last executing test programs: 15m14.656768559s ago: executing program 0 (id=2836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c) 15m9.026836111s ago: executing program 0 (id=2855): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') 15m8.036782856s ago: executing program 0 (id=2858): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000440)=0x10) getpeername$inet6(r0, 0x0, 0x0) 15m7.363606164s ago: executing program 0 (id=2861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, r0, @void, @value=0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 15m5.215961567s ago: executing program 0 (id=2862): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}}, 0x10) 15m5.038288075s ago: executing program 0 (id=2864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 14m49.905304514s ago: executing program 32 (id=2864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 9m48.056164532s ago: executing program 3 (id=3558): close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xffc1) 9m47.727350721s ago: executing program 3 (id=3560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 9m47.137855229s ago: executing program 3 (id=3562): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400), 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, 0x0, 0xb00) 9m46.563870097s ago: executing program 3 (id=3564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbeb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 9m46.291839665s ago: executing program 3 (id=3567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="00007ed4", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1a, "d2f18c2d83f6b26448bd9acd72d1304e7779b0cc9f44c2cb5e43"}}) sendto$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xd1, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) 9m43.600219599s ago: executing program 3 (id=3569): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 9m25.837427718s ago: executing program 33 (id=3569): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 14.157799925s ago: executing program 1 (id=5120): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) fsopen(&(0x7f00000002c0)='overlay\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f00000001c0)=[0x2], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 12.923274055s ago: executing program 1 (id=5131): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e"], 0xc) 11.922192765s ago: executing program 5 (id=5149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 11.782020631s ago: executing program 1 (id=5151): syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 11.777146319s ago: executing program 4 (id=5152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) 11.535466164s ago: executing program 4 (id=5155): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r1, r2, 0x8, 0x6, 0x1, 0x2fd8, {0x81, 0x1, 0x3ff, 0x401, 0xd0ab, 0x7, 0x9, 0x2, 0x4, 0x8, 0x4, 0xc0000000, 0x1, 0x1, "d59f2f0e3a96f8d1f1592e26dab08e8a147f9476036ccb6694d9bc4b5bda1456"}}) 11.412325997s ago: executing program 1 (id=5157): add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x9, 0x4) recvfrom(r2, &(0x7f00000001c0)=""/231, 0xe7, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) syz_usb_connect$midi(0x3, 0x47, &(0x7f0000000280)=ANY=[@ANYBLOB="1201710200000008050b3917400001020301090235000101ff90010904000002010320fd07240104"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 11.344606536s ago: executing program 4 (id=5159): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) clock_getres(0x5, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x805) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x18, &(0x7f0000000400), 0x0, 0x0, 0x0) 9.985926427s ago: executing program 4 (id=5164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x10c00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FITHAW(r2, 0xc0045878) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000190001000000000000000000802000000011000500000000", @ANYRES32, @ANYBLOB="08000600cbf96e8c29e7a052ab65225b4eac241d5076bfac0b6d"], 0x2c}}, 0x0) 7.836247512s ago: executing program 1 (id=5175): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) clock_getres(0x5, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x805) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x18, &(0x7f0000000400), 0x0, 0x0, 0x0) 6.6494033s ago: executing program 1 (id=5176): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64], 0x0) 6.641973423s ago: executing program 5 (id=5177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="07f75afa9842a2b175e001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) 6.446514711s ago: executing program 5 (id=5181): syz_usb_connect$uac2(0x5, 0xe4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="120100020000000844060f804000010203010902d200030101009e080b0000010520070904"], 0x0) 6.348170742s ago: executing program 2 (id=5183): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r5) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40008, 0x5}) preadv(r6, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xa) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000100)) 4.52224702s ago: executing program 4 (id=5186): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) clock_getres(0x5, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x805) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x18, &(0x7f0000000400), 0x0, 0x0, 0x0) 4.415861623s ago: executing program 2 (id=5188): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) 4.17557956s ago: executing program 2 (id=5190): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000cc0)={0x40, 0x16, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, 0x0, 0xcfa42, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xe}, {0xb}, {0x1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x2, @loopback, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x1, 0x405}}}, 0x7) shutdown(r1, 0x1) 3.488914629s ago: executing program 5 (id=5196): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r1, r2, 0x8, 0x6, 0x1, 0x2fd8, {0x81, 0x1, 0x3ff, 0x401, 0xd0ab, 0x7, 0x9, 0x2, 0x4, 0x8, 0x4, 0xc0000000, 0x1, 0x1, "d59f2f0e3a96f8d1f1592e26dab08e8a147f9476036ccb6694d9bc4b5bda1456"}}) 3.256075244s ago: executing program 5 (id=5199): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d65000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x40, 0xc, 0x6, "23b422691a2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.125143989s ago: executing program 2 (id=5204): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1.409237847s ago: executing program 2 (id=5205): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 1.253522125s ago: executing program 4 (id=5206): syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402"], 0x0) 1.232961293s ago: executing program 2 (id=5208): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) 369.222751ms ago: executing program 6 (id=5225): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f00000002c0)=[{0x3, 0x80, 0x4, 0x2000000}]}) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/217) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x35, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000fb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 337.337883ms ago: executing program 6 (id=5226): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 260.125326ms ago: executing program 6 (id=5227): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) clock_getres(0x5, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x805) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x18, &(0x7f0000000400), 0x0, 0x0, 0x0) 259.890017ms ago: executing program 6 (id=5228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0xf7e, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x200, 0x0, 0x0) getsockname(r3, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x81f) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r4, &(0x7f0000000180)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x400, 0x2, 0x14a, 0x0, r6}, &(0x7f0000000180), &(0x7f0000000080), 0x0) 243.310082ms ago: executing program 6 (id=5229): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x40, 0x17, 0x4f, "2bef7c2d00622ac2896eb072974acdcec7e0b11770cdbd48d2e509a6d385aa71fc92562db68eb8e5e6afc769fa2ac35cf0a5d365b1c860342cdce2ed75a35b0dce69e05c24a6b628c8a3cc978024d9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 90.048975ms ago: executing program 5 (id=5230): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x4004010) 0s ago: executing program 6 (id=5231): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000f00)=r1, 0x4) kernel console output (not intermixed with test programs): ted cc 0x1001 length: 249 > 9 [ 1354.299080][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1354.299670][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1355.693516][T19656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.665178][ T5607] Bluetooth: hci1: command tx timeout [ 1357.311901][ T1127] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.177860][ T1127] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.739243][ T5607] Bluetooth: hci1: command tx timeout [ 1359.153048][ T1127] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.345442][T20034] lo speed is unknown, defaulting to 1000 [ 1359.358768][T19656] veth0_vlan: entered promiscuous mode [ 1360.385130][ T1127] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.622379][T19656] veth1_vlan: entered promiscuous mode [ 1360.773572][T20104] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4226'. [ 1360.773592][T20104] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4226'. [ 1360.773608][T20104] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4226'. [ 1360.776654][ T5607] Bluetooth: hci1: command tx timeout [ 1360.820947][T19656] veth0_macvtap: entered promiscuous mode [ 1360.853880][T19656] veth1_macvtap: entered promiscuous mode [ 1361.328929][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.328972][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.357953][T19656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.780396][T19656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.021916][ T1538] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1362.848943][ T5607] Bluetooth: hci1: command tx timeout [ 1364.118629][ T1127] bridge_slave_1: left allmulticast mode [ 1364.118653][ T1127] bridge_slave_1: left promiscuous mode [ 1364.118819][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.347724][ T1127] bridge_slave_0: left allmulticast mode [ 1364.347750][ T1127] bridge_slave_0: left promiscuous mode [ 1364.347905][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.057223][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.117399][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.158893][ T1127] bond0 (unregistering): Released all slaves [ 1367.472320][T20148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.472601][T20148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.590943][T20148] tipc: Resetting bearer [ 1367.969249][T20148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.987971][T20148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1368.951612][T20148] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1369.099044][T20148] macvlan2: left allmulticast mode [ 1369.232162][T19993] lo speed is unknown, defaulting to 1000 [ 1369.232290][T19993] syz2: Port: 1 Link DOWN [ 1369.933200][T20034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.934268][T20034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.934455][T20034] bridge_slave_0: entered allmulticast mode [ 1369.963000][T20034] bridge_slave_0: entered promiscuous mode [ 1370.030604][T20034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.030682][T20034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.030811][T20034] bridge_slave_1: entered allmulticast mode [ 1370.077198][T20034] bridge_slave_1: entered promiscuous mode [ 1372.110386][T20034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1372.131904][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.131921][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.195541][T20034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.674226][T20034] team0: Port device team_slave_0 added [ 1372.742309][T20034] team0: Port device team_slave_1 added [ 1372.916705][ T1127] hsr_slave_0: left promiscuous mode [ 1372.966924][ T1127] hsr_slave_1: left promiscuous mode [ 1372.967759][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1372.967781][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.029074][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.029234][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.187063][ T1127] veth1_macvtap: left promiscuous mode [ 1373.202333][T20212] loop7: detected capacity change from 0 to 16384 [ 1373.236517][ T1127] veth0_macvtap: left promiscuous mode [ 1373.241762][ T1127] veth1_vlan: left promiscuous mode [ 1373.277924][ T1127] veth0_vlan: left promiscuous mode [ 1373.407245][T20215] loop7: detected capacity change from 16384 to 16320 [ 1376.307388][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 1376.521722][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 1376.807673][ T1538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.807690][ T1538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.934252][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1377.045141][T20034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.045156][T20034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.045181][T20034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.149590][T20034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.149604][T20034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.149729][T20034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.565006][T20034] hsr_slave_0: entered promiscuous mode [ 1377.570774][T20034] hsr_slave_1: entered promiscuous mode [ 1378.444315][T17381] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.444398][ T6200] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.445002][ T6200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.445070][ T6200] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.445132][ T6200] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.445155][ T6200] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.445215][ T6200] netdevsim netdevsim12 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.473425][ T6200] netdevsim netdevsim12 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.473534][ T6200] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.473606][ T6200] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.473691][ T6200] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.473753][ T6200] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.473861][ T6200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.473976][ T6200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.474056][ T6200] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.474118][ T6200] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.474202][ T6200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.604140][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1385.627143][T20356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.676932][T20356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.518705][T20356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.556148][T20356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1388.455865][T20386] tipc: Started in network mode [ 1388.455896][T20386] tipc: Node identity fe338f7c8b03, cluster identity 4711 [ 1388.456065][T20386] tipc: Enabled bearer , priority 0 [ 1388.478934][T20383] syzkaller0: entered promiscuous mode [ 1388.478957][T20383] syzkaller0: entered allmulticast mode [ 1388.750730][T20373] tipc: Resetting bearer [ 1388.766922][ T37] audit: type=1326 audit(1785584264.306:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20402 comm="syz.2.4288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efedd8be019 code=0x0 [ 1389.169252][T20373] tipc: Disabling bearer [ 1390.807005][ T1542] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.807057][ T1542] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.807091][ T1542] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.807137][ T1542] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.944798][T20438] binder: 20437:20438 ioctl c018620b 0 returned -14 [ 1391.135969][T20034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1391.192245][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1391.194885][T20034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1391.264935][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1391.285878][T20034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1391.427330][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1391.429676][T20034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1391.520670][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1391.907842][T20034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.968735][T20034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.021829][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.022025][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.066464][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.080075][ T1542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.725510][T20481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1395.812770][T20034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.181725][T20500] program syz.1.4304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1399.863339][T20034] veth0_vlan: entered promiscuous mode [ 1399.899904][T20034] veth1_vlan: entered promiscuous mode [ 1400.029147][T20034] veth0_macvtap: entered promiscuous mode [ 1400.049127][T20034] veth1_macvtap: entered promiscuous mode [ 1400.094962][T20034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.123284][T20034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.189373][T17381] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.537387][ T167] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.538496][ T1538] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.538747][ T1538] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.640545][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.640562][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.768829][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.768850][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.072291][T20562] program syz.6.4326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1407.312232][T12404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1407.341448][T12404] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1407.348516][T12404] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1407.350699][T12404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1407.352108][T12404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1410.129767][ T5607] Bluetooth: hci5: command tx timeout [ 1411.230761][T20598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.232344][T20598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.814449][T20598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.862000][T20598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.219294][ T5607] Bluetooth: hci5: command tx timeout [ 1414.286787][ T5607] Bluetooth: hci5: command tx timeout [ 1414.356774][T16600] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1414.512680][T16600] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1414.512708][T16600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.512727][T16600] usb 3-1: Product: syz [ 1414.512740][T16600] usb 3-1: Manufacturer: syz [ 1414.512754][T16600] usb 3-1: SerialNumber: syz [ 1414.554778][T16600] usb 3-1: config 0 descriptor?? [ 1414.568922][T20565] lo speed is unknown, defaulting to 1000 [ 1414.756816][ T1030] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.789356][T16600] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1416.376833][ T5607] Bluetooth: hci5: command tx timeout [ 1416.905815][T20648] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.669575][T16600] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1417.676765][ T167] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.676822][ T167] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.676898][ T167] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.682003][T16600] usb 3-1: USB disconnect, device number 32 [ 1418.318779][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'. [ 1419.731137][T20689] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.251415][T20565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.251602][T20565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.252065][T20565] bridge_slave_0: entered allmulticast mode [ 1422.254513][T20565] bridge_slave_0: entered promiscuous mode [ 1422.284559][T20565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.284755][T20565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.284928][T20565] bridge_slave_1: entered allmulticast mode [ 1422.311317][T20565] bridge_slave_1: entered promiscuous mode [ 1422.368430][T20565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.393565][T20565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.447070][T20565] team0: Port device team_slave_0 added [ 1422.453516][T20565] team0: Port device team_slave_1 added [ 1422.505385][T20565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.505399][T20565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.505424][T20565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.557280][T20565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.557293][T20565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.557319][T20565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.676734][ T5823] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1422.769581][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.769660][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.816795][ T1538] bridge_slave_1: left allmulticast mode [ 1422.816822][ T1538] bridge_slave_1: left promiscuous mode [ 1422.817062][ T1538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.855287][ T5823] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1422.855313][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.855330][ T5823] usb 3-1: Product: syz [ 1422.855344][ T5823] usb 3-1: Manufacturer: syz [ 1422.855357][ T5823] usb 3-1: SerialNumber: syz [ 1422.934521][ T5823] usb 3-1: config 0 descriptor?? [ 1423.020621][ T1538] bridge_slave_0: left allmulticast mode [ 1423.020649][ T1538] bridge_slave_0: left promiscuous mode [ 1423.020866][ T1538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.146062][ T5823] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1423.903934][ T1538] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 1424.125830][T20752] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.241288][T20747] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1424.241313][T20747] PKCS7: Only support pkcs7_signedData type [ 1424.924792][ T5823] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1424.946848][ T5823] usb 3-1: USB disconnect, device number 33 [ 1425.078132][ T1538] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1427.408931][ T1538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.487216][ T1538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.548490][ T1538] bond0 (unregistering): (slave team0): Releasing backup interface [ 1427.587435][ T1538] bond0 (unregistering): Released all slaves [ 1427.594340][ T1538] bond1 (unregistering): Released all slaves [ 1427.615850][ T1538] bond2 (unregistering): Released all slaves [ 1427.633183][ T1538] bond3 (unregistering): Released all slaves [ 1427.657573][ T1538] bond4 (unregistering): Released all slaves [ 1427.934079][T20781] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.869075][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1428.890565][T20790] trusted_key: encrypted_key: insufficient parameters specified [ 1428.907480][T20565] hsr_slave_0: entered promiscuous mode [ 1428.910181][T20565] hsr_slave_1: entered promiscuous mode [ 1428.912551][T20565] debugfs: 'hsr0' already exists in 'hsr' [ 1428.912573][T20565] Cannot create hsr debugfs directory [ 1428.912778][ T1538] tipc: Left network mode [ 1429.315695][ T5823] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1429.529112][ T5823] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1429.529139][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.529157][ T5823] usb 5-1: Product: syz [ 1429.529170][ T5823] usb 5-1: Manufacturer: syz [ 1429.529182][ T5823] usb 5-1: SerialNumber: syz [ 1429.573023][ T5823] usb 5-1: config 0 descriptor?? [ 1429.778408][ T5823] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1431.409440][T20828] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.083450][ T5823] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1433.250562][ T5823] usb 5-1: USB disconnect, device number 42 [ 1433.743502][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1434.028705][T20857] trusted_key: encrypted_key: insufficient parameters specified [ 1436.717337][ T1538] hsr_slave_0: left promiscuous mode [ 1437.088345][ T1538] hsr_slave_1: left promiscuous mode [ 1437.089169][ T1538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.147270][ T1538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.394606][T20889] TCP: TCP_TX_DELAY enabled [ 1437.976694][T13445] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1438.203798][T13445] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1438.203827][T13445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.203847][T13445] usb 6-1: Product: syz [ 1438.203859][T13445] usb 6-1: Manufacturer: syz [ 1438.203872][T13445] usb 6-1: SerialNumber: syz [ 1438.239799][ T1538] team0 (unregistering): Port device team_slave_1 removed [ 1438.280115][T13445] usb 6-1: config 0 descriptor?? [ 1438.298912][ T1538] team0 (unregistering): Port device team_slave_0 removed [ 1438.484714][T13445] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1440.923713][T13445] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1440.941636][T13445] usb 6-1: USB disconnect, device number 5 [ 1441.061042][T20565] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1441.170434][T20565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1441.318961][T20565] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1441.383373][T20932] trusted_key: encrypted_key: insufficient parameters specified [ 1441.479885][T20565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1441.520617][T20565] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1441.700712][T20565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1441.743409][T20565] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1441.804156][T20565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1441.846621][ T36] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1441.995428][T20565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.004908][ T36] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1442.004934][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.004954][ T36] usb 6-1: Product: syz [ 1442.004967][ T36] usb 6-1: Manufacturer: syz [ 1442.004981][ T36] usb 6-1: SerialNumber: syz [ 1442.051166][ T36] usb 6-1: config 0 descriptor?? [ 1442.679152][ T36] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1442.928972][ T1538] IPVS: stop unused estimator thread 0... [ 1442.962594][T20565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.132672][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.132805][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.219434][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.219543][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.311649][ T36] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1443.321501][ T36] usb 6-1: USB disconnect, device number 6 [ 1443.351336][T20838] udevd[20838]: setting owner of /dev/bus/usb/006/006 to uid=0, gid=0 failed: No such file or directory [ 1445.326688][T12404] Bluetooth: hci4: command 0x0406 tx timeout [ 1445.556634][T17266] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1445.726919][T17266] usb 5-1: Using ep0 maxpacket: 8 [ 1445.729202][T17266] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1445.730307][T17266] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.730363][T17266] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1445.734697][T17266] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1445.734724][T17266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.734742][T17266] usb 5-1: Product: syz [ 1445.734755][T17266] usb 5-1: Manufacturer: syz [ 1445.734769][T17266] usb 5-1: SerialNumber: syz [ 1446.231237][T20565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.286632][ T5823] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1446.360826][T20565] veth0_vlan: entered promiscuous mode [ 1446.392986][T20565] veth1_vlan: entered promiscuous mode [ 1446.440487][ T5823] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1446.440517][ T5823] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1446.440614][ T5823] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1446.440635][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.540116][T21010] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1446.675797][ T5823] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1446.728138][T20565] veth0_macvtap: entered promiscuous mode [ 1446.764326][T20565] veth1_macvtap: entered promiscuous mode [ 