last executing test programs: 5m8.184013619s ago: executing program 4 (id=709): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x1) flock(r3, 0x2) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4m59.986393668s ago: executing program 4 (id=732): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = gettid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m59.804225994s ago: executing program 4 (id=735): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 4m59.465027712s ago: executing program 4 (id=738): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0xffc, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m58.343264088s ago: executing program 4 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 4m58.068141517s ago: executing program 4 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m42.600268885s ago: executing program 32 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.14466049s ago: executing program 3 (id=2574): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 1m3.039848268s ago: executing program 3 (id=2575): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 1m2.910306529s ago: executing program 3 (id=2576): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x6, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x1, 0x7, 0x100, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffffeff, 0xfbfffffe, 0x5, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c76, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x1000000, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12e, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xffffeffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x80002, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0x3, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0xf26, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0xf, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0xffffffff, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x1, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x8, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x8001, 0x2, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x5, 0x10000, 0x5, 0x8, 0x1, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3445, 0xfff]}, 0x45c) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xae62, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) 1m2.58442078s ago: executing program 3 (id=2577): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x24, r2, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1m2.494568928s ago: executing program 3 (id=2578): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f00000005c0), 0x0}, 0x20) 1m2.375511977s ago: executing program 3 (id=2580): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3e) 47.034631709s ago: executing program 33 (id=2580): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3e) 15.482481694s ago: executing program 5 (id=2703): r0 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x80100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x15f0, 0x40c281) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004000) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$kcm(0x10, 0x2, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x40, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x862b01) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) poll(&(0x7f0000000080)=[{r4, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 14.944217821s ago: executing program 1 (id=2706): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)=""/82, 0x52}], 0x1}, 0x40000002) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/162}, {&(0x7f0000000000)=""/33}, {&(0x7f0000000140)=""/44, 0x4}], 0x4e, 0x300, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000690000004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000240)={0x0, 0xe, 0x1, "c5"}, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0}) 11.685277356s ago: executing program 5 (id=2711): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea8000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, &(0x7f0000000180)={0x16, "247f23e017bb456c5c4b7165a6d6af0b920bf04121f03300"}}) 8.603122268s ago: executing program 1 (id=2718): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) getcwd(0x0, 0x0) close(0x3) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000040)="0c5901429fab003a4fae282eaf1203bceb74c0ca8106a1c77bba44efd46d8081d54ba865de4badd1aa6a0d8dfaaff746410c38f1720830eefae3369e35219f047b23efff1e1c1abfa7a9d41d457f103230e7d2db54e78e500abb4b3327303230b55d58c5dd2d3eb8e9e43e33132c21c9668f38476b004b", 0x77}], 0x1, 0x5, 0xb2) 8.50388962s ago: executing program 5 (id=2719): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@void, {0x8035, 0x7, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x1}, 0x19, 0x0, 0x0, 0x0, "185dbb1cd7b284fee8cba2a31982503227a0ff346406455075b841f871b84b9dff1af3ba0a3fbfba7671ea11278096e5abfb374f6a01ec216cdde1aba35ee5e3"}}}}, 0x0) 8.297032432s ago: executing program 5 (id=2720): r0 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x80100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x15f0, 0x40c281) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004000) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$kcm(0x10, 0x2, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x40, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x862b01) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) poll(&(0x7f0000000080)=[{r4, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 7.205085849s ago: executing program 1 (id=2725): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000340), 0x4) 6.384106036s ago: executing program 1 (id=2728): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea8000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, &(0x7f0000000180)={0x16, "247f23e017bb456c5c4b7165a6d6af0b920bf04121f03300"}}) 6.383786326s ago: executing program 0 (id=2729): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x5042}], 0x1, 0xdb3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000051) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r0, 0x0, 0x0, 0x101) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[], 0x44}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f0000000380)="7236faa40215f3b16ef62c0a2ad7911bde6c423fd30d607fd8e5007e31d3695ced9f870148aa71a1ad735fc844b2d0d641a89631fe40f873f445e3f3f0d36927d2d8d7b928bb5e4d994dba1596fcd333d20ad1bf1e1f80075a786cd1e773bc424547b455569592d0337445dcc215ad4ed09bdb634b1fafb2a58844ba62e3a9b6870497db28f60e7aa31314f4ff891b231161171fc070618e25eb8eba2bfe0204bd3e22e7370f5e8b6c59aaac616441cc353dfe0d23c2c38ab7faf6aa464e57d9492b89b5", 0x0, &(0x7f0000000600)="cca1695bb8ef2db0a2810e1a015d7e6d67b23ff291567d1825711e27106099530bbc13324efebf2bdb3c30c3e37949fe89b61161a7e643242fc56e4e5cd949afd77987b7fdc648d11e5f4ab2ae68b72ad129e39ec00b9a90bbe8c88848dd9b2c0770f2dbb3e284f7dbfe91c2b54d6a5b1434f6becc6a9fca36c58f276d4b15bbe52f3dc98df5bc250acb2471f4a4cc03681895836ffd76a8905d80ca3282a5f9a40f165a7a87d1fe1f53ec960e39a547dd78b2c3e8445f9b37cc", &(0x7f0000000180), 0x8, 0xffffffffffffffff, 0x4}, 0x38) time(&(0x7f0000000040)) 5.492928455s ago: executing program 0 (id=2731): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.014895037s ago: executing program 5 (id=2733): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x3, "0d5f6492"}, @global=@item_4={0x3, 0x1, 0x5, "399e00"}]}}, 0x0}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r2, r0, 0x80000) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) shmget$private(0x0, 0x1000, 0x8, &(0x7f000062d000/0x1000)=nil) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x4, {0x1c, 0x14, 0x0, 0x1}}, 0x1c}}, 0x0) 4.177741214s ago: executing program 6 (id=2735): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 4.039469845s ago: executing program 6 (id=2737): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0xc00, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.003034434s ago: executing program 0 (id=2738): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000340), 0x4) 3.726178906s ago: executing program 2 (id=2740): syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x14fe01) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0xffffffffffffffff, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0x10000], 0xffffffff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.246620996s ago: executing program 1 (id=2741): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x5042}], 0x1, 0xdb3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000051) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r0, 0x0, 0x0, 0x101) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[], 0x44}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f0000000380)="7236faa40215f3b16ef62c0a2ad7911bde6c423fd30d607fd8e5007e31d3695ced9f870148aa71a1ad735fc844b2d0d641a89631fe40f873f445e3f3f0d36927d2d8d7b928bb5e4d994dba1596fcd333d20ad1bf1e1f80075a786cd1e773bc424547b455569592d0337445dcc215ad4ed09bdb634b1fafb2a58844ba62e3a9b6870497db28f60e7aa31314f4ff891b231161171fc070618e25eb8eba2bfe0204bd3e22e7370f5e8b6c59aaac616441cc353dfe0d23c2c38ab7faf6aa464e57d9492b89b5", 0x0, &(0x7f0000000600)="cca1695bb8ef2db0a2810e1a015d7e6d67b23ff291567d1825711e27106099530bbc13324efebf2bdb3c30c3e37949fe89b61161a7e643242fc56e4e5cd949afd77987b7fdc648d11e5f4ab2ae68b72ad129e39ec00b9a90bbe8c88848dd9b2c0770f2dbb3e284f7dbfe91c2b54d6a5b1434f6becc6a9fca36c58f276d4b15bbe52f3dc98df5bc250acb2471f4a4cc03681895836ffd76a8905d80ca3282a5f9a40f165a7a87d1fe1f53ec960e39a547dd78b2c3e8445f9b37cc", &(0x7f0000000180), 0x8, 0xffffffffffffffff, 0x4}, 0x38) time(&(0x7f0000000040)) 3.245458058s ago: executing program 6 (id=2742): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, 0x0, 0x0) 3.1565778s ago: executing program 0 (id=2743): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r0, 0x0, 0x2, 0x4}}, 0x20) 2.948263096s ago: executing program 0 (id=2744): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x28ec, 0x10100}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r3, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 2.158198471s ago: executing program 0 (id=2745): socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x5, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea8000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, 0x0}) 2.121144377s ago: executing program 1 (id=2746): syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 1.656184947s ago: executing program 6 (id=2747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=r1, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f00", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) 1.610707362s ago: executing program 5 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x21) 1.40095613s ago: executing program 2 (id=2749): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.009656685s ago: executing program 2 (id=2750): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 1.008222744s ago: executing program 6 (id=2751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xfec8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 725.159075ms ago: executing program 2 (id=2752): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x2, 0x0, 0x8, 0x8}, 0x20) 607.923649ms ago: executing program 6 (id=2753): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000340), 0x4) 215.295596ms ago: executing program 2 (id=2754): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r0, 0x0, 0x2, 0x4}}, 0x20) 0s ago: executing program 2 (id=2755): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r2, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) kernel console output (not intermixed with test programs): alNumber: syz [ 364.419950][ T9370] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 364.476782][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 364.529311][ T809] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input5 [ 364.587213][ T9374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1130'. [ 364.602508][ T9374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1130'. [ 364.602935][ T9374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1130'. [ 364.758572][ T809] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 364.758591][ T809] (id 0x00) [ 364.900979][ T809] rc_core: IR keymap rc-imon-pad not found [ 364.900997][ T809] Registered IR keymap rc-empty [ 364.901093][ T809] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 364.901109][ T809] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 364.949581][ T809] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 364.952721][ T809] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input6 [ 365.020508][ T809] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:3> initialized [ 365.146350][ T9388] fuse: Invalid rootmode [ 365.348430][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1139'. [ 365.465467][ T9402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1143'. [ 365.465993][ T9402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1143'. [ 365.466351][ T9402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1143'. [ 365.733604][ T9415] fuse: Invalid rootmode [ 365.826477][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'. [ 365.856465][ T808] IPVS: starting estimator thread 0... [ 365.884872][ T9421] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1151'. [ 365.908732][ T9425] capability: warning: `syz.2.1153' uses deprecated v2 capabilities in a way that may be insecure [ 365.937882][ T808] usb 2-1: USB disconnect, device number 20 [ 365.957418][ T9423] IPVS: using max 15 ests per chain, 36000 per kthread [ 366.231725][ T9443] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 366.255321][ T9445] fuse: Bad value for 'rootmode' [ 366.336884][ T5807] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 366.668896][ T1859] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 366.750305][ T809] IPVS: starting estimator thread 0... [ 366.786854][ T37] audit: type=1326 audit(1769618147.154:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.786905][ T37] audit: type=1326 audit(1769618147.154:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.786945][ T37] audit: type=1326 audit(1769618147.154:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.786985][ T37] audit: type=1326 audit(1769618147.154:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.787025][ T37] audit: type=1326 audit(1769618147.154:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.787064][ T37] audit: type=1326 audit(1769618147.154:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.787102][ T37] audit: type=1326 audit(1769618147.154:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.787142][ T37] audit: type=1326 audit(1769618147.154:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.787182][ T37] audit: type=1326 audit(1769618147.154:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.787221][ T37] audit: type=1326 audit(1769618147.154:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.0.