last executing test programs: 15m8.460053794s ago: executing program 1 (id=125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000003"], 0xb8}}, 0x0) 15m8.300278258s ago: executing program 1 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x20080000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1502, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r6, 0x40096102, 0x0) listen(r5, 0x0) 15m5.014775598s ago: executing program 1 (id=134): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 15m3.98422734s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, 0x0) chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') 15m3.829612723s ago: executing program 1 (id=148): syz_emit_ethernet(0x8a, &(0x7f0000000240)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x50, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffff, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @local, @rand_addr=' \x01\x00', [@hopopts={0xc, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}]}}}}}}}, 0x0) 15m2.904574375s ago: executing program 1 (id=153): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 15m2.638326829s ago: executing program 32 (id=153): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 13m6.957000774s ago: executing program 4 (id=482): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1c09, &(0x7f0000000140)={0x0, 0xfa25, 0x1, 0x3, 0x2d1}, &(0x7f0000000080), &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xe45, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x8) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000280)={0x80, 0x44}, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13m3.858696708s ago: executing program 4 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}}, 0x80) 13m3.459293863s ago: executing program 4 (id=490): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) request_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 13m1.738863475s ago: executing program 4 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x185883, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) 13m1.645151614s ago: executing program 4 (id=493): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r0}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 13m0.510279264s ago: executing program 4 (id=496): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000002c0), 0x0) 13m0.152781255s ago: executing program 33 (id=496): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000002c0), 0x0) 6m44.661449463s ago: executing program 5 (id=1376): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pptp(0x18, 0x1, 0x2) add_key(&(0x7f0000002280)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 6m42.337492368s ago: executing program 5 (id=1393): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa40002030109022400010000000009040000"], 0x0) 6m38.362775588s ago: executing program 5 (id=1404): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in, @in=@loopback}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100), 0x0, 0x2, 0x7, 0x0, r5}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) syz_open_dev$sndpcmp(0x0, 0x0, 0x28002) 6m36.581878836s ago: executing program 5 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(0x0, 0x9) open_tree(0xffffffffffffff9c, 0x0, 0x9901) mount$bind(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x10a78c0, 0x0) 6m36.469377076s ago: executing program 5 (id=1415): dup(0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r5, &(0x7f0000000680), 0x4924924924925c6, 0x0) 6m35.329927926s ago: executing program 5 (id=1416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 6m34.872314016s ago: executing program 34 (id=1416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15.303578362s ago: executing program 0 (id=2645): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x34}}, 0x0) 15.20047708s ago: executing program 0 (id=2647): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12.112240362s ago: executing program 0 (id=2668): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x33) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2029) 12.061690007s ago: executing program 0 (id=2669): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x99581a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 11.982677924s ago: executing program 0 (id=2670): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x10, "0000000000000000000003000a000000001000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000440)={0x3, 0xfffffc01, 0x8, 0x1000, 0x2, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) 10.240176797s ago: executing program 0 (id=2687): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0x18, 0x2, "361f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.037854265s ago: executing program 35 (id=2687): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0x18, 0x2, "361f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.477046086s ago: executing program 7 (id=2718): sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x4000000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 4.344640677s ago: executing program 7 (id=2720): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x40, 0x15, 0x6, "6ddb852e5b7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0xb, 0x4, "778a92a9"}, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.143842822s ago: executing program 7 (id=2742): unshare(0x66040600) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0004000000000904000001"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x5, 0x8, 0xfffffff2, 0x800, 0x2]}, &(0x7f0000000040)=0x54) 2.052518869s ago: executing program 3 (id=2743): ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4004800) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, 0x0) writev(r6, 0x0, 0x0) 2.052358399s ago: executing program 2 (id=2744): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0xd8, 0xcd, 0xa7, 0x20, 0xccd, 0xb2, 0xbc74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb7, 0x2, 0x1, 0xd5, 0xae, 0x6, 0x0, [], [{{0x9, 0x5, 0x82, 0xc, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.344647172s ago: executing program 3 (id=2750): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x3, 0x10000000000, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x8, 0x9, 0x0, 0x0, 0x10, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r2, 0x401870cc, &(0x7f0000000000)) 1.25118516s ago: executing program 3 (id=2751): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43", 0xc8}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.196751065s ago: executing program 3 (id=2752): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80042) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) 1.02473808s ago: executing program 3 (id=2753): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000000000/0xc00000)=nil, 0xc00000}) 1.02458269s ago: executing program 3 (id=2754): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x0, 0xb, 0x2, "06be"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 573.21478ms ago: executing program 6 (id=2757): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000040)={0x14}, 0x14) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000540)={0x0, 'bond_slave_0\x00', {0x1}, 0x2}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000580)={0x3, 0x7, 0xc7, @random="9c5e1660e328", 'dvmrp0\x00'}) r3 = epoll_create(0x7ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000005c0)={0xe0000018}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000640)='net/tcp6\x00') syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x411}}}, 0x7) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000700)=0x8) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc, 0x99, {0x15, 0x12}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x4000001) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000008c0)=0x3ff, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1, {r4}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={0x0}}, 0x80) read$FUSE(r6, &(0x7f0000000b40)={0x2020}, 0x2020) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000002c80)={0x4, &(0x7f0000002c00)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @local}, {}]}) 571.49077ms ago: executing program 7 (id=2758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000700000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x44) 452.382431ms ago: executing program 7 (id=2759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4014) 423.440123ms ago: executing program 6 (id=2760): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000002040)) 399.606975ms ago: executing program 2 (id=2761): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x200}, 0x8) 276.561556ms ago: executing program 7 (id=2762): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x80) 276.316976ms ago: executing program 2 (id=2763): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x3a3f5d48, @local, 0x4}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0xf9b}, &(0x7f0000000100)=0x8) 274.869406ms ago: executing program 6 (id=2764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x4, 0x700000000000000}, 0x0) 168.979066ms ago: executing program 2 (id=2765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6802000000050104000000000000000003000009540201"], 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) 135.283379ms ago: executing program 6 (id=2766): syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000280)="0f01c10f46a78900000066ba2100b06766ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x34}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 68.585784ms ago: executing program 2 (id=2767): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}}}}}) 65.617735ms ago: executing program 6 (id=2768): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 9.5546ms ago: executing program 2 (id=2769): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f27, 0x5, 0x2, 0x401, 0x21, 0x0, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x9, 0xe1cb, 0x4, 0x4, 0x3, 0x395, 0x80000089, 0x2, 0x4, 0x6, 0xffffeadb, 0x3, 0x80000000, 0x8, 0x7ffffffd, 0x8000000, 0x5]}) 0s ago: executing program 6 (id=2770): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x110, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xae, 0x6, 0x1, 0x0, "4d11713832439fb8cc4853bf5a0b8b0356ce189148d9b64d2b1b19c404f4e7b5b7eabd103368a75a5f8599f48abe4680fea8f2b6ca2432ece0d3fd377523350f830043c5bb1daca7063d259fdb5a562d43b06ffd6a194851ecfc28fd2775f3b6ff2c51b739fba2152672dda6c492861dbc7443626b9691ca336df6cb7685651908c0f23052f72145089f5a5583db16bd2029b8f5d0f6bca3557789e4d300b40b478e1e4d6df873133b31"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000}, 0x20000041) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="cf042c9d7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000500c200820000000800a4000300000034"], 0xa0}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) kernel console output (not intermixed with test programs): nt descriptor, different from the interface descriptor's value: 21 [ 393.079075][ T5846] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.088835][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.206881][ T5846] usb 6-1: config 0 descriptor?? [ 396.748691][ T5846] usbhid 6-1:0.0: can't add hid device: -71 [ 396.755440][ T5846] usbhid: probe of 6-1:0.0 failed with error -71 [ 396.765353][ T5846] usb 6-1: USB disconnect, device number 5 [ 397.093622][ T9069] netlink: 'syz.3.910': attribute type 10 has an invalid length. [ 397.170158][ T9069] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 398.054033][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 398.984051][ T9082] syz.0.913[9082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.984180][ T9082] syz.0.913[9082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.268453][ T1191] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.854044][ T1191] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 399.911998][ T5846] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 400.108912][ T5846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.168534][ T5846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 400.303601][ T5846] usb 4-1: config 1 has no interface number 0 [ 400.382464][ T5846] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.552718][ T5846] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.570094][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.578529][ T5846] usb 4-1: Product: syz [ 400.585009][ T5846] usb 4-1: Manufacturer: syz [ 400.589748][ T5846] usb 4-1: SerialNumber: syz [ 400.602781][ T5846] cdc_ncm 4-1:1.1: skipping garbage [ 400.608096][ T5846] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 400.615177][ T1191] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 400.623011][ T5846] cdc_ncm 4-1:1.1: bind() failure [ 401.912960][ T9] usb 4-1: USB disconnect, device number 18 [ 401.972508][ T1191] usb 6-1: Using ep0 maxpacket: 32 [ 402.064436][ T1191] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 402.085692][ T1191] usb 6-1: config 0 has no interface number 0 [ 402.104964][ T1191] usb 6-1: config 0 interface 12 has no altsetting 0 [ 402.143755][ T1191] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 402.155279][ T1191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.163683][ T1191] usb 6-1: Product: syz [ 402.167991][ T1191] usb 6-1: Manufacturer: syz [ 402.176930][ T1191] usb 6-1: SerialNumber: syz [ 402.190668][ T1191] usb 6-1: config 0 descriptor?? [ 404.004886][ T1191] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 70 failed: -71 [ 404.013729][ T1191] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 405.205959][ T1191] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 405.215544][ T1191] f81534: probe of 6-1:0.12 failed with error -71 [ 405.226197][ T1191] usb 6-1: USB disconnect, device number 6 [ 412.512204][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.942'. [ 418.304949][ T9214] bridge0: port 3(gretap0) entered blocking state [ 418.313220][ T9214] bridge0: port 3(gretap0) entered disabled state [ 418.325114][ T9214] gretap0: entered allmulticast mode [ 418.349736][ T9214] gretap0: entered promiscuous mode [ 418.529244][ T9214] bridge0: port 3(gretap0) entered blocking state [ 418.535891][ T9214] bridge0: port 3(gretap0) entered forwarding state [ 421.142166][ T5804] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 421.343971][ T5804] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.361685][ T5804] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.381474][ T5804] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 421.390915][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 421.399002][ T5804] usb 6-1: SerialNumber: syz [ 421.703020][ T5804] usb 6-1: 0:2 : does not exist [ 421.708590][ T5804] usb 6-1: unit 255 not found! [ 421.799805][ T5804] usb 6-1: 5:0: cannot get min/max values for control 6 (id 5) [ 421.943206][ T5804] usb 6-1: 5:0: cannot get min/max values for control 7 (id 5) [ 421.976209][ T5804] usb 6-1: 5:0: cannot get min/max values for control 14 (id 5) [ 422.089059][ T5804] usb 6-1: USB disconnect, device number 7 [ 425.789910][ T9280] blktrace: Concurrent blktraces are not allowed on loop11 [ 426.602109][ T5804] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 427.550941][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 427.562406][ T5804] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 427.593763][ T5804] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 427.607682][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 427.662345][ T5804] usb 4-1: Product: syz [ 427.689700][ T5804] usb 4-1: Manufacturer: syz [ 427.702577][ T5804] usb 4-1: SerialNumber: syz [ 427.730353][ T5804] usb 4-1: config 0 descriptor?? [ 427.758227][ T9283] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 427.912044][ T5765] Bluetooth: hci3: link tx timeout [ 429.180983][ T5765] Bluetooth: hci3: link tx timeout [ 429.787409][ T8] usb 4-1: USB disconnect, device number 19 [ 436.565373][ T9332] blktrace: Concurrent blktraces are not allowed on loop11 [ 437.052494][ T9334] cgroup: release_agent respecified [ 439.748082][ T9347] 9pnet_fd: Insufficient options for proto=fd [ 439.883476][ T9350] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 440.067564][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.074514][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.739826][ T9370] tap0: tun_chr_ioctl cmd 1074025675 [ 441.745461][ T9370] tap0: persist enabled [ 443.625064][ T9385] blktrace: Concurrent blktraces are not allowed on loop7 [ 446.222053][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 446.252831][ T5804] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 446.305298][ T9396] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 446.452012][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 446.455852][ T5804] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 446.469108][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.491709][ T8] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 446.497542][ T5804] usb 6-1: Product: syz [ 446.505027][ T8] usb 3-1: config 0 has no interface number 0 [ 446.531576][ T5804] usb 6-1: Manufacturer: syz [ 446.531792][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 446.536298][ T5804] usb 6-1: SerialNumber: syz [ 446.538415][ T5804] usb 6-1: config 0 descriptor?? [ 446.567948][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 446.600370][ T8] usb 3-1: config 0 interface 41 has no altsetting 0 [ 446.623779][ T8] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 446.641999][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.676131][ T8] usb 3-1: Product: syz [ 446.680343][ T8] usb 3-1: Manufacturer: syz [ 446.702053][ T8] usb 3-1: SerialNumber: syz [ 446.725162][ T8] usb 3-1: config 0 descriptor?? [ 446.741064][ T9394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 446.748503][ T9394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 446.824150][ T5804] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 446.979413][ T9394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 447.012133][ T9394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 447.246492][ T8] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 447.302329][ T8] CoreChips: probe of 3-1:0.41 failed with error -71 [ 447.333079][ T8] usb 3-1: USB disconnect, device number 24 [ 447.729385][ T9410] random: crng reseeded on system resumption [ 450.817403][ T5804] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -110 [ 450.891614][ T5804] usb 6-1: USB disconnect, device number 8 [ 450.906148][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 458.788451][ T9500] gfs2: gfs2 mount does not exist [ 459.606560][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 469.567128][ T9557] blktrace: Concurrent blktraces are not allowed on loop1 [ 470.912707][ T9569] loop2: detected capacity change from 0 to 7 [ 470.952419][ T9569] Dev loop2: unable to read RDB block 7 [ 470.966756][ T9569] loop2: AHDI p1 p2 p3 [ 470.986774][ T9569] loop2: partition table partially beyond EOD, truncated [ 471.009869][ T9569] loop2: p1 start 1601398130 is beyond EOD, truncated [ 471.027125][ T9569] loop2: p2 start 1702059890 is beyond EOD, truncated [ 477.372446][ T1191] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 477.492334][ T9604] blktrace: Concurrent blktraces are not allowed on loop7 [ 477.911277][ T1191] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 477.926221][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.961994][ T1191] usb 3-1: Product: syz [ 477.966202][ T1191] usb 3-1: Manufacturer: syz [ 477.970807][ T1191] usb 3-1: SerialNumber: syz [ 478.073200][ T1191] usb 3-1: config 0 descriptor?? [ 480.092206][ T1191] mos7840 3-1:0.0: required endpoints missing [ 480.113865][ T1191] usb 3-1: USB disconnect, device number 25 [ 482.202454][ T9635] blktrace: Concurrent blktraces are not allowed on loop11 [ 485.982100][ T5804] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 486.182383][ T5804] usb 6-1: Using ep0 maxpacket: 16 [ 486.268376][ T5804] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 486.395489][ T5804] usb 6-1: config 0 has no interface number 0 [ 486.536445][ T5804] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 486.587128][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.633954][ T5804] usb 6-1: Product: syz [ 486.638244][ T5804] usb 6-1: Manufacturer: syz [ 486.652183][ T5804] usb 6-1: SerialNumber: syz [ 486.673375][ T5804] usb 6-1: config 0 descriptor?? [ 486.695512][ T5804] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 487.338000][ T9669] blktrace: Concurrent blktraces are not allowed on loop5 [ 488.434337][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -110) [ 488.484942][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 488.506687][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 488.522189][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 488.547963][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 488.560749][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 488.571203][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 488.688560][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 488.702104][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 488.732097][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 488.759891][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 488.851576][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 488.900955][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 489.521733][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 489.553227][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 489.592473][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 489.622347][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 489.662164][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 489.694004][ T5804] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 489.769510][ T5804] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 490.084462][ T5804] usb 6-1: USB disconnect, device number 9 [ 491.934737][ T9702] blktrace: Concurrent blktraces are not allowed on loop11 [ 493.202096][ T9699] capability: warning: `syz.3.1098' uses 32-bit capabilities (legacy support in use) [ 499.094533][ T9744] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1115'. [ 499.106452][ T5846] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 499.303526][ T5846] usb 6-1: Using ep0 maxpacket: 32 [ 499.313400][ T5846] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 499.321798][ T5846] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 499.362228][ T5846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 499.371265][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 499.412322][ T5846] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 499.442279][ T5846] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 499.472359][ T5846] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 499.481449][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.514748][ T5846] usb 6-1: config 0 descriptor?? [ 500.070118][ T5846] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 500.185130][ T5846] usb 6-1: USB disconnect, device number 10 [ 500.218744][ T5846] usblp0: removed [ 501.142489][ T5846] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 501.560700][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.567246][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.632469][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.732416][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 515.023045][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 515.044901][ T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 515.062069][ T9] usb 6-1: config 0 has no interface number 0 [ 515.068286][ T9] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.103002][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 515.115269][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.123411][ T9] usb 6-1: Product: syz [ 515.127677][ T9] usb 6-1: Manufacturer: syz [ 515.135300][ T9] usb 6-1: SerialNumber: syz [ 515.142429][ T9] usb 6-1: config 0 descriptor?? [ 515.149791][ T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 516.279566][ T9] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 516.302653][ T9] quatech2: probe of 6-1:0.51 failed with error -8 [ 516.425847][ T9894] netlink: 'syz.2.1167': attribute type 3 has an invalid length. [ 516.498410][ T5804] usb 6-1: USB disconnect, device number 12 [ 520.149346][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1179'. [ 527.112381][ T5846] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 527.312084][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 527.334910][ T5846] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 527.348249][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.374042][ T5846] usb 6-1: Product: syz [ 527.378259][ T5846] usb 6-1: Manufacturer: syz [ 527.388864][ T5846] usb 6-1: SerialNumber: syz [ 527.405120][ T5846] usb 6-1: config 0 descriptor?? [ 528.527319][ T5846] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 528.535845][ T5846] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -110 [ 530.821625][ T9] usb 6-1: USB disconnect, device number 13 [ 531.012046][ T5804] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 532.153616][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.181999][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.204985][ T5804] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 532.217735][ T5804] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 532.235157][ T5804] usb 3-1: Manufacturer: syz [ 532.249994][ T5804] usb 3-1: config 0 descriptor?? [ 533.151686][ T5804] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000A/input/input14 [ 533.453875][ T5804] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000A/input/input15 [ 533.542720][ T5804] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000A/input/input16 [ 533.744583][ T5804] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000A/input/input17 [ 535.052527][ T5804] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 535.082541][ T5804] usb 3-1: USB disconnect, device number 26 [ 540.066519][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'. [ 549.427518][T10168] netlink: 'syz.3.1255': attribute type 27 has an invalid length. [ 550.692383][T10176] /dev/nullb0: Can't lookup blockdev [ 551.832187][T10179] blktrace: Concurrent blktraces are not allowed on loop7 [ 552.733075][T10187] binder: BINDER_SET_CONTEXT_MGR already set [ 552.739971][T10187] binder: 10182:10187 ioctl 4018620d 2000000002c0 returned -16 [ 556.630067][T10190] Bluetooth: hci3: command 0x0406 tx timeout [ 558.468255][T10218] blktrace: Concurrent blktraces are not allowed on loop5 [ 562.926644][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.937755][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.368232][T10256] netlink: 'syz.5.1277': attribute type 27 has an invalid length. [ 565.283297][T10260] blktrace: Concurrent blktraces are not allowed on loop5 [ 568.516664][T10281] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1289'. [ 568.762207][ T5873] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 568.958046][ T5873] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 569.066430][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.090806][ T5873] usb 3-1: Product: syz [ 569.100760][ T5873] usb 3-1: Manufacturer: syz [ 569.109643][ T5873] usb 3-1: SerialNumber: syz [ 569.530204][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 572.993497][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 573.038840][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 573.062542][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 573.082606][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 573.782490][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 573.812936][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 573.832402][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 573.859556][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 573.872338][T10312] ptrace attach of "./syz-executor exec"[5760] was attempted by ""[10312] [ 573.881731][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 573.912640][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 573.932821][ T5873] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 573.962930][ T5873] lan78xx: probe of 3-1:1.0 failed with error -71 [ 573.985053][ T5873] usb 3-1: USB disconnect, device number 27 [ 574.170162][T10316] blktrace: Concurrent blktraces are not allowed on loop5 [ 577.043317][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 578.042022][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 578.083521][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 578.105165][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 578.118903][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.127357][ T9] usb 6-1: Product: syz [ 578.131782][ T9] usb 6-1: Manufacturer: syz [ 578.139180][ T9] usb 6-1: SerialNumber: syz [ 578.759427][ T9] usb 6-1: config 0 descriptor?? [ 578.924478][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 578.942497][ T9] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 580.526768][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 