1446.813910][T20565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.902949][T20565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.867091][ T36] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1450.881667][ T36] usb 6-1: string descriptor 0 read error: -71 [ 1450.881811][ T36] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1450.881834][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.963889][T17266] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1451.024812][ T36] usb 6-1: config 0 descriptor?? [ 1451.025337][ T36] usb 6-1: can't set config #0, error -71 [ 1451.049449][ T5823] usb 7-1: USB disconnect, device number 2 [ 1451.073474][ T36] usb 6-1: USB disconnect, device number 7 [ 1452.245613][T17266] usb 5-1: USB disconnect, device number 43 [ 1453.888997][T20088] udevd[20088]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1454.198237][ T1542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.198258][ T1542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.247967][T17266] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1454.248758][ T1030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.257570][ T1542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.257671][ T1542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.257747][ T1542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.397778][T17266] usb 5-1: Using ep0 maxpacket: 16 [ 1454.401160][T17266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.401209][T17266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1454.401243][T17266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1454.401262][T17266] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1454.401281][T17266] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.402631][T17266] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1454.402648][T17266] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1454.402661][T17266] usb 5-1: Manufacturer: syz [ 1454.498567][T17266] usb 5-1: config 0 descriptor?? [ 1454.591381][ T1538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.591401][ T1538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.876662][T17266] rc_core: IR keymap rc-hauppauge not found [ 1454.876680][T17266] Registered IR keymap rc-empty [ 1454.915247][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1454.930310][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1454.949558][T17266] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1454.976410][T17266] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 1455.000862][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.017390][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.046729][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.066716][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.087610][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.120743][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.136684][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.156800][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.177448][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.198582][T17266] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1455.261162][T17266] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1455.261183][T17266] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1455.298561][T17266] usb 5-1: USB disconnect, device number 44 [ 1456.655991][T12404] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1456.719623][T12404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1456.722346][T12404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1456.744961][T12404] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1456.754014][T12404] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1457.748043][T16600] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1457.999748][T19993] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1458.371962][T16600] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1458.371990][T16600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.372008][T16600] usb 2-1: Product: syz [ 1458.372022][T16600] usb 2-1: Manufacturer: syz [ 1458.372035][T16600] usb 2-1: SerialNumber: syz [ 1458.376478][T16600] usb 2-1: config 0 descriptor?? [ 1458.566680][T19993] usb 5-1: Using ep0 maxpacket: 8 [ 1458.585608][T19993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1458.595853][T19993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.595899][T19993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1458.636315][T19993] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1458.636340][T19993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.636405][T19993] usb 5-1: Product: syz [ 1458.636420][T19993] usb 5-1: Manufacturer: syz [ 1458.636433][T19993] usb 5-1: SerialNumber: syz [ 1458.647664][T16600] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1459.488155][ T5607] Bluetooth: hci3: command tx timeout [ 1460.629246][T19993] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.729104][T16600] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1460.748758][T16600] usb 2-1: USB disconnect, device number 25 [ 1461.241403][T19993] usb 5-1: USB disconnect, device number 45 [ 1461.405862][T20651] udevd[20651]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1461.503358][T21090] lo speed is unknown, defaulting to 1000 [ 1461.566760][ T5607] Bluetooth: hci3: command tx timeout [ 1463.646809][ T5607] Bluetooth: hci3: command tx timeout [ 1464.023394][ T5823] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1464.104894][ T66] team0: Port device netdevsim1 removed [ 1464.166596][ T5823] usb 7-1: Using ep0 maxpacket: 8 [ 1464.182304][ T5823] usb 7-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1464.182330][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1464.182349][ T5823] usb 7-1: Product: syz [ 1464.182361][ T5823] usb 7-1: Manufacturer: syz [ 1464.182374][ T5823] usb 7-1: SerialNumber: syz [ 1464.221717][ T5823] usb 7-1: config 0 descriptor?? [ 1464.277112][ T5823] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1464.453950][ T5823] gspca_sn9c2028: read1 error -32 [ 1464.496686][T17266] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1464.639980][T21169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.641406][T21169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.647701][T17266] usb 6-1: Using ep0 maxpacket: 8 [ 1464.685999][T17266] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1464.695094][T17266] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.695193][T17266] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1464.729992][T21173] netlink: 'syz.4.4468': attribute type 1 has an invalid length. [ 1464.730010][T21173] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4468'. [ 1464.730790][T17266] usb 6-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1464.730815][T17266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.730833][T17266] usb 6-1: Product: syz [ 1464.730846][T17266] usb 6-1: Manufacturer: syz [ 1464.730910][T17266] usb 6-1: SerialNumber: syz [ 1464.798026][ T5823] gspca_sn9c2028: read1 error -71 [ 1464.798115][ T5823] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1464.828884][ T5823] usb 7-1: USB disconnect, device number 3 [ 1465.870689][ T5607] Bluetooth: hci3: command tx timeout [ 1466.227247][T21169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1466.241899][T21169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.683750][T17266] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1467.875319][T17266] usb 6-1: USB disconnect, device number 8 [ 1467.966339][T20088] udevd[20088]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1468.276722][T17266] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1468.426822][T17266] usb 6-1: Using ep0 maxpacket: 16 [ 1468.431076][T17266] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1468.431104][T17266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1468.433382][T17266] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1468.433407][T17266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.433426][T17266] usb 6-1: Product: syz [ 1468.433439][T17266] usb 6-1: Manufacturer: syz [ 1468.433453][T17266] usb 6-1: SerialNumber: syz [ 1468.502794][T17266] usb 6-1: config 0 descriptor?? [ 1468.524919][T17266] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1468.524955][T17266] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1469.195663][T17266] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1469.293582][T17266] em28xx 6-1:0.0: Config register raw data: 0xf7 [ 1469.293602][T17266] em28xx 6-1:0.0: I2S Audio (3 sample rate(s)) [ 1469.293617][T17266] em28xx 6-1:0.0: No AC97 audio processor [ 1470.366860][T21215] program syz.1.4486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1470.812306][T17266] usb 6-1: USB disconnect, device number 9 [ 1471.007887][ T1030] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.007932][ T1030] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.007979][ T1030] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.008012][ T1030] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.109908][T16600] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1471.260990][T16600] usb 7-1: Using ep0 maxpacket: 32 [ 1471.262978][T16600] usb 7-1: config 0 has no interfaces? [ 1471.289737][T16600] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1471.289762][T16600] usb 7-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 1471.289868][T16600] usb 7-1: Product: syz [ 1471.289882][T16600] usb 7-1: Manufacturer: syz [ 1471.289896][T16600] usb 7-1: SerialNumber: syz [ 1471.356671][T19993] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1471.360708][T16600] usb 7-1: config 0 descriptor?? [ 1471.526689][T19993] usb 5-1: Using ep0 maxpacket: 8 [ 1471.530139][T19993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1471.550991][T19993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.551037][T19993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1471.580345][T19993] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1471.580371][T19993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.580390][T19993] usb 5-1: Product: syz [ 1471.580404][T19993] usb 5-1: Manufacturer: syz [ 1471.580418][T19993] usb 5-1: SerialNumber: syz [ 1471.683204][T17266] usb 7-1: USB disconnect, device number 4 [ 1472.756152][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1472.763808][T17266] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1472.924465][T17266] usb 7-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1472.941510][T17266] usb 7-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 1472.941539][T17266] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.941561][T17266] usb 7-1: Product: syz [ 1472.941577][T17266] usb 7-1: Manufacturer: syz [ 1472.941593][T17266] usb 7-1: SerialNumber: syz [ 1473.017862][T16600] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1473.179596][T16600] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1473.179621][T16600] usb 2-1: config 0 has no interface number 0 [ 1473.189883][T16600] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1473.190006][T16600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.190054][T16600] usb 2-1: Product: syz [ 1473.190067][T16600] usb 2-1: Manufacturer: syz [ 1473.190898][T16600] usb 2-1: SerialNumber: syz [ 1473.449142][T16600] usb 2-1: config 0 descriptor?? [ 1473.473121][T17266] usb 7-1: USB disconnect, device number 5 [ 1474.515747][T21090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.515861][T21090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.516023][T21090] bridge_slave_0: entered allmulticast mode [ 1474.540527][T21090] bridge_slave_0: entered promiscuous mode [ 1474.561104][T21090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.564145][T21090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.564308][T21090] bridge_slave_1: entered allmulticast mode [ 1474.604462][T21090] bridge_slave_1: entered promiscuous mode [ 1474.760099][T19993] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1474.824082][T16600] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1474.824107][T16600] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1474.824634][T16600] asix 2-1:0.251: probe with driver asix failed with error -71 [ 1475.021215][T16600] usb 2-1: USB disconnect, device number 26 [ 1475.605225][T19993] usb 5-1: USB disconnect, device number 46 [ 1475.660821][T21030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1476.536664][T21030] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1476.618080][T21284] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4499'. [ 1476.712724][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1476.737829][T21090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.798586][T21090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.144934][ T37] audit: type=1326 audit(1785584352.706:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21294 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9290dde019 code=0x0 [ 1477.257765][ T66] bridge_slave_1: left allmulticast mode [ 1477.257795][ T66] bridge_slave_1: left promiscuous mode [ 1477.258011][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.433406][ T66] bridge_slave_0: left allmulticast mode [ 1477.433427][ T66] bridge_slave_0: left promiscuous mode [ 1477.433602][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.523045][T20088] udevd[20088]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.437175][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.497148][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.517430][ T66] bond0 (unregistering): Released all slaves [ 1478.652539][T21311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4506'. [ 1478.733311][T21090] team0: Port device team_slave_0 added [ 1478.747595][T21090] team0: Port device team_slave_1 added [ 1478.820696][ T66] tipc: Disabling bearer [ 1478.919059][ T66] tipc: Left network mode [ 1478.996643][T13445] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1479.002351][T21090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.002364][T21090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.002391][T21090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.015448][T21090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.015462][T21090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.015490][T21090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.251967][T21090] hsr_slave_0: entered promiscuous mode [ 1479.253225][T21090] hsr_slave_1: entered promiscuous mode [ 1479.274204][T13445] usb 7-1: Using ep0 maxpacket: 8 [ 1479.276908][T13445] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1479.278013][T13445] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.278059][T13445] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1479.280658][T21090] debugfs: 