last executing test programs: 17m2.089598456s ago: executing program 3 (id=239): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x80000000}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 17m2.024792306s ago: executing program 3 (id=240): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x7) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x800) 17m1.972848461s ago: executing program 3 (id=241): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0xd2, 0xfdfffffbffffb5b2, 0x3a8e5b6e, 0xfffffffffffffffc, 0x6]}, &(0x7f0000000200)=0x78) 17m1.467467386s ago: executing program 3 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0) 17m1.330864038s ago: executing program 3 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2211, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0xfdef) 17m1.01234049s ago: executing program 3 (id=251): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a400000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 17m0.86407806s ago: executing program 32 (id=251): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a400000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 15m35.629957641s ago: executing program 0 (id=1312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x2, 0x1, 0x6, 0x6, 0x6, 0x81}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x1, 0xfe, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0xfffd, 0x88000}]}}}}}}, 0x42) 15m35.47417182s ago: executing program 0 (id=1314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 15m35.347662163s ago: executing program 0 (id=1316): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK', [{0x20, '`\n\t\xe5[\x19'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8\x16\x82\xb6Z\xaep\xc3\xaan\xfd\x13\xf2\xc5\x97n\xdd \x96\x0en\xe9\xaa&LN\xf0\xed<\xa7(a\xa8H\xb3\xee\x13\xe8\xb3\x8c\xd6!\xb0iJ9(|Pp\xd5\xf5\x1b\xa5\xa4\x86\xfd\x1a\xc1C\xa3u\x9d\x9d\t\x8d&V\xfe\v\x9a\xc6\x9e \xf6\x88\xaa!p\xd3nF\b\x1e9\xd3=%\xd3)\xd0%\x18\xbd\x87\xdb\x96\xbe\xc1\xfb\x00\xe1\xd3\xee\xb2P\x93\x15\xf9\xd5^\x9b\xa9\xd9\xf0\xf3\xf1\xdf&A\xdb\x97r\x99\x12|\x0e\xc0\xed\x92\xc2;\xee\x19l\x16Ww\\\xeb3\xa7\xb4XO\x1a\xf0\"\x9d\x86\xebV\xb4\xd8=h,\x84C)F\x16\xa1O\xb2\xc0\xf3\xbdT\xd1\xe5/\xa7p\x9d: \xfcwL'}, {0x20, '/dev/loop#\x00,\xc5\x18\xf4tn\xbbq\xe9\x01 \x83zY\x14\xf5\xb69\x14\x11\xdc5\x95\xfb\x03~\x1b\x1d\v}\x11d 4\xbfA\x1e/\xfc\xc3\xb8\x02\xe7J\x00\v{\xd1\x9c\xe8C\x97@-g\xdee\x1b\xb8\x00\x00'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9"}, 0x1a3) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 15m35.169759746s ago: executing program 0 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 15m35.099611666s ago: executing program 0 (id=1321): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r1, &(0x7f0000000240)=' ', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 15m34.860408704s ago: executing program 0 (id=1324): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 15m34.657227545s ago: executing program 33 (id=1324): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 14m47.473653064s ago: executing program 4 (id=1902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000540)='::', 0x2, 0x0, 0x0, 0x2}]) 14m47.24487754s ago: executing program 4 (id=1903): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) landlock_restrict_self(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23}, 0x3) 14m47.179854493s ago: executing program 4 (id=1904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7fffff4}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 14m47.005952354s ago: executing program 4 (id=1906): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 14m46.959082967s ago: executing program 4 (id=1907): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000001030600"/22, 0x16}], 0x1, 0x7, 0x1) 14m46.704133315s ago: executing program 4 (id=1911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x2, 0x0, 0xb}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x282, 0x0, 0x7}]}) 14m46.389529133s ago: executing program 34 (id=1911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x2, 0x0, 0xb}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x282, 0x0, 0x7}]}) 5.800488619s ago: executing program 2 (id=17544): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000380)="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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.589798632s ago: executing program 2 (id=17574): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) 2.339883969s ago: executing program 6 (id=17576): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @empty}, {0x0, @random="e2fecc0c5bb1"}, 0x8, {0x2, 0x0, @remote}, 'sit0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0xc, {0x2, 0x4e20, @rand_addr=0x64010102}}) 2.215887917s ago: executing program 6 (id=17577): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x10, 0x3ed, 0x1, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) 2.206715771s ago: executing program 6 (id=17578): syz_usb_connect$uac1(0x2, 0x96, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x81, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2e}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x405, 0x1, 0x6, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x1, 0x3, 0x1, 0x1], 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x402, 0x6, 0xfa, 0x8, 0x5, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x3, 0x2, {0x7, 0x25, 0x1, 0xc, 0xff, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0xf5, 0x5, {0x7, 0x25, 0x1, 0x8, 0x3f, 0xa4}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1555555555555620}) 1.945413696s ago: executing program 1 (id=17579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) setresuid(0x0, 0xee01, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000240)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c98c4e3a90d78df000f3566b857000f00d0", 0x4e}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.88214294s ago: executing program 1 (id=17580): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'pim6reg\x00', 0x4}) 1.727789863s ago: executing program 1 (id=17581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) r1 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/mcfilter6\x00') r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000d00)=""/93, 0x5d}, {&(0x7f0000000d80)=""/4096, 0x1000}, {0x0}], 0x4, 0xb, 0x100) 1.678804404s ago: executing program 2 (id=17582): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000c80)={0x1f, 0x58, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 1.48132179s ago: executing program 2 (id=17583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x200, 0x1d8, 0x20}, 0x18) mknodat(r3, 0x0, 0x1, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r4, 0x0, r4, 0x0, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, 0x0, 0x0) 859.596538ms ago: executing program 1 (id=17584): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 658.941772ms ago: executing program 6 (id=17586): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) 555.841561ms ago: executing program 1 (id=17588): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000200)={0x40, 0xdebda7d818a07a1e, 0x4, "b36f539c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x3, 0x2, {0x2, 0xb}}, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x0, 0xd, "34f1553c93d9b46b464015384c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 516.817569ms ago: executing program 2 (id=17589): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x101, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 447.425362ms ago: executing program 6 (id=17590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000001080)={{0x2c, @multicast2, 0x2, 0x0, 'fo\x00', 0x4, 0x5, 0x2000000}, {@private=0xa010102, 0x2, 0x0, 0x7ffffff, 0x0, 0x20100}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 379.775987ms ago: executing program 2 (id=17591): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x7f, {0x0, 0x5, 0x7, 0xbed8, 0x7, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r1, r2, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 374.027993ms ago: executing program 6 (id=17592): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x103702, 0x0) 171.82247ms ago: executing program 5 (id=17596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 159.580961ms ago: executing program 5 (id=17597): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) io_submit(0x0, 0x0, 0x0) 111.99759ms ago: executing program 5 (id=17598): r0 = eventfd2(0x74a6, 0x800) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) 36.355713ms ago: executing program 5 (id=17599): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) 36.052209ms ago: executing program 5 (id=17600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}}, 0x808) 20.083355ms ago: executing program 5 (id=17601): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) statfs(&(0x7f0000000140)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r0) 0s ago: executing program 1 (id=17602): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x1}) kernel console output (not intermixed with test programs): event} for writing: No such file or directory [ 745.010999][ T30] audit: type=1326 audit(1773785613.952:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29303 comm="syz.2.9625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7ce59c799 code=0x0 [ 745.133498][ T1155] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 745.323019][ T24] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 745.465881][T29309] nla_validate_range_unsigned: 109 callbacks suppressed [ 745.465917][T29309] netlink: 'syz.1.9627': attribute type 11 has an invalid length. [ 745.473058][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 745.489815][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 745.501966][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 745.511882][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.520813][ T24] usb 6-1: Product: syz [ 745.526626][ T24] usb 6-1: Manufacturer: syz [ 745.531782][ T24] usb 6-1: SerialNumber: syz [ 745.538928][ T24] usb 6-1: config 0 descriptor?? [ 745.548694][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 745.878242][ T30] audit: type=1800 audit(1773785614.822:920): pid=29316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9630" name="nullb0" dev="tmpfs" ino=5266 res=0 errno=0 [ 746.151933][ T24] gspca_zc3xx: reg_w_i err -71 [ 746.743031][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 746.749356][ T24] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 746.762052][ T24] usb 6-1: USB disconnect, device number 108 [ 746.895937][ T30] audit: type=1326 audit(1773785615.842:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29334 comm="syz.5.9638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6c79c799 code=0x0 [ 748.323271][ T24] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 748.472957][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 748.479779][ T24] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 748.488185][ T24] usb 6-1: config 0 has no interface number 0 [ 748.496961][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 748.506105][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.514180][ T24] usb 6-1: Product: syz [ 748.518365][ T24] usb 6-1: Manufacturer: syz [ 748.523096][ T24] usb 6-1: SerialNumber: syz [ 748.529893][ T24] usb 6-1: config 0 descriptor?? [ 748.537158][ T24] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 748.707617][ T30] audit: type=1326 audit(1773785617.652:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29372 comm="syz.6.9653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f675b59c799 code=0x0 [ 748.752032][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 748.764597][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 749.157229][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 749.158579][ T2173] usb 6-1: USB disconnect, device number 109 [ 749.187365][ T2173] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 749.215112][ T2173] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 749.236989][ T2173] quatech2 6-1:0.51: device disconnected [ 750.074260][ T2173] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 750.245716][ T2173] usb 6-1: Using ep0 maxpacket: 8 [ 750.256653][ T2173] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 750.276862][ T2173] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 750.295615][ T2173] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 750.306914][ T2173] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.321604][ T2173] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 750.331063][ T2173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.592709][ T2173] usb 6-1: GET_CAPABILITIES returned 0 [ 750.602755][ T2173] usbtmc 6-1:16.0: can't read capabilities [ 750.774370][ T30] audit: type=1800 audit(1773785619.722:923): pid=29462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9691" name="nullb0" dev="tmpfs" ino=5266 res=0 errno=0 [ 750.811933][ T2173] usb 6-1: USB disconnect, device number 110 [ 751.425399][ T30] audit: type=1326 audit(1773785620.372:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29504 comm="syz.6.9708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f675b59c799 code=0x0 [ 751.774185][ T2173] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 751.929371][T29532] ªªªªªª5gæ¹Q[Ô: renamed from lo [ 751.945586][ T2173] usb 6-1: Using ep0 maxpacket: 16 [ 751.957412][ T2173] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 751.966780][ T2173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.975438][ T2173] usb 6-1: Product: syz [ 751.979763][ T2173] usb 6-1: Manufacturer: syz [ 751.984820][ T2173] usb 6-1: SerialNumber: syz [ 752.001943][ T2173] usb 6-1: config 0 descriptor?? [ 752.308968][ T30] audit: type=1326 audit(1773785621.252:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29541 comm="syz.1.9734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12999c799 code=0x0 [ 752.422454][ T2173] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 