last executing test programs: 4m20.267026183s ago: executing program 0 (id=3463): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300)='@', 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001980)={r0, &(0x7f0000000880)="308e182f68e0a6", 0x0}, 0x20) 4m20.204515241s ago: executing program 0 (id=3465): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) 4m20.068575459s ago: executing program 0 (id=3467): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) read$FUSE(r0, &(0x7f0000000fc0)={0x2020}, 0x2020) 4m20.058718417s ago: executing program 0 (id=3468): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 4m19.944223113s ago: executing program 0 (id=3470): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000280)="1b54", 0x2}], 0x1, 0x0, 0x0, 0x20000800}], 0x1, 0x4054) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 4m19.795650225s ago: executing program 0 (id=3473): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x1ff, r1, &(0x7f0000000980)="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", 0x401, 0x3}]) 4m19.547262292s ago: executing program 32 (id=3473): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x1ff, r1, &(0x7f0000000980)="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", 0x401, 0x3}]) 11.836376404s ago: executing program 4 (id=6290): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r2) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 11.520823592s ago: executing program 3 (id=6295): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x800) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f0000000080), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 11.245904062s ago: executing program 3 (id=6298): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff010006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0200002c0007012bbd7000ffdbdf25067c0000080001800400dd80ff0103"], 0x21c}, 0x1, 0x0, 0x0, 0x10000004}, 0xc020) syz_usb_control_io(r1, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0) syz_usb_disconnect(r0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r1) 11.007664489s ago: executing program 5 (id=6301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x81400, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) 8.988722118s ago: executing program 2 (id=6307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x48, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x1, 0x0, {0x1, 0x1ff8, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x300, 0x19f36604, 0x2}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 8.474955727s ago: executing program 1 (id=6308): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x2c, 0x4c, 0x40, 0x4b4, 0x1002, 0xb283, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x68, 0x0, 0x0, 0x9b, 0x54, 0xee}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 8.314805599s ago: executing program 2 (id=6309): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 8.21988809s ago: executing program 4 (id=6310): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 8.201683378s ago: executing program 5 (id=6311): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x0001'], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.346595321s ago: executing program 3 (id=6312): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="1bb1b293e5a644eed79d79f02308ff", 0xf}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 7.262131142s ago: executing program 3 (id=6313): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 7.171890124s ago: executing program 1 (id=6314): syz_usb_connect(0x3, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec010203010902"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x861}}, {0x2e, &(0x7f0000000000)=@string={0x2e, 0x3, "f1713f8d0b911a61e1e7dd047823fedb437c2938b924607ab6f98d4e77f3c7e16ef79c8ae3b2114111c4f1db"}}]}) 7.079721825s ago: executing program 2 (id=6315): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xed, 0xd7, 0x1, 0x40, 0x45e, 0x4c8, 0x73c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x6, 0x0, 0x8, [{{0x9, 0x4, 0x77, 0x0, 0x0, 0x85, 0xeb, 0xa3, 0xff}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xc5, 0x3, 0xf3, 0x40}, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000ac0)=@string={0x2}}]}) 6.506547584s ago: executing program 5 (id=6316): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) shutdown(r2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.848038821s ago: executing program 1 (id=6317): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.495343988s ago: executing program 5 (id=6318): write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0xa, "71e99bcf"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "f9c78c54"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3d8c, 0x7f, 0x1, {0x22, 0x864}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x60, 0x16, 0xa9, "54858967f1b095e192864bd5c3d757c12106349f79c4a1a1473f337881efcafa94e932b145ba1efdcb571fc01adc3d0cba1b02b2ec634a9080b287a32f3ebdb8e9c48f9f14d59fc45535e50e7606c72773c00ea271cc0cd32ec16bc40f9ca01c37112cbda20f3879081cd63e0d2c02ea6b490aa07935ae27fd90a8357bdaaa1bd5e9016581f2c74519e4089c8a84c530c27032bb2baa3b2140e11aa248be1d6e6e23ff97d9b4dd7f41"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x1, 0x13, "d1d0668d2970a66849b6e389d71a60ee676ed1"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x7}}) 3.746719186s ago: executing program 1 (id=6319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x48, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x1, 0x0, {0x1, 0x1ff8, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x300, 0x19f36604, 0x2}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 3.697802081s ago: executing program 2 (id=6320): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000003c0)={0x1, 0x0, 0x0}) 3.696685564s ago: executing program 1 (id=6321): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) 3.612756496s ago: executing program 2 (id=6322): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff010006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0200002c0007012bbd7000ffdbdf25067c0000080001800400dd80ff0103"], 0x21c}, 0x1, 0x0, 0x0, 0x10000004}, 0xc020) syz_usb_control_io(r1, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0) syz_usb_disconnect(r0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r1) 3.61025457s ago: executing program 4 (id=6323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="1bb1b293e5a644eed79d79f02308ff", 0xf}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 3.569514244s ago: executing program 3 (id=6324): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3865, 0x8, 0x9, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.495781539s ago: executing program 4 (id=6325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, &(0x7f0000000180)={0x16, "247f23e017bb456c5c4b7165a6d6af0b920bf04121f03300"}}) 3.08401057s ago: executing program 1 (id=6326): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000ac0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000280)={0x60, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.423572281s ago: executing program 5 (id=6327): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f00000000c0)='V', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 1.570965496s ago: executing program 4 (id=6328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) shutdown(r2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.291992484s ago: executing program 3 (id=6329): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000480)=""/74, 0x4a) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184520, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x90, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dfba7e109911a3687bd20102030109021200010000000009040b", @ANYRES64], 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r4, 0x4004480d, 0x0) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="a8e0575230a1f6fb7ec6ebf027e31cc7f559c1c3f00e2ce6722e94c7dd03b7d9ff693a0a6a849947088b5d605b4779ad35ae19d39d1ffff917c8d26e84d94ba3f0ba8801894977d41b2897cbf41f8cb745196a7286a852183ea5bae36a6ae8be355e6bc7c74ca8ebcfe549088745217afde1f25decf6f94982574931defc0ad1057a5a5817117cb70bdf96df5bfb252f333f5bf7241587e4aa8fadd1f2cba30fcc126ee760") syz_open_dev$hidraw(&(0x7f0000000280), 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) 624.166608ms ago: executing program 2 (id=6330): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009002420"], 0x0) 487.489582ms ago: executing program 4 (id=6331): pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x5, 0x5, 0x4, 0x8, 0xfffffffe, 0x4}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x42, &(0x7f0000001e80)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = dup(r3) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000180000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000000000000000000000000181100004422e54c6ad2f9a49d2a60fe0dfef8c4c3b4a17f27eeeaacba42fc18ce0246974e970a36683f354cfab0ec3c8373f039fb098cd8d2b511121a4dfaabcc286c9254da7e00d188807c635715166838df107673d6fcaac89f4b5e60d85b88a9f4", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b70000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x34f9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xfffffffffffffe4d, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x7a, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendfile(r5, r5, 0x0, 0xffffffff) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) 0s ago: executing program 5 (id=6332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x44, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x1, 0x0, {0x1, 0x1ff8, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x300, 0x19f36604, 0x2}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) kernel console output (not intermixed with test programs): nk: 32 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1238.019151][T19761] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1238.030524][T19761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.045304][T19761] usb 2-1: Product: syz [ 1238.051773][T19761] usb 2-1: Manufacturer: syz [ 1238.061986][T19761] usb 2-1: SerialNumber: syz [ 1238.073675][T19761] usb 2-1: config 0 descriptor?? [ 1238.282578][T11704] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1238.432709][T11704] usb 3-1: Using ep0 maxpacket: 8 [ 1238.443622][T11704] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1238.482110][T11704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.490261][T11704] usb 3-1: Product: syz [ 1238.494972][T11704] usb 3-1: Manufacturer: syz [ 1238.499705][T11704] usb 3-1: SerialNumber: syz [ 1238.515023][T11704] usb 3-1: config 0 descriptor?? [ 1238.574363][T15745] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1238.591032][T15745] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1238.616472][T15745] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1238.632278][T15745] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1238.649243][T15745] usb 6-1: USB disconnect, device number 17 [ 1238.747968][T11704] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1238.782125][T19757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.864282][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.873767][T19761] usb 2-1: Firmware version (0.0) predates our first public release. [ 1238.881998][T19761] usb 2-1: Please update to version 0.2 or newer [ 1238.934182][T19761] usb 2-1: USB disconnect, device number 119 [ 1239.125398][T25410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5683'. [ 1239.224322][T25414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5685'. [ 1239.561619][T11704] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1239.588407][T11704] usb 3-1: USB disconnect, device number 126 [ 1239.737983][T25436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5695'. [ 1239.866497][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.893125][T17722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.901793][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.910831][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.966475][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.032131][T14190] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1240.051885][T25446] : entered promiscuous mode [ 1240.082041][T25445] loop5: detected capacity change from 0 to 7 [ 1240.089344][T25445] Dev loop5: unable to read RDB block 7 [ 1240.095306][T25445] loop5: unable to read partition table [ 1240.101148][T25445] loop5: partition table beyond EOD, truncated [ 1240.121985][T25445] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1240.213712][T14190] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1240.221990][T14190] usb 5-1: not running at top speed; connect to a high speed hub [ 1240.235005][T14190] usb 5-1: config 13 has an invalid interface number: 209 but max is 1 [ 1240.251952][T14190] usb 5-1: config 13 has an invalid interface number: 60 but max is 1 [ 1240.260225][T14190] usb 5-1: config 13 has no interface number 0 [ 1240.272033][T14190] usb 5-1: config 13 has no interface number 1 [ 1240.289407][T14190] usb 5-1: config 13 interface 60 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1240.311974][T14190] usb 5-1: config 13 interface 60 altsetting 64 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1240.331951][T14190] usb 5-1: config 13 interface 209 has no altsetting 0 [ 1240.342132][T14190] usb 5-1: config 13 interface 60 has no altsetting 0 [ 1240.361026][T14190] usb 5-1: New USB device found, idVendor=0471, idProduct=0815, bcdDevice=cc.ba [ 1240.370540][T14190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.391966][T14190] usb 5-1: Product: syz [ 1240.396262][T14190] usb 5-1: Manufacturer: syz [ 1240.400864][T14190] usb 5-1: SerialNumber: syz [ 1240.543643][T25461] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5707'. [ 1240.649627][T14190] usb 5-1: USB disconnect, device number 121 [ 1240.799037][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1240.799055][ T30] audit: type=1326 audit(1770215605.653:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.5.5712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1240.857472][ T30] audit: type=1326 audit(1770215605.653:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.5.5712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1240.885825][ T30] audit: type=1326 audit(1770215605.683:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.5.5712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1240.909162][ T30] audit: type=1326 audit(1770215605.683:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.5.5712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1240.931869][ T30] audit: type=1326 audit(1770215605.683:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.5.5712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1240.982998][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.352017][T14190] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1241.378379][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1241.389605][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1241.398479][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1241.411541][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1241.432420][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1241.545452][T14190] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.575077][T14190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1241.615907][T14190] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1241.666997][T14190] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1241.684419][T14190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.701356][T14190] usb 6-1: Product: syz [ 1241.711115][T14190] usb 6-1: Manufacturer: syz [ 1241.721347][T14190] usb 6-1: SerialNumber: syz [ 1241.752645][T14190] usb 6-1: config 0 descriptor?? [ 1241.799994][T14190] uvcvideo 6-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1241.892911][T14190] uvcvideo 6-1:0.0: No valid video chain found. [ 1241.910962][T25496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5720'. [ 