'hsr0' already exists in 'hsr' [ 1479.280682][T21090] Cannot create hsr debugfs directory [ 1479.285578][T13445] usb 7-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1479.285603][T13445] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.285629][T13445] usb 7-1: Product: syz [ 1479.285642][T13445] usb 7-1: Manufacturer: syz [ 1479.285654][T13445] usb 7-1: SerialNumber: syz [ 1479.296668][T16600] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1479.516833][T16600] usb 6-1: Using ep0 maxpacket: 16 [ 1479.777815][T16600] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1479.777961][T16600] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1479.862904][T16600] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1479.862932][T16600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.862951][T16600] usb 6-1: Product: syz [ 1479.862964][T16600] usb 6-1: Manufacturer: syz [ 1479.862978][T16600] usb 6-1: SerialNumber: syz [ 1480.164862][T16600] usb 6-1: config 0 descriptor?? [ 1480.217353][T16600] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1480.217381][T16600] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1480.272714][ T37] audit: type=1107 audit(1785584355.786:21): pid=21337 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1480.858505][T16600] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1480.860667][T16600] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1480.861156][T16600] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1480.861173][T16600] em28xx 6-1:0.0: No AC97 audio processor [ 1481.240258][T16600] usb 6-1: USB disconnect, device number 10 [ 1481.285275][T16600] em28xx 6-1:0.0: Disconnecting em28xx [ 1481.318351][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1481.480203][T12404] Bluetooth: hci1: command 0x0406 tx timeout [ 1482.451852][ T37] audit: type=1326 audit(1785584358.006:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21359 comm="syz.4.4520" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f0355e019 code=0x0 [ 1482.569843][T13445] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1482.908660][ T37] audit: type=1107 audit(1785584358.476:23): pid=21374 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1483.105289][T21382] trusted_key: encrypted_key: insufficient parameters specified [ 1483.427475][T13445] usb 7-1: USB disconnect, device number 6 [ 1483.531414][T16600] em28xx 6-1:0.0: Freeing device [ 1484.050661][T20716] udevd[20716]: setting mode of /dev/bus/usb/007/006 to 020664 failed: No such file or directory [ 1484.050820][T20716] udevd[20716]: setting owner of /dev/bus/usb/007/006 to uid=0, gid=0 failed: No such file or directory [ 1484.151345][T20088] udevd[20088]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1484.209960][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.210021][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.686632][T21030] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1484.778573][T21421] sg_write: data in/out 331740/136 bytes for SCSI command 0x0-- guessing data in; [ 1484.778573][T21421] program syz.4.4535 not setting count and/or reply_len properly [ 1484.857899][T21030] usb 7-1: Using ep0 maxpacket: 8 [ 1484.897732][T21030] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1484.900713][T21030] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.900760][T21030] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1484.903075][T21030] usb 7-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1484.903099][T21030] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.903118][T21030] usb 7-1: Product: syz [ 1484.903131][T21030] usb 7-1: Manufacturer: syz [ 1484.903145][T21030] usb 7-1: SerialNumber: syz [ 1487.405534][T21030] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1487.526777][T21030] usb 7-1: USB disconnect, device number 7 [ 1487.670759][T20088] udevd[20088]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1488.017323][T21463] trusted_key: encrypted_key: insufficient parameters specified [ 1488.056665][T17266] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1488.208814][T17266] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.208866][T17266] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1488.208889][T17266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.273606][T17266] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1490.091604][T17266] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1490.092004][T17266] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1490.092022][T17266] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 1490.167340][T17266] usb 2-1: USB disconnect, device number 27 [ 1490.676671][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1492.508466][ T66] hsr_slave_0: left promiscuous mode [ 1492.546683][ T66] hsr_slave_1: left promiscuous mode [ 1492.547599][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.597887][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.887386][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1493.928136][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1493.996664][T13445] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1494.146666][T13445] usb 6-1: Using ep0 maxpacket: 8 [ 1494.149032][T13445] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1494.152110][T13445] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1494.152135][T13445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.152154][T13445] usb 6-1: Product: syz [ 1494.152167][T13445] usb 6-1: Manufacturer: syz [ 1494.152180][T13445] usb 6-1: SerialNumber: syz [ 1494.207946][T13445] usb 6-1: config 0 descriptor?? [ 1494.215623][T13445] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1496.519245][T21552] trusted_key: encrypted_key: insufficient parameters specified [ 1496.592684][T16600] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1496.754580][T16600] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1496.754607][T16600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.754625][T16600] usb 2-1: Product: syz [ 1496.754638][T16600] usb 2-1: Manufacturer: syz [ 1496.754652][T16600] usb 2-1: SerialNumber: syz [ 1496.854682][T16600] usb 2-1: config 0 descriptor?? [ 1497.075733][T16600] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1497.196176][ T43] smbdirect: ib_dev[syz2] removed [ 1497.680646][T16600] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1497.850271][T13445] gspca_zc3xx: reg_w_i err -71 [ 1497.921382][T21568] capability: warning: `syz.6.4566' uses deprecated v2 capabilities in a way that may be insecure [ 1498.482791][T13445] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1498.482855][T13445] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1498.491357][T13445] usb 6-1: USB disconnect, device number 11 [ 1499.044537][T21090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1499.070953][T21090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1499.079190][T21090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1499.121746][T21090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1499.135366][T21090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1499.173577][T21090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1499.179519][T21090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1499.206614][T17266] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1499.269044][T21090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1499.370646][T17266] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1499.370672][T17266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.370691][T17266] usb 5-1: Product: syz [ 1499.370705][T17266] usb 5-1: Manufacturer: syz [ 1499.370718][T17266] usb 5-1: SerialNumber: syz [ 1499.427607][T17266] usb 5-1: USB2VGA dongle found at address 47 [ 1499.443716][T16600] usb 2-1: USB disconnect, device number 28 [ 1499.445082][T17266] usb 5-1: Allocated 8 output buffers [ 1499.487099][ T66] IPVS: stop unused estimator thread 0... [ 1499.860273][T17266] usb 5-1: Failed to early initialize device [ 1499.886836][T21610] trusted_key: encrypted_key: insufficient parameters specified [ 1499.950935][T17266] usb 5-1: USB disconnect, device number 47 [ 1500.104613][T21090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.523283][T21090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.197212][ T1542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.197334][ T1542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.273505][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.273635][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.976642][T20163] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1503.139508][T20163] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1503.139536][T20163] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.139555][T20163] usb 7-1: Product: syz [ 1503.139568][T20163] usb 7-1: Manufacturer: syz [ 1503.139581][T20163] usb 7-1: SerialNumber: syz [ 1503.191237][T20163] usb 7-1: config 0 descriptor?? [ 1503.547280][T20163] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1504.663497][T21090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1504.822386][T20163] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1505.012289][T21686] sg_write: data in/out 266204/136 bytes for SCSI command 0x0-- guessing data in; [ 1505.012289][T21686] program syz.1.4592 not setting count and/or reply_len properly [ 1505.067846][T21090] veth0_vlan: entered promiscuous mode [ 1505.081304][T21684] trusted_key: encrypted_key: insufficient parameters specified [ 1505.093757][T21090] veth1_vlan: entered promiscuous mode [ 1505.172617][T21090] veth0_macvtap: entered promiscuous mode [ 1505.185865][T21090] veth1_macvtap: entered promiscuous mode [ 1505.234986][T21090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1505.256336][T21090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1506.947841][T20163] usb 7-1: USB disconnect, device number 8 [ 1507.629903][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.630245][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.630560][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.630953][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.043248][ T1542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.043269][ T1542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.291699][T21725] sg_write: data in/out 266204/136 bytes for SCSI command 0x0-- guessing data in; [ 1509.291699][T21725] program syz.4.4602 not setting count and/or reply_len properly [ 1509.361127][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.361144][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.107570][T21030] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1511.188998][T21742] syzkaller0: entered promiscuous mode [ 1511.189021][T21742] syzkaller0: entered allmulticast mode [ 1511.192006][T21742] tipc: Started in network mode [ 1511.192032][T21742] tipc: Node identity 0e3805c051be, cluster identity 4711 [ 1511.193400][T21742] tipc: Enabled bearer , priority 0 [ 1511.259821][T21741] tipc: Resetting bearer [ 1511.262274][T21030] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1511.262300][T21030] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.262319][T21030] usb 7-1: Product: syz [ 1511.262332][T21030] usb 7-1: Manufacturer: syz [ 1511.262345][T21030] usb 7-1: SerialNumber: syz [ 1511.308771][T21030] usb 7-1: config 0 descriptor?? [ 1511.552496][T21030] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1511.861620][T21741] tipc: Disabling bearer [ 1512.435745][T21030] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1512.626964][T20163] tipc: Node number set to 1602618816 [ 1512.872639][T21761] trusted_key: encrypted_key: insufficient parameters specified [ 1513.366734][T21030] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1513.395536][T21775] fuse: Bad value for 'fd' [ 1513.396451][ T5607] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1513.396477][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1513.396517][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1513.396530][ T5607] Workqueue: hci5 hci_rx_work [ 1513.396669][ T5607] Call Trace: [ 1513.396708][ T5607] [ 1513.396750][ T5607] dump_stack_lvl+0xe8/0x150 [ 1513.396953][ T5607] sysfs_create_dir_ns+0x271/0x2a0 [ 1513.397125][ T5607] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1513.397216][ T5607] ? rt_spin_unlock+0x163/0x200 [ 1513.397363][ T5607] kobject_add_internal+0x62c/0xce0 [ 1513.397466][ T5607] kobject_add+0x163/0x240 [ 1513.397562][ T5607] ? rt_spin_unlock+0x157/0x200 [ 1513.397627][ T5607] ? __pfx_kobject_add+0x10/0x10 [ 1513.397717][ T5607] ? get_device_parent+0x370/0x3a0 [ 1513.397829][ T5607] device_add+0x3fa/0xb80 [ 1513.397903][ T5607] hci_conn_add_sysfs+0xd5/0x210 [ 1513.398000][ T5607] le_conn_complete_evt+0xfef/0x1580 [ 1513.398109][ T5607] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1513.398182][ T5607] ? lockdep_hardirqs_on+0x7a/0x110 [ 1513.398277][ T5607] ? rt_mutex_slowunlock+0x219/0x460 [ 1513.398333][ T5607] ? skb_pull_data+0xf0/0x200 [ 1513.398487][ T5607] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1513.398571][ T5607] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1513.398660][ T5607] hci_event_packet+0x67a/0xf10 [ 1513.398737][ T5607] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1513.398802][ T5607] ? __pfx_hci_event_packet+0x10/0x10 [ 1513.398864][ T5607] ? rt_spin_unlock+0x157/0x200 [ 1513.398936][ T5607] ? hci_send_to_monitor+0xe2/0x590 [ 1513.398992][ T5607] hci_rx_work+0x3ee/0x1020 [ 1513.399070][ T5607] ? process_scheduled_works+0xa20/0x14e0 [ 1513.399210][ T5607] process_scheduled_works+0xa8e/0x14e0 [ 1513.399376][ T5607] ? __pfx_process_scheduled_works+0x10/0x10 [ 1513.399456][ T5607] ? assign_work+0x3cf/0x5d0 [ 1513.399538][ T5607] worker_thread+0xa47/0xfb0 [ 1513.399673][ T5607] kthread+0x388/0x470 [ 1513.399815][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 1513.399871][ T5607] ? __pfx_kthread+0x10/0x10 [ 1513.399940][ T5607] ret_from_fork+0x514/0xb70 [ 1513.400007][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 1513.400074][ T5607] ? __switch_to+0xc89/0x1420 [ 1513.400169][ T5607] ? __pfx_kthread+0x10/0x10 [ 1513.400250][ T5607] ret_from_fork_asm+0x1a/0x30 [ 1513.400341][ T5607] [ 1513.401518][ T5607] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1513.401633][ T5607] Bluetooth: hci5: failed to register connection device [ 1513.540881][T21030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1513.541002][T21030] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1513.541059][T21030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.667775][T21030] usb 3-1: config 0 descriptor?? [ 1513.699857][T21769] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1513.822154][T17261] usb 