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22137aeb9 code=0x7fc00000 [ 366.826933][ T1859] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 366.826960][ T1859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.836983][ T9465] IPVS: using max 11 ests per chain, 26400 per kthread [ 366.837236][ T1859] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 366.837267][ T1859] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 366.837285][ T1859] usb 4-1: Manufacturer: syz [ 366.854036][ T1859] usb 4-1: config 0 descriptor?? [ 366.901587][ T1859] igorplugusb 4-1:0.0: incorrect number of endpoints [ 366.953434][ T9467] fuse: Bad value for 'rootmode' [ 367.078505][ T9469] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 367.105273][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.105745][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.262496][ T10] usb 6-1: USB disconnect, device number 3 [ 368.627502][ T809] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 369.426894][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 369.428979][ T809] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.429005][ T809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 369.429038][ T809] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 369.429059][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.472722][ T808] usb 4-1: USB disconnect, device number 28 [ 369.498883][ T809] usb 2-1: config 0 descriptor?? [ 369.519767][ T809] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 369.550970][ T9506] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 372.126912][ T809] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 372.166054][ T808] usb 2-1: USB disconnect, device number 21 [ 372.274708][ T9556] fuse: Unknown parameter 'use00000000000000000000' [ 372.500819][ T809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.500845][ T809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.502228][ T809] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 372.502253][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 372.502272][ T809] usb 4-1: SerialNumber: syz [ 372.707276][ T808] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 373.210007][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b009800: rx timeout, send abort [ 373.222391][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805b009800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 373.277316][ T809] usb 4-1: 0:2 : does not exist [ 373.277415][ T809] usb 4-1: unit 255 not found! [ 373.330298][ T808] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 373.330329][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.330348][ T808] usb 2-1: Product: syz [ 373.330361][ T808] usb 2-1: Manufacturer: syz [ 373.330375][ T808] usb 2-1: SerialNumber: syz [ 373.444372][ T809] usb 4-1: USB disconnect, device number 29 [ 373.613523][ T8784] udevd[8784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.737905][ T9571] __nla_validate_parse: 4 callbacks suppressed [ 373.737924][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 373.931958][ T808] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 373.932024][ T808] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 373.932042][ T808] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 374.430970][ T9571] nbd: socks must be embedded in a SOCK_ITEM attr [ 375.188133][ T808] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 375.521352][ T9592] fuse: Unknown parameter 'use00000000000000000000' [ 375.579796][ T5880] usb 2-1: USB disconnect, device number 22 [ 376.102733][ T9281] udevd[9281]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 376.648011][ T9629] fuse: Unknown parameter 'user_i00000000000000000000' [ 377.026938][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805a377c00: rx timeout, send abort [ 377.027189][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805a377c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 377.387100][ T9641] overlayfs: failed to clone upperpath [ 377.515850][ T9651] fuse: Unknown parameter 'user_i00000000000000000000' [ 378.738203][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.738278][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.996375][ T9684] fuse: Unknown parameter 'user_i00000000000000000000' [ 379.996919][ T809] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 380.217610][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 380.220115][ T809] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 380.220140][ T809] usb 1-1: config 0 has no interface number 0 [ 380.220186][ T809] usb 1-1: config 0 interface 184 has no altsetting 0 [ 380.222834][ T809] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 380.222859][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.222878][ T809] usb 1-1: Product: syz [ 380.222892][ T809] usb 1-1: Manufacturer: syz [ 380.222906][ T809] usb 1-1: SerialNumber: syz [ 380.277204][ T809] usb 1-1: config 0 descriptor?? [ 380.316171][ T809] smsc75xx v1.0.0 [ 380.412306][ T9715] fuse: Unknown parameter 'user_id00000000000000000000' [ 380.913211][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 380.913241][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 381.352879][ T9733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.525867][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 381.525897][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 381.525915][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 381.526314][ T809] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 382.035514][ T9748] tun0: tun_chr_ioctl cmd 1074025675 [ 382.035535][ T9748] tun0: persist enabled [ 382.493355][ T9757] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1282'. [ 382.753666][ T10] usb 1-1: USB disconnect, device number 28 [ 382.975215][ T5807] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 382.984424][ T5807] Bluetooth: hci4: unexpected event for opcode 0x203e [ 384.807583][ T808] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 384.940707][ T9801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.036022][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.036055][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.036091][ T808] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 385.036111][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.122147][ T808] usb 1-1: config 0 descriptor?? [ 385.743543][ T9809] netlink: 988 bytes leftover after parsing attributes in process `syz.5.1302'. [ 387.057593][ T5807] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 387.172025][ T5807] Bluetooth: hci4: Injecting HCI hardware error event [ 387.285405][ T5807] Bluetooth: hci4: hardware error 0x00 [ 388.568103][ T808] usbhid 1-1:0.0: can't add hid device: -71 [ 388.568178][ T808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 388.605309][ T808] usb 1-1: USB disconnect, device number 29 [ 389.526988][ T5807] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 391.476981][ T9863] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1323'. [ 391.921635][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 394.378162][ T9901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.899810][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 395.070748][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.070800][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.070838][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 395.070851][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.074052][ T9] usb 4-1: config 0 descriptor?? [ 395.085833][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 396.797248][ T808] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 397.016942][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 397.019274][ T808] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 397.019327][ T808] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 397.019346][ T808] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.019359][ T808] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 397.022194][ T808] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 397.022212][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.022223][ T808] usb 2-1: Product: syz [ 397.022230][ T808] usb 2-1: Manufacturer: syz [ 397.022238][ T808] usb 2-1: SerialNumber: syz [ 397.111642][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 397.139926][ T808] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input7 [ 397.297617][ T808] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 397.297640][ T808] (id 0x00) [ 397.378553][ T808] rc_core: IR keymap rc-imon-pad not found [ 397.378573][ T808] Registered IR keymap rc-empty [ 397.378653][ T808] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 397.378671][ T808] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 397.510131][ T808] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 397.512356][ T808] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input8 [ 397.545066][ T808] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:23> initialized [ 397.613892][ T808] usb 4-1: USB disconnect, device number 30 [ 397.857531][ T9960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.490753][ T9971] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 398.595701][ T9971] kvm: pic: level sensitive irq not supported [ 398.598840][ T9971] kvm: pic: non byte read [ 398.599165][ T9971] kvm: pic: level sensitive irq not supported [ 398.599293][ T9971] kvm: pic: non byte read [ 398.599497][ T9971] kvm: pic: level sensitive irq not supported [ 398.599636][ T9971] kvm: pic: non byte read [ 398.599937][ T9971] kvm: pic: level sensitive irq not supported [ 398.599973][ T9971] kvm: pic: non byte read [ 398.716923][ T5914] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 398.887151][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 398.906011][ T5914] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 398.906037][ T5914] usb 4-1: config 0 has no interface number 0 [ 398.906090][ T5914] usb 4-1: config 0 interface 184 has no altsetting 0 [ 398.932251][ T5914] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 398.932276][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.932294][ T5914] usb 4-1: Product: syz [ 398.932307][ T5914] usb 4-1: Manufacturer: syz [ 398.932320][ T5914] usb 4-1: SerialNumber: syz [ 398.986288][ T5914] usb 4-1: config 0 descriptor?? [ 399.003546][ T5914] smsc75xx v1.0.0 [ 399.667017][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 399.667048][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 400.149990][ T9977] imon:send_packet: task interrupted [ 400.151737][ T9977] imon:send_packet: packet tx failed (-512) [ 400.152084][ T9977] imon:vfd_write: send packet #5 failed [ 400.242991][ T808] usb 2-1: USB disconnect, device number 23 [ 400.271788][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 400.271809][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 400.271819][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 400.271995][ T5914] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 400.406916][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 400.561250][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.561309][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.561349][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 400.561373][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.571116][ T9] usb 1-1: config 0 descriptor?? [ 400.632238][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 401.219657][T10015] netlink: 'syz.5.1376': attribute type 2 has an invalid length. [ 401.513319][ T808] usb 4-1: USB disconnect, device number 31 [ 402.286500][T10033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.227327][ T5914] IPVS: starting estimator thread 0... [ 403.326949][T10056] IPVS: using max 15 ests per chain, 36000 per kthread [ 403.354272][T10050] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 403.471395][T10050] kvm: pic: non byte read [ 403.512994][T10050] kvm: pic: non byte read [ 403.513882][T10050] kvm: pic: non byte read [ 403.516041][T10050] kvm: pic: non byte read [ 403.532381][T10050] kvm: pic: non byte read [ 403.533087][T10050] kvm: pic: non byte read [ 403.534894][T10050] kvm: pic: level sensitive irq not supported [ 403.999770][ T5914] usb 1-1: USB disconnect, device number 30 [ 404.931352][T10087] syz.0.1400 (10087) used greatest stack depth: 17592 bytes left [ 404.993082][T10091] vivid-002: disconnect [ 405.006907][T10090] vivid-002: reconnect [ 405.516877][ T808] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 405.676883][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 405.678728][ T808] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.678756][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 405.678776][ T808] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 405.678787][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.700374][ T808] usb 4-1: config 0 descriptor?? [ 405.736883][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 405.876907][ T9] usb 2-1: device descriptor read/64, error -71 [ 406.106821][ T5914] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 406.118179][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 406.163257][ T808] usbhid 4-1:0.0: can't add hid device: -71 [ 406.163373][ T808] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 406.243588][ T808] usb 4-1: USB disconnect, device number 32 [ 406.258918][ T9] usb 2-1: device descriptor read/64, error -71 [ 406.291455][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.291490][ T5914] usb 6-1: config 0 has no interfaces? [ 406.314527][ T5914] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 406.314556][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.314573][ T5914] usb 6-1: Product: syz [ 406.314584][ T5914] usb 6-1: Manufacturer: syz [ 406.314597][ T5914] usb 6-1: SerialNumber: syz [ 406.360588][ T5914] usb 6-1: config 0 descriptor?? [ 406.367377][ T9] usb usb2-port1: attempt power cycle [ 406.541318][T10145] comedi comedi3: aio_iiro_16: I/O port conflict (0xfffffffffffffffd,8) [ 406.706971][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 406.727619][ T9] usb 2-1: device descriptor read/8, error -71 [ 406.967316][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 406.990303][ T9] usb 2-1: device descriptor read/8, error -71 [ 407.096970][ T808] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 407.115539][ T9] usb usb2-port1: unable to enumerate USB device [ 407.268779][ T808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.268806][ T808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.270040][ T808] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 407.270067][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 407.270085][ T808] usb 4-1: SerialNumber: syz [ 407.432116][T10157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1432'. [ 407.491775][ T808] usb 4-1: 0:2 : does not exist [ 407.491867][ T808] usb 4-1: unit 255 not found! [ 407.535014][ T808] usb 4-1: USB disconnect, device number 33 [ 407.596293][ T8784] udevd[8784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.694773][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 408.066644][T10181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1443'. [ 408.096855][ T5914] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 408.253579][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 408.262393][ T5914] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.262423][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 408.262455][ T5914] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 408.262477][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.275497][ T5914] usb 1-1: config 0 descriptor?? [ 408.604721][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1448'. [ 408.723884][ T5914] usbhid 1-1:0.0: can't add hid device: -71 [ 408.728886][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 