last executing test programs: 16.023409717s ago: executing program 0 (id=1028): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c, r5, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x3c}}, 0x4000) connect$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) sendmmsg$unix(r3, &(0x7f0000000080), 0x0, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x24040004) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 13.360235504s ago: executing program 0 (id=1037): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 13.076354367s ago: executing program 0 (id=1038): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x8, 0x14, 0x8010d, &(0x7f0000000980)}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 12.917600713s ago: executing program 0 (id=1040): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x1]) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x40000, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e65772064656661756c744174727573744b30303030343030303030303230330014e1727235eed28955c3a33e19c8ddeae192d14b5596602f"], 0x2d, 0xfffffffffffffff9) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r5, 0x0, 0x1d, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f0000002240)={0x2020}, 0x2020) 12.646074466s ago: executing program 4 (id=1043): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) 12.336965939s ago: executing program 4 (id=1047): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000002c0)=0xd) r6 = syz_open_dev$audion(&(0x7f0000000300), 0x2, 0xa0001) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f0000000340)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ptrace$setopts(0x4206, r3, 0x1b6, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = landlock_create_ruleset(&(0x7f00000001c0)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r8, 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r2, &(0x7f0000000200)) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0xfa2, 0x7, 0x800, 0x2, 0x8000, 0xffffffffffffffff}) 11.312780794s ago: executing program 4 (id=1049): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) close_range(r0, 0xffffffffffffffff, 0x0) 10.637791923s ago: executing program 4 (id=1051): io_uring_setup(0x2c49, &(0x7f0000003c40)={0x0, 0xaaf5, 0x100, 0x2}) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) close(0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') 9.759453912s ago: executing program 1 (id=1053): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.669177278s ago: executing program 3 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x8000, @mcast2}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrusage(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) 5.619986653s ago: executing program 3 (id=1062): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @cpuid={0x2, 0x18, {0x2, 0x3e}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0x10d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3e}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.545352507s ago: executing program 1 (id=1063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x8, 0x14, 0x8010d, &(0x7f0000000980)}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.421769492s ago: executing program 4 (id=1064): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000400)={{0x3a, @broadcast, 0x4e24, 0x1, 'lblc\x00', 0xb, 0x0, 0x1c}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x2, 0x8, 0x2, 0x53cc}}, 0x44) openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f045}) poll(&(0x7f0000000100)=[{r3, 0x1a0}], 0x1, 0x4) 4.357030829s ago: executing program 3 (id=1066): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310000000000905"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[], 0x0) 4.10096354s ago: executing program 1 (id=1067): epoll_create1(0x80000) syz_open_dev$loop(0x0, 0x2, 0x2001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) 2.985210689s ago: executing program 2 (id=1069): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2.73313219s ago: executing program 2 (id=1070): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 2.573230517s ago: executing program 2 (id=1071): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) 2.493588721s ago: executing program 1 (id=1072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000bb0300000000000000aaaabb86dd6d002000001811ff00000000000000000000000000000000ff0200000000000000000000000000014f194e2000189078"], 0x52) 2.417729584s ago: executing program 0 (id=1073): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe2$watch_queue(&(0x7f0000001100), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.340871987s ago: executing program 2 (id=1074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 1.241265615s ago: executing program 2 (id=1075): mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe2$watch_queue(&(0x7f0000001100), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.241059376s ago: executing program 3 (id=1076): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) 328.862686ms ago: executing program 0 (id=1077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x8, 0x14, 0x8010d, &(0x7f0000000980)}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 310.539067ms ago: executing program 1 (id=1078): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x903, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x1ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0xffff, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x10, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 249.208809ms ago: executing program 3 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 235.69553ms ago: executing program 2 (id=1080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb2, @loopback, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x29487000) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffdcf) 132.096854ms ago: executing program 3 (id=1081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r4}, 0x38) 870.88µs ago: executing program 1 (id=1082): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000180)=0xffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ae330aaaaaaa00000000000088a800008100000086dd601f106000442f00fc000000000000000000000000002000ff020ebd4f8a00000000000000000001242081000000000000000800000086dd0800000000000000080022eb00000000202a0000000000000400000800655a00"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 4 (id=1083): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) syz_fuse_handle_req(r0, &(0x7f00000043c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x401, {0x1, 0x1, 0x0, {0xffffffffffffffff, 0x2, 0x8, 0x0, 0x7, 0x200000000001, 0x1000, 0x0, 0x7fff, 0x8000, 0x0, 0x0, 0xee00, 0xb099, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000006500)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.785511][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.811877][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.838554][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.852847][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.864684][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.875603][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.890949][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.901254][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.912483][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.934200][ T4234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.973421][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.983984][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.006636][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.025517][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.043791][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.056127][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.068634][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.082997][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.101928][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.116209][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.147805][ T4234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.157903][ T4238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.176200][ T4238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.196288][ T4238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.236844][ T4238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.255139][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.264078][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.275400][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.284153][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.294758][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.336410][ T4234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.345242][ T4234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.347913][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.381943][ T4234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.390759][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.414339][ T4234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.437783][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.624621][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.656521][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.710202][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.773727][ T4348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 350.811015][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.867666][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.887479][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.887786][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.933633][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.999170][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.027551][ T4346] Bluetooth: hci0: command 0x0419 tx timeout [ 351.028972][ T699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.046635][ T4346] Bluetooth: hci3: command 0x0419 tx timeout [ 351.072489][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.073816][ T699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.107352][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.116935][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 351.123158][ T4303] Bluetooth: hci1: command 0x0419 tx timeout [ 351.153035][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.187344][ T4346] Bluetooth: hci4: command 0x0419 tx timeout [ 351.214131][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.276458][ T1111] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 351.291307][ T4357] process 'syz.0.7' launched '/dev/fd/3' with NULL argv: empty string added [ 351.506967][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 351.526308][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 351.604643][ T4372] device syzkaller0 entered promiscuous mode [ 351.646384][ T1111] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 351.672811][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.739754][ T1111] usb 3-1: config 0 descriptor?? [ 351.830910][ T4377] tipc: Started in network mode [ 351.865786][ T4377] tipc: Node identity 9a4b20239b9a, cluster identity 4711 [ 351.904672][ T4377] tipc: Enabled bearer , priority 0 [ 351.943425][ T4379] device syzkaller0 entered promiscuous mode [ 352.036363][ T1111] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 352.153064][ T4377] tipc: Resetting bearer [ 352.213350][ T1111] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 352.298956][ T1111] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 352.336184][ T4375] tipc: Resetting bearer [ 352.361009][ T4375] tipc: Disabling bearer [ 353.301655][ T4408] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 353.428475][ T4408] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 353.540713][ T4408] syz.3.21 (4408) used greatest stack depth: 20160 bytes left [ 353.667350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 354.156236][ T4295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 354.516462][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 354.553622][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 354.584869][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 354.600595][ T4346] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 354.812188][ T4295] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 354.834496][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.854477][ T4295] usb 4-1: Product: syz [ 354.864718][ T4295] usb 4-1: Manufacturer: syz [ 354.870785][ T4346] usb 2-1: Using ep0 maxpacket: 32 [ 354.885152][ T4295] usb 4-1: SerialNumber: syz [ 354.922487][ T4295] usb 4-1: config 0 descriptor?? [ 355.000819][ T4346] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 355.027862][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.147400][ T4346] usb 2-1: config 0 descriptor?? [ 355.194472][ T4295] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 355.406367][ T4346] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 355.431536][ T4415] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3944. macoff=96 [ 355.455317][ T4346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 355.508498][ T4346] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 355.525201][ T4346] usb 2-1: media controller created [ 355.582913][ T4346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.626361][ T4295] usb 4-1: USB disconnect, device number 2 [ 355.710435][ T4346] DVB: Unable to find symbol dib7000p_attach() [ 355.723781][ T4346] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 355.826682][ T4346] rc_core: IR keymap rc-dib0700-rc5 not found [ 355.833669][ T4346] Registered IR keymap rc-empty [ 355.846415][ T4346] dvb-usb: could not initialize remote control. [ 355.873555][ T4346] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 355.914457][ T4346] usb 2-1: USB disconnect, device number 2 [ 356.028808][ T4378] syz.4.12 (4378): drop_caches: 1 [ 356.044964][ T4346] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 356.659982][ T4455] tipc: Started in network mode [ 356.665350][ T4455] tipc: Node identity f6f14b370bdd, cluster identity 4711 [ 356.682283][ T4455] tipc: Enabled bearer , priority 0 [ 356.700602][ T4455] device syzkaller0 entered promiscuous mode [ 356.744675][ T4455] tipc: Resetting bearer [ 356.755644][ T4454] tipc: Resetting bearer [ 356.794568][ T4454] tipc: Disabling bearer [ 357.533963][ T4528] tipc: Enabling of bearer rejected, failed to enable media [ 357.682291][ T4531] device syzkaller0 entered promiscuous mode [ 357.727275][ T4521] device syzkaller0 entered promiscuous mode [ 357.746477][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 358.366299][ T4273] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 358.560118][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 358.662532][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 358.718477][ T4295] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 358.736296][ T4273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 358.767482][ T4273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 358.834812][ T4273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 