ T36] audit: type=1326 audit(1777897258.203:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.1.3432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb872c9cdd9 code=0x7ffc0000 [ 535.402665][ T36] audit: type=1326 audit(1777897258.213:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.1.3432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb872c9cdd9 code=0x7ffc0000 [ 535.405069][ T36] audit: type=1326 audit(1777897258.213:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.1.3432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb872c9cdd9 code=0x7ffc0000 [ 535.405352][ T43] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 535.433244][ T36] audit: type=1326 audit(1777897258.233:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.1.3432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb872c9cdd9 code=0x7ffc0000 [ 535.483699][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 535.502243][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 535.624313][T14692] loop5: detected capacity change from 0 to 7 [ 535.697647][T14692] Dev loop5: unable to read RDB block 7 [ 535.697665][T14692] loop5: AHDI p2 [ 535.697682][T14692] loop5: partition table partially beyond EOD, truncated [ 535.784328][ T5859] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 535.944542][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 535.944914][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 535.945674][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 535.949886][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.950809][T14705] loop9: detected capacity change from 0 to 7 [ 535.964897][T14705] Dev loop9: unable to read RDB block 7 [ 535.964936][T14705] loop9: unable to read partition table [ 535.965256][T14705] loop9: partition table beyond EOD, truncated [ 535.968887][T14705] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 535.984045][ T5859] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 535.984071][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 535.984090][ T5859] usb 1-1: Product: syz [ 535.984102][ T5859] usb 1-1: Manufacturer: syz [ 535.984115][ T5859] usb 1-1: SerialNumber: syz [ 536.001445][ T5859] usb 1-1: config 0 descriptor?? [ 536.009160][ T5859] hub 1-1:0.0: bad descriptor, ignoring hub [ 536.009194][ T5859] hub 1-1:0.0: probe with driver hub failed with error -5 [ 536.081997][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 536.232045][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 536.236038][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 536.236062][ T9] usb 4-1: config 0 has no interface number 0 [ 536.236104][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 536.239091][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 536.239118][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.239137][ T9] usb 4-1: Product: syz [ 536.239150][ T9] usb 4-1: Manufacturer: syz [ 536.239162][ T9] usb 4-1: SerialNumber: syz [ 536.312248][ T9] usb 4-1: config 0 descriptor?? [ 536.332913][ T5859] usb 1-1: USB disconnect, device number 91 [ 536.439190][ T2972] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 536.652048][ T5859] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 536.802024][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 536.810606][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.820101][ T5859] usb 1-1: language id specifier not provided by device, defaulting to English [ 536.859520][ T5859] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 536.859547][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 536.859613][ T5859] usb 1-1: Product: syz [ 536.891700][ T5859] usb 1-1: config 0 descriptor?? [ 536.906430][ T5859] hub 1-1:0.0: bad descriptor, ignoring hub [ 536.906461][ T5859] hub 1-1:0.0: probe with driver hub failed with error -5 [ 537.052206][ T31] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 537.202066][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 537.205020][ T31] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 537.205044][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.205062][ T31] usb 5-1: config 0 has no interface number 0 [ 537.205105][ T31] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 537.205129][ T31] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 23074, setting to 1024 [ 537.205163][ T31] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 537.205187][ T31] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.209737][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 537.209762][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.209793][ T31] usb 5-1: Product: syz [ 537.209807][ T31] usb 5-1: Manufacturer: syz [ 537.209820][ T31] usb 5-1: SerialNumber: syz [ 537.221739][ T5859] usb 1-1: USB disconnect, device number 92 [ 537.275936][ T31] usb 5-1: config 0 descriptor?? [ 537.306341][T14739] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 537.308285][T14739] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 537.622208][ T5734] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 537.786427][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 537.798070][ T5734] usb 2-1: config 129 has an invalid interface number: 164 but max is 0 [ 537.798097][ T5734] usb 2-1: config 129 has no interface number 0 [ 537.798129][ T5734] usb 2-1: config 129 interface 164 has no altsetting 0 [ 537.839470][ T5734] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 537.839496][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.839506][ T5734] usb 2-1: Product: syz [ 537.839514][ T5734] usb 2-1: Manufacturer: syz [ 537.839575][ T5734] usb 2-1: SerialNumber: syz [ 537.909277][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3456'. [ 538.178889][ T5734] ums_eneub6250 2-1:129.164: USB Mass Storage device detected [ 538.425853][ T5734] usb 2-1: USB disconnect, device number 60 [ 538.504036][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 538.504202][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 538.504330][ C0] bridge0: port 3(vlan2) entered learning state [ 538.594254][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 538.594316][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 538.594333][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 538.594417][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 538.638172][ T9] usb 4-1: USB disconnect, device number 84 [ 539.079065][T14778] netlink: 'syz.0.3473': attribute type 13 has an invalid length. [ 539.079081][T14778] netlink: 'syz.0.3473': attribute type 17 has an invalid length. [ 539.613111][ T5329] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 539.613125][ T5329] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 539.712306][ T5329] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 540.182413][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 540.342149][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 540.406478][T14796] loop9: detected capacity change from 0 to 7 [ 540.511624][T14796] Dev loop9: unable to read RDB block 7 [ 540.512970][T14796] loop9: unable to read partition table [ 540.513946][T14796] loop9: partition table beyond