7-1: USB disconnect, device number 9 [ 1514.127838][T21769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.128423][T21769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.007655][T21788] syzkaller0: entered promiscuous mode [ 1515.007695][T21788] syzkaller0: entered allmulticast mode [ 1515.011705][T21788] tipc: Started in network mode [ 1515.011732][T21788] tipc: Node identity 4616fd6470d4, cluster identity 4711 [ 1515.011899][T21788] tipc: Enabled bearer , priority 0 [ 1515.152151][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.152179][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.152202][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.152225][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.152247][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.152269][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.152290][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.152376][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.152400][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.152424][T21030] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 1515.236749][T21786] tipc: Resetting bearer [ 1515.312925][T21030] uclogic 0003:5543:0064.0004: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 1515.316606][T20158] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1515.399209][T21030] usb 3-1: USB disconnect, device number 34 [ 1515.463649][T21796] fido_id[21796]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1515.466764][T20158] usb 5-1: Using ep0 maxpacket: 32 [ 1515.483992][T21786] tipc: Disabling bearer [ 1515.495665][T20158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.495706][T20158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1515.495743][T20158] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1515.495765][T20158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.542460][T20158] usb 5-1: config 0 descriptor?? [ 1515.554632][T20158] hub 5-1:0.0: USB hub found [ 1515.754719][T20158] hub 5-1:0.0: 1 port detected [ 1515.957471][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1515.958458][T20158] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1515.958552][T20158] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1516.016443][T20158] usbhid 5-1:0.0: can't add hid device: -71 [ 1516.022661][T20158] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1516.059703][T20158] usb 5-1: USB disconnect, device number 48 [ 1516.187644][T21818] sg_write: data in/out 266204/136 bytes for SCSI command 0x0-- guessing data in; [ 1516.187644][T21818] program syz.6.4634 not setting count and/or reply_len properly [ 1516.516600][T21030] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1517.808135][T21030] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1517.808164][T21030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.808183][T21030] usb 3-1: Product: syz [ 1517.808197][T21030] usb 3-1: Manufacturer: syz [ 1517.808210][T21030] usb 3-1: SerialNumber: syz [ 1517.867860][T21030] usb 3-1: config 0 descriptor?? [ 1518.591446][T21833] syzkaller0: entered promiscuous mode [ 1518.591470][T21833] syzkaller0: entered allmulticast mode [ 1518.594656][T21833] tipc: Enabled bearer , priority 0 [ 1518.628124][T21030] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1518.960372][T21830] tipc: Resetting bearer [ 1519.280133][T21860] sg_write: data in/out 266204/136 bytes for SCSI command 0x0-- guessing data in; [ 1519.280133][T21860] program syz.5.4645 not setting count and/or reply_len properly [ 1519.362690][T21830] tipc: Disabling bearer [ 1519.406758][T21863] capability: warning: `syz.6.4644' uses 32-bit capabilities (legacy support in use) [ 1519.434160][T21030] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1519.464302][T21863] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1519.687435][ T37] audit: type=1107 audit(1785584395.236:24): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1519.976860][T21030] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1520.147637][T21030] usb 7-1: Using ep0 maxpacket: 8 [ 1520.172656][T21030] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1520.172680][T21030] usb 7-1: config 0 has no interface number 0 [ 1520.172941][T21030] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1520.173033][T21030] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1520.173102][T21030] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1520.173172][T21030] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1520.173379][T21030] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1520.173536][T21030] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.482317][T21030] usb 7-1: config 0 descriptor?? [ 1520.516108][T21030] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1520.541042][T20158] usb 3-1: USB disconnect, device number 35 [ 1520.808251][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 1520.808303][T20158] usb 7-1: USB disconnect, device number 10 [ 1520.852742][T20158] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1521.260601][T21875] ldusb: No device or device unplugged -19 [ 1522.888657][T21903] sg_write: data in/out 266204/136 bytes for SCSI command 0x0-- guessing data in; [ 1522.888657][T21903] program syz.4.4656 not setting count and/or reply_len properly [ 1523.355734][T21916] syzkaller0: entered promiscuous mode [ 1523.355757][T21916] syzkaller0: entered allmulticast mode [ 1523.372490][T21916] tipc: Enabled bearer , priority 0 [ 1523.396850][T21915] tipc: Resetting bearer [ 1523.527542][ T36] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1523.527703][T21030] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1523.558075][T21915] tipc: Disabling bearer [ 1523.686583][T21030] usb 2-1: Using ep0 maxpacket: 8 [ 1523.689565][T21030] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1523.691226][T21030] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.691270][T21030] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1523.691457][ T36] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1523.691480][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.691497][ T36] usb 5-1: Product: syz [ 1523.691511][ T36] usb 5-1: Manufacturer: syz [ 1523.691524][ T36] usb 5-1: SerialNumber: syz [ 1523.694973][T21030] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1523.694998][T21030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.695016][T21030] usb 2-1: Product: syz [ 1523.695029][T21030] usb 2-1: Manufacturer: syz [ 1523.695043][T21030] usb 2-1: SerialNumber: syz [ 1523.726226][ T36] usb 5-1: config 0 descriptor?? [ 1523.984065][ T36] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1524.032535][ T37] audit: type=1107 audit(1785584399.576:25): pid=21923 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1524.065050][T21030] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1524.456802][T21030] usb 2-1: USB disconnect, device number 29 [ 1525.336788][ T36] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1525.459812][T20088] udevd[20088]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1525.737822][T21949] syzkaller0: entered promiscuous mode [ 1525.737845][T21949] syzkaller0: entered allmulticast mode [ 1525.744268][T21949] tipc: Enabled bearer , priority 0 [ 1525.792388][T21951] sg_write: data in/out 266204/136 bytes for SCSI command 0x0-- guessing data in; [ 1525.792388][T21951] program syz.5.4672 not setting count and/or reply_len properly [ 1525.800336][T21948] tipc: Resetting bearer [ 1526.639255][T16600] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1526.865226][T13445] usb 5-1: USB disconnect, device number 49 [ 1526.958565][T16600] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 1526.958594][T16600] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1526.958619][T16600] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1526.959693][T16600] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1526.959717][T16600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1526.959736][T16600] usb 3-1: SerialNumber: syz [ 1527.305045][T21948] tipc: Disabling bearer [ 1527.318846][T16600] hub 3-1:1.0: bad descriptor, ignoring hub [ 1527.318881][T16600] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1527.319986][T16600] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1528.092433][T16600] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1528.157622][T16600] usb 3-1: USB disconnect, device number 36 [ 1528.347949][T21030] tipc: Node number set to 918748516 [ 1529.656765][T21030] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1529.728725][T17261] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1529.806683][T21030] usb 2-1: Using ep0 maxpacket: 8 [ 1529.808683][T21030] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1529.809743][T21030] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.809774][T21030] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1529.812000][T21030] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1529.812024][T21030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.812042][T21030] usb 2-1: Product: syz [ 1529.812054][T21030] usb 2-1: Manufacturer: syz [ 1529.812072][T21030] usb 2-1: SerialNumber: syz [ 1529.891907][T17261] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 1529.891927][T17261] usb 7-1: config 0 has no interface number 0 [ 1529.891989][T17261] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1529.892069][T17261] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1529.892087][T17261] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1529.892113][T17261] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1529.892127][T17261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.917346][ T5823] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1530.002812][T17261] usb 7-1: config 0 descriptor?? [ 1530.004051][T21981] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1530.075888][T17261] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input23 [ 1530.096685][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 1530.100971][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1530.100990][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1530.103041][ T5823] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1530.103058][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.103070][ T5823] usb 6-1: Product: syz [ 1530.103079][ T5823] usb 6-1: Manufacturer: syz [ 1530.103089][ T5823] usb 6-1: SerialNumber: syz [ 1530.200831][T21030] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1530.252352][ T5823] usb 6-1: config 0 descriptor?? [ 1530.521416][ T5823] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1530.521440][ T5823] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1530.925900][ T5823] em28xx 6-1:0.0: unknown em28xx chip ID (247) [ 1531.073545][T17261] usb 7-1: USB disconnect, device number 11 [ 1531.073640][ C1] usbtouchscreen 7-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1531.141708][ T5823] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1531.142137][ T5823] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1531.142153][ T5823] em28xx 6-1:0.0: No AC97 audio processor [ 1532.164051][ T5823] usb 6-1: USB disconnect, device number 12 [ 1532.189308][T21030] usb 2-1: USB disconnect, device number 30 [ 1532.242598][ T5823] em28xx 6-1:0.0: Disconnecting em28xx [ 1533.111251][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 1533.138772][ T5823] em28xx 6-1:0.0: Freeing device [ 1533.467661][T20088] udevd[20088]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.896627][T17261] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1534.021042][T16600] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1534.197890][T16600] usb 5-1: Using ep0 maxpacket: 8 [ 1535.045946][T16600] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1535.055136][T16600] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.055181][T16600] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1535.083899][T16600] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1535.083923][T16600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.083941][T16600] usb 5-1: Product: syz [ 1535.083954][T16600] usb 5-1: Manufacturer: syz [ 1535.083967][T16600] usb 5-1: SerialNumber: syz [ 1535.419535][T17261] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.419595][T17261] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1535.419621][T17261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.442688][T17261] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1535.540024][T16600] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1535.600980][T16600] usb 5-1: USB disconnect, device number 50 [ 1535.734460][T21030] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1536.590342][T17261] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1536.590366][T17261] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 1536.592390][T17261] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1536.592410][T17261] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 1536.716938][T21030] usb 6-1: Using ep0 maxpacket: 16 [ 1537.038776][T21030] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1537.038805][T21030] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1537.047400][T21030] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1537.047462][T21030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.047509][T21030] usb 6-1: Product: syz [ 1537.047546][T21030] usb 6-1: Manufacturer: syz [ 1537.047581][T21030] usb 6-1: SerialNumber: syz [ 1537.129156][T20088] udevd[20088]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1537.159372][T17261] usb 7-1: USB disconnect, device number 12 [ 1537.189826][T21030] usb 6-1: config 0 descriptor?? [ 1538.256832][T21030] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1538.256864][T21030] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1538.348641][T21030] em28xx 6-1:0.0: unknown em28xx chip ID (247) [ 1538.975656][T22064] program syz.4.4712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1539.532808][T21030] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1539.533241][T21030] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1539.533256][T21030] em28xx 6-1:0.0: No AC97 audio processor [ 1540.326697][T13445] usb 6-1: USB disconnect, device number 13 [ 1540.333347][T13445] em28xx 6-1:0.0: Disconnecting em28xx [ 1540.358988][T13445] em28xx 6-1:0.0: Freeing device [ 1540.391809][T22074] binder: 22073:22074 ioctl c018620b 0 returned -14 [ 1542.086655][T13445] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1542.256753][ T5823] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1543.216631][T13445] usb 3-1: Using ep0 maxpacket: 8 [ 