580.680730][ T9] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 580.706538][ T9] em28xx 6-1:0.0: board has no eeprom [ 580.812020][ T9] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 580.873833][ T9] em28xx 6-1:0.0: dvb set to bulk mode. [ 580.879451][ T1191] em28xx 6-1:0.0: Binding DVB extension [ 580.906692][ T9] usb 6-1: USB disconnect, device number 14 [ 580.930835][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 581.198373][ T1191] em28xx 6-1:0.0: Registering input extension [ 581.215869][ T9] em28xx 6-1:0.0: Closing input extension [ 581.233977][ T9] em28xx 6-1:0.0: Freeing device [ 582.550306][T10389] blktrace: Concurrent blktraces are not allowed on loop5 [ 584.868922][T10410] 9pnet: Found fid 0 not clunked [ 585.559043][T10421] blktrace: Concurrent blktraces are not allowed on loop1 [ 586.391495][T10426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1328'. [ 586.922645][ T5804] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 587.208484][ T5804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.251884][ T5804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.273697][ T5804] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 587.290608][ T5804] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 587.306635][ T5804] usb 6-1: Manufacturer: syz [ 587.313757][ T5804] usb 6-1: config 0 descriptor?? [ 589.496765][ T5804] usbhid 6-1:0.0: can't add hid device: -71 [ 589.512068][ T5804] usbhid: probe of 6-1:0.0 failed with error -71 [ 589.782321][ T5804] usb 6-1: USB disconnect, device number 15 [ 597.385055][T10487] blktrace: Concurrent blktraces are not allowed on loop11 [ 602.946967][T10513] blktrace: Concurrent blktraces are not allowed on loop11 [ 608.382732][T10561] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1380'. [ 608.642046][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 608.842228][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 608.855116][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.125400][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 610.125415][ T27] audit: type=1326 audit(2000000667.340:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb438f749 code=0x7ffc0000 [ 610.163137][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 610.172458][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.180540][ T9] usb 3-1: Product: syz [ 610.195514][ T27] audit: type=1326 audit(2000000667.370:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb438f749 code=0x7ffc0000 [ 610.241412][ T9] usb 3-1: Manufacturer: syz [ 610.246150][ T9] usb 3-1: SerialNumber: syz [ 610.253345][ T9] usb 3-1: config 0 descriptor?? [ 610.260298][ T9] cdc_ether 3-1:0.0: skipping garbage [ 610.272073][ T27] audit: type=1326 audit(2000000667.380:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb43c2005 code=0x7ffc0000 [ 610.294489][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.301404][ T9] usb 3-1: bad CDC descriptors [ 610.310842][ T9] usb 3-1: unsupported MDLM descriptors [ 610.319574][ T27] audit: type=1326 audit(2000000667.470:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb43c2005 code=0x7ffc0000 [ 610.347345][ T27] audit: type=1326 audit(2000000667.560:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb43c2005 code=0x7ffc0000 [ 610.374159][ T27] audit: type=1326 audit(2000000667.570:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb43c2005 code=0x7ffc0000 [ 610.396573][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.277541][ T5873] usb 3-1: USB disconnect, device number 28 [ 611.292486][ T27] audit: type=1326 audit(2000000667.610:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb43c2005 code=0x7ffc0000 [ 611.314915][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.362355][ T27] audit: type=1326 audit(2000000667.680:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb43c2005 code=0x7ffc0000 [ 611.411160][ T27] audit: type=1326 audit(2000000667.720:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb43c2005 code=0x7ffc0000 [ 611.452096][ T27] audit: type=1326 audit(2000000667.730:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10572 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb438f749 code=0x7ffc0000 [ 613.123519][ T5873] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 613.379520][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.424314][ T5873] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 613.462143][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 613.470197][ T5873] usb 6-1: Product: syz [ 613.502024][ T5873] usb 6-1: SerialNumber: syz [ 613.541098][ T5873] usb 6-1: config 0 descriptor?? [ 613.592143][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 613.777066][ T9] usb 6-1: USB disconnect, device number 16 [ 616.216746][ T7759] infiniband syz2: set down [ 616.263020][ T9] infiniband syz2: ib_query_port failed (-19) [ 616.315901][ T1131] smc: removing ib device syz2 [ 617.558687][ T1081] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.748910][ T1081] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.879220][ T1081] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.112231][ T1081] bond0: (slave netdevsim0): Releasing backup interface [ 618.164206][ T1081] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.465943][T10190] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 618.476876][T10190] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 618.485393][T10190] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 618.496298][T10190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 618.507371][T10190] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 618.523621][T10190] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 618.753618][T10689] blktrace: Concurrent blktraces are not allowed on loop5 [ 619.786970][T10686] chnl_net:caif_netlink_parms(): no params data found [ 620.731004][T10190] Bluetooth: hci3: command tx timeout [ 620.993691][T10721] random: crng reseeded on system resumption [ 621.912981][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.933741][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.940925][T10686] bridge_slave_0: entered allmulticast mode [ 621.975028][T10686] bridge_slave_0: entered promiscuous mode [ 622.085590][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.105032][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.115558][T10686] bridge_slave_1: entered allmulticast mode [ 622.927663][T10190] Bluetooth: hci3: command tx timeout [ 622.934104][T10686] bridge_slave_1: entered promiscuous mode [ 623.123201][T10686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.186359][T10686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.706665][T10738] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1437'. [ 624.365822][ T1081] bond1: (slave ip6gretap1): Releasing active interface [ 624.377528][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.383946][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.413165][ T1081] ip6gretap1 (unregistering): left allmulticast mode [ 625.688924][T10190] Bluetooth: hci3: command tx timeout [ 626.034687][T10686] team0: Port device team_slave_0 added [ 626.195150][T10686] team0: Port device team_slave_1 added [ 626.413194][T10686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.420173][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.537197][T10686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.562457][ T1191] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 626.682257][T10686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.702120][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.764700][ T1191] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 626.775692][T10686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.811967][ T1191] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 626.872034][ T1191] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.019791][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.722030][T10190] Bluetooth: hci3: command tx timeout [ 627.794826][ T1191] usb 3-1: config 0 descriptor?? [ 627.924540][T10686] hsr_slave_0: entered promiscuous mode [ 627.944707][ T1191] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 629.289132][T10686] hsr_slave_1: entered promiscuous mode [ 629.339013][T10686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.347414][T10686] Cannot create hsr debugfs directory [ 629.387466][ T788] usb 3-1: USB disconnect, device number 29 [ 629.512130][ T5874] IPVS: starting estimator thread 0... [ 629.612087][T10762] IPVS: using max 23 ests per chain, 55200 per kthread [ 629.807501][T10190] Bluetooth: hci3: command tx timeout [ 631.393392][T10774] program syz.0.1444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.412285][T10768] blktrace: Concurrent blktraces are not allowed on loop5 [ 632.727072][T10686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 632.816326][T10686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 632.885268][T10686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 633.060756][T10686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 633.169329][ T1081] hsr_slave_0: left promiscuous mode [ 633.209220][ T1081] hsr_slave_1: left promiscuous mode [ 633.327862][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.335663][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.403417][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.410831][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.489198][ T1081] bridge_slave_1: left allmulticast mode [ 633.498439][ T1081] bridge_slave_1: left promiscuous mode [ 633.504677][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.693960][ T1081] bridge_slave_0: left allmulticast mode [ 633.699627][ T1081] bridge_slave_0: left promiscuous mode [ 633.712289][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.042844][T10799] /dev/nullb0: Can't lookup blockdev [ 634.953846][ T1081] bond1: left allmulticast mode [ 634.974939][ T1081] bond1: left promiscuous mode [ 634.980874][ T1081] veth1_macvtap: left promiscuous mode [ 634.986754][ T1081] veth0_macvtap: left promiscuous mode [ 634.998598][ T1081] veth1_vlan: left promiscuous mode [ 635.004030][ T1081] veth0_vlan: left promiscuous mode [ 635.258778][ T1081] team0 (unregistering): Port device macvlan2 removed [ 636.630363][ T1081] bond1 (unregistering): Released all slaves [ 637.299748][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 637.346382][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 637.393935][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.439406][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.465747][ T5873] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 637.653834][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 637.660825][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 637.673838][ T5873] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 637.683208][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 637.691408][ T5873] usb 3-1: Product: syz [ 637.697119][ T5873] usb 3-1: Manufacturer: syz [ 637.701736][ T5873] usb 3-1: SerialNumber: syz [ 637.708991][ T5873] usb 3-1: config 0 descriptor?? [ 637.717327][T10814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 637.932195][ T5873] usb 3-1: USB disconnect, device number 30 [ 638.087496][ T1081] bond0 (unregistering): Released all slaves [ 638.416533][T10686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.480428][T10686] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.519018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.526205][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.547897][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.555071][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.027308][T10686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.753373][T10686] veth0_vlan: entered promiscuous mode [ 643.261596][T10686] veth1_vlan: entered promiscuous mode [ 643.418003][T10686] veth0_macvtap: entered promiscuous mode [ 643.458809][T10686] veth1_macvtap: entered promiscuous mode [ 643.961781][T10893] blktrace: Concurrent blktraces are not allowed on loop1 [ 644.708118][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.782423][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.824215][T10686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.854737][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.890072][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.909272][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.935709][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.966170][T10686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.007438][T10686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.062063][T10686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.070814][T10686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.108419][T10686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.332302][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.353701][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.390277][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 645.407132][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.459818][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.183987][T10924] blktrace: Concurrent blktraces are not allowed on loop5 [ 647.313810][T10932] trusted_key: encrypted_key: insufficient parameters specified [ 650.126628][T10962] netlink: 'syz.0.1493': attribute type 4 has an invalid length. [ 650.655527][T10964] blktrace: Concurrent blktraces are not allowed on loop5 [ 652.950657][T10985] sg_write: data in/out 2012/10 bytes for SCSI command 0xc0-- guessing data in; [ 652.950657][T10985] program syz.2.1495 not setting count and/or reply_len properly [ 657.480570][T11023] blktrace: Concurrent blktraces are not allowed on loop1 [ 658.212768][ T9] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 658.414168][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 658.433583][ T9] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 658.441414][ T9] usb 7-1: config 0 has no interfaces? [ 658.475396][ T9] usb 7-1: string descriptor 0 read error: -22 [ 658.481696][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=55.e2 [ 658.534342][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.554299][ T9] usb 7-1: config 0 descriptor?? [ 658.717139][ T5873] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 658.765101][ T9] usb 7-1: USB disconnect, device number 2 [ 658.932105][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 658.943085][ T5873] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 658.960371][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.980606][ T5873] usb 