752.452616][ T2173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 752.478024][ T2173] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 752.487196][ T2173] usb 6-1: media controller created [ 752.501786][ T2173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 753.053328][ T2173] zl10353_read_register: readreg error (reg=127, ret==0) [ 753.053701][T29512] dtv5100: wlen = 7, aborting. [ 753.060600][ T2173] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 753.060692][ T2173] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 753.128009][ T2173] usb 6-1: USB disconnect, device number 111 [ 753.165748][ T2173] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 753.768291][T29575] bridge0: entered allmulticast mode [ 753.774516][T29575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9740'. [ 753.783972][T29575] bridge_slave_1: left allmulticast mode [ 753.789860][T29575] bridge_slave_1: left promiscuous mode [ 753.796133][T29575] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.813923][T29575] bridge_slave_0: left allmulticast mode [ 753.819732][T29575] bridge_slave_0: left promiscuous mode [ 753.829579][T29575] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.864450][T29575] bridge0 (unregistering): left allmulticast mode [ 753.891163][ T30] audit: type=1326 audit(1773785622.832:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29578 comm="syz.5.9742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6c79c799 code=0x0 [ 754.635836][T29613] lo speed is unknown, defaulting to 1000 [ 755.216411][T29613] wg0 speed is unknown, defaulting to 1000 [ 755.441914][ T30] audit: type=1326 audit(1773785624.382:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29637 comm="syz.2.9768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7ce59c799 code=0x0 [ 756.322122][T29678] overlayfs: failed to resolve './cgroup': -2 [ 756.330728][T29678] overlayfs: failed to clone lowerpath [ 756.533156][T29694] netlink: 'syz.1.9791': attribute type 3 has an invalid length. [ 756.589436][T29700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9790'. [ 756.596512][ T30] audit: type=1326 audit(1773785625.532:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29699 comm="syz.1.9792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12999c799 code=0x0 [ 757.142974][ T2173] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 757.280605][T29717] overlayfs: failed to clone upperpath [ 757.295403][ T2173] usb 6-1: Using ep0 maxpacket: 8 [ 757.303383][ T2173] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 757.316400][ T2173] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 757.326037][ T2173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.334607][ T2173] usb 6-1: Product: syz [ 757.338943][ T2173] usb 6-1: Manufacturer: syz [ 757.344056][ T2173] usb 6-1: SerialNumber: syz [ 757.351815][ T2173] usb 6-1: config 0 descriptor?? [ 757.368262][ T2173] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 758.373160][ T2173] gspca_zc3xx: reg_w_i err -71 [ 758.964752][ T2173] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 758.974606][ T2173] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 759.002730][ T2173] usb 6-1: USB disconnect, device number 112 [ 760.192687][T29825] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9838'. [ 760.220331][T29825] netlink: 'syz.5.9838': attribute type 10 has an invalid length. [ 760.241015][T29825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.272523][T29825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.296974][ T30] audit: type=1326 audit(1773785629.242:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.1.9848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12999c799 code=0x0 [ 760.702945][ T2173] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 760.862918][ T2173] usb 6-1: Using ep0 maxpacket: 32 [ 760.869642][ T2173] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 760.878929][ T2173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.889692][ T2173] usb 6-1: config 0 descriptor?? [ 760.899083][ T2173] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 761.877048][ T30] audit: type=1326 audit(1773785630.822:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29873 comm="syz.6.9858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f675b59c799 code=0x0 [ 761.953126][T29876] netlink: 'syz.2.9859': attribute type 3 has an invalid length. [ 762.031125][T29881] fuse: fd is not a fuse device [ 762.108361][ T2173] gspca_vc032x: reg_w err -71 [ 762.115311][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.120686][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.126956][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.132335][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.142048][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.148000][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.154378][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.159743][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.165684][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.171037][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.177063][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.182744][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.188399][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.193973][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.199424][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.205512][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.210991][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.216645][ T2173] gspca_vc032x: I2c Bus Busy Wait 00 [ 762.222072][ T2173] gspca_vc032x: Unknown sensor... [ 762.227414][ T2173] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 762.233489][T29887] fuse: fd is not a fuse device [ 762.237579][ T2173] usb 6-1: USB disconnect, device number 113 [ 762.418838][T29899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9867'. [ 762.447428][T29899] netlink: 'syz.2.9867': attribute type 10 has an invalid length. [ 762.720710][T29913] fuse: fd is not a fuse device [ 763.872042][T29950] lo speed is unknown, defaulting to 1000 [ 764.153502][ T808] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 764.281936][T29950] wg0 speed is unknown, defaulting to 1000 [ 764.322979][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 764.334661][ T808] usb 6-1: config 0 has no interfaces? [ 764.341471][ T808] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 764.373078][ T808] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 764.394421][ T808] usb 6-1: Manufacturer: syz [ 764.440545][ T808] usb 6-1: config 0 descriptor?? [ 764.710531][ T808] usb 6-1: USB disconnect, device number 114 [ 765.837219][ T30] audit: type=1326 audit(1773785634.782:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29976 comm="syz.6.9900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f675b59c799 code=0x0 [ 765.952951][ T2173] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 766.114680][ T2173] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 766.123967][ T2173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.136704][ T2173] usb 6-1: config 0 descriptor?? [ 766.891713][T30003] 8021q: VLANs not supported on syzkaller0 [ 767.354020][ T2173] usb 6-1: Cannot set autoneg [ 767.359819][ T2173] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 767.377941][ T2173] usb 6-1: USB disconnect, device number 115 [ 768.141796][T30029] kvm: kvm [30028]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 769.078221][ T30] audit: type=1326 audit(1773785638.022:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.1.9940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12999c799 code=0x0 [ 769.186714][T30075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9940'. [ 769.649770][ T51] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 769.922987][ T9] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 769.947290][T30094] overlayfs: failed to clone upperpath [ 770.093155][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 770.098295][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 770.106703][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 770.117874][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 770.127053][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.137665][ T9] usb 6-1: config 0 descriptor?? [ 770.352704][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 770.771235][ T9] usb 6-1: USB disconnect, device number 116 [ 770.871822][T30115] overlayfs: failed to clone upperpath [ 771.435559][T30145] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 771.557416][ T30] audit: type=1326 audit(1773785640.502:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30151 comm="syz.5.9974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6c79c799 code=0x0 [ 771.664491][T30154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9974'. [ 771.673677][T30154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9974'. [ 772.528507][T30176] overlayfs: failed to resolve './cgroup': -2 [ 773.685919][ T9] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 773.853058][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 773.861639][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.872406][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 773.881802][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.896089][ T9] usb 6-1: config 0 descriptor?? [ 773.909241][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 773.965891][T30246] fuse: fd is not a fuse device [ 774.302331][T30269] fuse: fd is not a fuse device [ 774.839828][T30284] overlayfs: failed to clone upperpath [ 775.331365][ T9] usb 6-1: USB disconnect, device number 117 [ 775.561818][T30312] fuse: fd is not a fuse device [ 775.853923][T30327] overlayfs: failed to clone upperpath [ 775.960734][T30334] fuse: fd is not a fuse device [ 776.040354][T30340] fuse: fd is not a fuse device ‚ ýïÿÿÿÿÿÿýÿÿÿÿÿÿÿ@ üÿÿÿÿÿ  @ ïý/dev/fusefd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)à̆@sÿÿÿ[ 776.594786][T30376] overlayfs: failed to clone upperpath ./file0/file0./file0fuseh-ûÿÿsß[ 777.398392][T30385] fuse: fd is not a fuse device [ 777.730050][T30398] fuse: fd is not a fuse device [ 780.251364][T30479] fuse: fd is not a fuse device [ 780.316043][T30482] fuse: fd is not a fuse device [ 780.530131][T30498] fuse: fd is not a fuse device [ 780.592093][T30502] fuse: fd is not a fuse device [ 780.657916][T30506] tipc: Enabled bearer , priority 0 [ 780.751872][T30512] fuse: fd is not a fuse device [ 781.228118][T30521] fuse: fd is not a fuse device [ 781.448736][T30524] md: could not open device unknown-block(0,0). [ 781.456313][T30524] md: md_import_device returned -6 [ 782.025587][T30552] fuse: fd is not a fuse device [ 782.089119][T30557] fuse: fd is not a fuse device [ 782.237085][ T30] audit: type=1800 audit(1773785651.182:934): pid=30566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10156" name="nullb0" dev="tmpfs" ino=10607 res=0 errno=0 [ 782.366174][T30576] fuse: fd is not a fuse device [ 782.455490][T30580] tipc: Bearer : already 2 bearers with priority 0 [ 782.474257][T30580] tipc: Enabling of bearer rejected, cannot adjust to lower [ 783.089017][T30615] fuse: fd is not a fuse device [ 783.152968][ T2173] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 783.315692][ T2173] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 783.324987][ T2173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.335707][ T2173] usb 6-1: config 0 descriptor?? [ 783.577282][T30635] fuse: fd is not a fuse device [ 784.159978][T30669] fuse: fd is not a fuse device [ 784.174675][T30671] overlayfs: failed to clone upperpath [ 784.301171][T30680] fuse: fd is not a fuse device [ 784.505291][T30690] lo speed is unknown, defaulting to 1000 [ 784.716828][T30690] wg0 speed is unknown, defaulting to 1000 [ 785.198099][ T2173] usb 6-1: Cannot set autoneg [ 785.209747][ T2173] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 785.262511][ T2173] usb 6-1: USB disconnect, device number 118 [ 785.401565][T30714] fuse: fd is not a fuse device [ 785.481172][T30716] fuse: fd is not a fuse device [ 785.517944][T30718] fuse: fd is not a fuse device [ 785.580402][ T30] audit: type=1326 audit(1773785654.522:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30723 comm="syz.6.10225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f675b59c799 code=0x0 [ 786.112649][ T30] audit: type=1804 audit(1773785655.052:936): pid=30739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.10232" name="/newroot/1764/file0" dev="fuse" ino=1 res=1 errno=0 [ 786.447662][ T30] audit: type=1326 audit(1773785655.392:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30753 comm="syz.1.10246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12999c799 code=0x0 [ 786.627286][T30766] fuse: fd is not a fuse device [ 786.788463][T30772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10245'. [ 787.336246][T30789] fuse: fd is not a fuse device [ 787.483036][ T2173] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 787.600084][T30801] fuse: fd is not a fuse device [ 787.643111][ T2173] usb 6-1: Using ep0 maxpacket: 32 [ 787.651721][ T2173] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 787.661180][ T2173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.669380][ T2173] usb 6-1: Product: syz [ 787.673736][ T2173] usb 6-1: Manufacturer: syz [ 787.678345][ T2173] usb 6-1: SerialNumber: syz [ 787.690888][ T2173] usb 6-1: config 0 descriptor?? [ 787.705949][ T2173] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 787.770523][ T30] audit: type=1326 audit(1773785656.712:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30806 comm="syz.6.10259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f675b59c799 code=0x0 [ 788.640017][T30812] fuse: fd is not a fuse device [ 788.701559][T30816] overlayfs: failed to clone upperpath [ 789.670645][ T30] audit: type=1326 audit(1773785658.612:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30836 