1241.974986][T11704] usb 6-1: USB disconnect, device number 18 [ 1241.999057][T25485] chnl_net:caif_netlink_parms(): no params data found [ 1242.028143][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.170954][T25485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.178337][T25485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.208803][T25485] bridge_slave_0: entered allmulticast mode [ 1242.222553][T25485] bridge_slave_0: entered promiscuous mode [ 1242.231221][T25485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.238564][T25485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.245969][T25485] bridge_slave_1: entered allmulticast mode [ 1242.265923][T25485] bridge_slave_1: entered promiscuous mode [ 1242.317865][T25485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.322471][T19759] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1242.343496][T25485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.410742][T25485] team0: Port device team_slave_0 added [ 1242.423338][T25485] team0: Port device team_slave_1 added [ 1242.473362][T25485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.480340][T25485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.515619][T19759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.529748][T19759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.557985][T25485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.558294][T19759] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1242.605556][T25485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.610233][T19759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.637842][T25485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.639565][T19759] usb 2-1: config 0 descriptor?? [ 1242.681349][T25485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.824129][T25485] hsr_slave_0: entered promiscuous mode [ 1242.841107][T25485] hsr_slave_1: entered promiscuous mode [ 1242.855935][T25485] debugfs: 'hsr0' already exists in 'hsr' [ 1242.883415][T25485] Cannot create hsr debugfs directory [ 1242.986244][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.995332][T25524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5732'. [ 1243.070143][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.111547][T19759] hid_parser_main: 1 callbacks suppressed [ 1243.111569][T19759] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 1243.253549][T25485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.317850][T19759] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1243.430885][T19759] cp2112 0003:10C4:EA90.0017: Part Number: 0x82 Device Version: 0xFE [ 1243.455572][T25485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.542498][ T5147] Bluetooth: hci2: command tx timeout [ 1243.593970][T25485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.745508][T25485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.163324][T25500] cp2112 0003:10C4:EA90.0017: Error starting transaction: -38 [ 1244.228458][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.243469][T19759] cp2112 0003:10C4:EA90.0017: error reading lock byte: -71 [ 1244.273446][T19759] usb 2-1: USB disconnect, device number 120 [ 1244.548476][T25485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1244.591615][T25485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1244.643398][T25485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1244.701342][T25485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1244.851592][T25485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.914353][T25485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.943277][T17722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.950400][T17722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.978933][T17722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.986119][T17722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.999085][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.007034][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.116892][T25557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5742'. [ 1245.148190][T25485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.308264][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.327060][T25485] veth0_vlan: entered promiscuous mode [ 1245.341811][T25485] veth1_vlan: entered promiscuous mode [ 1245.397877][T25571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5747'. [ 1245.421321][T25485] veth0_macvtap: entered promiscuous mode [ 1245.435190][T25573] netlink: 'syz.4.5748': attribute type 12 has an invalid length. [ 1245.444765][T25573] netlink: 'syz.4.5748': attribute type 29 has an invalid length. [ 1245.453098][T25573] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1245.462938][T25573] netlink: 59 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1245.475029][T25485] veth1_macvtap: entered promiscuous mode [ 1245.518478][T25485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.555824][T25485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.606439][T24002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.624571][ T5147] Bluetooth: hci2: command tx timeout [ 1245.638605][T24002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.667605][T23994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.693444][T23994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.823035][T23994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.862062][T23994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.955423][T17722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.992486][T17722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.023020][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.040860][T25590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5756'. [ 1246.176136][T25595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5758'. [ 1246.347707][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.366901][T25603] netlink: 'syz.5.5761': attribute type 12 has an invalid length. [ 1246.375076][T25603] netlink: 'syz.5.5761': attribute type 29 has an invalid length. [ 1246.387122][T25603] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5761'. [ 1246.398057][T25603] netlink: 59 bytes leftover after parsing attributes in process `syz.5.5761'. [ 1246.524581][T19764] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1246.542063][T19759] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1246.705546][T19764] usb 4-1: Using ep0 maxpacket: 16 [ 1246.716601][T19759] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1246.725713][T19764] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1246.742664][T19759] usb 3-1: not running at top speed; connect to a high speed hub [ 1246.758162][T19764] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1246.778615][T19759] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.791200][T19764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.805728][T19759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1246.815222][T19764] usb 4-1: Product: syz [ 1246.819409][T19764] usb 4-1: Manufacturer: syz [ 1246.825879][T19764] usb 4-1: SerialNumber: syz [ 1246.834507][T19759] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1246.844088][T19759] usb 3-1: New USB device strings: Mfr=248, Product=1, SerialNumber=3 [ 1246.855129][T19764] usb 4-1: config 0 descriptor?? [ 1246.872617][T19759] usb 3-1: Product: syz [ 1246.876956][T19759] usb 3-1: Manufacturer: syz [ 1246.882042][T19759] usb 3-1: SerialNumber: syz [ 1247.024137][T25621] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5769'. [ 1247.217212][T25630] netlink: 'syz.1.5774': attribute type 12 has an invalid length. [ 1247.225873][T25630] netlink: 'syz.1.5774': attribute type 29 has an invalid length. [ 1247.233979][T25630] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5774'. [ 1247.244199][T25630] netlink: 'syz.1.5774': attribute type 2 has an invalid length. [ 1247.252111][T25630] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5774'. [ 1247.325005][T19759] usb 3-1: cannot find UAC_HEADER [ 1247.364950][T19759] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1247.390342][T19759] usb 3-1: USB disconnect, device number 127 [ 1247.409405][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.429936][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1247.704780][ T5147] Bluetooth: hci2: command tx timeout [ 1247.730585][T25647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5781'. [ 1247.967336][T25656] netlink: 'syz.2.5785': attribute type 12 has an invalid length. [ 1247.992134][T25656] netlink: 'syz.2.5785': attribute type 29 has an invalid length. [ 1248.000022][T25656] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1248.031711][T25656] netlink: 'syz.2.5785': attribute type 2 has an invalid length. [ 1248.053494][T25656] netlink: 23 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1248.368602][T25674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5793'. [ 1248.428485][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.628779][T25691] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5801'. [ 1248.638128][T25691] netlink: 23 bytes leftover after parsing attributes in process `syz.5.5801'. [ 1249.065832][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.251660][T19761] usb 4-1: USB disconnect, device number 19 [ 1249.301369][T25706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5808'. [ 1249.478925][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.788180][ T5147] Bluetooth: hci2: command tx timeout [ 1250.180962][ T12] dummy0: left allmulticast mode [ 1250.214588][ T12] bridge0: port 3(dummy0) entered disabled state [ 1250.244947][ T12] bridge_slave_1: left allmulticast mode [ 1250.250624][ T12] bridge_slave_1: left promiscuous mode [ 1250.279820][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.315425][ T12] bridge_slave_0: left allmulticast mode [ 1250.333515][ T12] bridge_slave_0: left promiscuous mode [ 1250.339750][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.402277][T14190] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1250.537129][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.572036][T11704] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1250.581484][ T12] tipc: Disabling bearer [ 1250.631857][T14190] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1250.667628][T14190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.702683][T14190] usb 3-1: Product: syz [ 1250.707166][T14190] usb 3-1: Manufacturer: syz [ 1250.713303][T14190] usb 3-1: SerialNumber: syz [ 1250.760627][T11704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.772705][T14190] usb 3-1: config 0 descriptor?? [ 1250.777874][T11704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.789780][T11704] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1250.799113][T11704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.829648][T11704] usb 5-1: config 0 descriptor?? [ 1251.068939][T14190] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1251.167821][T14190] usb 3-1: USB disconnect, device number 2 [ 1251.283117][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1251.317810][T11704] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 1251.337041][T11704] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1251.449034][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.469040][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.482702][ T12] bond0 (unregistering): Released all slaves [ 1251.496717][ T12] bond1 (unregistering): Released all slaves [ 1251.516800][T11704] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE [ 1251.547148][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.645452][ T12] tipc: Disabling bearer [ 1251.662075][ T12] tipc: Left network mode [ 1251.962022][T19761] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1252.043310][ T12] hsr_slave_0: left promiscuous mode [ 1252.067836][ T12] hsr_slave_1: left promiscuous mode [ 1252.074604][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.085517][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.106564][T19756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.131143][T25747] cp2112 0003:10C4:EA90.0018: Error starting transaction: -38 [ 1252.141189][T19761] usb 6-1: Using ep0 maxpacket: 16 [ 1252.149809][T11704] cp2112 0003:10C4:EA90.0018: error reading lock byte: -71 [ 1252.179039][T11704] usb 5-1: USB disconnect, device number 122 [ 1252.195671][T19761] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1252.221449][T19761] usb 6-1: config 0 has no interface number 0 [ 1252.254859][T19761] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1252.285354][T19761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.315990][T19761] usb 6-1: Product: syz [ 1252.320205][T19761] usb 6-1: Manufacturer: syz [ 1252.333223][T19761] usb 6-1: SerialNumber: syz [ 1252.351467][T19761] usb 6-1: config 0 descriptor?? [ 1252.362106][T19761] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1252.566705][T19761] gspca_spca1528: reg_w err -71 [ 1252.587829][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.596407][T19761] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1252.623127][T19761] usb 6-1: USB disconnect, device number 19 [ 1252.939307][T25831] __nla_validate_parse: 6 callbacks suppressed [ 1252.939328][T25831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5862'. [ 1253.299947][T25844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5869'. [ 1253.722934][T25862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5874'. [ 1253.742120][T19759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.053097][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1254.152537][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1254.677658][T25890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5888'. [ 1254.822463][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.155321][T19756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.869893][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.888210][T17621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1255.898947][T17621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1255.907760][T17621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1255.948280][T17621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1255.982065][T17621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1256.100681][T25868] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5878'. [ 1256.733014][T25926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5900'. [ 1256.841306][T25913] chnl_net:caif_netlink_parms(): no params data found [ 1256.902230][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.037811][ T12] IPVS: stop unused estimator thread 0... [ 1257.198196][T25913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.208392][T25913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.217533][T25913] bridge_slave_0: entered allmulticast mode [ 1257.253689][T25913] bridge_slave_0: entered promiscuous mode [ 1257.261567][T25913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.272314][T25913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.284736][T25913] bridge_slave_1: entered allmulticast mode [ 1257.301786][T25913] bridge_slave_1: entered promiscuous mode [ 1257.313283][T19756] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1257.432928][T25913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.492116][T19756] usb 6-1: Using ep0 maxpacket: 32 [ 1257.506239][T19756] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1257.509001][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.549282][T19756] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1257.568582][T19756] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1257.626573][T25913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.632142][T19756] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1257.654265][T19756] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1257.672074][T19756] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1257.687269][T19756] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1257.728444][T25960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1257.732010][T19756] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1257.771769][T19756] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1257.791248][T19756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.793012][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.822295][T19756] usb 