last executing test programs: 5m57.94871459s ago: executing program 3 (id=499): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0xa9eb, 0x8, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x36, 0x0, 0x0, 0x4}]}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x1) r5 = fanotify_init(0x200, 0x1) fanotify_mark(r5, 0x1, 0x8001021, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x79ab, 0x3380, 0x8000, 0x172}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x627, 0x14, 0x43, 0x0, 0x0) 5m55.953158907s ago: executing program 3 (id=502): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m55.087532253s ago: executing program 3 (id=507): setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_clone(0xa0700000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000380)='fdinfo/4\x00') 5m49.955391348s ago: executing program 3 (id=513): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x101, 0x0, 0x7, 0x0, 0x3ff, 0x3}) 5m46.287017263s ago: executing program 3 (id=520): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x40000) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 5m43.541571096s ago: executing program 3 (id=522): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) 5m28.213564464s ago: executing program 32 (id=522): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) 27.977109355s ago: executing program 4 (id=1136): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x880, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r6, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000280)=0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001280)=ANY=[@ANYBLOB="147b4abea6c9b04557205e8238d67250b59fe70c71ee2c76e25f112a7581098c7e90446ca5e7c09baf3597cd0623860a8ef17ec6b60851d03b2ea48507de886277523f98e9102d01bae81144ef3c2376675fd5d1245d15c81e5fe2e2d96aef880ed539825c5170f55fdff801601f26328418307ba5ef8fc362d700eb893e89e54420a913a6afa4b85eb751414c625e67cda89ccc3b0ab08e2f97e5093f8ea5974980948724e62178496b29dcf41bb3579936", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r7 = userfaultfd(0x801) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x139}) 25.461497186s ago: executing program 4 (id=1142): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x6}, 0xff}) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4, 0x0, 0x11000000}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0xc005, 0x0, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x92) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006240)={0x2020}, 0x2020) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0xa}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x80000000, 0x102f, 0x5, 0x1, 0x3, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0x2, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x4003, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0xbc, 0x9, 0x1800000, 0x7, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2e, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x7, 0x5, 0x0, 0x5, 0x96, 0x9, 0x401, 0x2, 0x0, 0x680000000000, 0x8001, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff004, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]}) socket$nl_route(0x10, 0x3, 0x0) 17.740342287s ago: executing program 4 (id=1153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setreuid(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f0000000100)=0x0, 0x0, &(0x7f0000000280)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x1, 0x0, r1, 0x0, 0x0, 0x198, 0x4}, 0x9dc3, 0x81, 0x0, 0x0, 0x0, 0x0, 0x2}) waitid(0x2, 0x0, &(0x7f0000000480), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143042, 0x0) 16.403924835s ago: executing program 1 (id=1155): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 16.189096273s ago: executing program 2 (id=1158): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000300)="cf45a105ab8efecb57924457bd52e79a4cb5216ba5e90b9bc0350be97584a9b5679d", 0x22}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14.843259432s ago: executing program 1 (id=1160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x18c, 0x203, 0x110, 0x19030000, 0x1f8, 0x2e0, 0x2e0, 0x1f8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0xff80, 0x7fff, 0x4, 'pptp\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x38, 0x5, 0x2, 0x3ced, 0x7, 0x6a6b, 0x9, 0x8]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000003c0)={0x2, 0x0, @pic={0x0, 0x7e, 0x7, 0x0, 0xd, 0x9, 0x9, 0x1, 0xb, 0xf8, 0x2, 0x6, 0x2, 0x6, 0x4, 0xf}}) 14.393035242s ago: executing program 2 (id=1161): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x10000000008, 0x9, 0x0, 0x0, 0x20, 0x11, "79820fde08abdd00df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe00000000000000000000000000064900000010", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e461519b104962775f9527ad4d3ff43cc93200", [0x2, 0x3]}) io_uring_setup(0x28ae, &(0x7f0000001040)={0x0, 0x80, 0x800, 0x0, 0xa, 0x0, r0}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r1, &(0x7f0000000140), 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') 12.688002512s ago: executing program 2 (id=1162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x20040050) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) recvfrom(r4, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) 12.515408907s ago: executing program 4 (id=1163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) close_range(r1, r2, 0x0) 11.671216702s ago: executing program 0 (id=1166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88642, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) syz_open_dev$radio(&(0x7f0000000240), 0x0, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x6, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x895, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000004200)=""/4087, &(0x7f00000003c0)=0xfffffffffffffe9f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) 11.336915151s ago: executing program 4 (id=1167): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x0) 7.293118647s ago: executing program 4 (id=1168): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c92012000e00050014020a000600"], 0x17) close(0xffffffffffffffff) 7.159400349s ago: executing program 0 (id=1169): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000340)=0xfd) 7.15301675s ago: executing program 2 (id=1170): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r6, 0xc0184d16, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0}) 5.422786182s ago: executing program 0 (id=1171): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 5.191362823s ago: executing program 2 (id=1172): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0x62302) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close(r5) 3.946372702s ago: executing program 2 (id=1173): openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$media(0x0, 0x7ffffffe, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f0000000180)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe2(&(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 3.914427505s ago: executing program 1 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) 3.563012696s ago: executing program 1 (id=1175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001880)={{0x80000000, 0x0, 0x1, [0xff, 0x2]}, {0x80000000, 0x0, 0x1, [0xffffffff, 0x3]}, 0x0, [0x5, 0xd]}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000980)=ANY=[@ANYRES32=r0, @ANYBLOB="00800000"]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x40002000, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.49569084s ago: executing program 1 (id=1176): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x0) 2.451824994s ago: executing program 0 (id=1177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 795.29834ms ago: executing program 1 (id=1178): r0 = getpgrp(0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f8e400905080aff03f707090905"], 0x0) syz_usb_disconnect(r1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000015000103"], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x6b7e369c4a37b0ea) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) 762.098633ms ago: executing program 0 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) 0s ago: executing program 0 (id=1180): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r4 = socket(0x10, 0x3, 0x0) readv(r3, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000500)=""/97, 0x61}], 0x1, 0x7fff, 0x0) kernel console output (not intermixed with test programs): dia_entity: media entity 'dvb-demux' registered. [ 167.877072][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 168.702434][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 168.722385][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 168.755870][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 168.826876][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 168.876957][ T9] usb 3-1: USB disconnect, device number 3 [ 168.976495][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 169.256508][ T5877] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 169.323369][ T6436] netdevsim netdevsim0 ªªªªª»: renamed from netdevsim0 (while UP) [ 169.406544][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 170.365020][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.475522][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65535, setting to 64 [ 170.488330][ T5877] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 170.505784][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.527817][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 170.539396][ T5877] usb 2-1: config 0 descriptor?? [ 170.546246][ T6428] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 170.576336][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.736197][ T6441] 8021q: VLANs not supported on lo [ 170.778906][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.810037][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 170.818806][ T9] usb 3-1: Product: syz [ 170.841914][ T9] usb 3-1: Manufacturer: syz [ 170.883686][ T9] usb 3-1: SerialNumber: syz [ 171.066551][ T5877] ath6kl: Failed to submit usb control message: -71 [ 171.073739][ T5877] ath6kl: unable to send the bmi data to the device: -71 [ 171.098514][ T5877] ath6kl: Unable to send get target info: -71 [ 171.105308][ T9] usb 3-1: config 0 descriptor?? [ 171.112872][ T5877] ath6kl: Failed to init ath6kl core: -71 [ 171.125362][ T5877] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 171.142074][ T5877] usb 2-1: USB disconnect, device number 4 [ 171.168733][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 171.180159][ T9] usb 3-1: selecting invalid altsetting 0 [ 172.981332][ T5840] usb 3-1: USB disconnect, device number 4 [ 173.168654][ T6456] warning: `syz.2.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 173.871367][ T6095] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.912814][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.323498][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.355214][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.409174][ T8] usb 2-1: Product: syz [ 174.435351][ T8] usb 2-1: Manufacturer: syz [ 174.477534][ T8] usb 2-1: SerialNumber: syz [ 174.652137][ T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.039477][ T970] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 175.867790][ T6482] random: crng reseeded on system resumption [ 176.971181][ T970] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 176.979506][ T5775] Bluetooth: hci4: command 0x1003 tx timeout [ 176.983109][ T5769] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 177.258489][ T970] ath9k_htc: Failed to initialize the device [ 177.397918][ T6478] syzkaller0: entered promiscuous mode [ 177.444782][ T970] usb 2-1: ath9k_htc: USB layer deinitialized [ 177.458951][ T6478] syzkaller0: entered allmulticast mode [ 179.012525][ T23] usb 2-1: USB disconnect, device number 5 [ 179.605333][ T6505] syz.2.148: attempt to access beyond end of device [ 179.605333][ T6505] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 179.621584][ T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 179.766547][ T970] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 179.878283][ T6505] gfs2: error 10 reading superblock [ 180.946422][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 180.956604][ T970] usb 2-1: Using ep0 maxpacket: 16 [ 180.967996][ T788] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 180.987017][ T788] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.000127][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.011452][ T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.021446][ T970] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 181.034211][ T788] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 181.045576][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.053691][ T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 181.066521][ T970] usb 2-1: config 0 descriptor?? [ 181.077552][ T788] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.090718][ T788] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.099980][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.242810][ T6510] kvm: pic: non byte write [ 181.249058][ T6510] kvm: pic: non byte write [ 181.254995][ T6510] kvm: pic: non byte write [ 181.260085][ T6510] kvm: pic: non byte write [ 181.266088][ T6510] kvm: pic: non byte write [ 181.270965][ T6510] kvm: pic: non byte write [ 181.285028][ T6510] kvm: pic: non byte write [ 181.292198][ T6510] kvm: pic: non byte write [ 181.298277][ T6510] kvm: pic: non byte write [ 181.306169][ T6510] kvm: pic: non byte write [ 181.332242][ T788] usb 4-1: usb_control_msg returned -32 [ 181.345022][ T788] usbtmc 4-1:16.0: can't read capabilities [ 181.500049][ T970] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 181.592283][ T6518] Zero length message leads to an empty skb [ 182.197574][ T970] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.318785][ T8] usb 2-1: USB disconnect, device number 6 [ 182.464312][ T970] usb 3-1: Using ep0 maxpacket: 8 [ 182.643299][ T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.796696][ T970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 183.181473][ T970] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 183.199183][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.211520][ T970] usb 3-1: Product: syz [ 183.215772][ T970] usb 3-1: Manufacturer: syz [ 183.226696][ T6521] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 183.252176][ T970] usb 3-1: SerialNumber: syz [ 183.278309][ T970] usb 3-1: config 0 descriptor?? [ 183.289831][ T970] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 183.474621][ T5840] usb 4-1: USB disconnect, device number 2 [ 183.524542][ T970] usb 3-1: USB disconnect, device number 5 [ 183.618991][ T2325] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 184.355702][ T2325] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 184.473891][ T5769] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 