1543.243553][T13445] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1543.244579][T13445] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.244619][T13445] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1543.246813][T13445] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1543.246830][T13445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.246843][T13445] usb 3-1: Product: syz [ 1543.246852][T13445] usb 3-1: Manufacturer: syz [ 1543.246863][T13445] usb 3-1: SerialNumber: syz [ 1543.339816][T22098] program syz.4.4724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1543.356735][ T5823] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1543.356766][ T5823] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1543.356802][ T5823] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1543.356821][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.434924][T22091] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1543.466850][ T5823] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1543.748388][T21030] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1543.933372][T21030] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1543.933429][T21030] usb 2-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1543.933447][T21030] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1543.936033][T21030] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1543.936050][T21030] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1543.936063][T21030] usb 2-1: Product: syz [ 1543.936072][T21030] usb 2-1: Manufacturer: syz [ 1543.936081][T21030] usb 2-1: SerialNumber: syz [ 1544.048095][T21030] usb 2-1: config 0 descriptor?? [ 1544.053989][T22101] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1544.116109][T22106] binder: 22105:22106 ioctl c018620b 0 returned -14 [ 1544.182613][T13445] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1544.692149][T21030] usb 2-1: selecting invalid altsetting 0 [ 1544.712819][T13445] usb 3-1: USB disconnect, device number 37 [ 1544.838583][T19993] usb 7-1: USB disconnect, device number 13 [ 1545.192097][T22119] syzkaller0: entered promiscuous mode [ 1545.192120][T22119] syzkaller0: entered allmulticast mode [ 1545.227967][T22119] tipc: Enabled bearer , priority 0 [ 1545.252634][T22118] tipc: Resetting bearer [ 1545.302547][T21030] usb 2-1: USB disconnect, device number 31 [ 1545.460964][T22118] tipc: Disabling bearer [ 1545.651282][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.651343][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.691080][T22122] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.812695][T13445] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1545.967579][T13445] usb 3-1: Using ep0 maxpacket: 16 [ 1545.969504][T13445] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1545.969531][T13445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1546.005714][T13445] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1546.005738][T13445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.005756][T13445] usb 3-1: Product: syz [ 1546.005768][T13445] usb 3-1: Manufacturer: syz [ 1546.005781][T13445] usb 3-1: SerialNumber: syz [ 1546.055702][T13445] usb 3-1: config 0 descriptor?? [ 1546.067960][T13445] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1546.067988][T13445] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1546.188522][T22138] binder: 22136:22138 ioctl c018620b 0 returned -14 [ 1547.453930][T13445] em28xx 3-1:0.0: unknown em28xx chip ID (247) [ 1547.536648][T17266] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1547.570959][T22141] program syz.6.4740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1547.696686][T17266] usb 5-1: Using ep0 maxpacket: 8 [ 1547.701975][T17266] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1547.716820][T17266] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.716901][T17266] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1547.745523][T17266] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1547.745561][T17266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.745580][T17266] usb 5-1: Product: syz [ 1547.745594][T17266] usb 5-1: Manufacturer: syz [ 1547.745607][T17266] usb 5-1: SerialNumber: syz [ 1547.872005][T13445] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1547.872417][T13445] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1547.872434][T13445] em28xx 3-1:0.0: No AC97 audio processor [ 1547.912285][T13445] usb 3-1: USB disconnect, device number 38 [ 1547.926801][T13445] em28xx 3-1:0.0: Disconnecting em28xx [ 1548.005709][T13445] em28xx 3-1:0.0: Freeing device [ 1548.045140][T17266] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1548.394903][T17266] usb 5-1: USB disconnect, device number 51 [ 1548.560577][T20105] udevd[20105]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1548.888240][T22167] binder: 22166:22167 ioctl c018620b 0 returned -14 [ 1549.255058][T22174] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.288328][T17266] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1550.535495][T17266] usb 3-1: Using ep0 maxpacket: 16 [ 1550.544662][T17266] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1550.544692][T17266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1550.562981][T17266] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1550.563008][T17266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.563041][T17266] usb 3-1: Product: syz [ 1550.563071][T17266] usb 3-1: Manufacturer: syz [ 1550.563096][T17266] usb 3-1: SerialNumber: syz [ 1550.611973][T17266] usb 3-1: config 0 descriptor?? [ 1550.655355][T17266] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1550.655375][T17266] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1550.674110][T22178] program syz.6.4755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1551.006661][T21030] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1551.179803][T21030] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1551.179830][T21030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.179847][T21030] usb 6-1: Product: syz [ 1551.180254][T21030] usb 6-1: Manufacturer: syz [ 1551.180269][T21030] usb 6-1: SerialNumber: syz [ 1551.230840][T21030] usb 6-1: config 0 descriptor?? [ 1551.246294][T17266] em28xx 3-1:0.0: unknown em28xx chip ID (247) [ 1551.416618][T19993] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1551.448604][T17266] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1551.449235][T17266] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1551.449251][T17266] em28xx 3-1:0.0: No AC97 audio processor [ 1551.458191][T21030] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1551.533780][T17266] usb 3-1: USB disconnect, device number 39 [ 1551.545967][T17266] em28xx 3-1:0.0: Disconnecting em28xx [ 1551.566700][T19993] usb 5-1: Using ep0 maxpacket: 8 [ 1551.570487][T19993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1551.571565][T19993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.571610][T19993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1551.600736][T19993] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1551.600761][T19993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.600780][T19993] usb 5-1: Product: syz [ 1551.600794][T19993] usb 5-1: Manufacturer: syz [ 1551.600808][T19993] usb 5-1: SerialNumber: syz [ 1551.753091][T17266] em28xx 3-1:0.0: Freeing device [ 1551.957020][T19993] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1552.056001][T19993] usb 5-1: USB disconnect, device number 52 [ 1552.173119][T22121] udevd[22121]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1552.325893][T22202] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.890348][T21030] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1554.793251][T22217] program syz.1.4771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1554.875420][T13445] usb 6-1: USB disconnect, device number 14 [ 1555.162205][T22233] ieee802154 phy0 wpan0: encryption failed: -22 [ 1557.236574][T13445] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1557.392260][T13445] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1557.392289][T13445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.392307][T13445] usb 5-1: Product: syz [ 1557.392320][T13445] usb 5-1: Manufacturer: syz [ 1557.392334][T13445] usb 5-1: SerialNumber: syz [ 1557.399315][T13445] usb 5-1: config 0 descriptor?? [ 1557.536937][T16600] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1557.605386][T13445] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1557.686590][T16600] usb 2-1: Using ep0 maxpacket: 8 [ 1557.689400][T16600] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1557.690589][T16600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.690634][T16600] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1557.693785][T16600] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1557.693803][T16600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.693815][T16600] usb 2-1: Product: syz [ 1557.693827][T16600] usb 2-1: Manufacturer: syz [ 1557.693836][T16600] usb 2-1: SerialNumber: syz [ 1557.999265][T16600] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1558.217686][T21030] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1558.344860][T16600] usb 2-1: USB disconnect, device number 32 [ 1558.366568][T21030] usb 7-1: Using ep0 maxpacket: 8 [ 1558.368630][T21030] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1558.368652][T21030] usb 7-1: config 0 has no interface number 0 [ 1558.368691][T21030] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1558.368713][T21030] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1558.368736][T21030] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1558.368761][T21030] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1558.368798][T21030] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1558.368820][T21030] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.414819][T17266] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1558.486936][T21030] usb 7-1: config 0 descriptor?? [ 1558.493672][T21030] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1558.587146][T22121] udevd[22121]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1558.616595][T17266] usb 3-1: Using ep0 maxpacket: 8 [ 1558.624479][T17266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1558.624521][T17266] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1558.624543][T17266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.669197][T13445] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1558.695196][ T36] usb 7-1: USB disconnect, device number 14 [ 1558.739012][ T36] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1558.780040][T17266] usb 3-1: config 0 descriptor?? [ 1559.022460][T17266] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1559.227958][ T36] usb 3-1: USB disconnect, device number 40 [ 1559.875346][ T37] audit: type=1326 audit(1785584435.256:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22302 comm="syz.6.4805" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd58fcae019 code=0x0 [ 1560.058111][T13445] usb 5-1: USB disconnect, device number 53 [ 1560.214459][T22307] trusted_key: encrypted_key: insufficient parameters specified [ 1560.637114][T22331] netlink: 'syz.6.4817': attribute type 7 has an invalid length. [ 1560.906691][T13445] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1561.077872][T13445] usb 7-1: Using ep0 maxpacket: 8 [ 1561.080563][T13445] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.080592][T13445] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1561.080630][T13445] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1561.080652][T13445] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.099250][T13445] usb 7-1: config 0 descriptor?? [ 1561.187415][T16600] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1561.316407][T22331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.324317][T22331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.618691][T13445] hid_parser_main: 385 callbacks suppressed [ 1561.618752][T13445] hid-multitouch 0003:0EEF:72D0.0005: unknown main item tag 0x1 [ 1561.618772][T13445] hid-multitouch 0003:0EEF:72D0.0005: unknown main item tag 0x0 [ 1561.618789][T13445] hid-multitouch 0003:0EEF:72D0.0005: unknown main item tag 0x0 [ 1561.618805][T13445] hid-multitouch 0003:0EEF:72D0.0005: unknown main item tag 0x0 [ 1561.618821][T13445] hid-multitouch 0003:0EEF:72D0.0005: unknown main item tag 0x0 [ 1561.618837][T13445] hid-multitouch 0003:0EEF:72D0.0005: unknown main item tag 0x0 [ 1561.618853][T13445] hid-multitouch 0003:0EEF:72D0.0005: unknown main item tag 0x0 [ 1561.618868][T13445] hid-multitouch 0003:0EEF:72D0.0005: unknown main item tag 0x0 [ 1561.729027][T16600] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1561.729054][T16600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.729073][T16600] usb 5-1: Product: syz [ 1561.729087][T16600] usb 5-1: Manufacturer: syz [ 1561.729100][T16600] usb 5-1: SerialNumber: syz [ 1562.034218][T22331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.034814][T22331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.153665][T13445] hid-multitouch 0003:0EEF:72D0.0005: hidraw0: USB HID v0.08 Device [HID 0eef:72d0] on usb-dummy_hcd.6-1/input0 [ 1562.153881][T16600] usb 5-1: config 0 descriptor?? [ 1562.220174][T13445] usb 7-1: USB disconnect, device number 15 [ 1562.377912][T16600] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1562.691585][ T37] audit: type=1326 audit(1785584438.246:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22357 comm="syz.1.4827" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9290dde019 code=0x0 [ 1562.837461][T22356] fido_id[22356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1563.475071][T16600] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1563.522750][T22378] trusted_key: encrypted_key: insufficient parameters specified [ 1563.786726][T16600] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1563.936602][T16600] usb 2-1: Using ep0 maxpacket: 32 [ 1563.939780][T16600] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1563.939805][T16600] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1563.939825][T16600] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1563.939873][T16600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1563.939895][T16600] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1563.939918][T16600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1563.939949][T16600] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1563.939971][T16600] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1563.940010][T16600] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1563.940031][T16600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.986363][T16600] usb 2-1: config 0 descriptor?? [ 1564.349233][T22389] ieee802154 phy0 wpan0: encryption failed: -22 [ 1564.378002][T16600] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1564.534240][T20158] usb 2-1: USB disconnect, device number 33 [ 1564.702696][T16600] usb 5-1: USB disconnect, device number 54 [ 1564.799276][T20158] usblp0: removed [ 1565.638573][ T37] audit: type=1326 audit(1785584441.206:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22401 comm="syz.5.4846" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64ff7be019 code=0x0 [ 1565.960129][T22413] trusted_key: encrypted_key: insufficient parameters specified [ 1566.070608][T22419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1566.226638][T21030] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1566.391327][T21030] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1566.391352][T21030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.391369][T21030] usb 5-1: Product: syz [ 1566.391387][T21030] usb 5-1: Manufacturer: syz [ 1566.391397][T21030] usb 5-1: SerialNumber: syz [ 1566.428960][T21030] usb 5-1: config 0 descriptor?? [ 1566.633824][T21030] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1567.551727][T22449] ieee802154 phy0 wpan0: encryption failed: -22 [ 1567.952489][ T37] audit: type=1326 audit(1785584443.246:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22451 comm="syz.6.4867" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd58fcae019 code=0x0 [ 1568.000408][T21030] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1569.420129][T16600] usb 5-1: USB disconnect, device number 55 [ 1569.565725][T22471] trusted_key: encrypted_key: insufficient parameters specified [ 1570.756241][T22484] ieee802154 phy0 wpan0: encryption failed: -22 [ 1572.157371][ T36] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1572.307653][ T37] audit: type=1326 audit(1785584447.836:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22507 comm="syz.6.