6-1: config 0 descriptor?? [ 1257.857544][T25913] team0: Port device team_slave_0 added [ 1257.942698][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.972937][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.013106][T25913] team0: Port device team_slave_1 added [ 1258.039530][T19756] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1258.115045][ T5147] Bluetooth: hci4: command tx timeout [ 1258.164253][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.183160][T19756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.183396][T25913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.200382][T25913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.228174][T25913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.241568][T25913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.248828][T25913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.250184][T19756] usb 6-1: USB disconnect, device number 20 [ 1258.281406][T25913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.319991][T19756] usblp0: removed [ 1258.376242][T25913] hsr_slave_0: entered promiscuous mode [ 1258.382924][T25913] hsr_slave_1: entered promiscuous mode [ 1258.389028][T25913] debugfs: 'hsr0' already exists in 'hsr' [ 1258.395454][T25913] Cannot create hsr debugfs directory [ 1258.424063][T11704] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1258.582366][T11704] usb 5-1: Using ep0 maxpacket: 32 [ 1258.601277][T11704] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1258.630818][T11704] usb 5-1: config 0 has no interface number 0 [ 1258.640064][T11704] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1258.649559][T11704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.680421][ T12] bridge_slave_1: left allmulticast mode [ 1258.687895][T11704] usb 5-1: Product: syz [ 1258.692593][ T12] bridge_slave_1: left promiscuous mode [ 1258.698347][T11704] usb 5-1: Manufacturer: syz [ 1258.703579][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.714886][T11704] usb 5-1: SerialNumber: syz [ 1258.727131][T11704] usb 5-1: config 0 descriptor?? [ 1258.737432][ T12] bridge_slave_0: left allmulticast mode [ 1258.743470][ T12] bridge_slave_0: left promiscuous mode [ 1258.755608][T11704] smsc95xx v2.0.0 [ 1258.761971][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.985225][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.210804][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1259.535058][ T12] bond1 (unregistering): Released all slaves [ 1259.693001][ T12] bond0 (unregistering): Released all slaves [ 1259.774132][T11704] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1259.827182][T11704] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1259.849465][T11704] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1259.880408][ T12] : left promiscuous mode [ 1259.887244][T11704] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1259.903055][T11704] usb 5-1: USB disconnect, device number 123 [ 1259.984476][T25982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5924'. [ 1260.024017][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.182468][ T5147] Bluetooth: hci4: command tx timeout [ 1260.821459][ T12] hsr_slave_0: left promiscuous mode [ 1260.852963][ T12] hsr_slave_1: left promiscuous mode [ 1260.862923][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.882273][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.908088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.924997][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.028911][ T12] veth1_macvtap: left promiscuous mode [ 1261.052613][ T12] veth0_macvtap: left promiscuous mode [ 1261.072681][ T12] veth1_vlan: left promiscuous mode [ 1261.092098][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.114833][ T12] veth0_vlan: left promiscuous mode [ 1261.222592][T19757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.281141][T26019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5933'. [ 1261.399746][T26022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5934'. [ 1261.526529][T26023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5932'. [ 1261.719988][T26025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5935'. [ 1262.103719][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.262360][ T5147] Bluetooth: hci4: command tx timeout [ 1262.462147][T19760] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1262.622125][T19760] usb 4-1: Using ep0 maxpacket: 16 [ 1262.638972][T19760] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.649365][T19760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1262.659813][T19760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1262.675680][T19760] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1262.686537][T19760] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1262.694994][T19760] usb 4-1: Manufacturer: syz [ 1262.702139][T11704] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1262.714141][T19760] usb 4-1: config 0 descriptor?? [ 1262.754052][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1262.800238][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1262.856040][T11704] usb 6-1: Using ep0 maxpacket: 32 [ 1262.872410][T11704] usb 6-1: config 10 has an invalid interface number: 90 but max is 0 [ 1262.880629][T11704] usb 6-1: config 10 has no interface number 0 [ 1262.887824][T11704] usb 6-1: config 10 interface 90 has no altsetting 0 [ 1262.897291][T11704] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=46.41 [ 1262.908338][T11704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.916512][T11704] usb 6-1: Product: syz [ 1262.920727][T11704] usb 6-1: Manufacturer: syz [ 1262.926361][T11704] usb 6-1: SerialNumber: syz [ 1262.934443][T19760] usb 4-1: USB disconnect, device number 20 [ 1263.146991][T11704] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:10.90/input/input35 [ 1263.156949][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.163297][ T5181] bcm5974 6-1:10.90: could not read from device [ 1263.200394][T11704] usb 6-1: USB disconnect, device number 21 [ 1263.428083][T26042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5943'. [ 1263.899318][T25913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1264.040748][T25913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1264.093748][T25913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1264.152506][T25913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1264.182717][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.262270][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.342004][ T5147] Bluetooth: hci4: command tx timeout [ 1264.445300][ T30] audit: type=1326 audit(1770215629.293:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1264.463145][T25913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.516939][T25913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.553626][ T30] audit: type=1326 audit(1770215629.293:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1264.560691][T23998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.582955][T23998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.642029][ T30] audit: type=1326 audit(1770215629.293:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1264.725831][T23998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.733108][T23998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.745600][ T30] audit: type=1326 audit(1770215629.293:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1264.843485][ T30] audit: type=1326 audit(1770215629.303:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1264.933569][ T30] audit: type=1326 audit(1770215629.303:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1264.958968][T26094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5956'. [ 1264.981465][ T30] audit: type=1326 audit(1770215629.303:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1265.004616][T25913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.064939][ T30] audit: type=1326 audit(1770215629.303:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1265.132010][ T30] audit: type=1326 audit(1770215629.353:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1265.167335][T25913] veth0_vlan: entered promiscuous mode [ 1265.221094][T25913] veth1_vlan: entered promiscuous mode [ 1265.228063][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.228994][ T30] audit: type=1326 audit(1770215629.353:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.5.5953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1265.359486][T25913] veth0_macvtap: entered promiscuous mode [ 1265.394238][T25913] veth1_macvtap: entered promiscuous mode [ 1265.448347][T25913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.494416][T25913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.539591][T23994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.564670][T23994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.592019][T23994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.600772][T23994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.764753][T23994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.779693][T26120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5967'. [ 1265.790038][T23994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.860012][T24002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.873961][T24002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.041008][T26129] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.5972'. [ 1266.174065][T26135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5973'. [ 1266.264965][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.550526][T26150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5980'. [ 1266.574284][T26150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5980'. [ 1266.752112][T19760] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1266.897171][T17621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1266.909167][T17621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1266.918455][T17621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1266.926833][T17621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1266.934622][T17621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1266.935602][T19760] usb 2-1: Using ep0 maxpacket: 32 [ 1266.981374][T19760] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.012039][T19760] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.046876][T19760] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1267.059969][T19760] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1267.084235][T19760] usb 2-1: Product: syz [ 1267.088440][T19760] usb 2-1: Manufacturer: syz [ 1267.103616][T19760] hub 2-1:4.0: USB hub found [ 1267.130728][T26159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5983'. [ 1267.226795][T26159] bridge1: entered promiscuous mode [ 1267.234273][T26159] bridge1: entered allmulticast mode [ 1267.313798][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.322021][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.331458][T19760] hub 2-1:4.0: 2 ports detected [ 1267.740297][T19760] hub 2-1:4.0: set hub depth failed [ 1267.750359][T19760] usb 2-1: USB disconnect, device number 121 [ 1268.067360][T26155] chnl_net:caif_netlink_parms(): no params data found [ 1268.286186][T26181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5991'. [ 1268.337225][T26181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5991'. [ 1268.356849][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.571145][T26155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.596164][T26155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.610604][T26155] bridge_slave_0: entered allmulticast mode [ 1268.634025][T26155] bridge_slave_0: entered promiscuous mode [ 1268.665527][T26155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.692798][T26155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.700947][T26155] bridge_slave_1: entered allmulticast mode [ 1268.724604][T26155] bridge_slave_1: entered promiscuous mode [ 1268.795744][T26155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.822214][T14190] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1268.872742][T26155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.980964][T26155] team0: Port device team_slave_0 added [ 1268.982273][ T5147] Bluetooth: hci5: command tx timeout [ 1268.996137][T14190] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.009836][T14190] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1269.020730][T14190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.029071][T14190] usb 2-1: Product: syz [ 1269.030543][T26155] team0: Port device team_slave_1 added [ 1269.033465][T14190] usb 2-1: Manufacturer: syz [ 1269.043861][T14190] usb 2-1: SerialNumber: syz [ 1269.065106][T14190] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1269.082358][T14190] dvb-usb: bulk message failed: -22 (3/0) [ 1269.113440][T14190] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1269.141109][T24002] bridge_slave_1: left allmulticast mode [ 1269.159045][T14190] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1269.162186][T24002] bridge_slave_1: left promiscuous mode [ 1269.184010][T24002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.198737][T14190] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1269.211317][T24002] bridge_slave_0: left allmulticast mode [ 1269.219494][T24002] bridge_slave_0: left promiscuous mode [ 1269.242802][T24002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.278773][T14190] usb 2-1: USB disconnect, device number 122 [ 1269.382216][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.432259][T15745] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1269.602721][T15745] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1269.613089][T15745] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.650218][T15745] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1269.681134][T15745] usb 5-1: config 1 has no interface number 1 [ 1269.688258][T15745] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1269.719577][T15745] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1269.732134][T15745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.767655][T15745] usb 5-1: Product: syz [ 1269.778138][T15745] usb 5-1: Manufacturer: syz [ 1269.788007][T15745] usb 5-1: SerialNumber: syz [ 1269.902928][T14190] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1270.032248][T15745] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1270.171102][T15745] usb 5-1: MIDIStreaming interface descriptor not found [ 1270.415267][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.697654][T19759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.713421][T15745] usb 5-1: USB disconnect, device number 124 [ 1270.739639][T24002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.803032][T14190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.842002][T14190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.855469][T24002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.862000][T14190] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1270.880502][T24002] bond0 (unregistering): Released all slaves [ 1270.887084][T14190] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1270.912866][ T8975] udevd[8975]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1270.931298][T14190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.962043][T14190] usb 4-1: config 0 descriptor?? [ 1270.962658][T26155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.024460][T26155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.062234][ T5147] Bluetooth: hci5: command tx timeout [ 1271.132256][T26155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.188778][T24002] tipc: Disabling bearer [ 1271.194420][T24002] tipc: Left network mode [ 1271.199659][T26155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.242094][T26155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.268763][T26155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.412487][T14190] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1271.597286][T26155] hsr_slave_0: entered promiscuous mode [ 1271.620757][T26155] hsr_slave_1: entered promiscuous mode [ 1271.708122][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.732232][T24002] hsr_slave_0: left promiscuous mode [ 1271.772604][T24002] hsr_slave_1: left promiscuous mode [ 1271.785635][T24002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.025374][ C1] plantronics 0003:047F:FFFF.0019: hid_field_extract() called with n (132) > 32! (kworker/u8:0) [ 1272.085293][T24002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.238013][T19759] usb 4-1: USB disconnect, device number 21 [ 1272.750229][T19759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.832298][T15745] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1272.883662][T19756] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1272.998896][T15745] usb 6-1: Using ep0 maxpacket: 32 [ 1273.007588][T15745] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1273.026614][T15745] usb 6-1: config 0 has no interface number 0 [ 1273.033360][T15745] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1273.048205][T15745] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1273.057472][T19756] usb 2-1: Using ep0 maxpacket: 32 [ 1273.073954][T15745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.082642][T15745] usb 6-1: Product: syz [ 1273.093220][T19756] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1273.106067][T15745] usb 6-1: Manufacturer: syz [ 1273.110739][T15745] usb 6-1: SerialNumber: syz [ 1273.116470][T19756] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1273.128028][T15745] usb 6-1: config 0 descriptor?? [ 1273.133298][T19756] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.144237][T19756] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1273.156237][ T5147] Bluetooth: hci5: command tx timeout [ 1273.168411][T19756] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1273.177957][T19756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.219367][T19756] usb 2-1: config 0 descriptor?? [ 1273.324672][T24002] team0 (unregistering): Port device team_slave_1 removed [ 1273.422857][T24002] team0 (unregistering): Port device team_slave_0 removed [ 1273.465645][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.781439][T15745] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 1273.788708][T19759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.791276][T15745] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1273.822172][T15745] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1273.829852][T15745] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1273.899247][T15745] usb 6-1: USB disconnect, device number 22 [ 1274.822690][T19759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.961662][T26311] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6029'. [ 1275.222291][ T5147] Bluetooth: hci5: command tx timeout [ 1275.514095][T26155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1275.529916][T26155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1275.544840][T26155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1275.571816][T26155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1275.638648][T15745] usb 2-1: USB disconnect, device number 123 [ 1275.644843][T11704] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1275.796758][T26155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.822157][T11704] usb 6-1: Using ep0 maxpacket: 16 [ 1275.841418][T26155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.854518][T11704] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1275.866320][T11704] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1275.874829][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.895503][T17722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.902690][T17722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.911795][T11704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.948492][T17722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.955696][T17722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.956395][T11704] usb 6-1: config 0 descriptor?? [ 1276.193587][T26155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.372878][T26155] veth0_vlan: entered promiscuous mode [ 1276.476578][T26155] veth1_vlan: entered promiscuous mode [ 1276.506609][T11704] hid (null): invalid report_count 15316 [ 1276.513212][T15745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.538684][T11704] hid (null): invalid report_count 33591 [ 1276.563380][T11704] hid (null): unknown global tag 0xd [ 1276.585637][T11704] hid (null): global environment stack underflow [ 1276.607195][T26155] veth0_macvtap: entered promiscuous mode [ 1276.655399][T26155] veth1_macvtap: entered promiscuous mode [ 1276.696099][T26155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.710099][T11704] usb 6-1: USB disconnect, device number 23 [ 1276.720408][T26155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.764869][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.794997][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.837151][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.859948][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.914366][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.008022][T23998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.030204][T23998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.086381][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.105090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.682147][T15745] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1277.854243][T15745] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 1277.886735][T15745] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 1277.949582][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.957028][T15745] usb 3-1: config 0 has no interface number 0 [ 1277.978411][T15745] usb 3-1: config 0 interface 150 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1277.993624][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6047'. [ 1278.002917][T15745] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.052820][T15745] usb 3-1: config 0 interface 150 has no altsetting 0 [ 1278.160506][T15745] usb 3-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=39.3f [ 1278.179068][T15745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.224548][T19759] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1278.257621][T15745] usb 3-1: Product: syz [ 1278.287637][T15745] usb 3-1: Manufacturer: syz [ 1278.310551][T15745] usb 3-1: SerialNumber: syz [ 1278.337920][T15745] usb 3-1: config 0 descriptor?? [ 1278.348150][T26405] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6048'. [ 1278.407004][T19759] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1278.438452][T19759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.500959][T19759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1278.535312][T19759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.595028][T19759] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1278.605893][T15745] usb 3-1: USB disconnect, device number 3 [ 1278.628124][T19759] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1278.669782][T19759] usb 2-1: Product: syz [ 1278.681765][T19759] usb 2-1: Manufacturer: syz [ 1278.705383][T19759] cdc_wdm 2-1:1.0: skipping garbage [ 1278.718149][T19759] cdc_wdm 2-1:1.0: skipping garbage [ 1278.731597][T19759] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1278.739697][T19759] cdc_wdm 2-1:1.0: Unknown control protocol [ 1278.924668][T19759] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 1278.946214][T15745] usb 2-1: USB disconnect, device number 124 [ 1279.001888][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.118946][T19759] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1279.161852][T19759] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1279.194955][T19759] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1279.223608][T19759] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1279.254885][T19759] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1279.289386][T19759] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1279.350762][T19759] usb 6-1: string descriptor 0 read error: -22 [ 1279.357883][T19759] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1279.376743][T19759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.395108][T19759] usb 6-1: config 0 descriptor?? [ 1279.402067][T19757] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1279.402506][T19759] hub 6-1:0.0: bad descriptor, ignoring hub [ 1279.422600][T19759] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1279.553113][T11704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.593687][T19757] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1279.612087][T19757] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.651325][T19757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1279.678514][T19757] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.710182][T19757] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1279.732068][T19757] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1279.740108][T19757] usb 2-1: Product: syz [ 1279.746414][T19757] usb 2-1: Manufacturer: syz [ 1279.764174][T19757] cdc_wdm 2-1:1.0: skipping garbage [ 1279.769416][T19757] cdc_wdm 2-1:1.0: skipping garbage [ 1279.784090][T19756] usb 6-1: USB disconnect, device number 24 [ 1279.890389][T19757] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1280.042372][T19759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.203784][T19757] cdc_wdm 2-1:1.0: Unknown control protocol [ 1280.565101][T26472] tipc: Started in network mode [ 1280.577193][T26472] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 1280.614419][T26472] tipc: Enabled bearer , priority 10 [ 1280.720493][T26477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6063'. [ 1281.065118][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.417801][T26505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1281.472057][T19757] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1281.628409][T19757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.651999][T19757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.662078][T15745] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1281.673400][T19757] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1281.683933][T19757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.695999][T19757] usb 6-1: config 0 descriptor?? [ 1281.732063][T19756] tipc: Node number set to 4269801494 [ 1281.811771][T19756] usb 2-1: USB disconnect, device number 125 [ 1281.832779][T15745] usb 4-1: Using ep0 maxpacket: 32 [ 1281.851730][T15745] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1281.898020][T15745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.913375][T15745] usb 4-1: Product: syz [ 1281.919672][T15745] usb 4-1: Manufacturer: syz [ 1281.926857][T15745] usb 4-1: SerialNumber: syz [ 1281.936463][T15745] usb 4-1: config 0 descriptor?? [ 1281.976159][T15745] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1282.091146][T26525] validate_nla: 3 callbacks suppressed [ 1282.091164][T26525] netlink: 'syz.1.6085': attribute type 12 has an invalid length. [ 1282.112134][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.120616][T26525] netlink: 'syz.1.6085': attribute type 29 has an invalid length. [ 1282.128728][T26525] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6085'. [ 1282.133072][T19757] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1282.142791][T26525] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6085'. [ 1282.171950][T19757] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1282.308045][T26530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6087'. [ 1282.333333][T19757] cp2112 0003:10C4:EA90.001B: Part Number: 0x82 Device Version: 0xFE [ 1282.572012][T19761] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1282.582973][T19758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.724909][T19761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.736019][T19761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.746288][T19761] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1282.755499][T19761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.768197][T19761] usb 5-1: config 0 descriptor?? [ 1282.951294][T19757] cp2112 0003:10C4:EA90.001B: error reading lock byte: -71 [ 1282.965102][T19757] usb 6-1: USB disconnect, device number 25 [ 1283.156964][T19759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.198970][T19761] usbhid 5-1:0.0: can't add hid device: -71 [ 1283.207966][T19761] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1283.218810][T19761] usb 5-1: USB disconnect, device number 125 [ 1283.411443][T15745] gspca_ov534_9: reg_r err -71 [ 1283.542096][T19758] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1283.603022][T19761] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1283.672187][T15745] gspca_ov534_9: Unknown sensor 0000 [ 1283.672283][T15745] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1283.688388][T15745] usb 4-1: USB disconnect, device number 22 [ 1283.706578][T19758] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1283.722893][T19758] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.742448][T19758] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1283.751458][T19758] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.766363][T19758] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1283.774209][T19761] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1283.776000][T19758] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1283.792720][T19761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.807257][T19758] usb 2-1: Product: syz [ 1283.811475][T19758] usb 2-1: Manufacturer: syz [ 1283.812654][T19761] usb 3-1: config 0 descriptor?? [ 1283.822737][T19758] cdc_wdm 2-1:1.0: skipping garbage [ 1283.829822][T19758] cdc_wdm 2-1:1.0: skipping garbage [ 1283.837672][T19758] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1283.838227][T19761] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1283.852982][T19758] cdc_wdm 2-1:1.0: Unknown control protocol [ 1283.872052][T19756] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1283.942401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.955570][T26558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6100'. [ 1284.052784][T14190] usb 2-1: USB disconnect, device number 126 [ 1284.053785][T19756] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.078045][T19756] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1284.092593][T19756] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1284.116434][T19756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1284.141778][T19756] usb 6-1: SerialNumber: syz [ 1284.193701][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.242591][T19761] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1284.368664][T19756] usb 6-1: cannot find UAC_HEADER [ 1284.387528][T19756] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1284.398866][T19756] usb 6-1: USB disconnect, device number 26 [ 1284.425205][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1284.450838][T19761] gspca_cpia1: usb_control_msg 01, error -32 [ 1284.458859][T19761] gspca_cpia1: usb_control_msg 01, error -32 [ 1284.472599][T19761] gspca_cpia1: usb_control_msg 01, error -71 [ 1284.478764][T19761] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1284.489715][T19761] usb 3-1: USB disconnect, device number 4 [ 