408.757790][ T5914] usb 1-1: USB disconnect, device number 31 [ 408.870206][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 408.918803][ T9] usb 6-1: USB disconnect, device number 4 [ 409.150784][T10215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1454'. [ 411.196164][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'. [ 411.841416][ T6133] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 412.467523][ T6133] usb 2-1: Using ep0 maxpacket: 16 [ 412.469924][ T6133] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.469964][ T6133] usb 2-1: config 0 interface 0 has no altsetting 0 [ 412.469997][ T6133] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 412.470020][ T6133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.536236][ T6133] usb 2-1: config 0 descriptor?? [ 412.837409][ T809] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 413.045716][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.045966][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.046013][ T809] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 413.046035][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.104928][ T809] usb 6-1: config 0 descriptor?? [ 413.187592][ T6133] usbhid 2-1:0.0: can't add hid device: -71 [ 413.187760][ T6133] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 413.236285][ T6133] usb 2-1: USB disconnect, device number 28 [ 413.492736][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 413.518821][ T809] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 413.542333][ T809] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 413.891824][ T809] cp2112 0003:10C4:EA90.000D: Part Number: 0x82 Device Version: 0xFE [ 415.287807][T10277] cp2112 0003:10C4:EA90.000D: Error starting transaction: -38 [ 415.317063][ T809] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 415.347139][ T809] usb 6-1: USB disconnect, device number 5 [ 415.836925][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 415.885220][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1496'. [ 415.986845][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 415.988633][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.988664][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 415.988696][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 415.988717][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.992290][ T9] usb 1-1: config 0 descriptor?? [ 417.534288][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 417.534414][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 417.550141][ T9] usb 1-1: USB disconnect, device number 32 [ 417.611288][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 417.870395][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.870430][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.870470][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 417.870492][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.878811][ T10] usb 4-1: config 0 descriptor?? [ 418.181112][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 418.181130][ T37] audit: type=1326 audit(1769618198.554:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10374 comm="syz.0.1509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff22137aeb9 code=0x0 [ 418.337034][ T5788] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 418.466980][ T5788] usb 2-1: device descriptor read/64, error -71 [ 418.497570][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1511'. [ 418.706938][ T5788] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 418.846852][ T5788] usb 2-1: device descriptor read/64, error -71 [ 418.921429][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1513'. [ 418.959084][ T5788] usb usb2-port1: attempt power cycle [ 419.306967][ T5788] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 419.327664][ T5788] usb 2-1: device descriptor read/8, error -71 [ 419.434805][T10391] netlink: 'syz.0.1515': attribute type 309 has an invalid length. [ 419.576879][ T5788] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 419.598211][ T5788] usb 2-1: device descriptor read/8, error -71 [ 419.734438][ T5788] usb usb2-port1: unable to enumerate USB device [ 420.132590][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 420.132714][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 420.172921][ T10] usb 4-1: USB disconnect, device number 34 [ 420.427700][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 420.626375][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'. [ 421.956937][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 422.443326][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'. [ 422.879685][T10466] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 422.888609][ T6133] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 422.963238][T10466] picdev_read: 1 callbacks suppressed [ 422.963252][T10466] kvm: pic: non byte read [ 422.966900][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 423.021669][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 423.036883][ T6133] usb 4-1: Using ep0 maxpacket: 32 [ 423.040671][ T6133] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 423.040707][ T6133] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 423.040730][ T6133] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.040755][ T6133] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 423.043141][ T6133] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 423.043167][ T6133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.043186][ T6133] usb 4-1: Product: syz [ 423.043200][ T6133] usb 4-1: Manufacturer: syz [ 423.043213][ T6133] usb 4-1: SerialNumber: syz [ 423.086876][ T808] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 423.106989][ T10] usb 2-1: device descriptor read/64, error -71 [ 423.178900][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 423.181145][ T6133] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input9 [ 423.237488][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 423.239725][ T808] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.239757][ T808] usb 6-1: config 0 interface 0 has no altsetting 0 [ 423.239789][ T808] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 423.239811][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.252063][ T808] usb 6-1: config 0 descriptor?? [ 423.366840][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 423.386874][ T6133] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 423.386893][ T6133] (id 0x00) [ 423.466883][ T6133] rc_core: IR keymap rc-imon-pad not found [ 423.466903][ T6133] Registered IR keymap rc-empty [ 423.466995][ T6133] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 423.467013][ T6133] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 423.496890][ T10] usb 2-1: device descriptor read/64, error -71 [ 423.603536][ T6133] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 423.607315][ T10] usb usb2-port1: attempt power cycle [ 423.628331][ T6133] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input10 [ 423.635326][ T6133] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:35> initialized [ 423.949133][ T808] usbhid 6-1:0.0: can't add hid device: -71 [ 423.949258][ T808] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 423.961950][ T808] usb 6-1: USB disconnect, device number 6 [ 423.986855][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 424.007761][ T10] usb 2-1: device descriptor read/8, error -71 [ 424.169480][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 424.256888][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 424.279859][ T10] usb 2-1: device descriptor read/8, error -71 [ 424.395293][ T10] usb usb2-port1: unable to enumerate USB device [ 425.194816][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 426.225817][T10491] imon:send_packet: task interrupted [ 426.225835][T10491] imon:send_packet: packet tx failed (-512) [ 426.225879][T10491] imon:vfd_write: send packet #5 failed [ 426.301825][ T808] usb 4-1: USB disconnect, device number 35 [ 426.362986][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 426.860976][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 427.596921][ T6266] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 427.896928][ T6266] usb 6-1: device descriptor read/64, error -71 [ 428.030234][ T5889] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 428.346900][ T6266] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 428.406871][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 428.422523][ T5889] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 428.422552][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.422570][ T5889] usb 4-1: Product: syz [ 428.422584][ T5889] usb 4-1: Manufacturer: syz [ 428.422597][ T5889] usb 4-1: SerialNumber: syz [ 428.460444][ T5889] usb 4-1: config 0 descriptor?? [ 428.472958][ T5889] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 428.474139][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 428.524416][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 428.525565][ T5889] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 428.525665][ T5889] usb 4-1: media controller created [ 428.579746][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.671735][ T6266] usb 6-1: device descriptor read/64, error -71 [ 428.712990][T10562] dvb-usb: bulk message failed: -22 (4/0) [ 428.726223][ T5889] cxusb: set interface failed [ 428.726242][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 428.846689][ T6266] usb usb6-port1: attempt power cycle [ 429.247655][ T6266] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 429.370217][ T6266] usb 6-1: device descriptor read/8, error -71 [ 429.606960][ T6266] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 429.627863][ T6266] usb 6-1: device descriptor read/8, error -71 [ 429.743478][ T6266] usb usb6-port1: unable to enumerate USB device [ 429.778221][ T5889] DVB: Unable to find symbol mt352_attach() [ 429.778248][ T5889] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 429.919173][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 429.939551][ T5889] rc_core: IR keymap rc-dvico-portable not found [ 429.939571][ T5889] Registered IR keymap rc-empty [ 429.941357][ T5889] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 429.943474][ T5889] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11 [ 429.983786][ T5889] dvb-usb: schedule remote query interval to 100 msecs. [ 429.983810][ T5889] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 430.013695][ T5889] usb 4-1: USB disconnect, device number 36 [ 430.188320][ T5889] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 432.259424][ T809] libceph: connect (1)[c::]:6789 error -101 [ 432.260276][ T809] libceph: mon0 (1)[c::]:6789 connect error [ 432.293789][ T809] libceph: connect (1)[c::]:6789 error -101 [ 432.293992][ T809] libceph: mon0 (1)[c::]:6789 connect error [ 432.296359][T10609] ceph: No mds server is up or the cluster is laggy [ 432.591283][ T809] libceph: connect (1)[c::]:6789 error -101 [ 432.591481][ T809] libceph: mon0 (1)[c::]:6789 connect error [ 434.087811][ T5889] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 435.125123][T10656] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 435.194129][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.194165][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.198673][ T5889] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 435.198726][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.198757][ T5889] usb 2-1: SerialNumber: syz [ 435.473762][ T5889] usb 2-1: 0:2 : does not exist [ 435.473843][ T5889] usb 2-1: unit 255 not found! [ 435.500017][ T5889] usb 2-1: USB disconnect, device number 37 [ 435.546938][ T809] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 435.577817][ T8784] udevd[8784]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.699096][ T809] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.702029][ T809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.702059][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.702078][ T809] usb 4-1: Product: syz [ 435.702091][ T809] usb 4-1: Manufacturer: syz [ 435.702104][ T809] usb 4-1: SerialNumber: syz [ 435.726001][ T809] usb 4-1: config 0 descriptor?? [ 437.456891][ T5889] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 437.625489][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.625577][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.625616][ T5889] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 437.625638][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.670751][ T5889] usb 6-1: config 0 descriptor?? [ 438.755976][ T809] usb 4-1: USB disconnect, device number 37 [ 438.794313][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 438.794432][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 438.824445][ T5889] usb 6-1: USB disconnect, device number 11 [ 438.832112][T10713] process 'syz.0.1632' launched './file2' with NULL argv: empty string added [ 440.207269][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.207343][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.056976][ T5889] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 441.239969][ T809] libceph: connect (1)[c::]:6789 error -101 [ 441.240098][ T809] libceph: mon0 (1)[c::]:6789 connect error [ 441.259534][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 441.261835][ T5889] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.261866][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.261886][ T5889] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 441.261898][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.310829][ T5889] usb 2-1: config 0 descriptor?? [ 441.528774][ T6133] libceph: connect (1)[c::]:6789 error -101 [ 441.528968][ T6133] libceph: mon0 (1)[c::]:6789 connect error [ 441.930997][ T5889] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 441.931043][ T5889] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 441.931069][ T5889] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 441.931107][ T5889] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 441.931133][ T5889] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 441.951176][ T5889] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 441.965676][T10765] ceph: No mds server is up or the cluster is laggy [ 442.037389][ T809] libceph: connect (1)[c::]:6789 error -101 [ 442.044346][ T809] libceph: mon0 (1)[c::]:6789 connect error [ 442.204774][ T5889] usb 2-1: USB disconnect, device number 38 [ 442.261861][T10776] fido_id[10776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 447.787156][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1677'. [ 448.982111][T10871] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 449.577214][ T5889] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 450.492690][ T5889] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 450.492718][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.500110][ T5889] usb 4-1: config 0 descriptor?? [ 450.506350][ T5889] cp210x 4-1:0.0: cp210x converter detected [ 450.945710][ T5889] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 451.546595][ T5889] usb 4-1: cp210x converter now attached to ttyUSB0 [ 451.596926][ T5889] usb 4-1: USB disconnect, device number 38 [ 451.658876][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 451.903017][ T5889] cp210x 4-1:0.0: device disconnected [ 