comm="syz.2.10272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7ce59c799 code=0x0 [ 789.916008][ T2173] gspca_ov534_9: reg_r err -71 [ 790.212955][ T2173] gspca_ov534_9: Unknown sensor 0000 [ 790.213078][ T2173] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 790.230023][ T2173] usb 6-1: USB disconnect, device number 119 [ 790.683241][T30871] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10285'. [ 791.005545][T30877] fuse: fd is not a fuse device [ 791.290659][ T30] audit: type=1326 audit(1773785660.232:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.1.10291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12999c799 code=0x0 [ 791.822960][ T24] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 791.973177][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 791.979906][ T24] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 791.988219][ T24] usb 6-1: config 0 has no interface number 0 [ 791.994404][ T24] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.006075][ T24] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.016725][ T24] usb 6-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 792.029584][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 792.038780][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.048996][ T24] usb 6-1: config 0 descriptor?? [ 792.278413][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.287606][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.296524][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.307620][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.318279][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.329481][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.341730][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.361944][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.382360][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.402565][ T5937] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 792.433184][T30913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10300'. [ 792.458110][ T5937] hid-generic 0006:0004:0009.004B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 792.567728][T30914] fido_id[30914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 792.610536][ T24] logitech-djreceiver 0003:046D:C537.004C: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.5-1/input4 [ 792.631840][ T24] usb 6-1: USB disconnect, device number 120 [ 792.678252][T30916] fido_id[30916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 793.027360][T30918] fuse: fd is not a fuse device [ 793.074061][T30920] fuse: fd is not a fuse device [ 793.148559][ T30] audit: type=1326 audit(1773785662.082:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.1.10303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12999c799 code=0x0 [ 793.267089][T30924] lo speed is unknown, defaulting to 1000 [ 793.498431][T30924] wg0 speed is unknown, defaulting to 1000 [ 793.820913][T30947] lo speed is unknown, defaulting to 1000 [ 794.099012][T30952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10315'. [ 794.316179][T30947] wg0 speed is unknown, defaulting to 1000 [ 794.591617][T30968] lo speed is unknown, defaulting to 1000 [ 794.895330][T30968] wg0 speed is unknown, defaulting to 1000 [ 795.533085][ T9] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 795.723140][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 795.737386][ T9] usb 6-1: config 0 has no interfaces? [ 795.761185][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 795.771458][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.799097][ T9] usb 6-1: config 0 descriptor?? [ 795.928900][T31002] netlink: 'syz.1.10334': attribute type 10 has an invalid length. [ 795.947832][T31002] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 795.961217][T31002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10334'. [ 796.015350][T30987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.026275][T30987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.075621][ T5884] usb 6-1: USB disconnect, device number 121 [ 797.383329][ T5884] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 797.545736][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.558616][ T5884] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 797.568782][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.582011][ T5884] usb 6-1: config 0 descriptor?? [ 797.592487][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 797.994748][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 798.002304][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 798.010965][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 798.022786][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 798.030641][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 798.038218][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 798.046093][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 798.054129][ T5884] pwc: recv_control_msg error -32 req 02 val 2100 [ 798.061500][ T5884] pwc: recv_control_msg error -32 req 04 val 1500 [ 798.069085][ T5884] pwc: recv_control_msg error -32 req 02 val 2500 [ 798.281793][ T5884] pwc: recv_control_msg error -32 req 02 val 2600 [ 798.299530][ T5884] pwc: recv_control_msg error -32 req 02 val 2900 [ 798.330894][ T5884] pwc: recv_control_msg error -32 req 02 val 2800 [ 798.354508][ T5884] pwc: recv_control_msg error -32 req 04 val 1100 [ 798.852056][ T5884] pwc: Registered as video103. [ 798.875060][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input82 [ 799.053886][ T5884] usb 6-1: USB disconnect, device number 122 [ 799.660094][ T51] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 799.716205][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 800.013094][ T5884] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 800.167834][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 800.176481][ T5884] usb 6-1: config 9 has an invalid interface number: 212 but max is 0 [ 800.184710][ T5884] usb 6-1: config 9 has no interface number 0 [ 800.190788][ T5884] usb 6-1: config 9 interface 212 has no altsetting 0 [ 800.199473][ T5884] usb 6-1: New USB device found, idVendor=413c, idProduct=2c8d, bcdDevice= 8.1c [ 800.208655][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.216740][ T5884] usb 6-1: Product: syz [ 800.220909][ T5884] usb 6-1: Manufacturer: syz [ 800.225523][ T5884] usb 6-1: SerialNumber: syz [ 800.450956][ T5884] usb 6-1: USB disconnect, device number 123 [ 801.226562][T31219] lo speed is unknown, defaulting to 1000 [ 801.337872][T31219] wg0 speed is unknown, defaulting to 1000 [ 801.363275][ T5884] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 801.546221][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 801.560249][ T5884] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 801.599855][ T5884] usb 6-1: config 179 has no interface number 0 [ 801.619557][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 801.685622][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 801.715711][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 801.743399][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 801.788208][ T5884] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 801.819462][ T5884] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 801.850730][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.039518][ T5884] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input83 [ 802.123068][T31249] netlink: 'syz.1.10450': attribute type 10 has an invalid length. [ 802.131757][T31249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10450'. [ 802.173929][ T5884] usb 6-1: USB disconnect, device number 124 [ 802.180010][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 802.677784][ T51] Bluetooth: hci2: link tx timeout [ 803.182966][ T2173] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 803.332957][ T2173] usb 6-1: Using ep0 maxpacket: 32 [ 803.339722][ T2173] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 803.347874][ T2173] usb 6-1: config 0 has no interface number 0 [ 803.356622][ T2173] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 803.366622][ T2173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.375725][ T2173] usb 6-1: Product: syz [ 803.379909][ T2173] usb 6-1: Manufacturer: syz [ 803.385899][ T2173] usb 6-1: SerialNumber: syz [ 803.396669][ T2173] usb 6-1: config 0 descriptor?? [ 803.821112][ T2173] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 803.832211][ T2173] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 807.290815][ T2173] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000024: -71 [ 807.323262][ T2173] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 807.351074][ T2173] usb 6-1: USB disconnect, device number 125 [ 812.423122][ T2173] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 812.573440][ T2173] usb 6-1: Using ep0 maxpacket: 16 [ 812.587198][ T2173] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.622903][ T2173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.635771][ T2173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.651352][ T2173] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 812.661758][ T2173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.678405][ T2173] usb 6-1: config 0 descriptor?? [ 813.094679][ T2173] hid_parser_main: 14 callbacks suppressed [ 813.094701][ T2173] hid-picolcd 0003:04D8:F002.004D: unknown main item tag 0x0 [ 813.110270][ T2173] hid-picolcd 0003:04D8:F002.004D: unknown main item tag 0x0 [ 813.117767][ T2173] hid-picolcd 0003:04D8:F002.004D: unknown main item tag 0x0 [ 813.126335][ T2173] hid-picolcd 0003:04D8:F002.004D: unknown main item tag 0x0 [ 813.134061][ T2173] hid-picolcd 0003:04D8:F002.004D: unknown main item tag 0x0 [ 813.203209][ T2173] hid-picolcd 0003:04D8:F002.004D: No report with id 0xf3 found [ 813.210972][ T2173] hid-picolcd 0003:04D8:F002.004D: No report with id 0xf4 found [ 813.287596][T31692] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10656'. [ 813.301782][ T808] usb 6-1: USB disconnect, device number 126 [ 815.043271][ T2173] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 815.204622][ T2173] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 815.213074][ T2173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.225605][ T2173] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 815.234756][ T2173] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 815.242780][ T2173] usb 6-1: Manufacturer: syz [ 815.249909][ T2173] usb 6-1: config 0 descriptor?? [ 815.305233][ T2173] rc_core: IR keymap rc-hauppauge not found [ 815.311213][ T2173] Registered IR keymap rc-empty [ 815.317329][ T2173] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 815.328894][ T2173] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input85 [ 815.671816][ C0] igorplugusb 6-1:0.0: receive overflow invalid: 226 [ 815.880870][ T5884] usb 6-1: USB disconnect, device number 127 [ 816.415582][ T51] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 816.683099][ T2173] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 816.834399][ T2173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 816.846015][ T2173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 816.857834][ T2173] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 816.871656][ T2173] usb 6-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 816.881145][ T2173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.895158][ T2173] usb 6-1: config 0 descriptor?? [ 816.910663][T31783] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 817.330475][ T2173] logitech-hidpp-device 0003:046D:C081.004E: ignoring exceeding usage max [ 817.340180][ T2173] logitech-hidpp-device 0003:046D:C081.004E: item fetching failed at offset 24/40 [ 817.350708][ T2173] logitech-hidpp-device 0003:046D:C081.004E: hidpp_probe:parse failed [ 817.359054][ T2173] logitech-hidpp-device 0003:046D:C081.004E: probe with driver logitech-hidpp-device failed with error -22 [ 817.532065][ T2173] usb 6-1: USB disconnect, device number 2 [ 818.303185][ T808] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 818.456884][ T808] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 818.466077][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.474398][ T808] usb 6-1: Product: syz [ 818.478659][ T808] usb 6-1: Manufacturer: syz [ 818.483665][ T808] usb 6-1: SerialNumber: syz [ 818.491181][ T808] usb 6-1: config 0 descriptor?? [ 818.498439][ T808] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 818.902395][ T808] gspca_sunplus: reg_w_riv err -71 [ 818.908701][ T808] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 818.920143][ T808] usb 6-1: USB disconnect, device number 3 [ 819.746939][T31859] 9p: Bad value for 'rfdno' [ 821.323016][ T5884] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 821.472985][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 821.479588][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.490112][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 821.501282][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 821.511017][ T5884] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 821.520784][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.535600][ T5884] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 821.544709][ T5884] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 821.552691][ T5884] usb 6-1: Manufacturer: syz [ 821.560004][ T5884] usb 6-1: config 0 descriptor?? [ 821.832981][ T5884] rc_core: IR keymap rc-hauppauge not found [ 821.838936][ T5884] Registered IR keymap rc-empty [ 821.844811][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 821.863022][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 821.884631][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 821.911122][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input86 [ 821.945524][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 