1284.502540][T19757] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1284.582265][T14190] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1284.663854][T19757] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1284.672709][T19757] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.683246][T19757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1284.692435][T19757] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.704970][T19757] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1284.714256][T19757] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1284.723631][T19757] usb 2-1: Product: syz [ 1284.727895][T19757] usb 2-1: Manufacturer: syz [ 1284.736459][T14190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.747688][T14190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.749512][T19757] cdc_wdm 2-1:1.0: skipping garbage [ 1284.763707][T14190] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1284.763907][T19757] cdc_wdm 2-1:1.0: skipping garbage [ 1284.778374][T14190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.780960][T19757] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1284.793154][T14190] usb 5-1: config 0 descriptor?? [ 1284.793556][T19757] cdc_wdm 2-1:1.0: Unknown control protocol [ 1285.198898][T26583] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6112'. [ 1285.216820][T14190] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 1285.230445][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.252774][T14190] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1285.415298][T14190] cp2112 0003:10C4:EA90.001C: Part Number: 0x82 Device Version: 0xFE [ 1285.622433][T19756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.832086][T19756] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1285.982186][T19756] usb 4-1: Using ep0 maxpacket: 8 [ 1285.991187][T19756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.001857][T19756] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1286.011153][T19756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.022289][T14190] cp2112 0003:10C4:EA90.001C: error reading lock byte: -71 [ 1286.024198][T19756] usb 4-1: config 0 descriptor?? [ 1286.065097][T14190] usb 5-1: USB disconnect, device number 126 [ 1286.082672][T19756] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1286.187686][T26608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6122'. [ 1286.197025][T26608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6122'. [ 1286.269461][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.614288][T26614] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6124'. [ 1286.763269][T19757] usb 2-1: USB disconnect, device number 127 [ 1287.310389][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.351997][T19760] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1287.422120][T14190] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1287.492951][T19756] gspca_vc032x: reg_w err -71 [ 1287.502055][T19756] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1287.522065][T19760] usb 6-1: Using ep0 maxpacket: 32 [ 1287.525918][T19756] usb 4-1: USB disconnect, device number 23 [ 1287.537573][T19757] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1287.537976][T19760] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1287.556822][T19760] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1287.572572][T19760] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.583489][T19760] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 1287.605535][T14190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.616691][T19760] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1287.637011][T14190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.647788][T19760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.656610][T14190] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1287.668407][T14190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.712967][T14190] usb 2-1: config 0 descriptor?? [ 1287.714323][T19757] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1287.731698][T19757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.743661][T19757] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1287.754676][T19757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.767647][T19757] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1287.777438][T19757] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1287.805898][T19757] usb 3-1: Product: syz [ 1287.810103][T19757] usb 3-1: Manufacturer: syz [ 1287.825259][T19757] cdc_wdm 3-1:1.0: skipping garbage [ 1287.832981][T19757] cdc_wdm 3-1:1.0: skipping garbage [ 1287.840114][T19757] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1287.846180][T19757] cdc_wdm 3-1:1.0: Unknown control protocol [ 1287.902816][T19757] usb 6-1: USB disconnect, device number 27 [ 1288.028716][T19761] usb 3-1: USB disconnect, device number 5 [ 1288.167663][T14190] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 1288.204389][T14190] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1288.349726][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.388845][T14190] cp2112 0003:10C4:EA90.001D: Part Number: 0x82 Device Version: 0xFE [ 1288.484543][T19757] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1288.666046][T15745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.682311][T19757] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1288.701656][T19757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.738545][T19757] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1288.754222][T19757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.770073][T19757] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1288.780292][T19757] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1288.799206][T19757] usb 3-1: Product: syz [ 1288.800280][T14190] cp2112 0003:10C4:EA90.001D: error setting SMBus config [ 1288.817750][T19757] usb 3-1: Manufacturer: syz [ 1288.843778][T14190] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -71 [ 1288.866910][T19757] cdc_wdm 3-1:1.0: skipping garbage [ 1288.878297][T19757] cdc_wdm 3-1:1.0: skipping garbage [ 1288.890520][T14190] usb 2-1: USB disconnect, device number 2 [ 1288.907626][T19757] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1288.927517][T19757] cdc_wdm 3-1:1.0: Unknown control protocol [ 1288.982111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.389272][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.502004][T19757] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1289.652043][T19757] usb 4-1: Using ep0 maxpacket: 32 [ 1289.663837][T19757] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1289.679587][T19757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.693548][T19757] usb 4-1: config 0 descriptor?? [ 1289.923796][T26729] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.6175'. [ 1290.022140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.117377][T19757] a4tech 0003:09DA:000A.001E: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0 [ 1290.316606][T19757] usb 4-1: USB disconnect, device number 24 [ 1290.372441][T26738] netlink: 'syz.1.6179': attribute type 12 has an invalid length. [ 1290.395159][T26738] netlink: 'syz.1.6179': attribute type 29 has an invalid length. [ 1290.404230][T26738] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6179'. [ 1290.414836][T26738] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6179'. [ 1290.427959][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.552208][T14190] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1290.883070][T14190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.894104][T14190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.986019][T19757] usb 3-1: USB disconnect, device number 6 [ 1290.987848][T14190] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1291.005158][T14190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.060071][T14190] usb 6-1: config 0 descriptor?? [ 1291.073730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.468142][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.505375][T14190] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1291.555109][T14190] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1291.702150][T14190] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 1291.703507][T19756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.909547][T17621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1291.919774][T17621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1291.928506][T17621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1291.942937][T17621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1291.955523][T17621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1292.122145][T14190] cp2112 0003:10C4:EA90.001F: error setting SMBus config [ 1292.139139][T14190] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -71 [ 1292.162342][T14190] usb 6-1: USB disconnect, device number 28 [ 1292.505460][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.592005][T19757] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1292.726593][T26765] chnl_net:caif_netlink_parms(): no params data found [ 1292.813800][T19757] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1292.831981][T19757] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.864679][T19757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1292.904612][T19757] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.953623][T19757] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1292.971966][T19757] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1292.991634][T19757] usb 4-1: Product: syz [ 1293.032476][T19757] usb 4-1: Manufacturer: syz [ 1293.059576][T19757] cdc_wdm 4-1:1.0: skipping garbage [ 1293.071476][T19757] cdc_wdm 4-1:1.0: skipping garbage [ 1293.093073][T19757] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1293.099013][T19757] cdc_wdm 4-1:1.0: Unknown control protocol [ 1293.271540][T19757] usb 4-1: USB disconnect, device number 25 [ 1293.377922][T26765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.396567][T26765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.427641][T26765] bridge_slave_0: entered allmulticast mode [ 1293.476178][T26765] bridge_slave_0: entered promiscuous mode [ 1293.548949][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.593092][T26765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.600234][T26765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.631145][T26765] bridge_slave_1: entered allmulticast mode [ 1293.657089][T26765] bridge_slave_1: entered promiscuous mode [ 1293.722451][T26765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.738096][T26765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.820780][T26765] team0: Port device team_slave_0 added [ 1293.832052][T15745] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1293.842008][T19757] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1293.853011][T26765] team0: Port device team_slave_1 added [ 1293.935531][T26765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.950902][T26765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.980124][T26765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.994778][T19757] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1294.003933][T15745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.014876][T19757] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.022274][T17621] Bluetooth: hci1: command tx timeout [ 1294.050246][T15745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.079514][T26765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.088549][T19757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1294.101112][T15745] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1294.112611][T26765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.140736][T19757] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.152205][T15745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.164432][T15745] usb 6-1: config 0 descriptor?? [ 1294.172343][T19757] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1294.184120][T19757] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1294.192382][T26765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.203240][T19757] usb 4-1: Product: syz [ 1294.207432][T19757] usb 4-1: Manufacturer: syz [ 1294.254337][T19757] cdc_wdm 4-1:1.0: skipping garbage [ 1294.270315][T19757] cdc_wdm 4-1:1.0: skipping garbage [ 1294.278417][ T12] bridge_slave_1: left allmulticast mode [ 1294.286009][ T12] bridge_slave_1: left promiscuous mode [ 1294.294429][T19757] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1294.300530][T19757] cdc_wdm 4-1:1.0: Unknown control protocol [ 1294.307205][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.323661][ T12] bridge_slave_0: left allmulticast mode [ 1294.331219][ T12] bridge_slave_0: left promiscuous mode [ 1294.337279][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.390912][T26820] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 1294.435838][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1294.455724][ T12] ip6gretap1 (unregistering): left promiscuous mode [ 1294.462492][ T12] ip6gretap1 (unregistering): left allmulticast mode [ 1294.579562][T15745] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 1294.588051][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.608289][T15745] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1294.749480][T19757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.787461][T15745] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE [ 1294.806357][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.812995][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.819366][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.825979][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.832445][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.839068][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.845372][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.851994][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.859041][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.865658][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.872557][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.879175][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.885527][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.892129][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.898550][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.905154][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.913700][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.920326][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.927240][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1294.933869][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1294.945023][T14190] usb 4-1: USB disconnect, device number 26 [ 1294.950994][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1295.138937][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.150879][ T12] bond0 (unregistering): Released all slaves [ 1295.166871][ T12] bond1 (unregistering): Released all slaves [ 1295.199551][T15745] cp2112 0003:10C4:EA90.0020: error setting SMBus config [ 1295.216966][T15745] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -71 [ 1295.253180][T15745] usb 6-1: USB disconnect, device number 29 [ 1295.337089][T26765] hsr_slave_0: entered promiscuous mode [ 1295.344352][T26765] hsr_slave_1: entered promiscuous mode [ 1295.350820][T26765] debugfs: 'hsr0' already exists in 'hsr' [ 1295.357419][T26765] Cannot create hsr debugfs directory [ 1295.627256][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.697560][ T12] hsr_slave_0: left promiscuous mode [ 1295.710271][ T12] hsr_slave_1: left promiscuous mode [ 1295.724946][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.757348][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.104810][T17621] Bluetooth: hci1: command tx timeout [ 1296.440913][T26857] sctp: [Deprecated]: syz.2.6221 (pid 26857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1296.440913][T26857] Use