453.235857][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1689'. [ 455.207755][ T5788] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 455.359977][ T5788] usb 4-1: Using ep0 maxpacket: 16 [ 455.362834][ T5788] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.362877][ T5788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.362911][ T5788] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 455.362936][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.417660][ T5788] usb 4-1: config 0 descriptor?? [ 455.851910][ T5788] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 455.851952][ T5788] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 455.851980][ T5788] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 455.852007][ T5788] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 455.897760][ T5788] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 456.958803][ T5788] usb 4-1: USB disconnect, device number 39 [ 457.076584][T11004] fido_id[11004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 459.266906][ T5788] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 459.503470][ T5788] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 459.503501][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.503521][ T5788] usb 4-1: Product: syz [ 459.503535][ T5788] usb 4-1: Manufacturer: syz [ 459.503550][ T5788] usb 4-1: SerialNumber: syz [ 459.559199][ T5788] usb 4-1: config 0 descriptor?? [ 459.618442][ T6133] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 459.766996][ T6133] usb 6-1: Using ep0 maxpacket: 16 [ 459.769634][ T6133] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.769667][ T6133] usb 6-1: config 0 interface 0 has no altsetting 0 [ 459.769700][ T6133] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 459.769723][ T6133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.783081][ T6133] usb 6-1: config 0 descriptor?? [ 460.263952][ T6133] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 460.263992][ T6133] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 460.264020][ T6133] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 460.264047][ T6133] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 460.285594][ T6133] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 461.326477][ T6133] usb 6-1: USB disconnect, device number 12 [ 461.347990][ T5889] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 461.490255][ T5889] usb 1-1: device descriptor read/64, error -71 [ 461.692015][ T5788] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 461.731265][ T5788] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 461.741672][ T5889] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 461.759225][ T5788] usb 4-1: USB disconnect, device number 40 [ 461.822372][ T5788] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 461.921075][ T5889] usb 1-1: device descriptor read/64, error -71 [ 462.000342][ T5788] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 462.027599][ T5889] usb usb1-port1: attempt power cycle [ 462.536887][ T5889] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 462.557474][ T5889] usb 1-1: device descriptor read/8, error -71 [ 462.806901][ T5889] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 462.836050][ T5889] usb 1-1: device descriptor read/8, error -71 [ 462.937368][ T5889] usb usb1-port1: unable to enumerate USB device [ 470.066929][ T6133] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 470.221566][ T6133] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 470.221598][ T6133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.221616][ T6133] usb 4-1: Product: syz [ 470.221630][ T6133] usb 4-1: Manufacturer: syz [ 470.221643][ T6133] usb 4-1: SerialNumber: syz [ 470.231235][ T6133] usb 4-1: config 0 descriptor?? [ 470.237679][ T6266] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 470.466838][ T6266] usb 1-1: Using ep0 maxpacket: 32 [ 470.469947][ T6266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.469972][ T6266] usb 1-1: config 0 has no interfaces? [ 470.482882][ T6266] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 470.482911][ T6266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.483137][ T6266] usb 1-1: Product: syz [ 470.483152][ T6266] usb 1-1: Manufacturer: syz [ 470.483165][ T6266] usb 1-1: SerialNumber: syz [ 470.511426][ T6266] usb 1-1: config 0 descriptor?? [ 471.953239][ T6133] usb 4-1: f81604_read: reg: 100f failed: -EPROTO [ 471.999195][ T6133] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 472.003194][ T6133] usb 4-1: USB disconnect, device number 41 [ 472.056612][ T6133] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 473.072024][ T6133] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 473.138487][ T6266] usb 1-1: USB disconnect, device number 37 [ 473.773784][ T6133] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 474.096202][ T6133] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 474.096308][ T6133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.555952][ T6133] usb 1-1: config 0 descriptor?? [ 474.565439][ T6133] cp210x 1-1:0.0: cp210x converter detected [ 474.845374][T11413] 9pnet_fd: p9_fd_create_tcp (11413): problem connecting socket to 127.0.0.1 [ 475.191893][ T6133] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 475.191922][ T6133] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 475.210215][ T6133] usb 1-1: cp210x converter now attached to ttyUSB0 [ 475.214290][ T6133] usb 1-1: USB disconnect, device number 38 [ 475.221406][ T6133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 475.222153][ T6133] cp210x 1-1:0.0: device disconnected [ 475.444532][T11437] netlink: 'syz.3.1919': attribute type 11 has an invalid length. [ 475.897355][T11458] binder: BINDER_SET_CONTEXT_MGR already set [ 475.897371][T11458] binder: 11457:11458 ioctl 4018620d 200000000100 returned -16 [ 475.901453][T11458] binder: BINDER_SET_CONTEXT_MGR already set [ 475.901466][T11458] binder: 11457:11458 ioctl 4018620d 2000000002c0 returned -16 [ 477.075462][T11476] 9pnet_fd: p9_fd_create_tcp (11476): problem connecting socket to 127.0.0.1 [ 480.106906][ T6133] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 480.866962][ T37] audit: type=1326 audit(1769618260.894:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11577 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe441aeb9 code=0x7fc00000 [ 481.073939][ T6133] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 481.073971][ T6133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.101549][ T6133] usb 1-1: config 0 descriptor?? [ 481.105612][ T6133] cp210x 1-1:0.0: cp210x converter detected [ 481.321591][ T6133] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 481.321621][ T6133] cp210x 1-1:0.0: querying part number failed [ 481.343100][ T6133] usb 1-1: cp210x converter now attached to ttyUSB0 [ 481.497664][T11625] warning: `syz.3.2002' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 481.615722][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2005'. [ 482.247003][ T6133] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 482.412128][ T6133] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 482.412157][ T6133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.413347][ T6133] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 482.413372][ T6133] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 482.413389][ T6133] usb 6-1: Manufacturer: syz [ 482.423804][ T6133] usb 6-1: config 0 descriptor?? [ 482.457486][ T6133] igorplugusb 6-1:0.0: incorrect number of endpoints [ 482.646375][T11642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.665068][T11642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.858009][ T1247] usb 1-1: USB disconnect, device number 39 [ 482.888315][ T1247] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 482.890274][ T1247] cp210x 1-1:0.0: device disconnected [ 483.486822][ T1247] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 483.649158][ T1247] usb 4-1: config 65 has an invalid interface number: 95 but max is 0 [ 483.649185][ T1247] usb 4-1: config 65 has no interface number 0 [ 483.655237][ T1247] usb 4-1: string descriptor 0 read error: -22 [ 483.655384][ T1247] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 483.655407][ T1247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.726580][ T1247] usbtest 4-1:65.95: Linux gadget zero [ 483.726603][ T1247] usbtest 4-1:65.95: low-speed {control in/out} tests (+alt) [ 483.922527][ T1247] usb 4-1: USB disconnect, device number 42 [ 484.008005][ T6656] wlan1: Trigger new scan to find an IBSS to join [ 485.265586][ T1859] usb 6-1: USB disconnect, device number 13 [ 486.317712][ T5788] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 486.447108][ T5788] usb 1-1: device descriptor read/64, error -71 [ 486.696853][ T5788] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 486.837189][ T5788] usb 1-1: device descriptor read/64, error -71 [ 486.856783][ T5889] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 486.947989][ T5788] usb usb1-port1: attempt power cycle [ 487.009814][ T5889] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 487.009845][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.014580][ T5889] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 487.014610][ T5889] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 487.014628][ T5889] usb 4-1: Manufacturer: syz [ 487.067100][ T5889] usb 4-1: config 0 descriptor?? [ 487.074020][ T5889] igorplugusb 4-1:0.0: incorrect number of endpoints [ 487.274975][T11823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.275500][T11823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.293803][T11863] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2113'. [ 487.308601][ T5788] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 487.327797][ T5788] usb 1-1: device descriptor read/8, error -71 [ 487.567106][ T5788] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 487.589668][ T5788] usb 1-1: device descriptor read/8, error -71 [ 487.699756][ T5788] usb usb1-port1: unable to enumerate USB device [ 488.010179][ T5948] wlan1: Trigger new scan to find an IBSS to join [ 488.171680][T11914] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 488.912270][ T5948] wlan1: Creating new IBSS network, BSSID 22:e6:51:1c:40:7b [ 489.368516][T11964] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 489.368932][T11964] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 489.369211][T11964] kvm: requested 69561 ns i8254 timer period limited to 200000 ns [ 489.369877][T11964] kvm: requested 77942 ns i8254 timer period limited to 200000 ns [ 489.370324][T11964] kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 489.370836][T11964] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 489.371498][T11964] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 489.371980][T11964] kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 489.372172][T11964] kvm: requested 171809 ns i8254 timer period limited to 200000 ns [ 489.372366][T11964] kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 489.640248][ T1859] usb 4-1: USB disconnect, device number 43 [ 490.066825][ T1859] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 490.222523][ T1859] usb 4-1: Using ep0 maxpacket: 8 [ 490.224638][ T1859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.224663][ T1859] usb 4-1: config 0 has no interfaces? [ 490.232442][ T1859] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 490.232469][ T1859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.232488][ T1859] usb 4-1: Product: syz [ 490.232502][ T1859] usb 4-1: Manufacturer: syz [ 490.232515][ T1859] usb 4-1: SerialNumber: syz [ 490.264175][ T1859] usb 4-1: config 0 descriptor?? [ 490.484581][ T1859] usb 4-1: USB disconnect, device number 44 [ 491.357542][ T6133] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 491.511048][ T6133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.511080][ T6133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.511115][ T6133] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 491.511136][ T6133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.529603][ T6133] usb 4-1: config 0 descriptor?? [ 491.988721][ T6133] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 492.013044][ T6133] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 492.149697][T12068] kvm: pic: non byte read [ 492.153929][ T6133] cp2112 0003:10C4:EA90.0011: error requesting version [ 492.229224][ T6133] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -32 [ 493.051679][T12117] loop2: detected capacity change from 0 to 7 [ 493.095581][T12117] Dev loop2: unable to read RDB block 7 [ 493.095626][T12117] loop2: AHDI p1 p2 p3 p4 [ 493.095655][T12117] loop2: partition table partially beyond EOD, truncated [ 493.117304][T12117] loop2: p1 start 1601398130 is beyond EOD, truncated [ 493.117333][T12117] loop2: p2 start 1702059890 is beyond EOD, truncated [ 493.117348][T12117] loop2: p3 start 16777215 is beyond EOD, truncated [ 493.496871][ T7560] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 493.628252][ T7560] usb 6-1: device descriptor read/64, error -71 [ 493.866826][ T7560] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 494.007394][ T7560] usb 6-1: device descriptor read/64, error -71 [ 494.115404][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.136644][ T7560] usb usb6-port1: attempt power cycle [ 494.155756][ T6266] usb 4-1: USB disconnect, device number 45 [ 494.522798][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.557542][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.559242][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.559997][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 495.089625][ T7560] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 495.108924][ T7560] usb 6-1: device descriptor read/8, error -71 [ 495.134789][T12156] binder: BINDER_SET_CONTEXT_MGR already set [ 495.134804][T12156] binder: 12155:12156 ioctl 4018620d 200000000100 returned -16 [ 495.347593][ T7560] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 495.367753][ T7560] usb 6-1: device descriptor read/8, error -71 [ 495.464312][T12147] lo speed is unknown, defaulting to 1000 [ 495.477759][ T1859] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 495.490590][ T7560] usb usb6-port1: unable to enumerate USB device [ 495.552967][T12164] create_pit_timer: 7 callbacks suppressed [ 495.552989][T12164] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 495.611321][T12164] kvm: pic: non byte read [ 495.641713][ T1859] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 495.641743][ T1859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.641760][ T1859] usb 1-1: Product: syz [ 495.641773][ T1859] usb 1-1: Manufacturer: syz [ 495.641786][ T1859] usb 1-1: SerialNumber: syz [ 495.725170][ T1859] usb 1-1: config 0 descriptor?? [ 496.352033][ T1859] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 496.352072][ T1859] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 496.352108][ T1859] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 496.601444][ T6658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.657197][ T5807] Bluetooth: hci1: command tx timeout [ 496.746840][ T1859] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 496.919206][ T1859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.919239][ T1859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.919278][ T1859] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 496.919300][ T1859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.933697][ T1859] usb 6-1: config 0 descriptor?? [ 497.032544][ T6658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.351283][ T1859] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 497.363358][ T1859] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 497.530736][ T6658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.547554][ T1859] cp2112 0003:10C4:EA90.0012: error requesting version [ 497.550069][ T1859] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -32 [ 497.589218][T12147] chnl_net:caif_netlink_parms(): no params data found [ 497.872698][ T6658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.183431][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.183579][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.183837][T12147] bridge_slave_0: entered allmulticast mode [ 498.199756][T12147] bridge_slave_0: entered promiscuous mode [ 498.224899][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.225033][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.225214][T12147] bridge_slave_1: entered allmulticast mode [ 498.251054][T12147] bridge_slave_1: entered promiscuous mode [ 498.330736][ T5788] usb 1-1: USB disconnect, device number 44 [ 498.456030][T12147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.476943][T12147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.564278][T12210] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 498.615850][T12210] kvm: pic: non byte read [ 498.738626][ T5807] Bluetooth: hci1: command tx timeout [ 498.815168][T12147] team0: Port device team_slave_0 added [ 498.855059][T12147] team0: Port device team_slave_1 added [ 499.058441][T12147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.058461][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.058486][T12147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.255274][T12147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.255289][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.255335][T12147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.571390][ T7560] usb 6-1: USB disconnect, device number 18 [ 499.713344][T12147] hsr_slave_0: entered promiscuous mode [ 499.714749][T12147] hsr_slave_1: entered promiscuous mode [ 499.715667][T12147] debugfs: 'hsr0' already exists in 'hsr' [ 499.715689][T12147] Cannot create hsr debugfs directory [ 499.807063][ T6658] bridge_slave_1: left allmulticast mode [ 499.807093][ T6658] bridge_slave_1: left promiscuous mode [ 499.807338][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.938053][ T6658] bridge_slave_0: left allmulticast mode [ 499.938081][ T6658] bridge_slave_0: left promiscuous mode [ 499.938337][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.127194][ T808] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 500.288569][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 500.298825][ T808] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 500.298855][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.298874][ T808] usb 1-1: Product: syz [ 500.298887][ T808] usb 1-1: Manufacturer: syz [ 500.298900][ T808] usb 1-1: SerialNumber: syz [ 500.546173][ T808] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 500.561446][ T808] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 500.561845][ T808] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 500.562264][ T808] usb 1-1: media controller created [ 500.600481][ T1247] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 500.604318][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.756903][ T808] zl10353_read_register: readreg error (reg=127, ret==-32) [ 500.761287][T12227] i2c i2c-1: Invalid block write size 33 [ 500.781279][ T1247] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 500.781354][ T1247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.781374][ T1247] usb 4-1: Product: syz [ 500.781387][ T1247] usb 4-1: Manufacturer: syz [ 500.781400][ T1247] usb 4-1: SerialNumber: syz [ 500.825039][ T5807] Bluetooth: hci1: command tx timeout [ 500.832882][ T1247] usb 4-1: config 0 descriptor?? [ 501.069370][ T808] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 501.132814][ T808] usb 1-1: USB disconnect, device number 45 [ 501.464433][ T1247] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 501.464460][ T1247] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 501.464498][ T1247] f81604 4-1:0.0: probe with driver f81604 failed with error -32 [ 501.630843][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.630938][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.186849][ T7560] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 502.336854][ T7560] usb 1-1: Using ep0 maxpacket: 32 [ 502.339043][ T7560] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 502.339075][ T7560] usb 1-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 502.341578][ T7560] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 502.341606][ T7560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.341623][ T7560] usb 1-1: Product: syz [ 502.341636][ T7560] usb 1-1: Manufacturer: syz [ 502.341649][ T7560] usb 1-1: SerialNumber: syz [ 502.432136][ T7560] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 502.432236][ T7560] imon 1-1:155.0: unable to initialize intf0, err -19 [ 502.432252][ T7560] imon:imon_probe: failed to initialize context! [ 502.432264][ T7560] imon 1-1:155.0: unable to register, err -19 [ 502.487681][ T6658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.547618][ T6658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.602683][ T6658] bond0 (unregistering): Released all slaves [ 502.926812][ T5807] Bluetooth: hci1: command tx timeout [ 503.362737][ T5788] usb 4-1: USB disconnect, device number 46 [ 503.869144][ T5788] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 504.032559][ T5788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.032586][ T5788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.033761][ T5788] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 504.033785][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.033800][ T5788] usb 4-1: SerialNumber: syz [ 504.305130][ T5788] usb 4-1: invalid UAC_HEADER (v1) [ 504.384568][ T5788] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 504.399184][ T5788] usb 4-1: USB disconnect, device number 47 [ 504.436215][T12252] udevd[12252]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.486922][ T6266] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 504.677136][ T6266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.677168][ T6266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.677198][ T6266] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 504.677210][ T6266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.680179][ T6266] usb 6-1: config 0 descriptor?? [ 504.827892][ T6658] hsr_slave_0: left promiscuous mode [ 504.848524][ T6658] hsr_slave_1: left promiscuous mode [ 504.849565][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.849594][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.909523][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.909551][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.020811][ T6658] veth1_macvtap: left promiscuous mode [ 505.020909][ T6658] veth0_macvtap: left promiscuous mode [ 505.021105][ T6658] veth1_vlan: left promiscuous mode [ 505.021252][ T6658] veth0_vlan: left promiscuous mode [ 505.091825][ T6266] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 505.101004][ T6266] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 505.291614][ T6266] cp2112 0003:10C4:EA90.0013: error requesting version [ 505.302799][ T6266] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -32 [ 505.652219][ T6266] usb 1-1: USB disconnect, device number 46 [ 507.263315][ T6266] usb 6-1: USB disconnect, device number 19 [ 507.872975][T12343] kvm: kvm [12342]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000011d8 [ 507.876037][T12343] kvm: kvm [12342]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x58ba [ 507.878605][T12343] kvm: kvm [12342]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x7870 [ 507.881865][T12343] kvm_intel: kvm [12342]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc907 [ 508.562026][ T6658] team0 (unregistering): Port device team_slave_1 removed [ 508.833035][ T6658] team0 (unregistering): Port device team_slave_0 removed [ 509.373234][ T5788] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 509.534760][ T5788] usb 6-1: Using ep0 maxpacket: 32 [ 509.536528][ T5788] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 509.536580][ T5788] usb 6-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 509.563016][ T5788] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 509.563046][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.563064][ T5788] usb 6-1: Product: syz [ 509.563077][ T5788] usb 6-1: Manufacturer: syz [ 509.563091][ T5788] usb 6-1: SerialNumber: syz [ 509.583396][ T5788] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 509.583489][ T5788] imon 6-1:155.0: unable to initialize intf0, err -19 [ 509.583504][ T5788] imon:imon_probe: failed to initialize context! [ 509.583516][ T5788] imon 6-1:155.0: unable to register, err -19 [ 511.687103][ T808] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 511.856474][ T808] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 511.856507][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.856526][ T808] usb 1-1: Product: syz [ 511.856540][ T808] usb 1-1: Manufacturer: syz [ 511.856554][ T808] usb 1-1: SerialNumber: syz [ 511.862350][ T808] usb 1-1: config 0 descriptor?? [ 512.169613][ T808] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 512.169643][ T808] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 512.169688][ T808] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 512.781413][ T808] usb 6-1: USB disconnect, device number 20 [ 513.112764][T12147] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 513.276444][T12147] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 513.390062][T12147] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.473447][T12147] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.484617][T12397] kvm: kvm [12396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000011d8 [ 513.502570][T12397] kvm: kvm [12396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x58ba [ 513.513480][T12397] kvm: kvm [12396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x7870 [ 513.527859][T12397] kvm_intel: kvm [12396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc907 [ 513.707124][ T808] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 513.836904][ T808] usb 4-1: device descriptor read/64, error -71 [ 514.055379][T12147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.077001][ T808] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 514.126233][T12147] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.144424][ T6658] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.150539][ T6658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.181255][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.181389][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.206894][ T808] usb 4-1: device descriptor read/64, error -71 [ 514.317525][ T808] usb usb4-port1: attempt power cycle [ 514.475523][ T1859] usb 1-1: USB disconnect, device number 47 [ 514.667017][ T808] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 514.690530][ T808] usb 4-1: device descriptor read/8, error -71 [ 514.898905][T12147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.940396][ T808] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 514.958636][ T808] usb 4-1: device descriptor read/8, error -71 [ 515.062034][T12147] veth0_vlan: entered promiscuous mode [ 515.067310][ T808] usb usb4-port1: unable to enumerate USB device [ 515.103616][T12147] veth1_vlan: entered promiscuous mode [ 515.259663][T12147] veth0_macvtap: entered promiscuous mode [ 515.293937][T12147] veth1_macvtap: entered promiscuous mode [ 516.071145][T12147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.102354][T12147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.132761][ T6660] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.133230][ T6660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.141238][ T6660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.144387][ T6660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.813386][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.813407][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.837871][ T6133] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 517.426224][ T6133] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 517.426320][ T6133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.426340][ T6133] usb 6-1: Product: syz [ 517.426353][ T6133] usb 6-1: Manufacturer: syz [ 517.426368][ T6133] usb 6-1: SerialNumber: syz [ 517.506114][ T6133] usb 6-1: config 0 descriptor?? [ 517.719409][ T6133] usb-storage 6-1:0.0: USB Mass Storage device detected [ 517.758775][ T6660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.758795][ T6660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.934274][ T6133] usb 6-1: USB disconnect, device number 21 [ 518.909734][ T6667] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 520.197386][ T1859] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 520.350889][ T1859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.350915][ T1859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.353694][ T1859] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.353722][ T1859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.353741][ T1859] usb 4-1: SerialNumber: syz [ 520.587073][ T808] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 520.627726][ T1859] usb 4-1: 0:2 : does not exist [ 520.663241][ T1859] usb 4-1: USB disconnect, device number 52 [ 520.741716][ T808] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 520.741749][ T808] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 520.741783][ T808] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 520.741802][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.767924][T12579] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 520.823916][T12252] udevd[12252]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.858952][ T808] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.333840][ T808] usb 6-1: USB disconnect, device number 22 [ 521.927582][T12599] binder: BINDER_SET_CONTEXT_MGR already set [ 521.927596][T12599] binder: 12598:12599 ioctl 4018620d 2000000002c0 returned -16 [ 522.067891][T12605] 9p: Bad value for 'wfdno' [ 523.430638][ T1859] libceph: connect (1)[c::]:6789 error -101 [ 523.430931][ T1859] libceph: mon0 (1)[c::]:6789 connect error [ 523.469001][ T1859] libceph: connect (1)[c::]:6789 error -101 [ 523.469217][ T1859] libceph: mon0 (1)[c::]:6789 connect error [ 523.486502][T12637] ceph: No mds server is up or the cluster is laggy [ 523.519099][T12634] lo speed is unknown, defaulting to 1000 [ 523.580747][T12647] sctp: [Deprecated]: syz.1.2402 (pid 12647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.580747][T12647] Use struct sctp_sack_info instead [ 524.809812][T12678] 9p: Bad value for 'rfdno' [ 524.841452][T12679] binder: BINDER_SET_CONTEXT_MGR already set [ 524.841467][T12679] binder: 