184.616580][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.821783][ T8] usb 1-1: config 8 interface 0 has no altsetting 0 [ 184.838877][ T8] usb 1-1: New USB device found, idVendor=15c2, idProduct=0038, bcdDevice=69.a3 [ 184.849306][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.861064][ T8] usb 1-1: Product: syz [ 184.867744][ T8] usb 1-1: Manufacturer: syz [ 184.872682][ T8] usb 1-1: SerialNumber: syz [ 186.548029][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 186.556220][ T8] imon 1-1:8.0: unable to initialize intf0, err -19 [ 186.563982][ T8] imon:imon_probe: failed to initialize context! [ 186.570513][ T8] imon 1-1:8.0: unable to register, err -19 [ 186.647905][ T8] usb 1-1: USB disconnect, device number 5 [ 192.680955][ T6606] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 192.709599][ T6608] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 194.702328][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.708936][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.296723][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 201.606643][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 202.297883][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 202.309747][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 202.434681][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.472370][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.519832][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 202.576098][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 202.619112][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.653395][ T8] usb 4-1: config 8 interface 0 has no altsetting 0 [ 202.660994][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.673159][ T8] usb 4-1: New USB device found, idVendor=15c2, idProduct=0038, bcdDevice=69.a3 [ 202.686422][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.715945][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.750659][ T8] usb 4-1: Product: syz [ 202.765140][ T8] usb 4-1: Manufacturer: syz [ 202.789673][ T8] usb 4-1: SerialNumber: syz [ 207.789923][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 207.802386][ T8] imon 4-1:8.0: unable to initialize intf0, err -19 [ 207.816608][ T9] usb 2-1: usb_control_msg returned -110 [ 207.822468][ T9] usbtmc 2-1:16.0: can't read capabilities [ 207.828390][ T8] imon:imon_probe: failed to initialize context! [ 207.834822][ T8] imon 4-1:8.0: unable to register, err -19 [ 207.936446][ T8] usb 4-1: USB disconnect, device number 3 [ 208.061789][ T9] usb 2-1: USB disconnect, device number 7 [ 210.795163][ T6706] netlink: set zone limit has 8 unknown bytes [ 211.285620][ T5774] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 213.388127][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 213.394441][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 213.400525][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 217.755298][ T6742] input: syz0 as /devices/virtual/input/input8 [ 221.216226][ T6771] sg_write: data in/out 12582877/10 bytes for SCSI command 0x2c-- guessing data in; [ 221.216226][ T6771] program syz.0.218 not setting count and/or reply_len properly [ 224.282428][ T6791] netlink: 'syz.3.225': attribute type 10 has an invalid length. [ 224.341793][ T6791] team0: Port device dummy0 added [ 224.367677][ T5877] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 224.396190][ T6792] netlink: 'syz.3.225': attribute type 10 has an invalid length. [ 224.438177][ T6792] team0: Port device dummy0 removed [ 224.462452][ T6792] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 224.577898][ T5877] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 224.611672][ T5877] usb 2-1: config 0 has no interface number 0 [ 224.647516][ T5877] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 224.709828][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.718008][ T5877] usb 2-1: Product: syz [ 224.722237][ T5877] usb 2-1: Manufacturer: syz [ 224.730039][ T5877] usb 2-1: SerialNumber: syz [ 224.741570][ T5877] usb 2-1: config 0 descriptor?? [ 227.237602][ T6798] Bluetooth: MGMT ver 1.22 [ 227.857017][ T5877] usb 2-1: Firmware version (0.0) predates our first public release. [ 227.865198][ T5877] usb 2-1: Please update to version 0.2 or newer [ 228.029435][ T5877] usb 2-1: USB disconnect, device number 8 [ 230.305470][ T6819] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 231.224135][ T51] Bluetooth: hci0: unexpected event for opcode 0x041c [ 232.556401][ T5856] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.746467][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 232.772281][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.164556][ T5856] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 234.190993][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.211294][ T5856] usb 1-1: config 0 descriptor?? [ 234.550478][ T5856] usbhid 1-1:0.0: can't add hid device: -71 [ 234.614012][ T5856] usbhid: probe of 1-1:0.0 failed with error -71 [ 234.849107][ T5856] usb 1-1: USB disconnect, device number 6 [ 235.638038][ T6884] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 235.652835][ T6884] ref_ctr increment failed for inode: 0x138 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e0e1c80 [ 236.120528][ T6876] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 236.153710][ T6876] ref_ctr decrement failed for inode: 0x138 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e0e1c80 [ 236.243594][ T27] audit: type=1326 audit(1767844166.308:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 236.329185][ T788] IPVS: starting estimator thread 0... [ 236.436764][ T6895] IPVS: using max 26 ests per chain, 62400 per kthread [ 236.456761][ T6099] Bluetooth: (null): Too short H5 packet [ 236.462666][ T6099] Bluetooth: (null): Invalid header checksum [ 236.480249][ T6099] Bluetooth: (null): Invalid header checksum [ 236.562510][ T1129] Bluetooth: (null): Invalid header checksum [ 236.678585][ T6081] Bluetooth: (null): Invalid header checksum [ 236.969295][ T27] audit: type=1326 audit(1767844167.048:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 237.723417][ T27] audit: type=1326 audit(1767844167.048:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 237.746032][ T27] audit: type=1326 audit(1767844167.048:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 237.840893][ T27] audit: type=1326 audit(1767844167.048:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 237.896857][ T27] audit: type=1326 audit(1767844167.048:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 238.109419][ T27] audit: type=1326 audit(1767844167.048:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 238.181583][ T27] audit: type=1326 audit(1767844167.048:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 238.944838][ T27] audit: type=1326 audit(1767844167.048:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 238.969802][ T27] audit: type=1326 audit(1767844167.048:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7fc00000 [ 240.052749][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 240.201092][ T6915] sctp: [Deprecated]: syz.1.256 (pid 6915) Use of int in max_burst socket option deprecated. [ 240.201092][ T6915] Use struct sctp_assoc_value instead [ 241.957539][ T6920] veth1_macvtap: left promiscuous mode [ 243.228103][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 243.576453][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 243.598073][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 244.513543][ T23] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 244.532380][ T23] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 244.559924][ T23] usb 4-1: config 7 has no interface number 0 [ 244.580809][ T23] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 244.598734][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.619779][ T23] usb 4-1: Product: syz [ 244.629923][ T23] usb 4-1: Manufacturer: syz [ 244.634621][ T23] usb 4-1: SerialNumber: syz [ 246.770941][ T2325] pvrusb2: request_firmware fatal error with code=-110 [ 246.961972][ T2325] pvrusb2: Failure uploading firmware1 [ 246.995600][ T23] usb 4-1: Cannot retrieve CPort count: -110 [ 247.008482][ T23] usb 4-1: Cannot retrieve CPort count: -110 [ 247.014652][ T23] es2_ap_driver: probe of 4-1:7.187 failed with error -110 [ 247.024816][ T2325] pvrusb2: Device initialization was not successful. [ 247.094488][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 247.170107][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 247.205175][ T970] pvrusb2: Device being rendered inoperable [ 247.288023][ T23] usb 4-1: USB disconnect, device number 4 [ 247.629937][ T6944] sp0: Synchronizing with TNC [ 253.952908][ T6981] Invalid argument reading file caps for ./file0 [ 254.196473][ T5813] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 254.406442][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 254.419633][ T5813] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 254.436314][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.462098][ T5813] usb 1-1: config 0 descriptor?? [ 254.479828][ T5813] gspca_main: sq930x-2.14.0 probing 041e:403c [ 255.168007][ T6997] gfs2: gfs2 mount does not exist [ 256.157873][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.166538][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.026801][ T5813] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 257.042562][ T5813] sq930x: probe of 1-1:0.0 failed with error -71 [ 257.062900][ T5813] usb 1-1: USB disconnect, device number 7 [ 258.329226][ T7005] trusted_key: encrypted_key: insufficient parameters specified [ 259.556601][ T5856] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 260.056376][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 260.105229][ T5856] usb 4-1: config 10 has an invalid interface number: 93 but max is 0 [ 260.166397][ T5856] usb 4-1: config 10 has no interface number 0 [ 260.179448][ T5856] usb 4-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08 [ 260.191231][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.209841][ T5856] usb 4-1: Product: syz [ 260.216180][ T5856] usb 4-1: Manufacturer: syz [ 260.251528][ T5856] usb 4-1: SerialNumber: syz [ 260.300130][ T5856] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 260.339862][ T5856] dvb-usb: bulk message failed: -22 (2/0) [ 260.357543][ T5856] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 260.396018][ T5856] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 260.416887][ T5856] usb 4-1: media controller created [ 260.424135][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.461959][ T5856] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 260.557124][ T5856] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 261.045182][ T5856] rc_core: IR keymap rc-dtt200u not found [ 261.074491][ T5856] Registered IR keymap rc-empty [ 261.118412][ T5856] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 261.377614][ T5856] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 261.446711][ T5856] dvb-usb: schedule remote query interval to 300 msecs. [ 261.454378][ T5856] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 261.787240][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 261.808187][ T5856] usb 4-1: USB disconnect, device number 5 [ 261.826749][ T5840] dvb-usb: error -22 while querying for an remote control event. [ 262.637887][ T5856] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 268.816448][ T969] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 269.086819][ T969] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 269.132373][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.202700][ T969] usb 2-1: Product: syz [ 269.230410][ T969] usb 2-1: Manufacturer: syz [ 269.256793][ T969] usb 2-1: SerialNumber: syz [ 269.300734][ T969] usb 2-1: config 0 descriptor?? [ 269.336090][ T7089] comedi comedi3: Cannot bond this driver to itself! [ 269.376672][ T969] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 009 [ 269.792926][ T969] (null): failure reading functionality [ 270.932817][ T969] i2c i2c-1: connected i2c-tiny-usb device [ 271.527721][ T5813] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 272.939700][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 272.978693][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.020961][ T5813] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 273.048648][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.088189][ T5813] usb 4-1: config 0 descriptor?? [ 273.216546][ T5877] usb 2-1: USB disconnect, device number 9 [ 273.521592][ T5813] bigben 0003:146B:0902.0003: unexpected rdesc, please submit for review [ 273.593175][ T5813] bigben 0003:146B:0902.0003: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 273.641158][ T5813] bigben 0003:146B:0902.0003: missing HID_OUTPUT_REPORT 0 [ 273.660111][ T5813] bigben 0003:146B:0902.0003: no output report found [ 273.723157][ T5813] usb 4-1: USB disconnect, device number 6 [ 273.950372][ T969] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 273.959544][ T7116] fido_id[7116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 274.157298][ T969] usb 1-1: too many configurations: 241, using maximum allowed: 8 [ 274.193589][ T969] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.225923][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.247077][ T969] usb 1-1: Product: syz [ 274.255171][ T969] usb 1-1: Manufacturer: syz [ 274.286410][ T969] usb 1-1: SerialNumber: syz [ 274.312872][ T969] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 274.378230][ T970] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.876818][ T7123] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 274.883927][ T7123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.180105][ T7123] vhci_hcd vhci_hcd.0: Device attached [ 275.201196][ T7124] vhci_hcd: connection closed [ 275.205524][ T6101] vhci_hcd: stop threads [ 275.218273][ T6101] vhci_hcd: release socket [ 275.222867][ T6101] vhci_hcd: disconnect device [ 275.365561][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 275.418569][ T969] usb 1-1: USB disconnect, device number 8 [ 275.488047][ T970] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 275.529867][ T970] ath9k_htc: Failed to initialize the device [ 275.548727][ T969] usb 1-1: ath9k_htc: USB layer deinitialized [ 277.937355][ T7152] QAT: Device 253 not found [ 281.406377][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 281.598680][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.613175][ T5840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.629535][ T5840] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.640805][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.652850][ T5840] usb 3-1: SerialNumber: syz [ 281.890446][ T5840] usb 3-1: 0:2 : does not exist [ 281.895572][ T5840] usb 3-1: unit 5 not found! [ 281.955488][ T5840] usb 3-1: USB disconnect, device number 6 [ 