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd58fcae019 code=0x0 [ 1572.754374][ T36] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1572.754402][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.754421][ T36] usb 2-1: Product: syz [ 1572.754433][ T36] usb 2-1: Manufacturer: syz [ 1572.754447][ T36] usb 2-1: SerialNumber: syz [ 1572.773470][ T36] usb 2-1: config 0 descriptor?? [ 1573.000978][ T36] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1574.497746][ T36] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1574.739516][T22539] misc userio: No port type given on /dev/userio [ 1575.026602][T20158] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1575.176608][T20158] usb 7-1: Using ep0 maxpacket: 8 [ 1575.178713][T20158] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1575.178738][T20158] usb 7-1: config 0 has no interface number 0 [ 1575.178778][T20158] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1575.178800][T20158] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1575.178824][T20158] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1575.178849][T20158] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1575.178887][T20158] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1575.178908][T20158] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.287765][T20158] usb 7-1: config 0 descriptor?? [ 1575.317644][T20158] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1575.502942][T20158] usb 7-1: USB disconnect, device number 16 [ 1575.525492][T20158] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1575.893975][T21030] usb 2-1: USB disconnect, device number 34 [ 1575.986632][T17266] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1577.116804][T17266] usb 5-1: Using ep0 maxpacket: 32 [ 1577.498098][T17266] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1577.498124][T17266] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1577.498143][T17266] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1577.498189][T17266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1577.498209][T17266] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1577.498231][T17266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1577.498259][T17266] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1577.498280][T17266] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1577.498319][T17266] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1577.498340][T17266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.616184][T17266] usb 5-1: config 0 descriptor?? [ 1577.873367][T22567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4907'. [ 1577.907410][T17266] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1577.959780][T17266] usb 5-1: USB disconnect, device number 56 [ 1577.984785][T17266] usblp0: removed [ 1578.039409][T22572] Bluetooth: (null): Non-link packet received in non-active state [ 1578.308544][ T167] Bluetooth: (null): Invalid header checksum [ 1578.308629][ T167] Bluetooth: (null): Invalid header checksum [ 1578.878026][T22585] ieee802154 phy0 wpan0: encryption failed: -22 [ 1579.465035][T22597] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4920'. [ 1581.674434][T22629] netlink: 'syz.5.4932': attribute type 7 has an invalid length. [ 1581.763277][ T37] audit: type=1326 audit(1785584457.326:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22630 comm="syz.1.4933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9290dde019 code=0x0 [ 1581.786592][T16600] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1581.946738][T16600] usb 5-1: Using ep0 maxpacket: 8 [ 1581.954658][T16600] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1581.954685][T16600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1581.954704][T16600] usb 5-1: Product: syz [ 1581.954718][T16600] usb 5-1: Manufacturer: syz [ 1581.954731][T16600] usb 5-1: SerialNumber: syz [ 1581.956916][T21030] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1582.008681][T16600] usb 5-1: config 0 descriptor?? [ 1582.016282][T16600] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1582.106614][T21030] usb 6-1: Using ep0 maxpacket: 8 [ 1582.110567][T21030] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.110596][T21030] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1582.110635][T21030] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1582.110656][T21030] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.115242][T21030] usb 6-1: config 0 descriptor?? [ 1582.234234][T16600] gspca_sn9c2028: read1 error -32 [ 1582.732695][T22629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.733533][T22629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.755996][T12404] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 1582.761607][T16600] gspca_sn9c2028: read1 error -71 [ 1582.761680][T16600] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1582.825359][T16600] usb 5-1: USB disconnect, device number 57 [ 1582.900883][T22639] Bluetooth: (null): Non-link packet received in non-active state [ 1582.931573][ T1127] Bluetooth: (null): Invalid header checksum [ 1582.967970][T21030] hid-multitouch 0003:0EEF:72D0.0006: unknown main item tag 0x1 [ 1582.968000][T21030] hid-multitouch 0003:0EEF:72D0.0006: unknown main item tag 0x0 [ 1582.968024][T21030] hid-multitouch 0003:0EEF:72D0.0006: unknown main item tag 0x0 [ 1582.968047][T21030] hid-multitouch 0003:0EEF:72D0.0006: unknown main item tag 0x0 [ 1582.968071][T21030] hid-multitouch 0003:0EEF:72D0.0006: unknown main item tag 0x0 [ 1582.968095][T21030] hid-multitouch 0003:0EEF:72D0.0006: unknown main item tag 0x0 [ 1582.968118][T21030] hid-multitouch 0003:0EEF:72D0.0006: unknown main item tag 0x0 [ 1582.968141][T21030] hid-multitouch 0003:0EEF:72D0.0006: unknown main item tag 0x0 [ 1583.000237][T21030] hid-multitouch 0003:0EEF:72D0.0006: hidraw0: USB HID v0.08 Device [HID 0eef:72d0] on usb-dummy_hcd.5-1/input0 [ 1583.154510][T17266] usb 6-1: USB disconnect, device number 15 [ 1583.446622][T16600] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1583.576631][T16600] usb 3-1: device descriptor read/64, error -71 [ 1583.728520][ T37] audit: type=1326 audit(1785584459.296:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22662 comm="syz.5.4945" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64ff7be019 code=0x0 [ 1583.816591][T16600] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1583.946568][T16600] usb 3-1: device descriptor read/64, error -71 [ 1584.056915][T16600] usb usb3-port1: attempt power cycle [ 1584.120880][T22674] Bluetooth: (null): Non-link packet received in non-active state [ 1584.296595][T17266] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1584.396906][T16600] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1584.417897][T16600] usb 3-1: device descriptor read/8, error -71 [ 1584.458368][T17266] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1584.458392][T17266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.465835][T17266] usb 5-1: config 0 descriptor?? [ 1584.658585][T16600] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1584.679689][T16600] usb 3-1: device descriptor read/8, error -71 [ 1584.787022][T16600] usb usb3-port1: unable to enumerate USB device [ 1584.877236][T22690] netlink: 'syz.1.4957': attribute type 9 has an invalid length. [ 1584.877255][T22690] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4957'. [ 1584.930557][T17266] usb 5-1: Cannot set MAC address [ 1584.930788][T17266] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1584.968843][T17266] usb 5-1: USB disconnect, device number 58 [ 1585.147786][T22696] Bluetooth: (null): Non-link packet received in non-active state [ 1585.168617][T17259] Bluetooth: (null): Invalid header checksum [ 1585.570615][ T37] audit: type=1326 audit(1785584461.136:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22712 comm="syz.1.4966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9290dde019 code=0x0 [ 1585.646663][T17266] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1585.806755][T17266] usb 7-1: Using ep0 maxpacket: 8 [ 1585.809822][T17266] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1585.809843][T17266] usb 7-1: config 0 has no interface number 0 [ 1585.809870][T17266] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1585.809889][T17266] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1585.809905][T17266] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1585.809922][T17266] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1585.809948][T17266] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1585.809962][T17266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.816248][T17266] usb 7-1: config 0 descriptor?? [ 1585.859656][T17266] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1586.006558][T16600] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1586.064712][T17266] usb 7-1: USB disconnect, device number 17 [ 1586.080169][T17266] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1586.159309][T16600] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1586.160428][T16600] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.160448][T16600] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1586.162732][T16600] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 1586.162755][T16600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.162773][T16600] usb 5-1: Product: syz [ 1586.162785][T16600] usb 5-1: Manufacturer: syz [ 1586.162801][T16600] usb 5-1: SerialNumber: syz [ 1586.313743][T22722] netlink: 'syz.2.4970': attribute type 9 has an invalid length. [ 1586.313757][T22722] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4970'. [ 1586.650423][T16600] usb 5-1: USB disconnect, device number 59 [ 1586.892503][T22735] Bluetooth: (null): Non-link packet received in non-active state [ 1587.132843][T22741] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1587.490540][ T37] audit: type=1326 audit(1785584463.056:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22759 comm="syz.2.4987" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbecb0ae019 code=0x0 [ 1589.296549][T12404] Bluetooth: hci5: command 0x0406 tx timeout [ 1589.549612][T22785] program syz.5.4996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1590.262671][T22803] netlink: 'syz.2.5006': attribute type 7 has an invalid length. [ 1590.506861][T17266] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1590.656609][T17266] usb 3-1: Using ep0 maxpacket: 8 [ 1590.658432][T17266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.658453][T17266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1590.658479][T17266] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1590.658493][T17266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.661618][T17266] usb 3-1: config 0 descriptor?? [ 1590.864667][T22803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.879424][T22803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.091029][T17266] usbhid 3-1:0.0: can't add hid device: -71 [ 1591.091104][T17266] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1591.131373][T17266] usb 3-1: USB disconnect, device number 45 [ 1591.407562][T12404] Bluetooth: hci5: command 0x0406 tx timeout [ 1591.827224][T22850] Bluetooth: (null): Non-link packet received in non-active state [ 1591.848319][ T1538] Bluetooth: (null): Invalid header checksum [ 1591.966841][T17259] Bluetooth: (null): Invalid header checksum [ 1593.596668][T17266] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1593.746608][T17266] usb 6-1: Using ep0 maxpacket: 8 [ 1593.764853][T17266] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1593.764879][T17266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1593.764898][T17266] usb 6-1: Product: syz [ 1593.764911][T17266] usb 6-1: Manufacturer: syz [ 1593.764924][T17266] usb 6-1: SerialNumber: syz [ 1593.809588][T17266] usb 6-1: config 0 descriptor?? [ 1593.815573][T17266] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1594.025607][T17266] gspca_sn9c2028: read1 error -32 [ 1594.238073][ T1538] Bluetooth: (null): Too short H5 packet [ 1594.238571][ T1538] Bluetooth: (null): Invalid header checksum [ 1594.240544][T21093] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 1594.243840][T17266] gspca_sn9c2028: read1 error -71 [ 1594.243934][T17266] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1594.318445][T17266] usb 6-1: USB disconnect, device number 16 [ 1594.358109][ T1538] Bluetooth: (null): Too short H5 packet [ 1594.358272][ T1538] Bluetooth: (null): Invalid header checksum [ 1595.266691][T21030] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1595.418758][T21030] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.418822][T21030] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1595.457690][T21030] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 1595.458114][T21030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.458135][T21030] usb 6-1: Product: syz [ 1595.458149][T21030] usb 6-1: Manufacturer: syz [ 1595.458163][T21030] usb 6-1: SerialNumber: syz [ 1595.506033][T21030] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1595.681562][T21030] scsi host1: usb-storage 6-1:1.0 [ 1595.733249][T21030] usb 6-1: USB disconnect, device number 17 [ 1596.341719][T22967] sg_write: data in/out 373125/136 bytes for SCSI command 0x0-- guessing data in; [ 1596.341719][T22967] program syz.5.5073 not setting count and/or reply_len properly [ 1597.661123][T22987] Bluetooth: (null): Non-link packet received in non-active state [ 1597.676667][ T1127] Bluetooth: (null): Invalid header checksum [ 1598.666617][T20158] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1598.846845][T20158] usb 3-1: Using ep0 maxpacket: 8 [ 1598.852311][T20158] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1598.852336][T20158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1598.852355][T20158] usb 3-1: Product: syz [ 1598.852369][T20158] usb 3-1: Manufacturer: syz [ 1598.852382][T20158] usb 3-1: SerialNumber: syz [ 1598.895035][T20158] usb 3-1: config 0 descriptor?? [ 1598.920354][T20158] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1599.114056][T20158] gspca_sn9c2028: read1 error -32 [ 1599.216567][T17266] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1599.341764][T20158] gspca_sn9c2028: read1 error -71 [ 1599.341842][T20158] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1599.348436][T17266] usb 2-1: device descriptor read/64, error -71 [ 1599.374044][T20158] usb 3-1: USB disconnect, device number 46 [ 1599.506681][T19993] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1599.586540][T17266] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1599.747589][T17266] usb 2-1: device descriptor read/64, error -71 [ 1599.856868][T17266] usb usb2-port1: attempt power cycle [ 1600.008947][T19993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.009086][T19993] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1600.779934][T19993] usb 5-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 1600.779962][T19993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.779980][T19993] usb 5-1: Product: syz [ 1600.779993][T19993] usb 5-1: Manufacturer: syz [ 1600.780007][T19993] usb 5-1: SerialNumber: syz [ 1600.836576][T17266] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1600.869053][T17266] usb 2-1: device descriptor read/8, error -71 [ 1600.914836][T19993] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1600.945739][T19993] scsi host1: usb-storage 5-1:1.0 [ 1601.068701][T19993] usb 5-1: USB disconnect, device number 60 [ 1601.120065][T17266] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1601.145158][T17266] usb 2-1: device descriptor read/8, error -71 [ 1601.286728][T17266] usb usb2-port1: unable to enumerate USB device [ 1601.436577][T16600] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1601.586665][T16600] usb 3-1: Using ep0 maxpacket: 8 [ 1601.589090][T16600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1601.591711][T16600] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.591769][T16600] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1601.595809][T16600] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1601.595834][T16600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.595854][T16600] usb 3-1: Product: syz [ 1601.595867][T16600] usb 3-1: Manufacturer: syz [ 1601.595881][T16600] usb 3-1: SerialNumber: syz [ 1601.894172][T16600] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1602.021555][T16600] usb 3-1: USB disconnect, device number 47 [ 1602.121089][T20105] udevd[20105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1602.743791][T23092] netlink: 'syz.2.5128': attribute type 9 has an invalid length. [ 1602.743811][T23092] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5128'. [ 1606.456615][T16600] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1606.609326][T16600] usb 2-1: Using ep0 maxpacket: 8 [ 1606.628112][T16600] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1606.629418][T16600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.629450][T16600] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1606.670407][T16600] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1606.670432][T16600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.670451][T16600] usb 2-1: Product: syz [ 1606.670464][T16600] usb 2-1: Manufacturer: syz [ 1606.670478][T16600] usb 2-1: SerialNumber: syz [ 1606.908043][T16600] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1607.026632][T19993] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1607.032983][T16600] usb 2-1: USB disconnect, device number 39 [ 1607.098744][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.098805][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.172494][T20105] udevd[20105]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1607.194740][T19993] usb 3-1: Using ep0 maxpacket: 8 [ 1607.217193][T19993] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1607.217220][T19993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1607.217239][T19993] usb 3-1: Product: syz [ 1607.217252][T19993] usb 3-1: Manufacturer: syz [ 1607.217265][T19993] usb 3-1: SerialNumber: syz [ 1607.224193][T19993] usb 3-1: config 0 descriptor?? [ 1607.286732][T19993] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1607.544642][T19993] gspca_sn9c2028: read1 error -32 [ 1608.153053][T19993] gspca_sn9c2028: read1 error -110 [ 1608.153329][T19993] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -110 [ 1608.426244][T16600] usb 3-1: USB disconnect, device number 48 [ 1610.774263][T23220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5164'. [ 1611.843997][T21030] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1611.997251][T21030] usb 6-1: Using ep0 maxpacket: 8 [ 1612.000779][T21030] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.000806][T21030] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1612.005143][T21030] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1612.005168][T21030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.005187][T21030] usb 6-1: Product: syz [ 1612.005200][T21030] usb 6-1: Manufacturer: syz [ 1612.005213][T21030] usb 6-1: SerialNumber: syz [ 1612.311350][T21030] usb 6-1: disable ehci-hcd to run US-144 [ 1612.329898][T21030] usb 6-1: USB disconnect, device number 18 [ 1612.496625][T17266] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1612.646590][T17266] usb 3-1: Using ep0 maxpacket: 8 [ 1612.654156][T17266] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1612.654181][T17266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1612.654200][T17266] usb 3-1: Product: syz [ 1612.654213][T17266] usb 3-1: Manufacturer: syz [ 1612.654225][T17266] usb 3-1: SerialNumber: syz [ 1612.702796][T17266] usb 3-1: config 0 descriptor?? [ 1612.721888][T17266] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1612.925433][T17266] gspca_sn9c2028: read1 error -32 [ 1613.142347][T17266] gspca_sn9c2028: read1 error -71 [ 1613.142428][T17266] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1613.170328][T17266] usb 3-1: USB disconnect, device number 49 [ 1613.467983][T21030] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1613.894010][T21030] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1613.894438][T21030] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.894852][T21030] usb 6-1: config 0 has no interface number 0 [ 1613.927848][T21030] usb 6-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1613.927876][T21030] usb 6-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1613.961477][T21030] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1613.961503][T21030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.961522][T21030] usb 6-1: Product: syz [ 1613.961535][T21030] usb 6-1: Manufacturer: syz [ 1613.961548][T21030] usb 6-1: SerialNumber: syz [ 1614.179012][T21030] usb 6-1: config 0 descriptor?? [ 1614.197937][T21030] asix 6-1:0.251: probe with driver asix failed with error -22 [ 1615.012720][T23268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1615.326917][T17266] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1615.436829][T21030] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1615.456566][T17266] usb 2-1: device descriptor read/64, error -71 [ 1615.588096][T21030] usb 3-1: no configurations [ 1615.588112][T21030] usb 3-1: can't read configurations, error -22 [ 1615.706540][T17266] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1615.726619][T21030] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1615.846594][T17266] usb 2-1: device descriptor read/64, error -71 [ 1615.877642][T21030] usb 3-1: no configurations [ 1615.877657][T21030] usb 3-1: can't read configurations, error -22 [ 1615.879120][T21030] usb usb3-port1: attempt power cycle [ 1615.957761][T17266] usb usb2-port1: attempt power cycle [ 1615.966813][T19993] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1616.119914][T19993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.119977][T19993] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1616.119999][T19993] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 0 [ 1616.120022][T19993] usb 5-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1616.122510][T19993] usb 5-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 1616.122535][T19993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.122553][T19993] usb 5-1: Product: syz [ 1616.122566][T19993] usb 5-1: Manufacturer: syz [ 1616.122579][T19993] usb 5-1: SerialNumber: syz [ 1616.195189][T19993] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1616.214726][T19993] scsi host1: usb-storage 5-1:1.0 [ 1616.252586][ T5823] usb 6-1: USB disconnect, device number 19 [ 1616.266592][T21030] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1616.288567][T21030] usb 3-1: no configurations [ 1616.288583][T21030] usb 3-1: can't read configurations, error -22 [ 1616.312621][T17266] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1616.327206][T17266] usb 2-1: device descriptor read/8, error -71 [ 1616.395266][T19993] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 1616.395280][T19993] #PF: supervisor read access in kernel mode [ 1616.395290][T19993] #PF: error_code(0x0000) - not-present page [ 1616.395300][T19993] PGD 80000000528b0067 P4D 80000000528b0067 PUD 0 [ 1616.395326][T19993] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 1616.395411][T19993] CPU: 0 UID: 0 PID: 19993 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1616.395431][T19993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1616.395444][T19993] Workqueue: usb_hub_wq hub_event [ 1616.395506][T19993] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 1616.395600][T19993] Code: b3 8d 4c 8b b8 b8 b2 9e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 0f 22 8e 4d 8b 3f 49 81 ff 00 0f 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 cb 43 08 03 84 c0 74 0e 49 8b 07 49 [ 1616.395617][T19993] RSP: 0018:ffffc900045bf7e8 EFLAGS: 00010207 [ 1616.395665][T19993] RAX: 0000000000000000 RBX: ffff888038cb0000 RCX: 0000000000000000 [ 1616.395678][T19993] RDX: 0000000055c03ee2 RSI: 0000000000000001 RDI: ffffffff8bca7820 [ 1616.395691][T19993] RBP: 0000000000100000 R08: ffffffff8b46cb20 R09: 0000000000000000 [ 1616.395703][T19993] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000002 [ 1616.395715][T19993] R13: 0000000000000001 R14: ffff88804194e000 R15: 0000000000000000 [ 1616.395727][T19993] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 1616.395743][T19993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1616.395756][T19993] CR2: 0000000000000010 CR3: 0000000052930000 CR4: 00000000003526f0 [ 1616.395772][T19993] DR0: 0000000000000c45 DR1: 0000000000000000 DR2: 0000000000000000 [ 1616.395783][T19993] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1616.395795][T19993] Call Trace: [ 1616.395802][T19993] [ 1616.395811][T19993] hub_event+0x15d/0x4cf0 [ 1616.395833][T19993] ? lock_acquire+0x106/0x350 [ 1616.395892][T19993] ? __lock_acquire+0x683/0x2ce0 [ 1616.395913][T19993] ? register_lock_class+0x31/0x2e0 [ 1616.395934][T19993] ? __lock_acquire+0x683/0x2ce0 [ 1616.395954][T19993] ? lapic_next_event+0x11/0x20 [ 1616.396010][T19993] ? clockevents_program_event+0x491/0x630 [ 1616.396083][T19993] ? do_raw_spin_lock+0x12b/0x2f0 [ 1616.396113][T19993] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1616.396141][T19993] ? __pfx_hub_event+0x10/0x10 [ 1616.396161][T19993] ? process_scheduled_works+0xa20/0x14e0 [ 1616.396188][T19993] ? rcu_is_watching+0x15/0xb0 [ 1616.396262][T19993] ? process_scheduled_works+0xa20/0x14e0 [ 1616.396284][T19993] process_scheduled_works+0xa8e/0x14e0 [ 1616.396318][T19993] ? __pfx_process_scheduled_works+0x10/0x10 [ 1616.396344][T19993] ? assign_work+0x3cf/0x5d0 [ 1616.396367][T19993] worker_thread+0xa47/0xfb0 [ 1616.396396][T19993] ? __kthread_parkme+0x71/0x1f0 [ 1616.396425][T19993] kthread+0x388/0x470 [ 1616.396455][T19993] ? __pfx_worker_thread+0x10/0x10 [ 1616.396477][T19993] ? __pfx_kthread+0x10/0x10 [ 1616.396505][T19993] ret_from_fork+0x514/0xb70 [ 1616.396538][T19993] ? __pfx_ret_from_fork+0x10/0x10 [ 1616.396566][T19993] ? __switch_to+0xc89/0x1420 [ 1616.396593][T19993] ? __pfx_kthread+0x10/0x10 [ 1616.396621][T19993] ret_from_fork_asm+0x1a/0x30 [ 1616.396655][T19993] [ 1616.396667][T19993] Modules linked in: [ 1616.396686][T19993] CR2: 0000000000000010 [ 1616.396699][T19993] ---[ end trace 0000000000000000 ]--- [ 1616.396715][T19993] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 1616.396745][T19993] Code: b3 8d 4c 8b b8 b8 b2 9e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 0f 22 8e 4d 8b 3f 49 81 ff 00 0f 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 cb 43 08 03 84 c0 74 0e 49 8b 07 49 [ 1616.396761][T19993] RSP: 0018:ffffc900045bf7e8 EFLAGS: 00010207 [ 1616.396776][T19993] RAX: 0000000000000000 RBX: ffff888038cb0000 RCX: 0000000000000000 [ 1616.396789][T19993] RDX: 0000000055c03ee2 RSI: 0000000000000001 RDI: ffffffff8bca7820 [ 1616.396802][T19993] RBP: 0000000000100000 R08: ffffffff8b46cb20 R09: 0000000000000000 [ 1616.396815][T19993] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000002 [ 1616.396827][T19993] R13: 0000000000000001 R14: ffff88804194e000 R15: 0000000000000000 [ 1616.396839][T19993] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 1616.396854][T19993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1616.396867][T19993] CR2: 0000000000000010 CR3: 0000000052930000 CR4: 00000000003526f0 [ 1616.396882][T19993] DR0: 0000000000000c45 DR1: 0000000000000000 DR2: 0000000000000000 [ 1616.396893][T19993] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1616.396942][T19993] Kernel panic - not syncing: Fatal exception [ 1616.397574][T19993] Kernel Offset: disabled