3-1: Product: syz [ 658.986272][ T5873] usb 3-1: Manufacturer: syz [ 659.027620][ T5873] usb 3-1: SerialNumber: syz [ 659.037134][ T5873] usb 3-1: config 0 descriptor?? [ 659.072187][ T5873] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 660.392565][T11045] tipc: Failed to remove unknown binding: 66,0,0/0:319163850/319163851 [ 660.705275][T11045] tipc: Failed to remove unknown binding: 66,0,0/0:319163850/319163851 [ 661.242070][ T5873] gspca_sonixj: i2c_w8 err -110 [ 661.682127][ T5873] sonixj: probe of 3-1:0.0 failed with error -110 [ 661.961993][T11050] blktrace: Concurrent blktraces are not allowed on loop7 [ 662.214619][ T5873] usb 3-1: USB disconnect, device number 31 [ 663.202658][ T5827] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 664.139060][ T5827] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 664.152070][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 664.163372][ T5827] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 664.212229][ T5827] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 664.219659][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 664.230661][ T5827] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 664.272649][ T5827] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 664.280119][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 664.292018][ T5827] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 664.349353][ T5827] usb 7-1: string descriptor 0 read error: -22 [ 664.356191][ T5827] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 664.367640][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.401238][ T5827] adutux 7-1:168.0: interrupt endpoints not found [ 664.614487][ T5827] usb 7-1: USB disconnect, device number 3 [ 666.262035][T11086] blktrace: Concurrent blktraces are not allowed on loop5 [ 668.435568][T11099] syz.6.1539[11099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.435696][T11099] syz.6.1539[11099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 673.275817][T11126] blktrace: Concurrent blktraces are not allowed on loop13 [ 678.558387][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 679.782156][ T788] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 679.989718][ T788] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 680.001250][ T788] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 680.023566][T11166] blktrace: Concurrent blktraces are not allowed on loop5 [ 680.098010][ T788] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 680.185882][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.227168][ T788] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 680.294164][ T788] snd-usb-audio: probe of 7-1:27.0 failed with error -2 [ 680.450453][T11162] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 680.842205][ T788] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 681.053826][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 681.078401][ T788] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 681.113734][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.162253][ T788] pvrusb2: Hardware description: Terratec Grabster AV400 [ 681.171968][ T788] pvrusb2: ********** [ 681.179873][ T788] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 681.212107][ T788] pvrusb2: Important functionality might not be entirely working. [ 681.222207][ T788] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 681.259840][ T788] pvrusb2: ********** [ 681.415538][ T2318] pvrusb2: Invalid write control endpoint [ 681.555267][ T788] usb 7-1: USB disconnect, device number 4 [ 681.565924][T11165] delete_channel: no stack [ 681.615436][ T2318] pvrusb2: Invalid write control endpoint [ 681.621468][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 681.669066][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 681.694009][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 681.721175][ T2318] pvrusb2: Device being rendered inoperable [ 681.748554][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 681.756086][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 681.767735][ T2318] pvrusb2: Attached sub-driver cx25840 [ 681.773480][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 681.784096][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 681.857205][ T5846] usb 3-1: USB disconnect, device number 32 [ 682.091993][ T788] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 682.389754][ T788] usb 7-1: Using ep0 maxpacket: 8 [ 682.401447][ T788] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 682.992935][ T788] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 683.005248][ T788] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 683.028697][ T788] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.176915][ T788] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 683.186353][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.356779][ T788] usb 7-1: usb_control_msg returned -32 [ 684.467517][ T788] usbtmc 7-1:16.0: can't read capabilities [ 685.199930][ T788] usb 7-1: USB disconnect, device number 5 [ 686.102999][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.109436][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.522077][ T5827] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 690.743040][T11243] hub 6-0:1.0: USB hub found [ 690.749054][T11243] hub 6-0:1.0: 1 port detected [ 690.764364][ T5827] usb 7-1: Using ep0 maxpacket: 32 [ 690.776972][ T5827] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 690.785527][ T5827] usb 7-1: config 0 has no interface number 0 [ 690.792411][ T5827] usb 7-1: config 0 interface 12 has no altsetting 0 [ 690.808325][ T5827] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 690.818059][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.826248][ T5827] usb 7-1: Product: syz [ 690.830660][ T5827] usb 7-1: Manufacturer: syz [ 690.835826][ T5827] usb 7-1: SerialNumber: syz [ 691.433089][ T5827] usb 7-1: config 0 descriptor?? [ 694.078033][ T5827] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 694.092552][ T5827] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 694.099897][ T5827] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 694.107746][ T5827] f81534: probe of 7-1:0.12 failed with error -71 [ 694.122390][ T5827] usb 7-1: USB disconnect, device number 6 [ 694.202495][T11262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1581'. [ 697.041727][T11285] fuse: Bad value for 'fd' [ 700.223698][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1601'. [ 701.725712][T11348] overlayfs: overlapping lowerdir path [ 705.366474][T11375] random: crng reseeded on system resumption [ 707.558154][T11387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1623'. [ 714.556345][T11441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1641'. [ 719.766834][T11477] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 719.773494][T11477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 719.809308][T11477] vhci_hcd vhci_hcd.0: Device attached [ 720.692472][ T5873] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 720.831736][T11488] net_ratelimit: 1 callbacks suppressed [ 720.831752][T11488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.338141][T11478] vhci_hcd: connection reset by peer [ 723.370250][ T59] vhci_hcd: stop threads [ 723.374790][ T59] vhci_hcd: release socket [ 723.410234][ T59] vhci_hcd: disconnect device [ 724.206035][T11512] blktrace: Concurrent blktraces are not allowed on loop1 [ 725.812310][ T5873] vhci_hcd: vhci_device speed not set [ 726.740573][T11532] syz.3.1665 (11532) used greatest stack depth: 17960 bytes left [ 730.227701][T11550] blktrace: Concurrent blktraces are not allowed on loop1 [ 734.660336][T11593] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 735.429338][T11595] blktrace: Concurrent blktraces are not allowed on loop1 [ 741.115359][T11650] loop6: detected capacity change from 0 to 7 [ 741.127162][T11650] Dev loop6: unable to read RDB block 7 [ 741.133719][T11650] loop6: AHDI p3 p4 [ 741.137664][T11650] loop6: partition table partially beyond EOD, truncated [ 741.146037][T11650] loop6: p3 start 1886353253 is beyond EOD, truncated [ 742.041345][T11670] binder: 11663:11670 ioctl c0306201 200000000c80 returned -14 [ 742.570840][T11672] input: syz1 as /devices/virtual/input/input20 [ 743.924645][T11680] syz.2.1709 (11680): drop_caches: 2 [ 747.246440][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.262443][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.392961][T11735] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.511139][T11735] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.618866][T11735] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.715377][T11735] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.745658][T11735] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.770621][T11735] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.797463][T11735] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.836059][T11735] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.224062][T11806] netlink: 'syz.0.1752': attribute type 4 has an invalid length. [ 755.652355][ T1191] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 756.624060][ T1191] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.624104][ T1191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 756.624124][ T1191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 756.624142][ T1191] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.624179][ T1191] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 756.624198][ T1191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.629574][ T1191] usb 7-1: config 0 descriptor?? [ 756.863159][ T5804] usb 7-1: USB disconnect, device number 7 [ 758.230856][T11837] overlayfs: upper fs does not support file handles, falling back to index=off. [ 766.552742][T11894] kvm: user requested TSC rate below hardware speed [ 767.007159][T11914] netlink: 'syz.2.1788': attribute type 39 has an invalid length. [ 767.163079][T11918] loop8: detected capacity change from 0 to 8 [ 767.173628][T11918] Dev loop8: unable to read RDB block 8 [ 767.179259][T11918] loop8: unable to read partition table [ 767.185293][T11918] loop8: partition table beyond EOD, truncated [ 767.191546][T11918] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 772.150444][T11994] tipc: Started in network mode [ 772.159951][T11994] tipc: Node identity 8601328df103, cluster identity 4711 [ 772.168813][T11994] tipc: Enabled bearer , priority 0 [ 772.192164][ T5846] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 772.211290][T11994] tipc: Resetting bearer [ 772.238143][T11993] tipc: Disabling bearer [ 774.149865][ T5846] usb 7-1: Using ep0 maxpacket: 16 [ 774.152513][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.166832][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.177989][ T5846] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 774.190997][ T5846] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 774.200514][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.211211][ T5846] usb 7-1: config 0 descriptor?? [ 774.651178][ T5846] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 774.672059][ T5846] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 774.679071][ T5846] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 774.702137][ T5846] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 774.709149][ T5846] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 774.740890][ T5846] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 775.606258][ T5846] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 775.627984][ T5846] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 776.835074][ T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 776.884509][ T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 776.925906][ T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 776.946896][ T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 776.992785][ T5846] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 778.430639][T11890] usb 7-1: USB disconnect, device number 8 [ 784.343458][ T5873] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 785.267033][ T5873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 785.288277][ T5873] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 785.299260][ T5873] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 785.312941][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.327325][T12127] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 785.340254][ T5873] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 785.566197][ T5873] usb 3-1: USB disconnect, device number 33 [ 789.972295][ T5846] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 791.412194][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 791.433727][ T5846] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 791.451999][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.482170][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 791.502214][ T5846] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 791.511524][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.545910][ T5846] usb 3-1: config 0 descriptor?? [ 791.618972][ T5846] usbhid 3-1:0.0: can't add hid device: -71 [ 791.646752][ T5846] usbhid: probe of 3-1:0.0 failed with error -71 [ 791.665148][ T5846] usb 3-1: USB disconnect, device number 34 [ 797.432171][ T5804] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 798.833019][ T5804] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.845025][ T5804] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.856719][ T5804] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 798.870790][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 798.889632][ T5804] usb 7-1: SerialNumber: syz [ 800.092339][ T5804] usb 7-1: 0:2 : does not exist [ 800.097265][ T5804] usb 7-1: unit 255 not found! [ 800.163789][ T5804] usb 7-1: 5:0: cannot get min/max values for control 6 (id 5) [ 800.197044][ T5804] usb 7-1: 5:0: cannot get min/max values for control 13 (id 5) [ 800.241180][ T5804] usb 7-1: 5:0: cannot get min/max values for control 17 (id 5) [ 800.259452][ T5804] usb 7-1: USB disconnect, device number 9 [ 801.041079][T12238] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 805.285717][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'. [ 805.821650][ T5873] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 806.059451][ T5873] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 806.076835][ T5873] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 806.086274][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.101853][ T5873] usb 3-1: Product: syz [ 806.106071][ T5873] usb 3-1: Manufacturer: syz [ 806.164298][ T5873] usb 3-1: SerialNumber: syz [ 806.176317][ T5873] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 806.291320][ T5804] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 806.518642][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.529238][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.539082][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.550136][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.564505][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.576714][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.637573][ T5873] usb 3-1: USB disconnect, device number 35 [ 807.316983][ T5804] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 807.324431][ T5804] ath9k_htc: Failed to initialize the device [ 807.333917][ T5873] usb 3-1: ath9k_htc: USB layer deinitialized [ 807.697218][ T5873] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 808.586390][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 808.604662][ T5873] usb 3-1: device descriptor read/all, error -71 [ 809.477626][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.483925][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.168238][ T5873] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 811.138683][ T5873] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 811.168383][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.188661][ T5873] usb 3-1: Product: syz [ 811.193412][ T5873] usb 3-1: Manufacturer: syz [ 811.198096][ T5873] usb 3-1: SerialNumber: syz [ 811.205033][ T5873] usb 3-1: config 0 descriptor?? [ 811.213212][ T5873] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 812.804250][ T5873] gspca_stk1135: reg_w 0x2 err -110 [ 812.810526][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 812.833945][ T5873] gspca_stk1135: Sensor write failed [ 812.839732][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 812.846414][ T5873] gspca_stk1135: Sensor write failed [ 812.851822][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 812.859174][ T5873] gspca_stk1135: Sensor read failed [ 812.864501][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 812.876725][ T5873] gspca_stk1135: Sensor read failed [ 812.882411][ T5873] gspca_stk1135: Detected sensor type unknown (0x0) [ 812.889454][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 812.897142][ T5873] gspca_stk1135: Sensor read failed [ 812.908509][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 812.914974][ T5873] gspca_stk1135: Sensor read failed [ 812.920275][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 812.926875][ T5873] gspca_stk1135: Sensor write failed [ 812.932773][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 812.939193][ T5873] gspca_stk1135: Sensor write failed [ 812.944888][ T5873] stk1135: probe of 3-1:0.0 failed with error -110 [ 812.961591][ T5873] usb 3-1: USB disconnect, device number 37 [ 813.427628][ T5873] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 813.643868][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 813.662718][ T5873] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 813.694101][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.732368][ T5873] pvrusb2: Hardware description: Terratec Grabster AV400 [ 813.773240][ T5873] pvrusb2: ********** [ 813.783762][ T5873] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 813.816780][ T5873] pvrusb2: Important functionality might not be entirely working. [ 813.833756][ T5873] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 813.858114][ T5873] pvrusb2: ********** [ 813.932815][ T2318] pvrusb2: Invalid write control endpoint [ 814.114865][ T2318] pvrusb2: Invalid write control endpoint [ 814.159405][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 814.227316][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 814.466178][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 814.731543][ T2318] pvrusb2: Device being rendered inoperable [ 814.783344][T12369] pvrusb2: Attempted to execute control transfer when device not ok [ 814.813837][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 814.820956][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 814.842771][ T9] usb 3-1: USB disconnect, device number 38 [ 814.864177][ T2318] pvrusb2: Attached sub-driver cx25840 [ 814.869674][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 814.880519][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 816.430305][T12428] KVM: debugfs: duplicate directory 12428-5 [ 816.582778][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 817.532015][ T5873] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 817.612063][ T5804] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 817.765846][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 817.781891][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 817.792759][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 817.815519][ T5873] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 817.826966][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.839470][ T5804] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 817.851561][ T5873] usb 7-1: Product: syz [ 817.857768][ T5873] usb 7-1: Manufacturer: syz [ 817.863327][ T5804] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 817.881332][ T5873] usb 7-1: SerialNumber: syz [ 817.989534][ T5873] usb 7-1: config 0 descriptor?? [ 817.994775][ T5804] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 818.004742][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.005157][T12440] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 818.022866][T12447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 818.166188][ T5804] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 818.731758][ T5846] usb 7-1: USB disconnect, device number 10 [ 818.828595][ T5804] usb 3-1: USB disconnect, device number 39 [ 823.380399][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 823.380412][ T27] audit: type=1326 audit(6291402460.134:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12499 comm="syz.6.1957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6008f8f749 code=0x0 [ 823.541370][T12507] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 838.922282][ T27] audit: type=1326 audit(6291402475.672:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1638f749 code=0x7ffc0000 [ 838.995851][ T27] audit: type=1326 audit(6291402475.682:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1638f749 code=0x7ffc0000 [ 839.062605][ T27] audit: type=1326 audit(6291402475.712:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e1638f749 code=0x7ffc0000 [ 839.121197][ T27] audit: type=1326 audit(6291402475.712:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1638f749 code=0x7ffc0000 [ 839.171136][ T27] audit: type=1326 audit(6291402475.712:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1638f749 code=0x7ffc0000 [ 840.030720][ T27] audit: type=1326 audit(6291402475.722:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e1638f749 code=0x7ffc0000 [ 840.090794][ T27] audit: type=1326 audit(6291402475.722:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1638f749 code=0x7ffc0000 [ 840.147929][ T27] audit: type=1326 audit(6291402475.722:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1638f749 code=0x7ffc0000 [ 844.451969][T12684] overlayfs: failed to clone lowerpath [ 844.747292][T12688] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2021'. [ 850.513144][T12723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2026'. [ 850.526697][T12723] netlink: get zone limit has 8 unknown bytes [ 850.620286][T12725] 9pnet_virtio: no channels available for device syz [ 870.090094][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.098425][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.821120][T12882] QAT: failed to copy from user cfg_data. [ 873.571251][T12884] TCP: TCP_TX_DELAY enabled [ 873.634805][T12886] bridge0: port 3(macsec0) entered blocking state [ 873.651343][T12886] bridge0: port 3(macsec0) entered disabled state [ 873.667586][T12886] macsec0: entered allmulticast mode [ 873.683159][T12886] veth1_macvtap: entered allmulticast mode [ 873.729132][T12886] macsec0: entered promiscuous mode [ 873.745115][T12886] bridge0: port 3(macsec0) entered blocking state [ 873.753168][T12886] bridge0: port 3(macsec0) entered forwarding state [ 875.747927][T12908] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2093'. [ 879.031668][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 884.178498][T13006] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 885.293437][T13018] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 885.319839][T13018] CIFS mount error: No usable UNC path provided in device string! [ 885.319839][T13018] [ 885.330369][T13018] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 887.756877][T13020] Bluetooth: hci3: command 0x0406 tx timeout [ 888.866345][T11890] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 889.836253][T11890] usb 3-1: config 0 has no interfaces? [ 889.841782][T11890] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 889.870684][T11890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.881526][T11890] usb 3-1: config 0 descriptor?? [ 890.108607][T11890] usb 3-1: USB disconnect, device number 40 [ 894.010624][T13093] overlayfs: failed to clone upperpath [ 899.229503][T13142] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2165'. [ 908.477906][T13220] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2195'. [ 918.084196][T13320] 9pnet_fd: Insufficient options for proto=fd [ 919.266613][T13344] overlayfs: failed to clone upperpath [ 921.360412][T13368] netlink: 'syz.2.2241': attribute type 2 has an invalid length. [ 921.412680][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2243'. [ 923.912776][T13020] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 923.923910][T13020] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 923.935354][T13020] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 923.943626][T13020] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 923.952583][T13020] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 923.960465][T13020] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 926.131810][T10190] Bluetooth: hci0: command tx timeout [ 926.367642][T13400] chnl_net:caif_netlink_parms(): no params data found [ 926.657792][T13400] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.667692][T13400] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.675425][T13400] bridge_slave_0: entered allmulticast mode [ 926.683035][T13400] bridge_slave_0: entered promiscuous mode [ 926.760573][T13400] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.775399][T13400] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.794558][T13400] bridge_slave_1: entered allmulticast mode [ 926.802436][T13400] bridge_slave_1: entered promiscuous mode [ 927.543655][T13400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.574134][T13400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.344476][T10190] Bluetooth: hci0: command tx timeout [ 928.635286][T13400] team0: Port device team_slave_0 added [ 928.654199][T13400] team0: Port device team_slave_1 added [ 929.601813][T13400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.608804][T13400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.681468][T13400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.812240][T13400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.836606][T13400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.959899][T13400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.196914][T13400] hsr_slave_0: entered promiscuous mode [ 930.214696][T13400] hsr_slave_1: entered promiscuous mode [ 930.244042][T13400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 930.278148][T13400] Cannot create hsr debugfs directory [ 930.301699][T13459] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2266'. [ 930.391324][T10190] Bluetooth: hci0: command tx timeout [ 930.563467][T13460] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2266'. [ 931.517254][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.528246][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.758049][ T12] hsr_slave_0: left promiscuous mode [ 931.866212][ T12] hsr_slave_1: left promiscuous mode [ 931.895215][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.934125][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.947875][ T12] bridge_slave_1: left allmulticast mode [ 931.953910][ T12] bridge_slave_1: left promiscuous mode [ 931.960296][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.969529][ T12] bridge_slave_0: left allmulticast mode [ 931.975261][ T12] bridge_slave_0: left promiscuous mode [ 931.981007][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.482928][T10190] Bluetooth: hci0: command tx timeout [ 935.210342][T13506] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 935.252847][ T12] team0 (unregistering): Port device team_slave_1 removed [ 935.423608][ T12] team0 (unregistering): Port device team_slave_0 removed [ 935.556515][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.703325][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.284311][ T12] bond0 (unregistering): Released all slaves [ 938.706034][T13551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.848453][ T12] IPVS: stop unused estimator thread 0... [ 938.937400][T13400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 938.952721][T13400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 938.964645][T13400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 938.976118][T13400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 939.044314][T13400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.065395][T13400] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.079240][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.086444][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.102678][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.109844][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.320400][T13400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.373828][T13400] veth0_vlan: entered promiscuous mode [ 939.396536][T13400] veth1_vlan: entered promiscuous mode [ 940.765115][T13400] veth0_macvtap: entered promiscuous mode [ 940.798452][T13400] veth1_macvtap: entered promiscuous mode [ 940.819590][T13400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.831861][T13400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.848411][T13400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.865536][T13400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.892595][T13400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.909318][T13400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.925664][T13400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.939735][T13400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.955677][T13400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.970625][T13400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.981381][T13400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.996050][T13400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.027568][T13400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.044379][T13400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.081284][T13400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.090050][T13400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.369739][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.397580][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.879206][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.011896][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.580540][ T27] audit: type=1326 audit(2000000046.730:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 945.603521][ T27] audit: type=1326 audit(2000000046.740:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 946.302830][ T27] audit: type=1326 audit(2000000047.460:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 946.345495][ T27] audit: type=1326 audit(2000000047.460:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 946.396389][ T27] audit: type=1326 audit(2000000047.460:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 946.471730][ T27] audit: type=1326 audit(2000000047.460:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 946.494660][ T27] audit: type=1326 audit(2000000047.460:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 946.521527][ T27] audit: type=1326 audit(2000000047.460:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 946.544744][ T27] audit: type=1326 audit(2000000047.460:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 947.473129][ T27] audit: type=1326 audit(2000000047.460:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.6.