struct sctp_sack_info instead [ 1296.666909][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.007893][T26854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1297.707376][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.782995][T19758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.802664][T15745] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1297.876711][T26891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1297.913581][T26891] netlink: 'syz.2.6232': attribute type 7 has an invalid length. [ 1298.022491][T26891] netlink: 'syz.2.6232': attribute type 8 has an invalid length. [ 1298.031546][T26891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1298.041434][T15745] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1298.050126][T15745] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.101366][T15745] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1298.182005][T17621] Bluetooth: hci1: command tx timeout [ 1298.258360][T15745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.277071][T26891] team0: entered promiscuous mode [ 1298.282491][T26891] team_slave_0: entered promiscuous mode [ 1298.288298][T26891] team_slave_1: entered promiscuous mode [ 1298.441342][T26891] bond0: entered promiscuous mode [ 1298.454370][T26891] bond_slave_0: entered promiscuous mode [ 1298.460610][T26891] bond_slave_1: entered promiscuous mode [ 1298.466279][T15745] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1298.466309][T15745] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1298.466326][T15745] usb 6-1: Product: syz [ 1298.466340][T15745] usb 6-1: Manufacturer: syz [ 1298.473149][T15745] cdc_wdm 6-1:1.0: skipping garbage [ 1298.499478][T26891] gretap0: entered promiscuous mode [ 1298.509259][T15745] cdc_wdm 6-1:1.0: skipping garbage [ 1298.536234][T26891] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1298.576963][T15745] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1298.604167][T15745] cdc_wdm 6-1:1.0: Unknown control protocol [ 1298.645005][T26765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1298.676912][T26765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1298.715049][T15745] usb 6-1: USB disconnect, device number 30 [ 1298.725785][T26765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1298.760198][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.796132][T26765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1299.078570][T26765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.120478][T26765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.172002][T15745] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1299.194815][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.202054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.245680][T23998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.252920][T23998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.346694][T15745] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1299.369624][T15745] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.417049][T15745] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1299.440992][T26765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.448032][T15745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1299.449734][T15745] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1299.506393][T15745] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1299.528829][T15745] usb 6-1: Product: syz [ 1299.538702][T15745] usb 6-1: Manufacturer: syz [ 1299.569903][T15745] cdc_wdm 6-1:1.0: skipping garbage [ 1299.581780][T15745] cdc_wdm 6-1:1.0: skipping garbage [ 1299.596058][T15745] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1299.612169][T15745] cdc_wdm 6-1:1.0: Unknown control protocol [ 1299.629056][T26765] veth0_vlan: entered promiscuous mode [ 1299.661140][T26765] veth1_vlan: entered promiscuous mode [ 1299.788312][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.816544][T26765] veth0_macvtap: entered promiscuous mode [ 1299.856453][T26765] veth1_macvtap: entered promiscuous mode [ 1299.914874][T26765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.958838][T26765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.987750][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.999561][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.049155][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.061248][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.134036][ C1] wdm_int_callback: 24 callbacks suppressed [ 1300.134065][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.146608][ C1] wdm_int_callback: 24 callbacks suppressed [ 1300.146636][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.159232][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.165867][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.172221][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.178847][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.186522][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.193140][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.202477][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.209099][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.215508][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.222126][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.228525][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.235147][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.241519][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.248134][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.254512][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.261128][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.267612][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1300.272202][T17621] Bluetooth: hci1: command tx timeout [ 1300.274223][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1300.292299][T19761] usb 6-1: USB disconnect, device number 31 [ 1300.298287][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1300.322817][T23998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.337632][T23998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.473331][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.481221][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.825183][T19757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.833320][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.590706][T27009] netlink: 'syz.2.6264': attribute type 12 has an invalid length. [ 1301.598845][T27009] netlink: 'syz.2.6264': attribute type 29 has an invalid length. [ 1301.606839][T27009] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1301.627119][T27009] netlink: 35 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1301.867461][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.954931][T27021] syzkaller0: entered promiscuous mode [ 1301.960700][T27021] syzkaller0: entered allmulticast mode [ 1302.032000][T19760] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1302.203841][T19760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.241418][T19760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.271590][T19760] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1302.292424][T19760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.322937][T19760] usb 5-1: config 0 descriptor?? [ 1302.772523][T19760] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1302.791620][T19760] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1302.908126][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.971676][T19760] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 1303.185680][T19760] cp2112 0003:10C4:EA90.0021: error requesting SMBus config [ 1303.203913][T19760] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -32 [ 1303.230248][T19760] usb 5-1: USB disconnect, device number 127 [ 1303.871008][T15745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.945449][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.002332][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.401232][T27094] syzkaller0: entered promiscuous mode [ 1305.448749][T27094] syzkaller0: entered allmulticast mode [ 1305.820403][T19757] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1306.013708][T19757] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1306.026125][T19757] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.043233][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.063521][T19757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1306.083819][T19757] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.121863][T19757] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1306.131449][T19757] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1306.158532][T19757] usb 4-1: Product: syz [ 1306.171974][T19757] usb 4-1: Manufacturer: syz [ 1306.206332][T19757] cdc_wdm 4-1:1.0: skipping garbage [ 1306.219006][T19757] cdc_wdm 4-1:1.0: skipping garbage [ 1306.242315][T19757] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1306.262012][T19757] cdc_wdm 4-1:1.0: Unknown control protocol [ 1306.414352][T19757] usb 4-1: USB disconnect, device number 27 [ 1306.435961][T19760] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1306.437420][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.449947][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.573520][T19764] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1306.626103][T19760] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 1306.637606][T19760] usb 3-1: config 0 has no interface number 0 [ 1306.653118][T19760] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid maxpacket 1024, setting to 64 [ 1306.670808][T19760] usb 3-1: config 0 interface 96 has no altsetting 0 [ 1306.712929][T19760] usb 3-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 1306.722191][T19760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.730201][T19760] usb 3-1: Product: syz [ 1306.736285][T19760] usb 3-1: Manufacturer: syz [ 1306.740912][T19760] usb 3-1: SerialNumber: syz [ 1306.747413][T19764] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1306.756302][T19764] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1306.767829][T19764] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1306.777123][T19764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1306.789211][T19760] usb 3-1: config 0 descriptor?? [ 1306.794723][T19764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1306.806502][T27125] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1306.807921][T19764] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1306.826668][T19764] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1306.836379][T19764] usb 2-1: Product: syz [ 1306.840679][T19764] usb 2-1: Manufacturer: syz [ 1306.872443][T19764] cdc_wdm 2-1:1.0: skipping garbage [ 1306.877742][T19764] cdc_wdm 2-1:1.0: skipping garbage [ 1306.892731][T19764] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1306.898722][T19764] cdc_wdm 2-1:1.0: Unknown control protocol [ 1306.912438][T15745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.957803][T19757] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1307.044525][T19760] usb 3-1: USB disconnect, device number 7 [ 1307.069189][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.127347][T19757] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1307.136397][T19757] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.154476][T19757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1307.164017][T19757] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.177542][T19757] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1307.187118][T19757] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1307.195276][T19757] usb 4-1: Product: syz [ 1307.199642][T19757] usb 4-1: Manufacturer: syz [ 1307.214995][T19757] cdc_wdm 4-1:1.0: skipping garbage [ 1307.220681][T19757] cdc_wdm 4-1:1.0: skipping garbage [ 1307.228176][T19757] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1307.234265][T19757] cdc_wdm 4-1:1.0: Unknown control protocol [ 1307.408497][T19757] usb 2-1: USB disconnect, device number 3 [ 1307.409723][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 1307.422771][ C1] wdm_int_callback: 52 callbacks suppressed [ 1307.422794][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1307.435286][ C1] wdm_int_callback: 52 callbacks suppressed [ 1307.435307][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1307.447268][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1308.108201][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.442074][T19757] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1308.592079][T15745] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1308.601202][T19757] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 1308.609483][T19757] usb 2-1: config 0 has no interface number 0 [ 1308.617602][T19757] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=b2.83 [ 1308.626820][T19757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.634897][T19757] usb 2-1: Product: syz [ 1308.639084][T19757] usb 2-1: Manufacturer: syz [ 1308.643755][T19757] usb 2-1: SerialNumber: syz [ 1308.650402][T19757] usb 2-1: config 0 descriptor?? [ 1308.665644][T19764] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1308.702054][T19760] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1308.742055][T15745] usb 3-1: Using ep0 maxpacket: 16 [ 1308.748621][T15745] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1308.757889][T15745] usb 3-1: config 0 has no interface number 0 [ 1308.764238][T15745] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1308.775341][T15745] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1308.786218][T15745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.794295][T15745] usb 3-1: Product: syz [ 1308.798471][T15745] usb 3-1: Manufacturer: syz [ 1308.803115][T15745] usb 3-1: SerialNumber: syz [ 1308.810056][T15745] usb 3-1: config 0 descriptor?? [ 1308.818264][T15745] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 1308.833692][T19764] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 1308.846310][T19764] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1308.856098][T19764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.864590][T19764] usb 5-1: Product: syz [ 1308.869643][T19764] usb 5-1: Manufacturer: syz [ 1308.872810][T15745] usb 2-1: USB disconnect, device number 4 [ 1308.880470][T19760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.895638][T19764] usb 5-1: SerialNumber: syz [ 1308.900542][T19760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.913826][T19760] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1308.924898][T19760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.936085][T19764] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1308.953874][T19760] usb 6-1: config 0 descriptor?? [ 1308.990184][T14190] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1309.022487][T19764] usb 3-1: USB disconnect, device number 8 [ 1309.147483][T19761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.208756][T27138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.218348][T27138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.232094][T15745] usb 4-1: USB disconnect, device number 28 [ 1309.260507][T27138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.282520][T27138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.300089][T27138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.324151][T27138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.354134][T19764] usb 5-1: USB disconnect, device number 2 [ 1309.383727][T19760] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1309.400832][T19760] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1309.421435][T19760] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1309.434339][T19760] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1309.441576][T19760] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1309.450378][T19760] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1309.458256][T19760] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1309.480887][T19760] pyra 0003:1E7D:2CF6.