EOD, truncated [ 540.513974][T14796] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 541.062908][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 541.291637][T14810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3487'. [ 541.332396][T14810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3487'. [ 541.579247][T14810] ip6erspan1: entered allmulticast mode [ 542.379295][ T31] usb 5-1: probing VID:PID(0424:012C) [ 542.433741][ T31] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 542.433765][ T31] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0F [ 542.433784][ T31] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 542.517715][ T31] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 542.578734][ T31] usb 5-1: USB disconnect, device number 76 [ 542.702104][ T42] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 542.885617][ T42] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 542.885647][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.885665][ T42] usb 1-1: Product: syz [ 542.885679][ T42] usb 1-1: Manufacturer: syz [ 542.885692][ T42] usb 1-1: SerialNumber: syz [ 542.928336][ T42] usb 1-1: config 0 descriptor?? [ 543.012061][ T31] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 543.159205][ T42] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 543.162110][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 543.188000][ T31] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 543.188027][ T31] usb 5-1: config 0 has no interface number 0 [ 543.188124][ T31] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 543.188146][ T31] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 543.188170][ T31] usb 5-1: config 0 interface 12 has no altsetting 0 [ 543.232840][ T31] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 543.232918][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.232939][ T31] usb 5-1: Product: syz [ 543.232953][ T31] usb 5-1: Manufacturer: syz [ 543.232967][ T31] usb 5-1: SerialNumber: syz [ 543.297449][ T31] usb 5-1: config 0 descriptor?? [ 543.314359][T14845] netlink: 'syz.1.3501': attribute type 13 has an invalid length. [ 543.314383][T14845] netlink: 'syz.1.3501': attribute type 17 has an invalid length. [ 543.420743][ T31] f81534 5-1:0.12: unsupported endpoint max packet size [ 543.568603][ T31] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 543.675941][ T31] usb 5-1: USB disconnect, device number 77 [ 544.023636][ T5609] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 544.173837][ T5609] usb 4-1: Using ep0 maxpacket: 8 [ 544.181801][ T5609] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 544.181832][ T5609] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 544.181857][ T5609] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.196852][ T5726] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 544.200087][ T5726] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 544.217188][ T5609] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.217239][ T5609] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.217262][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.279817][ T42] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 544.295914][ T42] usb 1-1: USB disconnect, device number 93 [ 544.407661][T14866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3512'. [ 544.506586][T14866] ip6erspan1: entered allmulticast mode [ 544.542036][ T5609] usb 4-1: usb_control_msg returned -32 [ 544.542081][ T5609] usbtmc 4-1:16.0: can't read capabilities [ 544.576023][ T5609] usb 4-1: USB disconnect, device number 85 [ 544.982142][ T42] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 545.093555][ T5734] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 545.243033][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 545.247100][ T5734] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 545.247126][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.247145][ T5734] usb 5-1: config 0 has no interface number 0 [ 545.247205][ T5734] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 545.247231][ T5734] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 23074, setting to 1024 [ 545.247257][ T5734] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 545.247282][ T5734] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.264605][ T5734] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 545.264634][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.264653][ T5734] usb 5-1: Product: syz [ 545.264667][ T5734] usb 5-1: Manufacturer: syz [ 545.264681][ T5734] usb 5-1: SerialNumber: syz [ 545.283831][ T5734] usb 5-1: config 0 descriptor?? [ 545.284666][T14888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 545.284847][T14888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 545.600416][T14908] netlink: 'syz.3.3530': attribute type 10 has an invalid length. [ 545.997736][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3517'. [ 546.074904][T14908] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 546.152114][T14911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 546.158666][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3532'. [ 546.158693][T14915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3532'. [ 546.932071][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 547.082020][ T5609] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 547.083451][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 547.088951][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 547.088989][ T9] usb 1-1: config 0 has no interface number 0 [ 547.089205][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 547.132718][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 547.132744][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.132754][ T9] usb 1-1: Product: syz [ 547.132762][ T9] usb 1-1: Manufacturer: syz [ 547.132769][ T9] usb 1-1: SerialNumber: syz [ 547.191506][ T9] usb 1-1: config 0 descriptor?? [ 547.253819][ T5609] usb 2-1: Using ep0 maxpacket: 32 [ 547.267634][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 547.268267][ T5609] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 547.315698][ T5609] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 547.315872][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 547.316021][ T5609] usb 2-1: Product: syz [ 547.316036][ T5609] usb 2-1: Manufacturer: syz [ 547.316201][ T5609] usb 2-1: SerialNumber: syz [ 547.398838][ T5609] usb 2-1: config 0 descriptor?? [ 547.422831][ T5609] hub 2-1:0.0: bad descriptor, ignoring hub [ 547.425107][ T5609] hub 2-1:0.0: probe with driver hub failed with error -5 [ 547.462789][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.792578][ T5609] usb 2-1: USB disconnect, device number 61 [ 548.061633][T14951] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3546'. [ 548.103561][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 548.103622][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 548.103640][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 548.103703][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 548.154114][T14952] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3546'. [ 