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6008f8f749 code=0x7fc00000 [ 954.136413][T13732] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 960.066374][T13791] mkiss: ax0: crc mode is auto. [ 961.594021][T13813] overlayfs: failed to clone upperpath [ 964.041867][T13832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2387'. [ 965.593477][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 965.593491][ T27] audit: type=1326 audit(2000000066.740:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 965.749829][ T27] audit: type=1326 audit(2000000066.750:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 965.772760][ T27] audit: type=1326 audit(2000000066.750:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 966.455717][T13861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2398'. [ 966.727016][ T27] audit: type=1326 audit(2000000066.750:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 966.773020][ T27] audit: type=1326 audit(2000000066.750:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 966.796598][ T27] audit: type=1326 audit(2000000066.780:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 966.851195][ T27] audit: type=1326 audit(2000000066.780:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 967.528257][ T27] audit: type=1326 audit(2000000066.780:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 967.826814][ T27] audit: type=1326 audit(2000000066.780:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 967.867349][ T27] audit: type=1326 audit(2000000066.780:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12cd8f749 code=0x7ffc0000 [ 978.656246][T14019] netlink: 'syz.6.2455': attribute type 10 has an invalid length. [ 978.692585][T14019] veth0_vlan: left promiscuous mode [ 978.707626][T14019] veth0_vlan: entered promiscuous mode [ 978.720948][T14019] team0: Device veth0_vlan failed to register rx_handler [ 978.821319][ T1191] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 979.008762][ T1191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.020947][ T1191] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 979.030094][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.045396][ T1191] usb 3-1: config 0 descriptor?? [ 979.058182][ T1191] pwc: Askey VC010 type 2 USB webcam detected. [ 979.259801][ T1191] pwc: send_video_command error -71 [ 979.265503][ T1191] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 979.274941][ T1191] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 979.283443][ T1191] usb 3-1: USB disconnect, device number 41 [ 979.474736][T14029] fuse: Bad value for 'fd' [ 979.871202][ T1191] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 980.053358][ T1191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.064877][ T1191] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 980.074340][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.085416][ T1191] usb 3-1: config 0 descriptor?? [ 980.104711][ T1191] pwc: Askey VC010 type 2 USB webcam detected. [ 980.702333][ T1191] pwc: recv_control_msg error -71 req 02 val 2700 [ 980.709165][ T1191] pwc: recv_control_msg error -71 req 02 val 2c00 [ 980.716032][ T1191] pwc: recv_control_msg error -71 req 04 val 1000 [ 980.722795][ T1191] pwc: recv_control_msg error -71 req 04 val 1300 [ 980.729500][ T1191] pwc: recv_control_msg error -71 req 04 val 1400 [ 980.736257][ T1191] pwc: recv_control_msg error -71 req 02 val 2000 [ 980.743045][ T1191] pwc: recv_control_msg error -71 req 02 val 2100 [ 980.749789][ T1191] pwc: recv_control_msg error -71 req 04 val 1500 [ 980.756952][ T1191] pwc: recv_control_msg error -71 req 02 val 2500 [ 980.763957][ T1191] pwc: recv_control_msg error -71 req 02 val 2400 [ 980.770819][ T1191] pwc: recv_control_msg error -71 req 02 val 2600 [ 980.777808][ T1191] pwc: recv_control_msg error -71 req 02 val 2900 [ 980.784721][ T1191] pwc: recv_control_msg error -71 req 02 val 2800 [ 980.791913][ T1191] pwc: recv_control_msg error -71 req 04 val 1100 [ 980.805231][ T1191] pwc: recv_control_msg error -71 req 04 val 1200 [ 980.814372][ T1191] pwc: Registered as video103. [ 980.820739][ T1191] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 980.846023][ T1191] usb 3-1: USB disconnect, device number 42 [ 980.862096][T10190] Bluetooth: min 0 < 6 [ 981.536426][T14070] fuse: Bad value for 'fd' [ 981.576963][T14072] overlayfs: failed to clone upperpath [ 982.004054][T14080] vxcan1: left promiscuous mode [ 982.008947][T14080] vxcan1: entered allmulticast mode [ 982.871234][T10190] Bluetooth: hci3: command 0x0406 tx timeout [ 984.438508][T14150] syzkaller1: entered promiscuous mode [ 984.444915][T14150] syzkaller1: entered allmulticast mode [ 984.767624][ T788] libceph: connect (1)[c::]:6789 error -101 [ 984.773980][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 984.808187][T14160] ceph: No mds server is up or the cluster is laggy [ 985.031297][ T5846] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 985.233047][ T5846] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 985.243122][ T5846] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 985.253057][ T5846] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.270401][ T5846] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 985.279643][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.287737][ T5846] usb 3-1: Product: syz [ 985.292211][ T5846] usb 3-1: Manufacturer: syz [ 985.296834][ T5846] usb 3-1: SerialNumber: syz [ 985.306268][ T5846] usblp0: Disabling reads from problematic bidirectional printer [ 985.343658][T10190] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 985.519037][ T5846] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 985.723634][ T788] usb 3-1: USB disconnect, device number 43 [ 985.740833][ T788] usblp0: removed [ 986.266961][T10190] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 986.613393][T14220] tipc: Enabling of bearer rejected, failed to enable media [ 986.688710][T10190] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 987.122494][ T788] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 987.301244][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 987.307867][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 987.323047][ T788] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 987.332198][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.340204][ T788] usb 3-1: Product: syz [ 987.344681][ T788] usb 3-1: Manufacturer: syz [ 987.349315][ T788] usb 3-1: SerialNumber: syz [ 987.355916][ T788] usb 3-1: config 0 descriptor?? [ 987.364440][ T788] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 987.373754][ T788] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 987.968745][ T788] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 988.987290][ T788] em28xx 3-1:0.0: board has no eeprom [ 989.261583][ T788] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 989.270141][ T788] em28xx 3-1:0.0: dvb set to bulk mode. [ 989.276011][ T5804] em28xx 3-1:0.0: Binding DVB extension [ 989.286291][ T788] usb 3-1: USB disconnect, device number 44 [ 989.293603][ T788] em28xx 3-1:0.0: Disconnecting em28xx [ 989.319759][ T5804] em28xx 3-1:0.0: Registering input extension [ 989.327130][ T788] em28xx 3-1:0.0: Closing input extension [ 989.340428][ T788] em28xx 3-1:0.0: Freeing device [ 989.393289][T14284] syzkaller1: entered promiscuous mode [ 989.399094][T14284] syzkaller1: entered allmulticast mode [ 990.311314][T10190] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 990.322078][T10190] Bluetooth: hci0: Injecting HCI hardware error event [ 990.331195][T13020] Bluetooth: hci0: hardware error 0x00 [ 992.044316][T14320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 992.054948][T14320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 992.064460][T14320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 992.075483][T14320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 992.084441][T14320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 992.092165][T14320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 992.340906][ T239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.370040][T14356] chnl_net:caif_netlink_parms(): no params data found [ 992.391529][T13020] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 992.443902][ T239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.511536][ T239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.527085][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.536094][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.543503][T14356] bridge_slave_0: entered allmulticast mode [ 992.551240][T14356] bridge_slave_0: entered promiscuous mode [ 992.560457][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.567668][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.575244][T14356] bridge_slave_1: entered allmulticast mode [ 992.582857][T14356] bridge_slave_1: entered promiscuous mode [ 992.617184][ T239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.642115][T13020] Bluetooth: hci3: command 0x0406 tx timeout [ 992.667511][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.679974][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.731562][T14356] team0: Port device team_slave_0 added [ 992.739936][T14356] team0: Port device team_slave_1 added [ 992.781368][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.788853][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.816161][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.830781][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.837888][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.865691][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.940500][T14356] hsr_slave_0: entered promiscuous mode [ 992.965633][T14356] hsr_slave_1: entered promiscuous mode [ 992.973340][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.981261][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.014902][ T239] tipc: Left network mode [ 993.513816][T14385] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2612'. [ 993.592455][ T1191] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 993.733121][T14393] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 993.742424][T14393] overlayfs: missing 'lowerdir' [ 993.785686][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.796969][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.807099][ T1191] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 993.813125][T13020] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 993.821257][ T1191] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.836315][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.852136][ T1191] usb 3-1: config 0 descriptor?? [ 993.995230][ T239] hsr_slave_0: left promiscuous mode [ 994.002088][ T239] hsr_slave_1: left promiscuous mode [ 994.008594][ T239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.016446][ T239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.024565][ T239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.032167][ T239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.039971][ T239] bridge_slave_1: left allmulticast mode [ 994.045831][ T239] bridge_slave_1: left promiscuous mode [ 994.051565][ T239] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.060030][ T239] bridge_slave_0: left allmulticast mode [ 994.071171][ T239] bridge_slave_0: left promiscuous mode [ 994.076962][ T239] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.110909][ T239] veth1_macvtap: left promiscuous mode [ 994.117992][ T239] veth0_macvtap: left promiscuous mode [ 994.124730][ T239] veth1_vlan: left promiscuous mode [ 994.130051][ T239] veth0_vlan: left promiscuous mode [ 994.151540][T13020] Bluetooth: hci1: command tx timeout [ 994.277942][ T239] pimreg (unregistering): left allmulticast mode [ 994.291997][ T1191] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 994.384394][ T1191] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 994.503497][ T1191] usb 3-1: USB disconnect, device number 45 [ 994.854654][ T239] team0 (unregistering): Port device team_slave_1 removed [ 994.920946][ T239] team0 (unregistering): Port device team_slave_0 removed [ 994.997640][ T239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.085432][ T239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.237072][T14412] overlayfs: failed to clone upperpath [ 995.864015][ T239] bond0 (unregistering): Released all slaves [ 996.008594][T14356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 996.029182][T14356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 