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1309.579664][T19760] pyra 0003:1E7D:2CF6.0022: couldn't init struct pyra_device [ 1309.595740][T19760] pyra 0003:1E7D:2CF6.0022: couldn't install mouse [ 1309.613402][T19760] pyra 0003:1E7D:2CF6.0022: probe with driver pyra failed with error -71 [ 1309.631562][T19760] usb 6-1: USB disconnect, device number 32 [ 1309.662114][T19761] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1309.752300][T15745] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1309.815153][T19761] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1309.824379][T19761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.832621][T19761] usb 4-1: Product: syz [ 1309.836811][T19761] usb 4-1: Manufacturer: syz [ 1309.841430][T19761] usb 4-1: SerialNumber: syz [ 1309.848546][T19761] usb 4-1: config 0 descriptor?? [ 1309.852153][T19756] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1309.912027][T15745] usb 2-1: Using ep0 maxpacket: 16 [ 1309.919076][T15745] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1309.928767][T15745] usb 2-1: config 0 has no interfaces? [ 1309.936550][T15745] usb 2-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 1309.947174][T15745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.955486][T19757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.963829][T15745] usb 2-1: Product: syz [ 1309.968019][T15745] usb 2-1: Manufacturer: 燱贿鄋愚ӝ⍸籃㠩Ⓓ穠禮亍誜닣䄑쐑 [ 1309.978624][T15745] usb 2-1: SerialNumber: syz [ 1309.989522][T15745] usb 2-1: config 0 descriptor?? [ 1310.013598][T19756] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1310.022393][T19756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.024702][T14190] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1310.033186][T19756] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1310.040830][T14190] ath9k_htc: Failed to initialize the device [ 1310.049138][T19756] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.059488][T19764] usb 5-1: ath9k_htc: USB layer deinitialized [ 1310.072720][T19756] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1310.075267][T19761] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1310.082058][T19756] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1310.108881][T19756] usb 3-1: Product: syz [ 1310.125614][T19756] usb 3-1: Manufacturer: syz [ 1310.143466][T19756] cdc_wdm 3-1:1.0: skipping garbage [ 1310.154638][T19756] cdc_wdm 3-1:1.0: skipping garbage [ 1310.172133][T19756] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1310.178194][T19756] cdc_wdm 3-1:1.0: Unknown control protocol [ 1310.190407][T17382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.216510][T19756] usb 2-1: USB disconnect, device number 5 [ 1310.369268][T15745] usb 3-1: USB disconnect, device number 9 [ 1310.412760][T19764] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1310.592043][T19764] usb 5-1: Using ep0 maxpacket: 32 [ 1310.599071][T19764] usb 5-1: config index 0 descriptor too short (expected 241, got 72) [ 1310.607761][T19764] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1310.619631][T19764] usb 5-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 1310.630001][T19764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.640939][T19764] usb 5-1: config 0 descriptor?? [ 1310.650996][T19764] mos7840 5-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1310.832086][T17382] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1310.995374][T17382] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1311.004400][T17382] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.015040][T17382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1311.022040][T19756] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1311.024094][T17382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.053403][T17382] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1311.063018][T17382] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1311.071100][T17382] usb 3-1: Product: syz [ 1311.081322][T17382] usb 3-1: Manufacturer: syz [ 1311.090136][T17382] cdc_wdm 3-1:1.0: skipping garbage [ 1311.096425][T17382] cdc_wdm 3-1:1.0: skipping garbage [ 1311.109368][T17382] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1311.115436][T17382] cdc_wdm 3-1:1.0: Unknown control protocol [ 1311.202018][T19756] usb 2-1: Using ep0 maxpacket: 32 [ 1311.208841][T19756] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1311.218195][T19756] usb 2-1: config 0 has no interface number 0 [ 1311.224673][T19756] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1311.230298][T17382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.233770][T19756] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1311.253811][T17722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.262238][T19756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.263025][T17382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.270240][T19756] usb 2-1: Product: syz [ 1311.270258][T19756] usb 2-1: Manufacturer: syz [ 1311.270272][T19756] usb 2-1: SerialNumber: syz [ 1311.272944][T19756] usb 2-1: config 0 descriptor?? [ 1311.298873][T17382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.364054][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1311.370703][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1311.378764][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1311.385418][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1311.392186][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1311.398805][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1311.405286][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1311.411916][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1311.418237][T11704] usb 3-1: USB disconnect, device number 10 [ 1311.424388][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1311.424417][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1311.424434][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1311.432600][T19759] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1311.582360][T19759] usb 6-1: device descriptor read/64, error -71 [ 1311.842090][T19759] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1311.932053][T11704] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1311.972091][T19759] usb 6-1: device descriptor read/64, error -71 [ 1312.082247][T19759] usb usb6-port1: attempt power cycle [ 1312.096319][T11704] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1312.105321][T11704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.116007][T11704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1312.125209][T11704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.137311][T11704] usb 3-1: language id specifier not provided by device, defaulting to English [ 1312.147590][T11704] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1312.156784][T11704] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1312.166610][T11704] usb 3-1: Product: syz [ 1312.170842][T11704] usb 3-1: Manufacturer: syz [ 1312.186535][T11704] cdc_wdm 3-1:1.0: skipping garbage [ 1312.191798][T11704] cdc_wdm 3-1:1.0: skipping garbage [ 1312.198895][T11704] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1312.204962][T11704] cdc_wdm 3-1:1.0: Unknown control protocol [ 1312.329171][ C0] raw-gadget.5 gadget.1: ignoring, device is not running [ 1312.336764][ C0] raw-gadget.5 gadget.1: ignoring, device is not running [ 1312.344393][ C0] raw-gadget.5 gadget.1: ignoring, device is not running [ 1312.352698][T19756] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1312.358699][T17382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.362047][T19756] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1312.379388][T19756] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1312.394029][T11704] usb 3-1: USB disconnect, device number 11 [ 1312.403987][T19756] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1312.417198][T19756] usb 2-1: USB disconnect, device number 6 [ 1312.433255][T19759] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1312.474919][T19759] usb 6-1: device descriptor read/8, error -71 [ 1312.491228][T19764] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1312.504774][T19764] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 1312.522860][T19764] usb 5-1: USB disconnect, device number 3 [ 1312.529155][T19761] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1312.545290][T19764] mos7840 5-1:0.0: device disconnected [ 1312.558276][T19761] usb 4-1: USB disconnect, device number 29 [ 1312.722095][T19759] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1312.745127][T19759] usb 6-1: device descriptor read/8, error -71 [ 1312.862952][T19759] usb usb6-port1: unable to enumerate USB device [ 1312.982647][T19756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.242036][T19759] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1313.344184][T19756] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1313.382857][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.394489][T19759] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1313.403296][T19759] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.413512][T19761] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1313.421082][T19759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1313.430381][T19759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.443558][T19759] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1313.452769][T19759] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1313.460758][T19759] usb 3-1: Product: syz [ 1313.467916][T19759] usb 3-1: Manufacturer: syz [ 1313.478349][T19759] cdc_wdm 3-1:1.0: skipping garbage [ 1313.483672][T19759] cdc_wdm 3-1:1.0: skipping garbage [ 1313.492990][T19759] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1313.498929][T19759] cdc_wdm 3-1:1.0: Unknown control protocol [ 1313.518955][T19756] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.541534][T19756] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1313.557017][T19756] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1313.568890][T19756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.577001][T19756] usb 4-1: Product: syz [ 1313.581279][T19756] usb 4-1: Manufacturer: syz [ 1313.586673][T19756] usb 4-1: SerialNumber: syz [ 1313.599958][T19761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.604390][T19756] cdc_mbim 4-1:1.0: skipping garbage [ 1313.611462][T19761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.626296][T19761] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1313.635675][T19761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.647378][T19761] usb 5-1: config 0 descriptor?? [ 1313.684919][T19759] usb 3-1: USB disconnect, device number 12 [ 1313.772022][T19764] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1313.806616][T27171] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1313.942319][T19764] usb 2-1: Using ep0 maxpacket: 32 [ 1313.949430][T19764] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1313.957722][T19764] usb 2-1: config 0 has no interface number 0 [ 1313.963936][T19764] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1313.972909][T19764] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1313.982316][T19764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.990349][T19764] usb 2-1: Product: syz [ 1313.994586][T19764] usb 2-1: Manufacturer: syz [ 1313.999299][T19764] usb 2-1: SerialNumber: syz [ 1314.010654][T19764] usb 2-1: config 0 descriptor?? [ 1314.024643][T19764] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1314.034217][T19764] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1314.064363][T19761] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1314.074443][T19761] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1314.122390][T11704] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1314.260725][T19761] cp2112 0003:10C4:EA90.0023: Part Number: 0x00 Device Version: 0x00 [ 1314.274591][T11704] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1314.285301][T11704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.295889][T11704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1314.305217][T11704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.319755][T11704] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1314.328958][T11704] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1314.337047][T11704] usb 3-1: Product: syz [ 1314.341427][T11704] usb 3-1: Manufacturer: syz [ 1314.354389][T11704] cdc_wdm 3-1:1.0: skipping garbage [ 1314.359833][T11704] cdc_wdm 3-1:1.0: skipping garbage [ 1314.367105][T11704] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1314.373198][T11704] cdc_wdm 3-1:1.0: Unknown control protocol [ 1314.420717][T27171] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1314.422709][T19762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.428996][T19756] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 1314.446550][T19756] cdc_mbim 4-1:1.0: cdc-wdm1: USB WDM device [ 1314.458933][T19756] wwan wwan0: port wwan0mbim0 attached [ 1314.465055][T19761] cp2112 0003:10C4:EA90.0023: error requesting SMBus config [ 1314.479285][T19756] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 22:42:2e:a4:bd:6c [ 1314.481178][T19761] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -32 [ 1314.527834][T19761] usb 5-1: USB disconnect, device number 4 [ 1314.602058][T14190] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1314.645521][T19764] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1314.665888][T19760] usb 4-1: USB disconnect, device number 30 [ 1314.680483][T19760] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1314.752905][T19760] wwan wwan0: port wwan0mbim0 disconnected [ 1314.766388][T14190] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1314.795575][T14190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.817153][T14190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.843656][T14190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1314.852832][T14190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.863621][T14190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.875660][T14190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1314.884095][T14190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.897413][T14190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.911282][T14190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1314.921784][T14190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.933347][T14190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.944730][T14190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1314.953109][T14190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.962433][T14190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.974265][T14190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1314.984093][T14190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.993828][T14190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1315.010236][T14190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1315.021398][T14190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1315.034936][T14190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1315.068634][T14190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1315.077406][T14190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1315.087157][T14190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1315.101622][T14190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1315.111334][T14190] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1315.116822][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1315.127024][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1315.134974][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1315.141598][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1315.148760][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1315.155385][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1315.157572][T14190] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1315.161886][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1315.176432][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1315.179514][T14190] usb 