12677:12679 ioctl 4018620d 2000000002c0 returned -16 [ 525.705055][T12686] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.738781][T12686] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.837991][T12701] loop5: detected capacity change from 0 to 7 [ 525.868330][T12252] Dev loop5: unable to read RDB block 7 [ 525.868383][T12252] loop5: unable to read partition table [ 525.868664][T12252] loop5: partition table beyond EOD, truncated [ 525.960964][T12701] Dev loop5: unable to read RDB block 7 [ 525.961018][T12701] loop5: unable to read partition table [ 525.961236][T12701] loop5: partition table beyond EOD, truncated [ 525.961269][T12701] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 526.597121][ T1859] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 526.803116][ T1859] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.803151][ T1859] usb 2-1: config 0 interface 0 has no altsetting 0 [ 526.805913][ T1859] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 526.805941][ T1859] usb 2-1: New USB device strings: Mfr=1, Product=255, SerialNumber=255 [ 526.806024][ T1859] usb 2-1: Product: syz [ 526.806037][ T1859] usb 2-1: Manufacturer: syz [ 526.806050][ T1859] usb 2-1: SerialNumber: syz [ 526.869356][ T1859] usb 2-1: config 0 descriptor?? [ 527.287736][ T1859] usbhid 2-1:0.0: can't add hid device: -71 [ 527.287861][ T1859] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 527.315578][ T1859] usb 2-1: USB disconnect, device number 39 [ 527.441576][T12721] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 527.681354][T12725] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 529.543778][T12770] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 529.929010][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 530.189030][T12797] 9p: Bad value for 'rfdno' [ 530.714123][ T808] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 530.715092][T12816] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 530.909283][ T808] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 530.909311][ T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.909329][ T808] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 530.909348][ T808] usb 2-1: config 1 has no interface number 1 [ 530.909398][ T808] usb 2-1: config 1 interface 5 has no altsetting 0 [ 530.910857][ T808] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 530.910881][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 530.910897][ T808] usb 2-1: SerialNumber: syz [ 531.211580][ T808] usb 2-1: 0:2 : does not exist [ 531.249403][ T808] usb 2-1: USB disconnect, device number 40 [ 531.352143][T12252] udevd[12252]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.060076][ T1247] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 533.113459][T12908] binder: BINDER_SET_CONTEXT_MGR already set [ 533.113475][T12908] binder: 12907:12908 ioctl 4018620d 200000000100 returned -16 [ 533.116302][T12908] binder: BINDER_SET_CONTEXT_MGR already set [ 533.116315][T12908] binder: 12907:12908 ioctl 4018620d 2000000002c0 returned -16 [ 533.247263][ T1247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.247298][ T1247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.247335][ T1247] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 533.247358][ T1247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.255903][ T1247] usb 6-1: config 0 descriptor?? [ 533.574530][T12917] input: syz1 as /devices/virtual/input/input12 [ 533.689265][ T1247] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 533.736161][ T1247] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 533.886375][ T1247] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 533.945602][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 534.001925][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 534.004132][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 534.017015][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 534.022381][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 534.087769][ T1247] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 534.092441][ T1247] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -32 [ 534.177549][T12924] lo speed is unknown, defaulting to 1000 [ 535.001628][T12955] binder: 12953:12955 ioctl c0306201 200000000680 returned -14 [ 535.614874][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.729252][T12989] binder: 12987:12989 ioctl c0306201 200000000680 returned -14 [ 535.764515][ T1859] kernel read not supported for file bpf-prog (pid: 1859 comm: kworker/1:3) [ 535.768280][ T1247] usb 6-1: USB disconnect, device number 23 [ 536.087117][ T5807] Bluetooth: hci2: command tx timeout [ 536.285285][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.355847][T12924] chnl_net:caif_netlink_parms(): no params data found [ 536.690284][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.706970][ T809] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 536.856890][ T1859] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 536.859375][ T809] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.859487][ T809] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.860780][ T809] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 536.860808][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 536.860828][ T809] usb 6-1: SerialNumber: syz [ 537.009004][ T1859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.009036][ T1859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.009123][ T1859] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 537.009145][ T1859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.066025][ T1859] usb 1-1: config 0 descriptor?? [ 537.086412][ T809] usb 6-1: 0:2 : does not exist [ 537.086496][ T809] usb 6-1: unit 5 not found! [ 537.141561][T13038] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 537.258472][ T809] usb 6-1: USB disconnect, device number 24 [ 537.382091][T12252] udevd[12252]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.431713][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.489221][ T1859] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 537.509921][ T1859] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 537.539958][T12924] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.540159][T12924] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.540405][T12924] bridge_slave_0: entered allmulticast mode [ 537.559788][T12924] bridge_slave_0: entered promiscuous mode [ 537.571215][T12924] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.571332][T12924] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.571554][T12924] bridge_slave_1: entered allmulticast mode [ 537.580759][T12924] bridge_slave_1: entered promiscuous mode [ 537.684894][ T1859] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 537.872006][T12924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.891985][ T1859] cp2112 0003:10C4:EA90.0015: error requesting SMBus config [ 537.906060][ T1859] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -32 [ 537.933559][T12924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.994686][T12924] team0: Port device team_slave_0 added [ 538.005044][T12924] team0: Port device team_slave_1 added [ 538.061040][T12924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.061057][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.061083][T12924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.063331][T12924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.063345][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.063371][T12924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.167163][ T5807] Bluetooth: hci2: command tx timeout [ 538.476841][ T808] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 538.496553][T12924] hsr_slave_0: entered promiscuous mode [ 538.503805][T12924] hsr_slave_1: entered promiscuous mode [ 538.641446][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.641482][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.641523][ T808] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 538.641549][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.665021][ T808] usb 4-1: config 0 descriptor?? [ 538.951604][ T58] bridge_slave_1: left allmulticast mode [ 538.951671][ T58] bridge_slave_1: left promiscuous mode [ 538.951920][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.512823][ T58] bridge_slave_0: left allmulticast mode [ 539.512853][ T58] bridge_slave_0: left promiscuous mode [ 539.535544][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.630064][ T6133] usb 1-1: USB disconnect, device number 48 [ 539.767221][ T808] usbhid 4-1:0.0: can't add hid device: -71 [ 539.767340][ T808] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 539.795003][ T808] usb 4-1: USB disconnect, device number 53 [ 540.099623][T13082] loop2: detected capacity change from 0 to 7 [ 540.124437][T12252] Dev loop2: unable to read RDB block 7 [ 540.124472][T12252] loop2: AHDI p1 p2 p3 [ 540.124505][T12252] loop2: partition table partially beyond EOD, truncated [ 540.125400][T12252] loop2: p1 start 1601398130 is beyond EOD, truncated [ 540.125420][T12252] loop2: p2 start 1702059890 is beyond EOD, truncated [ 540.174333][T13082] Dev loop2: unable to read RDB block 7 [ 540.174355][T13082] loop2: AHDI p1 p2 p3 [ 540.174371][T13082] loop2: partition table partially beyond EOD, truncated [ 540.174688][T13082] loop2: p1 start 1601398130 is beyond EOD, truncated [ 540.174708][T13082] loop2: p2 start 1702059890 is beyond EOD, truncated [ 540.260655][ T5807] Bluetooth: hci2: command tx timeout [ 540.451965][T13093] binder: BINDER_SET_CONTEXT_MGR already set [ 540.451981][T13093] binder: 13092:13093 ioctl 4018620d 200000000100 returned -16 [ 540.454669][T13093] binder: BINDER_SET_CONTEXT_MGR already set [ 540.454683][T13093] binder: 13092:13093 ioctl 4018620d 2000000002c0 returned -16 [ 541.495128][T13108] loop2: detected capacity change from 0 to 7 [ 541.501908][T13108] Dev loop2: unable to read RDB block 7 [ 541.501939][T13108] loop2: AHDI p1 p2 p3 [ 541.501967][T13108] loop2: partition table partially beyond EOD, truncated [ 541.502740][T13108] loop2: p1 start 1601398130 is beyond EOD, truncated [ 541.502762][T13108] loop2: p2 start 1702059890 is beyond EOD, truncated [ 541.654730][T13107] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 541.661356][T13107] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 541.662170][T13107] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 541.667923][T13107] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 541.669069][T13107] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 541.670370][T13107] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 541.672637][T13107] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 541.672973][T13107] kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 541.681349][T13107] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 541.681747][T13107] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 542.018769][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.064208][ T58] bond_slave_0: left promiscuous mode [ 542.127088][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.158860][ T58] bond_slave_1: left promiscuous mode [ 542.161733][ T58] bond0 (unregistering): Released all slaves [ 542.289253][T13127] binder: BINDER_SET_CONTEXT_MGR already set [ 542.289269][T13127] binder: 13126:13127 ioctl 4018620d 200000000100 returned -16 [ 542.291695][T13127] binder: BINDER_SET_CONTEXT_MGR already set [ 542.291708][T13127] binder: 13126:13127 ioctl 4018620d 2000000002c0 returned -16 [ 542.326964][ T5807] Bluetooth: hci2: command tx timeout [ 543.198563][T13141] loop2: detected capacity change from 0 to 7 [ 543.238434][T13141] Dev loop2: unable to read RDB block 7 [ 543.238565][T13141] loop2: AHDI p1 p2 p3 [ 543.238607][T13141] loop2: partition table partially beyond EOD, truncated [ 543.238978][T13141] loop2: p1 start 1601398130 is beyond EOD, truncated [ 543.238998][T13141] loop2: p2 start 1702059890 is beyond EOD, truncated [ 543.448167][ T1247] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 543.483641][T13148] loop5: detected capacity change from 0 to 7 [ 543.493204][T13148] Dev loop5: unable to read RDB block 7 [ 543.493250][T13148] loop5: unable to read partition table [ 543.493461][T13148] loop5: partition table beyond EOD, truncated [ 543.493500][T13148] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 543.613925][ T1247] usb 1-1: no configurations [ 543.613946][ T1247] usb 1-1: can't read configurations, error -22 [ 543.774013][ T1247] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 543.967977][ T1247] usb 1-1: no configurations [ 543.967996][ T1247] usb 1-1: can't read configurations, error -22 [ 543.968438][ T1247] usb usb1-port1: attempt power cycle [ 544.316865][ T1247] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 544.343923][ T1247] usb 1-1: no configurations [ 544.343936][ T1247] usb 1-1: can't read configurations, error -22 [ 544.467035][ T1247] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 544.534666][ T1247] usb 1-1: no configurations [ 544.534686][ T1247] usb 1-1: can't read configurations, error -22 [ 544.535280][ T1247] usb usb1-port1: unable to enumerate USB device [ 544.932680][T13167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2594'. [ 549.935404][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 557.777951][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.840094][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 557.843141][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.844186][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.845160][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 558.879908][T13203] loop5: detected capacity change from 0 to 7 [ 558.881699][T13203] Dev loop5: unable to read RDB block 7 [ 558.881743][T13203] loop5: unable to read partition table [ 558.881951][T13203] loop5: partition table beyond EOD, truncated [ 558.881968][T13203] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 558.915472][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2607'. [ 559.936798][ T5807] Bluetooth: hci3: command tx timeout [ 560.029986][ T58] hsr_slave_0: left promiscuous mode [ 560.056179][ T58] hsr_slave_1: left promiscuous mode [ 560.057899][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.058116][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.109622][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.109651][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.375083][T13229] input: syz1 as /devices/virtual/input/input13 [ 560.473476][ T58] veth1_macvtap: left promiscuous mode [ 560.520703][ T58] veth0_macvtap: left promiscuous mode [ 560.521003][ T58] veth1_vlan: left promiscuous mode [ 560.521132][ T58] veth0_vlan: left promiscuous mode [ 561.587926][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'. [ 561.846887][ T6266] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 562.006972][ T5807] Bluetooth: hci3: command tx timeout [ 562.010216][ T6266] usb 2-1: no configurations [ 562.010235][ T6266] usb 2-1: can't read configurations, error -22 [ 562.136851][ T6266] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 562.287671][ T6266] usb 2-1: no configurations [ 562.287685][ T6266] usb 2-1: can't read configurations, error -22 [ 562.287964][ T6266] usb usb2-port1: attempt power cycle [ 562.626924][ T6266] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 562.676935][ T6266] usb 2-1: no configurations [ 562.676954][ T6266] usb 2-1: can't read configurations, error -22 [ 562.806990][ T6266] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 562.853802][ T6266] usb 2-1: no configurations [ 562.853823][ T6266] usb 2-1: can't read configurations, error -22 [ 562.854131][ T6266] usb usb2-port1: unable to enumerate USB device [ 563.058626][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.058668][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.087043][ T5807] Bluetooth: hci3: command tx timeout [ 564.117488][ T58] team0 (unregistering): Port device team_slave_1 removed [ 564.357526][ T58] team0 (unregistering): Port device team_slave_0 removed [ 566.175594][ T5807] Bluetooth: hci3: command tx timeout [ 567.452158][T13181] lo speed is unknown, defaulting to 1000 [ 567.539470][ T6266] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 567.716219][ T6266] usb 6-1: no configurations [ 567.716239][ T6266] usb 6-1: can't read configurations, error -22 [ 567.857125][ T6266] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 568.039979][ T6266] usb 6-1: no configurations [ 568.039998][ T6266] usb 6-1: can't read configurations, error -22 [ 568.040373][ T6266] usb usb6-port1: attempt power cycle [ 568.365372][T13181] chnl_net:caif_netlink_parms(): no params data found [ 568.376805][ T6266] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 568.398297][ T6266] usb 6-1: no configurations [ 568.398315][ T6266] usb 6-1: can't read configurations, error -22 [ 568.537970][ T6266] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 568.564073][ T6266] usb 6-1: no configurations [ 568.564092][ T6266] usb 6-1: can't read configurations, error -22 [ 568.564740][ T6266] usb usb6-port1: unable to enumerate USB device [ 568.593386][ T58] IPVS: stop unused estimator thread 0... [ 569.255597][T13316] netlink: 'syz.1.2634': attribute type 10 has an invalid length. [ 569.359091][T13316] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.363150][T13316] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.423046][T13316] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.423408][T13316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.424269][T13316] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.424358][T13316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.434740][T13316] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 569.753645][T12924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 569.787040][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 569.813176][T13181] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.813275][T13181] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.813430][T13181] bridge_slave_0: entered allmulticast mode [ 569.814815][T13181] bridge_slave_0: entered promiscuous mode [ 569.838012][T12924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 569.953783][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.953815][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.953841][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 569.953853][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.007728][ T4481] wlan1: Trigger new scan to find an IBSS to join [ 570.008676][ T9] usb 2-1: config 0 descriptor?? [ 570.223204][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2636'. [ 570.253443][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.338785][T13181] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.338907][T13181] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.339138][T13181] bridge_slave_1: entered allmulticast mode [ 570.343728][T13181] bridge_slave_1: entered promiscuous mode [ 570.375437][T12924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 570.419063][ T9] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 570.488796][ T9] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 570.508665][T12924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 570.615968][ T9] cp2112 0003:10C4:EA90.0016: Part Number: 0x82 Device Version: 0xFE [ 570.817020][ T9] cp2112 0003:10C4:EA90.0016: error requesting SMBus config [ 570.819671][ T9] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -5 [ 570.901573][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.945205][T13181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.962963][T13181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.009993][T13181] team0: Port device team_slave_0 added [ 571.192836][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.242297][T13181] team0: Port device team_slave_1 added [ 571.285533][T13181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.285551][T13181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.285575][T13181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.292881][T13181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.292896][T13181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.292922][T13181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.394792][T13181] hsr_slave_0: entered promiscuous mode [ 571.395595][T13181] hsr_slave_1: entered promiscuous mode [ 571.396203][T13181] debugfs: 'hsr0' already exists in 'hsr' [ 571.396219][T13181] Cannot create hsr debugfs directory [ 571.558880][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.912778][T13354] kAFS: unable to lookup cell 'ÿ' [ 572.176768][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 572.352616][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.352656][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 572.352677][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.390967][ T9] usb 1-1: config 0 descriptor?? [ 572.645592][ T9] usb 2-1: USB disconnect, device number 45 [ 572.743483][T13354] bridge0: entered allmulticast mode [ 573.209013][ T58] bridge_slave_1: left allmulticast mode [ 573.209034][ T58] bridge_slave_1: left promiscuous mode [ 573.209193][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.246972][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 573.298009][ T58] bridge_slave_0: left allmulticast mode [ 573.298045][ T58] bridge_slave_0: left promiscuous mode [ 573.298911][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.397942][ T9] usb 2-1: no configurations [ 573.397962][ T9] usb 2-1: can't read configurations, error -22 [ 573.548034][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 573.698086][ T9] usb 2-1: no configurations [ 573.698105][ T9] usb 2-1: can't read configurations, error -22 [ 573.698713][ T9] usb usb2-port1: attempt power cycle [ 574.036844][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 574.078460][ T9] usb 2-1: no configurations [ 574.078478][ T9] usb 2-1: can't read configurations, error -22 [ 574.209970][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 574.229881][ T9] usb 2-1: no configurations [ 574.229898][ T9] usb 2-1: can't read configurations, error -22 [ 574.230485][ T9] usb usb2-port1: unable to enumerate USB device [ 574.886321][ T6266] usb 1-1: USB disconnect, device number 53 [ 574.969580][ T5948] wlan1: Trigger new scan to find an IBSS to join [ 575.627384][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.717759][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.759699][ T58] bond0 (unregistering): Released all slaves [ 575.991322][ T6662] wlan1: Creating new IBSS network, BSSID 6a:87:eb:8f:ea:b1 [ 576.103423][T12924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.611360][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 576.711408][T13181] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 576.770472][T12924] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.951326][T13181] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 577.460424][T13181] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 577.530329][T13414] syzkaller1: entered promiscuous mode [ 577.530345][T13414] syzkaller1: entered allmulticast mode [ 577.626854][T13181] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 577.931912][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.932037][ T6662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.127088][ T58] hsr_slave_0: left promiscuous mode [ 578.175853][ T58] hsr_slave_1: left promiscuous mode [ 578.176931][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.176956][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.229739][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.229767][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.275061][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 578.328643][ T58] veth1_macvtap: left promiscuous mode [ 578.328705][ T58] veth0_macvtap: left promiscuous mode [ 578.328841][ T58] veth1_vlan: left promiscuous mode [ 578.328934][ T58] veth0_vlan: left promiscuous mode [ 579.226877][ T6133] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 579.376940][ T6133] usb 6-1: Using ep0 maxpacket: 16 [ 579.408292][ T6133] usb 6-1: config 0 has no interfaces? [ 579.410663][ T6133] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 579.410691][ T6133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.410701][ T6133] usb 6-1: Product: syz [ 579.410708][ T6133] usb 6-1: Manufacturer: syz [ 579.410715][ T6133] usb 6-1: SerialNumber: syz [ 579.414382][ T6133] usb 6-1: config 0 descriptor?? [ 579.507134][ T808] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 579.707650][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 579.733560][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 579.736557][ T808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 579.736595][ T808] usb 1-1: can't read configurations, error -71 [ 582.237446][ T6133] usb 6-1: USB disconnect, device number 29 [ 582.637173][ T58] team0 (unregistering): Port device team_slave_1 removed [ 582.836857][ T808] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 582.948223][ T58] team0 (unregistering): Port device team_slave_0 removed [ 582.996878][ T808] usb 6-1: Using ep0 maxpacket: 32 [ 583.003817][ T808] usb 6-1: unable to get BOS descriptor or descriptor too short [ 583.004845][ T808] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 583.004880][ T808] usb 6-1: can't read configurations, error -71 [ 584.616784][ T6133] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 584.776889][ T6133] usb 1-1: Using ep0 maxpacket: 16 [ 584.815586][ T6133] usb 1-1: config 0 has no interfaces? [ 584.825781][ T6133] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 584.825810][ T6133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.825828][ T6133] usb 1-1: Product: syz [ 584.825841][ T6133] usb 1-1: Manufacturer: syz [ 584.825855][ T6133] usb 1-1: SerialNumber: syz [ 584.831842][ T6133] usb 1-1: config 0 descriptor?? [ 585.999605][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.000121][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.037221][ T5788] lo speed is unknown, defaulting to 1000 [ 586.037249][ T5788] infiniband syz2: ib_query_port failed (-19) [ 586.189494][T13519] fuse: Bad value for 'rootmode' [ 586.940075][T13181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.990266][T13181] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.036784][ T6133] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 587.043676][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.053138][ T6662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.078875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.079063][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.200047][ T6133] usb 6-1: Using ep0 maxpacket: 32 [ 587.210028][ T6133] usb 6-1: unable to get BOS descriptor or descriptor too short [ 587.211011][ T6133] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 587.211042][ T6133] usb 6-1: can't read configurations, error -71 [ 587.412887][ T6266] usb 1-1: USB disconnect, device number 56 [ 587.559263][ T58] IPVS: stop unused estimator thread 0... [ 587.580993][T12924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.976262][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2699'. [ 588.007806][T12924] veth0_vlan: entered promiscuous mode [ 588.112916][T12924] veth1_vlan: entered promiscuous mode [ 588.989666][T12924] veth0_macvtap: entered promiscuous mode [ 589.062762][T12924] veth1_macvtap: entered promiscuous mode [ 589.109559][T13181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.147438][T12924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.180339][T12924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.289469][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.309930][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'. [ 589.312463][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.336591][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.363288][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.513693][ T6266] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 589.687185][ T6266] usb 6-1: Using ep0 maxpacket: 16 [ 589.727491][ T6266] usb 6-1: config 0 has no interfaces? [ 589.747841][ T6266] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 589.747872][ T6266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.747891][ T6266] usb 6-1: Product: syz [ 589.747904][ T6266] usb 6-1: Manufacturer: syz [ 589.747918][ T6266] usb 6-1: SerialNumber: syz [ 589.774644][ T6266] usb 6-1: config 0 descriptor?? [ 590.049892][T13602] mmap: syz.1.2706 (13602) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 590.278900][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.278921][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.306761][ T6133] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 590.375974][ T6656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.376000][ T6656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.463476][ T6133] usb 2-1: unable to get BOS descriptor or descriptor too short [ 590.464071][ T6133] usb 2-1: not running at top speed; connect to a high speed hub [ 590.469418][ T6133] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.469441][ T6133] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.501785][ T6133] usb 2-1: string descriptor 0 read error: -22 [ 590.501923][ T6133] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.501945][ T6133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.545823][ T6133] usb 2-1: 0:2 : does not exist [ 590.654852][T13181] veth0_vlan: entered promiscuous mode [ 590.744501][T13618] netlink: 'syz.0.2708': attribute type 13 has an invalid length. [ 591.570665][ T6133] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 591.581982][ T6133] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 591.602802][ T6133] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 591.760683][ T6133] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 591.772685][ T6133] usb 2-1: USB disconnect, device number 50 [ 592.916530][ T7560] usb 6-1: USB disconnect, device number 34 [ 593.096798][ T809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 593.238679][T13618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.245878][T13618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.256858][ T7560] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 593.271951][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.271984][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.272025][ T809] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 593.272048][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.282659][ T809] usb 3-1: config 0 descriptor?? [ 593.417509][ T7560] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.417594][ T7560] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.417632][ T7560] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 593.417653][ T7560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.425674][ T7560] usb 6-1: config 0 descriptor?? [ 593.759669][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 593.811758][ T10] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 593.909721][ T7560] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 593.981433][ T7560] cp2112 0003:10C4:EA90.0018: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 594.083135][ T7560] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE [ 594.289694][ T7560] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 594.302810][ T7560] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -32 [ 595.028922][ T5948] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.058353][T13636] bridge_slave_0: left allmulticast mode [ 595.058382][T13636] bridge_slave_0: left promiscuous mode [ 595.061608][T13636] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.182304][T13636] bridge_slave_1: left allmulticast mode [ 595.182325][T13636] bridge_slave_1: left promiscuous mode [ 595.182490][T13636] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.339410][T13636] bond0: (slave bond_slave_0): Releasing backup interface [ 595.472048][T13636] bond0: (slave bond_slave_1): Releasing backup interface [ 595.607730][T13636] team0: Port device team_slave_0 removed [ 595.762705][T13636] team0: Port device team_slave_1 removed [ 595.786340][T13636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.821306][T13636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.873778][T13636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.874024][T13636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.905356][T13636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.969452][ T5948] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.044161][ T5948] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.046123][ T5948] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.049841][T13181] veth1_vlan: entered promiscuous mode [ 596.050826][ T9] usb 6-1: USB disconnect, device number 35 [ 596.283413][ T809] usbhid 3-1:0.0: can't add hid device: -71 [ 596.283528][ T809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 596.300899][T13590] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 596.316835][ T809] usb 3-1: USB disconnect, device number 7 [ 596.373319][T13181] veth0_macvtap: entered promiscuous mode [ 596.409040][T13181] veth1_macvtap: entered promiscuous mode [ 596.464596][T13590] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 596.464627][T13590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.464646][T13590] usb 2-1: Product: syz [ 596.464659][T13590] usb 2-1: Manufacturer: syz [ 596.464774][T13590] usb 2-1: SerialNumber: syz [ 596.509875][T13590] hub 2-1:24.0: bad descriptor, ignoring hub [ 596.509911][T13590] hub 2-1:24.0: probe with driver hub failed with error -5 [ 596.605047][T13181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.720753][T13590] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 596.763089][T13181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.819777][ T5788] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 596.837056][ T6667] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.838107][ T6667] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.840712][ T6667] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.840755][ T6667] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.902663][T13590] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 596.902724][T13590] dib0700: firmware download failed at 7 with -22 [ 596.967412][ T5788] usb 6-1: Using ep0 maxpacket: 16 [ 596.969500][ T5788] usb 6-1: config 0 has no interfaces? [ 596.975495][ T5788] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 596.975522][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.975541][ T5788] usb 6-1: Product: syz [ 596.975553][ T5788] usb 6-1: Manufacturer: syz [ 596.975566][ T5788] usb 6-1: SerialNumber: syz [ 596.994989][T13590] usb 2-1: USB disconnect, device number 51 [ 597.035839][ T5788] usb 6-1: config 0 descriptor?? [ 597.453271][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.453291][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.530730][ T6667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.530750][ T6667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.557003][ T5889] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 597.719614][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.719639][ T5889] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 597.723191][ T5889] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 597.723219][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.723237][ T5889] usb 3-1: Product: syz [ 597.723250][ T5889] usb 3-1: Manufacturer: syz [ 597.723262][ T5889] usb 3-1: SerialNumber: syz [ 597.876224][ T5889] usb 3-1: config 0 descriptor?? [ 598.317692][T13708] netlink: 'syz.0.2729': attribute type 2 has an invalid length. [ 598.446868][ T809] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 598.586991][ T5889] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 598.606133][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.606164][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.606266][ T809] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 598.606289][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.648580][ T809] usb 2-1: config 0 descriptor?? [ 598.736772][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 598.739227][ T5889] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 598.739253][ T5889] usb 7-1: config 0 has no interface number 0 [ 598.739295][ T5889] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 598.739323][ T5889] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 598.739347][ T5889] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.739372][ T5889] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 598.739411][ T5889] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 598.739490][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.745921][ T5889] usb 7-1: config 0 descriptor?? [ 598.816264][ T5889] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 599.018790][ T5889] usb 7-1: USB disconnect, device number 2 [ 599.026273][ T5889] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 599.067726][ T809] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 599.071492][ T809] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 599.264369][ T809] cp2112 0003:10C4:EA90.0019: Part Number: 0x82 Device Version: 0xFE [ 599.472261][ T809] cp2112 0003:10C4:EA90.0019: error requesting SMBus config [ 599.488881][ T809] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -32 [ 599.570155][ T5889] usb 6-1: USB disconnect, device number 36 [ 599.956721][ T5889] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 600.109190][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.109222][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.109258][ T5889] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 600.109270][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.169054][ T5889] usb 6-1: config 0 descriptor?? [ 600.400895][ T10] usb 3-1: USB disconnect, device number 8 [ 600.674994][ T7560] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 600.767995][ T7560] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 601.251449][ T10] usb 2-1: USB disconnect, device number 52 [ 601.537437][T13760] netlink: 'syz.1.2741': attribute type 2 has an invalid length. [ 601.687004][ T7560] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 601.861149][ T7560] usb 7-1: Using ep0 maxpacket: 8 [ 601.865302][ T7560] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 601.865329][ T7560] usb 7-1: config 0 has no interface number 0 [ 601.865377][ T7560] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.865400][ T7560] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 601.865425][ T7560] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 601.865450][ T7560] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 601.865489][ T7560] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 601.865511][ T7560] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.078922][ T7560] usb 7-1: config 0 descriptor?? [ 602.117533][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 602.117660][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 602.149944][ T5889] usb 6-1: USB disconnect, device number 37 [ 602.197701][ T7560] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 602.357559][ T809] usb 7-1: USB disconnect, device number 3 [ 602.373432][ T809] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 602.766754][ T808] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 602.766778][ T809] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 602.916726][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 602.919108][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 602.919139][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 602.919176][ T809] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 602.919199][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.924084][ T809] usb 2-1: config 0 descriptor?? [ 602.924343][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.924369][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.924402][ T808] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 602.924423][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.949487][ T808] usb 1-1: config 0 descriptor?? [ 603.234453][T13777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2747'. [ 603.331446][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2748'. [ 603.365733][ T808] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 603.392159][ T808] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 603.569128][ T808] cp2112 0003:10C4:EA90.001B: Part Number: 0x82 Device Version: 0xFE [ 604.185028][ T808] cp2112 0003:10C4:EA90.001B: error reading lock byte: -71 [ 604.224870][ T808] usb 1-1: USB disconnect, device number 57 [ 604.627111][ T808] ================================================================== [ 604.627127][ T808] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 604.627185][ T808] Read of size 8 at addr ffffc9000ced9008 by task kworker/0:2/808 [ 604.627202][ T808] [ 604.627226][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.627251][ T808] Tainted: [L]=SOFTLOCKUP [ 604.627258][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 604.627271][ T808] Workqueue: usb_hub_wq hub_event [ 604.627296][ T808] Call Trace: [ 604.627303][ T808] [ 604.627316][ T808] dump_stack_lvl+0xe8/0x150 [ 604.627343][ T808] print_report+0xba/0x230 [ 604.627364][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 604.627398][ T808] kasan_report+0x117/0x150 [ 604.627424][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 604.627453][ T808] __list_add_valid_or_report+0x4e/0x130 [ 604.627482][ T808] kcov_remote_stop+0x457/0x680 [ 604.627510][ T808] hub_event+0x49d8/0x4f60 [ 604.627532][ T808] ? __lock_acquire+0x6b5/0x2cf0 [ 604.627568][ T808] ? __pfx_hub_event+0x10/0x10 [ 604.627585][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 604.627636][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 604.627663][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 604.627690][ T808] process_scheduled_works+0xaec/0x17a0 [ 604.627727][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.627755][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 604.627783][ T808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.627809][ T808] ? schedule+0x90/0x360 [ 604.627834][ T808] worker_thread+0xda6/0x1360 [ 604.627859][ T808] ? __kthread_parkme+0x19c/0x1f0 [ 604.627880][ T808] kthread+0x726/0x8b0 [ 604.627904][ T808] ? __pfx_worker_thread+0x10/0x10 [ 604.627922][ T808] ? __pfx_kthread+0x10/0x10 [ 604.627942][ T808] ? rt_spin_unlock+0x14f/0x200 [ 604.627963][ T808] ? rt_spin_unlock+0x160/0x200 [ 604.627981][ T808] ? __pfx_kthread+0x10/0x10 [ 604.628002][ T808] ret_from_fork+0x51b/0xa40 [ 604.628022][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 604.628039][ T808] ? __switch_to+0xc82/0x1410 [ 604.628067][ T808] ? __pfx_kthread+0x10/0x10 [ 604.628090][ T808] ret_from_fork_asm+0x1a/0x30 [ 604.628122][ T808] [ 604.628129][ T808] [ 604.628134][ T808] The buggy address belongs to a vmalloc virtual mapping [ 604.628151][ T808] Memory state around the buggy address: [ 604.628161][ T808] ffffc9000ced8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 604.628173][ T808] ffffc9000ced8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 604.628185][ T808] >ffffc9000ced9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 604.628200][ T808] ^ [ 604.628209][ T808] ffffc9000ced9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 604.628228][ T808] ffffc9000ced9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 604.628237][ T808] ================================================================== [ 604.628251][ T808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 604.628270][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.628297][ T808] Tainted: [L]=SOFTLOCKUP [ 604.628304][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 604.628316][ T808] Workqueue: usb_hub_wq hub_event [ 604.628334][ T808] Call Trace: [ 604.628342][ T808] [ 604.628350][ T808] vpanic+0x1e0/0x670 [ 604.628377][ T808] panic+0xc5/0xd0 [ 604.628400][ T808] ? __pfx_panic+0x10/0x10 [ 604.628429][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 604.628461][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 604.628485][ T808] check_panic_on_warn+0x89/0xb0 [ 604.628509][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 604.628534][ T808] end_report+0x6f/0x140 [ 604.628555][ T808] kasan_report+0x128/0x150 [ 604.628580][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 604.628610][ T808] __list_add_valid_or_report+0x4e/0x130 [ 604.628648][ T808] kcov_remote_stop+0x457/0x680 [ 604.628675][ T808] hub_event+0x49d8/0x4f60 [ 604.628697][ T808] ? __lock_acquire+0x6b5/0x2cf0 [ 604.628731][ T808] ? __pfx_hub_event+0x10/0x10 [ 604.628748][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 604.628780][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 604.628808][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 604.628835][ T808] process_scheduled_works+0xaec/0x17a0 [ 604.628873][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.628899][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 604.628928][ T808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.628953][ T808] ? schedule+0x90/0x360 [ 604.628978][ T808] worker_thread+0xda6/0x1360 [ 604.629001][ T808] ? __kthread_parkme+0x19c/0x1f0 [ 604.629022][ T808] kthread+0x726/0x8b0 [ 604.629045][ T808] ? __pfx_worker_thread+0x10/0x10 [ 604.629062][ T808] ? __pfx_kthread+0x10/0x10 [ 604.629091][ T808] ? rt_spin_unlock+0x14f/0x200 [ 604.629111][ T808] ? rt_spin_unlock+0x160/0x200 [ 604.629137][ T808] ? __pfx_kthread+0x10/0x10 [ 604.629159][ T808] ret_from_fork+0x51b/0xa40 [ 604.629179][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 604.629198][ T808] ? __switch_to+0xc82/0x1410 [ 604.629224][ T808] ? __pfx_kthread+0x10/0x10 [ 604.629246][ T808] ret_from_fork_asm+0x1a/0x30 [ 604.629278][ T808] [ 604.629625][ T808] Kernel Offset: disabled