996.042905][T14356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 996.071461][T14356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 996.233382][T10190] Bluetooth: hci1: command tx timeout [ 996.325085][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.350471][ T239] IPVS: stop unused estimator thread 0... [ 996.351026][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.381655][T12415] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.388812][T12415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.399740][T12415] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.406952][T12415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.608973][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2639'. [ 996.689387][T14356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.748250][T14356] veth0_vlan: entered promiscuous mode [ 996.767468][T14356] veth1_vlan: entered promiscuous mode [ 996.812323][T14356] veth0_macvtap: entered promiscuous mode [ 996.823891][T14356] veth1_macvtap: entered promiscuous mode [ 996.844001][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.855141][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.865115][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.876196][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.888225][T14356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.909235][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.919947][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.929905][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.940923][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.951439][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.961922][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.973676][T14356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.990832][T14356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.000047][T14356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.009225][T14356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.018174][T14356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.143519][T12415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.162753][T12415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.197116][T12415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.209543][T12415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.431703][T10190] Bluetooth: hci4: command 0x1003 tx timeout [ 997.431810][T13020] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 998.551297][T13020] Bluetooth: hci3: command 0x0406 tx timeout [ 998.627488][T10190] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 998.642540][T10190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 998.650817][T10190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 998.660528][T10190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 998.669303][T10190] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 998.677282][T10190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 999.191071][T14487] chnl_net:caif_netlink_parms(): no params data found [ 999.257432][T14508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 999.263996][T14508] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 999.275718][T14508] vhci_hcd vhci_hcd.0: Device attached [ 999.285880][T14509] usbip_core: unknown command [ 999.290953][T14509] vhci_hcd: unknown pdu 0 [ 999.300719][T14509] usbip_core: unknown command [ 999.311149][ T8728] vhci_hcd: stop threads [ 999.315448][ T8728] vhci_hcd: release socket [ 999.337594][ T8728] vhci_hcd: disconnect device [ 999.347345][T14487] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.355262][T13020] Bluetooth: hci1: command tx timeout [ 999.369219][T14487] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.376691][T14487] bridge_slave_0: entered allmulticast mode [ 999.384290][T14487] bridge_slave_0: entered promiscuous mode [ 999.393590][T14487] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.401311][T14487] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.408540][T14487] bridge_slave_1: entered allmulticast mode [ 999.415949][T14487] bridge_slave_1: entered promiscuous mode [ 999.459048][T14487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.479403][T14487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.521289][T14487] team0: Port device team_slave_0 added [ 999.528797][T14487] team0: Port device team_slave_1 added [ 999.554284][T14487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.562104][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.588414][T14487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.601175][T14487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.608259][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.634560][T14487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.673060][T14487] hsr_slave_0: entered promiscuous mode [ 999.679367][T14487] hsr_slave_1: entered promiscuous mode [ 999.685601][T14487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.693439][T14487] Cannot create hsr debugfs directory [ 999.813878][T14487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.918235][T14487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.017473][T14487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.062203][T14523] tipc: Enabling of bearer rejected, failed to enable media [ 1000.105981][T14487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.181726][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1000.222769][T14529] overlayfs: failed to clone upperpath [ 1000.321033][T14487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1000.330402][T14487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1000.339811][T14487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1000.349256][T14487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1000.385491][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1000.394735][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.415100][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.427959][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1000.434885][T14487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.455742][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1000.458915][T14487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.484360][T12415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.491555][T12415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.500578][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.519508][T12415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.526664][T12415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.535275][ T9] usb 3-1: config 0 descriptor?? [ 1000.721601][T13020] Bluetooth: hci2: command tx timeout [ 1000.890351][T14487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.938923][T14487] veth0_vlan: entered promiscuous mode [ 1000.952874][T14487] veth1_vlan: entered promiscuous mode [ 1000.969087][ T9] nzxt-smart2 0003:1E71:2009.000D: unbalanced collection at end of report description [ 1000.985070][T14487] veth0_macvtap: entered promiscuous mode [ 1000.995010][ T9] nzxt-smart2: probe of 0003:1E71:2009.000D failed with error -22 [ 1000.997860][T14487] veth1_macvtap: entered promiscuous mode [ 1001.020598][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.033631][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.043557][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.054092][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.064320][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.075436][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.086742][T14487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.100119][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.110857][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.121439][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.131905][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.142202][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.152690][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.162558][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.170093][T12370] usb 3-1: USB disconnect, device number 46 [ 1001.173099][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.174932][T14487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.203169][T14487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.212726][T14487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.222161][T14487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.230865][T14487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.309356][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.325360][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.359345][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.367361][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.598745][ T5846] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1001.631918][ T5846] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1002.451855][T12415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.546761][T12415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.591379][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1002.647139][T12415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.758787][T12415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.783317][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1002.813509][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1002.838461][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.872927][ T9] usb 4-1: config 0 descriptor?? [ 1002.986582][T10190] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1003.010840][T10190] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1003.024486][T10190] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1003.033639][T10190] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1003.046346][T10190] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1003.054723][T10190] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1003.109808][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1003.116274][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 1003.125679][ T9] usb 4-1: USB disconnect, device number 20 [ 1003.337967][T14591] chnl_net:caif_netlink_parms(): no params data found [ 1003.438942][T14591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.446167][T14591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.453779][T14591] bridge_slave_0: entered allmulticast mode [ 1003.460615][T14591] bridge_slave_0: entered promiscuous mode [ 1003.470222][T14591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.477424][T14591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.484968][T14591] bridge_slave_1: entered allmulticast mode [ 1003.493778][T14591] bridge_slave_1: entered promiscuous mode [ 1003.540866][T14591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.555895][T14591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.606492][T14591] team0: Port device team_slave_0 added [ 1003.622168][T14591] team0: Port device team_slave_1 added [ 1003.698607][T14591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.705800][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.732680][T14591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.803251][T14591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.810335][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.848778][T14591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.120561][T14591] hsr_slave_0: entered promiscuous mode [ 1004.140713][T14591] hsr_slave_1: entered promiscuous mode [ 1004.149507][T14591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1004.157375][T14591] Cannot create hsr debugfs directory [ 1004.206203][T12415] hsr_slave_0: left promiscuous mode [ 1004.225311][T12415] hsr_slave_1: left promiscuous mode [ 1004.235537][T12415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.251319][T12415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.269595][T12415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.288928][T12415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.312399][T13020] Bluetooth: hci2: command tx timeout [ 1004.313803][T12415] bridge_slave_1: left allmulticast mode [ 1004.323738][T12415] bridge_slave_1: left promiscuous mode [ 1004.329654][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.344978][T12415] bridge_slave_0: left allmulticast mode [ 1004.350841][T12415] bridge_slave_0: left promiscuous mode [ 1004.356909][T12415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.384578][T12415] veth1_macvtap: left promiscuous mode [ 1004.390096][T12415] veth0_macvtap: left promiscuous mode [ 1004.396856][T12415] veth1_vlan: left promiscuous mode [ 1004.403276][T12415] veth0_vlan: left promiscuous mode [ 1004.571227][ T5804] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1004.761318][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 1005.013453][ T5804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1005.027589][ T5804] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1005.037558][ T5804] usb 4-1: can't read configurations, error -71 [ 1005.103233][T12415] team0 (unregistering): Port device team_slave_1 removed [ 1005.111844][T13020] Bluetooth: hci1: command tx timeout [ 1005.163896][T12415] team0 (unregistering): Port device team_slave_0 removed [ 1005.232418][T12415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.302689][T12415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.791524][ T9] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1005.994528][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.007179][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1006.007348][T12415] bond0 (unregistering): Released all slaves [ 1006.016173][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1006.018565][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1006.044995][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.054219][ T9] usb 3-1: Product: syz [ 1006.058701][ T9] usb 3-1: Manufacturer: syz [ 1006.063794][ T9] usb 3-1: SerialNumber: syz [ 1006.070564][ T9] usb 3-1: config 0 descriptor?? [ 1006.129940][T14627] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 1006.137154][T14627] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 1006.164304][ T5804] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1006.340966][T12370] usb 3-1: USB disconnect, device number 47 [ 1006.389422][ T5804] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1006.403207][T13020] Bluetooth: hci2: command tx timeout [ 1006.416807][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.453868][T14591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1006.454066][ T5804] usb 4-1: config 0 descriptor?? [ 1006.470027][T14591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1006.481588][T14591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1006.518098][ T5804] cp210x 4-1:0.0: cp210x converter detected [ 1006.532347][T14591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1006.620716][T14591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.644012][T14591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.656538][T12415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.663729][T12415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.682251][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.689357][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.908977][ T5804] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1006.918638][T13020] Bluetooth: hci3: unexpected cc 0x042e length: 1 < 7 [ 1006.925572][T13020] Bluetooth: hci3: unexpected event for opcode 0x042e [ 1007.050396][T14591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.166142][ T5804] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1007.193828][T13020] Bluetooth: hci1: command tx timeout [ 1007.310033][T14591] veth0_vlan: entered promiscuous mode [ 1007.324142][T14591] veth1_vlan: entered promiscuous mode [ 1007.355657][T14591] veth0_macvtap: entered promiscuous mode [ 1007.373677][T14591] veth1_macvtap: entered promiscuous mode [ 1007.387466][ T5804] usb 4-1: USB disconnect, device number 22 [ 1007.397888][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.409196][ T5804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1007.416971][ T1191] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1007.425147][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.438664][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.438694][ T5804] cp210x 4-1:0.0: device disconnected [ 1007.451830][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.465421][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.475884][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.488051][T14591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.500833][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.517466][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.528797][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.541866][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.552837][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.565483][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.579051][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.597379][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.609106][T14591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.622916][ T1191] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1007.638454][ T1191] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1007.644044][T14591] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.660874][ T1191] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1007.672590][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.680704][T14591] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.682704][ T1191] usb 3-1: config 0 descriptor?? [ 1007.695322][T14591] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.704124][T14591] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.704916][T14661] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1007.724639][ T1191] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1007.816068][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.824318][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.853466][T12415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.861460][T12415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.117823][T14678] batadv_slave_0: entered promiscuous mode [ 1008.128004][T14678] batadv_slave_0: left promiscuous mode [ 1008.219019][T14682] binder: 14681:14682 unknown command 0 [ 1008.225951][T14682] binder: 14681:14682 ioctl c0306201 200000000080 returned -22 [ 1008.237935][T14682] binder: 14681:14682 ioctl c0306201 2000000003c0 returned -14 [ 1008.490892][T14691] ubi8: attaching mtd0 [ 1008.498057][T14691] ubi8: scanning is finished [ 1008.503792][T14691] ubi8: empty MTD device detected [ 1008.509064][T14691] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 1008.545158][T14691] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1008.571253][T12424] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1008.751255][T12424] usb 8-1: Using ep0 maxpacket: 16 [ 1008.759875][T12424] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 1008.772266][T12424] usb 8-1: config 1 has no interface number 0 [ 1008.786356][T12424] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1008.808689][T12424] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1008.832616][T12424] usb 8-1: config 1 interface 105 has no altsetting 0 [ 1008.842452][T12424] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1008.852750][T12424] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.865423][T12424] usb 8-1: Product: syz [ 1008.869729][T12424] usb 8-1: Manufacturer: syz [ 1008.874860][T12424] usb 8-1: SerialNumber: syz [ 1008.885766][T14686] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1008.895886][T14686] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1009.271608][T13020] Bluetooth: hci1: command tx timeout [ 1009.313381][T14686] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1009.320890][T14686] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1009.943897][T12424] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1009.959986][T12424] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1010.022397][T12424] aqc111 8-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 46:88:69:c9:43:13 [ 1010.039369][T12424] usb 8-1: USB disconnect, device number 2 [ 1010.048657][T12424] aqc111 8-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1010.142709][T12424] aqc111 8-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1010.160927][T12424] aqc111 8-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1010.179674][ T5804] usb 3-1: USB disconnect, device number 48 [ 1010.184606][T12424] aqc111 8-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1010.666007][T14740] nbd3: detected capacity change from 0 to 63 [ 1010.674131][T14744] block nbd3: NBD_DISCONNECT [ 1010.682899][T14744] block nbd3: Disconnected due to user request. [ 1010.691622][T14744] block nbd3: shutting down sockets [ 1010.872467][T12424] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1010.891487][T11890] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1011.040022][T14754] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2747'. [ 1011.071485][T11890] usb 3-1: Using ep0 maxpacket: 32 [ 1011.093268][T12424] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.106511][T11890] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 1011.125180][T12424] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1011.134834][T11890] usb 3-1: config 0 has no interface number 0 [ 1011.146129][T11890] usb 3-1: config 0 interface 183 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1011.157227][T12424] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1011.171399][T11890] usb 3-1: config 0 interface 183 has no altsetting 0 [ 1011.181450][T12424] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1011.190502][T12424] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.198589][T11890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b2, bcdDevice=bc.74 [ 1011.207775][T11890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.216059][T12424] usb 8-1: Product: syz [ 1011.220227][T12424] usb 8-1: Manufacturer: syz [ 1011.225061][T11890] usb 3-1: Product: syz [ 1011.229242][T11890] usb 3-1: Manufacturer: syz [ 1011.234295][T12424] usb 8-1: SerialNumber: syz [ 1011.240201][T11890] usb 3-1: SerialNumber: syz [ 1011.247020][T12424] usb 8-1: config 0 descriptor?? [ 1011.253033][T11890] usb 3-1: config 0 descriptor?? [ 1011.264732][T11890] em28xx 3-1:0.183: New device syz syz @ 480 Mbps (0ccd:00b2, interface 183, class 183) [ 1011.275895][T11890] em28xx 3-1:0.183: Video interface 183 found: [ 1011.351488][T13020] Bluetooth: hci1: command tx timeout [ 1011.360850][T14760] sd 0:0:1:0: PR command failed: 1026 [ 1011.366795][T14760] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1011.375286][T14760] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1011.528852][ T5804] usb 8-1: USB disconnect, device number 3 [ 1011.543066][T14765] block nbd3: NBD_DISCONNECT [ 1011.549113][T14764] block nbd3: Disconnected due to user request. [ 1011.557253][T14764] block nbd3: shutting down sockets [ 1011.741683][T11890] em28xx 3-1:0.183: unknown em28xx chip ID (0) [ 1011.826282][T11890] em28xx 3-1:0.183: reading from i2c device at 0xa0 failed (error=-5) [ 1011.834749][T11890] em28xx 3-1:0.183: board has no eeprom [ 1011.916917][T11890] em28xx 3-1:0.183: Identified as Terratec Cinergy HTC Stick (card=82) [ 1011.925846][T11890] em28xx 3-1:0.183: Currently, V4L2 is not supported on this model [ 1011.934310][T12424] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1011.948955][ T1191] em28xx 3-1:0.183: Binding DVB extension [ 1011.956396][ T1191] em28xx 3-1:0.183: no endpoint for DVB mode and transfer type 0 [ 1011.967423][T11890] usb 3-1: USB disconnect, device number 49 [ 1011.973611][ T1191] em28xx 3-1:0.183: failed to pre-allocate USB transfer buffers for DVB. [ 1011.983078][T11890] em28xx 3-1:0.183: Disconnecting em28xx [ 1011.989830][ T1191] em28xx 3-1:0.183: Registering input extension [ 1011.998080][T11890] em28xx 3-1:0.183: Closing input extension [ 1012.018337][T11890] em28xx 3-1:0.183: Freeing device [ 1012.150388][T13020] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 1012.160466][T12424] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1012.169030][T12424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.179643][T12424] usb 4-1: config 0 has no interface number 0 [ 1012.188261][T12424] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1012.200529][T12424] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.232276][T12424] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1012.243890][T12424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.252484][T12424] usb 4-1: Product: syz [ 1012.257066][T12424] usb 4-1: Manufacturer: syz [ 1012.267939][T12424] usb 4-1: SerialNumber: syz [ 1012.274852][T12424] usb 4-1: config 0 descriptor?? [ 1012.463082][T14788] Bluetooth: hci4: Frame reassembly failed (-84) [ 1012.474113][T12415] Bluetooth: hci4: Frame reassembly failed (-84) [ 1012.617710][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2768'. [ 1012.688068][T14802] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 1012.688126][T14801] netlink: 'syz.6.2770': attribute type 1 has an invalid length. [ 1012.699854][T14802] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 1012.699884][T14802] CPU: 0 PID: 14802 Comm: syz.2.2769 Not tainted syzkaller #0 [ 1012.699900][T14802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1012.699912][T14802] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1012.699941][T14802] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 1012.699956][T14802] RSP: 0018:ffffc900046bfa80 EFLAGS: 00010206 [ 1012.699971][T14802] RAX: 0000000000000005 RBX: ffff888025de2280 RCX: 0000000000080000 [ 1012.699983][T14802] RDX: ffffc9000d66b000 RSI: 00000000000007c8 RDI: 00000000000007c9 [ 1012.699995][T14802] RBP: 0000000000000001 R08: ffff88802b32412f R09: 1ffff11005664825 [ 1012.700007][T14802] R10: dffffc0000000000 R11: ffffed1005664826 R12: 0000000000000028 [ 1012.700019][T14802] R13: dffffc0000000000 R14: ffff88802b324000 R15: dffffc0000000000 [ 1012.700032][T14802] FS: 00007fb13a9046c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1012.700046][T14802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1012.700058][T14802] CR2: 0000001b31b23ffc CR3: 000000002b820000 CR4: 00000000003506f0 [ 1012.700072][T14802] Call Trace: [ 1012.700078][T14802] [ 1012.700086][T14802] pcl818_detach+0x66/0xd0 [ 1012.700108][T14802] comedi_device_detach_locked+0x172/0x710 [ 1012.700129][T14802] comedi_unlocked_ioctl+0xccc/0xfe0 [ 1012.700156][T14802] ? comedi_poll+0x8c0/0x8c0 [ 1012.700206][T14802] ? __fget_files+0x28/0x4d0 [ 1012.700232][T14802] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1012.700248][T14802] ? security_file_ioctl+0x80/0xa0 [ 1012.700271][T14802] ? comedi_poll+0x8c0/0x8c0 [ 1012.700291][T14802] __se_sys_ioctl+0xfd/0x170 [ 1012.700311][T14802] do_syscall_64+0x55/0xb0 [ 1012.700325][T14802] ? clear_bhb_loop+0x40/0x90 [ 1012.700342][T14802] ? clear_bhb_loop+0x40/0x90 [ 1012.892119][T14802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1012.898011][T14802] RIP: 0033:0x7fb13998f749 [ 1012.902426][T14802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.922025][T14802] RSP: 002b:00007fb13a904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.930427][T14802] RAX: ffffffffffffffda RBX: 00007fb139be5fa0 RCX: 00007fb13998f749 [ 1012.938387][T14802] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1012.946344][T14802] RBP: 00007fb139a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1012.954305][T14802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.962267][T14802] R13: 00007fb139be6038 R14: 00007fb139be5fa0 R15: 00007ffda8d7b698 [ 1012.970234][T14802] [ 1012.973248][T14802] Modules linked in: [ 1012.983847][T14801] netlink: 'syz.6.2770': attribute type 8 has an invalid length. [ 1012.991752][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2770'. [ 1012.998476][T14802] ---[ end trace 0000000000000000 ]--- [ 1013.014008][T14802] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1013.019678][T14802] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 1013.039786][T14802] RSP: 0018:ffffc900046bfa80 EFLAGS: 00010206 [ 1013.045958][T14802] RAX: 0000000000000005 RBX: ffff888025de2280 RCX: 0000000000080000 [ 1013.054630][T14802] RDX: ffffc9000d66b000 RSI: 00000000000007c8 RDI: 00000000000007c9 [ 1013.062666][T14802] RBP: 0000000000000001 R08: ffff88802b32412f R09: 1ffff11005664825 [ 1013.070645][T14802] R10: dffffc0000000000 R11: ffffed1005664826 R12: 0000000000000028 [ 1013.079475][T14802] R13: dffffc0000000000 R14: ffff88802b324000 R15: dffffc0000000000 [ 1013.087783][T14802] FS: 00007fb13a9046c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1013.096921][T14802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1013.103661][T14802] CR2: 00007fb13a8e2f98 CR3: 000000002b820000 CR4: 00000000003506f0 [ 1013.111782][T14802] Kernel panic - not syncing: Fatal exception [ 1013.118207][T14802] Kernel Offset: disabled [ 1013.122514][T14802] Rebooting in 86400 seconds..