6-1: Product: syz [ 1315.183569][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1315.187550][T14190] usb 6-1: Manufacturer: syz [ 1315.193505][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1315.193875][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1315.199038][T14190] usb 6-1: SerialNumber: syz [ 1315.204276][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1315.204726][T19756] usb 3-1: USB disconnect, device number 13 [ 1315.215812][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1315.215836][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1315.215852][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1315.302726][T14190] usb 6-1: config 0 descriptor?? [ 1315.326839][T14190] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1315.462737][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.682142][T19756] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1315.690971][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 1315.695433][T19758] usb 6-1: USB disconnect, device number 37 [ 1315.711540][T19758] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1315.853558][T19756] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 1315.866587][T19756] usb 4-1: config 0 has no interfaces? [ 1315.873786][T19756] usb 4-1: config 0 has no interfaces? [ 1315.880410][T19756] usb 4-1: config 0 has no interfaces? [ 1315.888119][T19756] usb 4-1: config 0 has no interfaces? [ 1315.897758][T19756] usb 4-1: config 0 has no interfaces? [ 1315.905343][T19756] usb 4-1: config 0 has no interfaces? [ 1315.916914][T19756] usb 4-1: config 0 has no interfaces? [ 1315.924514][T19756] usb 4-1: config 0 has no interfaces? [ 1315.933137][T19756] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1315.945319][T19756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.956236][T19756] usb 4-1: Product: syz [ 1315.960515][T19756] usb 4-1: Manufacturer: syz [ 1315.966187][T19756] usb 4-1: SerialNumber: syz [ 1315.973924][T19756] usb 4-1: config 0 descriptor?? [ 1316.023439][T15745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.027174][T19764] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1316.044707][T19764] em28xx 2-1:0.89: board has no eeprom [ 1316.112094][T19764] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1316.132078][T19764] em28xx 2-1:0.89: analog set to bulk mode. [ 1316.138061][T19759] em28xx 2-1:0.89: Registering V4L2 extension [ 1316.227704][T19759] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1316.228290][T19758] usb 4-1: USB disconnect, device number 31 [ 1316.249819][T19759] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1316.261868][T19759] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1316.271665][T19759] em28xx 2-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1316.284923][T19759] em28xx 2-1:0.89: Config register raw data: 0xfffffffb [ 1316.293649][T19759] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1316.300765][T19759] em28xx 2-1:0.89: No AC97 audio processor [ 1316.313341][T15745] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1316.325319][T19759] usb 2-1: Decoder not found [ 1316.334600][T19759] em28xx 2-1:0.89: failed to create media graph [ 1316.385771][T19759] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1316.561278][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.639091][T19759] em28xx 2-1:0.89: Registering snapshot button... [ 1316.650180][T19759] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input38 [ 1316.671293][T15745] usb 3-1: Using ep0 maxpacket: 32 [ 1316.692071][T19759] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1316.711077][T27224] ================================================================== [ 1316.719176][T27224] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1316.726562][T27224] Read of size 8 at addr ffff88806a530740 by task v4l_id/27224 [ 1316.734088][T27224] [ 1316.736410][T27224] CPU: 0 UID: 0 PID: 27224 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.736426][T27224] Tainted: [L]=SOFTLOCKUP [ 1316.736430][T27224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1316.736436][T27224] Call Trace: [ 1316.736442][T27224] [ 1316.736447][T27224] dump_stack_lvl+0xe8/0x150 [ 1316.736464][T27224] print_report+0xba/0x230 [ 1316.736476][T27224] ? v4l2_fh_open+0xac/0x420 [ 1316.736488][T27224] kasan_report+0x117/0x150 [ 1316.736499][T27224] ? v4l2_fh_open+0xac/0x420 [ 1316.736511][T27224] v4l2_fh_open+0xac/0x420 [ 1316.736522][T27224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1316.736535][T27224] em28xx_v4l2_open+0x157/0x9a0 [ 1316.736550][T27224] ? do_raw_spin_lock+0x12b/0x2f0 [ 1316.736564][T27224] v4l2_open+0x1bf/0x3a0 [ 1316.736577][T27224] chrdev_open+0x4cd/0x5e0 [ 1316.736587][T27224] ? __pfx_chrdev_open+0x10/0x10 [ 1316.736596][T27224] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1316.736609][T27224] ? __pfx_chrdev_open+0x10/0x10 [ 1316.736618][T27224] do_dentry_open+0x7ce/0x1420 [ 1316.736632][T27224] vfs_open+0x3b/0x340 [ 1316.736642][T27224] ? path_openat+0x346e/0x3e20 [ 1316.736656][T27224] path_openat+0x3486/0x3e20 [ 1316.736674][T27224] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1316.736689][T27224] ? getname_flags+0xb7/0x540 [ 1316.736699][T27224] ? __pfx_path_openat+0x10/0x10 [ 1316.736712][T27224] ? __lock_acquire+0x6b5/0x2cf0 [ 1316.736728][T27224] do_filp_open+0x22d/0x490 [ 1316.736742][T27224] ? __pfx_do_filp_open+0x10/0x10 [ 1316.736759][T27224] ? _raw_spin_unlock+0x28/0x50 [ 1316.736773][T27224] ? alloc_fd+0x64b/0x6c0 [ 1316.736786][T27224] do_sys_openat2+0x12f/0x220 [ 1316.736797][T27224] ? __pfx_do_sys_openat2+0x10/0x10 [ 1316.736809][T27224] ? exc_page_fault+0x6a/0xc0 [ 1316.736819][T27224] ? do_user_addr_fault+0xc7c/0x1360 [ 1316.736835][T27224] __x64_sys_openat+0x138/0x170 [ 1316.736848][T27224] do_syscall_64+0xe2/0xf80 [ 1316.736858][T27224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.736867][T27224] ? trace_irq_disable+0x37/0x100 [ 1316.736877][T27224] ? clear_bhb_loop+0x60/0xb0 [ 1316.736887][T27224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.736897][T27224] RIP: 0033:0x7f93b52a7407 [ 1316.736907][T27224] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1316.736916][T27224] RSP: 002b:00007ffe74783330 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1316.736928][T27224] RAX: ffffffffffffffda RBX: 00007f93b59be880 RCX: 00007f93b52a7407 [ 1316.736935][T27224] RDX: 0000000000000000 RSI: 00007ffe74784f1b RDI: ffffffffffffff9c [ 1316.736943][T27224] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1316.736949][T27224] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1316.736954][T27224] R13: 00007ffe74783580 R14: 00007f93b5b25000 R15: 0000563d377184d8 [ 1316.736965][T27224] [ 1316.736969][T27224] [ 1317.020780][T27224] Allocated by task 19759: [ 1317.025194][T27224] kasan_save_track+0x3e/0x80 [ 1317.029957][T27224] __kasan_kmalloc+0x93/0xb0 [ 1317.034548][T27224] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1317.039903][T27224] em28xx_v4l2_init+0x10b/0x2e70 [ 1317.044826][T27224] em28xx_init_extension+0x120/0x1c0 [ 1317.050099][T27224] process_scheduled_works+0xaec/0x17a0 [ 1317.055639][T27224] worker_thread+0xda6/0x1360 [ 1317.060317][T27224] kthread+0x726/0x8b0 [ 1317.064371][T27224] ret_from_fork+0x51b/0xa40 [ 1317.068950][T27224] ret_from_fork_asm+0x1a/0x30 [ 1317.073710][T27224] [ 1317.076049][T27224] Freed by task 19759: [ 1317.080100][T27224] kasan_save_track+0x3e/0x80 [ 1317.084764][T27224] kasan_save_free_info+0x46/0x50 [ 1317.089780][T27224] __kasan_slab_free+0x5c/0x80 [ 1317.094528][T27224] kfree+0x1be/0x650 [ 1317.098409][T27224] em28xx_v4l2_init+0x1683/0x2e70 [ 1317.103421][T27224] em28xx_init_extension+0x120/0x1c0 [ 1317.108703][T27224] process_scheduled_works+0xaec/0x17a0 [ 1317.114244][T27224] worker_thread+0xda6/0x1360 [ 1317.118912][T27224] kthread+0x726/0x8b0 [ 1317.123050][T27224] ret_from_fork+0x51b/0xa40 [ 1317.127630][T27224] ret_from_fork_asm+0x1a/0x30 [ 1317.132380][T27224] [ 1317.134688][T27224] The buggy address belongs to the object at ffff88806a530000 [ 1317.134688][T27224] which belongs to the cache kmalloc-8k of size 8192 [ 1317.148728][T27224] The buggy address is located 1856 bytes inside of [ 1317.148728][T27224] freed 8192-byte region [ffff88806a530000, ffff88806a532000) [ 1317.162697][T27224] [ 1317.165030][T27224] The buggy address belongs to the physical page: [ 1317.171433][T27224] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a530 [ 1317.180185][T27224] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1317.188773][T27224] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1317.196754][T27224] page_type: f5(slab) [ 1317.201165][T27224] raw: 00fff00000000040 ffff88813fe27280 0000000000000000 0000000000000001 [ 1317.209752][T27224] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1317.218341][T27224] head: 00fff00000000040 ffff88813fe27280 0000000000000000 0000000000000001 [ 1317.227018][T27224] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1317.235688][T27224] head: 00fff00000000003 ffffea0001a94c01 00000000ffffffff 00000000ffffffff [ 1317.244346][T27224] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1317.253002][T27224] page dumped because: kasan: bad access detected [ 1317.259420][T27224] page_owner tracks the page as allocated [ 1317.265131][T27224] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18475, tgid 18475 (syz-executor), ts 978926625212, free_ts 978925067604 [ 1317.286847][T27224] post_alloc_hook+0x228/0x280 [ 1317.291618][T27224] get_page_from_freelist+0x24dc/0x2580 [ 1317.297166][T27224] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1317.302976][T27224] alloc_pages_mpol+0x232/0x4a0 [ 1317.307836][T27224] allocate_slab+0x86/0x3a0 [ 1317.312418][T27224] ___slab_alloc+0xd82/0x1760 [ 1317.317083][T27224] __slab_alloc+0x65/0x100 [ 1317.321483][T27224] __kmalloc_cache_noprof+0x40d/0x6e0 [ 1317.326837][T27224] ipv4_sysctl_init_net+0x25d/0x3b0 [ 1317.332113][T27224] ops_init+0x35c/0x5c0 [ 1317.336340][T27224] setup_net+0x118/0x340 [ 1317.340564][T27224] copy_net_ns+0x50e/0x730 [ 1317.344963][T27224] create_new_namespaces+0x3e7/0x6a0 [ 1317.350243][T27224] unshare_nsproxy_namespaces+0x11a/0x160 [ 1317.355952][T27224] ksys_unshare+0x4f4/0x900 [ 1317.360505][T27224] __ia32_sys_unshare+0x37/0x40 [ 1317.365341][T27224] page last free pid 18475 tgid 18475 stack trace: [ 1317.371819][T27224] __free_frozen_pages+0xbf8/0xd70 [ 1317.376918][T27224] __put_partials+0x146/0x170 [ 1317.381580][T27224] __slab_free+0x294/0x320 [ 1317.386011][T27224] qlist_free_all+0x97/0x100 [ 1317.390604][T27224] kasan_quarantine_reduce+0x148/0x160 [ 1317.396075][T27224] __kasan_slab_alloc+0x22/0x80 [ 1317.400909][T27224] __kmalloc_noprof+0x3c2/0x7e0 [ 1317.405741][T27224] ops_init+0x7b/0x5c0 [ 1317.409801][T27224] setup_net+0x118/0x340 [ 1317.414028][T27224] copy_net_ns+0x50e/0x730 [ 1317.418428][T27224] create_new_namespaces+0x3e7/0x6a0 [ 1317.423702][T27224] unshare_nsproxy_namespaces+0x11a/0x160 [ 1317.429428][T27224] ksys_unshare+0x4f4/0x900 [ 1317.433923][T27224] __ia32_sys_unshare+0x37/0x40 [ 1317.438757][T27224] __do_fast_syscall_32+0x1d2/0x540 [ 1317.443948][T27224] do_fast_syscall_32+0x33/0x70 [ 1317.448788][T27224] [ 1317.451100][T27224] Memory state around the buggy address: [ 1317.457081][T27224] ffff88806a530600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.465127][T27224] ffff88806a530680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.473170][T27224] >ffff88806a530700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.481214][T27224] ^ [ 1317.487353][T27224] ffff88806a530780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.495404][T27224] ffff88806a530800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.503719][T27224] ================================================================== [ 1317.625080][T15745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.667453][T19759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.679210][T11704] usb 2-1: USB disconnect, device number 7 [ 1317.688337][T11704] em28xx 2-1:0.89: Disconnecting em28xx [ 1317.697594][T15745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.712510][T11704] em28xx 2-1:0.89: Closing input extension [ 1317.718435][T15745] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1317.729598][T11704] em28xx 2-1:0.89: Deregistering snapshot button [ 1317.739609][T15745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.768753][T27234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6333'. [ 1317.781038][T15745] usb 3-1: config 0 descriptor?? [ 1317.799831][T27224] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1317.807063][T27224] CPU: 0 UID: 0 PID: 27224 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.817639][T27224] Tainted: [L]=SOFTLOCKUP [ 1317.821964][T27224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1317.832032][T27224] Call Trace: [ 1317.835306][T27224] [ 1317.838228][T27224] vpanic+0x1e0/0x670 [ 1317.842197][T27224] panic+0xc5/0xd0 [ 1317.845901][T27224] ? __pfx_panic+0x10/0x10 [ 1317.850306][T27224] ? preempt_schedule_common+0x82/0xd0 [ 1317.855756][T27224] ? v4l2_fh_open+0xac/0x420 [ 1317.860332][T27224] check_panic_on_warn+0x89/0xb0 [ 1317.865258][T27224] ? v4l2_fh_open+0xac/0x420 [ 1317.869833][T27224] end_report+0x6f/0x140 [ 1317.874060][T27224] kasan_report+0x128/0x150 [ 1317.878549][T27224] ? v4l2_fh_open+0xac/0x420 [ 1317.883126][T27224] v4l2_fh_open+0xac/0x420 [ 1317.887526][T27224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1317.893492][T27224] em28xx_v4l2_open+0x157/0x9a0 [ 1317.898338][T27224] ? do_raw_spin_lock+0x12b/0x2f0 [ 1317.903381][T27224] v4l2_open+0x1bf/0x3a0 [ 1317.907616][T27224] chrdev_open+0x4cd/0x5e0 [ 1317.912031][T27224] ? __pfx_chrdev_open+0x10/0x10 [ 1317.917009][T27224] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1317.923323][T27224] ? __pfx_chrdev_open+0x10/0x10 [ 1317.928245][T27224] do_dentry_open+0x7ce/0x1420 [ 1317.932993][T27224] vfs_open+0x3b/0x340 [ 1317.937038][T27224] ? path_openat+0x346e/0x3e20 [ 1317.941782][T27224] path_openat+0x3486/0x3e20 [ 1317.946363][T27224] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1317.951993][T27224] ? getname_flags+0xb7/0x540 [ 1317.956666][T27224] ? __pfx_path_openat+0x10/0x10 [ 1317.961586][T27224] ? __lock_acquire+0x6b5/0x2cf0 [ 1317.966505][T27224] do_filp_open+0x22d/0x490 [ 1317.970991][T27224] ? __pfx_do_filp_open+0x10/0x10 [ 1317.976000][T27224] ? _raw_spin_unlock+0x28/0x50 [ 1317.980834][T27224] ? alloc_fd+0x64b/0x6c0 [ 1317.985146][T27224] do_sys_openat2+0x12f/0x220 [ 1317.989806][T27224] ? __pfx_do_sys_openat2+0x10/0x10 [ 1317.994996][T27224] ? exc_page_fault+0x6a/0xc0 [ 1317.999679][T27224] ? do_user_addr_fault+0xc7c/0x1360 [ 1318.004952][T27224] __x64_sys_openat+0x138/0x170 [ 1318.009813][T27224] do_syscall_64+0xe2/0xf80 [ 1318.014295][T27224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.020340][T27224] ? trace_irq_disable+0x37/0x100 [ 1318.025355][T27224] ? clear_bhb_loop+0x60/0xb0 [ 1318.030028][T27224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.035898][T27224] RIP: 0033:0x7f93b52a7407 [ 1318.040293][T27224] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1318.059899][T27224] RSP: 002b:00007ffe74783330 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1318.068348][T27224] RAX: ffffffffffffffda RBX: 00007f93b59be880 RCX: 00007f93b52a7407 [ 1318.076307][T27224] RDX: 0000000000000000 RSI: 00007ffe74784f1b RDI: ffffffffffffff9c [ 1318.084347][T27224] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1318.092297][T27224] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1318.100287][T27224] R13: 00007ffe74783580 R14: 00007f93b5b25000 R15: 0000563d377184d8 [ 1318.108250][T27224] [ 1318.111625][T27224] Kernel Offset: disabled [ 1318.115945][T27224] Rebooting in 86400 seconds..