821.973116][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.007714][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.033171][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.053021][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.083334][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.112959][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.134095][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.153125][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.173231][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.205137][ T5884] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 822.213188][ T5884] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 822.234209][ T2173] usb 6-1: USB disconnect, device number 4 [ 823.102922][ T5884] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 823.255360][ T5884] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 823.265027][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 823.279069][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 823.292585][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 823.303437][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 823.316594][ T5884] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 823.325952][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.338413][ T5884] usb 6-1: config 0 descriptor?? [ 823.772062][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.779875][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.788473][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.796074][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.803658][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.811675][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.820018][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.827581][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.835295][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.842802][ T5884] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 823.858791][ T5884] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 824.034452][ T5905] usb 6-1: USB disconnect, device number 5 [ 824.101998][T32018] ptrace attach of "./syz-executor exec"[10790] was attempted by ""[32018] [ 824.591378][T32026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10808'. [ 824.962594][T32048] overlayfs: failed to resolve './cgroup': -2 [ 824.985550][T32048] overlayfs: failed to clone lowerpath [ 825.120215][T32054] netlink: 'syz.5.10823': attribute type 3 has an invalid length. [ 825.322918][T32067] lo speed is unknown, defaulting to 1000 [ 825.558481][T32067] wg0 speed is unknown, defaulting to 1000 [ 825.766258][T32076] fuse: fd is not a fuse device [ 826.592910][ T5884] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 826.754897][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.765254][ T5884] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 826.775120][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.800223][ T5884] usb 6-1: config 0 descriptor?? [ 826.818418][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 827.220389][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 827.235354][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 827.242593][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 827.254250][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 827.261465][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 827.269441][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 827.278902][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 827.287238][ T5884] pwc: recv_control_msg error -32 req 02 val 2100 [ 827.295175][ T5884] pwc: recv_control_msg error -32 req 04 val 1500 [ 827.305426][ T5884] pwc: recv_control_msg error -32 req 02 val 2500 [ 827.513256][ T5884] pwc: recv_control_msg error -32 req 02 val 2600 [ 827.520661][ T5884] pwc: recv_control_msg error -32 req 02 val 2900 [ 827.528616][ T5884] pwc: recv_control_msg error -32 req 02 val 2800 [ 827.738467][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 827.766999][ T5884] pwc: Registered as video103. [ 827.790557][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input87 [ 827.829724][ T5884] usb 6-1: USB disconnect, device number 6 [ 828.001047][T32141] fuse: fd is not a fuse device [ 828.800981][T32166] netlink: 'syz.6.10871': attribute type 3 has an invalid length. [ 828.836148][T32168] fuse: fd is not a fuse device [ 829.061810][T32182] fuse: fd is not a fuse device [ 829.462055][T32209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10889'. [ 829.743018][ T5884] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 829.828017][T32224] fuse: fd is not a fuse device [ 829.896146][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.916899][ T5884] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 829.929484][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.941303][ T5884] usb 6-1: config 0 descriptor?? [ 829.961789][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 830.369933][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 830.377266][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 830.385432][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 830.392551][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 830.400066][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 830.408427][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 830.416040][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 830.425080][ T5884] pwc: recv_control_msg error -32 req 02 val 2100 [ 830.432588][ T5884] pwc: recv_control_msg error -32 req 04 val 1500 [ 830.438325][ T30] audit: type=1326 audit(1773785699.372:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.1.10912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12999c799 code=0x0 [ 830.440239][ T5884] pwc: recv_control_msg error -32 req 02 val 2500 [ 830.670403][ T5884] pwc: recv_control_msg error -32 req 02 val 2600 [ 830.694272][ T5884] pwc: recv_control_msg error -32 req 02 val 2900 [ 830.709810][ T5884] pwc: recv_control_msg error -32 req 02 val 2800 [ 830.792678][T32264] fuse: fd is not a fuse device [ 830.919688][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 830.947620][ T5884] pwc: Registered as video103. [ 830.956812][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input88 [ 830.993620][ T5884] usb 6-1: USB disconnect, device number 7 [ 831.107506][T32282] overlayfs: failed to clone upperpath [ 831.202050][T32286] overlayfs: failed to clone upperpath [ 831.872943][ T5905] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 831.950276][T32314] overlayfs: failed to clone upperpath [ 832.024003][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 832.030942][ T5905] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 832.040150][ T5905] usb 6-1: config 0 has no interface number 0 [ 832.046432][ T5905] usb 6-1: config 0 interface 184 has no altsetting 0 [ 832.055528][ T5905] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 832.064740][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.072754][ T5905] usb 6-1: Product: syz [ 832.077279][ T5905] usb 6-1: Manufacturer: syz [ 832.081912][ T5905] usb 6-1: SerialNumber: syz [ 832.089816][ T5905] usb 6-1: config 0 descriptor?? [ 832.250710][T32324] overlayfs: failed to clone upperpath [ 832.294144][T32326] overlayfs: failed to clone upperpath [ 832.540012][T32341] overlayfs: failed to clone upperpath [ 832.706276][T32352] overlayfs: failed to resolve './cgroup': -2 [ 832.919877][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 832.945793][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 832.956011][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 832.974161][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 832.985467][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 832.996138][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 833.017928][ T5905] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 833.046841][ T5905] usb 6-1: USB disconnect, device number 8 [ 833.116641][T32376] fuse: fd is not a fuse device [ 833.214019][T32384] fuse: fd is not a fuse device [ 833.378619][T32394] overlayfs: failed to clone upperpath [ 833.663709][T32413] fuse: fd is not a fuse device [ 833.792285][T32419] kvm: pic: single mode not supported [ 833.792307][T32419] kvm: pic: level sensitive irq not supported [ 833.943820][T32432] fuse: fd is not a fuse device [ 834.234843][ T5905] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 834.415008][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 834.431919][ T5905] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 834.451395][ T5905] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 834.471743][ T5905] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 834.481728][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 834.493667][ T5905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 834.503971][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 834.519798][ T5905] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 834.529397][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.543105][ T5905] usb 6-1: config 0 descriptor?? [ 834.682401][T32482] fuse: fd is not a fuse device [ 834.760648][ T5905] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 835.016799][ T5905] usb 6-1: USB disconnect, device number 9 [ 835.039567][ T5905] usblp0: removed [ 835.406242][T32515] tipc: Bearer : already 2 bearers with priority 0 [ 835.415821][T32515] tipc: Enabling of bearer rejected, cannot adjust to lower [ 835.592595][T32528] fuse: fd is not a fuse device [ 835.908099][T32547] tipc: Enabling of bearer rejected, already enabled [ 835.917882][T32547] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 835.926308][T32547] tipc: Resetting bearer [ 836.373174][ T5937] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 836.533153][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 836.547086][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.562342][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.574302][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 836.589347][ T5937] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 836.598936][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.611091][ T5937] usb 6-1: config 0 descriptor?? [ 836.625232][T32577] fuse: fd is not a fuse device [ 837.049164][ T5937] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0050/input/input89 [ 837.142298][ T5937] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0050/input/input90 [ 837.226477][ T5937] kye 0003:0458:5011.0050: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 837.328069][T32603] overlayfs: failed to clone upperpath [ 838.183110][ C0] kye 0003:0458:5011.0050: usb_submit_urb(ctrl) failed: -1 [ 838.650197][T32639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11076'. [ 838.955668][T32659] overlayfs: failed to clone upperpath [ 838.992931][ T808] usb 6-1: USB disconnect, device number 10 [ 839.206938][T32667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 839.932967][ T5937] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 840.083465][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 840.098846][T32699] fuse: fd is not a fuse device [ 840.108307][ T5937] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 840.122231][ T5937] usb 6-1: config 0 has no interface number 0 [ 840.132099][ T5937] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.142449][ T5937] usb 6-1: config 0 interface 89 has no altsetting 0 [ 840.156006][ T5937] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 840.165296][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.173977][ T5937] usb 6-1: Product: syz [ 840.178248][ T5937] usb 6-1: Manufacturer: syz [ 840.183293][ T5937] usb 6-1: SerialNumber: syz [ 840.191139][ T5937] usb 6-1: config 0 descriptor?? [ 840.207192][ T5937] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 840.218527][ T5937] em28xx 6-1:0.89: Video interface 89 found: [ 840.399661][T32717] fuse: fd is not a fuse device [ 840.421555][T32719] fuse: fd is not a fuse device [ 840.812182][ T5937] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 841.402591][T32742] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11122'. [ 841.833025][ T5937] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 841.843439][ T5937] em28xx 6-1:0.89: board has no eeprom [ 841.903056][ T5937] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 841.910500][ T5937] em28xx 6-1:0.89: analog set to bulk mode. [ 841.916588][ T5905] em28xx 6-1:0.89: Registering V4L2 extension [ 841.940051][ T5937] usb 6-1: USB disconnect, device number 11 [ 841.957714][ T5905] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 841.970123][ T5937] em28xx 6-1:0.89: Disconnecting em28xx [ 841.983287][ T5905] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 841.995760][ T5905] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 842.004178][ T5905] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 842.013973][ T5905] em28xx 6-1:0.89: No AC97 audio processor [ 842.024999][ T5905] usb 6-1: Decoder not found [ 842.029624][ T5905] em28xx 6-1:0.89: failed to create media graph [ 842.035977][ T5905] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 842.050037][ T5905] em28xx 6-1:0.89: Registering snapshot button... [ 842.059054][ T5905] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input91 [ 842.078966][ T5905] em28xx 6-1:0.89: Remote control support is not available for this card. [ 842.087655][ T5937] em28xx 6-1:0.89: Closing input extension [ 842.095174][ T5937] em28xx 6-1:0.89: Deregistering snapshot button [ 842.125158][ T5937] em28xx 6-1:0.89: Freeing device [ 842.598801][ T320] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11140'. [ 843.157389][ T348] tipc: Enabling of bearer rejected, already enabled [ 844.623085][ T5905] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 844.696587][ T400] netlink: 'syz.6.11173': attribute type 10 has an invalid length. [ 844.730197][ T400] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 844.783014][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 844.799883][ T5905] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 844.820871][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.837364][ T5905] usb 6-1: Product: syz [ 844.842149][ T5905] usb 6-1: Manufacturer: syz [ 844.847313][ T5905] usb 6-1: SerialNumber: syz [ 844.861694][ T5905] usb 6-1: config 0 descriptor?? [ 845.107098][ T5905] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 846.635890][ T5905] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 846.660469][ T5905] usb 6-1: USB disconnect, device number 12 [ 846.750770][ T437] fuse: fd is not a fuse device [ 847.284779][ T464] fuse: fd is not a fuse device [ 848.154619][ T30] audit: type=1326 audit(1774310005.069:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=512 comm="syz.1.11222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12999c799 code=0x0 [ 849.916795][ T610] fuse: fd is not a fuse device [ 851.048004][ T5905] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 851.213559][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 851.232164][ T5905] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 851.248534][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.260230][ T5905] usb 6-1: Product: syz [ 851.264779][ T5905] usb 6-1: Manufacturer: syz [ 851.269945][ T5905] usb 6-1: SerialNumber: syz [ 851.279140][ T5905] usb 6-1: config 0 descriptor?? [ 851.501539][ T5905] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 852.944064][ T5905] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 852.972107][ T5905] usb 6-1: USB disconnect, device number 13 [ 856.696774][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 856.858273][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 856.870792][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 856.879382][ T24] usb 6-1: config 0 has no interface number 0 [ 856.888666][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 856.897867][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.906272][ T24] usb 6-1: Product: syz [ 856.916551][ T24] usb 6-1: Manufacturer: syz [ 856.922192][ T24] usb 6-1: SerialNumber: syz [ 856.935139][ T24] usb 6-1: config 0 descriptor?? [ 857.361782][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 857.392617][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 859.849067][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 859.874841][ T24] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 859.905914][ T24] usb 6-1: USB disconnect, device number 14 [ 882.817432][ T5905] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 882.998266][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 883.014149][ T5905] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 883.040827][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.069605][ T5905] usb 6-1: Product: syz [ 883.078629][ T5905] usb 6-1: Manufacturer: syz [ 883.088610][ T5905] usb 6-1: SerialNumber: syz [ 883.114389][ T5905] usb 6-1: config 0 descriptor?? [ 883.344156][ T5905] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 884.773503][ T5905] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 884.808167][ T5905] usb 6-1: USB disconnect, device number 15 [ 895.830091][ T5905] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 896.005739][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.034007][ T5905] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 896.057694][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.071744][ T5905] usb 6-1: config 0 descriptor?? [ 896.081138][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 896.487425][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 896.502082][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 896.522917][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 896.540748][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 896.552607][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 896.568052][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 896.579946][ T5905] pwc: recv_control_msg error -32 req 02 val 2000 [ 896.599730][ T5905] pwc: recv_control_msg error -32 req 02 val 2100 [ 896.620898][ T5905] pwc: recv_control_msg error -32 req 04 val 1500 [ 896.837941][ T5905] pwc: recv_control_msg error -32 req 02 val 2400 [ 896.863116][ T5905] pwc: recv_control_msg error -32 req 02 val 2600 [ 896.876661][ T5905] pwc: recv_control_msg error -32 req 02 val 2900 [ 897.089694][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 897.104300][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 897.117725][ T5905] pwc: Registered as video103. [ 897.152911][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input92 [ 897.176456][ T5905] usb 6-1: USB disconnect, device number 16 [ 905.842739][ T808] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 906.006861][ T808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.017146][ T808] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 906.029914][ T808] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 906.054942][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.077908][ T808] usb 6-1: config 0 descriptor?? [ 908.657827][ T5905] usb 6-1: USB disconnect, device number 17 [ 916.962918][ T5937] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 917.137460][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.177263][ T5937] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 917.200328][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.225915][ T5937] usb 6-1: config 0 descriptor?? [ 917.250054][ T5937] pwc: Askey VC010 type 2 USB webcam detected. [ 917.658797][ T5937] pwc: recv_control_msg error -32 req 02 val 2b00 [ 917.672975][ T5937] pwc: recv_control_msg error -32 req 02 val 2700 [ 917.690529][ T5937] pwc: recv_control_msg error -32 req 02 val 2c00 [ 917.705112][ T5937] pwc: recv_control_msg error -32 req 04 val 1000 [ 917.730543][ T5937] pwc: recv_control_msg error -32 req 04 val 1300 [ 917.748215][ T5937] pwc: recv_control_msg error -32 req 04 val 1400 [ 917.760970][ T5937] pwc: recv_control_msg error -32 req 02 val 2000 [ 917.783093][ T5937] pwc: recv_control_msg error -32 req 02 val 2100 [ 917.802536][ T5937] pwc: recv_control_msg error -32 req 04 val 1500 [ 918.016758][ T5937] pwc: recv_control_msg error -32 req 02 val 2400 [ 918.031757][ T5937] pwc: recv_control_msg error -32 req 02 val 2600 [ 918.040844][ T5937] pwc: recv_control_msg error -32 req 02 val 2900 [ 918.258697][ T5937] pwc: recv_control_msg error -71 req 04 val 1100 [ 918.280860][ T5937] pwc: recv_control_msg error -71 req 04 val 1200 [ 918.311443][ T5937] pwc: Registered as video103. [ 918.332471][ T5937] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input93 [ 918.387081][ T5937] usb 6-1: USB disconnect, device number 18 [ 920.000627][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 920.200457][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.213816][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 920.240897][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.259057][ T24] usb 6-1: config 0 descriptor?? [ 920.298348][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 920.700605][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 920.721618][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 920.745109][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 920.767073][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 920.782971][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 920.805764][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 920.821185][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 920.840666][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 920.860462][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 920.868655][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 920.878207][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 920.897988][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 920.919597][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 920.937690][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 920.946950][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 920.967034][ T24] pwc: Registered as video103. [ 920.986353][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input94 [ 921.167889][ T24] usb 6-1: USB disconnect, device number 19 [ 925.744109][ T2173] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 925.906084][ T2173] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.945068][ T2173] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 925.959727][ T2173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.978537][ T2173] usb 6-1: config 0 descriptor?? [ 926.008141][ T2173] pwc: Askey VC010 type 2 USB webcam detected. [ 926.414087][ T2173] pwc: recv_control_msg error -32 req 02 val 2b00 [ 926.429942][ T2173] pwc: recv_control_msg error -32 req 02 val 2700 [ 926.441639][ T2173] pwc: recv_control_msg error -32 req 02 val 2c00 [ 926.466934][ T2173] pwc: recv_control_msg error -32 req 04 val 1000 [ 926.487585][ T2173] pwc: recv_control_msg error -32 req 04 val 1300 [ 926.500603][ T2173] pwc: recv_control_msg error -32 req 04 val 1400 [ 926.513915][ T2173] pwc: recv_control_msg error -32 req 02 val 2000 [ 926.534106][ T2173] pwc: recv_control_msg error -32 req 02 val 2100 [ 926.554401][ T2173] pwc: recv_control_msg error -32 req 04 val 1500 [ 926.574162][ T2173] pwc: recv_control_msg error -32 req 02 val 2500 [ 926.792458][ T2173] pwc: recv_control_msg error -32 req 02 val 2600 [ 926.818003][ T2173] pwc: recv_control_msg error -32 req 02 val 2900 [ 926.835367][ T2173] pwc: recv_control_msg error -32 req 02 val 2800 [ 926.855345][ T2173] pwc: recv_control_msg error -32 req 04 val 1100 [ 926.879490][ T2173] pwc: Registered as video103. [ 926.900080][ T2173] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input95 [ 927.080156][ T2173] usb 6-1: USB disconnect, device number 20 [ 942.987283][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 943.157738][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 943.181165][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 943.204050][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.218740][ T24] usb 6-1: Product: syz [ 943.222966][ T24] usb 6-1: Manufacturer: syz [ 943.228407][ T24] usb 6-1: SerialNumber: syz [ 943.251195][ T24] usb 6-1: config 0 descriptor?? [ 943.470944][ T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 944.476463][ T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 945.796969][ T24] usb 6-1: USB disconnect, device number 21 [ 974.990687][ T5937] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 975.160220][ T5937] usb 6-1: Using ep0 maxpacket: 8 [ 975.181839][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.198107][ T5937] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 975.211139][ T5937] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 975.226523][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.251844][ T5937] usb 6-1: Product: syz [ 975.260940][ T5937] usb 6-1: Manufacturer: syz [ 975.270286][ T5937] usb 6-1: SerialNumber: syz [ 975.293897][ T5937] usb 6-1: config 0 descriptor?? [ 977.814958][ T5884] usb 6-1: USB disconnect, device number 22 [ 1018.285313][ T808] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1018.459802][ T808] usb 6-1: Using ep0 maxpacket: 8 [ 1018.478652][ T808] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1018.501461][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.521143][ T808] usb 6-1: Product: syz [ 1018.528091][ T808] usb 6-1: Manufacturer: syz [ 1018.533121][ T808] usb 6-1: SerialNumber: syz [ 1018.541056][ T808] usb 6-1: config 0 descriptor?? [ 1018.766969][ T808] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1019.995306][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1020.013080][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1020.022648][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1020.030170][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1020.037928][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1020.045404][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1020.053020][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1020.060405][ T808] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1020.085310][ T808] usb 6-1: USB disconnect, device number 23 [ 1021.203404][ T5884] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1021.373477][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 1021.390137][ T5884] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1021.412280][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.433721][ T5884] usb 6-1: Product: syz [ 1021.446306][ T5884] usb 6-1: Manufacturer: syz [ 1021.456151][ T5884] usb 6-1: SerialNumber: syz [ 1021.473705][ T5884] usb 6-1: config 0 descriptor?? [ 1021.696830][ T5884] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1022.915816][ T5884] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1022.946708][ T5884] usb 6-1: USB disconnect, device number 24 [ 1044.563376][ T2173] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1044.733454][ T2173] usb 6-1: Using ep0 maxpacket: 8 [ 1044.752839][ T2173] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1044.782685][ T2173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.810004][ T2173] usb 6-1: Product: syz [ 1044.823117][ T2173] usb 6-1: Manufacturer: syz [ 1044.827785][ T2173] usb 6-1: SerialNumber: syz [ 1044.862084][ T2173] usb 6-1: config 0 descriptor?? [ 1045.087148][ T2173] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1046.304096][ T2173] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1046.335883][ T2173] usb 6-1: USB disconnect, device number 25 [ 1048.466144][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1048.487081][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1048.505366][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1048.513899][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1048.521734][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1048.586281][T13561] lo speed is unknown, defaulting to 1000 [ 1048.867210][T13561] wg0 speed is unknown, defaulting to 1000 [ 1049.460722][T13561] chnl_net:caif_netlink_parms(): no params data found [ 