358.867565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 358.909886][ T4552] tipc: Started in network mode [ 358.931362][ T4552] tipc: Node identity 126c4e0c39c, cluster identity 4711 [ 358.977174][ T4552] tipc: Enabled bearer , priority 0 [ 359.006255][ T4295] usb 1-1: Using ep0 maxpacket: 16 [ 359.016997][ T4553] device syzkaller0 entered promiscuous mode [ 359.047320][ T4273] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 359.067129][ T4552] tipc: Resetting bearer [ 359.078605][ T4273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.095006][ T4555] tipc: Enabled bearer , priority 0 [ 359.101918][ T4273] usb 5-1: Product: syz [ 359.111438][ T4273] usb 5-1: Manufacturer: syz [ 359.119103][ T4273] usb 5-1: SerialNumber: syz [ 359.125943][ T4551] tipc: Resetting bearer [ 359.136434][ T4295] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 359.141785][ T4273] usb 5-1: config 0 descriptor?? [ 359.155725][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.173177][ T4551] tipc: Disabling bearer [ 359.195927][ T4295] usb 1-1: config 0 descriptor?? [ 359.203585][ T4555] device syzkaller0 entered promiscuous mode [ 359.223538][ T4555] tipc: Resetting bearer [ 359.235902][ T4554] tipc: Resetting bearer [ 359.258408][ T4295] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 359.262491][ T4554] tipc: Disabling bearer [ 359.408284][ T4273] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 359.592544][ T4569] device syzkaller0 entered promiscuous mode [ 359.647771][ T4216] usb 5-1: USB disconnect, device number 2 [ 359.683071][ T4571] tipc: Enabled bearer , priority 0 [ 359.694284][ T4571] device syzkaller0 entered promiscuous mode [ 359.736030][ T4571] tipc: Resetting bearer [ 359.745558][ T4570] tipc: Resetting bearer [ 359.792338][ T4570] tipc: Disabling bearer [ 360.229103][ T4588] tipc: Started in network mode [ 360.234059][ T4588] tipc: Node identity 22f38ca75248, cluster identity 4711 [ 360.247551][ T4588] tipc: Enabled bearer , priority 0 [ 360.262960][ T4588] device syzkaller0 entered promiscuous mode [ 360.294852][ T4588] tipc: Resetting bearer [ 360.315370][ T4587] tipc: Resetting bearer [ 360.333525][ T4587] tipc: Disabling bearer [ 361.004927][ T4603] device syzkaller0 entered promiscuous mode [ 361.017642][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 361.114382][ T4606] tipc: Enabled bearer , priority 0 [ 361.127770][ T4606] device syzkaller0 entered promiscuous mode [ 361.169149][ T4606] tipc: Resetting bearer [ 361.210994][ T4605] tipc: Resetting bearer [ 361.255772][ T4605] tipc: Disabling bearer [ 361.477760][ T4610] tipc: Enabled bearer , priority 0 [ 361.528205][ T4610] device syzkaller0 entered promiscuous mode [ 361.658044][ T4610] tipc: Resetting bearer [ 361.693946][ T4609] tipc: Resetting bearer [ 361.745412][ T4609] tipc: Disabling bearer [ 361.789227][ T4617] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 361.838806][ T4617] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 361.882956][ T4617] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 361.918739][ T4617] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 361.967077][ T4617] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 361.978872][ T4623] tipc: Enabled bearer , priority 0 [ 361.988767][ T4623] device syzkaller0 entered promiscuous mode [ 361.995464][ T4617] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 362.023069][ T4623] tipc: Resetting bearer [ 362.034190][ T4622] tipc: Resetting bearer [ 362.036373][ T4346] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 362.053940][ T4617] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 362.083905][ T4617] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 362.112677][ T4617] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 362.124012][ T4617] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 362.127815][ T4622] tipc: Disabling bearer [ 362.442084][ T4346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 362.454738][ T4346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.479856][ T4346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 362.497092][ T4295] gspca_sonixj: reg_w1 err -71 [ 362.507940][ T4295] sonixj: probe of 1-1:0.0 failed with error -71 [ 362.521730][ T4295] usb 1-1: USB disconnect, device number 2 [ 362.588307][ T4638] device syzkaller0 entered promiscuous mode [ 362.646381][ T4346] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 362.660335][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.664984][ T4640] tipc: Enabled bearer , priority 0 [ 362.668987][ T4346] usb 4-1: Product: syz [ 362.680187][ T4346] usb 4-1: Manufacturer: syz [ 362.683798][ T4640] device syzkaller0 entered promiscuous mode [ 362.685106][ T4346] usb 4-1: SerialNumber: syz [ 362.714950][ T4346] usb 4-1: config 0 descriptor?? [ 362.732669][ T4640] tipc: Resetting bearer [ 362.748299][ T4639] tipc: Resetting bearer [ 362.771820][ T4639] tipc: Disabling bearer [ 362.872183][ T4646] tipc: Enabled bearer , priority 0 [ 362.880062][ T4646] device syzkaller0 entered promiscuous mode [ 362.904016][ T4646] tipc: Resetting bearer [ 362.912490][ T4645] tipc: Resetting bearer [ 362.930426][ T4645] tipc: Disabling bearer [ 363.007672][ T4346] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 363.202465][ T4656] tipc: Enabled bearer , priority 0 [ 363.231418][ T4656] device syzkaller0 entered promiscuous mode [ 363.258392][ T4346] usb 4-1: USB disconnect, device number 3 [ 363.398213][ T4656] tipc: Resetting bearer [ 363.452797][ T4655] tipc: Resetting bearer [ 363.493622][ T4655] tipc: Disabling bearer [ 363.576725][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 363.998664][ T4676] device syzkaller0 entered promiscuous mode [ 364.157318][ T4681] tipc: Enabled bearer , priority 0 [ 364.164759][ T4682] device syzkaller0 entered promiscuous mode [ 364.269149][ T4680] tipc: Resetting bearer [ 364.308717][ T4679] tipc: Resetting bearer [ 364.347307][ T4679] tipc: Disabling bearer [ 364.362694][ T4684] tipc: Enabled bearer , priority 0 [ 364.386571][ T4687] device syzkaller0 entered promiscuous mode [ 364.489730][ T4684] tipc: Resetting bearer [ 364.518363][ T4683] tipc: Resetting bearer [ 364.543824][ T4683] tipc: Disabling bearer [ 364.555809][ T4339] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 364.802252][ T4698] tipc: Enabled bearer , priority 0 [ 364.816136][ T4339] usb 4-1: Using ep0 maxpacket: 16 [ 364.830580][ T4698] device syzkaller0 entered promiscuous mode [ 364.844539][ T4698] Zero length message leads to an empty skb [ 364.869595][ T4698] tipc: Resetting bearer [ 364.891393][ T4697] tipc: Resetting bearer [ 364.913846][ T4697] tipc: Disabling bearer [ 364.946571][ T4339] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 364.961213][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.983417][ T4339] usb 4-1: config 0 descriptor?? [ 365.072114][ T4339] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 365.182363][ T4295] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 365.308148][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 365.367088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 365.494356][ T4720] device syzkaller0 entered promiscuous mode [ 365.546359][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 365.570077][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 365.585498][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 365.612121][ T4722] tipc: Started in network mode [ 365.623505][ T4722] tipc: Node identity ba304e79ce75, cluster identity 4711 [ 365.632311][ T4722] tipc: Enabled bearer , priority 0 [ 365.654763][ T4722] device syzkaller0 entered promiscuous mode [ 365.722868][ T4722] tipc: Resetting bearer [ 365.752608][ T4724] tipc: Enabled bearer , priority 0 [ 365.759545][ T4295] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 365.769047][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.770088][ T4721] tipc: Resetting bearer [ 365.777762][ T4295] usb 2-1: Product: syz [ 365.787372][ T4295] usb 2-1: Manufacturer: syz [ 365.792031][ T4295] usb 2-1: SerialNumber: syz [ 365.800338][ T4295] usb 2-1: config 0 descriptor?? [ 365.807571][ T4721] tipc: Disabling bearer [ 365.816433][ T4724] device syzkaller0 entered promiscuous mode [ 365.846423][ T4724] tipc: Resetting bearer [ 365.853988][ T4723] tipc: Resetting bearer [ 365.877669][ T4723] tipc: Disabling bearer [ 366.057682][ T4295] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 366.215204][ T4739] tipc: Enabled bearer , priority 0 [ 366.233536][ T4739] device syzkaller0 entered promiscuous mode [ 366.277026][ T4216] usb 2-1: USB disconnect, device number 3 [ 366.292086][ T4739] tipc: Resetting bearer [ 366.347800][ T4738] tipc: Resetting bearer [ 366.379167][ T4738] tipc: Disabling bearer [ 367.094797][ T4753] device syzkaller0 entered promiscuous mode [ 367.647488][ T4763] tipc: Enabled bearer , priority 0 [ 367.665016][ T4763] device syzkaller0 entered promiscuous mode [ 367.674588][ T4765] tipc: Enabled bearer , priority 0 [ 367.688198][ T4765] device syzkaller0 entered promiscuous mode [ 367.715502][ T4765] tipc: Resetting bearer [ 367.743572][ T4763] tipc: Resetting bearer [ 367.765068][ T4764] tipc: Resetting bearer [ 367.793683][ T4764] tipc: Disabling bearer [ 367.805623][ T4762] tipc: Resetting bearer [ 367.823208][ T4762] tipc: Disabling bearer [ 368.066268][ T4339] gspca_sonixj: reg_w err -71 [ 368.072901][ T4339] sonixj: probe of 4-1:0.0 failed with error -71 [ 368.115870][ T4339] usb 4-1: USB disconnect, device number 4 [ 368.149173][ T4776] tipc: Enabled bearer , priority 0 [ 368.218592][ T4782] device syzkaller0 entered promiscuous mode [ 368.237538][ T4778] create_pit_timer: 3 callbacks suppressed [ 368.237549][ T4778] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 368.269795][ T4776] tipc: Resetting bearer [ 368.285071][ T4775] tipc: Resetting bearer [ 368.330371][ T4775] tipc: Disabling bearer [ 368.449884][ T4790] device syzkaller0 entered promiscuous mode [ 368.693072][ T4798] tipc: Enabled bearer , priority 0 [ 368.706276][ T4310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 368.713943][ T4798] device syzkaller0 entered promiscuous mode [ 368.777703][ T4798] tipc: Resetting bearer [ 368.803725][ T4797] tipc: Resetting bearer [ 368.841004][ T4797] tipc: Disabling bearer [ 369.107473][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 369.126683][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 369.183720][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 369.310697][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 369.408127][ T4806] tipc: Enabled bearer , priority 0 [ 369.413600][ T4806] device syzkaller0 entered promiscuous mode [ 369.443696][ T4806] tipc: Resetting bearer [ 369.483773][ T4805] tipc: Resetting bearer [ 369.526564][ T4310] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 369.526597][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.526618][ T4310] usb 1-1: Product: syz [ 369.526634][ T4310] usb 1-1: Manufacturer: syz [ 369.526650][ T4310] usb 1-1: SerialNumber: syz [ 369.533115][ T4310] usb 1-1: config 0 descriptor?? [ 369.541448][ T4805] tipc: Disabling bearer [ 369.788135][ T4310] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 370.017115][ T4295] usb 1-1: USB disconnect, device number 3 [ 370.778932][ T4824] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 371.164557][ T4829] tipc: Enabled bearer , priority 0 [ 371.206992][ T4829] device syzkaller0 entered promiscuous mode [ 371.256772][ T4829] tipc: Resetting bearer [ 371.315810][ T4828] tipc: Resetting bearer [ 371.353430][ T4828] tipc: Disabling bearer [ 371.467499][ T4833] device syzkaller0 entered promiscuous mode [ 371.639735][ T4836] tipc: Enabled bearer , priority 0 [ 371.693022][ T4836] device syzkaller0 entered promiscuous mode [ 371.744908][ T4836] tipc: Resetting bearer [ 371.759375][ T4835] tipc: Resetting bearer [ 371.786885][ T4835] tipc: Disabling bearer [ 371.942384][ T4851] tipc: Enabled bearer , priority 0 [ 371.964259][ T4851] device syzkaller0 entered promiscuous mode [ 372.005063][ T4851] tipc: Resetting bearer [ 372.024914][ T4850] tipc: Resetting bearer [ 372.044311][ T4850] tipc: Disabling bearer [ 372.514128][ T4857] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 372.782497][ T4866] tipc: Enabled bearer , priority 0 [ 372.791470][ T4866] device syzkaller0 entered promiscuous mode [ 372.840389][ T4866] tipc: Resetting bearer [ 372.855939][ T4864] tipc: Resetting bearer [ 372.866317][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 372.892435][ T4864] tipc: Disabling bearer [ 373.202626][ T26] audit: type=1326 audit(1764292588.019:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff233749 code=0x7ffc0000 [ 373.235897][ T26] audit: type=1326 audit(1764292588.029:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f8dff233749 code=0x7ffc0000 [ 373.236458][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 373.270158][ T26] audit: type=1326 audit(1764292588.029:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff233749 code=0x7ffc0000 [ 373.373561][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.388075][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 373.483640][ T4878] device syzkaller0 entered promiscuous mode [ 373.556248][ T21] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 373.565458][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.573944][ T21] usb 1-1: Product: syz [ 373.578226][ T21] usb 1-1: Manufacturer: syz [ 373.582873][ T21] usb 1-1: SerialNumber: syz [ 373.589542][ T21] usb 1-1: config 0 descriptor?? [ 373.720171][ T4880] tipc: Enabled bearer , priority 0 [ 373.734464][ T4880] device syzkaller0 entered promiscuous mode [ 373.768938][ T4880] tipc: Resetting bearer [ 373.779953][ T4879] tipc: Resetting bearer [ 373.794875][ T4879] tipc: Disabling bearer [ 373.874603][ T21] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 373.904839][ T4889] tipc: Enabled bearer , priority 0 [ 373.925569][ T4889] device syzkaller0 entered promiscuous mode [ 373.950350][ T4889] tipc: Resetting bearer [ 373.961440][ T4888] tipc: Resetting bearer [ 373.983745][ T4888] tipc: Disabling bearer [ 374.101113][ T4897] tipc: Enabled bearer , priority 0 [ 374.111305][ T4897] device syzkaller0 entered promiscuous mode [ 374.122850][ T21] usb 1-1: USB disconnect, device number 4 [ 374.141247][ T4897] tipc: Resetting bearer [ 374.165998][ T4896] tipc: Resetting bearer [ 374.189502][ T4896] tipc: Disabling bearer [ 374.421746][ T4907] device syzkaller0 entered promiscuous mode [ 374.778698][ T4918] tipc: Enabled bearer , priority 0 [ 374.789429][ T4918] device syzkaller0 entered promiscuous mode [ 374.811976][ T4918] tipc: Resetting bearer [ 374.823319][ T4917] tipc: Resetting bearer [ 374.844801][ T4917] tipc: Disabling bearer [ 375.288012][ T4934] tipc: Enabled bearer , priority 0 [ 375.306719][ T4934] device syzkaller0 entered promiscuous mode [ 375.377739][ T4934] tipc: Resetting bearer [ 375.402937][ T4933] tipc: Resetting bearer [ 375.446364][ T4933] tipc: Disabling bearer [ 375.678499][ T4940] tipc: Enabled bearer , priority 0 [ 375.751592][ T4944] device syzkaller0 entered promiscuous mode [ 375.903162][ T4939] tipc: Resetting bearer [ 375.937493][ T4939] tipc: Disabling bearer [ 376.001186][ T4947] device syzkaller0 entered promiscuous mode [ 376.229997][ T4958] tipc: Enabled bearer , priority 0 [ 376.240455][ T4958] device syzkaller0 entered promiscuous mode [ 376.271096][ T4958] tipc: Resetting bearer [ 376.282144][ T4957] tipc: Resetting bearer [ 376.299054][ T4957] tipc: Disabling bearer [ 376.376167][ T4310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 376.636227][ T4310] usb 2-1: Using ep0 maxpacket: 16 [ 376.762426][ T4310] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 376.783898][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.804595][ T4310] usb 2-1: config 0 descriptor?? [ 376.827831][ T4975] tipc: Enabled bearer , priority 0 [ 376.835602][ T4975] device syzkaller0 entered promiscuous mode [ 376.854038][ T4310] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 376.893735][ T4975] tipc: Resetting bearer [ 376.916971][ T4973] tipc: Resetting bearer [ 376.938399][ T4973] tipc: Disabling bearer [ 377.043159][ T4982] tipc: Enabled bearer , priority 0 [ 377.050608][ T4982] device syzkaller0 entered promiscuous mode [ 377.065764][ T4981] tipc: Resetting bearer [ 377.090408][ T4981] tipc: Disabling bearer [ 377.216219][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 377.267419][ T4986] device syzkaller0 entered promiscuous mode [ 377.393683][ T4988] tipc: Enabled bearer , priority 0 [ 377.401175][ T4988] device syzkaller0 entered promiscuous mode [ 377.425530][ T4988] tipc: Resetting bearer [ 377.434217][ T4987] tipc: Resetting bearer [ 377.448030][ T4987] tipc: Disabling bearer [ 377.456241][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 377.576391][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 377.749524][ T21] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 377.763326][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.779325][ T21] usb 1-1: Product: syz [ 377.783787][ T21] usb 1-1: Manufacturer: syz [ 377.795110][ T21] usb 1-1: SerialNumber: syz [ 377.832139][ T21] usb 1-1: config 0 descriptor?? [ 377.879952][ T21] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 377.899925][ T21] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 378.506258][ T21] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 378.551283][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.558323][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.808952][ T5012] netlink: 156 bytes leftover after parsing attributes in process `syz.4.208'. [ 378.824245][ T5010] tipc: Enabled bearer , priority 0 [ 378.844102][ T5010] device syzkaller0 entered promiscuous mode [ 378.874472][ T5009] tipc: Resetting bearer [ 378.899092][ T5009] tipc: Disabling bearer [ 378.997205][ T5016] tipc: Enabled bearer , priority 0 [ 379.004714][ T5016] device syzkaller0 entered promiscuous mode [ 379.016323][ T21] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 379.025717][ T5016] tipc: Resetting bearer [ 379.031951][ T21] em28xx 1-1:0.0: board has no eeprom [ 379.041867][ T5015] tipc: Resetting bearer [ 379.065734][ T5015] tipc: Disabling bearer [ 379.080466][ T5018] device syzkaller0 entered promiscuous mode [ 379.152034][ T5020] tipc: Enabled bearer , priority 0 [ 379.160454][ T5020] device syzkaller0 entered promiscuous mode [ 379.173747][ T5020] tipc: Resetting bearer [ 379.190052][ T5019] tipc: Resetting bearer [ 379.205209][ T5019] tipc: Disabling bearer [ 379.430801][ T21] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 379.458614][ T21] em28xx 1-1:0.0: dvb set to bulk mode. [ 379.495193][ T4216] em28xx 1-1:0.0: Binding DVB extension [ 379.512197][ T21] usb 1-1: USB disconnect, device number 5 [ 379.541548][ T21] em28xx 1-1:0.0: Disconnecting em28xx [ 379.585741][ T4216] em28xx 1-1:0.0: Registering input extension [ 379.598792][ T21] em28xx 1-1:0.0: Closing input extension [ 379.656310][ T4310] gspca_sonixj: reg_w1 err -71 [ 379.661602][ T4310] sonixj: probe of 2-1:0.0 failed with error -71 [ 379.663071][ T21] em28xx 1-1:0.0: Freeing device [ 379.771079][ T4310] usb 2-1: USB disconnect, device number 4 [ 380.325771][ T5058] tipc: Enabled bearer , priority 0 [ 380.335861][ T5058] device syzkaller0 entered promiscuous mode [ 380.375091][ T5058] tipc: Resetting bearer [ 380.397334][ T5057] tipc: Resetting bearer [ 380.419277][ T5057] tipc: Disabling bearer [ 380.428729][ T5060] device syzkaller0 entered promiscuous mode [ 380.516176][ T4339] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 380.573585][ T5062] tipc: Enabled bearer , priority 0 [ 380.590539][ T5062] device syzkaller0 entered promiscuous mode [ 380.665486][ T5062] tipc: Resetting bearer [ 380.687050][ T5061] tipc: Resetting bearer [ 380.707695][ T5061] tipc: Disabling bearer [ 380.907214][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 380.946217][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 381.003030][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 381.196579][ T4339] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 381.222153][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.248703][ T4339] usb 2-1: Product: syz [ 381.259773][ T4339] usb 2-1: Manufacturer: syz [ 381.264738][ T4339] usb 2-1: SerialNumber: syz [ 381.296940][ T4339] usb 2-1: config 0 descriptor?? [ 381.601170][ T4339] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 381.641897][ T5094] device syzkaller0 entered promiscuous mode [ 381.706295][ T4216] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 381.729239][ T5098] tipc: Enabled bearer , priority 0 [ 381.741986][ T5098] device syzkaller0 entered promiscuous mode [ 381.776440][ T5098] tipc: Resetting bearer [ 381.784351][ T5097] tipc: Resetting bearer [ 381.815753][ T5097] tipc: Disabling bearer [ 381.833854][ T5100] tipc: Enabled bearer , priority 0 [ 381.842648][ T5100] device syzkaller0 entered promiscuous mode [ 381.848476][ T4310] usb 2-1: USB disconnect, device number 5 [ 381.867477][ T5100] tipc: Resetting bearer [ 381.879455][ T5099] tipc: Resetting bearer [ 381.889158][ T5099] tipc: Disabling bearer [ 381.956342][ T4216] usb 1-1: Using ep0 maxpacket: 16 [ 382.076396][ T4216] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 382.097668][ T4216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.124070][ T4216] usb 1-1: config 0 descriptor?? [ 382.182081][ T4216] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 382.764615][ T5131] device syzkaller0 entered promiscuous mode [ 382.885346][ T5133] tipc: Enabled bearer , priority 0 [ 382.934374][ T5133] device syzkaller0 entered promiscuous mode [ 383.024243][ T5136] tipc: Enabled bearer , priority 0 [ 383.039347][ T5136] device syzkaller0 entered promiscuous mode [ 383.072591][ T5136] tipc: Resetting bearer [ 383.081277][ T5134] tipc: Resetting bearer [ 383.100985][ T5134] tipc: Disabling bearer [ 383.123460][ T5135] tipc: Resetting bearer [ 383.144245][ T5132] tipc: Resetting bearer [ 383.165251][ T5132] tipc: Disabling bearer [ 384.206183][ T4295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 384.440138][ T5165] device syzkaller0 entered promiscuous mode [ 384.560518][ T5167] tipc: Enabled bearer , priority 0 [ 384.568508][ T5167] device syzkaller0 entered promiscuous mode [ 384.594178][ T5167] tipc: Resetting bearer [ 384.602704][ T5166] tipc: Resetting bearer [ 384.616519][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 384.616910][ T5166] tipc: Disabling bearer [ 384.627725][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 384.646115][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 384.653815][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 384.853291][ T4295] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 384.863604][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.880141][ T4295] usb 5-1: Product: syz [ 384.884363][ T4295] usb 5-1: Manufacturer: syz [ 384.899396][ T4295] usb 5-1: SerialNumber: syz [ 384.912221][ T4295] usb 5-1: config 0 descriptor?? [ 384.940411][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 384.947842][ T5176] tipc: Enabled bearer , priority 0 [ 384.955812][ T5176] device syzkaller0 entered promiscuous mode [ 384.969871][ T5175] tipc: Resetting bearer [ 384.987598][ T5175] tipc: Disabling bearer [ 384.996555][ T4216] gspca_sonixj: reg_w1 err -71 [ 385.001415][ T4216] sonixj: probe of 1-1:0.0 failed with error -71 [ 385.024613][ T4216] usb 1-1: USB disconnect, device number 6 [ 385.067843][ T21] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 385.078451][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.112527][ T21] usb 4-1: config 0 descriptor?? [ 385.177875][ T4295] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 385.378358][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 385.401184][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 385.431586][ T4295] usb 5-1: USB disconnect, device number 3 [ 385.441268][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 385.451207][ T21] usb 4-1: media controller created [ 385.486846][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.584110][ T5195] device syzkaller0 entered promiscuous mode [ 385.606326][ T21] az6027: usb out operation failed. (-71) [ 385.636287][ T21] az6027: usb out operation failed. (-71) [ 385.643434][ T21] stb0899_attach: Driver disabled by Kconfig [ 385.656318][ T21] az6027: no front-end attached [ 385.656318][ T21] [ 385.686286][ T21] az6027: usb out operation failed. (-71) [ 385.694134][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 385.737227][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 385.768986][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 385.777011][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 385.827253][ T5199] tipc: Enabled bearer , priority 0 [ 385.834458][ T21] usb 4-1: USB disconnect, device number 5 [ 385.848752][ T5199] device syzkaller0 entered promiscuous mode [ 385.890401][ T5199] tipc: Resetting bearer [ 385.915107][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 385.915153][ T5198] tipc: Resetting bearer [ 385.961239][ T5198] tipc: Disabling bearer [ 386.543683][ T5218] tipc: Enabled bearer , priority 0 [ 386.563329][ T5218] device syzkaller0 entered promiscuous mode [ 386.593583][ T5215] tipc: Resetting bearer [ 386.656372][ T5215] tipc: Disabling bearer [ 387.199700][ T5234] device syzkaller0 entered promiscuous mode [ 387.366346][ T4339] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 387.628964][ T4339] usb 1-1: Using ep0 maxpacket: 16 [ 387.766410][ T4339] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 387.791856][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.803968][ T5243] tipc: Enabled bearer , priority 0 [ 387.827104][ T4339] usb 1-1: config 0 descriptor?? [ 387.836928][ T5243] device syzkaller0 entered promiscuous mode [ 387.889815][ T4339] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 387.917161][ T5243] tipc: Resetting bearer [ 387.939061][ T5242] tipc: Resetting bearer [ 387.980381][ T5242] tipc: Disabling bearer [ 388.904520][ T5264] tipc: Enabled bearer , priority 0 [ 388.916014][ T5264] device syzkaller0 entered promiscuous mode [ 388.953265][ T5263] tipc: Resetting bearer [ 389.029710][ T5263] tipc: Disabling bearer [ 389.129464][ T5268] device syzkaller0 entered promiscuous mode [ 389.324983][ T5274] tipc: Enabled bearer , priority 0 [ 389.356860][ T5274] device syzkaller0 entered promiscuous mode [ 389.387017][ T5274] tipc: Resetting bearer [ 389.513485][ T5273] tipc: Resetting bearer [ 389.619883][ T5273] tipc: Disabling bearer [ 390.408517][ T5301] tipc: Enabled bearer , priority 0 [ 390.415845][ T5301] device syzkaller0 entered promiscuous mode [ 390.428901][ T5298] tipc: Resetting bearer [ 390.458118][ T5298] tipc: Disabling bearer [ 390.552214][ T5309] device gretap0 entered promiscuous mode [ 390.717235][ T4339] gspca_sonixj: reg_w1 err -71 [ 390.723133][ T4339] sonixj: probe of 1-1:0.0 failed with error -71 [ 390.764507][ T4339] usb 1-1: USB disconnect, device number 7 [ 390.767189][ T5314] tipc: Enabled bearer , priority 0 [ 390.783902][ T5314] device syzkaller0 entered promiscuous mode [ 390.808061][ T5316] device syzkaller0 entered promiscuous mode [ 390.850775][ T5314] tipc: Resetting bearer [ 390.923253][ T5319] netlink: 56 bytes leftover after parsing attributes in process `syz.4.319'. [ 390.944602][ T5312] tipc: Resetting bearer [ 390.965917][ T5312] tipc: Disabling bearer [ 391.697728][ T5344] tipc: Enabled bearer , priority 0 [ 391.750076][ T5344] device syzkaller0 entered promiscuous mode [ 391.816318][ T5341] tipc: Resetting bearer [ 391.871661][ T5341] tipc: Disabling bearer [ 392.006939][ T4216] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 392.320995][ T5355] device syzkaller0 entered promiscuous mode [ 392.365424][ T5357] device syzkaller1 entered promiscuous mode [ 392.396364][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 392.419406][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 392.453693][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 392.678346][ T4216] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 392.701859][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.738854][ T4216] usb 2-1: Product: syz [ 392.748457][ T5359] tipc: Enabled bearer , priority 0 [ 392.754924][ T4216] usb 2-1: Manufacturer: syz [ 392.769271][ T4216] usb 2-1: SerialNumber: syz [ 392.769916][ T5359] device syzkaller0 entered promiscuous mode [ 392.802506][ T4216] usb 2-1: config 0 descriptor?? [ 392.917808][ T5359] tipc: Resetting bearer [ 392.953395][ T5358] tipc: Resetting bearer [ 393.019678][ T5358] tipc: Disabling bearer [ 393.070797][ T4216] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 393.322326][ T4216] usb 2-1: USB disconnect, device number 6 [ 394.239116][ T5392] tipc: Enabled bearer , priority 0 [ 394.264946][ T5392] device syzkaller0 entered promiscuous mode [ 394.394855][ T5389] tipc: Resetting bearer [ 394.521101][ T5389] tipc: Disabling bearer [ 394.572751][ T5419] device syzkaller0 entered promiscuous mode [ 394.601588][ T5417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 394.624857][ T5417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 394.646348][ T5417] netlink: 'syz.1.344': attribute type 41 has an invalid length. [ 394.692079][ T5417] netlink: 'syz.1.344': attribute type 41 has an invalid length. [ 394.710990][ T5425] tipc: Enabled bearer , priority 0 [ 394.731356][ T5425] device syzkaller0 entered promiscuous mode [ 394.816942][ T5425] tipc: Resetting bearer [ 394.846367][ T5424] tipc: Resetting bearer [ 394.866360][ T5424] tipc: Disabling bearer [ 395.226375][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 395.626212][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 395.676126][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.710135][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 395.956302][ T21] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 395.981994][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.016189][ T21] usb 2-1: Product: syz [ 396.024226][ T21] usb 2-1: Manufacturer: syz [ 396.056138][ T21] usb 2-1: SerialNumber: syz [ 396.097599][ T21] usb 2-1: config 0 descriptor?? [ 396.367211][ T21] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 396.587891][ T4216] usb 2-1: USB disconnect, device number 7 [ 396.852352][ T5465] tipc: Enabled bearer , priority 0 [ 396.899055][ T5465] tipc: Resetting bearer [ 396.919873][ T5464] tipc: Disabling bearer [ 397.025015][ T5467] device syzkaller0 entered promiscuous mode [ 397.113573][ T5471] tipc: Enabled bearer , priority 0 [ 397.139845][ T5471] device syzkaller0 entered promiscuous mode [ 397.167737][ T5471] tipc: Resetting bearer [ 397.193233][ T5470] tipc: Resetting bearer [ 397.246001][ T5470] tipc: Disabling bearer [ 397.606167][ T4339] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 397.813804][ T5501] tipc: Enabled bearer , priority 0 [ 397.886323][ T4339] usb 4-1: Using ep0 maxpacket: 16 [ 397.901984][ T5501] tipc: Resetting bearer [ 397.992034][ T5500] tipc: Disabling bearer [ 398.016369][ T4339] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 398.031427][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.074693][ T4339] usb 4-1: config 0 descriptor?? [ 398.090636][ T5509] device syzkaller0 entered promiscuous mode [ 398.118032][ T4339] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 398.266199][ T4288] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 398.596935][ T5521] tipc: Enabled bearer , priority 0 [ 398.605128][ T5521] device syzkaller0 entered promiscuous mode [ 398.626396][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 398.644538][ T5521] tipc: Resetting bearer [ 398.655188][ T5520] tipc: Resetting bearer [ 398.657871][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 398.684102][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 398.696292][ T5520] tipc: Disabling bearer [ 398.886854][ T4288] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 398.903451][ T4288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.922758][ T4288] usb 2-1: Product: syz [ 398.939529][ T4288] usb 2-1: Manufacturer: syz [ 398.960484][ T4288] usb 2-1: SerialNumber: syz [ 398.978044][ T4288] usb 2-1: config 0 descriptor?? [ 399.238013][ T4288] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 399.290750][ T5545] tipc: Enabled bearer , priority 0 [ 399.303586][ T5545] tipc: Resetting bearer [ 399.311485][ T5544] tipc: Disabling bearer [ 399.427051][ T5549] tipc: Enabling of bearer rejected, failed to enable media [ 399.445185][ T5549] device syzkaller0 entered promiscuous mode [ 399.487692][ T21] usb 2-1: USB disconnect, device number 8 [ 399.593597][ T5555] tipc: Enabled bearer , priority 0 [ 399.601528][ T5555] device syzkaller0 entered promiscuous mode [ 399.625019][ T5555] tipc: Resetting bearer [ 399.636949][ T5554] tipc: Resetting bearer [ 399.655881][ T5554] tipc: Disabling bearer [ 400.516468][ T5583] device syzkaller0 entered promiscuous mode [ 400.730604][ T5585] tipc: Enabling of bearer rejected, failed to enable media [ 400.742478][ T5585] device syzkaller0 entered promiscuous mode [ 400.936175][ T4339] gspca_sonixj: reg_w1 err -71 [ 400.941140][ T4339] sonixj: probe of 4-1:0.0 failed with error -71 [ 400.977190][ T4339] usb 4-1: USB disconnect, device number 6 [ 401.180988][ T5593] tipc: Enabled bearer , priority 0 [ 401.230350][ T5593] device syzkaller0 entered promiscuous mode [ 401.280060][ T5592] tipc: Resetting bearer [ 401.322140][ T5592] tipc: Disabling bearer [ 401.599003][ T4339] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 401.686148][ T4216] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 401.764219][ T5615] device syzkaller0 entered promiscuous mode [ 401.866247][ T4339] usb 2-1: Using ep0 maxpacket: 8 [ 402.026344][ T4339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.036582][ T4339] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 402.045636][ T4339] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 402.046593][ T4216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 402.054788][ T4339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.076058][ T4216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 402.087376][ T4216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 402.087724][ T4339] usb 2-1: config 0 descriptor?? [ 402.250919][ T5619] tipc: Enabling of bearer rejected, failed to enable media [ 402.263730][ T4216] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 402.275679][ T4216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.276250][ T4273] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 402.293291][ T5619] device syzkaller0 entered promiscuous mode [ 402.299784][ T4216] usb 5-1: Product: syz [ 402.303996][ T4216] usb 5-1: Manufacturer: syz [ 402.318668][ T4216] usb 5-1: SerialNumber: syz [ 402.325776][ T4216] usb 5-1: config 0 descriptor?? [ 402.599660][ T4216] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 402.716297][ T4273] usb 1-1: unable to get BOS descriptor or descriptor too short [ 402.818713][ T4339] usb 5-1: USB disconnect, device number 4 [ 402.856326][ T4273] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 402.865327][ T4273] usb 1-1: can't read configurations, error -71 [ 403.271819][ T5634] tipc: Enabled bearer , priority 0 [ 403.280637][ T5634] device syzkaller0 entered promiscuous mode [ 403.318919][ T5633] tipc: Resetting bearer [ 403.364842][ T5633] tipc: Disabling bearer [ 403.988848][ T5658] device syzkaller0 entered promiscuous mode [ 404.064975][ T5664] tipc: Enabling of bearer rejected, failed to enable media [ 404.074988][ T5664] device syzkaller0 entered promiscuous mode [ 404.226358][ T4288] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 404.321203][ T4216] usb 2-1: USB disconnect, device number 9 [ 404.359898][ T5675] tipc: Enabled bearer , priority 0 [ 404.373426][ T5675] device syzkaller0 entered promiscuous mode [ 404.391547][ T5674] tipc: Resetting bearer [ 404.414945][ T5674] tipc: Disabling bearer [ 404.466242][ T4288] usb 1-1: Using ep0 maxpacket: 32 [ 404.476713][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 404.596352][ T4288] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 404.604960][ T4288] usb 1-1: config 0 has no interface number 0 [ 404.611730][ T4288] usb 1-1: config 0 interface 12 has no altsetting 0 [ 404.776305][ T4288] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 404.791510][ T4288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.800464][ T4288] usb 1-1: Product: syz [ 404.804842][ T4288] usb 1-1: Manufacturer: syz [ 404.810237][ T4288] usb 1-1: SerialNumber: syz [ 404.823852][ T4288] usb 1-1: config 0 descriptor?? [ 404.836794][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 404.850838][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 404.862363][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 405.026409][ T21] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 405.036224][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.045636][ T21] usb 5-1: Product: syz [ 405.050918][ T21] usb 5-1: Manufacturer: syz [ 405.056266][ T21] usb 5-1: SerialNumber: syz [ 405.064857][ T21] usb 5-1: config 0 descriptor?? [ 405.332971][ T21] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 405.547257][ T4295] usb 5-1: USB disconnect, device number 5 [ 405.566304][ T4288] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 405.574102][ T4288] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 405.625177][ T4288] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 405.653565][ T4288] f81534: probe of 1-1:0.12 failed with error -71 [ 405.691485][ T4288] usb 1-1: USB disconnect, device number 10 [ 406.040667][ T5706] device syzkaller0 entered promiscuous mode [ 406.135865][ T5708] tipc: Enabling of bearer rejected, failed to enable media [ 406.172270][ T5708] device syzkaller0 entered promiscuous mode [ 406.907316][ T5755] device syzkaller0 entered promiscuous mode [ 407.376115][ T4310] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 407.544812][ T5767] tipc: Enabling of bearer rejected, failed to enable media [ 407.576730][ T5767] device syzkaller0 entered promiscuous mode [ 407.636191][ T4310] usb 1-1: Using ep0 maxpacket: 8 [ 407.786289][ T4310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.802838][ T4310] usb 1-1: config 0 has no interfaces? [ 407.906478][ T4310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.936007][ T4310] usb 1-1: config 0 has no interfaces? [ 408.076487][ T4310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.097648][ T4310] usb 1-1: config 0 has no interfaces? [ 408.166360][ T4339] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 408.176838][ T5779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 408.326830][ T4310] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 408.335942][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.344855][ T4310] usb 1-1: Product: syz [ 408.349366][ T4310] usb 1-1: Manufacturer: syz [ 408.353988][ T4310] usb 1-1: SerialNumber: syz [ 408.385150][ T4310] usb 1-1: config 0 descriptor?? [ 408.457342][ T4339] usb 4-1: Using ep0 maxpacket: 16 [ 408.586396][ T4339] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 408.595686][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.614369][ T4339] usb 4-1: config 0 descriptor?? [ 408.668440][ T4339] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 408.837193][ T4310] usb 1-1: USB disconnect, device number 11 [ 409.163172][ T5806] device syzkaller0 entered promiscuous mode [ 409.299682][ T5812] tipc: Enabling of bearer rejected, failed to enable media [ 409.309494][ T5812] device syzkaller0 entered promiscuous mode [ 409.700210][ T5828] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 409.708398][ T4310] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 409.966176][ T4310] usb 2-1: Using ep0 maxpacket: 32 [ 410.086523][ T4310] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 410.101249][ T4310] usb 2-1: config 0 has no interface number 0 [ 410.276607][ T4310] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 410.297898][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.326872][ T4310] usb 2-1: Product: syz [ 410.336476][ T4310] usb 2-1: Manufacturer: syz [ 410.347169][ T4310] usb 2-1: SerialNumber: syz [ 410.370563][ T4310] usb 2-1: config 0 descriptor?? [ 410.421173][ T4310] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 410.651964][ T4310] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 410.697369][ T4310] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 410.851280][ T4310] usb 2-1: USB disconnect, device number 10 [ 410.857369][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 410.912828][ T4310] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 410.987077][ T4310] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 411.023418][ T4310] quatech2 2-1:0.51: device disconnected [ 411.451529][ T5856] tipc: Enabling of bearer rejected, failed to enable media [ 411.472929][ T5856] device syzkaller0 entered promiscuous mode [ 411.536425][ T4339] gspca_sonixj: reg_w1 err -71 [ 411.541331][ T4339] sonixj: probe of 4-1:0.0 failed with error -71 [ 411.565946][ T4339] usb 4-1: USB disconnect, device number 7 [ 411.966120][ T4273] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 412.212296][ T5883] delete_channel: no stack [ 412.243367][ T5883] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 412.366189][ T4273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 412.395429][ T4273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 412.406414][ T4273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 412.606379][ T4273] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 412.629432][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.693692][ T4273] usb 2-1: Product: syz [ 412.702160][ T4273] usb 2-1: Manufacturer: syz [ 412.705782][ T5903] x_tables: ip_tables: osf match: only valid for protocol 6 [ 412.707039][ T4273] usb 2-1: SerialNumber: syz [ 412.740673][ T4273] usb 2-1: config 0 descriptor?? [ 412.779564][ T5905] tipc: Enabling of bearer rejected, failed to enable media [ 412.793179][ T5905] device syzkaller0 entered promiscuous mode [ 413.017504][ T4273] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 413.237605][ T4273] usb 2-1: USB disconnect, device number 11 [ 413.516161][ T4302] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 413.766169][ T4302] usb 4-1: Using ep0 maxpacket: 16 [ 413.896341][ T4302] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 413.907303][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.944214][ T4302] usb 4-1: config 0 descriptor?? [ 414.028345][ T4302] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 414.393722][ T1111] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 414.460675][ T1111] dvb_usb_az6027: probe of 3-1:0.0 failed with error -110 [ 414.501616][ T1111] usb 3-1: USB disconnect, device number 2 [ 414.753227][ T5952] device syzkaller0 entered promiscuous mode [ 414.906332][ T4310] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 415.176145][ T4310] usb 1-1: Using ep0 maxpacket: 32 [ 415.306886][ T4310] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 415.331118][ T4310] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 415.361320][ T4310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 415.382547][ T4310] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 415.412320][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.447156][ T4310] usb 1-1: config 0 descriptor?? [ 415.636317][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 415.940238][ T4310] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 415.954091][ T4310] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 415.963234][ T4310] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 415.975615][ T4310] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 415.984714][ T4310] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 415.996258][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 416.022244][ T4310] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 416.043948][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 416.055182][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 416.121275][ T4310] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -90 [ 416.149206][ T4310] usb 1-1: USB disconnect, device number 12 [ 416.266482][ T21] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 416.279314][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.288104][ T21] usb 5-1: Product: syz [ 416.295830][ T21] usb 5-1: Manufacturer: syz [ 416.301034][ T21] usb 5-1: SerialNumber: syz [ 416.323408][ T21] usb 5-1: config 0 descriptor?? [ 416.444879][ T5988] mmap: syz.1.520 (5988) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 416.541252][ T5986] fido_id[5986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 416.598142][ T21] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 416.837555][ T4310] usb 5-1: USB disconnect, device number 6 [ 416.862197][ T4302] gspca_sonixj: reg_w1 err -71 [ 416.867442][ T4302] sonixj: probe of 4-1:0.0 failed with error -71 [ 416.875448][ T5997] device syzkaller0 entered promiscuous mode [ 416.912088][ T4302] usb 4-1: USB disconnect, device number 8 [ 416.968422][ T5999] tipc: Enabled bearer , priority 0 [ 416.999166][ T5999] tipc: Resetting bearer [ 417.018345][ T5998] tipc: Disabling bearer [ 417.536435][ T6023] device syzkaller0 entered promiscuous mode [ 417.807576][ T6037] device syzkaller0 entered promiscuous mode [ 417.966365][ T4302] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 418.115930][ T6046] tipc: Enabled bearer , priority 0 [ 418.205721][ T6046] tipc: Resetting bearer [ 418.247844][ T6043] tipc: Disabling bearer [ 418.256391][ T4302] usb 2-1: Using ep0 maxpacket: 16 [ 418.396428][ T4302] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 418.425996][ T4302] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 418.435068][ T4302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.465277][ T4302] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 418.488085][ T4302] usb 2-1: config 0 has no interface number 0 [ 418.501015][ T4302] usb 2-1: config 0 interface 125 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 418.516238][ T4302] usb 2-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.530958][ T4302] usb 2-1: config 0 interface 125 has no altsetting 0 [ 418.646323][ T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 418.696324][ T4310] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 418.726564][ T4302] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 418.742978][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.753010][ T4302] usb 2-1: Product: syz [ 418.763706][ T4302] usb 2-1: Manufacturer: syz [ 418.768804][ T4302] usb 2-1: SerialNumber: syz [ 418.794752][ T4302] usb 2-1: config 0 descriptor?? [ 418.986149][ T4310] usb 4-1: Using ep0 maxpacket: 16 [ 419.006224][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 419.022576][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 419.056316][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 419.156216][ T4310] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 419.171650][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.185511][ T4310] usb 4-1: config 0 descriptor?? [ 419.238245][ T4310] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 419.250261][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 419.266321][ T21] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 419.298693][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.331125][ T21] usb 1-1: Product: syz [ 419.339385][ T21] usb 1-1: Manufacturer: syz [ 419.344249][ T21] usb 1-1: SerialNumber: syz [ 419.361313][ T21] usb 1-1: config 0 descriptor?? [ 419.373845][ T4288] usb 2-1: USB disconnect, device number 12 [ 419.483318][ T6084] fuse: Bad value for 'user_id' [ 419.627565][ T21] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 419.708178][ T6088] device syzkaller0 entered promiscuous mode [ 419.896317][ T21] usb 1-1: USB disconnect, device number 13 [ 420.149663][ T6099] tipc: Enabled bearer , priority 0 [ 420.182390][ T6099] tipc: Resetting bearer [ 420.201179][ T6098] tipc: Disabling bearer [ 420.370805][ T6102] tipc: Enabled bearer , priority 0 [ 420.385458][ T6102] device syzkaller0 entered promiscuous mode [ 420.461851][ T6102] tipc: Resetting bearer [ 420.489334][ T6101] tipc: Resetting bearer [ 420.548248][ T6101] tipc: Disabling bearer [ 421.224751][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 421.265808][ T6129] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 421.280684][ T6129] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 421.291721][ T6129] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 421.306157][ T6129] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 421.325928][ T6129] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 421.446195][ T4310] gspca_sonixj: reg_r err -32 [ 421.452782][ T4310] sonixj: probe of 4-1:0.0 failed with error -32 [ 421.462613][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 421.557012][ T6131] bond4 (unregistering): (slave geneve2): Releasing backup interface [ 421.618178][ T6131] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 421.667059][ T6131] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 421.679508][ T6131] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 421.689774][ T6131] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 421.714882][ T6131] bond4 (unregistering): Released all slaves [ 421.761045][ T6135] device syzkaller0 entered promiscuous mode [ 421.963069][ T6144] tipc: Enabled bearer , priority 0 [ 421.978241][ T6144] tipc: Resetting bearer [ 422.022284][ T6143] tipc: Disabling bearer [ 422.247172][ T6151] netlink: 84 bytes leftover after parsing attributes in process `syz.4.568'. [ 422.460744][ T21] usb 4-1: USB disconnect, device number 9 [ 422.496631][ T4303] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 422.916359][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 422.927427][ T21] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 422.951489][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 422.989756][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 423.216447][ T4303] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 423.225660][ T4303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.243251][ T4303] usb 3-1: Product: syz [ 423.248310][ T4303] usb 3-1: Manufacturer: syz [ 423.252952][ T4303] usb 3-1: SerialNumber: syz [ 423.291190][ T4303] usb 3-1: config 0 descriptor?? [ 423.342183][ T21] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.359321][ T21] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 423.380583][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 423.387523][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 423.398010][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.425345][ T21] usb 4-1: config 0 descriptor?? [ 423.486622][ T6166] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 423.591773][ T4303] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 423.725082][ T6184] device syzkaller0 entered promiscuous mode [ 423.820335][ T4216] usb 3-1: USB disconnect, device number 3 [ 423.836401][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 423.852859][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 423.893832][ T21] usb 4-1: USB disconnect, device number 10 [ 423.956317][ T4288] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 424.314704][ T6197] tipc: Enabled bearer , priority 0 [ 424.365767][ T6197] tipc: Resetting bearer [ 424.394982][ T6196] tipc: Disabling bearer [ 424.586290][ T4273] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 424.866203][ T4273] usb 4-1: Using ep0 maxpacket: 16 [ 425.016236][ T4273] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 425.034994][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.074183][ T4273] usb 4-1: config 0 descriptor?? [ 425.148294][ T4273] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 425.376204][ T4302] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 425.586444][ T4302] usb 3-1: device descriptor read/64, error -71 [ 425.799432][ T6224] device syzkaller0 entered promiscuous mode [ 425.866751][ T4302] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 426.066418][ T4302] usb 3-1: device descriptor read/64, error -71 [ 426.186296][ T4302] usb usb3-port1: attempt power cycle [ 426.476115][ T4303] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 426.606150][ T4302] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 426.636444][ T4288] usb 5-1: unable to get BOS descriptor or descriptor too short [ 426.654230][ T6240] tipc: Enabled bearer , priority 0 [ 426.675479][ T6240] tipc: Resetting bearer [ 426.683873][ T6239] tipc: Disabling bearer [ 426.716296][ T4302] usb 3-1: device descriptor read/8, error -71 [ 426.776407][ T4288] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 426.798656][ T4288] usb 5-1: can't read configurations, error -71 [ 426.856227][ T4303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 426.889559][ T4303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 426.918839][ T4303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 427.016089][ T4302] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 427.085962][ T6247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.597'. [ 427.095427][ T6247] IPv6: Can't replace route, no match found [ 427.106406][ T4303] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 427.120301][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.132126][ T4303] usb 2-1: Product: syz [ 427.139035][ T4303] usb 2-1: Manufacturer: syz [ 427.143815][ T4303] usb 2-1: SerialNumber: syz [ 427.146385][ T4302] usb 3-1: device descriptor read/8, error -71 [ 427.164601][ T4303] usb 2-1: config 0 descriptor?? [ 427.278670][ T4302] usb usb3-port1: unable to enumerate USB device [ 427.312053][ T4273] gspca_sonixj: reg_r err -32 [ 427.317182][ T4273] sonixj: probe of 4-1:0.0 failed with error -32 [ 427.459973][ T4303] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 427.677095][ T21] usb 2-1: USB disconnect, device number 13 [ 428.284784][ T6264] device syzkaller0 entered promiscuous mode [ 428.352401][ T4288] usb 4-1: USB disconnect, device number 11 [ 428.534594][ T6271] tipc: Enabling of bearer rejected, failed to enable media [ 428.922221][ T6299] syz.1.611 uses obsolete (PF_INET,SOCK_PACKET) [ 428.980741][ T6299] device syzkaller1 entered promiscuous mode [ 429.103833][ T6306] pit: kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 429.133092][ T6306] pit: kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 429.153752][ T6306] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 429.170382][ T6306] pit: kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 429.184870][ T6306] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 429.195241][ T6306] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 429.204286][ T6306] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 429.226708][ T6306] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 429.241400][ T6306] pit: kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 429.251186][ T6306] pit: kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 429.384921][ T6318] device syzkaller0 entered promiscuous mode [ 429.436180][ T1111] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 429.446516][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 429.616143][ T4346] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 429.686290][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 429.826833][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 429.836489][ T1111] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 429.845357][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 429.866230][ T4346] usb 2-1: Using ep0 maxpacket: 16 [ 429.866581][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.879804][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 429.982706][ T1111] usb 3-1: config 0 descriptor?? [ 429.986496][ T4346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 430.034636][ T1111] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 430.036484][ T21] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 430.064427][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.073134][ T21] usb 5-1: Product: syz [ 430.083606][ T21] usb 5-1: Manufacturer: syz [ 430.088871][ T21] usb 5-1: SerialNumber: syz [ 430.127538][ T21] usb 5-1: config 0 descriptor?? [ 430.168551][ T4346] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 430.187960][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.196487][ T4346] usb 2-1: Product: syz [ 430.202400][ T4346] usb 2-1: Manufacturer: syz [ 430.212565][ T4346] usb 2-1: SerialNumber: syz [ 430.227481][ T4346] usb 2-1: config 0 descriptor?? [ 430.268624][ T4346] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 430.283983][ T4346] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 430.382710][ T6336] tipc: Enabling of bearer rejected, failed to enable media [ 430.408303][ T21] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 430.666605][ T21] usb 5-1: USB disconnect, device number 9 [ 431.133976][ T6377] capability: warning: `syz.0.629' uses 32-bit capabilities (legacy support in use) [ 431.302642][ T6380] device syzkaller0 entered promiscuous mode [ 431.470157][ T4346] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 431.636360][ T4346] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 431.658248][ T4346] em28xx 2-1:0.0: board has no eeprom [ 431.786319][ T4346] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 431.803046][ T4346] em28xx 2-1:0.0: dvb set to bulk mode. [ 431.816871][ T4216] em28xx 2-1:0.0: Binding DVB extension [ 431.828009][ T6395] capability: warning: `syz.3.636' uses deprecated v2 capabilities in a way that may be insecure [ 431.936504][ T4216] em28xx 2-1:0.0: Registering input extension [ 432.134657][ T6404] tipc: Enabling of bearer rejected, failed to enable media [ 432.206339][ T1111] gspca_sonixj: reg_r err -32 [ 432.211457][ T1111] sonixj: probe of 3-1:0.0 failed with error -32 [ 432.996287][ T4346] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 433.235070][ T4273] usb 3-1: USB disconnect, device number 8 [ 433.252928][ T4303] usb 2-1: USB disconnect, device number 14 [ 433.281602][ T4303] em28xx 2-1:0.0: Disconnecting em28xx [ 433.307632][ T4303] em28xx 2-1:0.0: Closing input extension [ 433.366216][ T4346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 433.395113][ T4303] em28xx 2-1:0.0: Freeing device [ 433.401095][ T6428] device syzkaller0 entered promiscuous mode [ 433.412049][ T4346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 433.474337][ T4346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 433.691866][ T4346] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 433.708466][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.727407][ T4346] usb 1-1: Product: syz [ 433.731774][ T4346] usb 1-1: Manufacturer: syz [ 433.741374][ T4346] usb 1-1: SerialNumber: syz [ 433.762504][ T4346] usb 1-1: config 0 descriptor?? [ 434.036880][ T4346] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 434.237041][ T6453] tipc: Enabling of bearer rejected, failed to enable media [ 434.287588][ T4302] usb 1-1: USB disconnect, device number 14 [ 434.865258][ T6473] device syzkaller0 entered promiscuous mode [ 434.936306][ T4346] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 435.196268][ T4346] usb 2-1: Using ep0 maxpacket: 16 [ 435.317029][ T4346] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 435.337119][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.384765][ T4346] usb 2-1: config 0 descriptor?? [ 435.434504][ T4346] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 435.471386][ T6496] tipc: Enabling of bearer rejected, failed to enable media [ 437.076246][ T4303] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 437.446225][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 437.463996][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 437.474359][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 437.526275][ T4216] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 437.606299][ T4346] gspca_sonixj: reg_r err -32 [ 437.611464][ T4346] sonixj: probe of 2-1:0.0 failed with error -32 [ 437.656330][ T4303] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 437.669995][ T4303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.682381][ T4303] usb 3-1: Product: syz [ 437.690753][ T4303] usb 3-1: Manufacturer: syz [ 437.695452][ T4303] usb 3-1: SerialNumber: syz [ 437.707132][ T4303] usb 3-1: config 0 descriptor?? [ 437.789997][ T6530] device syzkaller0 entered promiscuous mode [ 437.806320][ T4216] usb 1-1: Using ep0 maxpacket: 16 [ 437.967980][ T4216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.980854][ T4303] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 437.991878][ T4216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.002804][ T4216] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 438.013169][ T4216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.029946][ T4216] usb 1-1: config 0 descriptor?? [ 438.189985][ T6542] tipc: Enabling of bearer rejected, failed to enable media [ 438.202492][ T4303] usb 3-1: USB disconnect, device number 9 [ 438.621793][ T4346] usb 2-1: USB disconnect, device number 15 [ 438.646274][ T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 438.916267][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 438.990257][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 439.060320][ T21] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 439.082588][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.153244][ T21] usb 5-1: config 0 descriptor?? [ 439.456515][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 439.486951][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.556767][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 439.584183][ T21] usb 5-1: media controller created [ 439.788487][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.941085][ T21] az6027: usb out operation failed. (-71) [ 439.977876][ T21] az6027: usb out operation failed. (-71) [ 439.988498][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.996082][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.021486][ T21] stb0899_attach: Driver disabled by Kconfig [ 440.055412][ T21] az6027: no front-end attached [ 440.055412][ T21] [ 440.158006][ T21] az6027: usb out operation failed. (-71) [ 440.261032][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 440.366432][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 440.443145][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 440.462418][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 440.508989][ T21] usb 5-1: USB disconnect, device number 10 [ 440.645764][ T6586] tipc: Enabling of bearer rejected, failed to enable media [ 440.657193][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 441.056212][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 441.316128][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 441.436338][ T21] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 441.445435][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.505719][ T21] usb 5-1: config 0 descriptor?? [ 441.572868][ T21] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 441.930919][ T4216] usbhid 1-1:0.0: can't add hid device: -71 [ 441.944404][ T4216] usbhid: probe of 1-1:0.0 failed with error -71 [ 441.978563][ T4216] usb 1-1: USB disconnect, device number 15 [ 442.518938][ T6623] tipc: Enabling of bearer rejected, failed to enable media [ 443.406118][ T4302] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 443.746418][ T21] gspca_sonixj: reg_r err -32 [ 443.751222][ T21] sonixj: probe of 5-1:0.0 failed with error -32 [ 443.836966][ T4302] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 443.864779][ T4302] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 443.892359][ T4302] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 443.913442][ T4302] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 443.926759][ T4302] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 443.928996][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 443.947183][ T4302] usb 3-1: config 168 interface 0 has no altsetting 0 [ 444.040714][ T6670] tipc: Enabling of bearer rejected, failed to enable media [ 444.106513][ T4302] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 444.119769][ T4302] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 444.160951][ T4302] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 444.191226][ T4302] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 444.212738][ T4302] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 444.249316][ T4302] usb 3-1: config 168 interface 0 has no altsetting 0 [ 444.356366][ T4302] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 444.363845][ T4302] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 444.391064][ T4302] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 444.420660][ T4302] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 444.453232][ T4302] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 444.493644][ T4302] usb 3-1: config 168 interface 0 has no altsetting 0 [ 444.763644][ T4288] usb 5-1: USB disconnect, device number 11 [ 444.796439][ T4302] usb 3-1: string descriptor 0 read error: -22 [ 444.805032][ T4302] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 444.858342][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.938711][ T4302] adutux 3-1:168.0: interrupt endpoints not found [ 445.736742][ T4302] usb 3-1: USB disconnect, device number 10 [ 445.762797][ T6718] tipc: Enabling of bearer rejected, failed to enable media [ 446.438632][ T6742] tipc: Enabled bearer , priority 0 [ 446.474929][ T6742] tipc: Resetting bearer [ 446.505807][ T6740] tipc: Disabling bearer [ 447.006153][ T4302] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 447.066137][ T4273] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 447.376496][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 447.387694][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 447.433449][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 447.476507][ T4273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.496406][ T4273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 447.515701][ T4273] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 447.546304][ T4273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.569560][ T4273] usb 3-1: config 0 descriptor?? [ 447.592357][ T4216] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 447.608366][ T4273] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 447.615047][ T4273] dvb-usb: bulk message failed: -22 (3/0) [ 447.621325][ T4302] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 447.636092][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.665477][ T4273] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 447.674126][ T4302] usb 5-1: Product: syz [ 447.678585][ T4302] usb 5-1: Manufacturer: syz [ 447.683236][ T4302] usb 5-1: SerialNumber: syz [ 447.702375][ T4302] usb 5-1: config 0 descriptor?? [ 447.716393][ T4273] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 447.727592][ T4273] usb 3-1: media controller created [ 447.744446][ T4273] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.784656][ T4273] dvb-usb: bulk message failed: -22 (6/0) [ 447.796247][ T4273] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 447.847617][ T4273] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 447.878536][ T4273] dvb-usb: schedule remote query interval to 150 msecs. [ 447.895733][ T4273] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 447.906253][ T4216] usb 2-1: Using ep0 maxpacket: 8 [ 447.922741][ T4273] usb 3-1: USB disconnect, device number 11 [ 447.963064][ T4273] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 447.979258][ T4302] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 448.042178][ T4216] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.083175][ T4216] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 448.113635][ T4216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 448.137309][ T4216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 448.167626][ T4216] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 448.202130][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.236576][ T4302] usb 5-1: USB disconnect, device number 12 [ 448.280044][ T4216] hub 2-1:1.0: bad descriptor, ignoring hub [ 448.299075][ T4216] hub: probe of 2-1:1.0 failed with error -5 [ 448.346641][ T4216] cdc_wdm 2-1:1.0: skipping garbage [ 448.367009][ T4216] cdc_wdm 2-1:1.0: skipping garbage [ 448.403683][ T4216] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 448.433885][ T4216] cdc_wdm 2-1:1.0: Unknown control protocol [ 448.473533][ T6762] tipc: Enabling of bearer rejected, failed to enable media [ 448.819395][ T4302] usb 2-1: USB disconnect, device number 16 [ 449.308269][ T6783] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 449.380630][ T6783] device bond13 entered promiscuous mode [ 449.430209][ T6783] 8021q: adding VLAN 0 to HW filter on device bond13 [ 449.519394][ T6783] bond13: (slave bridge1): making interface the new active one [ 449.533463][ T6783] device bridge1 entered promiscuous mode [ 449.544746][ T6783] bond13: (slave bridge1): Enslaving as an active interface with an up link [ 449.554864][ T6793] netlink: 52 bytes leftover after parsing attributes in process `syz.3.748'. [ 449.580750][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 449.746108][ T4302] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 449.833006][ T6805] tipc: Enabling of bearer rejected, failed to enable media [ 449.996260][ T4302] usb 5-1: Using ep0 maxpacket: 16 [ 450.116458][ T4302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.169045][ T4302] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.436372][ T4302] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 450.445469][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.525278][ T4302] usb 5-1: Product: syz [ 450.545085][ T4302] usb 5-1: Manufacturer: syz [ 450.550218][ T4302] usb 5-1: SerialNumber: syz [ 450.584687][ T4302] usb 5-1: config 0 descriptor?? [ 451.816897][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.825832][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.833129][ T6860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.884046][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 452.000854][ T6867] netlink: 'syz.0.770': attribute type 29 has an invalid length. [ 452.013957][ T6867] netlink: 'syz.0.770': attribute type 29 has an invalid length. [ 452.034717][ T6867] netlink: 'syz.0.770': attribute type 29 has an invalid length. [ 452.297346][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 452.327522][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 452.508236][ T4302] usb 5-1: USB disconnect, device number 13 [ 453.943938][ T6904] tipc: Enabled bearer , priority 0 [ 453.962847][ T6904] device syzkaller0 entered promiscuous mode [ 453.986238][ T4288] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 453.998500][ T6904] tipc: Resetting bearer [ 454.021046][ T6903] tipc: Resetting bearer [ 454.046431][ T6903] tipc: Disabling bearer [ 454.236120][ T4288] usb 4-1: Using ep0 maxpacket: 32 [ 454.356311][ T4288] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 454.421798][ T4288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.456855][ T4288] usb 4-1: config 0 descriptor?? [ 454.726373][ T4288] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 454.786471][ T4288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 454.876480][ T4288] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 454.896133][ T4288] usb 4-1: media controller created [ 454.954233][ T4288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.016331][ T4288] az6027: usb out operation failed. (-71) [ 455.066202][ T4288] az6027: usb out operation failed. (-71) [ 455.073614][ T4288] stb0899_attach: Driver disabled by Kconfig [ 455.093172][ T4288] az6027: no front-end attached [ 455.093172][ T4288] [ 455.136256][ T4288] az6027: usb out operation failed. (-71) [ 455.142369][ T4288] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 455.171020][ T4288] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 455.204438][ T4288] dvb-usb: schedule remote query interval to 400 msecs. [ 455.237216][ T4288] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 455.282948][ T4288] usb 4-1: USB disconnect, device number 12 [ 455.425187][ T4288] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 456.235072][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.266605][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.273726][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.286238][ T1111] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 456.641944][ T6933] input: syz1 as /devices/virtual/input/input17 [ 456.696502][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 456.714175][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 456.746146][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 456.936221][ T1111] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 456.996609][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.004771][ T1111] usb 5-1: Product: syz [ 457.143823][ T1111] usb 5-1: Manufacturer: syz [ 457.154523][ T1111] usb 5-1: SerialNumber: syz [ 457.186576][ T1111] usb 5-1: config 0 descriptor?? [ 457.460868][ T1111] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 457.617500][ T6948] tipc: Enabled bearer , priority 0 [ 457.645851][ T6948] tipc: Resetting bearer [ 457.682373][ T4216] usb 5-1: USB disconnect, device number 14 [ 457.719405][ T6947] tipc: Disabling bearer [ 458.036705][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 458.601260][ T6964] x_tables: ip_tables: osf match: only valid for protocol 6 [ 458.812028][ T6968] fuse: Bad value for 'fd' [ 460.197405][ T6982] tipc: Enabled bearer , priority 0 [ 460.217548][ T6982] device syzkaller0 entered promiscuous mode [ 460.286676][ T6982] tipc: Resetting bearer [ 460.327209][ T6981] tipc: Resetting bearer [ 460.358063][ T6981] tipc: Disabling bearer [ 460.959761][ T4302] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 461.366372][ T4302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 461.396207][ T4302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 461.446099][ T1111] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 461.463572][ T4302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 461.637860][ T4302] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 461.655076][ T4302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.680242][ T4302] usb 4-1: Product: syz [ 461.692635][ T4302] usb 4-1: Manufacturer: syz [ 461.705958][ T4302] usb 4-1: SerialNumber: syz [ 461.733653][ T4302] usb 4-1: config 0 descriptor?? [ 461.827058][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 461.853911][ T1111] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 461.873963][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.938284][ T1111] usb 2-1: config 0 descriptor?? [ 461.966525][ T7006] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 462.061590][ T4302] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 462.276704][ T4216] usb 4-1: USB disconnect, device number 13 [ 462.430982][ T1111] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 462.997370][ T1111] usb 2-1: USB disconnect, device number 17 [ 464.338277][ T7056] vivid-008: disconnect [ 464.356825][ T7055] vivid-008: reconnect [ 464.741203][ T7064] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 464.776153][ T4216] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 465.149582][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 465.166225][ T4346] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 465.186893][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 465.186925][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 465.346192][ T4216] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 465.346228][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.346251][ T4216] usb 2-1: Product: syz [ 465.346267][ T4216] usb 2-1: Manufacturer: syz [ 465.346283][ T4216] usb 2-1: SerialNumber: syz [ 465.348209][ T4216] usb 2-1: config 0 descriptor?? [ 465.546222][ T4346] usb 4-1: config 0 has an invalid descriptor of length 240, skipping remainder of the config [ 465.556967][ T4346] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 465.568922][ T4346] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 465.579761][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.599291][ T4346] usb 4-1: config 0 descriptor?? [ 465.614718][ T7080] tipc: Enabled bearer , priority 0 [ 465.617907][ T4216] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 465.642710][ T7080] device syzkaller0 entered promiscuous mode [ 465.694604][ T7080] tipc: Resetting bearer [ 465.723794][ T7079] tipc: Resetting bearer [ 465.725044][ T7084] program syz.2.844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.754721][ T7079] tipc: Disabling bearer [ 465.827729][ T1111] usb 2-1: USB disconnect, device number 18 [ 466.196029][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.837'. [ 466.468510][ T7105] device syzkaller0 entered promiscuous mode [ 466.886642][ T4216] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 467.136085][ T4216] usb 1-1: Using ep0 maxpacket: 8 [ 467.261671][ T4216] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.287161][ T4216] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 467.332176][ T4216] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 467.372952][ T4216] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 467.413993][ T4216] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 467.443714][ T4216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.517875][ T4216] hub 1-1:1.0: bad descriptor, ignoring hub [ 467.527652][ T4216] hub: probe of 1-1:1.0 failed with error -5 [ 467.543998][ T4216] cdc_wdm 1-1:1.0: skipping garbage [ 467.555717][ T4216] cdc_wdm 1-1:1.0: skipping garbage [ 467.583003][ T4216] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 467.604618][ T4216] cdc_wdm 1-1:1.0: Unknown control protocol [ 467.666197][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 467.666245][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 467.714761][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 467.746139][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 467.768221][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 467.796140][ T4346] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 467.978885][ T21] usb 4-1: USB disconnect, device number 14 [ 468.056229][ T4346] usb 5-1: Using ep0 maxpacket: 32 [ 468.168397][ T4216] usb 1-1: USB disconnect, device number 16 [ 468.176322][ T4346] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 468.185243][ T4346] usb 5-1: config 0 has no interface number 0 [ 468.376259][ T4346] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 468.408089][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.436695][ T4346] usb 5-1: Product: syz [ 468.440915][ T4346] usb 5-1: Manufacturer: syz [ 468.474879][ T4346] usb 5-1: SerialNumber: syz [ 468.502870][ T4346] usb 5-1: config 0 descriptor?? [ 468.546983][ T4346] smsc95xx v2.0.0 [ 468.996519][ T4346] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 469.023610][ T4346] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.768205][ T7175] tipc: Enabled bearer , priority 0 [ 469.788412][ T7175] device syzkaller0 entered promiscuous mode [ 469.830234][ T7175] tipc: Resetting bearer [ 469.848170][ T7174] tipc: Resetting bearer [ 469.898488][ T7174] tipc: Disabling bearer [ 471.476282][ T4346] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 471.505882][ T4346] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 471.518777][ T4346] usb 5-1: USB disconnect, device number 15 [ 471.565832][ T7211] tipc: Enabled bearer , priority 0 [ 471.579464][ T7208] device syzkaller0 entered promiscuous mode [ 471.630645][ T7208] tipc: Resetting bearer [ 471.667562][ T7207] tipc: Resetting bearer [ 471.713817][ T7207] tipc: Disabling bearer [ 471.737170][ T7215] device syzkaller0 entered promiscuous mode [ 472.400708][ T7240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.895'. [ 472.542295][ T7244] program syz.2.896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.879284][ T7252] tipc: Enabled bearer , priority 0 [ 472.929056][ T7252] device syzkaller0 entered promiscuous mode [ 472.958328][ T7252] tipc: Resetting bearer [ 472.983112][ T7251] tipc: Resetting bearer [ 473.049840][ T7251] tipc: Disabling bearer [ 474.430088][ T7295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.912'. [ 475.522819][ T7304] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 475.759297][ T7316] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 476.001505][ T7322] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 479.511343][ T7365] loop2: detected capacity change from 0 to 7 [ 479.548714][ T4232] Dev loop2: unable to read RDB block 7 [ 479.557579][ T4232] loop2: unable to read partition table [ 479.570640][ T4232] loop2: partition table beyond EOD, truncated [ 479.587052][ T7394] loop5: detected capacity change from 0 to 6951 [ 479.672993][ T7394] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 479.684763][ T7365] Dev loop2: unable to read RDB block 7 [ 479.715663][ T7365] loop2: unable to read partition table [ 479.765517][ T7365] loop2: partition table beyond EOD, truncated [ 479.802989][ T7365] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 479.836480][ T4339] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 479.878969][ T7400] device syzkaller0 entered promiscuous mode [ 480.002313][ T3561] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 480.226606][ T4339] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 480.253815][ T4339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.294598][ T4339] usb 2-1: config 0 has no interface number 0 [ 480.496316][ T4339] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 480.534784][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.561570][ T4339] usb 2-1: Product: syz [ 480.576124][ T4339] usb 2-1: Manufacturer: syz [ 480.587469][ T4339] usb 2-1: SerialNumber: syz [ 480.613342][ T4339] usb 2-1: config 0 descriptor?? [ 480.620076][ T7425] tipc: Enabled bearer , priority 0 [ 480.650896][ T7425] device syzkaller0 entered promiscuous mode [ 480.677791][ T4339] hub 2-1:0.31: bad descriptor, ignoring hub [ 480.700767][ T4339] hub: probe of 2-1:0.31 failed with error -5 [ 480.725565][ T4339] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 480.733241][ T7425] tipc: Resetting bearer [ 480.754710][ T7424] tipc: Resetting bearer [ 480.764464][ T4339] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 480.795110][ T4339] usb 2-1: Failed to create links for entity 6 [ 480.815255][ T4339] usb 2-1: Failed to register entities (-22). [ 480.875754][ T7424] tipc: Disabling bearer [ 481.696096][ T4288] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 481.716622][ T4339] usb 2-1: USB disconnect, device number 19 [ 482.126409][ T4288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.156052][ T4288] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.396843][ T4288] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 482.416052][ T4288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.436093][ T4288] usb 3-1: Product: syz [ 482.440322][ T4288] usb 3-1: Manufacturer: syz [ 482.502648][ T4288] usb 3-1: SerialNumber: syz [ 482.547137][ T4288] usb 3-1: config 0 descriptor?? [ 482.711980][ T7462] netlink: 'syz.4.969': attribute type 10 has an invalid length. [ 482.763251][ T7462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.826949][ T7462] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 483.103185][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 483.624879][ T7488] tipc: Enabled bearer , priority 0 [ 483.676117][ T7493] device syzkaller0 entered promiscuous mode [ 483.799511][ T7497] tipc: Resetting bearer [ 483.857102][ T7487] tipc: Resetting bearer [ 483.938277][ T7487] tipc: Disabling bearer [ 484.225974][ T7507] fuse: Bad value for 'fd' [ 484.254081][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.984'. [ 484.356193][ T4346] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 484.556124][ T4339] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 484.606308][ T4346] usb 5-1: Using ep0 maxpacket: 32 [ 484.667699][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.982'. [ 484.714937][ T7502] device vlan2 entered promiscuous mode [ 484.723200][ T7502] device bond0 entered promiscuous mode [ 484.735094][ T7502] device bond_slave_0 entered promiscuous mode [ 484.742329][ T7502] device bond_slave_1 entered promiscuous mode [ 484.764172][ T7502] device batadv0 entered promiscuous mode [ 484.807214][ T1111] usb 3-1: USB disconnect, device number 12 [ 484.906172][ T4346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 484.917769][ T7520] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 484.922004][ T4346] usb 5-1: no configurations [ 484.939495][ T7520] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 484.971186][ T4346] usb 5-1: can't read configurations, error -22 [ 484.986172][ T4339] usb 4-1: unable to get BOS descriptor or descriptor too short [ 485.129751][ T4339] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 485.142578][ T4339] usb 4-1: can't read configurations, error -71 [ 485.459720][ T7545] netlink: 52 bytes leftover after parsing attributes in process `syz.4.997'. [ 485.489058][ T7545] tipc: Invalid UDP bearer configuration [ 485.489104][ T7545] tipc: Enabling of bearer rejected, failed to enable media [ 485.546222][ T21] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 485.762766][ T7563] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1004'. [ 485.786519][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 485.907084][ T21] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 485.916650][ T21] usb 3-1: config 0 has no interface number 0 [ 486.136667][ T21] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 486.158812][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.168773][ T21] usb 3-1: Product: syz [ 486.173113][ T21] usb 3-1: Manufacturer: syz [ 486.180068][ T21] usb 3-1: SerialNumber: syz [ 486.202672][ T21] usb 3-1: config 0 descriptor?? [ 486.367710][ T21] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 486.522100][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.550744][ T7578] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 486.557726][ T7578] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 486.593764][ T21] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 486.607717][ T21] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 486.613408][ T7581] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 486.623502][ T7581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.669926][ T7578] vhci_hcd vhci_hcd.0: Device attached [ 486.695640][ T7581] vhci_hcd vhci_hcd.0: Device attached [ 486.736764][ T7591] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 486.743428][ T7591] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 486.786550][ T4302] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 486.824920][ T7591] vhci_hcd vhci_hcd.0: Device attached [ 486.847239][ T21] vhci_hcd: vhci_device speed not set [ 486.855165][ T7541] udc-core: couldn't find an available UDC or it's busy [ 486.873575][ T7578] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(8) [ 486.876438][ T7541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 486.880125][ T7578] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 486.916947][ T21] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 486.942753][ T7578] vhci_hcd vhci_hcd.0: Device attached [ 486.955878][ T7596] vhci_hcd: connection closed [ 486.960238][ T4483] vhci_hcd: stop threads [ 486.972067][ T7592] vhci_hcd: connection closed [ 486.972072][ T7579] vhci_hcd: connection reset by peer [ 486.982202][ T7582] vhci_hcd: connection closed [ 487.004581][ T4483] vhci_hcd: release socket [ 487.038408][ T4483] vhci_hcd: disconnect device [ 487.058486][ T4483] vhci_hcd: stop threads [ 487.072413][ T4483] vhci_hcd: release socket [ 487.098341][ T4483] vhci_hcd: disconnect device [ 487.115499][ T4483] vhci_hcd: stop threads [ 487.130643][ T4483] vhci_hcd: release socket [ 487.143891][ T4483] vhci_hcd: disconnect device [ 487.151673][ T4288] usb 3-1: USB disconnect, device number 13 [ 487.159255][ T4483] vhci_hcd: stop threads [ 487.166091][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 487.173879][ T4483] vhci_hcd: release socket [ 487.179217][ T4288] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 487.194180][ T4483] vhci_hcd: disconnect device [ 487.205776][ T4288] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 487.245772][ T4288] quatech2 3-1:0.51: device disconnected [ 487.256197][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 487.270292][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 487.302876][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 487.476264][ T4302] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 487.510710][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.548116][ T4302] usb 1-1: Product: syz [ 487.552656][ T4302] usb 1-1: Manufacturer: syz [ 487.561384][ T4302] usb 1-1: SerialNumber: syz [ 487.595488][ T4302] usb 1-1: config 0 descriptor?? [ 487.720865][ T7598] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.759679][ T7598] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.802104][ T7598] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.931583][ T4302] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 488.106712][ T4303] usb 1-1: USB disconnect, device number 17 [ 488.870514][ T4303] ip6_vti0 speed is unknown, defaulting to 1000 [ 488.878667][ T7598] infiniband syz2: set down [ 488.887440][ T7598] infiniband syz2: added ip6_vti0 [ 489.025743][ T7598] infiniband syz2: Couldn't open port 1 [ 489.188074][ T7628] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1021'. [ 489.348167][ T7628] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 489.817758][ T7598] RDS/IB: syz2: added [ 489.825368][ T7598] smc: adding ib device syz2 with port count 1 [ 489.859515][ T7598] smc: ib device syz2 port 1 has pnetid [ 489.872109][ T1111] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.910749][ T7598] ip6_vti0 speed is unknown, defaulting to 1000 [ 490.222876][ T7598] ip6_vti0 speed is unknown, defaulting to 1000 [ 490.318615][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 490.340810][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.361503][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.419773][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.453324][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.460603][ T7641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.578118][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 490.606914][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.630516][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.648817][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.757904][ T7598] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.215295][ T7598] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.426084][ T4302] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 491.625106][ T7661] netlink: 'syz.2.1031': attribute type 7 has an invalid length. [ 491.992655][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 492.076161][ T21] vhci_hcd: vhci_device speed not set [ 492.092193][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 492.107958][ T7598] ip6_vti0 speed is unknown, defaulting to 1000 [ 492.148608][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 492.338583][ T4302] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 492.366721][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.385032][ T4302] usb 2-1: Product: syz [ 492.389510][ T4302] usb 2-1: Manufacturer: syz [ 492.394201][ T4302] usb 2-1: SerialNumber: syz [ 492.478018][ T4302] usb 2-1: config 0 descriptor?? [ 492.488925][ T7663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.689445][ T7663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.750591][ T4302] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 492.854093][ T7663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.909778][ T7665] overlayfs: failed to resolve './file0': -2 [ 492.967215][ T4303] usb 2-1: USB disconnect, device number 20 [ 492.982722][ T7663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.402391][ T7663] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.449378][ T7663] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.535758][ T7663] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.558725][ T7663] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.847245][ T4247] Bluetooth: hci5: Frame reassembly failed (-84) [ 493.858380][ T4247] Bluetooth: hci5: Frame reassembly failed (-84) [ 494.064399][ T7692] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1044'. [ 494.376329][ T7702] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 495.906195][ T4303] Bluetooth: hci5: command 0x1003 tx timeout [ 495.920611][ T4230] Bluetooth: hci5: sending frame failed (-49) [ 496.486253][ T4303] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 497.096340][ T4303] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.461209][ T4339] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 497.836449][ T4303] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 497.874847][ T4303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 497.883646][ T4303] usb 5-1: Product: syz [ 497.914066][ T4303] usb 5-1: Manufacturer: syz [ 497.929371][ T4303] usb 5-1: SerialNumber: syz [ 497.987527][ T4346] Bluetooth: hci5: command 0x1001 tx timeout [ 497.995383][ T4230] Bluetooth: hci5: sending frame failed (-49) [ 498.149721][ T4339] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 498.176184][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.197947][ T4303] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 498.209140][ T4339] usb 2-1: Product: syz [ 498.213340][ T4339] usb 2-1: Manufacturer: syz [ 498.240723][ T4339] usb 2-1: SerialNumber: syz [ 498.276892][ T4339] usb 2-1: config 0 descriptor?? [ 499.219985][ T4339] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 499.587841][ T7745] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 499.595958][ T7745] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 499.794043][ T7750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.801366][ T7750] IPv6: NLM_F_CREATE should be set when creating new route [ 499.995536][ T21] usb 5-1: USB disconnect, device number 18 [ 500.006156][ C0] usblp0: nonzero write bulk status received: -71 [ 500.019493][ T7719] usblp0: removed [ 500.902588][ T4303] Bluetooth: hci5: command 0x1009 tx timeout [ 501.656715][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.663359][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.074556][ T4339] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 502.088265][ T4339] usb 2-1: USB disconnect, device number 21 [ 502.486632][ T1111] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 503.276277][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.311883][ T1111] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 503.342553][ T1111] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 503.556334][ T1111] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.596231][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.604318][ T1111] usb 4-1: Product: syz [ 503.614274][ T1111] usb 4-1: Manufacturer: syz [ 503.638723][ T1111] usb 4-1: SerialNumber: syz [ 503.728350][ T7785] bridge0: port 3(vxlan0) entered blocking state [ 503.735093][ T7785] bridge0: port 3(vxlan0) entered disabled state [ 503.749742][ T7785] device vxlan0 entered promiscuous mode [ 503.922151][ T7773] udc-core: couldn't find an available UDC or it's busy [ 503.939473][ T7773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 504.001342][ T1111] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 504.046365][ T1111] usb 4-1: USB disconnect, device number 17 [ 504.217427][ T7792] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 505.096247][ T1111] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 505.536072][ T1111] usb 4-1: device not accepting address 18, error -71 [ 506.370521][ T7808] input: syz0 as /devices/virtual/input/input19 [ 506.500503][ T7815] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 506.723005][ T4346] [ 506.725393][ T4346] ====================================================== [ 506.732598][ T4346] WARNING: possible circular locking dependency detected [ 506.739642][ T4346] syzkaller #0 Not tainted [ 506.744100][ T4346] ------------------------------------------------------ [ 506.751132][ T4346] kworker/1:8/4346 is trying to acquire lock: [ 506.757207][ T4346] ffff88807a2fcc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 506.768251][ T4346] [ 506.768251][ T4346] but task is already holding lock: [ 506.775606][ T4346] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 506.784673][ T4346] [ 506.784673][ T4346] which lock already depends on the new lock. [ 506.784673][ T4346] [ 506.795070][ T4346] [ 506.795070][ T4346] the existing dependency chain (in reverse order) is: [ 506.804073][ T4346] [ 506.804073][ T4346] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 506.812071][ T4346] __mutex_lock_common+0x1eb/0x2390 [ 506.817834][ T4346] mutex_lock_nested+0x17/0x20 [ 506.823200][ T4346] rfkill_register+0x33/0x8a0 [ 506.828428][ T4346] hci_register_dev+0x452/0x970 [ 506.834652][ T4346] vhci_create_device+0x32c/0x5c0 [ 506.840325][ T4346] vhci_write+0x391/0x450 [ 506.845197][ T4346] vfs_write+0x712/0xd00 [ 506.849980][ T4346] ksys_write+0x14d/0x250 [ 506.854845][ T4346] do_syscall_64+0x4c/0xa0 [ 506.859812][ T4346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 506.866244][ T4346] [ 506.866244][ T4346] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 506.874082][ T4346] __mutex_lock_common+0x1eb/0x2390 [ 506.879820][ T4346] mutex_lock_nested+0x17/0x20 [ 506.885117][ T4346] vhci_send_frame+0x88/0x100 [ 506.890326][ T4346] hci_send_frame+0x1a9/0x2e0 [ 506.895552][ T4346] hci_tx_work+0x9f9/0x1710 [ 506.900603][ T4346] process_one_work+0x863/0x1000 [ 506.906083][ T4346] worker_thread+0xaa8/0x12a0 [ 506.911297][ T4346] kthread+0x436/0x520 [ 506.915917][ T4346] ret_from_fork+0x1f/0x30 [ 506.920892][ T4346] [ 506.920892][ T4346] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 506.930175][ T4346] __flush_work+0xdd/0x1b0 [ 506.935134][ T4346] hci_dev_do_open+0xc58/0x1270 [ 506.940784][ T4346] hci_power_on+0x1c1/0x610 [ 506.945915][ T4346] process_one_work+0x863/0x1000 [ 506.951392][ T4346] worker_thread+0xaa8/0x12a0 [ 506.956599][ T4346] kthread+0x436/0x520 [ 506.961195][ T4346] ret_from_fork+0x1f/0x30 [ 506.966158][ T4346] [ 506.966158][ T4346] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 506.973815][ T4346] __mutex_lock_common+0x1eb/0x2390 [ 506.979549][ T4346] mutex_lock_nested+0x17/0x20 [ 506.984856][ T4346] bg_scan_update+0x44/0x3b0 [ 506.990076][ T4346] process_one_work+0x863/0x1000 [ 506.995548][ T4346] worker_thread+0xaa8/0x12a0 [ 507.000757][ T4346] kthread+0x436/0x520 [ 507.005356][ T4346] ret_from_fork+0x1f/0x30 [ 507.010311][ T4346] [ 507.010311][ T4346] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 507.020234][ T4346] __lock_acquire+0x2c33/0x7c60 [ 507.025803][ T4346] lock_acquire+0x197/0x3f0 [ 507.030844][ T4346] __flush_work+0xdd/0x1b0 [ 507.035798][ T4346] __cancel_work_timer+0x3ac/0x520 [ 507.041439][ T4346] hci_request_cancel_all+0xcc/0x300 [ 507.047285][ T4346] hci_dev_do_close+0x4e/0x1030 [ 507.052669][ T4346] hci_rfkill_set_block+0x10a/0x190 [ 507.058403][ T4346] rfkill_set_block+0x1c6/0x420 [ 507.063787][ T4346] rfkill_epo+0x75/0x170 [ 507.068547][ T4346] rfkill_op_handler+0x76/0x220 [ 507.073943][ T4346] process_one_work+0x863/0x1000 [ 507.079398][ T4346] worker_thread+0xaa8/0x12a0 [ 507.084588][ T4346] kthread+0x436/0x520 [ 507.089178][ T4346] ret_from_fork+0x1f/0x30 [ 507.094109][ T4346] [ 507.094109][ T4346] other info that might help us debug this: [ 507.094109][ T4346] [ 507.104325][ T4346] Chain exists of: [ 507.104325][ T4346] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 507.104325][ T4346] [ 507.120042][ T4346] Possible unsafe locking scenario: [ 507.120042][ T4346] [ 507.127482][ T4346] CPU0 CPU1 [ 507.133010][ T4346] ---- ---- [ 507.138374][ T4346] lock(rfkill_global_mutex); [ 507.143159][ T4346] lock(&data->open_mutex); [ 507.150282][ T4346] lock(rfkill_global_mutex); [ 507.157559][ T4346] lock((work_completion)(&hdev->bg_scan_update)); [ 507.164154][ T4346] [ 507.164154][ T4346] *** DEADLOCK *** [ 507.164154][ T4346] [ 507.172313][ T4346] 3 locks held by kworker/1:8/4346: [ 507.177496][ T4346] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 507.187842][ T4346] #1: ffffc900034ffd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 507.198882][ T4346] #2: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 507.208361][ T4346] [ 507.208361][ T4346] stack backtrace: [ 507.214241][ T4346] CPU: 1 PID: 4346 Comm: kworker/1:8 Not tainted syzkaller #0 [ 507.221693][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.231740][ T4346] Workqueue: events rfkill_op_handler [ 507.237138][ T4346] Call Trace: [ 507.240412][ T4346] [ 507.243334][ T4346] dump_stack_lvl+0x168/0x230 [ 507.248014][ T4346] ? load_image+0x3b0/0x3b0 [ 507.252519][ T4346] ? show_regs_print_info+0x20/0x20 [ 507.257719][ T4346] ? print_circular_bug+0x12b/0x1a0 [ 507.262913][ T4346] check_noncircular+0x274/0x310 [ 507.267845][ T4346] ? add_chain_block+0x940/0x940 [ 507.272789][ T4346] ? lockdep_lock+0xdc/0x1e0 [ 507.277380][ T4346] ? __lock_acquire+0x12d9/0x7c60 [ 507.282399][ T4346] ? lockdep_lock+0x1e0/0x1e0 [ 507.287069][ T4346] ? mark_lock+0x94/0x320 [ 507.291398][ T4346] __lock_acquire+0x2c33/0x7c60 [ 507.296252][ T4346] ? verify_lock_unused+0x140/0x140 [ 507.301450][ T4346] ? verify_lock_unused+0x140/0x140 [ 507.306648][ T4346] ? ret_from_fork+0x1e/0x30 [ 507.311239][ T4346] lock_acquire+0x197/0x3f0 [ 507.315736][ T4346] ? __flush_work+0xc1/0x1b0 [ 507.320321][ T4346] ? __lock_acquire+0x7c60/0x7c60 [ 507.325340][ T4346] ? read_lock_is_recursive+0x10/0x10 [ 507.330707][ T4346] ? start_flush_work+0x776/0x820 [ 507.335724][ T4346] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 507.341613][ T4346] __flush_work+0xdd/0x1b0 [ 507.346028][ T4346] ? __flush_work+0xc1/0x1b0 [ 507.350627][ T4346] ? flush_work+0x20/0x20 [ 507.354952][ T4346] ? try_to_grab_pending+0xf3/0x7e0 [ 507.360142][ T4346] ? lockdep_hardirqs_off+0x70/0x100 [ 507.365443][ T4346] ? mark_lock+0x94/0x320 [ 507.369770][ T4346] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 507.375746][ T4346] ? lock_chain_count+0x20/0x20 [ 507.380590][ T4346] ? lockdep_hardirqs_off+0x70/0x100 [ 507.385868][ T4346] ? mark_lock+0x94/0x320 [ 507.390195][ T4346] ? __cancel_work_timer+0x331/0x520 [ 507.395820][ T4346] __cancel_work_timer+0x3ac/0x520 [ 507.400963][ T4346] ? cancel_work_sync+0x20/0x20 [ 507.405807][ T4346] ? __cancel_work+0x1f4/0x2d0 [ 507.410565][ T4346] ? lockdep_hardirqs_on+0x94/0x140 [ 507.415760][ T4346] ? __cancel_work+0x26f/0x2d0 [ 507.420690][ T4346] ? cancel_work+0x20/0x20 [ 507.425103][ T4346] hci_request_cancel_all+0xcc/0x300 [ 507.430389][ T4346] hci_dev_do_close+0x4e/0x1030 [ 507.435344][ T4346] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 507.441233][ T4346] ? _raw_spin_unlock+0x40/0x40 [ 507.446079][ T4346] ? kobject_uevent_env+0x371/0x890 [ 507.451274][ T4346] hci_rfkill_set_block+0x10a/0x190 [ 507.456476][ T4346] ? rcu_lock_release+0x20/0x20 [ 507.461353][ T4346] rfkill_set_block+0x1c6/0x420 [ 507.466202][ T4346] rfkill_epo+0x75/0x170 [ 507.471073][ T4346] rfkill_op_handler+0x76/0x220 [ 507.475965][ T4346] process_one_work+0x863/0x1000 [ 507.480941][ T4346] ? worker_detach_from_pool+0x240/0x240 [ 507.486578][ T4346] ? lockdep_hardirqs_off+0x70/0x100 [ 507.491863][ T4346] ? _raw_spin_lock_irq+0xab/0xe0 [ 507.496885][ T4346] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 507.502254][ T4346] ? wq_worker_running+0x97/0x170 [ 507.507277][ T4346] worker_thread+0xaa8/0x12a0 [ 507.511970][ T4346] ? lockdep_hardirqs_on+0x94/0x140 [ 507.517165][ T4346] ? lockdep_hardirqs_on+0x94/0x140 [ 507.522357][ T4346] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 507.528248][ T4346] kthread+0x436/0x520 [ 507.532313][ T4346] ? rcu_lock_release+0x20/0x20 [ 507.537242][ T4346] ? kthread_blkcg+0xd0/0xd0 [ 507.541846][ T4346] ret_from_fork+0x1f/0x30 [ 507.546279][ T4346] [ 507.808358][ T4295] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 508.206763][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 508.224311][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 508.235513][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 508.406341][ T4295] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 508.466102][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.474288][ T4295] usb 2-1: Product: syz [ 508.479747][ T4295] usb 2-1: Manufacturer: syz [ 508.484390][ T4295] usb 2-1: SerialNumber: syz [ 508.499044][ T4295] usb 2-1: config 0 descriptor?? [ 508.769972][ T4295] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 508.986898][ T4295] usb 2-1: USB disconnect, device number 22