last executing test programs: 3m57.553526186s ago: executing program 1 (id=848): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m55.550981044s ago: executing program 1 (id=852): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9002}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m55.541255453s ago: executing program 1 (id=853): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8041, 0x1c3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x43f00, 0x5) 3m54.751596833s ago: executing program 1 (id=856): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m54.621790405s ago: executing program 1 (id=858): setgroups(0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0) 3m54.23157405s ago: executing program 1 (id=864): r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabh\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)r\xdc\x17\x99J\xaeE\xbdt\xe2L^2\xca\x8f\x1cZ\x84\xe3\xe6\x86iC\xcc\xa9\xbf\xeb\x92\r \xa86\x82\xc3\xa8\xf1\xb4\x0f\x9b\x88\x0f\xc8U\x99;\x9c\x17\xfc7\xdd\xd6\x8e%4\x17~\x9d\xe1\a\x00\x00\x00\xa5\x8fG\\\xd8\x80\x15\xcaw\x7f\xac\x063\xbaE\x11\xcc~Q\xcb/\x8bv\xf2B_\xc5\x8d\xb3\xdd\xbd\x1e\xde\x19\xb5\xc4\xcf%p\x89\xa2\xda\xc7', 0x2) r1 = fanotify_init(0x8, 0x1000) r2 = dup(r0) fanotify_mark(r1, 0x201, 0x48001038, r2, 0x0) ftruncate(r2, 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m53.796837121s ago: executing program 32 (id=864): r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabh\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)r\xdc\x17\x99J\xaeE\xbdt\xe2L^2\xca\x8f\x1cZ\x84\xe3\xe6\x86iC\xcc\xa9\xbf\xeb\x92\r \xa86\x82\xc3\xa8\xf1\xb4\x0f\x9b\x88\x0f\xc8U\x99;\x9c\x17\xfc7\xdd\xd6\x8e%4\x17~\x9d\xe1\a\x00\x00\x00\xa5\x8fG\\\xd8\x80\x15\xcaw\x7f\xac\x063\xbaE\x11\xcc~Q\xcb/\x8bv\xf2B_\xc5\x8d\xb3\xdd\xbd\x1e\xde\x19\xb5\xc4\xcf%p\x89\xa2\xda\xc7', 0x2) r1 = fanotify_init(0x8, 0x1000) r2 = dup(r0) fanotify_mark(r1, 0x201, 0x48001038, r2, 0x0) ftruncate(r2, 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m7.258307483s ago: executing program 4 (id=1790): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000088000/0x4000)=nil, 0x4000, 0x2, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 2m7.160984873s ago: executing program 4 (id=1792): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) 2m7.014775388s ago: executing program 4 (id=1794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 2m6.911173528s ago: executing program 4 (id=1797): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 2m6.83827893s ago: executing program 4 (id=1799): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x80}]}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 2m6.827560497s ago: executing program 2 (id=1800): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mmap$IORING_OFF_SQ_RING(&(0x7f0000843000/0x1000)=nil, 0x1000, 0x2000007, 0x401d071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) 2m6.638317485s ago: executing program 2 (id=1801): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x16, "41fee3de5882b3623e364d636bd7e3c752d52b00cd68"}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x10, 0x1, "19"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m6.363116388s ago: executing program 4 (id=1803): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='%', 0x1, 0x48080, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x6, 0x3d, 0x7, 0x7f}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) 2m6.242218431s ago: executing program 33 (id=1803): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='%', 0x1, 0x48080, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x6, 0x3d, 0x7, 0x7f}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) 2m4.146661592s ago: executing program 2 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m3.975593633s ago: executing program 2 (id=1808): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 2m3.774349635s ago: executing program 2 (id=1809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8a301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000500)={r2, 0x4, 0x0, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x17, 0x2, r2}) 2m2.40328118s ago: executing program 2 (id=1816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 2m2.081913875s ago: executing program 34 (id=1816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="2cae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 20.359308865s ago: executing program 3 (id=2748): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882000596aafb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 20.202672417s ago: executing program 3 (id=2750): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 20.148166747s ago: executing program 3 (id=2752): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 20.011615253s ago: executing program 3 (id=2753): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00') 19.990650801s ago: executing program 3 (id=2754): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xd0c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 19.152689522s ago: executing program 3 (id=2756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x11, 0x67, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 18.437990478s ago: executing program 35 (id=2756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x11, 0x67, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 4.952647366s ago: executing program 7 (id=2835): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ac1414220c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 4.60786452s ago: executing program 7 (id=2846): socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0xb, 0x3, 0xa, 0x24, @remote, @loopback, 0xd2da6e9b4b0d345d, 0x20, 0x18000000, 0x2}}) r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c090212"], 0x0) write$usbip_server(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000300000001"], 0x35) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x8, 0x1, 0x0, 0x2000, @vifc_lcl_addr=@local, @multicast2}, 0x10) 2.491851606s ago: executing program 5 (id=2847): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.328452289s ago: executing program 5 (id=2852): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) 2.192261586s ago: executing program 0 (id=2854): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0x7375f2faaa299f0c}}], 0x18}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.989279312s ago: executing program 5 (id=2858): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb", 0x40}], 0x1, 0x0, 0x0, 0x4000080}], 0x1, 0x40040000) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/203, 0xcb}], 0x1}, 0xc3}], 0x1, 0x2003, 0x0) 1.831692129s ago: executing program 6 (id=2860): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 1.830314331s ago: executing program 0 (id=2868): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000002500)=0x0) close(0x3) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000002640)={0x4000000, 0x0, 0x0, 0x8, 0x1000, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.70004301s ago: executing program 0 (id=2861): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b000000000001090224"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0xfffe, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 1.699823439s ago: executing program 6 (id=2862): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.643580818s ago: executing program 6 (id=2863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_CREATE2(r1, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 1.514166394s ago: executing program 7 (id=2864): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.455820113s ago: executing program 6 (id=2865): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.38880866s ago: executing program 6 (id=2866): sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf256000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990009000000280000000600b100070000000600b100070000000600b100030000000600b100070000008e0010000000020840080211000001ffffff7f0802110000010300000802110000000000010028004008021100000112b10040ffffffffffff040000000802110000011c000008021100000006000000260000080211000000080000002100400802110000000800000008021100000032004008021100000105000000080211"], 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.386597069s ago: executing program 7 (id=2867): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0x7375f2faaa299f0c}}], 0x18}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.090251826s ago: executing program 5 (id=2869): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.067804582s ago: executing program 7 (id=2870): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) 313.624778ms ago: executing program 0 (id=2871): r0 = socket(0x18, 0x4001, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 313.415017ms ago: executing program 5 (id=2872): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 313.317567ms ago: executing program 6 (id=2873): socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0xb, 0x3, 0xa, 0x24, @remote, @loopback, 0xd2da6e9b4b0d345d, 0x20, 0x18000000, 0x2}}) r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c090212"], 0x0) write$usbip_server(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000300000001"], 0x35) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x8, 0x1, 0x0, 0x2000, @vifc_lcl_addr=@local, @multicast2}, 0x10) 143.821241ms ago: executing program 0 (id=2874): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) lseek(r1, 0x7f, 0x0) 39.521415ms ago: executing program 7 (id=2875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "7e5df242ddaabdd5", "e73de5f6c6ad1de5197649ad8671db0e", '\x00', "0000000080080020"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc"}, 0x38) 38.533718ms ago: executing program 5 (id=2883): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x80a0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x48000000000, r2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x10002, 0x4, 0x3000, 0x2000, &(0x7f0000314000/0x2000)=nil, 0x0, r2}) kernel console output (not intermixed with test programs): 444][ T5832] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 295.964187][ T5832] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 295.982687][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 296.006929][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.042091][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.073275][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.110278][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.121729][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 296.130866][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.195168][ T10] usb 4-1: config 0 descriptor?? [ 296.221826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 296.230606][ T5916] usb 1-1: USB disconnect, device number 48 [ 296.231819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 296.245538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 296.271121][T10776] vxcan1: entered allmulticast mode [ 296.680963][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.705328][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.740884][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.759717][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.788322][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.808837][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.843754][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.875607][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.895127][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.923177][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 296.947189][ T6785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.001504][ T10] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 297.029830][ T10] microsoft 0003:045E:07DA.0023: no inputs found [ 297.076279][ T10] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 297.147895][ T10] usb 4-1: USB disconnect, device number 40 [ 297.240112][T10798] fido_id[10798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 297.260922][ T6785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.315007][T10621] veth0_vlan: entered promiscuous mode [ 297.362806][T10802] pim6reg: entered allmulticast mode [ 297.428239][ T6785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.497304][T10621] veth1_vlan: entered promiscuous mode [ 297.588385][ T6785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.678476][ T5840] Bluetooth: hci2: command tx timeout [ 297.706361][ T30] audit: type=1326 audit(1768460905.192:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.5.1865" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8f749 code=0x0 [ 297.797511][T10621] veth0_macvtap: entered promiscuous mode [ 297.815593][T10815] overlayfs: conflicting lowerdir path [ 297.845714][T10621] veth1_macvtap: entered promiscuous mode [ 297.967540][T10621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.007658][T10621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.062526][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.087420][ T6785] bridge_slave_1: left allmulticast mode [ 298.101824][ T6785] bridge_slave_1: left promiscuous mode [ 298.107904][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.120230][ T6785] bridge_slave_0: left allmulticast mode [ 298.126420][ T6785] bridge_slave_0: left promiscuous mode [ 298.133423][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.141969][ T37] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 298.304829][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.323544][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.340902][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.355177][ T37] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.365897][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.386270][ T37] usb 1-1: config 0 descriptor?? [ 298.859449][ T37] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 299.142480][ T6785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.159152][ T6785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.174221][ T37] usb 1-1: USB disconnect, device number 49 [ 299.181789][ T6785] bond0 (unregistering): Released all slaves [ 299.192238][ T29] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 299.199157][ T5840] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 299.210429][ T5840] Bluetooth: hci1: Injecting HCI hardware error event [ 299.220067][ T5147] Bluetooth: hci1: hardware error 0x00 [ 299.278769][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.360349][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.375328][ T29] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 299.402457][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.414967][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.455678][ T6785] tipc: Left network mode [ 299.477070][ T29] usb 4-1: config 0 descriptor?? [ 299.495292][ T29] pwc: Creative Labs Webcam Pro Ex detected. [ 299.780927][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 299.803558][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 299.818614][ T4733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.827839][ T4733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.003843][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.028377][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.083004][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 300.089220][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 300.103801][ T6785] hsr_slave_0: left promiscuous mode [ 300.111947][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 300.125740][ T6785] hsr_slave_1: left promiscuous mode [ 300.134573][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 300.149191][ T6785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.169884][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.204942][ T6785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.223887][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.270690][ T6785] veth1_macvtap: left promiscuous mode [ 300.291510][ T6785] veth0_macvtap: left promiscuous mode [ 300.297691][ T6785] veth1_vlan: left promiscuous mode [ 300.304053][ T6785] veth0_vlan: left promiscuous mode [ 300.359183][ T29] pwc: recv_control_msg error -71 req 02 val 2c00 [ 300.385454][ T29] pwc: recv_control_msg error -71 req 04 val 1000 [ 300.400339][ T29] pwc: recv_control_msg error -71 req 04 val 1300 [ 300.407790][ T29] pwc: recv_control_msg error -71 req 04 val 1400 [ 300.416410][ T29] pwc: recv_control_msg error -71 req 02 val 2000 [ 300.426130][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 300.442880][ T29] pwc: recv_control_msg error -71 req 06 val 0600 [ 300.457736][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 300.476394][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 300.493789][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 300.510953][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 300.529178][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 300.556538][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 300.569946][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 300.577143][T10857] ceph: No mds server is up or the cluster is laggy [ 300.587408][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 300.613586][ T29] pwc: Registered as video103. [ 300.651504][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 300.697271][ T29] usb 4-1: USB disconnect, device number 41 [ 300.937453][T10890] netlink: 'syz.5.1882': attribute type 58 has an invalid length. [ 301.276176][ T5147] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 301.466007][ T6785] team0 (unregistering): Port device team_slave_1 removed [ 301.519150][ T6785] team0 (unregistering): Port device team_slave_0 removed [ 302.166304][ T5828] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 302.254398][T10901] netlink: 'syz.6.1817': attribute type 29 has an invalid length. [ 302.287683][T10901] netlink: 'syz.6.1817': attribute type 29 has an invalid length. [ 302.314349][T10901] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1817'. [ 302.383403][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.410062][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.452771][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.475470][ T5828] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.507149][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.538532][ T5828] usb 4-1: config 0 descriptor?? [ 302.541750][ T37] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 302.724871][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 302.732298][ T37] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 302.773032][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.802746][ T37] usb 6-1: config 0 descriptor?? [ 302.825682][ T37] gspca_main: sunplus-2.14.0 probing 041e:400b [ 303.019035][ T5828] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 303.320362][T10931] netlink: 'syz.6.1892': attribute type 58 has an invalid length. [ 303.332543][ T5828] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 303.358465][ T5916] usb 4-1: USB disconnect, device number 42 [ 303.370540][T10931] netlink: 'syz.6.1892': attribute type 58 has an invalid length. [ 303.503420][ T5828] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 303.541536][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.582295][ T5828] usb 1-1: config 0 descriptor?? [ 303.614295][ T5828] pwc: Creative Labs Webcam Pro Ex detected. [ 304.079866][ T37] gspca_sunplus: reg_w_riv err -71 [ 304.095222][ T37] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 304.130767][ T37] usb 6-1: USB disconnect, device number 2 [ 304.205621][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 304.220133][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 304.437375][ T5828] pwc: recv_control_msg error -71 req 02 val 2c00 [ 304.462117][ T5828] pwc: recv_control_msg error -71 req 04 val 1000 [ 304.482335][ T5828] pwc: recv_control_msg error -71 req 04 val 1300 [ 304.493781][ T5828] pwc: recv_control_msg error -71 req 04 val 1400 [ 304.501052][ T5828] pwc: recv_control_msg error -71 req 02 val 2000 [ 304.508706][ T5828] pwc: recv_control_msg error -71 req 02 val 2100 [ 304.515888][ T5828] pwc: recv_control_msg error -71 req 06 val 0600 [ 304.523323][ T5828] pwc: recv_control_msg error -71 req 04 val 1500 [ 304.530444][ T5828] pwc: recv_control_msg error -71 req 02 val 2500 [ 304.538969][ T5828] pwc: recv_control_msg error -71 req 02 val 2400 [ 304.546453][ T5828] pwc: recv_control_msg error -71 req 02 val 2600 [ 304.555848][ T5828] pwc: recv_control_msg error -71 req 02 val 2900 [ 304.564613][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 304.573487][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 304.591407][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 304.606792][ T5828] pwc: Registered as video103. [ 304.648858][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 304.728670][ T5828] usb 1-1: USB disconnect, device number 50 [ 304.872143][T10973] Invalid ELF header magic: != ELF [ 305.787190][T11011] 9pnet: p9_errstr2errno: server reported unknown error di0 [ 305.857040][ T30] audit: type=1804 audit(1768460913.342:6): pid=11018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1919" name="/newroot/498/file1" dev="tmpfs" ino=2662 res=1 errno=0 [ 306.751378][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 306.901283][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 306.910421][ T10] usb 7-1: config 0 has no interfaces? [ 306.925415][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.941435][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 306.949598][ T10] usb 7-1: SerialNumber: syz [ 306.982093][ T10] usb 7-1: config 0 descriptor?? [ 307.215624][ T29] usb 7-1: USB disconnect, device number 2 [ 307.874250][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 308.051320][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 308.058151][ T29] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 308.092243][ T29] usb 6-1: config 0 has no interface number 0 [ 308.106027][ T29] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 308.133247][ T29] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 308.155349][ T29] usb 6-1: config 0 interface 41 has no altsetting 0 [ 308.175492][ T29] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 308.202831][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.220551][ T29] usb 6-1: Product: syz [ 308.232969][ T29] usb 6-1: Manufacturer: syz [ 308.237919][ T29] usb 6-1: SerialNumber: syz [ 308.258100][ T29] usb 6-1: config 0 descriptor?? [ 308.274296][T11096] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.297363][T11096] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.361286][ T10] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 308.523055][T11096] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.557706][ T10] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 308.570545][T11096] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.581420][ T10] usb 1-1: config 0 has no interface number 0 [ 308.593879][ T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 308.604613][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.623813][ T10] usb 1-1: Product: syz [ 308.628183][ T10] usb 1-1: Manufacturer: syz [ 308.646724][ T10] usb 1-1: SerialNumber: syz [ 308.670969][ T10] usb 1-1: config 0 descriptor?? [ 308.717345][T11124] fuse: Unknown parameter 'Name: syz.3.1948 [ 308.717345][T11124] Umask: 0077 [ 308.717345][T11124] State: R (running) [ 308.717345][T11124] Tgid: 1066 [ 308.717345][T11124] Ngid: 0 [ 308.717345][T11124] Pid: 1067 [ 308.717345][T11124] PPid: 1 [ 308.717345][T11124] TracerPid: 0 [ 308.717345][T11124] Uid: 0 0 0 0 [ 308.717345][T11124] Gid: 0 0 0 0 [ 308.717345][T11124] FDSize: 256 [ 308.717345][T11124] Groups: 0 10 [ 308.717345][T11124] NStgid: 1066 [ 308.717345][T11124] NSpid: 1067 [ 308.717345][T11124] NSpgid: 1066 [ 308.717345][T11124] NSsid: 0 [ 308.717345][T11124] Kthread: 0 [ 308.717345][T11124] VmPeak: 104080 kB [ 308.717345][T11124] VmSize: 104080 kB [ 308.717345][T11124] VmLck: 0 kB [ 308.717345][T11124] VmPin: 0 kB [ 308.717345][T11124] VmHWM: 24108 kB [ 308.717345][T11124] VmRSS: 24108 kB [ 308.717345][T11124] RssAnon: 1336 kB [ 308.717345][T11124] RssFile: 22772 kB [ 308.717345][T11124] RssShmem: 0 kB [ 308.717345][T11124] VmData: 36588 kB [ 308.717345][T11124] VmStk: 132 kB [ 308.717345][T11124] VmExe: 1684 kB [ 308.717345][T11124] VmLib: 8 kB [ 308.717345][T11124] VmPTE: 136 kB [ 308.717345][T11124] VmSwap: 0 kB [ 308.717345][T11124] HugetlbPages: 0 kB [ 308.717345][T11124] CoreDumping: 0 [ 308.717345][T11124] THP_enabled: 1 [ 308.717345][T11124] untag_mask: 0xffffffffffffffff [ 308.717345][T11124] Threads: 2 [ 308.717345][T11124] SigQ: 0/12984 [ 308.717345][T11124] SigPnd: 0000000000000000 [ 308.717345][T11124] ShdPnd: 0000000000000000 [ 308.717345][T11124] SigBlk: 0000000000000000 [ 308.717345][T11124] SigIgn: fffffffefffaba35 [ 308.717345][T11124] SigCgt: 0000000100010440 [ 308.717345][T11124] CapInh: 0000000000000000 [ 308.717345][T11124] CapPrm: 000001ffff77ffff [ 308.717345][T11124] CapEff: 000001ffff77ffff [ 308.717345][T11124] CapBnd: 000001ffffffffff [ 308.717345][T11124] CapAmb: 0000000000000000 [ 308.717345][T11124] NoNewPrivs: 0 [ 308.719414][T11124] netlink: 'syz.3.1948': attribute type 39 has an invalid length. [ 309.326749][ T29] dm9601 6-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 309.346226][ T29] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 309.368269][ T29] usb 6-1: USB disconnect, device number 3 [ 309.460439][T11139] input: syz1 as /devices/virtual/input/input48 [ 309.522433][ T10] usb 1-1: Firmware version (0.0) predates our first public release. [ 309.542173][ T10] usb 1-1: Please update to version 0.2 or newer [ 309.659946][ T10] usb 1-1: USB disconnect, device number 51 [ 310.791936][ T5915] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 310.963699][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 310.985653][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.016067][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 311.039420][ T5915] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 311.060990][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.095617][ T5915] usb 6-1: config 0 descriptor?? [ 311.321615][ T37] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 311.483148][ T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.511516][ T37] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.525303][ T37] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.544269][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.561254][ T37] usb 1-1: Product: syz [ 311.565494][ T37] usb 1-1: Manufacturer: syz [ 311.570172][ T37] usb 1-1: SerialNumber: syz [ 312.538900][ T5915] usbhid 6-1:0.0: can't add hid device: -71 [ 312.556319][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 312.583763][ T5915] usb 6-1: USB disconnect, device number 4 [ 312.625528][ T37] cdc_ncm 1-1:1.0: bind() failure [ 312.659824][ T37] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 312.681278][ T37] cdc_ncm 1-1:1.1: bind() failure [ 312.773254][T11258] syzkaller1: entered promiscuous mode [ 312.784389][T11258] syzkaller1: entered allmulticast mode [ 312.843857][ T5832] usb 1-1: USB disconnect, device number 52 [ 313.463985][T11290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2001'. [ 314.539856][T11331] tls_set_device_offload: netdev not found [ 314.555085][T11333] netlink: 'syz.5.2014': attribute type 12 has an invalid length. [ 314.811576][ T10] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 314.998748][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.009838][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 315.019057][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.030770][ T10] usb 1-1: config 0 descriptor?? [ 315.458427][ T10] hid-picolcd 0003:04D8:C002.0026: report_id 0 is invalid [ 315.466211][ T10] hid-picolcd 0003:04D8:C002.0026: item 0 0 1 8 parsing failed [ 315.475626][ T10] hid-picolcd 0003:04D8:C002.0026: device report parse failed [ 315.483701][ T10] hid-picolcd 0003:04D8:C002.0026: probe with driver hid-picolcd failed with error -22 [ 315.664000][ T10] usb 1-1: USB disconnect, device number 53 [ 315.907205][T11380] tls_set_device_offload: netdev not found [ 316.211337][ T10] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 316.311376][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 316.373509][ T10] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 316.382133][ T10] usb 4-1: config 0 has no interface number 0 [ 316.390781][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 316.405005][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.414564][ T10] usb 4-1: Product: syz [ 316.418788][ T10] usb 4-1: Manufacturer: syz [ 316.423711][ T10] usb 4-1: SerialNumber: syz [ 316.430925][ T10] usb 4-1: config 0 descriptor?? [ 316.464213][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.476060][ T29] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 316.485640][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.497159][ T29] usb 7-1: config 0 descriptor?? [ 316.920817][ T29] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 316.947130][ T29] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0027/input/input49 [ 317.011680][ T5919] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 317.139547][ T29] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 317.214214][ T5919] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 317.239330][ T5919] usb 6-1: config 0 has no interface number 0 [ 317.264739][ T5919] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 317.291427][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.321545][ T5919] usb 6-1: Product: syz [ 317.325840][ T5919] usb 6-1: Manufacturer: syz [ 317.330511][ T5919] usb 6-1: SerialNumber: syz [ 317.363122][ T5919] usb 6-1: config 0 descriptor?? [ 317.483399][ T10] usb 4-1: non-Atmel transceiver xxxx0600 [ 317.510138][ T29] usb 7-1: USB disconnect, device number 3 [ 317.684214][ T10] usb 4-1: Firmware version (0.0) predates our first public release. [ 317.699842][ T10] usb 4-1: Please update to version 0.2 or newer [ 317.709364][ T10] usb 4-1: atusb_probe: initialization failed, error = -19 [ 317.748142][ T10] usb 4-1: USB disconnect, device number 43 [ 318.061479][ T37] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 318.199120][ T5919] usb 6-1: Firmware version (0.0) predates our first public release. [ 318.222198][ T5919] usb 6-1: Please update to version 0.2 or newer [ 318.230927][ T37] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 318.243088][ T37] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 318.255787][ T37] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 318.265820][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.299376][T11423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 318.334337][ T37] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 318.363772][ T5919] usb 6-1: USB disconnect, device number 5 [ 318.555015][ T37] usb 1-1: USB disconnect, device number 54 [ 319.354942][ T5828] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 319.389750][ T30] audit: type=1326 audit(1768460926.872:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.0.2050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f046e78f749 code=0x0 [ 319.513347][ T5828] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.525212][ T5828] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 319.542897][ T5828] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 319.560397][ T5828] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 319.575920][ T5828] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.587486][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.597428][ T5828] usb 7-1: Product: syz [ 319.602298][ T5828] usb 7-1: Manufacturer: syz [ 319.607211][ T5828] usb 7-1: SerialNumber: syz [ 319.625284][T11476] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 319.843154][T11476] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 319.850956][T11476] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 320.464747][T11476] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 320.476935][T11476] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 320.690585][ T5828] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 320.697467][ T5828] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 320.711206][ T5828] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 320.851795][ T5919] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 320.891995][ T5828] cdc_ncm 7-1:1.0: setting tx_max = 84 [ 320.920547][ T5828] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 320.943681][ T5828] usb 7-1: USB disconnect, device number 4 [ 320.971443][ T5828] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 321.021276][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 321.043381][ T5919] usb 6-1: config 162 has an invalid interface number: 188 but max is 0 [ 321.052464][ T5919] usb 6-1: config 162 has no interface number 0 [ 321.058879][ T5919] usb 6-1: config 162 interface 188 has no altsetting 0 [ 321.078733][ T5919] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=56.74 [ 321.094946][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.117101][ T5919] usb 6-1: Product: syz [ 321.132761][ T5919] usb 6-1: Manufacturer: syz [ 321.138404][ T5919] usb 6-1: SerialNumber: syz [ 321.404909][ T5919] peak_usb 6-1:162.188 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 321.440849][ T5919] peak_usb 6-1:162.188: unable to read PCAN-USB serial number (err -22) [ 321.534203][ T5919] peak_usb 6-1:162.188: probe with driver peak_usb failed with error -22 [ 321.550485][ T5919] usb 6-1: USB disconnect, device number 6 [ 322.250269][T11588] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 322.322155][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.329363][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.533475][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.542274][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.550129][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.563258][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.571216][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.603792][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.623037][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.639683][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.660044][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.674392][ T5915] hid-generic 0006:0004:0009.0028: unknown main item tag 0x0 [ 322.693494][ T5915] hid-generic 0006:0004:0009.0028: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 322.810004][T11613] fido_id[11613]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 322.952774][ T37] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 323.058684][ T30] audit: type=1800 audit(1768460930.542:8): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2109" name="file1" dev="overlay" ino=2867 res=0 errno=0 [ 323.129053][ T37] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 323.151467][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.166165][ T37] usb 4-1: Product: syz [ 323.172116][ T37] usb 4-1: Manufacturer: syz [ 323.177115][ T37] usb 4-1: SerialNumber: syz [ 323.195987][ T37] usb 4-1: config 0 descriptor?? [ 323.223852][ T5828] hid-generic 0006:0004:0009.0029: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 323.334360][T11635] fido_id[11635]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 323.594144][ T5919] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 323.610656][ T37] airspy 4-1:0.0: Board ID: 00 [ 323.621584][ T37] airspy 4-1:0.0: Firmware version: [ 323.776073][ T5919] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 323.802596][ T5919] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 323.821344][ T5919] usb 6-1: Product: syz [ 323.825611][ T5919] usb 6-1: Manufacturer: syz [ 323.839588][ T5919] usb 6-1: SerialNumber: syz [ 323.848632][ T5919] usb 6-1: config 0 descriptor?? [ 323.866129][ T5919] ch341 6-1:0.0: ch341-uart converter detected [ 323.936284][ T30] audit: type=1326 audit(1768460931.422:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.6.2119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f452eb8f749 code=0x0 [ 324.418403][ T37] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f [ 324.431621][ T37] airspy 4-1:0.0: Registered as swradio24 [ 324.438074][ T37] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 324.455498][ T37] usb 4-1: USB disconnect, device number 44 [ 325.339385][ T5919] ch341-uart ttyUSB0: failed to read break control: -71 [ 325.348205][ T5919] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 326.301335][ T5915] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 326.463296][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.478094][ T5915] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 326.488898][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.501928][ T5915] usb 7-1: config 0 descriptor?? [ 326.871782][ T5832] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 326.927166][ T5915] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 326.951000][ T5915] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.002A/input/input50 [ 327.055282][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.075366][ T5832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.087035][ T5832] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 327.097418][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.110471][ T5832] usb 4-1: Product: syz [ 327.118115][ T5832] usb 4-1: Manufacturer: syz [ 327.124040][ T5832] usb 4-1: SerialNumber: syz [ 327.151093][ T5832] usb 4-1: config 0 descriptor?? [ 327.167356][ T5832] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 327.182167][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.195425][ T5832] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 327.205393][ T5832] usb 4-1: media controller created [ 327.234854][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.355796][ T5915] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 327.445014][ T5832] DVB: Unable to find symbol tda10046_attach() [ 327.484351][ T5832] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 327.499761][ T5832] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 327.820190][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 327.828148][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 327.836209][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 327.861305][ T5919] usb 6-1: USB disconnect, device number 7 [ 327.874331][ T5919] ch341 6-1:0.0: device disconnected [ 327.957786][ T37] usb 7-1: USB disconnect, device number 5 [ 328.181426][ T5919] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 328.338096][ T5832] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 328.348676][ T5919] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 328.363342][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.375992][ T5832] usb 4-1: USB disconnect, device number 45 [ 328.379313][ T5919] usb 6-1: config 0 descriptor?? [ 328.471061][ T5919] kaweth 6-1:0.0: Firmware present in device. [ 328.479352][ T5919] kaweth 6-1:0.0: Error reading configuration (-71), no net device created [ 328.502423][ T5919] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 328.528625][ T5919] usb 6-1: USB disconnect, device number 8 [ 328.593609][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880781b2c00: rx timeout, send abort [ 329.023705][ T5919] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 329.102135][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880781b2c00: abort rx timeout. Force session deactivation [ 329.199936][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.232515][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.269695][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.304320][ T5919] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.325058][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.355128][ T5919] usb 7-1: config 0 descriptor?? [ 329.413251][T11708] tipc: Started in network mode [ 329.418656][T11708] tipc: Node identity ac14140f, cluster identity 4711 [ 329.447296][T11708] tipc: Enabling of bearer rejected, failed to enable media [ 329.802949][ T3022] tipc: Left network mode [ 329.814377][ T5919] hid_parser_main: 24 callbacks suppressed [ 329.814408][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 329.835904][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 329.844295][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 329.870383][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 329.879879][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 329.887671][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 329.895922][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 329.904889][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 329.931369][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 329.940097][ T5919] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 330.002353][ T5919] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 330.115854][ T5919] usb 7-1: USB disconnect, device number 6 [ 330.145958][T11724] fido_id[11724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 331.401600][ T5884] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 331.551420][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 331.563145][ T5884] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 331.575354][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.583836][ T5884] usb 7-1: Product: syz [ 331.588353][ T5884] usb 7-1: Manufacturer: syz [ 331.593592][ T5884] usb 7-1: SerialNumber: syz [ 331.603955][ T5884] usb 7-1: config 0 descriptor?? [ 331.777269][T11745] tipc: Started in network mode [ 331.784972][T11745] tipc: Node identity ac14140f, cluster identity 4711 [ 331.811567][T11745] tipc: Enabling of bearer rejected, failed to enable media [ 331.830168][ T5884] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 332.092771][ T3022] tipc: Left network mode [ 332.371326][ T5919] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 332.502458][ T5832] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 332.543545][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 332.548714][ T30] audit: type=1326 audit(1768460940.032:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.5.2163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20e7f8f749 code=0x0 [ 332.583383][ T5919] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.612766][ T5919] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.638755][ T5919] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 332.661400][ T5919] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 332.675312][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.681638][ T5919] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.706913][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.718550][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.724162][ T5919] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.734121][ T5832] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.755514][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.761337][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.775312][ T5832] usb 1-1: config 0 descriptor?? [ 332.841360][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 333.008962][ T5919] usb 4-1: usb_control_msg returned -32 [ 333.017805][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.021892][ T5919] usbtmc 4-1:16.0: can't read capabilities [ 333.036724][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.043633][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.055241][ T5884] usb write operation failed. (-71) [ 333.062943][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.078612][ T29] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 333.097972][ T5884] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 333.119180][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.131838][ T5931] usb 4-1: USB disconnect, device number 46 [ 333.139020][ T5884] dvbdev: DVB: registering new adapter (Terratec H7) [ 333.156039][ T29] usb 6-1: config 0 descriptor?? [ 333.168373][ T5884] usb 7-1: media controller created [ 333.200176][ T5884] usb read operation failed. (-71) [ 333.221042][ T5884] usb write operation failed. (-71) [ 333.251936][ T5832] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 333.252559][ T5884] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 333.303910][ T5884] usb 7-1: USB disconnect, device number 7 [ 333.371606][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 333.399388][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 333.424608][ T29] usb 6-1: USB disconnect, device number 9 [ 333.493438][ T5931] usb 1-1: USB disconnect, device number 55 [ 334.491711][ T5931] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 334.666332][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 334.680984][ T5931] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 334.691429][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.710261][ T5931] usb 1-1: config 0 descriptor?? [ 336.060585][ T5931] letsketch 0003:6161:4D15.002D: Device info: ⪪㧫循 [ 336.359639][ T5931] letsketch 0003:6161:4D15.002D: Device info: 繋 [ 338.262923][ T5931] usb 1-1: Max retries (5) exceeded reading string descriptor 202 [ 338.273228][ T5931] letsketch 0003:6161:4D15.002D: probe with driver letsketch failed with error -71 [ 338.315113][ T5931] usb 1-1: USB disconnect, device number 56 [ 338.997825][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b08a000: rx timeout, send abort [ 339.311313][ T29] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 339.461316][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 339.469142][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.482842][ T29] usb 4-1: config 0 has no interfaces? [ 339.488792][ T29] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 339.505661][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.506752][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b08a000: abort rx timeout. Force session deactivation [ 339.540735][ T29] usb 4-1: config 0 descriptor?? [ 339.606645][T11857] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.2196'. [ 339.753733][ T5832] usb 4-1: USB disconnect, device number 47 [ 340.267895][T11814] Set syz1 is full, maxelem 65536 reached [ 340.647050][ T1993] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 340.763067][T11901] netlink: 'syz.6.2213': attribute type 39 has an invalid length. [ 341.048826][T11912] input: syz0 as /devices/virtual/input/input51 [ 341.111459][ T5832] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 341.273466][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 341.288490][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 341.299259][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 341.316619][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 341.332244][ T5832] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 341.341800][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.350109][ T5832] usb 4-1: Product: syz [ 341.358788][ T5832] usb 4-1: Manufacturer: syz [ 341.363548][ T5832] usb 4-1: SerialNumber: syz [ 341.371482][ T5832] usb 4-1: config 0 descriptor?? [ 341.513997][ T5931] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 341.584350][ T5832] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 341.691291][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 341.700115][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.713310][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.723655][ T5931] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 341.733039][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.744427][ T5931] usb 6-1: config 0 descriptor?? [ 341.753197][ T5931] hub 6-1:0.0: USB hub found [ 341.786944][ T37] usb 4-1: USB disconnect, device number 48 [ 341.956110][ T5931] hub 6-1:0.0: 1 port detected [ 342.376200][T11930] netlink: 'syz.3.2227': attribute type 39 has an invalid length. [ 342.576385][ T5931] hub 6-1:0.0: activate --> -90 [ 342.714356][T11940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.723443][T11940] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 342.743146][T11940] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 342.777961][ T5931] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 342.802784][ T5931] usb 6-1: USB disconnect, device number 10 [ 344.132634][T11969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.792370][T11996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.871412][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 347.091265][ T29] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 347.304645][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.331315][ T29] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 347.364018][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.383705][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.431337][ T29] usb 1-1: Product: syz [ 347.435589][ T29] usb 1-1: Manufacturer: syz [ 347.440834][ T29] usb 1-1: SerialNumber: syz [ 347.720690][T12055] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 348.563962][ T29] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 348.581682][ T5832] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 348.595513][ T29] cdc_ncm 1-1:1.0: bind() failure [ 348.612483][ T29] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 348.629725][ T29] cdc_ncm 1-1:1.1: bind() failure [ 348.654761][ T29] usb 1-1: USB disconnect, device number 57 [ 348.732982][ T5828] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 348.761486][ T5832] usb 7-1: Using ep0 maxpacket: 32 [ 348.773245][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.794996][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.825102][ T5832] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 348.841971][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.878309][ T5832] usb 7-1: config 0 descriptor?? [ 348.901300][ T5828] usb 6-1: Using ep0 maxpacket: 16 [ 348.909409][ T5828] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.925455][ T5828] usb 6-1: config 0 has no interfaces? [ 348.935444][ T5828] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 348.945914][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.954572][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 348.972133][ T5828] usb 6-1: config 0 descriptor?? [ 349.205107][ T37] usb 6-1: USB disconnect, device number 11 [ 349.322523][ T5832] savu 0003:1E7D:2D5A.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 349.579429][ T37] usb 7-1: USB disconnect, device number 8 [ 349.638938][ T8775] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 349.879917][T12126] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2309'. [ 350.809816][T12155] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 350.816628][T12155] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.829745][T12155] vhci_hcd vhci_hcd.0: Device attached [ 351.031276][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 351.101265][ T37] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 351.109052][ T5931] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 351.291545][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 351.297633][ T37] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 351.312722][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.330698][ T37] usb 4-1: config 0 has no interfaces? [ 351.340323][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.361586][ T37] usb 4-1: config 0 has no interfaces? [ 351.372701][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.385188][ T37] usb 4-1: config 0 has no interfaces? [ 351.392859][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.403501][ T37] usb 4-1: config 0 has no interfaces? [ 351.410577][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.421343][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 351.421346][ T37] usb 4-1: config 0 has no interfaces? [ 351.451771][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.462042][ T37] usb 4-1: config 0 has no interfaces? [ 351.468679][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.479606][ T37] usb 4-1: config 0 has no interfaces? [ 351.486524][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.512478][ T37] usb 4-1: config 0 has no interfaces? [ 351.523656][ T37] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 351.533236][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 351.549195][ T37] usb 4-1: Product: syz [ 351.553682][ T37] usb 4-1: Manufacturer: syz [ 351.558463][ T37] usb 4-1: SerialNumber: syz [ 351.566231][ T37] usb 4-1: config 0 descriptor?? [ 351.581355][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 351.593823][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 351.611772][ T29] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 351.622380][ T29] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 351.630643][ T29] usb 6-1: Product: syz [ 351.635395][ T29] usb 6-1: Manufacturer: syz [ 351.640423][ T29] usb 6-1: SerialNumber: syz [ 351.650784][ T29] usb 6-1: config 0 descriptor?? [ 351.657701][T12169] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 351.667460][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 351.673737][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 351.771476][ T5832] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 351.783936][ T37] usb 4-1: USB disconnect, device number 49 [ 351.794138][T12156] usb 39-1: recv xbuf, 0 [ 351.813310][ T8775] vhci_hcd vhci_hcd.3: stop threads [ 351.819585][ T8775] vhci_hcd vhci_hcd.3: release socket [ 351.828452][ T8775] vhci_hcd vhci_hcd.3: disconnect device [ 351.881423][ T5931] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 351.941379][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 351.948852][ T5832] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 351.961007][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 351.972194][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.982621][ T29] usb 6-1: USB disconnect, device number 12 [ 351.989969][ T5832] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.013069][ T5832] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 352.022443][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.241838][ T5832] usb 1-1: usb_control_msg returned -32 [ 352.248157][ T5832] usbtmc 1-1:16.0: can't read capabilities [ 353.129039][T12211] syzkaller1: entered promiscuous mode [ 353.134871][T12211] syzkaller1: entered allmulticast mode [ 353.280407][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 353.286770][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 353.292153][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 353.451349][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 353.458191][ T29] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 353.467193][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.478329][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.492478][ T29] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.501784][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.509787][ T29] usb 7-1: Product: syz [ 353.515743][ T29] usb 7-1: Manufacturer: syz [ 353.520376][ T29] usb 7-1: SerialNumber: syz [ 353.551766][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 353.557924][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 353.937507][ T29] usb 7-1: 0:2 : does not exist [ 354.073742][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 354.081035][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 354.092749][T12218] ceph: No mds server is up or the cluster is laggy [ 354.375573][T12234] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.475523][ T5931] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 354.488417][T12234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.549813][ T5919] usb 1-1: USB disconnect, device number 58 [ 354.626701][T12234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.655267][ T5931] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 354.669897][ T5931] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.684583][ T5931] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 354.731094][ T5931] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.746856][T12234] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.752882][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.774888][ T5931] usb 6-1: Product: syz [ 354.779125][ T5931] usb 6-1: Manufacturer: syz [ 354.784437][ T5931] usb 6-1: SerialNumber: syz [ 354.804291][ T29] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 354.880201][ T29] usb 7-1: USB disconnect, device number 9 [ 354.920446][ T1993] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.966266][ T1993] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.990397][ T1993] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.015798][ T1993] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.109365][ T5931] usb 6-1: USB disconnect, device number 13 [ 355.169615][ T9613] udevd[9613]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 355.186712][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.101260][ T5931] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 356.202927][ T5919] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 356.251525][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 356.262215][ T5931] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 356.271947][ T5931] usb 6-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 356.280189][ T5931] usb 6-1: Manufacturer: syz [ 356.291014][ T5931] usb 6-1: config 0 descriptor?? [ 356.371341][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 356.382771][ T5919] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 356.391103][ T5919] usb 7-1: config 0 has no interface number 0 [ 356.397770][ T5919] usb 7-1: config 0 interface 12 has no altsetting 0 [ 356.407981][ T5919] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 356.420760][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.429388][ T5919] usb 7-1: Product: syz [ 356.434244][ T5919] usb 7-1: Manufacturer: syz [ 356.438968][ T5919] usb 7-1: SerialNumber: syz [ 356.448628][ T5919] usb 7-1: config 0 descriptor?? [ 356.507858][ T5931] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 356.525010][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.536324][ T5931] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 356.544732][ T5931] usb 6-1: media controller created [ 356.568305][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.132746][ T5931] az6027: usb out operation failed. (-71) [ 357.146350][ T5931] stb0899_attach: Driver disabled by Kconfig [ 357.156052][ T5931] az6027: no front-end attached [ 357.156052][ T5931] [ 357.171867][ T5931] az6027: usb out operation failed. (-71) [ 357.188016][ T5931] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 357.208569][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52 [ 357.242374][ T5931] dvb-usb: schedule remote query interval to 400 msecs. [ 357.259842][ T5931] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 357.281364][ T5931] usb 6-1: USB disconnect, device number 14 [ 357.444616][ T5931] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 357.677966][ T5919] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 357.689398][ T5919] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 357.704178][ T5919] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 357.721850][ T5919] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 357.743235][ T5919] usb 7-1: USB disconnect, device number 10 [ 357.911456][ T37] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 358.021464][ T5828] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 358.064495][ T37] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.076303][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.087501][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 358.098334][ T37] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.111476][ T37] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.120552][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.132133][ T37] usb 4-1: config 0 descriptor?? [ 358.174883][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.186373][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.199447][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.212987][ T5828] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.226977][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.240631][ T5828] usb 6-1: config 0 descriptor?? [ 358.557756][ T37] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 358.690333][ T5828] plantronics 0003:047F:FFFF.0030: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 359.491438][ T5828] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 359.651876][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 359.674992][ T5828] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 359.687623][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.696726][ T5828] usb 1-1: Product: syz [ 359.701488][ T5828] usb 1-1: Manufacturer: syz [ 359.706472][ T5828] usb 1-1: SerialNumber: syz [ 359.717010][ T5828] usb 1-1: config 0 descriptor?? [ 359.740110][ T5828] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 359.873485][ T29] usb 6-1: USB disconnect, device number 15 [ 360.768918][ T37] usb 4-1: USB disconnect, device number 50 [ 360.796343][T12380] loop5: detected capacity change from 0 to 7 [ 360.834724][T12380] Dev loop5: unable to read RDB block 7 [ 360.854047][T12380] loop5: AHDI p1 [ 360.859200][T12380] loop5: partition table partially beyond EOD, truncated [ 361.000367][ T5828] gspca_ov534_9: reg_w failed -71 [ 361.321281][ T5828] gspca_ov534_9: Unknown sensor 0000 [ 361.321384][ T5828] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 361.339913][ T5828] usb 1-1: USB disconnect, device number 59 [ 362.411687][ T37] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 362.571243][ T37] usb 6-1: Using ep0 maxpacket: 8 [ 362.586018][ T37] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.600128][ T37] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.610871][ T37] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 362.623272][ T37] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 362.650417][ T37] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.663800][ T37] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.674035][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.751390][ T5919] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 362.908074][ T37] usb 6-1: usb_control_msg returned -32 [ 362.911745][T12434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.923469][ T5919] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.925564][T12434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.939555][ T37] usbtmc 6-1:16.0: can't read capabilities [ 362.964826][ T5919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 362.977379][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 362.993282][ T37] usb 6-1: USB disconnect, device number 16 [ 363.007275][ T5919] usb 1-1: Product: syz [ 363.012567][ T5919] usb 1-1: Manufacturer: syz [ 363.029508][ T5919] usb 1-1: SerialNumber: syz [ 363.246757][ T5919] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 363.741859][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2454'. [ 364.391388][ T5832] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 364.581262][ T5832] usb 7-1: Using ep0 maxpacket: 32 [ 364.597831][ T5832] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 364.609379][ T5832] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 364.621571][ T5832] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.637391][ T5832] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 364.657311][ T5832] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 364.667028][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.675467][ T5832] usb 7-1: Product: syz [ 364.680204][ T5832] usb 7-1: Manufacturer: syz [ 364.686314][ T5832] usb 7-1: SerialNumber: syz [ 364.715933][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 364.738815][ T5832] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input54 [ 364.931360][ T5832] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 364.940069][ T5832] (id 0x00) [ 365.031358][ T5832] rc_core: IR keymap rc-imon-pad not found [ 365.037481][ T5832] Registered IR keymap rc-empty [ 365.042992][ T5832] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 365.054140][ T5832] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 365.133591][ T5832] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 365.151694][ T5832] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input55 [ 365.170091][ T5832] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:11> initialized [ 365.324973][ T37] usb 7-1: USB disconnect, device number 11 [ 366.141326][ T37] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 366.302681][ T37] usb 7-1: Using ep0 maxpacket: 8 [ 366.309862][ T37] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.324566][ T37] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.341776][ T37] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 366.356464][ T37] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 366.366765][ T37] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.380081][ T37] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.390938][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.622822][ T37] usb 7-1: usb_control_msg returned -32 [ 366.628509][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.633302][ T37] usbtmc 7-1:16.0: can't read capabilities [ 366.651809][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.708003][ T37] usb 7-1: USB disconnect, device number 12 [ 367.692995][T12566] syzkaller1: entered promiscuous mode [ 367.698701][T12566] syzkaller1: entered allmulticast mode [ 367.711909][ T30] audit: type=1326 audit(1768460975.202:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12567 comm="syz.3.2479" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a50d8f749 code=0x0 [ 369.087845][T12604] netlink: 1335 bytes leftover after parsing attributes in process `syz.3.2496'. [ 369.221331][ T5832] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 369.304689][T12612] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 369.347074][T12612] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 369.391464][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 369.403466][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.434778][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.447821][ T5832] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 369.468401][ T5832] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 369.482289][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.495763][ T5832] usb 6-1: config 0 descriptor?? [ 369.627239][T12622] netlink: 'syz.6.2503': attribute type 9 has an invalid length. [ 369.635307][T12622] netlink: 'syz.6.2503': attribute type 11 has an invalid length. [ 369.645727][T12622] netlink: 'syz.6.2503': attribute type 12 has an invalid length. [ 369.654255][T12622] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.2503'. [ 369.667274][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2503'. [ 369.776804][T12628] Invalid ELF header magic: != ELF [ 369.784370][T12628] Invalid ELF header magic: != ELF [ 369.926791][ T5832] hid_parser_main: 20 callbacks suppressed [ 369.926817][ T5832] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 369.941349][ T5832] microsoft 0003:045E:07DA.0031: ignoring exceeding usage max [ 369.972577][ T5832] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0031/input/input56 [ 370.022197][ T5828] usb 1-1: USB disconnect, device number 60 [ 370.044852][ T5828] usblp0: removed [ 370.083245][ T5832] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 370.139746][ T5832] usb 6-1: USB disconnect, device number 17 [ 370.238516][T12644] syzkaller1: entered promiscuous mode [ 370.251360][T12644] syzkaller1: entered allmulticast mode [ 370.272495][T12642] fido_id[12642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 370.613352][ T5832] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 370.783100][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 370.806739][ T5832] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 370.826071][ T5832] usb 1-1: config 179 has no interface number 0 [ 370.841341][ T5832] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 370.862015][ T5832] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 370.897507][ T5832] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 370.929906][ T5832] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 370.936805][T12665] netlink: 'syz.5.2521': attribute type 1 has an invalid length. [ 370.953235][ T5832] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 370.969843][T12665] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2521'. [ 370.979479][ T5832] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 371.001298][ T5829] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 371.012116][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.040423][T12648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 371.176378][ T5829] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 371.187016][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.218544][ T5829] usb 7-1: config 0 descriptor?? [ 371.281599][ T5832] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 371.294033][ T5829] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 371.451471][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 371.459551][ T5832] usb 4-1: config 0 has an invalid interface number: 81 but max is 0 [ 371.478770][ T5829] gp8psk: usb in 128 operation failed. [ 371.491340][ T5832] usb 4-1: config 0 has no interface number 0 [ 371.506877][ T5832] usb 4-1: config 0 interface 81 has no altsetting 0 [ 371.535302][ T5832] usb 4-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=7b.45 [ 371.562155][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.570459][ T5832] usb 4-1: Product: syz [ 371.574981][ T5832] usb 4-1: Manufacturer: syz [ 371.579750][ T5832] usb 4-1: SerialNumber: syz [ 371.608472][ T5832] usb 4-1: config 0 descriptor?? [ 371.649987][ T5828] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input57 [ 371.673331][ T29] libceph: connect (1)[c::]:6789 error -101 [ 371.679914][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 371.715498][ T5897] libceph: connect (1)[b::]:6789 error -101 [ 371.722489][ T5829] gp8psk: usb in 146 operation failed. [ 371.750391][ T5829] gp8psk: failed to get FW version [ 371.762690][ T5897] libceph: mon0 (1)[b::]:6789 connect error [ 371.792443][ T5829] gp8psk: FPGA Version = 142 [ 371.798427][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 371.840721][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 371.989988][ T5829] gp8psk: usb in 138 operation failed. [ 372.011466][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.033494][ T5829] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 372.044258][ T5829] usb 7-1: media controller created [ 372.091098][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.113667][ T5897] libceph: connect (1)[b::]:6789 error -101 [ 372.124060][ T5897] libceph: mon0 (1)[b::]:6789 connect error [ 372.142431][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 372.149112][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 372.173058][ T5829] gp8psk_fe: Frontend attached [ 372.183095][ T5829] usb 7-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 372.195583][ T5829] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 372.287683][ T5832] mos7840 4-1:0.81: required endpoints missing [ 372.311816][ T5832] usb 4-1: USB disconnect, device number 51 [ 372.391626][ T5829] gp8psk: usb in 138 operation failed. [ 372.406486][T12677] ceph: No mds server is up or the cluster is laggy [ 372.413636][ T5829] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 372.424457][T12673] ceph: No mds server is up or the cluster is laggy [ 372.431391][ T5829] gp8psk: found Genpix USB device pID = 203 (hex) [ 372.475397][ T5829] usb 7-1: USB disconnect, device number 13 [ 372.751069][ T5829] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 373.453083][ T5829] usb 1-1: USB disconnect, device number 61 [ 373.453158][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 373.453211][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 373.883588][ T30] audit: type=1326 audit(1768460981.372:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12715 comm="syz.6.2541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f452eb8f749 code=0x0 [ 374.053489][T12723] kvm: Disabled LAPIC found during irq injection [ 374.171287][ T37] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 374.330682][ T37] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.341315][ T37] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.362512][ T37] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 374.373825][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.595772][ T37] usb 1-1: GET_CAPABILITIES returned 0 [ 374.606178][ T37] usbtmc 1-1:16.0: can't read capabilities [ 374.838636][T12751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2556'. [ 374.851018][T12751] infiniband: Added to hash: ib_dev=ffff888022b64000 (0)() ndev=ffff88804e426000 (23)(veth0_to_team) [ 375.093270][T12751] infiniband syz1: set active [ 375.098204][T12751] infiniband syz1: added veth0_to_team [ 375.160729][T12760] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 375.162379][T12751] RDS/IB: syz1: added [ 375.174330][ T37] usb 1-1: USB disconnect, device number 62 [ 375.199353][T12751] smc: adding ib device syz1 with port count 1 [ 375.206614][T12751] smc: ib device syz1 port 1 has no pnetid [ 376.691271][ T37] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 376.728157][ T5897] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 376.750472][ T5897] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 376.853391][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.883526][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.901258][ T37] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 376.921215][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.950249][ T37] usb 6-1: config 0 descriptor?? [ 377.380467][ T37] hkems 0003:2006:0118.0033: unknown main item tag 0x7 [ 377.416957][ T37] hkems 0003:2006:0118.0033: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.5-1/input0 [ 377.442742][ T37] hkems 0003:2006:0118.0033: no inputs found [ 377.449983][ T37] hkems 0003:2006:0118.0033: force feedback init failed [ 377.533336][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 377.539958][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 377.592585][ T37] libceph: connect (1)[c::]:6789 error -101 [ 377.601433][ T37] libceph: mon0 (1)[c::]:6789 connect error [ 377.807511][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 377.816286][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 377.882462][ T37] libceph: connect (1)[c::]:6789 error -101 [ 377.888722][ T37] libceph: mon0 (1)[c::]:6789 connect error [ 378.314105][T12824] ceph: No mds server is up or the cluster is laggy [ 378.314119][T12828] ceph: No mds server is up or the cluster is laggy [ 378.344755][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 378.353945][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 378.551531][ T37] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 378.705972][ T37] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 378.721251][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.729347][ T37] usb 1-1: Product: syz [ 378.734344][ T37] usb 1-1: Manufacturer: syz [ 378.738988][ T37] usb 1-1: SerialNumber: syz [ 378.746905][ T37] usb 1-1: config 0 descriptor?? [ 378.763908][ T37] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 378.777286][T12867] ªªªªªª: renamed from wg2 (while UP) [ 379.493075][ T5897] usb 6-1: USB disconnect, device number 18 [ 379.573434][T12879] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 379.819752][ T4207] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 379.972393][ T37] gspca_sunplus: reg_r err -71 [ 379.985552][ T37] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 380.003672][ T37] usb 1-1: USB disconnect, device number 63 [ 380.776881][T12930] input: syz1 as /devices/virtual/input/input58 [ 381.083477][T12941] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.147936][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020735c00: rx timeout, send abort [ 381.158398][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020735c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 381.871293][ T37] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 382.001271][ T5897] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 382.041269][ T37] usb 7-1: Using ep0 maxpacket: 32 [ 382.053077][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.065740][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.077090][ T37] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 382.087678][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.100347][ T37] usb 7-1: config 0 descriptor?? [ 382.156908][ T5897] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 382.166838][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.174966][ T5897] usb 6-1: Product: syz [ 382.179259][ T5897] usb 6-1: Manufacturer: syz [ 382.184075][ T5897] usb 6-1: SerialNumber: syz [ 382.197764][ T5897] usb 6-1: config 0 descriptor?? [ 382.614500][ T5897] usb 6-1: Firmware: major: 184, minor: 96, hardware type: UNKNOWN (37) [ 382.825739][ T5897] usb 6-1: Read permanent extended address e4:72:ce:b7:e7:ff:76:e1 from device [ 382.836480][ T5897] usb 6-1: atusb_probe: initialization failed, error = -524 [ 382.845087][ T5897] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 383.028457][ T5897] usb 6-1: USB disconnect, device number 19 [ 383.115708][ T5147] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 383.144427][T12980] netlink: 'syz.3.2644': attribute type 9 has an invalid length. [ 383.152539][T12980] netlink: 'syz.3.2644': attribute type 11 has an invalid length. [ 383.172772][T12980] netlink: 'syz.3.2644': attribute type 12 has an invalid length. [ 383.188575][T12980] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2644'. [ 383.198938][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 383.344428][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888062ad4000 (16)(syzkaller1) start [ 383.385916][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888062ad4000 (3)(syzkaller1) end [ 383.759389][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.767470][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.971923][T13006] kvm: user requested TSC rate below hardware speed [ 383.985372][T13006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 384.013408][T13008] netlink: 'syz.6.2657': attribute type 9 has an invalid length. [ 384.030166][T13008] netlink: 'syz.6.2657': attribute type 11 has an invalid length. [ 384.042034][T13008] netlink: 'syz.6.2657': attribute type 12 has an invalid length. [ 384.050473][T13008] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.2657'. [ 384.062268][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2657'. [ 384.192038][T13016] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.2661'. [ 384.372653][T13024] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2665'. [ 385.546504][T13066] Invalid ELF header magic: != ELF [ 385.959556][T13086] Invalid argument reading file caps for ./file0 [ 386.055966][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2689'. [ 386.067124][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2689'. [ 386.091556][ T5931] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 386.284085][ T5931] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 386.311800][ T5931] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 386.335415][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 386.345639][ T5931] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 386.358384][ T5931] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 386.372279][ T5931] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 386.389772][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 386.400170][ T5931] usb 4-1: Product: syz [ 386.404773][ T5931] usb 4-1: Manufacturer: syz [ 386.425693][ T5931] cdc_wdm 4-1:1.0: skipping garbage [ 386.431041][ T5931] cdc_wdm 4-1:1.0: skipping garbage [ 386.455892][ T5931] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 386.471543][ T5931] cdc_wdm 4-1:1.0: Unknown control protocol [ 386.837997][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 386.845444][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.852455][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.859024][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.865710][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.872471][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.879144][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.885534][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.892462][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.898894][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.905672][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.912177][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.918832][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.925177][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.931869][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.938283][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.945025][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.951441][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.958094][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.964420][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 386.971160][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 386.978889][ T5829] usb 4-1: USB disconnect, device number 52 [ 386.984978][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 387.157439][T13117] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 387.203628][ T37] usbhid 7-1:0.0: can't add hid device: -32 [ 387.209928][ T37] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 387.365761][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807727c000 (15)(syzkaller1) start [ 387.393557][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807727c000 (7)(syzkaller1) end [ 387.458096][T13124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.469342][T13124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.308393][T13142] capability: warning: `syz.6.2711' uses 32-bit capabilities (legacy support in use) [ 388.433481][T13145] input: syz0 as /devices/virtual/input/input59 [ 388.605346][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2713'. [ 388.901941][T13159] overlay: filesystem on ./bus not supported [ 389.676770][T13196] netlink: 'syz.3.2734': attribute type 10 has an invalid length. [ 389.686573][T13196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2734'. [ 389.730721][T13196] team0: Port device geneve0 added [ 389.948378][T13207] tls_set_device_offload_rx: netdev not found [ 390.719871][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888030af0000 (11)(erspan0) start [ 390.738558][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888030af0000 (9)(erspan0) end [ 390.762286][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888027320000 (11)(gretap0) start [ 390.783900][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888027320000 (4)(gretap0) end [ 390.896500][T13237] netlink: 'syz.3.2748': attribute type 9 has an invalid length. [ 390.905023][T13237] netlink: 'syz.3.2748': attribute type 11 has an invalid length. [ 390.915700][T13237] netlink: 'syz.3.2748': attribute type 12 has an invalid length. [ 390.926333][T13237] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2748'. [ 390.936040][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2748'. [ 391.371716][ T5931] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 391.535401][ T5931] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 391.561429][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.569494][ T5931] usb 1-1: Product: syz [ 391.581218][ T5931] usb 1-1: Manufacturer: syz [ 391.585895][ T5931] usb 1-1: SerialNumber: syz [ 391.591758][ T5897] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 391.612843][ T5931] hub 1-1:24.0: bad descriptor, ignoring hub [ 391.618911][ T5931] hub 1-1:24.0: probe with driver hub failed with error -5 [ 391.754975][ T5897] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 391.767447][ T5897] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 391.778340][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 391.790388][ T5897] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 391.803884][ T5897] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 391.819060][ T5931] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 391.824372][ T5897] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.836488][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.845164][ T5897] usb 6-1: Product: syz [ 391.849505][ T5897] usb 6-1: Manufacturer: syz [ 391.854277][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 391.857605][ T5931] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 391.878340][ T5897] cdc_wdm 6-1:1.0: skipping garbage [ 391.886239][ T5931] usb 1-1: media controller created [ 391.908641][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.917803][ T5897] cdc_wdm 6-1:1.0: skipping garbage [ 391.929046][ T5897] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 391.935557][ T5897] cdc_wdm 6-1:1.0: Unknown control protocol [ 391.999505][ T194] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880222f8000 (26)(syz_tun) start [ 392.026886][ T194] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880222f8000 (19)(syz_tun) end [ 392.105683][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88805abb4000 (12)(eth3) start [ 392.123505][ T5931] DVB: Unable to find symbol dib7000p_attach() [ 392.136543][ T194] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.143302][ T5931] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 392.169090][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88805abb4000 (4)(eth3) end [ 392.257755][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88804ef24000 (12)(eth2) start [ 392.281005][ T194] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.293158][ T5931] rc_core: IR keymap rc-dib0700-rc5 not found [ 392.299289][ T5931] Registered IR keymap rc-empty [ 392.310318][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88804ef24000 (4)(eth2) end [ 392.328970][ T5931] dvb-usb: could not initialize remote control. [ 392.335809][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 392.360772][ T194] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.360801][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 392.378104][ C1] wdm_int_callback: 6 callbacks suppressed [ 392.378127][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 392.386171][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888058b9c000 (7)(eth1) start [ 392.390594][ C1] wdm_int_callback: 6 callbacks suppressed [ 392.390612][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 392.391473][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 392.426197][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 392.433849][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 392.440614][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 392.446977][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 392.447555][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888058b9c000 (4)(eth1) end [ 392.453614][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 392.453881][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 392.483301][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 392.489925][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 392.496575][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 392.502904][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 392.509536][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 392.515849][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 392.522496][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 392.527639][ T5919] usb 6-1: USB disconnect, device number 20 [ 392.528600][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 392.586350][ T5931] usb 1-1: USB disconnect, device number 64 [ 392.605583][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f058000 (12)(eth0) start [ 392.610657][ T194] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.651237][ T3022] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f058000 (4)(eth0) end [ 392.703459][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 392.916847][ T194] bridge_slave_1: left allmulticast mode [ 392.931269][ T194] bridge_slave_1: left promiscuous mode [ 392.937127][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.957621][ T194] bridge_slave_0: left allmulticast mode [ 392.966810][ T194] bridge_slave_0: left promiscuous mode [ 392.973670][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.010904][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.023594][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.035766][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.048170][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.057687][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.152076][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807a1ee000 (13)(ip6gretap0) start [ 393.171690][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807a1ee000 (7)(ip6gretap0) end [ 393.290179][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f644000 (13)(erspan0) start [ 393.353690][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f644000 (5)(erspan0) end [ 393.386548][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f29c000 (7)(gretap0) start [ 393.422355][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f29c000 (5)(gretap0) end [ 393.447799][T13264] overlay: filesystem on ./bus not supported [ 393.486960][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ded8000 (12)(geneve1) start [ 393.521298][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ded8000 (7)(geneve1) end [ 393.543952][ T1306] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 393.546289][ T194] team0: Port device geneve0 removed [ 393.576265][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88805b0ac000 (12)(geneve0) start [ 393.605685][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88805b0ac000 (12)(geneve0) end [ 393.678687][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807a118000 (6)(bridge0) start [ 393.747570][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807a118000 (6)(bridge0) end [ 393.912671][T13280] netlink: 'syz.6.2774': attribute type 10 has an invalid length. [ 393.920682][T13280] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2774'. [ 393.958830][ T1306] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f128000 (44)(bond0) start [ 393.978453][ T1306] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f128000 (41)(bond0) end [ 393.980354][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.011084][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.022939][ T194] bond0 (unregistering): Released all slaves [ 394.072127][T13280] team0: Port device geneve0 added [ 394.985652][ T50] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 395.007365][T13256] chnl_net:caif_netlink_parms(): no params data found [ 395.121236][ T5147] Bluetooth: hci0: command tx timeout [ 395.312303][T13256] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.321553][T13256] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.328853][T13256] bridge_slave_0: entered allmulticast mode [ 395.366401][T13256] bridge_slave_0: entered promiscuous mode [ 395.380155][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.397066][T13256] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.406488][T13256] bridge_slave_1: entered allmulticast mode [ 395.414720][T13256] bridge_slave_1: entered promiscuous mode [ 395.489983][T13256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.514291][T13256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.695755][T13256] team0: Port device team_slave_0 added [ 395.728575][T13256] team0: Port device team_slave_1 added [ 395.901040][T13256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.920510][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.990174][T13256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.067457][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880598b8000 (11)(wlan1) start [ 396.116701][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880598b8000 (3)(wlan1) end [ 396.118767][T13256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.155776][T13355] tls_set_device_offload_rx: netdev not found [ 396.175181][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.225968][T13256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.351502][ T8775] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888059888000 (11)(wlan0) start [ 396.403867][ T8775] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888059888000 (3)(wlan0) end [ 396.578021][T13256] hsr_slave_0: entered promiscuous mode [ 396.614530][T13256] hsr_slave_1: entered promiscuous mode [ 396.632656][T13256] debugfs: 'hsr0' already exists in 'hsr' [ 396.638551][T13256] Cannot create hsr debugfs directory [ 397.016565][ T194] hsr_slave_0: left promiscuous mode [ 397.024931][ T194] hsr_slave_1: left promiscuous mode [ 397.032459][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.040066][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.048555][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.060043][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.078199][ T194] batman_adv: batadv0: Removing interface: virt_wifi0 [ 397.136981][ T194] veth1_macvtap: left promiscuous mode [ 397.151339][ T194] veth0_macvtap: left promiscuous mode [ 397.157163][ T194] veth1_vlan: left promiscuous mode [ 397.171425][ T194] veth0_vlan: left promiscuous mode [ 397.194026][ T5147] Bluetooth: hci0: command tx timeout [ 397.346858][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807d42c000 (13)(macsec0) start [ 397.391226][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807d42c000 (8)(macsec0) end [ 397.440664][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88803198c000 (7)(macvtap0) start [ 397.478552][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88803198c000 (5)(macvtap0) end [ 397.503252][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888024f9e000 (7)(veth0_macvtap) start [ 397.532277][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888024f9e000 (7)(veth0_macvtap) end [ 397.586663][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888025088000 (7)(veth1_macvtap) start [ 397.628299][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888025088000 (7)(veth1_macvtap) end [ 397.669961][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ec18000 (6)(ipvlan1) start [ 397.693919][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ec18000 (6)(ipvlan1) end [ 397.727386][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807d9d0000 (6)(ipvlan0) start [ 397.746710][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807d9d0000 (6)(ipvlan0) end [ 397.764547][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888028810000 (5)(macvlan1) start [ 397.786817][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888028810000 (5)(macvlan1) end [ 397.804818][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88805b6d6000 (5)(macvlan0) start [ 397.825074][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88805b6d6000 (5)(macvlan0) end [ 397.843904][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88805b60a000 (6)(vlan1) start [ 397.861709][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88805b60a000 (6)(vlan1) end [ 397.882181][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f3fe000 (6)(vlan0) start [ 397.903831][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f3fe000 (6)(vlan0) end [ 397.922205][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807946a000 (10)(veth0_vlan) start [ 397.956724][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807946a000 (10)(veth0_vlan) end [ 397.989686][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807946c000 (10)(veth1_vlan) start [ 398.057736][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807946c000 (8)(veth1_vlan) end [ 398.090518][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888079a12000 (7)(virt_wifi0) start [ 398.116737][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888079a12000 (5)(virt_wifi0) end [ 398.136122][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807e4cc000 (8)(veth0_virt_wifi) start [ 398.192459][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807e4cc000 (6)(veth0_virt_wifi) end [ 398.223954][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807e4ce000 (8)(veth1_virt_wifi) start [ 398.261746][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807e4ce000 (6)(veth1_virt_wifi) end [ 398.280032][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807e4ca000 (5)(hsr0) start [ 398.297911][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807e4ca000 (5)(hsr0) end [ 398.341927][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f202000 (12)(hsr_slave_1) start [ 398.371182][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f202000 (5)(hsr_slave_1) end [ 398.492384][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f200000 (13)(veth1_to_hsr) start [ 398.537123][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f200000 (8)(veth1_to_hsr) end [ 398.591910][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888028d96000 (12)(hsr_slave_0) start [ 398.617577][ T4207] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888028d96000 (5)(hsr_slave_0) end [ 398.692513][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807b8a8000 (13)(veth0_to_hsr) start [ 398.742020][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807b8a8000 (8)(veth0_to_hsr) end [ 398.791335][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888079bae000 (8)(batadv_slave_1) start [ 398.841283][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888079bae000 (8)(batadv_slave_1) end [ 398.891350][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ef64000 (8)(veth1_to_batadv) start [ 398.921223][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ef64000 (6)(veth1_to_batadv) end [ 398.961511][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880291c2000 (8)(batadv_slave_0) start [ 399.001299][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880291c2000 (7)(batadv_slave_0) end [ 399.060571][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880291c4000 (8)(veth0_to_batadv) start [ 399.094251][ T194] team0 (unregistering): Port device team_slave_1 removed [ 399.101468][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880291c4000 (8)(veth0_to_batadv) end [ 399.101878][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888079436000 (15)(team_slave_1) start [ 399.170166][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888079436000 (10)(team_slave_1) end [ 399.200506][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888079434000 (13)(veth1_to_team) start [ 399.227465][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888079434000 (8)(veth1_to_team) end [ 399.271359][ T5147] Bluetooth: hci0: command tx timeout [ 399.284389][ T194] team0 (unregistering): Port device team_slave_0 removed [ 399.301352][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807eaec000 (15)(team_slave_0) start [ 399.358206][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807eaec000 (10)(team_slave_0) end [ 399.406328][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807eaea000 (8)(veth0_to_team) start [ 399.425590][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807eaea000 (8)(veth0_to_team) end [ 399.458700][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888076e82000 (11)(bond_slave_1) start [ 399.494602][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888076e82000 (4)(bond_slave_1) end [ 399.538007][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888076e84000 (7)(veth1_to_bond) start [ 399.563881][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888076e84000 (5)(veth1_to_bond) end [ 399.605624][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ea18000 (4)(bond_slave_0) start [ 399.623782][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ea18000 (4)(bond_slave_0) end [ 399.652014][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ea1a000 (12)(veth0_to_bond) start [ 399.701425][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807ea1a000 (7)(veth0_to_bond) end [ 399.732864][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88802ea62000 (8)(bridge_slave_1) start [ 399.770188][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88802ea62000 (5)(bridge_slave_1) end [ 399.809849][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88802ea64000 (13)(veth1_to_bridge) start [ 399.853980][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88802ea64000 (8)(veth1_to_bridge) end [ 399.873406][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807bf52000 (12)(bridge_slave_0) start [ 399.911212][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807bf52000 (5)(bridge_slave_0) end [ 399.951623][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807bf54000 (8)(veth0_to_bridge) start [ 399.990377][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807bf54000 (6)(veth0_to_bridge) end [ 400.029590][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888031b9c000 (8)(veth1) start [ 400.076587][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888031b9c000 (8)(veth1) end [ 400.133654][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888031b9e000 (6)(veth0) start [ 400.171274][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888031b9e000 (6)(veth0) end [ 400.227210][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888076bb0000 (5)(batadv0) start [ 400.247148][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888076bb0000 (5)(batadv0) end [ 400.331611][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f116000 (5)(dummy0) start [ 400.381236][ T50] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807f116000 (5)(dummy0) end [ 400.573969][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888077128000 (43)(team0) start [ 400.602754][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888077128000 (9)(team0) end [ 400.747141][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807d288000 (15)(syzkaller1) start [ 400.767194][ T1993] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807d288000 (10)(syzkaller1) end [ 401.090004][ T194] IPVS: stop unused estimator thread 0... [ 401.153975][T13256] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 401.174391][T13256] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 401.188656][T13256] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 401.207354][T13256] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 401.352190][ T5147] Bluetooth: hci0: command tx timeout [ 401.435114][T13256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.467984][T13256] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.523983][T13256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.536918][T13256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.575382][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.583623][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.624744][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.632076][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.313663][T13256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.887643][T13256] veth0_vlan: entered promiscuous mode [ 402.933496][T13256] veth1_vlan: entered promiscuous mode [ 403.043150][T13256] veth0_macvtap: entered promiscuous mode [ 403.085613][T13256] veth1_macvtap: entered promiscuous mode [ 403.177988][T13256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.246405][T13256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.297639][ T194] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.337688][ T194] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.359472][ T194] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.412466][ T194] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.639155][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.653538][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.765968][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.778690][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.739546][ T64] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 404.991249][ T37] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 405.162954][ T37] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.182988][ T37] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 405.201503][ T37] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.211837][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.219972][ T37] usb 6-1: Product: syz [ 405.225766][ T37] usb 6-1: Manufacturer: syz [ 405.230519][ T37] usb 6-1: SerialNumber: syz [ 405.465746][T13525] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 406.297469][ T37] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 406.326876][ T37] cdc_ncm 6-1:1.0: bind() failure [ 406.342150][ T37] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 406.349238][ T37] cdc_ncm 6-1:1.1: bind() failure [ 406.362504][ T37] usb 6-1: USB disconnect, device number 21 [ 406.653161][T13578] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 406.659755][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.670811][T13578] vhci_hcd vhci_hcd.0: Device attached [ 406.761004][ T1306] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 406.901558][ T5884] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 407.873842][T13607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.907185][T13607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.791352][T13637] Bluetooth: MGMT ver 1.23 [ 408.841282][ T194] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880338a6000 (4)(erspan0) start [ 408.872376][ T194] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff8880338a6000 (4)(erspan0) end [ 408.917373][ T194] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888031134000 (4)(gretap0) start [ 408.939446][ T194] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff888031134000 (3)(gretap0) end [ 409.695883][T13580] vhci_hcd: connection reset by peer [ 409.712762][ T1306] vhci_hcd vhci_hcd.7: stop threads [ 409.719463][ T1306] vhci_hcd vhci_hcd.7: release socket [ 409.738057][ T1306] vhci_hcd vhci_hcd.7: disconnect device [ 409.863127][ T5931] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 409.953697][T13672] syzkaller1: entered promiscuous mode [ 409.959306][T13672] syzkaller1: entered allmulticast mode [ 410.021262][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 410.028602][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.056051][ T5931] usb 1-1: config 0 has no interfaces? [ 410.061793][ T5931] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 410.070909][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.094200][ T5931] usb 1-1: config 0 descriptor?? [ 410.385353][ T5931] usb 1-1: USB disconnect, device number 65 [ 410.942349][T13689] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 410.948948][T13689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.970799][T13689] vhci_hcd vhci_hcd.0: Device attached [ 410.993343][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88802b372000 (11)(erspan0) start [ 410.994395][T13695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.041913][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88802b372000 (4)(erspan0) end [ 411.111648][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807abc0000 (4)(gretap0) start [ 411.131084][T13695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.158716][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888022b64000 (13)(syz1) rdma_ndev=ffff88804e426000 (26)(veth0_to_team) cookie=ffff88807abc0000 (3)(gretap0) end [ 411.202690][ T5919] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 411.222274][T13691] usb 45-1: recv xbuf, 0 [ 411.224134][T13692] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 411.238489][T13692] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 411.246962][T13692] CPU: 1 UID: 0 PID: 13692 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT(full) [ 411.257684][T13692] Tainted: [L]=SOFTLOCKUP [ 411.262063][T13692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.272150][T13692] RIP: 0010:vhci_tx_loop+0x5a0/0x1b30 [ 411.277552][T13692] Code: 48 4d 8d 77 08 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9f 45 ab fa 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 81 45 ab fa 4d 8b 36 48 8b 44 24 [ 411.297232][T13692] RSP: 0018:ffffc90002ee7a40 EFLAGS: 00010206 [ 411.303340][T13692] RAX: 0000000000000003 RBX: ffff8880680bbb84 RCX: ffff88802a7c3c80 [ 411.311512][T13692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.319993][T13692] RBP: ffffc90002ee7e18 R08: 0000000000000dc0 R09: 00000000ffffffff [ 411.328316][T13692] R10: 0000000000000007 R11: ffffffff81ad6a70 R12: 0000000000000000 [ 411.336335][T13692] R13: dffffc0000000000 R14: 0000000000000018 R15: ffff8880680bbb00 [ 411.344353][T13692] FS: 0000000000000000(0000) GS:ffff888125aad000(0000) knlGS:0000000000000000 [ 411.353311][T13692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.359913][T13692] CR2: 0000555563e0a5c8 CR3: 0000000063860000 CR4: 00000000003526f0 [ 411.367922][T13692] Call Trace: [ 411.371251][T13692] [ 411.374203][T13692] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 411.380050][T13692] ? __pfx_vhci_tx_loop+0x10/0x10 [ 411.385168][T13692] ? __lock_acquire+0x6b6/0x2cf0 [ 411.390179][T13692] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 411.395852][T13692] ? do_raw_spin_lock+0x121/0x290 [ 411.400897][T13692] ? lock_acquire+0x107/0x340 [ 411.405597][T13692] ? __pfx_autoremove_wake_function+0x10/0x10 [ 411.411690][T13692] ? __kthread_parkme+0x7b/0x200 [ 411.416650][T13692] kthread+0x389/0x480 [ 411.420754][T13692] ? __pfx_vhci_tx_loop+0x10/0x10 [ 411.425817][T13692] ? __pfx_kthread+0x10/0x10 [ 411.430445][T13692] ret_from_fork+0x510/0xa50 [ 411.435056][T13692] ? __pfx_ret_from_fork+0x10/0x10 [ 411.440189][T13692] ? __switch_to+0xc9e/0x1480 [ 411.444913][T13692] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 411.449524][T13692] ret_from_fork_asm+0x1a/0x30 [ 411.454331][T13692] [ 411.457376][T13692] Modules linked in: [ 411.461701][T13692] ---[ end trace 0000000000000000 ]--- [ 411.551203][ T5919] usb 45-1: device descriptor read/64, error -71 [ 411.598120][T13692] RIP: 0010:vhci_tx_loop+0x5a0/0x1b30 [ 411.603885][T13692] Code: 48 4d 8d 77 08 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9f 45 ab fa 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 81 45 ab fa 4d 8b 36 48 8b 44 24 [ 411.623840][T13692] RSP: 0018:ffffc90002ee7a40 EFLAGS: 00010206 [ 411.629961][T13692] RAX: 0000000000000003 RBX: ffff8880680bbb84 RCX: ffff88802a7c3c80 [ 411.638210][T13692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.703841][T13692] RBP: ffffc90002ee7e18 R08: 0000000000000dc0 R09: 00000000ffffffff [ 411.715010][T13692] R10: 0000000000000007 R11: ffffffff81ad6a70 R12: 0000000000000000 [ 411.723204][T13692] R13: dffffc0000000000 R14: 0000000000000018 R15: ffff8880680bbb00 [ 411.759105][T13692] FS: 0000000000000000(0000) GS:ffff888125aad000(0000) knlGS:0000000000000000 [ 411.771572][T13692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.778225][T13692] CR2: 000055557f766808 CR3: 0000000020766000 CR4: 00000000003526f0 [ 411.797433][ T5919] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 411.807644][T13692] Kernel panic - not syncing: Fatal exception [ 411.814384][T13692] Kernel Offset: disabled [ 411.818721][T13692] Rebooting in 86400 seconds..