1050.184206][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.222116][T13561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.256918][T13561] bridge_slave_0: entered allmulticast mode [ 1050.280639][T13561] bridge_slave_0: entered promiscuous mode [ 1050.310592][T13561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.333546][T13561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.353840][T13561] bridge_slave_1: entered allmulticast mode [ 1050.375849][T13561] bridge_slave_1: entered promiscuous mode [ 1050.566226][ T51] Bluetooth: hci4: command tx timeout [ 1050.622044][T13561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.639649][T13561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.686556][T13561] team0: Port device team_slave_0 added [ 1050.698308][T13561] team0: Port device team_slave_1 added [ 1050.788064][T13561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.809444][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.859406][T13561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.889067][T13561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.898241][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.927311][T13561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.083319][T13561] hsr_slave_0: entered promiscuous mode [ 1051.102574][T13561] hsr_slave_1: entered promiscuous mode [ 1051.118782][T13561] debugfs: 'hsr0' already exists in 'hsr' [ 1051.132588][T13561] Cannot create hsr debugfs directory [ 1051.856678][T13561] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.161554][T13561] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.327884][T13561] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.441753][T13561] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.646171][ T51] Bluetooth: hci4: command tx timeout [ 1053.083290][T13561] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1053.132974][T13561] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1053.211727][T13561] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1053.240546][T13561] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1053.552733][T13561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.636294][T13561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.669754][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.676992][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.737950][ T533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.745172][ T533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.400217][T13561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.631781][T13561] veth0_vlan: entered promiscuous mode [ 1054.693431][T13561] veth1_vlan: entered promiscuous mode [ 1054.736283][ T51] Bluetooth: hci4: command tx timeout [ 1054.882419][T13561] veth0_macvtap: entered promiscuous mode [ 1054.916278][T13561] veth1_macvtap: entered promiscuous mode [ 1054.965160][T13561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.033193][T13561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.092172][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.101996][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.137543][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.163367][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.522541][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.550600][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.643188][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.672785][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.503216][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1056.527206][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1056.536606][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1056.546940][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1056.555484][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1056.731729][T13866] lo speed is unknown, defaulting to 1000 [ 1056.809419][ T51] Bluetooth: hci4: command tx timeout [ 1057.319879][T13866] wg0 speed is unknown, defaulting to 1000 [ 1057.853332][T13866] chnl_net:caif_netlink_parms(): no params data found [ 1058.016705][T13866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.024739][T13866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.036808][T13866] bridge_slave_0: entered allmulticast mode [ 1058.064908][T13866] bridge_slave_0: entered promiscuous mode [ 1058.105984][T13866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.134678][T13866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.158490][T13866] bridge_slave_1: entered allmulticast mode [ 1058.185152][T13866] bridge_slave_1: entered promiscuous mode [ 1058.295107][T13866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.330202][T13866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.453552][T13866] team0: Port device team_slave_0 added [ 1058.467663][T13866] team0: Port device team_slave_1 added [ 1058.562818][T13866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.592072][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.627458][T13866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.641649][T13866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.654046][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.658568][ T51] Bluetooth: hci0: command tx timeout [ 1058.682459][T13866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.921859][T13866] hsr_slave_0: entered promiscuous mode [ 1058.958258][T13866] hsr_slave_1: entered promiscuous mode [ 1058.971344][T13866] debugfs: 'hsr0' already exists in 'hsr' [ 1058.980579][T13866] Cannot create hsr debugfs directory [ 1059.638538][T13866] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.024172][T13866] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.226422][T13866] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.450784][T13866] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 1060.467730][T13866] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.730600][ T51] Bluetooth: hci0: command tx timeout [ 1061.039879][T13866] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1061.053611][T13866] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1061.071408][T13866] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1061.106992][T13866] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1061.372761][T13866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.423996][T13866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.459324][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.466549][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.497763][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.505007][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.004735][T13866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.576678][T13866] veth0_vlan: entered promiscuous mode [ 1062.606896][T13866] veth1_vlan: entered promiscuous mode [ 1062.720785][T13866] veth0_macvtap: entered promiscuous mode [ 1062.755139][T13866] veth1_macvtap: entered promiscuous mode [ 1062.808619][ T51] Bluetooth: hci0: command tx timeout [ 1062.826945][T13866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.872512][T13866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.930165][ T1158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.943563][ T1158] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.953093][ T1158] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.976748][ T1158] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.272560][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.304026][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.379318][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.388020][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.190879][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1064.208040][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1064.218183][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1064.234679][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1064.242537][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1064.378944][T14154] lo speed is unknown, defaulting to 1000 [ 1064.889548][ T51] Bluetooth: hci0: command tx timeout [ 1065.023576][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.125954][T14154] wg0 speed is unknown, defaulting to 1000 [ 1065.360380][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.518764][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.730492][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.888442][T14154] chnl_net:caif_netlink_parms(): no params data found [ 1066.364989][ T51] Bluetooth: hci1: command tx timeout [ 1066.621642][T14154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.637011][T14154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.639521][ T5937] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1066.644999][T14154] bridge_slave_0: entered allmulticast mode [ 1066.662917][T14154] bridge_slave_0: entered promiscuous mode [ 1066.704074][T14154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.712072][T14154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.719736][T14154] bridge_slave_1: entered allmulticast mode [ 1066.728376][T14154] bridge_slave_1: entered promiscuous mode [ 1066.812103][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.850720][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.884022][ T5937] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1066.931047][T14154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.949476][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.014453][ T5937] usb 2-1: config 0 descriptor?? [ 1067.500148][T14154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.652693][ T58] bridge_slave_1: left allmulticast mode [ 1067.669735][ T58] bridge_slave_1: left promiscuous mode [ 1067.681560][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.703155][ T58] bridge_slave_0: left allmulticast mode [ 1067.710203][ T58] bridge_slave_0: left promiscuous mode [ 1067.723622][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.744247][ T5937] usbhid 2-1:0.0: can't add hid device: -71 [ 1067.757688][ T58] pimreg: left allmulticast mode [ 1067.762711][ T5937] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1067.777989][ T5937] usb 2-1: USB disconnect, device number 71 [ 1067.823213][ T58] tipc: Resetting bearer [ 1067.882485][ T30] audit: type=1326 audit(1774310224.336:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.5.17321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6c79c799 code=0x0 [ 1068.194562][ T58] tipc: Disabling bearer [ 1068.252593][ T5937] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1068.342874][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.361075][ T58] bond_slave_0: left promiscuous mode [ 1068.381198][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.400658][ T58] bond_slave_1: left promiscuous mode [ 1068.410299][ T51] Bluetooth: hci1: command tx timeout [ 1068.419039][ T58] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1068.444545][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.467727][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.481937][ T58] batadv_slave_0: left promiscuous mode [ 1068.500900][ T5937] usb 2-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 1068.512283][ T58] bond0 (unregistering): (slave 4): Releasing backup interface [ 1068.528389][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.542575][ T58] mac80211_hwsim hwsim9 4: left promiscuous mode [ 1068.561353][ T58] bond0 (unregistering): (slave team0): Releasing backup interface [ 1068.570708][ T5937] usb 2-1: config 0 descriptor?? [ 1068.581715][ T58] team0: left promiscuous mode [ 1068.592545][ T58] team_slave_0: left promiscuous mode [ 1068.598369][ T58] team_slave_1: left promiscuous mode [ 1068.612251][ T58] bond0 (unregistering): Released all slaves [ 1068.664218][T14154] team0: Port device team_slave_0 added [ 1068.713067][T14154] team0: Port device team_slave_1 added [ 1068.765210][ T58] tipc: Disabling bearer [ 1068.780829][ T58] tipc: Left network mode [ 1068.835815][T14154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.844250][T14154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.949525][T14154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.984403][T14154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.992055][T14154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.060784][ T5937] hid_parser_main: 5 callbacks suppressed [ 1069.060806][ T5937] plantronics 0003:047F:3333.0051: unknown main item tag 0x0 [ 1069.071682][T14263] overlay: Unknown parameter '/' [ 1069.099687][T14154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.158897][ T5937] plantronics 0003:047F:3333.0051: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:3333] on usb-dummy_hcd.1-1/input0 [ 1069.301505][T13830] usb 2-1: USB disconnect, device number 72 [ 1069.402247][T14266] fido_id[14266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1069.478175][T14154] hsr_slave_0: entered promiscuous mode [ 1069.495778][T14154] hsr_slave_1: entered promiscuous mode [ 1069.548869][T14154] debugfs: 'hsr0' already exists in 'hsr' [ 1069.567105][T14154] Cannot create hsr debugfs directory [ 1070.494126][ T51] Bluetooth: hci1: command tx timeout [ 1072.049798][T14310] netlink: 104 bytes leftover after parsing attributes in process `syz.6.17333'. [ 1072.571451][ T51] Bluetooth: hci1: command tx timeout [ 1073.967342][T14344] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1073.994922][T14154] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1074.084546][T14154] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1074.171652][T14154] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1074.196923][T14154] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1074.343511][ T58] hsr_slave_0: left promiscuous mode [ 1074.366095][ T58] hsr_slave_1: left promiscuous mode [ 1074.399258][ T58] veth1_macvtap: left promiscuous mode [ 1074.427734][ T58] veth0_macvtap: left promiscuous mode [ 1074.447423][ T58] veth1_vlan: left promiscuous mode [ 