282.114826][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.948746][ T5840] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 285.976411][ T5856] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 286.296516][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 287.051004][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 287.061880][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 287.142285][ T5840] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 287.165911][ T5856] usb 4-1: config 0 has no interfaces? [ 287.184914][ T5840] usb 1-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 287.209278][ T5856] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 287.241008][ T5840] usb 1-1: Product: syz [ 287.256424][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.271254][ T5840] usb 1-1: Manufacturer: syz [ 287.304603][ T5840] usb 1-1: SerialNumber: syz [ 287.337143][ T5856] usb 4-1: config 0 descriptor?? [ 287.393360][ T5840] usb 1-1: config 0 descriptor?? [ 287.450613][ T5840] usb 1-1: no audio or video endpoints found [ 287.635741][ T970] usb 4-1: USB disconnect, device number 7 [ 287.672082][ T5836] usb 1-1: USB disconnect, device number 9 [ 289.689656][ T7243] syz.0.356 uses obsolete (PF_INET,SOCK_PACKET) [ 290.018584][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 290.052552][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 291.457481][ T7256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.996415][ T5836] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 295.179335][ T5836] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 295.188809][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.222195][ T5836] usb 3-1: config 0 descriptor?? [ 295.259961][ T5836] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 295.951568][ T5836] gp8psk: usb in 128 operation failed. [ 295.986427][ T5836] gp8psk: usb in 137 operation failed. [ 296.007813][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.061789][ T5836] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 296.095376][ T5836] usb 3-1: media controller created [ 296.195040][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.286705][ T5836] gp8psk_fe: Frontend attached [ 296.304277][ T5836] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 296.321148][ T5836] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 296.447866][ T5836] gp8psk: usb in 137 operation failed. [ 296.455824][ T5836] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 296.525358][ T5836] gp8psk: found Genpix USB device pID = 203 (hex) [ 296.671962][ T5836] usb 3-1: USB disconnect, device number 7 [ 296.829788][ T5836] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 300.186420][ T6933] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 300.396452][ T6933] usb 1-1: Using ep0 maxpacket: 8 [ 300.559203][ T6933] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 300.650973][ T6933] usb 1-1: config 0 has no interface number 0 [ 300.794865][ T6933] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 300.937990][ T6933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.014855][ T6933] usb 1-1: Product: syz [ 301.026308][ T6933] usb 1-1: Manufacturer: syz [ 301.030994][ T6933] usb 1-1: SerialNumber: syz [ 301.054988][ T6933] usb 1-1: config 0 descriptor?? [ 301.068515][ T6933] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 301.078081][ T6933] pctv452e: pctv452e_power_ctrl: 1 [ 301.078081][ T6933] [ 301.085485][ T6933] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 301.085485][ T6933] [ 301.111284][ T6933] dvb-usb: bulk message failed: -22 (5/0) [ 301.137389][ T6933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.160591][ T6933] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 301.184935][ T6933] usb 1-1: media controller created [ 301.204420][ T6933] dvb-usb: bulk message failed: -22 (8/0) [ 301.223677][ T6933] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 301.248924][ T6933] dvb-usb: MAC address reading failed. [ 301.372682][ T7320] dvb-usb: bulk message failed: -22 (7/0) [ 301.797577][ T7320] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 302.329242][ T6933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.646514][ T6933] DVB: Unable to find symbol stb0899_attach() [ 304.668302][ T6933] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 304.886453][ T6933] rc_core: IR keymap rc-tt-1500 not found [ 304.896115][ T6933] Registered IR keymap rc-empty [ 304.921776][ T6933] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 304.969215][ T6933] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input10 [ 305.015647][ T6933] dvb-usb: schedule remote query interval to 100 msecs. [ 305.038919][ T6933] pctv452e: pctv452e_power_ctrl: 0 [ 305.038919][ T6933] [ 305.060045][ T6933] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 305.099439][ T6933] usb 1-1: USB disconnect, device number 10 [ 305.275473][ T7362] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 305.282078][ T7362] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 305.290852][ T7362] vhci_hcd vhci_hcd.0: Device attached [ 306.356446][ T7363] vhci_hcd: connection closed [ 306.363704][ T49] vhci_hcd: stop threads [ 306.487583][ T49] vhci_hcd: release socket [ 306.633913][ T49] vhci_hcd: disconnect device [ 307.562376][ T969] usb 34-1: enqueue for inactive port 0 [ 308.692781][ T6933] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 309.257627][ T969] usb usb34-port1: attempt power cycle [ 309.856476][ T5813] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 309.937765][ T969] usb usb34-port1: unable to enumerate USB device [ 310.048395][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 310.075939][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.136826][ T5813] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 310.193456][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.256145][ T5813] usb 1-1: config 0 descriptor?? [ 310.596752][ T969] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 310.839365][ T5813] macally 0003:060B:0001.0004: unknown main item tag 0x7 [ 310.874319][ T5813] macally 0003:060B:0001.0004: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.0-1/input0 [ 310.926552][ T5813] usb 1-1: USB disconnect, device number 11 [ 311.066498][ T969] usb 4-1: Using ep0 maxpacket: 16 [ 311.079348][ T969] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 311.089609][ T969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.100357][ T969] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.191524][ T969] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.335729][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.422568][ T969] usb 4-1: Product: syz [ 311.449816][ T969] usb 4-1: Manufacturer: syz [ 311.586935][ T969] usb 4-1: SerialNumber: syz [ 311.944859][ T7398] fido_id[7398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 314.383544][ T969] usb 4-1: 0:2 : does not exist [ 314.411360][ T969] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 314.528182][ T969] usb 4-1: USB disconnect, device number 8 [ 314.658451][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.094637][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 315.094653][ T27] audit: type=1326 audit(1767844245.158:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.128266][ T27] audit: type=1326 audit(1767844245.168:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.152973][ T27] audit: type=1326 audit(1767844245.168:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.232309][ T6081] Bluetooth: hci4: Frame reassembly failed (-84) [ 315.265400][ T6081] Bluetooth: hci4: Frame reassembly failed (-84) [ 315.281019][ T27] audit: type=1326 audit(1767844245.168:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.336344][ T969] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 315.425749][ T27] audit: type=1326 audit(1767844245.168:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.486633][ T27] audit: type=1326 audit(1767844245.168:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.593250][ T27] audit: type=1326 audit(1767844245.168:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.693442][ T969] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 315.702261][ T27] audit: type=1326 audit(1767844245.168:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.725731][ T969] usb 4-1: config 0 has no interface number 0 [ 315.736470][ T969] usb 4-1: config 0 interface 122 has no altsetting 0 [ 315.765552][ T969] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 315.805970][ T27] audit: type=1326 audit(1767844245.168:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.862762][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.891187][ T969] usb 4-1: Product: syz [ 315.923976][ T27] audit: type=1326 audit(1767844245.168:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b0ef8f749 code=0x7ffc0000 [ 315.950560][ T969] usb 4-1: Manufacturer: syz [ 315.955212][ T969] usb 4-1: SerialNumber: syz [ 316.007669][ T969] usb 4-1: config 0 descriptor?? [ 317.248244][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 317.575331][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.586846][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.806495][ T5877] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 319.998169][ T5877] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 320.046488][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 320.062847][ T969] usb 4-1: USB disconnect, device number 9 [ 320.070920][ T5877] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 320.090997][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 320.111906][ T969] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 320.119466][ T5877] usb 3-1: Product: syz [ 320.125159][ T5877] usb 3-1: Manufacturer: syz [ 320.137209][ T5877] usb 3-1: SerialNumber: syz [ 320.148752][ T5877] usb 3-1: config 0 descriptor?? [ 320.183347][ T5877] usb 3-1: selecting invalid altsetting 0 [ 320.194398][ T7451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.412'. [ 320.457692][ T7451] netlink: 'syz.1.412': attribute type 10 has an invalid length. [ 320.488372][ T7451] syz_tun: entered promiscuous mode [ 320.501805][ T7451] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 320.863846][ T5877] usb 3-1: USB disconnect, device number 8 [ 325.630658][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 327.970825][ T7504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 328.565648][ T7504] syz.3.421 (7504) used greatest stack depth: 17960 bytes left [ 329.448914][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 331.458384][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 331.493201][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.548177][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 331.580560][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 331.616707][ T9] usb 4-1: Product: syz [ 331.621140][ T9] usb 4-1: Manufacturer: syz [ 331.626135][ T9] usb 4-1: SerialNumber: syz [ 331.658618][ T9] usb 4-1: config 0 descriptor?? [ 331.689227][ T9] usb 4-1: selecting invalid altsetting 0 [ 331.928446][ T9] usb 4-1: USB disconnect, device number 10 [ 333.360383][ T7531] orangefs_mount: mount request failed with -4 [ 336.298851][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 339.500037][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 340.203229][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 340.239973][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.292047][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.316768][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 340.369190][ T9] usb 2-1: Product: syz [ 340.382677][ T9] usb 2-1: Manufacturer: syz [ 340.395554][ T9] usb 2-1: SerialNumber: syz [ 340.413905][ T9] usb 2-1: config 0 descriptor?? [ 340.430690][ T9] usb 2-1: selecting invalid altsetting 0 [ 342.314262][ T969] usb 2-1: USB disconnect, device number 10 [ 343.216516][ T969] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 343.828361][ T969] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 343.857705][ T969] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.888329][ T969] usb 2-1: config 0 interface 0 has no altsetting 0 [ 343.909589][ T969] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 343.977549][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.137109][ T969] usb 2-1: config 0 descriptor?? [ 346.765223][ T9] usb 2-1: USB disconnect, device number 11 [ 348.417641][ T7620] syzkaller0: entered promiscuous mode [ 348.425610][ T7620] syzkaller0: entered allmulticast mode [ 348.761264][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 349.884800][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 350.099611][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.131812][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.170470][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 350.189549][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.618283][ T9] usb 3-1: config 0 descriptor?? [ 351.493255][ T9] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 351.668605][ T7650] capability: warning: `syz.0.471' uses 32-bit capabilities (legacy support in use) [ 351.689886][ T9] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 354.108296][ T9] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 354.180746][ T9] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 354.238053][ T9] usb 3-1: USB disconnect, device number 9 [ 354.366429][ T5813] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 354.556580][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 354.565723][ T5813] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.565806][ T5813] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.565962][ T5813] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 354.566104][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.397083][ T5813] usbhid 4-1:128.0: can't add hid device: -71 [ 355.397225][ T5813] usbhid: probe of 4-1:128.0 failed with error -71 [ 355.415045][ T5813] usb 4-1: USB disconnect, device number 11 [ 355.867382][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 356.088501][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 361.065264][ T7712] netlink: set zone limit has 8 unknown bytes [ 368.146447][ T5877] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 368.336412][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 368.996665][ T5877] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 369.056322][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 369.064507][ T5877] usb 1-1: Product: syz [ 369.109834][ T5877] usb 1-1: Manufacturer: syz [ 369.115245][ T5877] usb 1-1: SerialNumber: syz [ 369.177410][ T5877] usb 1-1: config 0 descriptor?? [ 369.593065][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.030244][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.362928][ T970] usb 1-1: USB disconnect, device number 12 [ 371.748591][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 