548.158100][ T9] usb 1-1: USB disconnect, device number 94 [ 548.190854][T14951] bridge0: port 3(vlan2) entered disabled state [ 548.213061][T14951] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.213334][T14951] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.219126][T14952] bridge0: port 3(vlan2) entered blocking state [ 548.219400][T14952] bridge0: port 3(vlan2) entered listening state [ 548.262481][T14952] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.299827][T14952] bridge0: port 2(bridge_slave_1) entered listening state [ 548.300687][T14952] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.328205][T14952] bridge0: port 1(bridge_slave_0) entered listening state [ 548.352240][ T5726] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 548.405979][T14952] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3546'. [ 548.506045][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 548.506168][T14952] bridge0: port 3(vlan2) entered disabled state [ 548.506394][T14952] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.506607][T14952] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.510368][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 548.510386][ T5726] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 548.561507][ T5726] usb 2-1: language id specifier not provided by device, defaulting to English [ 548.596104][ T5726] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 548.596135][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 548.596212][ T5726] usb 2-1: Product: syz [ 548.641620][ T5726] usb 2-1: config 0 descriptor?? [ 548.661011][ T5726] hub 2-1:0.0: bad descriptor, ignoring hub [ 548.661054][ T5726] hub 2-1:0.0: probe with driver hub failed with error -5 [ 548.742234][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 548.962416][ T9] usb 2-1: USB disconnect, device number 62 [ 549.157213][T14968] netlink: 'syz.3.3553': attribute type 13 has an invalid length. [ 549.157236][T14968] netlink: 'syz.3.3553': attribute type 17 has an invalid length. [ 549.215680][T14968] bridge0: port 3(vlan2) entered blocking state [ 549.216197][T14968] bridge0: port 3(vlan2) entered listening state [ 549.217568][T14968] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.218065][T14968] bridge0: port 2(bridge_slave_1) entered listening state [ 549.252549][T14968] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.252856][T14968] bridge0: port 1(bridge_slave_0) entered listening state [ 549.302418][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 549.432968][ T9] usb 1-1: device descriptor read/64, error -71 [ 549.491724][T14975] netlink: 'syz.1.3558': attribute type 10 has an invalid length. [ 549.674874][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 549.680081][T14978] bond2: option mode: unable to set because the bond device has slaves [ 549.812604][ T9] usb 1-1: device descriptor read/64, error -71 [ 549.923388][ T9] usb usb1-port1: attempt power cycle [ 550.262192][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 550.284102][ T9] usb 1-1: device descriptor read/8, error -71 [ 550.322057][ T5772] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 550.384007][ T5734] usb 5-1: probing VID:PID(0424:012C) [ 550.385343][ T5734] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 550.385366][ T5734] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0F [ 550.385384][ T5734] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 550.452309][ T5734] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 550.505210][ T5772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.505268][ T5772] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 550.505293][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.550043][ T5772] usb 2-1: config 0 descriptor?? [ 550.557884][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 550.574859][ T9] usb 1-1: device descriptor read/8, error -71 [ 550.580008][ T5734] usb 5-1: USB disconnect, device number 78 [ 550.594543][ T5772] option 2-1:0.0: GSM modem (1-port) converter detected [ 550.682360][ T9] usb usb1-port1: unable to enumerate USB device [ 551.015705][T15012] bridge1: port 2(veth0_to_bond) entered disabled state [ 551.016516][T15012] veth0_to_bond: left allmulticast mode [ 551.016547][T15012] veth0_to_bond: left promiscuous mode [ 551.016838][T15012] bridge1: port 2(veth0_to_bond) entered disabled state [ 551.679544][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3583'. [ 552.532012][ T5726] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 552.626532][ T5772] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 552.754592][ T5726] usb 1-1: too many configurations: 33, using maximum allowed: 8 [ 552.757590][ T5726] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.759923][ T5726] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.762308][ T5726] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.795730][ T5772] usb 5-1: Using ep0 maxpacket: 32 [ 552.804911][ T5726] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.807118][ T5772] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 552.807143][ T5772] usb 5-1: config 0 has no interface number 0 [ 552.807187][ T5772] usb 5-1: config 0 interface 12 has no altsetting 0 [ 552.808603][ T5726] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.811727][ T5726] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.861852][ T5726] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.864827][ T5726] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.866571][ T5772] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 552.866599][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.866619][ T5772] usb 5-1: Product: syz [ 552.866641][ T5772] usb 5-1: Manufacturer: syz [ 552.866655][ T5772] usb 5-1: SerialNumber: syz [ 552.873479][ T5726] usb 1-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 552.873505][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.873524][ T5726] usb 1-1: Product: syz [ 552.873537][ T5726] usb 1-1: Manufacturer: syz [ 552.873551][ T5726] usb 1-1: SerialNumber: syz [ 552.896567][ T5726] usb 1-1: config 0 descriptor?? [ 552.965456][ T5772] usb 5-1: config 0 descriptor?? [ 553.130936][ T5726] usb 1-1: USB disconnect, device number 99 [ 553.355114][ T42] usb 2-1: USB disconnect, device number 63 [ 553.369007][ T42] option 2-1:0.0: device disconnected [ 553.817490][ T5772] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 553.817545][ T5772] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 553.817564][ T5772] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 553.817652][ T5772] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 553.832320][ T42] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 553.896707][ T5772] usb 5-1: USB disconnect, device number 79 [ 553.898657][T15110] fuse: Bad value for 'fd' [ 553.983878][ T42] usb 2-1: no configurations [ 553.983898][ T42] usb 2-1: can't read configurations, error -22 [ 554.122051][ T42] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 554.273932][ T42] usb 2-1: no configurations [ 554.273952][ T42] usb 2-1: can't read configurations, error -22 [ 554.276173][ T42] usb usb2-port1: attempt power cycle [ 554.503593][ C1] bridge0: port 3(vlan4) entered learning state [ 554.550756][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3627'. [ 554.550788][T15128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3627'. [ 554.671981][ T42] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 554.693653][ T42] usb 2-1: no configurations [ 554.693672][ T42] usb 2-1: can't read configurations, error -22 [ 554.822187][ T42] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 554.851426][ T42] usb 2-1: no configurations [ 554.851444][ T42] usb 2-1: can't read configurations, error -22 [ 554.853613][ T42] usb usb2-port1: unable to enumerate USB device [ 555.405570][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 555.439272][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 555.448854][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 555.462811][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 555.479179][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 555.992141][ T5329] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 556.166226][ T5329] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.166281][ T5329] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 556.166304][ T5329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.235506][ T5329] usb 1-1: config 0 descriptor?? [ 556.377650][ T5329] option 1-1:0.0: GSM modem (1-port) converter detected [ 556.422442][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 556.717835][ T5329] usb 1-1: USB disconnect, device number 100 [ 556.737361][ T5329] option 1-1:0.0: device disconnected [ 557.062372][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 557.062908][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 557.168539][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.327894][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3641'. [ 557.363680][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3638'. [ 557.363713][T15161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3638'. [ 557.410706][ T67] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.410959][ T67] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.410998][ T67] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.411032][ T67] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.552051][ T5616] Bluetooth: hci1: command tx timeout [ 558.589968][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3646'. [ 559.154145][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.625094][ T5616] Bluetooth: hci1: command tx timeout [ 559.812911][T15195] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3649'. [ 559.832053][ T5859] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 559.865397][T15196] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3649'. [ 559.981978][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 559.986277][ T5859] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 559.988820][ T5859] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 559.988847][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 559.988868][ T5859] usb 1-1: Product: syz [ 559.988883][ T5859] usb 1-1: Manufacturer: syz [ 559.988897][ T5859] usb 1-1: SerialNumber: syz [ 560.050776][ T5859] usb 1-1: config 0 descriptor?? [ 560.058679][T15191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 560.075894][ T5859] hub 1-1:0.0: bad descriptor, ignoring hub [ 560.075929][ T5859] hub 1-1:0.0: probe with driver hub failed with error -5 [ 560.093651][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.251716][T15195] bridge0: port 3(vlan2) entered disabled state [ 560.260463][T15195] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.260803][T15195] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.383060][T15196] bridge0: port 3(vlan2) entered blocking state [ 560.383198][T15196] bridge0: port 3(vlan2) entered listening state [ 560.383525][T15196] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.383661][T15196] bridge0: port 2(bridge_slave_1) entered listening state [ 560.383952][T15196] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.384097][T15196] bridge0: port 1(bridge_slave_0) entered listening state [ 560.421235][T15196] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3649'. [ 560.439696][ T42] usb 1-1: USB disconnect, device number 101 [ 560.550242][T15196] bridge0: port 3(vlan2) entered disabled state [ 560.550477][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.585749][T15196] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.726322][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3652'. [ 560.792127][ T42] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 560.853911][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.929866][T15205] ip6erspan1: entered allmulticast mode [ 560.950386][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 560.956452][ T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 560.968858][ T42] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 560.968886][ T42] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 560.968908][ T42] usb 1-1: Product: syz [ 560.968923][ T42] usb 1-1: Manufacturer: syz [ 560.968938][ T42] usb 1-1: SerialNumber: syz [ 560.997595][ T42] usb 1-1: config 0 descriptor?? [ 560.998576][T15191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 561.009420][ T42] hub 1-1:0.0: bad descriptor, ignoring hub [ 561.009453][ T42] hub 1-1:0.0: probe with driver hub failed with error -5 [ 561.149207][T15213] netlink: 'syz.4.3656': attribute type 13 has an invalid length. [ 561.149228][T15213] netlink: 'syz.4.3656': attribute type 17 has an invalid length. [ 561.203341][T15213] bridge0: port 3(vlan2) entered blocking state [ 561.205285][T15213] bridge0: port 3(vlan2) entered listening state [ 561.205597][T15213] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.209701][T15213] bridge0: port 2(bridge_slave_1) entered listening state [ 561.210010][T15213] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.210183][T15213] bridge0: port 1(bridge_slave_0) entered listening state [ 561.233695][ T5726] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 561.358306][ T5859] usb 1-1: USB disconnect, device number 102 [ 561.483318][ T5734] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 561.709571][ T5616] Bluetooth: hci1: command tx timeout [ 561.882235][ T42] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 562.182914][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 562.344231][ T5734] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 562.828616][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.828680][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.044027][ T42] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 563.192316][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 563.196771][ T42] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 563.196797][ T42] usb 1-1: config 0 has no interface number 0 [ 563.196842][ T42] usb 1-1: config 0 interface 12 has no altsetting 0 [ 563.239586][ T42] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 563.239615][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.239635][ T42] usb 1-1: Product: syz [ 563.239650][ T42] usb 1-1: Manufacturer: syz [ 563.239664][ T42] usb 1-1: SerialNumber: syz [ 563.260970][ T42] usb 1-1: config 0 descriptor?? [ 563.505780][ T5734] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 563.632478][ T5734] usb 5-1: device descriptor read/64, error -71 [ 563.752241][ T13] bridge_slave_1: left allmulticast mode [ 563.752266][ T13] bridge_slave_1: left promiscuous mode [ 563.753002][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.783354][ T5616] Bluetooth: hci1: command tx timeout [ 563.872196][ T5734] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 563.875031][ T13] bridge_slave_0: left allmulticast mode [ 563.875062][ T13] bridge_slave_0: left promiscuous mode [ 563.875286][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.012684][ T5734] usb 5-1: device descriptor read/64, error -71 [ 564.102106][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 564.102203][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 564.122927][ T5734] usb usb5-port1: attempt power cycle [ 564.462573][ T5734] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 564.483155][ T5734] usb 5-1: device descriptor read/8, error -71 [ 564.732024][ T5734] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 564.767858][ T5734] usb 5-1: device descriptor read/8, error -71 [ 564.882530][ T5734] usb usb5-port1: unable to enumerate USB device [ 565.104146][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.192687][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.260725][ T13] bond0 (unregistering): Released all slaves [ 565.324160][T15139] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.324331][T15139] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.324640][T15139] bridge_slave_0: entered allmulticast mode [ 565.328409][T15139] bridge_slave_0: entered promiscuous mode [ 565.391230][T15139] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.391528][T15139] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.394071][T15139] bridge_slave_1: entered allmulticast mode [ 565.406460][T15139] bridge_slave_1: entered promiscuous mode [ 565.569633][ T42] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 565.569688][ T42] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 565.569706][ T42] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 565.569797][ T42] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 565.672283][ T42] usb 1-1: USB disconnect, device number 103 [ 565.759982][T15139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.775765][T15139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.962561][ T5726] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 566.022076][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.022096][ C0] bridge0: topology change detected, propagating [ 566.022533][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.022549][ C0] bridge0: topology change detected, propagating [ 566.123782][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.123837][ T5726] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 566.123861][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.136304][ T5726] usb 2-1: config 0 descriptor?? [ 566.152953][ T5726] option 2-1:0.0: GSM modem (1-port) converter detected [ 566.638745][T15139] team0: Port device team_slave_0 added [ 566.722017][ T5772] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 566.732448][T15139] team0: Port device team_slave_1 added [ 566.877620][ T5772] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 566.877659][ T5772] usb 5-1: can't read configurations, error -61 [ 567.002056][ T5772] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 567.155147][ T5772] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 567.155186][ T5772] usb 5-1: can't read configurations, error -61 [ 567.155641][ T5772] usb usb5-port1: attempt power cycle [ 567.302090][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 567.346735][T15139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.346751][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.346777][T15139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.364999][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 567.369083][T15139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.369097][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.369123][T15139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.533520][ T5772] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 567.555944][ T5772] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 567.555980][ T5772] usb 5-1: can't read configurations, error -61 [ 567.682009][ T5772] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 567.708128][ T5772] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 567.708165][ T5772] usb 5-1: can't read configurations, error -61 [ 567.709011][ T5772] usb usb5-port1: unable to enumerate USB device [ 567.932046][ T5606] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 568.026086][T15139] hsr_slave_0: entered promiscuous mode [ 568.026954][T15139] hsr_slave_1: entered promiscuous mode [ 568.029115][T15139] debugfs: 'hsr0' already exists in 'hsr' [ 568.029130][T15139] Cannot create hsr debugfs directory [ 568.092004][ T5606] usb 1-1: Using ep0 maxpacket: 32 [ 568.094681][ T5606] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 568.098649][ T5606] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 568.098676][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 568.098696][ T5606] usb 1-1: Product: syz [ 568.098706][ T5606] usb 1-1: Manufacturer: syz [ 568.098714][ T5606] usb 1-1: SerialNumber: syz [ 568.152443][ T5606] usb 1-1: config 0 descriptor?? [ 568.153941][T15394] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 568.158050][ T5606] hub 1-1:0.0: bad descriptor, ignoring hub [ 568.158083][ T5606] hub 1-1:0.0: probe with driver hub failed with error -5 [ 568.212093][ T13] hsr_slave_0: left promiscuous mode [ 568.252152][ T13] hsr_slave_1: left promiscuous mode [ 568.253232][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.253256][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.315198][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.315225][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.433991][ T13] veth1_macvtap: left promiscuous mode [ 568.444119][ T13] veth0_macvtap: left promiscuous mode [ 568.444358][ T13] veth1_vlan: left promiscuous mode [ 568.444512][ T13] veth0_vlan: left promiscuous mode [ 568.492639][ T42] usb 1-1: USB disconnect, device number 104 [ 568.712256][ T5609] usb 2-1: USB disconnect, device number 68 [ 568.726987][ T5609] option 2-1:0.0: device disconnected [ 568.842006][ T5606] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 568.996004][ T5606] usb 1-1: Using ep0 maxpacket: 32 [ 568.999863][ T5606] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 569.028423][ T5606] usb 1-1: string descriptor 0 read error: -22 [ 569.028560][ T5606] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 569.028585][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 569.068482][ T5606] usb 1-1: config 0 descriptor?? [ 569.072947][T15394] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 569.088707][ T5606] hub 1-1:0.0: bad descriptor, ignoring hub [ 569.088742][ T5606] hub 1-1:0.0: probe with driver hub failed with error -5 [ 569.387601][ T42] usb 1-1: USB disconnect, device number 105 [ 569.771223][T15458] loop5: detected capacity change from 0 to 7 [ 569.799958][T15458] Dev loop5: unable to read RDB block 7 [ 569.799987][T15458] loop5: AHDI p2 [ 569.800013][T15458] loop5: partition table partially beyond EOD, truncated [ 570.384897][ T5606] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 570.522598][ T13] team0 (unregistering): Port device team_slave_1 removed [ 570.539529][ T5606] usb 2-1: Using ep0 maxpacket: 32 [ 570.541406][ T5606] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 570.541430][ T5606] usb 2-1: config 0 has no interface number 0 [ 570.541474][ T5606] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 570.541497][ T5606] usb 2-1: config 0 interface 89 has no altsetting 0 [ 570.581066][ T5606] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 570.581097][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.581117][ T5606] usb 2-1: Product: syz [ 570.581132][ T5606] usb 2-1: Manufacturer: syz [ 570.581145][ T5606] usb 2-1: SerialNumber: syz [ 570.641475][ T5606] usb 2-1: config 0 descriptor?? [ 570.668241][ T5606] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 570.668262][ T5606] em28xx 2-1:0.89: Video interface 89 found: [ 570.674316][ T13] team0 (unregistering): Port device team_slave_0 removed [ 571.284545][ T5606] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 571.522199][ T42] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 571.677513][ T42] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 571.677545][ T42] usb 5-1: can't read configurations, error -61 [ 571.814680][ T42] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 571.969792][ T42] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 571.969831][ T42] usb 5-1: can't read configurations, error -61 [ 571.970222][ T42] usb usb5-port1: attempt power cycle [ 572.152099][T15528] netlink: 'syz.0.3789': attribute type 10 has an invalid length. [ 572.230615][ T5606] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 572.230644][ T5606] em28xx 2-1:0.89: board has no eeprom [ 572.247986][T15528] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 572.282075][ T5606] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 572.282102][ T5606] em28xx 2-1:0.89: analog set to bulk mode. [ 572.284416][ T5772] em28xx 2-1:0.89: Registering V4L2 extension [ 572.322170][ T42] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 572.360723][ T42] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 572.360759][ T42] usb 5-1: can't read configurations, error -61 [ 572.387355][ T5606] usb 2-1: USB disconnect, device number 69 [ 572.417863][ T5606] em28xx 2-1:0.89: Disconnecting em28xx [ 572.486241][ T5772] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 572.486265][ T5772] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 572.486279][ T5772] em28xx 2-1:0.89: No AC97 audio processor [ 572.502669][ T42] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 572.525458][ T42] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 572.525491][ T42] usb 5-1: can't read configurations, error -61 [ 572.525801][ T42] usb usb5-port1: unable to enumerate USB device [ 572.658672][ T5772] usb 2-1: Decoder not found [ 572.658691][ T5772] em28xx 2-1:0.89: failed to create media graph [ 572.658726][ T5772] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 572.674521][ T5772] em28xx 2-1:0.89: Registering snapshot button... [ 572.969990][ T5772] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input19 [ 573.026786][ T5772] em28xx 2-1:0.89: Remote control support is not available for this card. [ 573.027646][ T5606] em28xx 2-1:0.89: Closing input extension [ 573.027673][ T5606] em28xx 2-1:0.89: Deregistering snapshot button [ 573.744513][ T5606] em28xx 2-1:0.89: Freeing device [ 574.692143][ T5772] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 574.841986][ T5772] usb 5-1: Using ep0 maxpacket: 32 [ 574.844030][ T5772] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 574.844056][ T5772] usb 5-1: config 0 has no interface number 0 [ 574.844103][ T5772] usb 5-1: config 0 interface 12 has no altsetting 0 [ 574.848027][ T5772] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 574.848055][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.848076][ T5772] usb 5-1: Product: syz [ 574.848091][ T5772] usb 5-1: Manufacturer: syz [ 574.848106][ T5772] usb 5-1: SerialNumber: syz [ 574.926545][ T5772] usb 5-1: config 0 descriptor?? [ 576.203664][T15616] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 576.203687][T15616] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 577.187510][ T5772] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 577.187563][ T5772] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 577.187587][ T5772] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 577.187675][ T5772] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 577.281523][ T5772] usb 5-1: USB disconnect, device number 92 [ 577.397229][T15139] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.440272][T15139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.441730][T15139] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.514969][T15139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.519922][T15139] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 577.575924][T15139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.584554][T15139] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.616177][T15139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.632342][ T5606] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 577.782898][ T5606] usb 2-1: Using ep0 maxpacket: 8 [ 577.799536][ T5606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.799587][ T5606] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 577.799614][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.799640][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 577.807493][ T5606] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 577.807520][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 577.807542][ T5606] usb 2-1: Product: syz [ 577.807555][ T5606] usb 2-1: Manufacturer: syz [ 577.807570][ T5606] usb 2-1: SerialNumber: syz [ 577.892564][ T5606] usb 2-1: config 0 descriptor?? [ 578.124368][ T5606] rc_core: IR keymap rc-imon-rsc not found [ 578.124395][ T5606] Registered IR keymap rc-empty [ 578.127573][ T5606] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 578.161213][ T5606] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 578.217042][ T5606] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90 [ 578.330541][ T5606] usb 2-1: USB disconnect, device number 70 [ 578.445162][T15139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.573850][T15139] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.605586][T14758] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.605715][T14758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.656644][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.656788][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.463739][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 579.463923][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 579.464090][ C0] bridge0: port 3(vlan2) entered learning state [ 579.681701][T15732] syzkaller1: entered promiscuous mode [ 579.681726][T15732] syzkaller1: entered allmulticast mode [ 579.862400][ T5726] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 580.024433][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 580.029712][ T5726] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 580.034822][ T5726] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 580.034848][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 580.034868][ T5726] usb 2-1: Product: syz [ 580.034882][ T5726] usb 2-1: Manufacturer: syz [ 580.034895][ T5726] usb 2-1: SerialNumber: syz [ 580.070245][ T5726] usb 2-1: config 0 descriptor?? [ 580.072482][T15729] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 580.082147][ T5726] hub 2-1:0.0: bad descriptor, ignoring hub [ 580.082181][ T5726] hub 2-1:0.0: probe with driver hub failed with error -5 [ 580.201744][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3861'. [ 580.230615][T15747] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 580.235038][ T42] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 580.422864][ T42] usb 2-1: USB disconnect, device number 71 [ 580.624595][ T5734] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 580.784926][ T42] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 580.921434][T15139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.953333][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 580.955571][ T42] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 580.972059][ T42] usb 2-1: language id specifier not provided by device, defaulting to English [ 580.983436][ T42] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 580.983463][ T42] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 580.983482][ T42] usb 2-1: Product: syz [ 581.004465][ T42] usb 2-1: config 0 descriptor?? [ 581.016947][T15729] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 581.034225][ T42] hub 2-1:0.0: bad descriptor, ignoring hub [ 581.034262][ T42] hub 2-1:0.0: probe with driver hub failed with error -5 [ 581.356902][ T5734] usb 2-1: USB disconnect, device number 72 [ 581.400801][T15139] veth0_vlan: entered promiscuous mode [ 581.449646][T15139] veth1_vlan: entered promiscuous mode [ 581.620793][T15139] veth0_macvtap: entered promiscuous mode [ 581.648000][T15139] veth1_macvtap: entered promiscuous mode [ 581.708036][T15139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.765210][T15139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.830857][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.831139][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.835421][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.836373][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.046632][T15796] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3879'. [ 582.332806][T15796] bridge0: port 3(vlan4) entered disabled state [ 582.454489][T15796] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.505660][ T5859] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 582.537879][T15796] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.663846][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 582.666426][ T5859] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 582.666453][ T5859] usb 2-1: config 0 has no interface number 0 [ 582.666500][ T5859] usb 2-1: config 0 interface 12 has no altsetting 0 [ 582.685833][ T5859] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 582.685859][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.685879][ T5859] usb 2-1: Product: syz [ 582.685892][ T5859] usb 2-1: Manufacturer: syz [ 582.685907][ T5859] usb 2-1: SerialNumber: syz [ 582.725000][ T5859] usb 2-1: config 0 descriptor?? [ 583.799058][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.799078][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.164504][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.164740][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.268072][ T5859] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 585.268128][ T5859] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 585.268145][ T5859] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 585.268238][ T5859] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 585.312005][ T5859] usb 2-1: USB disconnect, device number 73 [ 585.338252][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3903'. [ 585.338275][T15855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3903'. [ 585.435639][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.466070][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.470267][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.474530][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.481116][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 585.992044][ T5726] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 586.092788][T14445] syz_tun (unregistering): left allmulticast mode [ 586.145858][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.145892][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.145916][ T5726] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 586.145959][ T5726] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 586.145983][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.195253][T14445] bond0: (slave syz_tun): Releasing backup interface [ 586.212758][ T5726] usb 3-1: config 0 descriptor?? [ 586.688880][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.688904][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.688920][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.688936][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.688951][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.688966][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.688981][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.688996][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.689011][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.689026][ T5726] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 586.892776][ T5726] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 586.942890][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3907'. [ 586.971634][ T5726] usb 3-1: USB disconnect, device number 94 [ 587.204319][T15873] fido_id[15873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 587.579915][T15875] binder: 15874:15875 ioctl c0306201 0 returned -14 [ 587.632417][ T5616] Bluetooth: hci4: command tx timeout [ 587.948704][ T2972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.047882][T15882] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 588.047905][T15882] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 588.506714][ T2972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.974559][ T2972] team0: Port device netdevsim1 removed [ 589.063277][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 589.088337][ T2972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.241263][T15910] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 589.241286][T15910] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 589.365846][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3922'. [ 589.469676][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.703485][ T5616] Bluetooth: hci4: command tx timeout [ 590.352103][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.632689][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 591.632859][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 591.633015][ C1] bridge0: port 3(vlan2) entered learning state [ 591.782681][ T5616] Bluetooth: hci4: command tx timeout [ 591.902756][ T2972] vlan2: left allmulticast mode [ 591.902841][ T2972] geneve0: left allmulticast mode [ 591.992630][ T2972] vlan2: left promiscuous mode [ 591.992655][ T2972] geneve0: left promiscuous mode [ 591.996162][ T2972] bridge0: port 3(vlan2) entered disabled state [ 592.305030][ T2972] bridge_slave_1: left allmulticast mode [ 592.305064][ T2972] bridge_slave_1: left promiscuous mode [ 592.305294][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.348826][ T28] ------------[ cut here ]------------ [ 592.348839][ T28] ODEBUG: free active (active state 0) object: ffff888033a47278 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x380 [ 592.349032][ T28] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: rcuc/1/28 [ 592.349166][ T28] Modules linked in: [ 592.349201][ T28] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.349229][ T28] Tainted: [L]=SOFTLOCKUP [ 592.349237][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.349256][ T28] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 592.349288][ T28] Code: 89 44 24 20 e8 27 81 7f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 53 a7 8b 48 c7 c2 20 59 a7 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 592.349306][ T28] RSP: 0018:ffffc90000a2fa90 EFLAGS: 00010246 [ 592.349323][ T28] RAX: ffffffff89f32240 RBX: ffffffff99a8edc0 RCX: 0000000000000000 [ 592.349337][ T28] RDX: ffffffff8ba75920 RSI: ffffffff8ba753a0 RDI: ffffffff8f933740 [ 592.349353][ T28] RBP: ffffffff8b4f5380 R08: ffff888033a47278 R09: ffffffff8b4f6700 [ 592.349369][ T28] R10: dffffc0000000000 R11: ffffffff81b0c180 R12: ffff888033a47400 [ 592.349384][ T28] R13: ffffffff8f933740 R14: ffff888033a47000 R15: ffff888033a47278 [ 592.349401][ T28] FS: 0000000000000000(0000) GS:ffff888126279000(0000) knlGS:0000000000000000 [ 592.349419][ T28] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.349433][ T28] CR2: 00007fb873a4da08 CR3: 000000004cc78000 CR4: 00000000003526f0 [ 592.349450][ T28] Call Trace: [ 592.349457][ T28] [ 592.349465][ T28] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 592.349502][ T28] kfree+0x13e/0x6c0 [ 592.349594][ T28] ? kobject_put+0x228/0x560 [ 592.349720][ T28] kobject_put+0x228/0x560 [ 592.349746][ T28] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 592.349809][ T28] rcu_cpu_kthread+0x99e/0x1470 [ 592.349919][ T28] ? rcu_cpu_kthread+0x205/0x1470 [ 592.349959][ T28] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 592.349988][ T28] ? schedule+0x90/0x360 [ 592.350045][ T28] ? smpboot_thread_fn+0x4d/0xa50 [ 592.350103][ T28] smpboot_thread_fn+0x541/0xa50 [ 592.350130][ T28] ? smpboot_thread_fn+0x4d/0xa50 [ 592.350162][ T28] kthread+0x388/0x470 [ 592.350199][ T28] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 592.350220][ T28] ? __pfx_kthread+0x10/0x10 [ 592.350246][ T28] ret_from_fork+0x514/0xb70 [ 592.350289][ T28] ? __pfx_ret_from_fork+0x10/0x10 [ 592.350313][ T28] ? __switch_to+0xc79/0x1410 [ 592.350348][ T28] ? __pfx_kthread+0x10/0x10 [ 592.350377][ T28] ret_from_fork_asm+0x1a/0x30 [ 592.350433][ T28] [ 592.350444][ T28] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 592.350463][ T28] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.350493][ T28] Tainted: [L]=SOFTLOCKUP [ 592.350501][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.350514][ T28] Call Trace: [ 592.350523][ T28] [ 592.350531][ T28] vpanic+0x56c/0xa60 [ 592.350568][ T28] ? __pfx__printk+0x10/0x10 [ 592.350597][ T28] ? __pfx_vpanic+0x10/0x10 [ 592.350621][ T28] ? is_bpf_text_address+0x292/0x2b0 [ 592.350696][ T28] ? is_bpf_text_address+0x26/0x2b0 [ 592.350733][ T28] panic+0xc5/0xd0 [ 592.350757][ T28] ? __pfx_panic+0x10/0x10 [ 592.350791][ T28] ? ret_from_fork_asm+0x1a/0x30 [ 592.350822][ T28] __warn+0x315/0x4c0 [ 592.350846][ T28] ? debug_check_no_obj_freed+0x405/0x550 [ 592.350879][ T28] ? debug_check_no_obj_freed+0x405/0x550 [ 592.350912][ T28] __report_bug+0x29a/0x540 [ 592.350969][ T28] ? debug_check_no_obj_freed+0x405/0x550 [ 592.351007][ T28] ? __pfx___report_bug+0x10/0x10 [ 592.351049][ T28] report_bug_entry+0x19a/0x290 [ 592.351071][ T28] ? debug_check_no_obj_freed+0x44a/0x550 [ 592.351101][ T28] ? debug_check_no_obj_freed+0x44f/0x550 [ 592.351132][ T28] handle_bug+0xce/0x200 [ 592.351185][ T28] exc_invalid_op+0x1a/0x50 [ 592.351211][ T28] asm_exc_invalid_op+0x1a/0x20 [ 592.351250][ T28] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 592.351282][ T28] Code: 89 44 24 20 e8 27 81 7f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 53 a7 8b 48 c7 c2 20 59 a7 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 592.351301][ T28] RSP: 0018:ffffc90000a2fa90 EFLAGS: 00010246 [ 592.351319][ T28] RAX: ffffffff89f32240 RBX: ffffffff99a8edc0 RCX: 0000000000000000 [ 592.351335][ T28] RDX: ffffffff8ba75920 RSI: ffffffff8ba753a0 RDI: ffffffff8f933740 [ 592.351352][ T28] RBP: ffffffff8b4f5380 R08: ffff888033a47278 R09: ffffffff8b4f6700 [ 592.351369][ T28] R10: dffffc0000000000 R11: ffffffff81b0c180 R12: ffff888033a47400 [ 592.351385][ T28] R13: ffffffff8f933740 R14: ffff888033a47000 R15: ffff888033a47278 [ 592.351406][ T28] ? __pfx_timer_debug_hint+0x10/0x10 [ 592.351466][ T28] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 592.351498][ T28] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 592.351534][ T28] kfree+0x13e/0x6c0 [ 592.351554][ T28] ? kobject_put+0x228/0x560 [ 592.351585][ T28] kobject_put+0x228/0x560 [ 592.351611][ T28] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 592.351641][ T28] rcu_cpu_kthread+0x99e/0x1470 [ 592.351679][ T28] ? rcu_cpu_kthread+0x205/0x1470 [ 592.351714][ T28] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 592.351741][ T28] ? schedule+0x90/0x360 [ 592.351768][ T28] ? smpboot_thread_fn+0x4d/0xa50 [ 592.351790][ T28] smpboot_thread_fn+0x541/0xa50 [ 592.351816][ T28] ? smpboot_thread_fn+0x4d/0xa50 [ 592.351853][ T28] kthread+0x388/0x470 [ 592.351881][ T28] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 592.351903][ T28] ? __pfx_kthread+0x10/0x10 [ 592.351930][ T28] ret_from_fork+0x514/0xb70 [ 592.351955][ T28] ? __pfx_ret_from_fork+0x10/0x10 [ 592.351979][ T28] ? __switch_to+0xc79/0x1410 [ 592.352017][ T28] ? __pfx_kthread+0x10/0x10 [ 592.352046][ T28] ret_from_fork_asm+0x1a/0x30 [ 592.352088][ T28] [ 592.352514][ T28] Kernel Offset: disabled