1075.197223][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1075.219679][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1075.747429][T14154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.886254][T14154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.384479][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.391789][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.290186][ T58] IPVS: stop unused estimator thread 0... [ 1077.296269][T14416] lo speed is unknown, defaulting to 1000 [ 1077.546630][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.553886][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.594624][T14416] wg0 speed is unknown, defaulting to 1000 [ 1077.824759][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1078.032381][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1078.043286][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.061661][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1078.096394][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1078.116123][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.149792][ T9] usb 7-1: Product: syz [ 1078.160262][ T9] usb 7-1: Manufacturer: syz [ 1078.188138][ T9] usb 7-1: SerialNumber: syz [ 1078.223092][ T5937] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1078.248941][ T9] usb 7-1: skipping empty audio interface (v1) [ 1078.392052][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 1078.422243][ T5937] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 1078.436579][ T5937] usb 2-1: config 2 has no interface number 0 [ 1078.449125][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1078.468039][ T5937] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1078.485724][ T9] usb 7-1: USB disconnect, device number 37 [ 1078.501696][ T5937] usb 2-1: config 2 interface 88 has no altsetting 0 [ 1078.513782][T14154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.523552][T30609] udevd[30609]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.541953][ T5937] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1078.555982][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.588806][ T5937] usb 2-1: Product: syz [ 1078.595743][ T5937] usb 2-1: Manufacturer: syz [ 1078.600486][ T5937] usb 2-1: SerialNumber: syz [ 1078.616566][T14438] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1078.722518][T14154] veth0_vlan: entered promiscuous mode [ 1078.746694][T14154] veth1_vlan: entered promiscuous mode [ 1078.844652][T14438] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1078.858749][T14154] veth0_macvtap: entered promiscuous mode [ 1078.889245][T14154] veth1_macvtap: entered promiscuous mode [ 1078.966162][T14154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.011843][T14154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.037979][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.071217][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.117467][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.193344][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.379918][ T533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.405172][ T533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.514576][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.544814][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.878323][ T5937] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1079.920997][ T5937] asix 2-1:2.88: probe with driver asix failed with error -71 [ 1079.952381][ T5937] usb 2-1: USB disconnect, device number 73 [ 1081.201296][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1081.221402][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1081.234558][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1081.249784][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1081.264039][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1081.408711][T14497] lo speed is unknown, defaulting to 1000 [ 1081.956152][T14497] wg0 speed is unknown, defaulting to 1000 [ 1082.643565][T14497] chnl_net:caif_netlink_parms(): no params data found [ 1082.780610][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.780721][T14525] binder: 14524:14525 ioctl c0046209 0 returned -22 [ 1083.132055][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17381'. [ 1083.437867][ T51] Bluetooth: hci3: command tx timeout [ 1083.588546][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.838170][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.857220][T14497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.864800][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.872105][T14497] bridge_slave_0: entered allmulticast mode [ 1083.881962][T14497] bridge_slave_0: entered promiscuous mode [ 1083.899951][T14497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.919096][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.929478][T14497] bridge_slave_1: entered allmulticast mode [ 1083.952826][T14497] bridge_slave_1: entered promiscuous mode [ 1084.069666][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.205726][T14497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.239054][T14497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.349205][T14497] team0: Port device team_slave_0 added [ 1084.390080][T14497] team0: Port device team_slave_1 added [ 1084.562276][T14497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.570561][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.604083][T14497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.631024][T14497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.643887][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.673347][T14497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.061587][T14567] netlink: 'syz.6.17394': attribute type 2 has an invalid length. [ 1085.072694][T14567] netlink: 'syz.6.17394': attribute type 8 has an invalid length. [ 1085.116185][T14497] hsr_slave_0: entered promiscuous mode [ 1085.124164][T14497] hsr_slave_1: entered promiscuous mode [ 1085.139392][T14497] debugfs: 'hsr0' already exists in 'hsr' [ 1085.147645][T14497] Cannot create hsr debugfs directory [ 1085.167952][ T13] pimreg: left allmulticast mode [ 1085.179815][ T13] tipc: Resetting bearer [ 1085.454352][ T51] Bluetooth: hci3: command tx timeout [ 1085.485798][ T13] tipc: Disabling bearer [ 1085.609051][ T13] tipc: Disabling bearer [ 1085.623292][ T13] tipc: Left network mode [ 1086.983871][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17411'. [ 1087.059789][T14619] netlink: 64 bytes leftover after parsing attributes in process `syz.6.17411'. [ 1087.534200][ T51] Bluetooth: hci3: command tx timeout [ 1087.952719][ T13] hsr_slave_0: left promiscuous mode [ 1087.976073][ T13] hsr_slave_1: left promiscuous mode [ 1087.988931][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.019200][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.039309][ T13] veth1_macvtap: left promiscuous mode [ 1088.054776][ T13] veth0_macvtap: left promiscuous mode [ 1088.066166][ T13] veth1_vlan: left promiscuous mode [ 1088.073904][ T13] veth0_vlan: left promiscuous mode [ 1088.684111][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1088.818004][T14662] tipc: Started in network mode [ 1088.827885][T14662] tipc: Node identity ac14140f, cluster identity 4711 [ 1088.855952][T14662] tipc: New replicast peer: 255.255.255.255 [ 1088.866915][T14662] tipc: Enabled bearer , priority 10 [ 1088.913728][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1088.924747][T14662] tipc: Enabled bearer , priority 10 [ 1088.936728][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1088.973666][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1088.993729][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 1089.032140][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 1089.048780][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.070994][ T9] usb 3-1: Product: syz [ 1089.085313][ T9] usb 3-1: SerialNumber: syz [ 1089.441476][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 1089.454101][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1089.489178][ T9] usb 3-1: USB disconnect, device number 55 [ 1089.566012][ T13] IPVS: stop unused estimator thread 0... [ 1089.602557][T14497] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1089.614522][ T51] Bluetooth: hci3: command tx timeout [ 1089.656311][T14497] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1089.672540][T14497] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1089.693496][T14497] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1089.954736][T14497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.023237][T14497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.043959][ T9] tipc: Node number set to 2886997007 [ 1090.089153][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.096529][T14536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.199063][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.206294][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.659456][T14497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.027645][T14497] veth0_vlan: entered promiscuous mode [ 1091.059343][T14497] veth1_vlan: entered promiscuous mode [ 1091.130378][T14497] veth0_macvtap: entered promiscuous mode [ 1091.154603][T14497] veth1_macvtap: entered promiscuous mode [ 1091.253548][T14497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.306830][T14497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.368824][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.368883][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.368909][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.368933][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.529918][T13827] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1091.639405][T14536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.664096][T14536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.706665][T13827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.719603][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.726589][T14752] D: renamed from syzkaller0 [ 1091.745782][T13827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1091.754674][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.782502][T13827] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1091.796079][T13827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1091.809978][T13827] usb 3-1: SerialNumber: syz [ 1092.035651][ T5884] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1092.047416][T13827] usb 3-1: 0:2 : does not exist [ 1092.120730][T13827] usb 3-1: USB disconnect, device number 56 [ 1092.196693][ T5884] usb 7-1: Using ep0 maxpacket: 16 [ 1092.222833][ T5884] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.236750][ T5884] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.249642][ T5884] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1092.302168][ T5884] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1092.325775][ T5884] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1092.338843][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.371846][ T5884] usb 7-1: config 0 descriptor?? [ 1093.022381][ T5937] usb 7-1: USB disconnect, device number 38 [ 1093.918915][ T30] audit: type=1326 audit(1774310250.371:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1093.965253][T13827] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1093.994488][ T30] audit: type=1326 audit(1774310250.371:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1094.068592][ T30] audit: type=1326 audit(1774310250.371:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1094.091818][ T30] audit: type=1326 audit(1774310250.371:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1094.136857][T13827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.149861][T13827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.160166][T13827] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1094.173620][T13827] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1094.224190][ T30] audit: type=1326 audit(1774310250.371:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1094.224441][T13827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.248218][ T30] audit: type=1326 audit(1774310250.371:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1094.323525][ T30] audit: type=1326 audit(1774310250.371:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1094.324177][T13827] usb 6-1: config 0 descriptor?? [ 1094.352914][ T30] audit: type=1326 audit(1774310250.371:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1094.422131][ T30] audit: type=1326 audit(1774310250.371:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1094.460875][ T30] audit: type=1326 audit(1774310250.371:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.17467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c459c799 code=0x7ffc0000 [ 1094.832224][T13827] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1095.705132][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1095.868171][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1095.876546][ T24] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1095.886218][ T24] usb 3-1: config 0 has no interface number 0 [ 1095.892575][ T24] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1095.904589][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1095.913894][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.921958][ T24] usb 3-1: Product: syz [ 1095.926185][ T24] usb 3-1: Manufacturer: syz [ 1095.930784][ T24] usb 3-1: SerialNumber: syz [ 1095.938794][ T24] usb 3-1: config 0 descriptor?? [ 1095.950050][T14833] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1096.169287][T14833] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1096.208908][T14845] lo speed is unknown, defaulting to 1000 [ 1096.350463][T14845] wg0 speed is unknown, defaulting to 1000 [ 1096.511228][T14849] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1096.948459][ T808] usb 6-1: USB disconnect, device number 26 [ 1097.071264][ T24] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1097.095370][ T24] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1097.115688][ T24] asix 3-1:0.188: probe with driver asix