371.786835][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 371.821449][ T7765] netlink: 'syz.2.505': attribute type 7 has an invalid length. [ 373.418344][ T7765] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.427633][ T7765] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.436397][ T7765] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.445115][ T7765] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.560585][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 373.676522][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 373.705642][ T7765] netlink: 'syz.2.505': attribute type 7 has an invalid length. [ 374.229615][ T7782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'. [ 374.241622][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 375.547218][ T7788] random: crng reseeded on system resumption [ 378.536378][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 379.066982][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.076512][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.876352][ T28] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 384.221437][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 384.272448][ T28] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 384.282678][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.922025][ T28] usb 1-1: Product: syz [ 385.926407][ T28] usb 1-1: Manufacturer: syz [ 385.931236][ T28] usb 1-1: SerialNumber: syz [ 385.948240][ T28] usb 1-1: config 0 descriptor?? [ 386.179510][ T28] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 387.044449][ T28] gspca_sunplus: reg_w_riv err -71 [ 387.066614][ T28] sunplus: probe of 1-1:0.0 failed with error -71 [ 387.119488][ T28] usb 1-1: USB disconnect, device number 13 [ 397.666973][ T5840] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 397.816526][ T28] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 398.056507][ T5840] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 398.066583][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.075865][ T5840] usb 2-1: Product: syz [ 398.081106][ T5840] usb 2-1: Manufacturer: syz [ 398.085980][ T5840] usb 2-1: SerialNumber: syz [ 398.723458][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 398.777009][ T28] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 398.830287][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.875952][ T28] usb 4-1: config 0 descriptor?? [ 398.969192][ T28] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 399.012401][ T7877] overlayfs: failed to resolve './file1': -2 [ 399.098823][ T5840] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 399.366455][ T5840] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 399.378738][ T5840] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 399.402616][ T5840] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 399.438000][ T5840] lan78xx: probe of 2-1:1.0 failed with error -71 [ 399.480624][ T5840] usb 2-1: USB disconnect, device number 12 [ 399.514931][ T28] gspca_vc032x: reg_r err -110 [ 399.544391][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.589186][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.595339][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.607431][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.612997][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.628292][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.700592][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.706396][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.711938][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.733792][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.802558][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.828564][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.856439][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.861851][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 399.892262][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.064313][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.084324][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.102952][ T28] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.128191][ T28] gspca_vc032x: Unknown sensor... [ 400.129147][ T28] vc032x: probe of 4-1:0.0 failed with error -22 [ 400.131925][ T28] usb 4-1: USB disconnect, device number 12 [ 401.543345][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.696547][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.736553][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.764477][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.774458][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 401.782910][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.806432][ T51] Bluetooth: hci4: command tx timeout [ 405.705466][ T6096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.886502][ T51] Bluetooth: hci4: command tx timeout [ 406.419347][ T6096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.011074][ T6096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.836354][ T5877] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 408.024077][ T51] Bluetooth: hci4: command tx timeout [ 408.103575][ T6096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.216413][ T7897] chnl_net:caif_netlink_parms(): no params data found [ 408.260915][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 408.767196][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.783672][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.793351][ T7897] bridge_slave_0: entered allmulticast mode [ 408.827731][ T7897] bridge_slave_0: entered promiscuous mode [ 408.888733][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.913726][ T5877] usb 2-1: device descriptor read/all, error -71 [ 408.923952][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.958996][ T7897] bridge_slave_1: entered allmulticast mode [ 408.983855][ T7897] bridge_slave_1: entered promiscuous mode [ 409.449277][ T7897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.579964][ T7897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.863021][ T7897] team0: Port device team_slave_0 added [ 409.912162][ T7897] team0: Port device team_slave_1 added [ 410.046408][ T51] Bluetooth: hci4: command tx timeout [ 411.248904][ T7897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.255992][ T7897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.574199][ T7897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.706439][ T7897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.744411][ T7897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.124573][ T7897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.629568][ T7897] hsr_slave_0: entered promiscuous mode [ 413.706917][ T7897] hsr_slave_1: entered promiscuous mode [ 413.728406][ T7897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.748606][ T7897] Cannot create hsr debugfs directory [ 414.026458][ T5836] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 414.782930][ T5836] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 414.803393][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 414.832025][ T5836] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 414.894757][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.924027][ T6096] hsr_slave_0: left promiscuous mode [ 414.941583][ T5836] usb 2-1: config 0 descriptor?? [ 414.977855][ T7976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 415.004618][ T6096] hsr_slave_1: left promiscuous mode [ 415.015055][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.023876][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.064653][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.094202][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.127315][ T6096] bridge_slave_1: left allmulticast mode [ 415.133056][ T6096] bridge_slave_1: left promiscuous mode [ 415.149075][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.200885][ T6096] bridge_slave_0: left allmulticast mode [ 415.206774][ T6096] bridge_slave_0: left promiscuous mode [ 415.212727][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.353692][ T6096] veth1_vlan: left allmulticast mode [ 415.382069][ T6096] veth1_macvtap: left promiscuous mode [ 415.391368][ T6096] veth0_macvtap: left promiscuous mode [ 415.414045][ T6096] veth1_vlan: left promiscuous mode [ 415.446832][ T6096] veth0_vlan: left promiscuous mode [ 415.504497][ T5836] redragon 0003:0C45:760B.0006: item fetching failed at offset 3/5 [ 415.517321][ T7993] binder: 7991:7993 unknown command 1074553619 [ 415.538356][ T5836] redragon: probe of 0003:0C45:760B.0006 failed with error -22 [ 415.546424][ T7993] binder: 7991:7993 ioctl c0306201 200000000040 returned -22 [ 415.564393][ T7993] binder: 7991:7993 unknown command 1074553620 [ 415.575233][ T7993] binder: 7991:7993 ioctl c0306201 200000000640 returned -22 [ 415.779781][ T7998] atomic_op ffff888024554998 conn xmit_atomic 0000000000000000 [ 415.891951][ T6096] bond1 (unregistering): Released all slaves [ 415.924182][ T969] usb 2-1: USB disconnect, device number 15 [ 416.176330][ T5877] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 416.385572][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.399444][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 416.410610][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 416.443451][ T5877] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 416.454096][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 416.462849][ T5877] usb 1-1: Product: syz [ 416.472195][ T5877] usb 1-1: Manufacturer: syz [ 416.477231][ T5877] usb 1-1: SerialNumber: syz [ 416.485754][ T5877] usb 1-1: config 0 descriptor?? [ 416.500084][ T5877] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 416.512954][ T5877] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 416.520634][ T5877] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 416.645623][ T969] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 416.911922][ T969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.938229][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.096134][ T969] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b3.49 [ 417.183700][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.215148][ T6096] team0 (unregistering): Port device team_slave_1 removed [ 417.422719][ T969] usb 3-1: config 0 descriptor?? [ 417.484377][ T6096] team0 (unregistering): Port device team_slave_0 removed [ 417.540847][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.601107][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.915304][ T6096] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 418.231676][ T6096] bond0 (unregistering): Released all slaves [ 418.370978][ T969] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 418.602847][ T969] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 418.622221][ T969] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 418.738180][ T969] peak_usb: probe of 3-1:0.0 failed with error -71 [ 418.768686][ T969] usb 3-1: USB disconnect, device number 10 [ 418.872740][ T5836] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 418.935839][ T7897] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.951398][ T9] usb 1-1: USB disconnect, device number 14 [ 418.969933][ T7897] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.992248][ T7897] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.011641][ T7897] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.078986][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 419.110454][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 419.631129][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 419.723559][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 419.774325][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 419.804880][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 419.868614][ T5836] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 419.886056][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.912128][ T5836] usb 2-1: Product: syz [ 419.918797][ T5836] usb 2-1: Manufacturer: syz [ 419.923458][ T5836] usb 2-1: SerialNumber: syz [ 419.948258][ T5836] usb 2-1: config 0 descriptor?? [ 419.961025][ T5836] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 419.976585][ T5836] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 420.104835][ T7897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.160122][ T7897] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.192779][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.200058][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.218546][ T28] usb 2-1: USB disconnect, device number 16 [ 420.231805][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.239123][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.398524][ T8059] kAFS: No cell specified [ 423.560325][ T7897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.281089][ T7897] veth0_vlan: entered promiscuous mode [ 429.325112][ T7897] veth1_vlan: entered promiscuous mode [ 429.964761][ T7897] veth0_macvtap: entered promiscuous mode [ 430.022887][ T7897] veth1_macvtap: entered promiscuous mode [ 430.203964][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.243944][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.296562][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.331517][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.358335][ T7897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.394314][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.432240][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.455060][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.470459][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.483458][ T7897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.532684][ T7897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.548305][ T7897] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.681167][ T7897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.692931][ T7897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.766827][ T5877] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 430.996466][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 431.016085][ T5877] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 431.026323][ T5877] usb 2-1: config 0 has no interface number 0 [ 431.033186][ T5877] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 431.063220][ T5877] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 431.085047][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.093402][ T5877] usb 2-1: Product: syz [ 431.098052][ T5877] usb 2-1: Manufacturer: syz [ 431.103355][ T5877] usb 2-1: SerialNumber: syz [ 431.138277][ T5877] usb 2-1: config 0 descriptor?? [ 431.153690][ T8121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 432.157379][ T8121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 432.221051][ T6102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.237729][ T6102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.436536][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.453726][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.916402][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 435.027402][ T5877] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 435.050122][ T5877] asix: probe of 2-1:0.188 failed with error -71 [ 435.071604][ T5877] usb 2-1: USB disconnect, device number 17 [ 435.116337][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 435.134097][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.179452][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 435.208167][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.245025][ T8] usb 3-1: Product: syz [ 436.946454][ T8] usb 3-1: Manufacturer: syz [ 436.989509][ T8] usb 3-1: SerialNumber: syz [ 437.034050][ T8] usb 3-1: config 0 descriptor?? [ 437.073611][ T8] usb 3-1: can't set config #0, error -71 [ 438.672675][ T8] usb 3-1: USB disconnect, device number 11 [ 439.815975][ T8168] binder: 8167:8168 ioctl c0306201 200000000240 returned -11 [ 440.231050][ T8177] comedi comedi3: pcl812: I/O port conflict (0xb,16) [ 440.460753][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.481714][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.048239][ T8196] netlink: 64 bytes leftover after parsing attributes in process `syz.2.595'. [ 442.311574][ T8196] block nbd0: not configured, cannot reconfigure [ 442.886678][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 444.710142][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 444.734464][ T8] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 444.773701][ T8] usb 5-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x7E, skipping [ 444.811166][ T8] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.864737][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 444.900398][ T8] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 444.916257][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.946351][ T8] usb 5-1: Product: syz [ 444.950849][ T8] usb 5-1: Manufacturer: syz [ 444.958922][ T8] usb 5-1: SerialNumber: syz [ 444.977367][ T8] usb 5-1: config 0 descriptor?? [ 445.428261][ T28] usb 5-1: USB disconnect, device number 2 [ 446.666580][ T8243] fuse: Bad value for 'fd' [ 450.437874][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 452.156882][ T8] usb 5-1: device descriptor read/64, error -71 [ 452.582974][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 452.846334][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 452.877574][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.913598][ T8] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 452.970435][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.012958][ T8] usb 5-1: config 0 descriptor?? [ 453.049630][ T8] usb 5-1: Found UVC 0.00 device (2833:0201) [ 453.065984][ T8] usb 5-1: No valid video chain found. [ 453.280665][ T5877] usb 5-1: USB disconnect, device number 4 [ 453.956335][ T5877] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 454.166498][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 454.175561][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.190345][ T5877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 454.208537][ T5877] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 454.219078][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.239342][ T5877] usb 1-1: config 0 descriptor?? [ 454.253627][ T5877] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 454.261309][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 454.274905][ T5877] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 454.290811][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 454.299552][ T5877] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 454.316341][ T5877] usb 1-1: media controller created [ 454.328946][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.341873][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 454.349615][ T5877] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 454.363073][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 454.384489][ T5877] dvb-usb: schedule remote query interval to 150 msecs. [ 454.392041][ T5877] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 454.397698][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 454.423508][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 454.445980][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 454.458030][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.467878][ T8] usb 2-1: Product: syz [ 454.472195][ T8] usb 2-1: Manufacturer: syz [ 454.477658][ T8] usb 2-1: SerialNumber: syz [ 454.486358][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 454.493299][ T8] usb 2-1: config 0 descriptor?? [ 454.508858][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 454.523983][ T9] usb 5-1: config 0 has no interface number 0 [ 454.535203][ T8291] dibusb: i2c wr: len=61 is too big! [ 454.535203][ T8291] [ 454.544824][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 454.554962][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 454.555092][ T28] dvb-usb: error while querying for an remote control event. [ 454.587171][ T8] usb 1-1: USB disconnect, device number 15 [ 454.638639][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 454.649991][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 454.664142][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.675173][ T9] usb 5-1: Product: syz [ 454.680723][ T9] usb 5-1: Manufacturer: syz [ 454.692935][ T9] usb 5-1: SerialNumber: syz [ 454.705400][ T9] usb 5-1: config 0 descriptor?? [ 454.719266][ T8302] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 454.935870][ T8302] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 455.456279][ T970] IPVS: starting estimator thread 0... [ 455.567286][ T8328] IPVS: using max 16 ests per chain, 38400 per kthread [ 456.929482][ T5856] usb 2-1: USB disconnect, device number 18 [ 457.784636][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 457.996240][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 458.026555][ T9] asix: probe of 5-1:0.188 failed with error -71 [ 458.086317][ T9] usb 5-1: USB disconnect, device number 5 [ 460.522994][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.632'. [ 460.533315][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 460.858106][ T8382] netlink: 'syz.2.633': attribute type 66 has an invalid length. [ 462.017674][ T8401] syzkaller0: entered promiscuous mode [ 462.025888][ T8401] syzkaller0: entered allmulticast mode [ 462.115867][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 462.136945][ T970] Process accounting resumed [ 462.341761][ T9] usb 3-1: config 0 has no interfaces? [ 462.350009][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 462.375726][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.418591][ T9] usb 3-1: config 0 descriptor?? [ 463.616442][ T8415] slcan: can't register candev [ 463.621676][ T8415] Falling back ldisc for ttyS3. [ 464.297703][ T9] usb 3-1: USB disconnect, device number 12 [ 464.638186][ T8423] xt_cgroup: path and classid specified [ 467.241223][ T8426] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 467.248057][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 467.268803][ T8426] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 467.348605][ T8426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 467.382621][ T8426] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 467.414237][ T8426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 467.433348][ T8426] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 467.448613][ T8426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 467.468242][ T8426] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 467.509321][ T8426] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 469.339554][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 469.407766][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 469.507041][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 469.516317][ T5772] Bluetooth: hci4: command 0x0c1a tx timeout [ 471.486502][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 471.566380][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 471.572572][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 472.145620][ T8492] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 473.647982][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 474.460114][ T8522] ntfs3: nullb0: Primary boot signature is not NTFS. [ 474.493462][ T8522] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 476.247383][ T8543] netlink: 80 bytes leftover after parsing attributes in process `syz.4.665'. [ 476.426700][ T8541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 476.437895][ T8541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 476.478586][ T8541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 476.484782][ T8541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 478.446757][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 478.452978][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 478.536442][ T5772] Bluetooth: hci4: command 0x0c1a tx timeout [ 478.542694][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 478.829054][ T8570] binder_alloc: 8569: pid 8569 spamming oneway? 2 buffers allocated for a total size of 5120 [ 481.868811][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 482.246247][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 482.261948][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 482.277111][ T9] usb 5-1: config 0 has no interface number 0 [ 482.300204][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 482.311017][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 482.321867][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.334303][ T9] usb 5-1: Product: syz [ 482.339206][ T9] usb 5-1: Manufacturer: syz [ 482.344168][ T9] usb 5-1: SerialNumber: syz [ 482.357527][ T9] usb 5-1: config 0 descriptor?? [ 482.371446][ T9] smsc75xx v1.0.0 [ 482.985393][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 483.014128][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 483.630394][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 483.652034][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 483.676445][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 483.702141][ T9] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 483.724385][ T9] usb 5-1: USB disconnect, device number 6 [ 487.800552][ T8673] netlink: 148 bytes leftover after parsing attributes in process `syz.1.698'. [ 489.106392][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 489.364288][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 489.402941][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 489.462846][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 489.496251][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.536617][ T9] usb 5-1: Product: syz [ 489.540864][ T9] usb 5-1: Manufacturer: syz [ 489.545596][ T9] usb 5-1: SerialNumber: syz [ 489.582546][ T9] usb 5-1: config 0 descriptor?? [ 489.597089][ T8705] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 489.605714][ T8705] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 489.628549][ T9] usb 5-1: ucan: probing device on interface #0 [ 489.634903][ T9] usb 5-1: ucan: invalid EP count (1) [ 489.650911][ T9] usb 5-1: ucan: probe failed; try to update the device firmware [ 491.889061][ T970] usb 5-1: USB disconnect, device number 7 [ 493.451692][ T970] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 494.358700][ T970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.406442][ T970] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.540267][ T970] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 494.574760][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.601736][ T970] usb 5-1: Product: syz [ 494.606093][ T970] usb 5-1: Manufacturer: syz [ 494.620663][ T970] usb 5-1: SerialNumber: syz [ 494.644365][ T970] usb 5-1: config 0 descriptor?? [ 494.957348][ T8777] can0: slcan on ttyS3. [ 496.561925][ T970] usb 5-1: USB disconnect, device number 8 [ 496.657582][ T8777] can0 (unregistered): slcan off ttyS3. [ 497.490600][ T8788] syzkaller0: entered promiscuous mode [ 497.516288][ T8788] syzkaller0: entered allmulticast mode [ 497.544334][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 501.871503][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 501.895319][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.901729][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.612809][ T8913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.760'. [ 511.868769][ T8913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.760'. [ 513.510106][ T2135] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 514.658775][ T2135] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.356330][ T2135] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 515.365427][ T2135] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 515.384931][ T2135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.395800][ T2135] usb 2-1: config 0 descriptor?? [ 515.435024][ T2135] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 515.447448][ T2135] dvb-usb: bulk message failed: -22 (3/0) [ 515.460726][ T2135] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 515.477128][ T2135] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 515.484399][ T2135] usb 2-1: media controller created [ 515.538122][ T2135] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.555183][ T2135] dvb-usb: bulk message failed: -22 (6/0) [ 515.561417][ T2135] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 515.631159][ T2135] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 515.733846][ T2135] dvb-usb: schedule remote query interval to 150 msecs. [ 515.756219][ T2135] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 515.797387][ T2135] usb 2-1: USB disconnect, device number 19 [ 516.675379][ T8940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 517.661115][ T2135] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 517.706461][ T5877] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 517.916316][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 517.986375][ T5877] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 517.996080][ T5877] usb 1-1: config 0 has no interface number 0 [ 518.041915][ T5877] usb 1-1: config 0 interface 184 has no altsetting 0 [ 518.069717][ T5877] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 518.090469][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.116837][ T5877] usb 1-1: Product: syz [ 518.126508][ T5877] usb 1-1: Manufacturer: syz [ 518.136730][ T5877] usb 1-1: SerialNumber: syz [ 518.157483][ T5877] usb 1-1: config 0 descriptor?? [ 518.181567][ T5877] smsc75xx v1.0.0 [ 521.285992][ T5877] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 521.351258][ T5877] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 521.376881][ T5877] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 521.408775][ T5877] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 521.446251][ T5877] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 521.476397][ T5877] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 521.486048][ T5877] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 521.556595][ T5877] usb 1-1: USB disconnect, device number 16 [ 522.093613][ T8963] syz.0.776 (8963): drop_caches: 2 [ 522.976616][ T8966] afs: Unknown parameter '#7dyn' [ 522.984528][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.769'. [ 525.659603][ T8975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 527.916261][ T8979] kthread_run failed with err -4 [ 531.072121][ T9004] netlink: 'syz.0.779': attribute type 2 has an invalid length. [ 531.907187][ T9008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 538.556329][ T5836] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 538.885215][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 538.898432][ T5836] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x43, skipping [ 538.912953][ T5836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 539.290092][ T5836] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 539.306691][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 539.686288][ T5836] usb 3-1: Product: syz [ 539.695003][ T5836] usb 3-1: Manufacturer: syz [ 539.718570][ T5836] usb 3-1: SerialNumber: syz [ 539.747056][ T5836] usb 3-1: config 0 descriptor?? [ 540.761448][ T5836] usb 3-1: can't set config #0, error -71 [ 540.778034][ T5836] usb 3-1: USB disconnect, device number 13 [ 545.097459][ T5877] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 545.176406][ T9095] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.184508][ T9095] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.296223][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 545.319416][ T5877] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 545.336204][ T5877] usb 5-1: config 0 has no interface number 0 [ 545.352873][ T5877] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 545.384615][ T5877] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 545.405927][ T5877] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.438500][ T5877] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 545.448509][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.457014][ T5877] usb 5-1: Product: syz [ 545.461370][ T5877] usb 5-1: Manufacturer: syz [ 545.466012][ T5877] usb 5-1: SerialNumber: syz [ 545.473603][ T5877] usb 5-1: config 0 descriptor?? [ 545.485542][ T5877] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 546.682688][ T9095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.717595][ T9095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.883236][ T9095] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.910713][ T9095] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.921571][ T9095] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.933276][ T9095] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.999573][ T9095] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.008628][ T9095] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.017685][ T9095] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.026738][ T9095] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.745738][ T6933] usb 5-1: USB disconnect, device number 9 [ 548.938204][ T9102] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 549.975006][ T9102] usb 2-1: Using ep0 maxpacket: 32 [ 550.147701][ T9102] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 550.214817][ T9102] usb 2-1: config 0 has no interface number 0 [ 550.340476][ T9102] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 550.448345][ T9102] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 33573, setting to 1024 [ 550.587850][ T9102] usb 2-1: config 0 interface 2 has no altsetting 0 [ 550.608307][ T9102] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 550.622693][ T9102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.691568][ T9102] usb 2-1: Product: syz [ 550.726568][ T9102] usb 2-1: Manufacturer: syz [ 550.731253][ T9102] usb 2-1: SerialNumber: syz [ 550.788078][ T9102] usb 2-1: config 0 descriptor?? [ 551.344209][ T9156] bond0: (slave rose0): Enslaving as an active interface with an up link [ 553.233224][ T9102] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 554.230786][ T9102] usb 2-1: USB disconnect, device number 20 [ 554.445173][ T9171] netlink: 36 bytes leftover after parsing attributes in process `syz.4.828'. [ 555.301058][ T9172] udevd[9172]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.106393][ T9116] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 556.346568][ T9116] usb 5-1: Using ep0 maxpacket: 8 [ 556.364924][ T9116] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.378576][ T9116] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 556.389933][ T9116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.417531][ T9116] usb 5-1: config 0 descriptor?? [ 556.432390][ T9116] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 560.228512][ T9116] usb 5-1: USB disconnect, device number 10 [ 564.535576][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.546555][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.045020][ T5772] Bluetooth: hci4: unexpected subevent 0x01 length: 37 > 18 [ 569.196229][ T9116] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 569.407738][ T9116] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x43, skipping [ 569.418877][ T9116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 569.432942][ T9116] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 569.442327][ T9116] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 569.451116][ T9116] usb 3-1: Product: syz [ 569.455745][ T9116] usb 3-1: Manufacturer: syz [ 569.460985][ T9116] usb 3-1: SerialNumber: syz [ 569.468986][ T9116] usb 3-1: config 0 descriptor?? [ 569.488510][ T9256] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 569.564052][ T9116] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 569.648856][ T9193] udevd[9193]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.839002][ T6933] usb 3-1: USB disconnect, device number 14 [ 574.059590][ T9301] Cannot find set identified by id 0 to match [ 574.226433][ T9116] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 574.436456][ T9116] usb 3-1: Using ep0 maxpacket: 8 [ 574.454646][ T9116] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 574.465203][ T9116] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 574.475752][ T9116] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 574.486327][ T9116] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 574.500401][ T9116] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 574.512075][ T9116] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.527791][ T9116] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 574.527902][ T9116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.782085][ T9116] usb 3-1: usb_control_msg returned -32 [ 574.801614][ T9116] usbtmc 3-1:16.0: can't read capabilities [ 575.043555][ T9314] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 575.071899][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.244905][ T9314] CIFS mount error: No usable UNC path provided in device string! [ 575.244905][ T9314] [ 575.257180][ T9314] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 575.290513][ T9315] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 575.329519][ T6933] usb 3-1: USB disconnect, device number 15 [ 576.763141][ T9326] program syz.1.875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 578.339960][ T9333] input: syz1 as /devices/virtual/input/input13 [ 584.923857][ T9386] syzkaller0: entered promiscuous mode [ 584.930964][ T9386] syzkaller0: entered allmulticast mode [ 586.646283][ T9117] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 587.576441][ T9117] usb 5-1: device descriptor read/64, error -71 [ 587.856427][ T9117] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 588.136289][ T9117] usb 5-1: device descriptor read/64, error -71 [ 588.256528][ T9117] usb usb5-port1: attempt power cycle [ 588.716249][ T9117] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 588.966253][ T9117] usb 5-1: device not accepting address 13, error -71 [ 589.696964][ T9427] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 591.013609][ T9427] zonefs (nullb0) ERROR: Not a zoned block device [ 592.951333][ T9446] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 592.967473][ T9446] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 593.449264][ T9450] kvm: pic: non byte read [ 593.453846][ T9450] kvm: pic: non byte read [ 593.700023][ T9450] kvm: pic: non byte read [ 593.704501][ T9450] kvm: pic: non byte read [ 593.727224][ T9450] kvm: pic: non byte read [ 593.731862][ T9450] kvm: pic: non byte read [ 593.741977][ T9450] kvm: pic: non byte read [ 593.749318][ T9450] kvm: pic: non byte read [ 593.753895][ T9450] kvm: pic: non byte read [ 593.759043][ T9450] kvm: pic: non byte read [ 597.239475][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 597.282946][ T9486] netlink: 'syz.0.922': attribute type 30 has an invalid length. [ 597.313610][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 598.446198][ T9102] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 598.626424][ T9102] usb 2-1: device descriptor read/64, error -71 [ 598.896395][ T9102] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 599.206540][ T9102] usb 2-1: device descriptor read/64, error -71 [ 599.339344][ T9102] usb usb2-port1: attempt power cycle [ 600.429336][ T9102] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 600.474156][ T9513] netlink: 108 bytes leftover after parsing attributes in process `syz.2.930'. [ 600.484035][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 600.751071][ T9102] usb 2-1: device descriptor read/8, error -71 [ 611.317674][ T9592] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 611.586304][ T9116] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 611.776555][ T9116] usb 3-1: device descriptor read/64, error -71 [ 612.196157][ T9116] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 613.404601][ T9607] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 614.409627][ T9116] usb 3-1: device descriptor read/64, error -71 [ 615.234380][ T9116] usb usb3-port1: attempt power cycle [ 616.243067][ T9625] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 616.268372][ T9624] syzkaller0: entered promiscuous mode [ 616.297217][ T9624] syzkaller0: entered allmulticast mode [ 616.606536][ T6933] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 617.247713][ T6933] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 617.260586][ T6933] usb 5-1: config 0 has no interface number 0 [ 617.301991][ T6933] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 617.349683][ T6933] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 617.390904][ T6933] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 617.441934][ T6933] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 617.482749][ T6933] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 617.528320][ T6933] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 617.555408][ T6933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.605455][ T6933] usb 5-1: config 0 descriptor?? [ 617.612249][ T9633] input: syz1 as /devices/virtual/input/input14 [ 617.641142][ T9624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 617.678271][ T6933] hub 5-1:0.3: bad descriptor, ignoring hub [ 617.701858][ T6933] hub: probe of 5-1:0.3 failed with error -5 [ 617.725998][ T6933] sierra 5-1:0.3: Sierra USB modem converter detected [ 618.382288][ T6933] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 618.481117][ T6933] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 618.614845][ T6933] usb 5-1: USB disconnect, device number 15 [ 618.642325][ T6933] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 618.692382][ T6933] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 618.717396][ T6933] sierra 5-1:0.3: device disconnected [ 621.541878][ T9653] fuse: Bad value for 'group_id' [ 622.586331][ T9117] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 623.321641][ T9117] usb 1-1: device descriptor read/64, error -71 [ 624.856891][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.866364][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.476888][ T9116] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 629.458751][ T9116] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 629.549742][ T9116] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 629.681059][ T9116] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 629.783739][ T9116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.796236][ T9116] usb 1-1: Product: syz [ 629.800641][ T9116] usb 1-1: Manufacturer: syz [ 629.805935][ T9116] usb 1-1: SerialNumber: syz [ 629.861407][ T9116] usb 1-1: config 0 descriptor?? [ 629.872702][ T9692] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 629.881694][ T9692] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 630.159477][ T9116] usb 1-1: ucan: probing device on interface #0 [ 630.165779][ T9116] usb 1-1: ucan: invalid EP count (1) [ 630.176189][ T9116] usb 1-1: ucan: probe failed; try to update the device firmware [ 630.404583][ T9116] usb 1-1: USB disconnect, device number 19 [ 630.836256][ T6933] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 631.072270][ T6933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.132837][ T6933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.146175][ T6933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 631.186376][ T6933] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.206438][ T6933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.218321][ T6933] usb 2-1: config 0 descriptor?? [ 632.969941][ T6933] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 633.066971][ T6933] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 633.075085][ T6933] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 633.088118][ T6933] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 633.103388][ T6933] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 633.116251][ T6933] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 633.126256][ T9116] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 633.145685][ T6933] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 633.155347][ T6933] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 633.242511][ T6933] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 633.285831][ T6933] usb 2-1: USB disconnect, device number 25 [ 633.371660][ T9116] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.413732][ T9116] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 633.461880][ T9116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.486732][ T9116] usb 1-1: Product: syz [ 633.495817][ T9717] fido_id[9717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 633.510191][ T9116] usb 1-1: Manufacturer: syz [ 633.526172][ T9116] usb 1-1: SerialNumber: syz [ 634.116389][ T6933] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 634.366664][ T6933] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 634.384821][ T6933] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 634.451651][ T6933] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 634.496398][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.597034][ T6933] usb 3-1: config 0 descriptor?? [ 634.602181][ T9116] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 634.610901][ T9116] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 634.652739][ T6933] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 634.706624][ T9116] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 634.814170][ T9116] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 634.968883][ T9116] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 635.031220][ T9116] usb 1-1: USB disconnect, device number 20 [ 635.044126][ T9116] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 635.585389][ T9102] usb 3-1: USB disconnect, device number 19 [ 635.746278][ T9117] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 637.638573][ T9117] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 637.674956][ T9752] comedi comedi2: pcl726: I/O port conflict (0x405c22,16) [ 637.685044][ T9117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 637.745701][ T9117] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 637.760796][ T9117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.786281][ T9117] usb 5-1: Product: syz [ 637.790547][ T9117] usb 5-1: Manufacturer: syz [ 637.795195][ T9117] usb 5-1: SerialNumber: syz [ 637.827658][ T9117] usb 5-1: config 0 descriptor?? [ 637.997772][ T9260] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 638.172167][ T9117] usb 5-1: USB disconnect, device number 16 [ 642.048395][ T9260] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 642.060028][ T9260] Bluetooth: hci3: Injecting HCI hardware error event [ 642.102535][ T9260] Bluetooth: hci3: hardware error 0x00 [ 643.466390][ T6933] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 643.718714][ T6933] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 643.746841][ T6933] usb 3-1: config 0 has no interface number 0 [ 643.766907][ T6933] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 643.796360][ T6933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.804535][ T6933] usb 3-1: Product: syz [ 643.816400][ T6933] usb 3-1: Manufacturer: syz [ 643.821094][ T6933] usb 3-1: SerialNumber: syz [ 643.848956][ T6933] usb 3-1: config 0 descriptor?? [ 644.068603][ T6933] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 645.725120][ T9260] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 645.735954][ T6933] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 645.756490][ T6933] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 645.796212][ T6933] usb 3-1: media controller created [ 645.922742][ T6933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.028662][ T6933] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 646.168528][ T6933] usb 3-1: USB disconnect, device number 20 [ 648.357374][ T9857] syz.1.1013: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 648.438796][ T9857] CPU: 0 PID: 9857 Comm: syz.1.1013 Not tainted syzkaller #0 [ 648.446272][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.456494][ T9857] Call Trace: [ 648.459819][ T9857] [ 648.462805][ T9857] dump_stack_lvl+0x16c/0x230 [ 648.467583][ T9857] ? show_regs_print_info+0x20/0x20 [ 648.472849][ T9857] ? load_image+0x3b0/0x3b0 [ 648.477411][ T9857] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 648.483885][ T9857] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 648.490457][ T9857] warn_alloc+0x210/0x300 [ 648.494855][ T9857] ? zone_watermark_ok_safe+0x230/0x230 [ 648.500473][ T9857] ? _raw_spin_unlock+0x28/0x40 [ 648.505398][ T9857] __vmalloc_node_range+0x662/0x1320 [ 648.510740][ T9857] ? __asan_memset+0x22/0x40 [ 648.515418][ T9857] ? free_vm_area+0x50/0x50 [ 648.519988][ T9857] ? kvmalloc_node+0x70/0x180 [ 648.524738][ T9857] ? rcu_is_watching+0x15/0xb0 [ 648.529659][ T9857] ? kvmalloc_node+0x70/0x180 [ 648.534395][ T9857] ? trace_kmalloc+0x1f/0xa0 [ 648.539050][ T9857] kvmalloc_node+0x13f/0x180 [ 648.543711][ T9857] ? translate_table+0x1a9/0x1f70 [ 648.548823][ T9857] translate_table+0x1a9/0x1f70 [ 648.553756][ T9857] ? lockdep_hardirqs_on+0x98/0x150 [ 648.559029][ T9857] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 648.564717][ T9857] ? __might_fault+0xaa/0x120 [ 648.569474][ T9857] ? arpt_register_table+0x690/0x690 [ 648.574919][ T9857] ? __lock_acquire+0x7c80/0x7c80 [ 648.580013][ T9857] ? __virt_addr_valid+0x18c/0x540 [ 648.585194][ T9857] ? __might_fault+0xaa/0x120 [ 648.589941][ T9857] ? __might_fault+0xc6/0x120 [ 648.594749][ T9857] ? __might_fault+0xaa/0x120 [ 648.599506][ T9857] do_arpt_set_ctl+0x98c/0xef0 [ 648.604357][ T9857] ? arpt_unregister_table+0x50/0x50 [ 648.609757][ T9857] ? nf_setsockopt+0x21c/0x280 [ 648.614581][ T9857] ? __lock_acquire+0x7c80/0x7c80 [ 648.619696][ T9857] ? rcu_is_watching+0x15/0xb0 [ 648.624529][ T9857] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 648.630219][ T9857] ? mutex_unlock+0x10/0x10 [ 648.634768][ T9857] ? aa_sk_perm+0x7fc/0x930 [ 648.639788][ T9857] ? aa_af_perm+0x2b0/0x2b0 [ 648.644364][ T9857] nf_setsockopt+0x263/0x280 [ 648.649021][ T9857] ? sock_common_recvmsg+0x1b0/0x1b0 [ 648.654559][ T9857] do_sock_setsockopt+0x175/0x1a0 [ 648.659663][ T9857] ? __fdget+0x180/0x210 [ 648.663998][ T9857] __x64_sys_setsockopt+0x184/0x200 [ 648.669350][ T9857] do_syscall_64+0x55/0xb0 [ 648.674007][ T9857] ? clear_bhb_loop+0x40/0x90 [ 648.678736][ T9857] ? clear_bhb_loop+0x40/0x90 [ 648.683816][ T9857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.689756][ T9857] RIP: 0033:0x7f3b0ef8f749 [ 648.694230][ T9857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.713899][ T9857] RSP: 002b:00007f3b0fec6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 648.722392][ T9857] RAX: ffffffffffffffda RBX: 00007f3b0f1e5fa0 RCX: 00007f3b0ef8f749 [ 648.730413][ T9857] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 648.738431][ T9857] RBP: 00007f3b0f013f91 R08: 0000000000000068 R09: 0000000000000000 [ 648.746465][ T9857] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 648.754487][ T9857] R13: 00007f3b0f1e6038 R14: 00007f3b0f1e5fa0 R15: 00007ffe5a898fe8 [ 648.762526][ T9857] [ 648.811548][ T9857] Mem-Info: [ 648.814757][ T9857] active_anon:31352 inactive_anon:0 isolated_anon:0 [ 648.814757][ T9857] active_file:18186 inactive_file:40439 isolated_file:0 [ 648.814757][ T9857] unevictable:768 dirty:70 writeback:0 [ 648.814757][ T9857] slab_reclaimable:6356 slab_unreclaimable:92229 [ 648.814757][ T9857] mapped:27164 shmem:26632 pagetables:585 [ 648.814757][ T9857] sec_pagetables:0 bounce:0 [ 648.814757][ T9857] kernel_misc_reclaimable:0 [ 648.814757][ T9857] free:1317473 free_pcp:14081 free_cma:0 [ 648.863546][ T9876] Invalid ELF header magic: != ELF [ 648.912826][ T9857] Node 0 active_anon:122908kB inactive_anon:0kB active_file:72744kB inactive_file:161552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108756kB dirty:280kB writeback:0kB shmem:102492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12104kB pagetables:2440kB sec_pagetables:0kB all_unreclaimable? no [ 648.950903][ T9857] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 650.668586][ T9857] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.695910][ T9857] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 650.748764][ T9857] Node 0 DMA32 free:1303888kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:192164kB inactive_anon:0kB active_file:72744kB inactive_file:160248kB unevictable:1536kB writepending:280kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:26008kB local_pcp:9932kB free_cma:0kB [ 650.780155][ T9857] lowmem_reserve[]: 0 0 1 1 1 [ 650.785439][ T9857] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 650.813356][ T9857] lowmem_reserve[]: 0 0 0 0 0 [ 650.818430][ T9857] Node 1 Normal free:3898804kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15276kB local_pcp:3840kB free_cma:0kB [ 650.867902][ T9857] lowmem_reserve[]: 0 0 0 0 0 [ 650.872847][ T9857] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 650.931469][ T9857] Node 0 DMA32: 2*4kB (UE) 67*8kB (ME) 11*16kB (UME) 286*32kB (UE) 213*64kB (UE) 115*128kB (UME) 116*256kB (UME) 92*512kB (UME) 31*1024kB (UME) 15*2048kB (ME) 275*4096kB (UM) = 1303888kB [ 650.989493][ T9857] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 651.026136][ T9857] Node 1 Normal: 227*4kB (UE) 45*8kB (UME) 32*16kB (UME) 150*32kB (UE) 44*64kB (UME) 10*128kB (UME) 2*256kB (ME) 1*512kB (E) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3898804kB [ 651.070208][ T9857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.108741][ T9857] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 651.146897][ T9857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.187152][ T9857] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 651.216184][ T9857] 95911 total pagecache pages [ 651.220968][ T9857] 0 pages in swap cache [ 651.225259][ T9857] Free swap = 124472kB [ 651.256136][ T9857] Total swap = 124996kB [ 651.260384][ T9857] 2097051 pages RAM [ 651.264233][ T9857] 0 pages HighMem/MovableOnly [ 651.286177][ T9857] 416127 pages reserved [ 651.290415][ T9857] 0 pages cma reserved [ 653.426420][ T9102] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 653.631625][ T9102] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 653.769671][ T9102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.806496][ T9102] usb 2-1: Product: syz [ 653.810745][ T9102] usb 2-1: Manufacturer: syz [ 653.844541][ T9102] usb 2-1: SerialNumber: syz [ 653.861463][ T9102] usb 2-1: config 0 descriptor?? [ 654.347871][ T9102] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 655.286334][ T6933] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 655.316223][ T9124] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 655.492730][ T6933] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 655.512194][ T9124] usb 3-1: Using ep0 maxpacket: 16 [ 655.533982][ T6933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.569861][ T9124] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 655.589081][ T6933] usb 1-1: Product: syz [ 655.593625][ T6933] usb 1-1: Manufacturer: syz [ 655.614297][ T9124] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 655.639907][ T6933] usb 1-1: SerialNumber: syz [ 655.654931][ T9124] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 655.668353][ T6933] usb 1-1: config 0 descriptor?? [ 655.678231][ T9124] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 655.689236][ T6933] hub 1-1:0.0: bad descriptor, ignoring hub [ 655.695387][ T6933] hub: probe of 1-1:0.0 failed with error -5 [ 655.707506][ T9124] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 655.720165][ T9124] usb 3-1: config 0 has no interface number 0 [ 655.729315][ T9124] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 655.740705][ T9124] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 655.750853][ T9124] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 655.766466][ T9124] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.780103][ T9124] usb 3-1: config 0 interface 125 has no altsetting 0 [ 655.787735][ T9124] usb 3-1: config 0 interface 125 has no altsetting 2 [ 655.798379][ T9124] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 655.816855][ T9102] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 655.839402][ T9124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.853541][ T9102] usb 2-1: USB disconnect, device number 26 [ 655.866487][ T9124] usb 3-1: Product: syz [ 655.897387][ T6933] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 655.910304][ T9124] usb 3-1: Manufacturer: syz [ 655.936711][ T9124] usb 3-1: SerialNumber: syz [ 655.957289][ T9124] usb 3-1: config 0 descriptor?? [ 655.968961][ T9124] usb 3-1: selecting invalid altsetting 2 [ 655.993528][ T6933] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 656.001826][ T6933] dib0700: firmware download failed at 7 with -22 [ 656.050389][ T6933] usb 1-1: USB disconnect, device number 21 [ 656.199534][ C0] usb 3-1: async_complete: urb error -71 [ 656.205502][ C0] usb 3-1: async_complete: urb error -71 [ 656.211241][ C0] usb 3-1: async_complete: urb error -71 [ 656.217058][ C0] usb 3-1: async_complete: urb error -71 [ 656.230362][ T9124] get_1284_register: usb error -71 [ 656.235665][ T9124] uss720: probe of 3-1:0.125 failed with error -71 [ 656.257752][ T9124] usb 3-1: USB disconnect, device number 21 [ 658.816215][ T9118] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 659.050951][ T9118] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 659.076508][ T9118] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 659.118447][ T9118] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 659.136443][ T9118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.144520][ T9118] usb 1-1: Product: syz [ 659.185019][ T9118] usb 1-1: Manufacturer: syz [ 659.206118][ T9118] usb 1-1: SerialNumber: syz [ 659.217718][ T9118] usb 1-1: config 0 descriptor?? [ 659.223530][ T9953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 659.254595][ T9953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 659.277697][ T9118] usb 1-1: ucan: probing device on interface #0 [ 659.284030][ T9118] usb 1-1: ucan: invalid EP count (1) [ 659.306323][ T9118] usb 1-1: ucan: probe failed; try to update the device firmware [ 662.533020][ T9118] usb 1-1: USB disconnect, device number 22 [ 663.156958][ T9118] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 663.341132][ T9118] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 663.360370][ T9118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.380603][ T9118] usb 2-1: Product: syz [ 663.384855][ T9118] usb 2-1: Manufacturer: syz [ 663.390258][ T9117] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 663.413381][ T9118] usb 2-1: SerialNumber: syz [ 664.008600][ T9117] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 664.333672][ T9117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.353936][ T9117] usb 1-1: config 0 descriptor?? [ 664.356945][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 664.692957][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1046'. [ 665.443783][ T9117] pegasus: probe of 1-1:0.0 failed with error -71 [ 665.544949][ T9117] usb 1-1: USB disconnect, device number 23 [ 666.656488][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 667.124893][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 667.170448][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 667.197766][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 667.272775][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 667.316360][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 667.338742][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 667.368950][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 667.400728][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 667.522012][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 668.208541][ T9118] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 668.318144][ T9118] lan78xx: probe of 2-1:1.0 failed with error -71 [ 668.332167][ T9118] usb 2-1: USB disconnect, device number 27 [ 668.986139][ T9117] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 669.804076][ T9117] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.970623][ T9117] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 670.002995][ T9117] usb 1-1: config 1 has no interface number 0 [ 670.021908][ T9117] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 670.058010][ T9117] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.085223][ T9117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.103934][ T9117] usb 1-1: Product: syz [ 670.113889][ T9117] usb 1-1: Manufacturer: syz [ 670.126093][ T9117] usb 1-1: SerialNumber: syz [ 670.148226][ T9117] usb 1-1: selecting invalid altsetting 1 [ 670.158786][ T6933] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 670.356176][ T6933] usb 5-1: Using ep0 maxpacket: 32 [ 670.378206][ T9117] cdc_ncm 1-1:1.1: bind() failure [ 670.383940][ T6933] usb 5-1: config 0 interface 0 has no altsetting 0 [ 670.397324][ T6933] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 670.415385][ T6933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.416000][ T9117] usb 1-1: USB disconnect, device number 24 [ 670.446470][ T6933] usb 5-1: Product: syz [ 670.450749][ T6933] usb 5-1: Manufacturer: syz [ 670.455576][ T6933] usb 5-1: SerialNumber: syz [ 670.487892][ T6933] usb 5-1: config 0 descriptor?? [ 671.216441][ T6933] gs_usb 5-1:0.0: Configuring for 256 interfaces [ 671.233071][ T6933] gs_usb 5-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 671.253319][ T6933] gs_usb: probe of 5-1:0.0 failed with error -22 [ 672.373295][ T6933] usb 5-1: USB disconnect, device number 17 [ 672.750772][T10087] use of bytesused == 0 is deprecated and will be removed in the future, [ 672.760289][T10087] use the actual size instead. [ 673.949409][T10091] binder: 10088:10091 ioctl c018620c 200000000140 returned -1 [ 680.016195][ T9117] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 680.256301][ T9117] usb 5-1: Using ep0 maxpacket: 16 [ 680.275910][ T9117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.288442][ T9117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.298934][ T9117] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 680.310056][ T9117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.353477][ T9117] usb 5-1: config 0 descriptor?? [ 680.683140][T10142] syzkaller1: entered promiscuous mode [ 680.690335][T10142] syzkaller1: entered allmulticast mode [ 680.811175][ T9117] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 680.818561][ T9117] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 680.825684][ T9117] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 680.832985][ T9117] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 680.840155][ T9117] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 680.858291][ T9117] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 681.020212][T10133] i2c i2c-1: unsupported multi-msg i2c transaction [ 681.063484][ T9117] usb 5-1: USB disconnect, device number 18 [ 682.631888][T10161] syz_tun: entered allmulticast mode [ 682.640723][T10160] syz_tun: left allmulticast mode [ 683.026460][ T9124] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 683.286245][ T9124] usb 1-1: Using ep0 maxpacket: 8 [ 683.387529][ T9124] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 683.465242][ T9124] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 683.741798][ T9124] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 683.761427][ T9124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.776285][ T9124] usb 1-1: Product: syz [ 683.780963][ T9124] usb 1-1: Manufacturer: syz [ 683.785777][ T9124] usb 1-1: SerialNumber: syz [ 683.814725][ T9124] usb 1-1: config 0 descriptor?? [ 683.821530][T10168] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 683.841345][ T9124] powermate: probe of 1-1:0.0 failed with error -22 [ 684.336707][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 684.347386][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 686.390889][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.409529][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.490464][T10190] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.498823][T10190] UDF-fs: Scanning with blocksize 512 failed [ 686.516737][T10190] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.525502][T10190] UDF-fs: Scanning with blocksize 1024 failed [ 686.582163][T10190] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.594498][T10190] UDF-fs: Scanning with blocksize 2048 failed [ 686.598733][ T9117] usb 1-1: USB disconnect, device number 25 [ 686.660064][T10190] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.670301][T10190] UDF-fs: Scanning with blocksize 4096 failed [ 687.134722][T10199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1109'. [ 687.996580][ T9124] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 689.769394][ T9124] usb 1-1: Using ep0 maxpacket: 8 [ 689.776968][ T9124] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 689.798466][ T9124] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 689.814185][ T9124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.822503][ T9124] usb 1-1: Product: syz [ 689.826792][ T9124] usb 1-1: Manufacturer: syz [ 689.831978][ T9124] usb 1-1: SerialNumber: syz [ 689.877802][ T9124] usb 1-1: config 0 descriptor?? [ 689.898529][ T9124] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 689.959484][ T9124] usb 1-1: setting power ON [ 689.964091][ T9124] dvb-usb: bulk message failed: -22 (2/0) [ 690.007574][ T9124] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 690.037592][ T9124] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 690.056416][ T9124] usb 1-1: media controller created [ 690.105864][ T9124] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 690.189650][ T9124] usb 1-1: selecting invalid altsetting 6 [ 690.195463][ T9124] usb 1-1: digital interface selection failed (-22) [ 690.216192][ T9124] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 690.237340][ T9124] usb 1-1: setting power OFF [ 690.242748][ T9124] dvb-usb: bulk message failed: -22 (2/0) [ 690.266008][ T9124] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 690.275698][ T9124] (NULL device *): no alternate interface [ 690.568073][ T9124] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 691.316598][ T9124] usb 1-1: USB disconnect, device number 26 [ 691.720168][ T9124] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 692.058272][ T9124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.079251][ T9124] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 692.241153][ T9124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.258170][ T9124] usb 1-1: config 0 descriptor?? [ 693.090343][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 693.170827][ T9124] wacom 0003:056A:0000.0009: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 693.205823][ T9124] wacom 0003:056A:0000.0009: hidraw0: USB HID v0.07 Device [HID 056a:0000] on usb-dummy_hcd.0-1/input0 [ 693.247994][ T9124] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0000.0009/input/input16 [ 693.480510][ T9124] usb 1-1: USB disconnect, device number 27 [ 693.605380][T10253] fido_id[10253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 700.641017][T10311] binder_alloc: binder_alloc_mmap_handler: 10304 200000ffc000-200000ffd000 already mapped failed -16 [ 701.304148][T10313] serio: Serial port pty21 [ 709.629641][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1149'. [ 714.933691][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 714.953193][T10409] net_ratelimit: 7 callbacks suppressed [ 714.953212][T10409] netlink: set zone limit has 8 unknown bytes [ 723.704803][T10451] XFS (nullb0): Invalid superblock magic number [ 726.040471][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 726.206695][ T9124] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 726.520800][ T9124] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 726.637973][ T9124] usb 3-1: config 0 interface 0 has no altsetting 0 [ 726.740147][ T9124] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 726.913029][ T9124] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 726.946275][ T9124] usb 3-1: Product: syz [ 726.960299][ T9124] usb 3-1: Manufacturer: syz [ 726.975270][ T9124] usb 3-1: SerialNumber: syz [ 726.983365][ T9124] usb 3-1: config 0 descriptor?? [ 727.007025][ T9124] usb 3-1: selecting invalid altsetting 0 [ 727.105608][ T51] Bluetooth: Wrong link type (-71) [ 727.679497][T10474] [ 727.681933][T10474] ============================================ [ 727.688749][T10474] WARNING: possible recursive locking detected [ 727.694961][T10474] syzkaller #0 Not tainted [ 727.699421][T10474] -------------------------------------------- [ 727.705617][T10474] syz.2.1173/10474 is trying to acquire lock: [ 727.711724][T10474] ffff88802365ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 727.721286][T10474] [ 727.721286][T10474] but task is already holding lock: [ 727.728682][T10474] ffff88802365ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 727.738786][T10474] [ 727.738786][T10474] other info that might help us debug this: [ 727.746865][T10474] Possible unsafe locking scenario: [ 727.746865][T10474] [ 727.754427][T10474] CPU0 [ 727.757727][T10474] ---- [ 727.761098][T10474] lock(&chip->mutex); [ 727.765280][T10474] lock(&chip->mutex); [ 727.769442][T10474] [ 727.769442][T10474] *** DEADLOCK *** [ 727.769442][T10474] [ 727.777608][T10474] May be due to missing lock nesting notation [ 727.777608][T10474] [ 727.785948][T10474] 3 locks held by syz.2.1173/10474: [ 727.791149][T10474] #0: ffff88803095e4e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x2a7/0xc20 [ 727.801961][T10474] #1: ffff88803095e238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 727.812507][T10474] #2: ffff88802365ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 727.822966][T10474] [ 727.822966][T10474] stack backtrace: [ 727.828853][T10474] CPU: 0 PID: 10474 Comm: syz.2.1173 Not tainted syzkaller #0 [ 727.836327][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 727.846428][T10474] Call Trace: [ 727.849721][T10474] [ 727.852832][T10474] dump_stack_lvl+0x16c/0x230 [ 727.857534][T10474] ? show_regs_print_info+0x20/0x20 [ 727.862767][T10474] ? print_deadlock_bug+0x435/0x5d0 [ 727.867986][T10474] __lock_acquire+0x5d40/0x7c80 [ 727.872947][T10474] ? verify_lock_unused+0x140/0x140 [ 727.878191][T10474] lock_acquire+0x197/0x410 [ 727.882743][T10474] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 727.888238][T10474] ? trace_contention_end+0x39/0xe0 [ 727.893679][T10474] ? __might_sleep+0xe0/0xe0 [ 727.898337][T10474] ? read_lock_is_recursive+0x20/0x20 [ 727.903728][T10474] ? wait_clear_urbs+0x184/0x390 [ 727.908732][T10474] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 727.915390][T10474] __mutex_lock+0x129/0xcc0 [ 727.919917][T10474] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 727.925402][T10474] ? usb_free_coherent+0x5d/0x90 [ 727.930396][T10474] ? release_urbs+0x3fe/0x4a0 [ 727.935093][T10474] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 727.940574][T10474] ? mutex_lock_nested+0x20/0x20 [ 727.945569][T10474] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 727.951772][T10474] snd_usb_endpoint_close+0x3c/0x4c0 [ 727.957114][T10474] snd_usb_hw_params+0x1357/0x19c0 [ 727.962279][T10474] ? snd_usb_pcm_close+0x300/0x300 [ 727.967420][T10474] ? snd_pcm_lib_malloc_pages+0x270/0x690 [ 727.973197][T10474] snd_pcm_hw_params+0x835/0x1c50 [ 727.978248][T10474] ? snd_pcm_hw_param_first+0x6a0/0xb30 [ 727.983845][T10474] ? snd_pcm_forward+0x6d0/0x6d0 [ 727.988820][T10474] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 727.995279][T10474] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 728.000468][T10474] ? ima_file_free+0x154/0x450 [ 728.005265][T10474] ? mutex_lock_nested+0x20/0x20 [ 728.010221][T10474] ? __fsnotify_parent+0x651/0x720 [ 728.015349][T10474] snd_pcm_oss_sync+0x363/0xc20 [ 728.020223][T10474] snd_pcm_oss_release+0x102/0x240 [ 728.025397][T10474] ? snd_pcm_oss_open+0x1b40/0x1b40 [ 728.030626][T10474] __fput+0x234/0x970 [ 728.034644][T10474] task_work_run+0x1ce/0x250 [ 728.039284][T10474] ? task_work_cancel+0x240/0x240 [ 728.044421][T10474] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 728.050600][T10474] ? exit_to_user_mode_loop+0x3b/0x110 [ 728.056089][T10474] exit_to_user_mode_loop+0xe6/0x110 [ 728.061404][T10474] exit_to_user_mode_prepare+0xf6/0x180 [ 728.066969][T10474] syscall_exit_to_user_mode+0x1a/0x50 [ 728.072446][T10474] do_syscall_64+0x61/0xb0 [ 728.076876][T10474] ? clear_bhb_loop+0x40/0x90 [ 728.081570][T10474] ? clear_bhb_loop+0x40/0x90 [ 728.086275][T10474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.092238][T10474] RIP: 0033:0x7f4eb5f8df90 [ 728.096707][T10474] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 728.116335][T10474] RSP: 002b:00007f4eb6e05b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 728.124756][T10474] RAX: ffffffffffffffea RBX: 00000000008c4201 RCX: 00007f4eb5f8df90 [ 728.132737][T10474] RDX: 00000000008c4201 RSI: 00007f4eb6e05c10 RDI: 00000000ffffff9c [ 728.140734][T10474] RBP: 00007f4eb6e05c10 R08: 0000000000000000 R09: 00236f696475612f [ 728.148731][T10474] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 728.156726][T10474] R13: 00007f4eb61e6038 R14: 00007f4eb61e5fa0 R15: 00007ffcd85b2b18 [ 728.164740][T10474] [ 728.726203][ T9117] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 728.907703][ T9117] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 728.916120][ T9117] usb 2-1: config 8 has no interface number 0 [ 728.922963][ T9117] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 728.933990][ T9117] usb 2-1: config 8 interface 177 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 728.944889][ T9117] usb 2-1: config 8 interface 177 has no altsetting 0 [ 728.951812][ T9117] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 728.961101][ T9117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.972798][T10500] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 729.184667][ T9117] usb 2-1: string descriptor 0 read error: -71 [ 729.195211][ T9117] ir_toy 2-1:8.177: required endpoints not found [ 729.204298][ T9117] usb 2-1: USB disconnect, device number 28