failed with error -32 [ 1097.555789][T14869] syzkaller0: entered promiscuous mode [ 1097.561392][T14869] syzkaller0: entered allmulticast mode [ 1098.320577][T14893] random: crng reseeded on system resumption [ 1098.394728][T14895] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.404002][T14895] binder: 14894:14895 ioctl 4018620d 200000004a80 returned -16 [ 1098.509774][ T24] usb 3-1: USB disconnect, device number 57 [ 1099.736282][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1099.761040][T14917] binder: BINDER_SET_CONTEXT_MGR already set [ 1099.771538][T14917] binder: 14916:14917 ioctl 4018620d 200000004a80 returned -16 [ 1099.905773][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1100.025799][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1100.067916][ T24] usb 3-1: config 179 has no interface number 0 [ 1100.108951][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1100.151766][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1100.171911][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1100.203564][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1100.219817][ T24] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1100.235919][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1100.247083][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.362599][T14903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1100.709674][ T808] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input99 [ 1101.111919][T14903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.140171][T14903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.174021][T14933] cgroup: Unknown subsys name 'appraise' [ 1101.269382][T14935] binder: 14934:14935 ioctl c0306201 200000000900 returned -14 [ 1101.412580][ T808] usb 3-1: USB disconnect, device number 58 [ 1101.418779][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1101.418828][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1101.492264][T14941] binder: BINDER_SET_CONTEXT_MGR already set [ 1101.514762][T14941] binder: 14940:14941 ioctl 4018620d 200000004a80 returned -16 [ 1101.556617][T13826] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1101.756171][T13826] usb 6-1: Using ep0 maxpacket: 32 [ 1101.773704][T13826] usb 6-1: config index 0 descriptor too short (expected 2340, got 36) [ 1101.792479][T13826] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.818891][T13826] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1101.832316][T13826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.853647][T13826] usb 6-1: Product: syz [ 1101.858293][T13826] usb 6-1: Manufacturer: syz [ 1101.863087][T13826] usb 6-1: SerialNumber: syz [ 1101.879157][T13826] usb 6-1: config 0 descriptor?? [ 1101.887939][T13826] asix 6-1:0.0: probe with driver asix failed with error -22 [ 1102.104031][T13826] usb 6-1: USB disconnect, device number 27 [ 1103.677517][T15005] fuse: Bad value for 'fd' [ 1103.726227][T15006] fuse: fd is not a fuse device [ 1104.121584][T14988] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1104.129660][T14988] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1104.153859][T14988] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1104.164955][T14988] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1104.171238][T14988] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1104.208686][T14988] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1104.219381][T14988] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1104.225402][T14988] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1104.232786][T14988] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1104.242293][T14988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1104.248632][T14988] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1104.258179][T14988] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1104.536401][ T808] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1104.728060][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 1104.735458][ T808] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.750307][ T808] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.760640][ T808] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1104.935925][ T808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1104.943176][ T808] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1104.952375][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.969217][ T808] usb 3-1: config 0 descriptor?? [ 1105.376797][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1105.496100][T15047] fuse: fd is not a fuse device [ 1105.639286][ T808] hid (null): unknown global tag 0xe [ 1105.651707][ T808] hid (null): report_id 1769218660 is invalid [ 1105.666442][ T808] hid (null): unknown global tag 0xe [ 1105.858761][ T24] usb 3-1: USB disconnect, device number 59 [ 1106.177148][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1106.200591][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1106.200603][ T30] audit: type=1326 audit(1774310262.649:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15065 comm="syz.1.17573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a6679c799 code=0x0 [ 1106.256739][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 1106.262829][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1106.326577][ T808] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1106.487386][ T808] usb 6-1: Using ep0 maxpacket: 8 [ 1106.494619][ T808] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1106.504846][ T808] usb 6-1: config 179 has no interface number 0 [ 1106.512083][ T808] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1106.523896][ T808] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1106.537170][ T808] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1106.563352][ T808] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1106.580734][ T808] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1106.589606][T15072] binder: BINDER_SET_CONTEXT_MGR already set [ 1106.596767][ T808] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1106.600353][T15072] binder: 15071:15072 ioctl 4018620d 200000004a80 returned -16 [ 1106.618377][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.631288][T15064] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1106.884640][ T808] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input100 [ 1107.049240][T13826] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1107.083130][T15064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.103881][T15064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.235354][T13826] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1107.246009][T13826] usb 7-1: not running at top speed; connect to a high speed hub [ 1107.260862][T13826] usb 7-1: string descriptor 0 read error: -22 [ 1107.280586][T13826] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1107.298386][T13826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.345986][ T9] usb 6-1: USB disconnect, device number 28 [ 1107.345986][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1107.346119][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1107.355568][T13826] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1107.457971][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1107.530754][T13826] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1107.551226][T13826] usb 7-1: 6:0: failed to get current value for ch 1 (-22) [ 1107.569365][T13826] usb 7-1: 6:0: failed to get current value for ch 0 (-22) [ 1107.652832][T13826] usb 7-1: USB disconnect, device number 39 [ 1108.257954][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1108.336910][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 1108.343206][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1108.506156][T15105] random: crng reseeded on system resumption [ 1108.896952][ T24] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1109.015780][T15135] [ 1109.018121][T15135] ====================================================== [ 1109.025272][T15135] WARNING: possible circular locking dependency detected [ 1109.032351][T15135] syzkaller #0 Tainted: G L [ 1109.038313][T15135] ------------------------------------------------------ [ 1109.045365][T15135] syz.1.17602/15135 is trying to acquire lock: [ 1109.051504][T15135] ffff88803772b538 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 1109.060436][T15135] [ 1109.060436][T15135] but task is already holding lock: [ 1109.067792][T15135] ffff8880793f9530 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 1109.077559][T15135] [ 1109.077559][T15135] which lock already depends on the new lock. [ 1109.077559][T15135] [ 1109.087948][T15135] [ 1109.087948][T15135] the existing dependency chain (in reverse order) is: [ 1109.096945][T15135] [ 1109.096945][T15135] -> #1 (&ctx->map_changing_lock){++++}-{4:4}: [ 1109.105368][T15135] down_read+0x47/0x2e0 [ 1109.110044][T15135] mwriteprotect_range+0x1af/0x530 [ 1109.115662][T15135] userfaultfd_ioctl+0x3aa1/0x4c70 [ 1109.121282][T15135] __se_sys_ioctl+0xfc/0x170 [ 1109.126376][T15135] do_syscall_64+0x14d/0xf80 [ 1109.131468][T15135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.137866][T15135] [ 1109.137866][T15135] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 1109.145405][T15135] __lock_acquire+0x15a5/0x2cf0 [ 1109.150762][T15135] lock_acquire+0xf0/0x2e0 [ 1109.155684][T15135] __might_fault+0xcb/0x130 [ 1109.160697][T15135] userfaultfd_ioctl+0x2372/0x4c70 [ 1109.166315][T15135] __se_sys_ioctl+0xfc/0x170 [ 1109.171439][T15135] do_syscall_64+0x14d/0xf80 [ 1109.176556][T15135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.182953][T15135] [ 1109.182953][T15135] other info that might help us debug this: [ 1109.182953][T15135] [ 1109.193161][T15135] Possible unsafe locking scenario: [ 1109.193161][T15135] [ 1109.200595][T15135] CPU0 CPU1 [ 1109.206012][T15135] ---- ---- [ 1109.211377][T15135] rlock(&ctx->map_changing_lock); [ 1109.216576][T15135] lock(&mm->mmap_lock); [ 1109.223412][T15135] lock(&ctx->map_changing_lock); [ 1109.231036][T15135] rlock(&mm->mmap_lock); [ 1109.235441][T15135] [ 1109.235441][T15135] *** DEADLOCK *** [ 1109.235441][T15135] [ 1109.243635][T15135] 2 locks held by syz.1.17602/15135: [ 1109.248924][T15135] #0: ffff88807d7966c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1109.258223][T15135] #1: ffff8880793f9530 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 1109.268386][T15135] [ 1109.268386][T15135] stack backtrace: [ 1109.274260][T15135] CPU: 0 UID: 0 PID: 15135 Comm: syz.1.17602 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.274280][T15135] Tainted: [L]=SOFTLOCKUP [ 1109.274286][T15135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.274295][T15135] Call Trace: [ 1109.274302][T15135] [ 1109.274310][T15135] dump_stack_lvl+0xe8/0x150 [ 1109.274331][T15135] print_circular_bug+0x2e1/0x300 [ 1109.274347][T15135] check_noncircular+0x12e/0x150 [ 1109.274363][T15135] __lock_acquire+0x15a5/0x2cf0 [ 1109.274382][T15135] ? __kernel_text_address+0xd/0x30 [ 1109.274398][T15135] ? unwind_get_return_address+0x4d/0x90 [ 1109.274412][T15135] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1109.274430][T15135] lock_acquire+0xf0/0x2e0 [ 1109.274447][T15135] ? __might_fault+0xaf/0x130 [ 1109.274465][T15135] ? __might_fault+0xaf/0x130 [ 1109.274480][T15135] __might_fault+0xcb/0x130 [ 1109.274494][T15135] ? __might_fault+0xaf/0x130 [ 1109.274509][T15135] userfaultfd_ioctl+0x2372/0x4c70 [ 1109.274527][T15135] ? __kasan_slab_free+0x5c/0x80 [ 1109.274537][T15135] ? kfree+0x1c5/0x650 [ 1109.274556][T15135] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1109.274579][T15135] ? kasan_quarantine_put+0xbb/0x1f0 [ 1109.274597][T15135] ? tomoyo_path_number_perm+0x219/0x630 [ 1109.274684][T15135] ? tomoyo_path_number_perm+0x219/0x630 [ 1109.274701][T15135] ? do_vfs_ioctl+0x1166/0x1530 [ 1109.274715][T15135] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1109.274731][T15135] ? do_futex+0x333/0x420 [ 1109.274755][T15135] ? __fget_files+0x2a/0x420 [ 1109.274772][T15135] ? __fget_files+0x2a/0x420 [ 1109.274786][T15135] ? __fget_files+0x3a0/0x420 [ 1109.274801][T15135] ? __fget_files+0x2a/0x420 [ 1109.274816][T15135] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1109.274828][T15135] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1109.274843][T15135] __se_sys_ioctl+0xfc/0x170 [ 1109.274856][T15135] do_syscall_64+0x14d/0xf80 [ 1109.274868][T15135] ? trace_irq_disable+0x3b/0x150 [ 1109.274882][T15135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.274895][T15135] ? clear_bhb_loop+0x40/0x90 [ 1109.274909][T15135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.274930][T15135] RIP: 0033:0x7f8a6679c799 [ 1109.274945][T15135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.274957][T15135] RSP: 002b:00007f8a67643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.275004][T15135] RAX: ffffffffffffffda RBX: 00007f8a66a15fa0 RCX: 00007f8a6679c799 [ 1109.275015][T15135] RDX: 0000200000000100 RSI: 00000000c020aa07 RDI: 0000000000000003 [ 1109.275029][T15135] RBP: 00007f8a66832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1109.275038][T15135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.275047][T15135] R13: 00007f8a66a16038 R14: 00007f8a66a15fa0 R15: 00007ffe0c5616e8 [ 1109.275061][T15135] [ 1109.560490][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.573539][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1109.579691][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1109.597948][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1109.607779][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1109.615874][ T24] usb 7-1: SerialNumber: syz [ 1109.829197][ T24] usb 7-1: 0:2 : does not exist [ 1109.847856][ T24] usb 7-1: USB disconnect, device number 40 [ 1109.864503][T30609] udevd[30609]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.338230][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1110.422542][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1110.422697][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout