last executing test programs: 33m3.099698352s ago: executing program 0 (id=104): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x805) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x300, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x54000) 33m2.930435973s ago: executing program 0 (id=108): r0 = msgget$private(0x0, 0x790) msgctl$IPC_RMID(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$inet(0x2, 0xa, 0x1893) sendmmsg(r2, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}}], 0x1, 0x200048c4) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x70100, 0x25, 0x5}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 33m2.66664841s ago: executing program 0 (id=112): mq_open(&(0x7f0000000080)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x80, 0x10, 0x0) 33m2.471827635s ago: executing program 0 (id=116): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r0, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) 33m2.274339482s ago: executing program 0 (id=121): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x1b08e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) sendfile(r0, r1, 0x0, 0x3) 33m1.92393436s ago: executing program 0 (id=128): syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 33m1.476649521s ago: executing program 32 (id=128): syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 18m55.366732229s ago: executing program 5 (id=8323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0x67, 0x3, 0x0, 0x0, 0x20}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18m55.131723479s ago: executing program 5 (id=8326): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 18m55.04326952s ago: executing program 5 (id=8327): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x2, 'pimreg\x00', {0x9}, 0x8000}) 18m54.493790374s ago: executing program 5 (id=8331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfffe, 0xfff3}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast2}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x8}, @TCA_FLOWER_INDEV={0x14, 0x2, 'wlan0\x00'}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 18m54.181046397s ago: executing program 5 (id=8335): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x0) 18m54.016259285s ago: executing program 5 (id=8336): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000036c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r0, 0x15, 0x0, @void}, 0x10) set_mempolicy(0x4000, 0x0, 0x800) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000140)=0x2e) 18m38.987981991s ago: executing program 33 (id=8336): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000036c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r0, 0x15, 0x0, @void}, 0x10) set_mempolicy(0x4000, 0x0, 0x800) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000140)=0x2e) 2m35.203505842s ago: executing program 6 (id=15989): socket$inet6(0xa, 0x3, 0x4) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x257, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x80000, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0x0, 0xab, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m34.251533984s ago: executing program 6 (id=16002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000017c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000001a80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c011}, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x60, 0x1dc, @vifc_lcl_ifindex, @broadcast}, 0x10) 2m33.686599362s ago: executing program 6 (id=16008): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000a40)={0xcc49c02a495a20fa, 0x17, 0x1, "18"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m32.971478689s ago: executing program 6 (id=16018): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) rseq(0x0, 0x0, 0x40000000, 0x0) 2m31.916301352s ago: executing program 6 (id=16029): socket$inet_tcp(0x2, 0x1, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES16], 0x7) 2m31.251268525s ago: executing program 6 (id=16033): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x8) 2m15.805093389s ago: executing program 34 (id=16033): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x8) 6.974006199s ago: executing program 1 (id=17522): unshare(0x400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xa4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) close(0x3) 6.872599394s ago: executing program 1 (id=17523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000700)=0xdfffffff, 0x4) 5.871649068s ago: executing program 1 (id=17531): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000017c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x34090000) readv(r0, &(0x7f00000037c0)=[{0x0}], 0x1) 5.764952614s ago: executing program 1 (id=17532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001c30000", @ANYBLOB="31200000000000000c002b80080003000200000008001b0000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x6, 0x6, 0x5, 0xe7}, 0x14) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x3}, &(0x7f0000000300)=0x8) 4.385231408s ago: executing program 7 (id=17542): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r1}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) 4.26429604s ago: executing program 7 (id=17544): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {0xffff, 0xffff}, {0x8}}}, 0x24}}, 0x0) 4.076250775s ago: executing program 7 (id=17546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c000180140003000000000000000000000000000000000014000400fe8800000000000000000000000000010c0002800500010000000000060003400002000008000740000000"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000030000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004"], 0xb4}}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) syz_usb_connect$cdc_ncm(0x0, 0xb3, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003020000082505a1a44000010203010902a10002010860800904000001020d0000052406000105240008000d240f01ae0900000b00df000704241a00"], &(0x7f00000000c0)={0x0, 0x0, 0x5}) sysfs$1(0x1, &(0x7f0000000040)='hfsplus\x00') 3.665092745s ago: executing program 2 (id=17553): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0) 3.506061828s ago: executing program 2 (id=17555): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 3.446566593s ago: executing program 2 (id=17557): capset(&(0x7f0000000100)={0x20080522}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900eccb000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.328796721s ago: executing program 2 (id=17559): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100260e000027000000180001801400020073797a5ff475"], 0x2c}}, 0x20000040) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110014a696d4003041060410100f602010902240001000000820904"], 0x0) 2.607994305s ago: executing program 1 (id=17573): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x1}, 0x30, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.456785444s ago: executing program 1 (id=17576): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000002c0)={0x20, 0x13, 0x2, "1504"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.39559088s ago: executing program 4 (id=17578): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x41, 0x109, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x8, 0xa, 0x0, 0x0, @str='-))\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) 2.341309784s ago: executing program 4 (id=17579): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 2.276096848s ago: executing program 4 (id=17580): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfca, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfbc, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfa8, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) 2.200815211s ago: executing program 4 (id=17581): syz_open_dev$vim2m(&(0x7f0000000040), 0xe18, 0x2) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000900), &(0x7f0000000000)='./file0\x00', 0x5c425bdc3a9a438f, &(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2480"], 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000220a40308801b09e3401f010203010902240001010907000904a7a7025d81df0209058a04000401058e090501"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000004c0)="75b74230eb134e247d0bb95744d3dac60cb524e4408e49a3019a3ba11962dda06b2cf928024618811d350dc3333390eba19ef55a0a3acfd0da7b064f9d08039379107afa3fa0d5cf67fabad4d5b12dc8d7cd02f93fb0238b1bb9715d01a963209e5386f6887cd57502b67df823567cd6349d27c2ba38c2f1a5dd364f4a3eaff4fa96ff11a80e05251a5b354ad4dbfacf7003ed9594e2bbda2f06c083bd3dfcc7c9215cf3b2a294b8af45fb58be8d8860c57bbd45d0f133b12e8e731cadd7a89847a173e6ebbe9cf0ad51fc4450d794bc89647cef37ed4d538af00eb2fa455ca4e9f47ec8b5dad6b9c2060b4b65b690475f59799ccb9c", 0xf6}, {&(0x7f00000005c0)="eb9f5f7da77548935189f2cf152588cab27cb619f6b7108cdc7fe5f3ee98a6b9dc3e09aa5c2aadc0d7bbe31c2ff05295674a923973a51abfa81330", 0x3b}], 0x2, &(0x7f0000000640)}}], 0x1, 0x8004) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000780)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000940)=0x28) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x68b6ea9042ff3741, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fb, 0x2800, 0x440, 0x3, 0xd, 0x2, {0x45, 0x80}, 0xcd, 0x3}}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000740)=0x4) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$inet(0x2, 0x4000000000000001, 0x6) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000700)='sync\x00', 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1feb, 0x10000, 0x1, 0x317}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4499, 0x80, 0x1, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd500, 0x1, 0x0, 0x48, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe036, 0x4, 0x1, 0x3c9, 0x0, r1}}], 0x4, &(0x7f00000016c0)={0x2e, 0x32, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8fc}, 0x0, 0x0, '\x00', {0x4, 0xcb2, 0x0, &(0x7f0000002400)=@buf_max_buf="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"}}, &(0x7f0000001540)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000001680)=[{&(0x7f0000001580)=""/194, 0xc2}], 0x1) r5 = io_uring_setup(0x1162, &(0x7f0000002380)={0x0, 0x2fd9, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 1.991779043s ago: executing program 2 (id=17583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x38, r1, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x55}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x2}]}]}, 0x38}}, 0x4c044) 1.977088602s ago: executing program 2 (id=17584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001c30000", @ANYBLOB="31200000000000000c002b80080003000200000008001b0000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x6, 0x6, 0x5, 0xe7}, 0x14) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x3}, &(0x7f0000000300)=0x8) 1.16290569s ago: executing program 3 (id=17586): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x1}, 0x30, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.10026847s ago: executing program 3 (id=17587): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x17a) 1.100126733s ago: executing program 3 (id=17588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000001c0)={'macvlan1\x00'}) 1.040850083s ago: executing program 7 (id=17589): io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d0"], 0x7) 984.328451ms ago: executing program 3 (id=17590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 939.90993ms ago: executing program 3 (id=17591): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) 746.054119ms ago: executing program 4 (id=17592): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 663.109645ms ago: executing program 4 (id=17593): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 125.35618ms ago: executing program 7 (id=17594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/18, 0x12}], 0x1}, 0x12050) 205.91µs ago: executing program 7 (id=17595): r0 = syz_usb_connect$hid(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x5, 0x29, {0x29, 0x3, "83efb930f0187ff047a22a61a54607b71ea9e442359cf4fd6ef4366b4800295a64cdda682cdd44"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=17596): syz_usb_connect(0x3, 0x86, 0x0, 0x0) kernel console output (not intermixed with test programs): usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.716052][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1972.747163][T19134] usb 5-1: Product: syz [ 1972.767146][T19134] usb 5-1: Manufacturer: syz [ 1972.772012][T19134] usb 5-1: SerialNumber: syz [ 1972.772686][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1972.866900][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1972.895684][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1973.050557][T15283] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16186'. [ 1973.119651][ T24] uclogic 0003:28BD:0094.006C: pen parameters not found [ 1973.129030][ T24] uclogic 0003:28BD:0094.006C: interface is invalid, ignoring [ 1973.241618][T19134] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1973.266569][T19134] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1973.304620][T15291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16189'. [ 1973.486028][T19134] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1973.504221][T19134] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1973.536154][T19134] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1973.548126][T19134] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1973.570245][T19134] usb 5-1: USB disconnect, device number 14 [ 1973.667854][ T42] usb 3-1: USB disconnect, device number 3 [ 1974.292094][T15314] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16200'. [ 1974.326422][T15316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16201'. [ 1974.437164][ T4941] Bluetooth: hci2: command tx timeout [ 1974.544581][ T42] IPVS: starting estimator thread 0... [ 1974.653376][T15327] IPVS: using max 25 ests per chain, 60000 per kthread [ 1975.097813][T15359] binder: 15356:15359 ioctl c0306201 80000680 returned -14 [ 1975.123701][T15358] netlink: 64 bytes leftover after parsing attributes in process `syz.7.16220'. [ 1975.187844][T15358] pimreg3: entered allmulticast mode [ 1975.895336][T15400] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1975.967212][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.974570][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.092600][ T42] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1976.138658][T15406] program syz.4.16242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1976.259021][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 1976.278803][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1976.298880][ T42] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1976.316806][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.346190][ T42] usb 2-1: config 0 descriptor?? [ 1976.356309][ T42] hub 2-1:0.0: bad descriptor, ignoring hub [ 1976.368842][ T42] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1976.401601][ T42] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1976.513596][T15402] Bluetooth: hci2: command tx timeout [ 1976.579197][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16239'. [ 1976.600263][T15397] netlink: 'syz.1.16239': attribute type 6 has an invalid length. [ 1976.609104][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16239'. [ 1976.620169][T15397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16239'. [ 1976.629973][T15397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16239'. [ 1976.652044][T15397] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1976.662645][T13251] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1976.696967][T15425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1976.782881][ T42] usb 2-1: USB disconnect, device number 17 [ 1976.812890][T13251] usb 5-1: device descriptor read/64, error -71 [ 1977.074922][T13251] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1977.235396][T13251] usb 5-1: device descriptor read/64, error -71 [ 1977.252007][T15434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16255'. [ 1977.273042][T18630] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1977.303229][T15436] syzkaller0: entered promiscuous mode [ 1977.308789][T15436] syzkaller0: entered allmulticast mode [ 1977.362983][T13251] usb usb5-port1: attempt power cycle [ 1977.447005][T18630] usb 3-1: not running at top speed; connect to a high speed hub [ 1977.465851][T18630] usb 3-1: config 1 has an invalid interface number: 167 but max is 0 [ 1977.483167][T18630] usb 3-1: config 1 has no interface number 0 [ 1977.495045][T18630] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 1977.528110][T18630] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1977.541816][T18630] usb 3-1: config 1 interface 167 has no altsetting 0 [ 1977.572266][T18630] usb 3-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 1977.582340][T18630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.597311][T18630] usb 3-1: Product: syz [ 1977.601529][T18630] usb 3-1: Manufacturer: syz [ 1977.606832][T18630] usb 3-1: SerialNumber: syz [ 1977.732845][T13251] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1977.774459][T13251] usb 5-1: device descriptor read/8, error -71 [ 1977.863622][T18630] em28xx 3-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 1977.887068][T18630] em28xx 3-1:1.167: Device initialization failed. [ 1977.897432][T18630] em28xx 3-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 1977.918887][T18630] usb 3-1: USB disconnect, device number 4 [ 1978.033089][T13251] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1978.041538][T15402] Bluetooth: hci4: command 0x0406 tx timeout [ 1978.057463][T13251] usb 5-1: device descriptor read/8, error -71 [ 1978.173714][T13251] usb usb5-port1: unable to enumerate USB device [ 1978.283142][T15462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16267'. [ 1978.512341][T15472] syzkaller0: entered promiscuous mode [ 1978.518119][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1978.531810][T15472] syzkaller0: entered allmulticast mode [ 1978.887368][T15486] loop5: detected capacity change from 0 to 7 [ 1978.905280][T15486] Dev loop5: unable to read RDB block 7 [ 1978.912014][T15486] loop5: unable to read partition table [ 1978.919475][T15486] loop5: partition table beyond EOD, truncated [ 1978.928331][T15486] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1978.960038][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16279'. [ 1979.147294][T15496] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000000 out of range (51000000..2150000000) [ 1979.599649][T15514] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16291'. [ 1979.622202][T15516] loop5: detected capacity change from 0 to 7 [ 1979.648515][T15516] Dev loop5: unable to read RDB block 7 [ 1979.675194][T15516] loop5: unable to read partition table [ 1979.701481][T15516] loop5: partition table beyond EOD, truncated [ 1979.721884][T15516] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1979.739224][T15521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16294'. [ 1980.132946][ T2137] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1980.302712][ T2137] usb 4-1: Using ep0 maxpacket: 16 [ 1980.323395][ T2137] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1980.368730][ T2137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1980.402893][ T42] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1980.421238][ T2137] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1980.436938][ T2137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.458046][ T2137] usb 4-1: Product: syz [ 1980.469596][ T2137] usb 4-1: Manufacturer: syz [ 1980.481840][ T2137] usb 4-1: SerialNumber: syz [ 1980.511161][ T2137] usb 4-1: config 0 descriptor?? [ 1980.548052][ T2137] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1980.564786][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 1980.597888][ T2137] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1980.611482][ T42] usb 2-1: no configurations [ 1980.616924][ T42] usb 2-1: can't read configurations, error -22 [ 1980.752693][ T42] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1980.913225][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 1980.924096][ T42] usb 2-1: no configurations [ 1980.943553][ T42] usb 2-1: can't read configurations, error -22 [ 1980.958684][ T42] usb usb2-port1: attempt power cycle [ 1981.166404][ T2137] em28xx 4-1:0.0: chip ID is em2874 [ 1981.328600][ T42] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1981.370218][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 1981.388342][ T42] usb 2-1: no configurations [ 1981.409499][ T42] usb 2-1: can't read configurations, error -22 [ 1981.421816][ T2137] usb 4-1: USB disconnect, device number 91 [ 1981.442360][ T2137] em28xx 4-1:0.0: Disconnecting em28xx [ 1981.472055][ T2137] em28xx 4-1:0.0: Freeing device [ 1981.496954][T15549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16305'. [ 1981.573104][T15553] netlink: 64 bytes leftover after parsing attributes in process `syz.7.16307'. [ 1981.582550][ T42] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1981.624435][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 1981.638627][ T42] usb 2-1: no configurations [ 1981.650588][T15558] netlink: 794 bytes leftover after parsing attributes in process `syz.2.16309'. [ 1981.651121][ T42] usb 2-1: can't read configurations, error -22 [ 1981.668008][T15554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1981.679777][ T42] usb usb2-port1: unable to enumerate USB device [ 1982.222659][T13251] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1982.351823][T15580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16319'. [ 1982.384744][T13251] usb 3-1: Using ep0 maxpacket: 8 [ 1982.392513][T13251] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.403692][T13251] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1982.415353][T13251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.430677][T13251] usb 3-1: config 0 descriptor?? [ 1982.461333][T13251] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1982.559347][T15586] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16322'. [ 1982.866905][T13251] gspca_vc032x: reg_w err -71 [ 1982.888272][T13251] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1982.905863][T13251] usb 3-1: USB disconnect, device number 5 [ 1982.952604][T25194] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1983.115428][T25194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.142586][T25194] usb 4-1: config 0 has no interfaces? [ 1983.162325][T25194] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1983.193170][T25194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.215558][T25194] usb 4-1: Product: syz [ 1983.228321][T25194] usb 4-1: Manufacturer: syz [ 1983.243189][T25194] usb 4-1: SerialNumber: syz [ 1983.285656][T25194] usb 4-1: config 0 descriptor?? [ 1983.516344][T15593] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 1983.516344][T15593] program syz.3.16325 not setting count and/or reply_len properly [ 1983.540449][T15619] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16337'. [ 1983.592081][ T42] usb 4-1: USB disconnect, device number 92 [ 1983.743412][T15627] syzkaller0: entered promiscuous mode [ 1983.749168][T15627] syzkaller0: entered allmulticast mode [ 1984.102890][T25194] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1984.249926][T15651] loop8: detected capacity change from 0 to 7 [ 1984.274698][T15651] Dev loop8: unable to read RDB block 7 [ 1984.282741][ T42] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1984.293003][T15651] loop8: unable to read partition table [ 1984.300699][T25194] usb 3-1: Using ep0 maxpacket: 8 [ 1984.311046][T15651] loop8: partition table beyond EOD, truncated [ 1984.320799][T25194] usb 3-1: no configurations [ 1984.329254][T25194] usb 3-1: can't read configurations, error -22 [ 1984.337243][T15651] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 1984.400034][T15656] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16355'. [ 1984.444946][ T42] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1984.461498][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.481153][ T42] usb 5-1: config 0 descriptor?? [ 1984.493039][T25194] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1984.511093][ T42] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1984.652509][T25194] usb 3-1: Using ep0 maxpacket: 8 [ 1984.683352][T25194] usb 3-1: no configurations [ 1984.699527][T25194] usb 3-1: can't read configurations, error -22 [ 1984.715618][T25194] usb usb3-port1: attempt power cycle [ 1984.717916][ T42] gp8psk: usb in 128 operation failed. [ 1984.856749][T15675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16364'. [ 1984.947222][ T42] gp8psk: usb in 137 operation failed. [ 1984.957597][ T42] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1984.975987][ T42] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1984.996157][ T42] usb 5-1: USB disconnect, device number 19 [ 1985.002529][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1985.073032][T25194] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1985.104493][T25194] usb 3-1: Using ep0 maxpacket: 8 [ 1985.110278][T25194] usb 3-1: no configurations [ 1985.115303][T25194] usb 3-1: can't read configurations, error -22 [ 1985.164490][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1985.174949][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.185607][ T24] usb 2-1: config 220 has no interface number 2 [ 1985.191953][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1985.205698][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1985.212741][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1985.219815][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1985.229699][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1985.240226][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.248752][ T24] usb 2-1: Product: syz [ 1985.253115][ T24] usb 2-1: Manufacturer: syz [ 1985.257790][ T24] usb 2-1: SerialNumber: syz [ 1985.282618][T25194] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1985.303337][T25194] usb 3-1: Using ep0 maxpacket: 8 [ 1985.309371][T25194] usb 3-1: no configurations [ 1985.317417][T25194] usb 3-1: can't read configurations, error -22 [ 1985.325558][T25194] usb usb3-port1: unable to enumerate USB device [ 1985.486740][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1985.506907][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 1985.514329][ T24] usb 2-1: selecting invalid altsetting 0 [ 1985.549859][ T24] usb 2-1: selecting invalid altsetting 0 [ 1985.563001][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1985.575121][ T24] usb 2-1: USB disconnect, device number 22 [ 1985.812078][T15692] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16372'. [ 1985.984564][T15700] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16376'. [ 1986.437600][T15719] bond2 (unregistering): Released all slaves [ 1986.605922][T15726] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16387'. [ 1986.617978][T15724] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16386'. [ 1986.721879][T15730] TCP: TCP_TX_DELAY enabled [ 1987.078083][T15749] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16398'. [ 1987.197831][T15755] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16401'. [ 1987.254694][T15757] netlink: 'syz.2.16402': attribute type 1 has an invalid length. [ 1987.282303][T15757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1987.296170][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16402'. [ 1987.308588][T15757] bond1 (unregistering): Released all slaves [ 1987.363474][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1987.522854][ T24] usb 5-1: device descriptor read/64, error -71 [ 1987.536957][T15766] vcan0: tx drop: invalid sa for name 0x0000000200000000 [ 1987.621643][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16408'. [ 1987.679420][T15770] bond1: entered promiscuous mode [ 1987.685819][T15770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1987.714178][T15774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1987.735091][T15774] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1987.762665][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1987.770750][T15774] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 1987.912613][ T24] usb 5-1: device descriptor read/64, error -71 [ 1988.024118][ T24] usb usb5-port1: attempt power cycle [ 1988.048752][T15784] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16413'. [ 1988.272713][T29265] Bluetooth: hci6: command 0x0406 tx timeout [ 1988.373107][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1988.425624][ T24] usb 5-1: device descriptor read/8, error -71 [ 1988.692530][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1988.724227][ T24] usb 5-1: device descriptor read/8, error -71 [ 1988.832914][T19134] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1988.848265][ T24] usb usb5-port1: unable to enumerate USB device [ 1989.003061][T19134] usb 2-1: Using ep0 maxpacket: 32 [ 1989.024127][T19134] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1989.039562][T19134] usb 2-1: config 0 has no interface number 0 [ 1989.051886][T19134] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1989.065857][T19134] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1989.083503][T19134] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1989.108166][T15812] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1989.120449][T19134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.133521][T19134] usb 2-1: config 0 descriptor?? [ 1989.303233][T15822] netlink: 'syz.2.16431': attribute type 5 has an invalid length. [ 1989.752343][T19134] uclogic 0003:28BD:0094.006D: pen parameters not found [ 1989.770390][T19134] uclogic 0003:28BD:0094.006D: interface is invalid, ignoring [ 1989.857178][T15840] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1990.006433][T15846] __nla_validate_parse: 1 callbacks suppressed [ 1990.006449][T15846] netlink: 40 bytes leftover after parsing attributes in process `syz.7.16442'. [ 1990.173714][T15849] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16443'. [ 1990.327740][T19134] usb 2-1: USB disconnect, device number 23 [ 1990.586084][T15865] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1991.014196][T19134] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1991.030537][T15881] netlink: 64 bytes leftover after parsing attributes in process `syz.7.16458'. [ 1991.161106][T15887] program syz.3.16461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1991.163864][T19134] usb 2-1: device descriptor read/64, error -71 [ 1991.249594][T15889] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1991.463212][T19134] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1991.542889][ T42] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1991.612863][T19134] usb 2-1: device descriptor read/64, error -71 [ 1991.647401][T15904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16469'. [ 1991.692599][ T2137] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1991.713110][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 1991.735991][T19134] usb usb2-port1: attempt power cycle [ 1991.745847][ T42] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1991.763075][ T42] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1991.774567][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1991.791088][ T42] usb 5-1: config 1 has no interface number 0 [ 1991.808423][ T42] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1991.847555][ T42] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1991.882388][ T2137] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.893951][ T42] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1991.911294][ T2137] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1991.935736][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1991.951301][ T2137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.011864][ T2137] usb 3-1: config 0 descriptor?? [ 1992.031867][ T42] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1992.065931][ T2137] pwc: Askey VC010 type 2 USB webcam detected. [ 1992.102579][T19134] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1992.143968][T19134] usb 2-1: device descriptor read/8, error -71 [ 1992.265115][ T2137] pwc: send_video_command error -71 [ 1992.284388][ T2137] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1992.313136][ T2137] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1992.378249][ T2137] usb 3-1: USB disconnect, device number 10 [ 1992.402818][T19134] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1992.443652][T19134] usb 2-1: device descriptor read/8, error -71 [ 1992.562342][ T42] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1992.573619][T19134] usb usb2-port1: unable to enumerate USB device [ 1992.700634][T15920] netlink: 64 bytes leftover after parsing attributes in process `syz.7.16475'. [ 1992.775136][T19134] usb 5-1: USB disconnect, device number 24 [ 1992.789943][T19134] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1992.802556][ T2137] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1992.974918][ T2137] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.997627][ T2137] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1993.026498][ T2137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.062991][ T2137] usb 3-1: config 0 descriptor?? [ 1993.076908][ T2137] pwc: Askey VC010 type 2 USB webcam detected. [ 1993.096234][T15924] netlink: 'syz.7.16477': attribute type 5 has an invalid length. [ 1993.477167][T15897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1993.497583][T15897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1993.521037][T15897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1993.562350][T15897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1993.590462][T15897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1993.625589][T15897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1993.676070][ T2137] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1993.691848][T15938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16484'. [ 1993.701418][ T2137] pwc: recv_control_msg error -71 req 02 val 2700 [ 1993.717764][ T2137] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1993.726284][ T2137] pwc: recv_control_msg error -71 req 04 val 1000 [ 1993.735625][ T2137] pwc: recv_control_msg error -71 req 04 val 1300 [ 1993.753052][T15942] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16486'. [ 1993.753414][ T2137] pwc: recv_control_msg error -71 req 04 val 1400 [ 1993.803182][ T2137] pwc: recv_control_msg error -71 req 02 val 2000 [ 1993.827356][ T2137] pwc: recv_control_msg error -71 req 02 val 2100 [ 1993.843148][ T2137] pwc: recv_control_msg error -71 req 04 val 1500 [ 1993.859089][ T2137] pwc: recv_control_msg error -71 req 02 val 2500 [ 1993.875260][ T2137] pwc: recv_control_msg error -71 req 02 val 2400 [ 1993.892954][ T2137] pwc: recv_control_msg error -71 req 02 val 2600 [ 1993.915031][ T2137] pwc: recv_control_msg error -71 req 02 val 2900 [ 1993.944513][ T2137] pwc: recv_control_msg error -71 req 02 val 2800 [ 1993.969751][ T2137] pwc: recv_control_msg error -71 req 04 val 1100 [ 1993.997895][ T2137] pwc: recv_control_msg error -71 req 04 val 1200 [ 1994.035947][ T2137] pwc: Registered as video103. [ 1994.063256][ T2137] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input120 [ 1994.130089][ T2137] usb 3-1: USB disconnect, device number 11 [ 1994.963832][T15975] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16499'. [ 1994.982633][T18630] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1995.122580][T18630] usb 3-1: device descriptor read/64, error -71 [ 1995.403194][T18630] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1995.552518][T18630] usb 3-1: device descriptor read/64, error -71 [ 1995.673217][T18630] usb usb3-port1: attempt power cycle [ 1996.032544][T18630] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1996.056657][T16001] netlink: 64 bytes leftover after parsing attributes in process `syz.7.16511'. [ 1996.067083][T18630] usb 3-1: device descriptor read/8, error -71 [ 1996.312531][T18630] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1996.379162][T18630] usb 3-1: device descriptor read/8, error -71 [ 1996.495533][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16516'. [ 1996.509212][T18630] usb usb3-port1: unable to enumerate USB device [ 1996.920470][T16027] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16524'. [ 1997.753969][T18630] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1997.945999][T18630] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1997.967100][T16057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16534'. [ 1997.977094][T18630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.004548][T18630] usb 5-1: config 0 descriptor?? [ 1998.441499][T18630] usb 5-1: Cannot set MAC address [ 1998.454851][T18630] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1998.498550][T16064] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16538'. [ 1998.514520][T15402] Bluetooth: hci3: command 0x0406 tx timeout [ 1998.543747][T18630] usb 5-1: USB disconnect, device number 25 [ 1998.783385][T16069] input: syz1 as /devices/virtual/input/input121 [ 1999.332231][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16548'. [ 1999.642194][T16093] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16551'. [ 2001.461161][T16125] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16564'. [ 2001.508485][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16566'. [ 2001.733971][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16568'. [ 2002.130174][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16573'. [ 2002.367092][T16156] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16575'. [ 2002.419920][T16147] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 2002.456624][T14871] bridge0: port 2(bridge_slave_1) entered blocking state [ 2002.463857][T14871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2002.867374][T16168] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16580'. [ 2003.423161][T13251] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2003.604980][T13251] usb 4-1: no configurations [ 2003.615107][T13251] usb 4-1: can't read configurations, error -22 [ 2003.682857][T18630] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2003.727985][T16198] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16597'. [ 2003.739353][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16596'. [ 2003.752637][T13251] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2003.862925][T18630] usb 3-1: Using ep0 maxpacket: 8 [ 2003.883360][T18630] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2003.893121][T18630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.901332][T18630] usb 3-1: Product: syz [ 2003.907514][T18630] usb 3-1: Manufacturer: syz [ 2003.917139][T18630] usb 3-1: SerialNumber: syz [ 2003.924381][T13251] usb 4-1: no configurations [ 2003.940166][T13251] usb 4-1: can't read configurations, error -22 [ 2003.948039][T18630] usb 3-1: config 0 descriptor?? [ 2003.962742][T13251] usb usb4-port1: attempt power cycle [ 2003.974474][T18630] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2004.163068][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16603'. [ 2004.322885][T13251] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2004.344753][T13251] usb 4-1: no configurations [ 2004.349753][T13251] usb 4-1: can't read configurations, error -22 [ 2004.493244][T13251] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2004.535581][T13251] usb 4-1: no configurations [ 2004.540945][T13251] usb 4-1: can't read configurations, error -22 [ 2004.551712][T13251] usb usb4-port1: unable to enumerate USB device [ 2004.632769][T18630] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 2004.882849][T18630] gspca_sq930x: Sensor ov9630 not yet treated [ 2004.894070][T18630] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 2004.959215][T18630] usb 3-1: USB disconnect, device number 16 [ 2005.192088][T16225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16608'. [ 2005.978965][T16250] bridge0: port 3(erspan0) entered blocking state [ 2005.998230][T16250] bridge0: port 3(erspan0) entered disabled state [ 2006.018243][T16250] erspan0: entered allmulticast mode [ 2006.096090][T16250] erspan0: entered promiscuous mode [ 2006.110821][T16250] bridge0: port 3(erspan0) entered blocking state [ 2006.117453][T16250] bridge0: port 3(erspan0) entered forwarding state [ 2006.191478][T16254] erspan0: left allmulticast mode [ 2006.215824][T16254] erspan0: left promiscuous mode [ 2006.233781][T16254] bridge0: port 3(erspan0) entered disabled state [ 2006.774250][T16267] __nla_validate_parse: 2 callbacks suppressed [ 2006.774272][T16267] netlink: 64 bytes leftover after parsing attributes in process `syz.7.16624'. [ 2007.712852][T18630] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 2007.826764][T16291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16634'. [ 2007.882027][T18630] usb 3-1: not running at top speed; connect to a high speed hub [ 2007.897688][T18630] usb 3-1: config 1 has an invalid interface number: 167 but max is 0 [ 2007.919808][T18630] usb 3-1: config 1 has no interface number 0 [ 2007.926988][T18630] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2007.940625][T18630] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2007.956177][T18630] usb 3-1: config 1 interface 167 has no altsetting 0 [ 2007.970365][T18630] usb 3-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2007.980939][T18630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.995723][T18630] usb 3-1: Product: syz [ 2008.000094][T18630] usb 3-1: Manufacturer: syz [ 2008.008962][T18630] usb 3-1: SerialNumber: syz [ 2008.281034][T18630] em28xx 3-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2008.300439][T18630] em28xx 3-1:1.167: Device initialization failed. [ 2008.309442][T18630] em28xx 3-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2008.328470][T18630] usb 3-1: USB disconnect, device number 17 [ 2008.823013][T19134] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2008.857762][T16316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16645'. [ 2008.996883][T19134] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2009.015625][T19134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.047671][T19134] usb 2-1: config 0 descriptor?? [ 2009.073953][T19134] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2009.276884][T19134] usb 2-1: USB disconnect, device number 28 [ 2010.038419][T16339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16654'. [ 2010.508548][T16345] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16656'. [ 2010.717427][T16350] vcan1: entered promiscuous mode [ 2010.724403][T16350] vcan1: entered allmulticast mode [ 2012.082361][T29265] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 2012.382605][ T2137] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2012.545444][ T2137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2012.567440][ T2137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2012.580389][ T2137] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2012.591982][ T2137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.614748][ T2137] usb 4-1: config 0 descriptor?? [ 2012.730284][T29265] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 2013.049443][ T2137] hid-thrustmaster 0003:044F:B65D.006E: unknown main item tag 0x0 [ 2013.065655][ T2137] hid-thrustmaster 0003:044F:B65D.006E: unknown main item tag 0x0 [ 2013.074318][ T2137] hid-thrustmaster 0003:044F:B65D.006E: unknown main item tag 0x0 [ 2013.082367][ T2137] hid-thrustmaster 0003:044F:B65D.006E: unknown main item tag 0x0 [ 2013.082709][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2013.102362][ T2137] hid-thrustmaster 0003:044F:B65D.006E: unknown main item tag 0x0 [ 2013.113466][ T2137] hid-thrustmaster 0003:044F:B65D.006E: unknown main item tag 0x0 [ 2013.121612][ T2137] hid-thrustmaster 0003:044F:B65D.006E: unknown main item tag 0x0 [ 2013.142204][ T2137] hid-thrustmaster 0003:044F:B65D.006E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 2013.156807][ T2137] hid-thrustmaster 0003:044F:B65D.006E: Wrong number of endpoints? [ 2013.163733][T18630] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2013.260079][ C1] hid-thrustmaster 0003:044F:B65D.006E: URB to get model id failed with error -71 [ 2013.271479][ T2137] usb 4-1: USB disconnect, device number 97 [ 2013.311851][T16417] fido_id[16417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2013.362588][T18630] usb 3-1: Using ep0 maxpacket: 16 [ 2013.373445][T18630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2013.396347][T18630] usb 3-1: config 1 has an invalid interface number: 237 but max is 0 [ 2013.405924][T18630] usb 3-1: config 1 has no interface number 0 [ 2013.425652][T18630] usb 3-1: config 1 interface 237 has no altsetting 0 [ 2013.455055][T18630] usb 3-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 2013.472629][T18630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.485823][T18630] usb 3-1: Product: syz [ 2013.502584][T18630] usb 3-1: Manufacturer: syz [ 2013.508880][T18630] usb 3-1: SerialNumber: syz [ 2013.755149][T18630] ipaq 3-1:1.237: PocketPC PDA converter detected [ 2013.785535][T18630] ipaq 3-1:1.237: probe with driver ipaq failed with error -71 [ 2013.818713][T18630] usb 3-1: USB disconnect, device number 18 [ 2013.958234][T16423] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2014.087937][ T29] audit: type=1326 audit(1785583433.462:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.16694" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2014.124415][ T29] audit: type=1326 audit(1785583433.462:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.16694" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2014.151729][ T29] audit: type=1326 audit(1785583433.492:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.16694" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2014.180146][ T29] audit: type=1326 audit(1785583433.492:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.16694" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2014.206233][ T29] audit: type=1326 audit(1785583433.492:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.16694" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2014.414879][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2014.575119][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 2014.588750][ T24] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2014.606365][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.626351][ T24] usb 5-1: Product: syz [ 2014.639564][ T24] usb 5-1: Manufacturer: syz [ 2014.649954][ T24] usb 5-1: SerialNumber: syz [ 2014.671342][ T24] usb 5-1: config 0 descriptor?? [ 2014.703617][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2015.294787][T13251] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2015.353511][ T24] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 2015.473015][T13251] usb 3-1: Using ep0 maxpacket: 8 [ 2015.489666][T16477] netlink: 52 bytes leftover after parsing attributes in process `syz.7.16717'. [ 2015.494156][T13251] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2015.531728][T13251] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 2015.553463][T13251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 2015.573028][T13251] usb 3-1: Product: syz [ 2015.583467][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 2015.588426][T13251] usb 3-1: Manufacturer: syz [ 2015.602481][T13251] usb 3-1: SerialNumber: syz [ 2015.606097][ T24] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 2015.626332][T13251] usb 3-1: config 0 descriptor?? [ 2015.627417][ T2137] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2015.658918][ T24] usb 5-1: USB disconnect, device number 26 [ 2015.825974][ T2137] usb 4-1: device descriptor read/64, error -71 [ 2016.104230][ T2137] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2016.272865][ T2137] usb 4-1: device descriptor read/64, error -71 [ 2016.394117][ T2137] usb usb4-port1: attempt power cycle [ 2016.464441][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16725'. [ 2016.743273][ T2137] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2016.783348][ T2137] usb 4-1: device descriptor read/8, error -71 [ 2016.959182][T16507] netlink: 52 bytes leftover after parsing attributes in process `syz.7.16728'. [ 2017.033725][ T2137] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2017.083956][ T2137] usb 4-1: device descriptor read/8, error -71 [ 2017.110391][T16510] netlink: 'syz.1.16729': attribute type 10 has an invalid length. [ 2017.182988][T16510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2017.216584][ T2137] usb usb4-port1: unable to enumerate USB device [ 2017.217670][T16510] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 2017.276548][T16512] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16730'. [ 2017.539416][T16516] netlink: 128 bytes leftover after parsing attributes in process `syz.7.16732'. [ 2018.131749][ T2137] usb 3-1: USB disconnect, device number 19 [ 2018.500295][T16537] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16740'. [ 2018.674992][T16542] sg_write: data in/out 306688/136 bytes for SCSI command 0x0-- guessing data in; [ 2018.674992][T16542] program syz.4.16742 not setting count and/or reply_len properly [ 2018.931922][T16547] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16744'. [ 2019.372006][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16752'. [ 2019.420484][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16754'. [ 2019.463131][T16568] ipvlan2: entered allmulticast mode [ 2019.481126][T16568] syz_tun: entered allmulticast mode [ 2019.502820][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2019.662600][ T24] usb 3-1: device descriptor read/64, error -71 [ 2019.933689][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2020.083727][T19134] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2020.092524][ T24] usb 3-1: device descriptor read/64, error -71 [ 2020.233628][ T24] usb usb3-port1: attempt power cycle [ 2020.265847][T19134] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2020.296740][T19134] usb 4-1: config 0 has no interfaces? [ 2020.316493][T19134] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2020.334998][T19134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.358395][T19134] usb 4-1: Product: syz [ 2020.370206][T19134] usb 4-1: Manufacturer: syz [ 2020.382835][T19134] usb 4-1: SerialNumber: syz [ 2020.398941][T19134] usb 4-1: config 0 descriptor?? [ 2020.582741][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2020.590509][ T42] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 2020.616396][T16588] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16763'. [ 2020.624739][ T24] usb 3-1: device descriptor read/8, error -71 [ 2020.757534][ T42] usb 5-1: not running at top speed; connect to a high speed hub [ 2020.767127][ T42] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 2020.776001][ T42] usb 5-1: config 1 has no interface number 0 [ 2020.782307][ T42] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2020.797534][ T42] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2020.809526][ T42] usb 5-1: config 1 interface 167 has no altsetting 0 [ 2020.820778][ T42] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2020.830709][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.840148][ T42] usb 5-1: Product: syz [ 2020.844959][ T42] usb 5-1: Manufacturer: syz [ 2020.849635][ T42] usb 5-1: SerialNumber: syz [ 2020.872551][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2020.916473][ T24] usb 3-1: device descriptor read/8, error -71 [ 2021.033139][ T24] usb usb3-port1: unable to enumerate USB device [ 2021.105981][ T42] em28xx 5-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2021.118583][ T42] em28xx 5-1:1.167: Device initialization failed. [ 2021.127250][ T42] em28xx 5-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2021.146579][ T42] usb 5-1: USB disconnect, device number 27 [ 2021.958065][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16773'. [ 2022.048983][T16611] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16774'. [ 2022.346302][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16777'. [ 2022.381144][T16621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16778'. [ 2022.722899][T13251] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2022.827244][T25194] usb 4-1: USB disconnect, device number 102 [ 2022.872927][T18630] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2022.919150][T13251] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2022.930401][T13251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.939627][T13251] usb 3-1: Product: syz [ 2022.944374][T13251] usb 3-1: Manufacturer: syz [ 2022.949110][T13251] usb 3-1: SerialNumber: syz [ 2022.967078][T13251] usb 3-1: config 0 descriptor?? [ 2023.064291][T18630] usb 5-1: Using ep0 maxpacket: 8 [ 2023.077919][T18630] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2023.107822][T18630] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 2023.127195][T18630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 2023.137421][T18630] usb 5-1: Product: syz [ 2023.141706][T18630] usb 5-1: Manufacturer: syz [ 2023.148406][T18630] usb 5-1: SerialNumber: syz [ 2023.166168][T18630] usb 5-1: config 0 descriptor?? [ 2023.198406][T16644] syzkaller0: entered promiscuous mode [ 2023.212449][T16644] syzkaller0: entered allmulticast mode [ 2023.220982][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16791'. [ 2023.396453][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16793'. [ 2023.418806][T16650] netlink: 'syz.1.16793': attribute type 30 has an invalid length. [ 2023.494562][T27800] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2023.506083][T27800] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2023.519443][T27800] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2023.530869][T27800] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2023.610427][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16797'. [ 2023.911656][T16665] bond0: (slave vxlan1): Opening slave failed [ 2023.999766][T13251] usb 3-1: unexpected transceiver, part 0xd4 version 0x03 [ 2024.100564][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16802'. [ 2024.213180][T13251] usb 3-1: Firmware version (0.0) predates our first public release. [ 2024.232327][T13251] usb 3-1: Please update to version 0.2 or newer [ 2024.241929][T13251] usb 3-1: atusb_probe: initialization failed, error = -19 [ 2024.260430][T13251] usb 3-1: USB disconnect, device number 24 [ 2024.692620][T19134] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 2024.855931][T19134] usb 4-1: not running at top speed; connect to a high speed hub [ 2024.875123][T19134] usb 4-1: config 1 has an invalid interface number: 167 but max is 0 [ 2024.884543][T19134] usb 4-1: config 1 has no interface number 0 [ 2024.890774][T19134] usb 4-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2024.904047][T19134] usb 4-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2024.919167][T19134] usb 4-1: config 1 interface 167 has no altsetting 0 [ 2024.929102][T19134] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2024.938653][T19134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.948354][T19134] usb 4-1: Product: syz [ 2024.956900][T19134] usb 4-1: Manufacturer: syz [ 2024.961727][T19134] usb 4-1: SerialNumber: syz [ 2025.230154][T19134] em28xx 4-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2025.252075][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16821'. [ 2025.256964][T19134] em28xx 4-1:1.167: Device initialization failed. [ 2025.274619][T19134] em28xx 4-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2025.297040][T19134] usb 4-1: USB disconnect, device number 103 [ 2025.672740][T19134] usb 5-1: USB disconnect, device number 28 [ 2026.649121][T13251] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2026.682608][T25194] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2026.812496][T13251] usb 4-1: Using ep0 maxpacket: 8 [ 2026.824191][T13251] usb 4-1: config 0 has no interfaces? [ 2026.840263][T13251] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2026.856332][T13251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.864792][T25194] usb 3-1: Using ep0 maxpacket: 8 [ 2026.870234][T13251] usb 4-1: Product: syz [ 2026.879497][T13251] usb 4-1: Manufacturer: syz [ 2026.887197][T13251] usb 4-1: SerialNumber: syz [ 2026.894754][T25194] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2026.906479][T13251] usb 4-1: config 0 descriptor?? [ 2026.912227][T25194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.921105][T25194] usb 3-1: Product: syz [ 2026.927998][T25194] usb 3-1: Manufacturer: syz [ 2026.932967][T25194] usb 3-1: SerialNumber: syz [ 2026.952024][T25194] usb 3-1: config 0 descriptor?? [ 2026.966462][T25194] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2027.132044][T13251] usb 4-1: USB disconnect, device number 104 [ 2027.175857][T25194] gspca_sq930x: reg_r 001f failed -32 [ 2027.184117][T25194] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 2027.200808][T25194] usb 3-1: USB disconnect, device number 25 [ 2028.332911][T25194] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2028.482658][T25194] usb 4-1: device descriptor read/64, error -71 [ 2028.743869][T25194] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2028.892816][T25194] usb 4-1: device descriptor read/64, error -71 [ 2029.021828][T25194] usb usb4-port1: attempt power cycle [ 2029.402990][T19134] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2029.436123][T25194] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2029.515174][T25194] usb 4-1: device descriptor read/8, error -71 [ 2029.585689][T19134] usb 3-1: Using ep0 maxpacket: 32 [ 2029.625457][T19134] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2029.656252][T19134] usb 3-1: config 0 has no interface number 0 [ 2029.686480][T19134] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2029.723122][T19134] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2029.748161][T19134] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2029.767636][T19134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.797173][T19134] usb 3-1: config 0 descriptor?? [ 2029.803251][T25194] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2029.843512][T25194] usb 4-1: device descriptor read/8, error -71 [ 2029.973759][T25194] usb usb4-port1: unable to enumerate USB device [ 2030.245427][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16868'. [ 2030.297149][T16819] bond1: entered allmulticast mode [ 2030.303283][T16819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2030.969406][T16839] tap0: tun_chr_ioctl cmd 1074025675 [ 2030.988948][T16839] tap0: persist disabled [ 2030.995113][T19134] uclogic 0003:28BD:0094.006F: failed retrieving string descriptor #100: -71 [ 2031.019512][T19134] uclogic 0003:28BD:0094.006F: failed retrieving pen parameters: -71 [ 2031.040610][T19134] uclogic 0003:28BD:0094.006F: pen probing failed: -71 [ 2031.059418][T19134] uclogic 0003:28BD:0094.006F: failed probing parameters: -71 [ 2031.077853][T19134] uclogic 0003:28BD:0094.006F: probe with driver uclogic failed with error -71 [ 2031.107407][T19134] usb 3-1: USB disconnect, device number 26 [ 2031.832573][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2031.992716][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 2032.010636][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2032.029280][ T24] usb 3-1: config 0 has no interface number 0 [ 2032.041748][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2032.064610][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2032.092638][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2032.112255][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.136542][ T24] usb 3-1: config 0 descriptor?? [ 2032.982652][T19134] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2033.074081][ T24] usbhid 3-1:0.1: can't add hid device: -71 [ 2033.087267][ T24] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 2033.124842][ T24] usb 3-1: USB disconnect, device number 27 [ 2033.145910][T19134] usb 5-1: Using ep0 maxpacket: 8 [ 2033.170392][T19134] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2033.185409][T19134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.196683][T19134] usb 5-1: Product: syz [ 2033.200975][T19134] usb 5-1: Manufacturer: syz [ 2033.206606][T19134] usb 5-1: SerialNumber: syz [ 2033.221159][T19134] usb 5-1: config 0 descriptor?? [ 2033.237080][T19134] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2033.447088][T19134] gspca_sq930x: reg_r 001f failed -32 [ 2033.462877][T19134] sq930x 5-1:0.0: probe with driver sq930x failed with error -32 [ 2033.489364][T19134] usb 5-1: USB disconnect, device number 29 [ 2034.453924][T16920] ip6erspan0: entered allmulticast mode [ 2034.802741][ T42] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2034.964226][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 2035.016383][ T42] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2035.050039][ T42] usb 4-1: config 0 has no interface number 0 [ 2035.084703][ T42] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2035.126825][ T42] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2035.176606][ T42] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2035.214570][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.279788][ T42] usb 4-1: config 0 descriptor?? [ 2036.158767][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16920'. [ 2036.185721][T16942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16920'. [ 2036.209498][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16920'. [ 2036.234919][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16920'. [ 2036.263374][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16920'. [ 2036.291411][ T42] usbhid 4-1:0.1: can't add hid device: -71 [ 2036.318703][ T42] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 2036.345566][ T42] usb 4-1: USB disconnect, device number 109 [ 2036.904239][ T42] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2037.042499][ T42] usb 5-1: device descriptor read/64, error -71 [ 2037.294060][ T42] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2037.341909][T16966] loop5: detected capacity change from 0 to 7 [ 2037.350043][T16966] Dev loop5: unable to read RDB block 7 [ 2037.360912][T16966] loop5: unable to read partition table [ 2037.371272][T16966] loop5: partition table beyond EOD, truncated [ 2037.379594][T16966] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2037.397068][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.403675][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.444177][ T42] usb 5-1: device descriptor read/64, error -71 [ 2037.575083][ T42] usb usb5-port1: attempt power cycle [ 2037.929229][ T42] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2037.953931][ T42] usb 5-1: device descriptor read/8, error -71 [ 2038.082697][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2038.202542][ T42] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2038.244765][ T42] usb 5-1: device descriptor read/8, error -71 [ 2038.253036][ T10] usb 3-1: config index 0 descriptor too short (expected 120, got 103) [ 2038.261655][ T10] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 2038.274856][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2038.294707][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2038.305511][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.314304][ T10] usb 3-1: Product: syz [ 2038.320287][ T10] usb 3-1: Manufacturer: syz [ 2038.325438][ T10] usb 3-1: SerialNumber: syz [ 2038.368338][ T42] usb usb5-port1: unable to enumerate USB device [ 2038.572782][ T10] cdc_ncm 3-1:1.0: bind() failure [ 2038.599214][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2038.628336][ T10] cdc_ncm 3-1:1.1: bind() failure [ 2038.666546][ T10] usb 3-1: USB disconnect, device number 28 [ 2038.680003][T15135] udevd[15135]: setting mode of /dev/bus/usb/003/028 to 020664 failed: No such file or directory [ 2038.695575][T15135] udevd[15135]: setting owner of /dev/bus/usb/003/028 to uid=0, gid=0 failed: No such file or directory [ 2038.810230][T17001] loop8: detected capacity change from 0 to 7 [ 2038.821074][T17001] Dev loop8: unable to read RDB block 7 [ 2038.839971][T17001] loop8: unable to read partition table [ 2038.849127][T17001] loop8: partition table beyond EOD, truncated [ 2038.858012][T17001] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 2041.624356][T25194] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 2041.653335][T13251] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2041.794665][T25194] usb 3-1: config 7 has an invalid interface number: 82 but max is 0 [ 2041.822446][T25194] usb 3-1: config 7 has no interface number 0 [ 2041.828660][T25194] usb 3-1: config 7 interface 82 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2041.854381][T25194] usb 3-1: config 7 interface 82 has no altsetting 0 [ 2041.866971][T13251] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2041.883358][T13251] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2041.905924][T13251] usb 2-1: Product: syz [ 2041.910277][T13251] usb 2-1: SerialNumber: syz [ 2041.915253][T25194] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=c2.f3 [ 2041.926442][T25194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.936291][T13251] usb 2-1: config 0 descriptor?? [ 2041.947361][T25194] usb 3-1: Product: syz [ 2041.954423][T25194] usb 3-1: Manufacturer: syz [ 2041.959128][T25194] usb 3-1: SerialNumber: syz [ 2041.969656][T17072] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2042.149616][T13251] hso 2-1:0.0: Failed to find INT IN ep [ 2042.212090][T25194] usb 3-1: USB disconnect, device number 29 [ 2042.360498][T17094] ip6gre1: entered promiscuous mode [ 2042.365927][T17094] ip6gre1: entered allmulticast mode [ 2042.377822][T13251] usb 2-1: USB disconnect, device number 29 [ 2042.442936][T15903] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 2042.472049][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16988'. [ 2042.597580][T29265] Bluetooth: hci3: unexpected event for opcode 0x080f [ 2042.608887][T15903] usb 5-1: not running at top speed; connect to a high speed hub [ 2042.619536][T15903] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 2042.628362][T15903] usb 5-1: config 1 has no interface number 0 [ 2042.634859][T15903] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2042.646857][T15903] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2042.660404][T15903] usb 5-1: config 1 interface 167 has no altsetting 0 [ 2042.670436][T15903] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2042.680619][T15903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.688966][T15903] usb 5-1: Product: syz [ 2042.693543][T15903] usb 5-1: Manufacturer: syz [ 2042.698368][T15903] usb 5-1: SerialNumber: syz [ 2042.959111][T15903] em28xx 5-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2042.979082][T15903] em28xx 5-1:1.167: Device initialization failed. [ 2042.991614][T15903] em28xx 5-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2043.010217][T15903] usb 5-1: USB disconnect, device number 34 [ 2043.096515][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17000'. [ 2043.274143][T17132] sctp: [Deprecated]: syz.1.17003 (pid 17132) Use of int in max_burst socket option. [ 2043.274143][T17132] Use struct sctp_assoc_value instead [ 2043.544239][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17012'. [ 2043.663395][ T42] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2043.833362][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 2043.861725][ T42] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2043.888406][ T42] usb 4-1: config 0 has no interface number 0 [ 2043.906040][ T42] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.927904][ T42] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2043.953661][ T42] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2043.976651][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.001420][ T42] usb 4-1: config 0 descriptor?? [ 2044.086955][T17173] netlink: 56 bytes leftover after parsing attributes in process `syz.7.17024'. [ 2044.272800][T25194] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 2044.433580][T19134] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2044.443129][T25194] usb 5-1: not running at top speed; connect to a high speed hub [ 2044.471556][T25194] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 2044.490194][T25194] usb 5-1: config 1 has no interface number 0 [ 2044.506111][T25194] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2044.533720][T25194] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2044.544569][T25194] usb 5-1: config 1 interface 167 has no altsetting 0 [ 2044.556051][T25194] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2044.568274][T25194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.579553][T25194] usb 5-1: Product: syz [ 2044.585066][T25194] usb 5-1: Manufacturer: syz [ 2044.589947][T25194] usb 5-1: SerialNumber: syz [ 2044.605716][T19134] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2044.623990][T19134] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2044.644739][T19134] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2044.670166][T19134] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2044.693011][T19134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.716700][T19134] usb 3-1: Product: syz [ 2044.732225][T19134] usb 3-1: Manufacturer: syz [ 2044.737670][T19134] usb 3-1: SerialNumber: syz [ 2044.774723][T19134] usb 3-1: selecting invalid altsetting 1 [ 2044.793445][T19134] usb 3-1: unit 6 not found! [ 2044.880945][T25194] em28xx 5-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2044.906702][T25194] em28xx 5-1:1.167: Device initialization failed. [ 2044.929938][T25194] em28xx 5-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2044.960285][T25194] usb 5-1: USB disconnect, device number 35 [ 2045.025259][ T42] usbhid 4-1:0.1: can't add hid device: -71 [ 2045.050120][ T42] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 2045.101205][ T42] usb 4-1: USB disconnect, device number 110 [ 2045.191715][T19134] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 2045.331685][T19134] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2045.425981][T15135] udevd[15135]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2045.448894][T19134] usb 3-1: USB disconnect, device number 30 [ 2045.798488][T17202] loop5: detected capacity change from 0 to 7 [ 2045.805805][T17202] Dev loop5: unable to read RDB block 7 [ 2045.811602][T17202] loop5: unable to read partition table [ 2045.825318][T17202] loop5: partition table beyond EOD, truncated [ 2045.831629][T17202] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2046.113094][T18630] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2046.151884][T17217] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17043'. [ 2046.282800][T18630] usb 2-1: Using ep0 maxpacket: 32 [ 2046.293675][T18630] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2046.304109][T18630] usb 2-1: config 0 has no interface number 0 [ 2046.310295][T18630] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2046.322646][ T10] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 2046.330373][T18630] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2046.340819][T18630] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2046.350497][T18630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.362758][T18630] usb 2-1: config 0 descriptor?? [ 2046.526311][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2046.542647][ T10] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2046.571242][ T10] usb 4-1: Product: syz [ 2046.576012][ T10] usb 4-1: Manufacturer: syz [ 2046.584222][ T10] usb 4-1: SerialNumber: syz [ 2046.608760][ T10] usb 4-1: config 0 descriptor?? [ 2046.672843][T29265] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2046.683216][T29265] Bluetooth: hci3: Injecting HCI hardware error event [ 2046.701892][T29265] Bluetooth: hci3: hardware error 0x00 [ 2046.949333][ T10] usb 4-1: USB disconnect, device number 111 [ 2046.965394][T17240] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17054'. [ 2047.047158][T17240] pimreg: entered allmulticast mode [ 2047.196542][T19134] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2047.331407][T18630] usbhid 2-1:0.1: can't add hid device: -71 [ 2047.344474][T18630] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 2047.352887][T19134] usb 3-1: Using ep0 maxpacket: 8 [ 2047.360027][T18630] usb 2-1: USB disconnect, device number 30 [ 2047.372838][T19134] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2047.391246][T19134] usb 3-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 2047.410192][T19134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.426387][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2047.441279][T19134] usb 3-1: config 0 descriptor?? [ 2047.596910][ T24] usb 5-1: config 1 has an invalid interface number: 36 but max is 0 [ 2047.612137][ T24] usb 5-1: config 1 has no interface number 0 [ 2047.622855][ T24] usb 5-1: config 1 interface 36 has no altsetting 0 [ 2047.634120][ T24] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f [ 2047.648215][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.657104][ T24] usb 5-1: Product: syz [ 2047.661375][ T24] usb 5-1: Manufacturer: syz [ 2047.675401][ T24] usb 5-1: SerialNumber: syz [ 2047.852561][T15903] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2047.891446][T19134] wacom 0003:056A:0057.0070: unknown main item tag 0x1 [ 2047.901777][T19134] wacom 0003:056A:0057.0070: ignoring exceeding usage max [ 2047.923138][ T24] redrat3 5-1:1.36: Couldn't find all endpoints [ 2047.957925][ T24] usb 5-1: USB disconnect, device number 36 [ 2048.014916][T15903] usb 2-1: Using ep0 maxpacket: 16 [ 2048.022361][T15903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2048.033532][T15903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2048.047867][T15903] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2048.057349][T15903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.065511][T15903] usb 2-1: Product: syz [ 2048.069765][T15903] usb 2-1: Manufacturer: syz [ 2048.075352][T15903] usb 2-1: SerialNumber: syz [ 2048.091291][ T42] usb 3-1: USB disconnect, device number 31 [ 2048.101351][T15903] usb 2-1: 0:2 : does not exist [ 2048.299538][T15903] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2048.341005][T15903] usb 2-1: USB disconnect, device number 31 [ 2048.379206][T15135] udevd[15135]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2048.756751][T29265] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2048.962520][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2049.123946][ T24] usb 3-1: device descriptor read/64, error -71 [ 2049.210826][T17291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17076'. [ 2049.263506][T17291] pimreg: entered allmulticast mode [ 2049.282532][T18630] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2049.393167][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2049.444536][T18630] usb 4-1: config index 0 descriptor too short (expected 113, got 103) [ 2049.465841][T18630] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2049.502949][T18630] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2049.542643][ T24] usb 3-1: device descriptor read/64, error -71 [ 2049.558744][T18630] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2049.590050][T18630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.618524][T18630] usb 4-1: Product: syz [ 2049.632246][T18630] usb 4-1: Manufacturer: syz [ 2049.659536][T18630] usb 4-1: SerialNumber: syz [ 2049.667264][ T24] usb usb3-port1: attempt power cycle [ 2049.914264][T18630] cdc_ncm 4-1:1.0: bind() failure [ 2049.943734][T15402] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2049.968821][T15402] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2049.980352][T15402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2049.997233][T15402] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2050.006265][T18630] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2050.014265][T15402] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2050.021724][T18630] cdc_ncm 4-1:1.1: bind() failure [ 2050.034566][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2050.039414][T18630] usb 4-1: USB disconnect, device number 112 [ 2050.115158][ T24] usb 3-1: device descriptor read/8, error -71 [ 2050.362997][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2050.372483][T13251] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2050.383477][ T24] usb 3-1: device descriptor read/8, error -71 [ 2050.494464][ T24] usb usb3-port1: unable to enumerate USB device [ 2050.522697][T13251] usb 5-1: Using ep0 maxpacket: 16 [ 2050.530308][T13251] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2050.551633][T13251] usb 5-1: config 1 has an invalid interface number: 237 but max is 0 [ 2050.567840][T13251] usb 5-1: config 1 has no interface number 0 [ 2050.585740][T13251] usb 5-1: config 1 interface 237 has no altsetting 0 [ 2050.610670][T13251] usb 5-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 2050.624667][T13251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.634209][T13251] usb 5-1: Product: syz [ 2050.638525][T13251] usb 5-1: Manufacturer: syz [ 2050.645996][T13251] usb 5-1: SerialNumber: syz [ 2050.734888][T17310] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.758779][T17310] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.775229][T17310] bridge_slave_0: entered allmulticast mode [ 2050.786921][T17310] bridge_slave_0: entered promiscuous mode [ 2050.799041][T17310] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.811942][T17310] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.820015][T17310] bridge_slave_1: entered allmulticast mode [ 2050.853171][T17310] bridge_slave_1: entered promiscuous mode [ 2050.918138][T13251] usb 5-1: USB disconnect, device number 37 [ 2050.982359][T17310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2051.010988][T17310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2051.065094][T17310] team0: Port device team_slave_0 added [ 2051.074766][T17310] team0: Port device team_slave_1 added [ 2051.131964][T17333] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17093'. [ 2051.161217][T17310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2051.177828][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2051.210607][T17310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2051.230594][T17310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2051.240125][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2051.267246][T17310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2051.381760][T17310] hsr_slave_0: entered promiscuous mode [ 2051.398463][T17310] hsr_slave_1: entered promiscuous mode [ 2051.407561][T17310] debugfs: 'hsr0' already exists in 'hsr' [ 2051.434986][T17310] Cannot create hsr debugfs directory [ 2052.113004][T29265] Bluetooth: hci7: command tx timeout [ 2052.194303][T17310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2052.206881][T17310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.326547][T17310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2052.342824][T17310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.640232][T17310] bond0: (slave netdevsim1): Releasing backup interface [ 2052.698481][T17310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2052.741922][T17310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.129459][T17310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2053.170863][T17310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.192653][T29265] Bluetooth: hci7: command tx timeout [ 2054.314654][T17310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2054.352101][T17310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2054.380462][T17310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2054.431708][T17310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2054.478938][T17310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2054.534891][T17310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2054.566703][T17310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2054.620020][T17310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2055.044896][T17310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2055.148941][T17310] 8021q: adding VLAN 0 to HW filter on device team0 [ 2055.216755][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.224027][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2055.306523][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.313786][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2055.655742][T17310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2055.821623][T17310] veth0_vlan: entered promiscuous mode [ 2055.896023][T17310] veth1_vlan: entered promiscuous mode [ 2056.001086][T17310] veth0_macvtap: entered promiscuous mode [ 2056.046900][T17310] veth1_macvtap: entered promiscuous mode [ 2056.272695][T29265] Bluetooth: hci7: command tx timeout [ 2056.284671][T17310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2056.359619][T17310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2056.427828][ T133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2056.493313][T21334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2056.531420][T21334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2056.574860][T21334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.039397][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2057.071727][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2057.187393][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2057.209292][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2057.250813][T17452] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17140'. [ 2057.469821][T17460] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17144'. [ 2057.496749][T17460] bridge: RTM_NEWNEIGH with invalid ether address [ 2057.662635][ T24] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 2057.845863][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 2057.892768][ T24] usb 2-1: config 1 has an invalid interface number: 167 but max is 0 [ 2057.942254][ T24] usb 2-1: config 1 has no interface number 0 [ 2057.965238][ T24] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2058.013902][ T24] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2058.050064][ T24] usb 2-1: config 1 interface 167 has no altsetting 0 [ 2058.082903][ T24] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2058.108958][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.139168][ T24] usb 2-1: Product: syz [ 2058.154386][ T24] usb 2-1: Manufacturer: syz [ 2058.166354][ T24] usb 2-1: SerialNumber: syz [ 2058.352784][T29265] Bluetooth: hci7: command tx timeout [ 2058.460000][ T24] em28xx 2-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2058.484023][ T24] em28xx 2-1:1.167: Device initialization failed. [ 2058.504656][ T24] em28xx 2-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2058.541347][ T24] usb 2-1: USB disconnect, device number 32 [ 2058.689782][ T29] audit: type=1326 audit(1785583478.062:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17487 comm="syz.3.17154" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2058.742495][ T29] audit: type=1326 audit(1785583478.062:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17487 comm="syz.3.17154" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2058.832798][ T29] audit: type=1326 audit(1785583478.062:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17487 comm="syz.3.17154" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2058.880683][ T29] audit: type=1326 audit(1785583478.062:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17487 comm="syz.3.17154" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2058.942633][ T29] audit: type=1326 audit(1785583478.062:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17487 comm="syz.3.17154" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2058.987310][ T29] audit: type=1326 audit(1785583478.092:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17487 comm="syz.3.17154" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=70 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2059.063574][ T29] audit: type=1326 audit(1785583478.092:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17487 comm="syz.3.17154" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2059.092889][ T29] audit: type=1326 audit(1785583478.092:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17487 comm="syz.3.17154" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2059.128848][T17494] loop5: detected capacity change from 0 to 7 [ 2059.150617][T17494] Dev loop5: unable to read RDB block 7 [ 2059.163176][T17494] loop5: AHDI p1 [ 2059.171505][T17494] loop5: partition table partially beyond EOD, truncated [ 2059.822638][ T2137] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 2059.986436][ T2137] usb 3-1: not running at top speed; connect to a high speed hub [ 2060.015254][ T2137] usb 3-1: config 1 has an invalid interface number: 167 but max is 0 [ 2060.033092][ T2137] usb 3-1: config 1 has no interface number 0 [ 2060.049307][ T2137] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2060.077430][ T2137] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2060.113252][ T2137] usb 3-1: config 1 interface 167 has no altsetting 0 [ 2060.122316][T17536] binder: 17535:17536 ioctl 3b88 0 returned -22 [ 2060.139690][ T2137] usb 3-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2060.160157][ T2137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.178396][ T2137] usb 3-1: Product: syz [ 2060.189984][ T2137] usb 3-1: Manufacturer: syz [ 2060.208993][ T2137] usb 3-1: SerialNumber: syz [ 2060.507779][T17542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2060.550913][ T2137] em28xx 3-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2060.580189][T17542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2060.588809][ T2137] em28xx 3-1:1.167: Device initialization failed. [ 2060.588834][ T2137] em28xx 3-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2060.615902][ T2137] usb 3-1: USB disconnect, device number 36 [ 2060.627794][T17542] bond0 (unregistering): Released all slaves [ 2060.689010][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17178'. [ 2060.827873][T17552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17181'. [ 2060.860503][T17550] pimreg3: entered allmulticast mode [ 2061.364062][ T2137] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2061.442541][ T24] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2061.532562][ T2137] usb 5-1: Using ep0 maxpacket: 16 [ 2061.541983][ T2137] usb 5-1: config 0 has no interfaces? [ 2061.551366][ T2137] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2061.567421][ T2137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.579065][ T2137] usb 5-1: Product: syz [ 2061.582920][T19137] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2061.591671][ T2137] usb 5-1: Manufacturer: syz [ 2061.598377][ T2137] usb 5-1: SerialNumber: syz [ 2061.616415][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2061.628606][ T2137] usb 5-1: config 0 descriptor?? [ 2061.646466][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2061.660074][ T24] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2061.671789][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.777079][T19137] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2061.800364][T19137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.825928][T19137] usb 3-1: Product: syz [ 2061.842620][T19137] usb 3-1: Manufacturer: syz [ 2061.847310][T19137] usb 3-1: SerialNumber: syz [ 2061.864739][T19137] usb 3-1: config 0 descriptor?? [ 2061.914838][ T24] cxacru 4-1:1.0: receive of cm 0x90 failed (-71) [ 2061.941351][ T24] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 2061.976096][ T24] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 2062.013473][ T24] usb 4-1: USB disconnect, device number 113 [ 2062.116407][T19137] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 2062.155799][T19137] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2062.186631][T19137] usb 3-1: USB disconnect, device number 37 [ 2062.804264][T17590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17194'. [ 2063.478912][T17615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17207'. [ 2064.148078][ T42] usb 5-1: USB disconnect, device number 38 [ 2064.760335][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 2064.989082][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17229'. [ 2065.005757][T17667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17229'. [ 2065.018958][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17229'. [ 2066.197133][T17696] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17242'. [ 2066.664218][T18630] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 2066.856262][T18630] usb 3-1: not running at top speed; connect to a high speed hub [ 2066.894094][T18630] usb 3-1: config 1 has an invalid interface number: 167 but max is 0 [ 2066.915222][T18630] usb 3-1: config 1 has no interface number 0 [ 2066.936707][T18630] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2066.962958][T18630] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2066.976675][T18630] usb 3-1: config 1 interface 167 has no altsetting 0 [ 2066.997070][T18630] usb 3-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2067.007587][T18630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.016071][T18630] usb 3-1: Product: syz [ 2067.028869][T18630] usb 3-1: Manufacturer: syz [ 2067.036438][T18630] usb 3-1: SerialNumber: syz [ 2067.305173][T18630] em28xx 3-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2067.340464][T18630] em28xx 3-1:1.167: Device initialization failed. [ 2067.359583][T18630] em28xx 3-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2067.395800][T18630] usb 3-1: USB disconnect, device number 38 [ 2068.021127][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17259'. [ 2068.880412][T17773] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17272'. [ 2069.592643][T18630] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2069.735954][T17799] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17284'. [ 2069.776052][T18630] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.797718][T18630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2069.815740][T18630] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2069.834740][T18630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.863363][T18630] usb 5-1: Product: syz [ 2069.879268][T18630] usb 5-1: Manufacturer: syz [ 2069.897330][T18630] usb 5-1: SerialNumber: syz [ 2069.922316][T18630] usb 5-1: config 0 descriptor?? [ 2069.949905][T18630] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2069.997631][T18630] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2070.023415][T18630] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2070.039249][T18630] usb 5-1: media controller created [ 2070.090500][T18630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2070.268931][T18630] DVB: Unable to find symbol tda10046_attach() [ 2070.287148][T18630] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2070.322732][T18630] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2070.509279][T17823] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17295'. [ 2071.185959][T17845] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2071.227149][T17845] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2071.537837][T18630] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2071.583186][T18630] usb 5-1: USB disconnect, device number 39 [ 2073.014416][T19137] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2073.212531][T19137] usb 3-1: Using ep0 maxpacket: 16 [ 2073.223533][T19137] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 2073.249005][T19137] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.272656][T19137] usb 3-1: config 0 has no interface number 0 [ 2073.294667][T19137] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 2073.310300][T19137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.342275][T19137] usb 3-1: Product: syz [ 2073.359312][T19137] usb 3-1: Manufacturer: syz [ 2073.380167][T19137] usb 3-1: SerialNumber: syz [ 2073.408033][T19137] usb 3-1: config 0 descriptor?? [ 2073.427432][T19137] rndis_host 3-1:0.180: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 2073.479124][T17912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17334'. [ 2073.649230][ T24] usb 3-1: USB disconnect, device number 39 [ 2073.724640][ T2137] IPVS: starting estimator thread 0... [ 2073.809682][T17925] tipc: Enabling of bearer rejected, failed to enable media [ 2073.835861][T17922] IPVS: using max 28 ests per chain, 67200 per kthread [ 2074.101553][T17936] netlink: 'syz.4.17344': attribute type 63 has an invalid length. [ 2074.137667][T17936] netlink: 5 bytes leftover after parsing attributes in process `syz.4.17344'. [ 2074.170857][T17936] gretap0: entered allmulticast mode [ 2074.198697][T17936] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2074.582917][T13251] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2074.679688][T17953] IPv6: addrconf: prefix option has invalid lifetime [ 2074.780999][T13251] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2074.797176][T13251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.814628][T13251] usb 3-1: Product: syz [ 2074.825722][T13251] usb 3-1: Manufacturer: syz [ 2074.841072][T13251] usb 3-1: SerialNumber: syz [ 2074.878446][T13251] usb 3-1: config 0 descriptor?? [ 2075.082702][ T2137] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2075.109837][T13251] usb 3-1: ignoring: probably an ADSL modem [ 2075.254545][ T2137] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.286225][ T2137] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 2075.305923][ T2137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.330380][ T2137] usb 5-1: Product: syz [ 2075.332086][T13251] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2075.342918][ T2137] usb 5-1: Manufacturer: syz [ 2075.357340][ T2137] usb 5-1: SerialNumber: syz [ 2075.364297][T13251] usb 3-1: USB disconnect, device number 40 [ 2075.387990][ T2137] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 2075.404855][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87 [ 2075.423925][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 2075.444607][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 2075.463501][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 2075.482634][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 2075.500598][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 2075.509353][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85 [ 2075.517403][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 2075.528213][ T2137] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2075.548648][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 2075.557272][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 2075.567927][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 2075.577803][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 2075.593464][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86 [ 2075.610118][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 2075.621121][ T2137] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2075.636563][ T2137] usb 5-1: USB disconnect, device number 40 [ 2075.684879][ T2137] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2075.725231][ T2137] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2075.744744][ T2137] keyspan 5-1:1.0: device disconnected [ 2076.602910][T18630] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2076.762534][T18630] usb 4-1: Using ep0 maxpacket: 16 [ 2076.776967][T18630] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.799977][T18630] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2076.825756][T18630] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2076.854459][T18630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.879246][T18630] usb 4-1: Product: syz [ 2076.895682][T18630] usb 4-1: Manufacturer: syz [ 2076.907765][T18630] usb 4-1: SerialNumber: syz [ 2076.949195][T18630] usb 4-1: 0:2 : does not exist [ 2077.157184][T18630] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2077.343072][T18630] usb 4-1: USB disconnect, device number 114 [ 2077.506636][T15135] udevd[15135]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2078.195475][T18016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17373'. [ 2078.237423][T18015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2079.011979][T18037] program syz.3.17383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2079.076247][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17384'. [ 2079.092490][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2079.252566][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 2079.265476][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2079.290586][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2079.321949][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2079.354205][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.375598][ T24] usb 3-1: Product: syz [ 2079.390463][ T24] usb 3-1: Manufacturer: syz [ 2079.401575][ T24] usb 3-1: SerialNumber: syz [ 2079.430102][ T24] usb 3-1: 0:2 : does not exist [ 2079.640387][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2079.769824][ T24] usb 3-1: USB disconnect, device number 41 [ 2079.890732][T15135] udevd[15135]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2080.574448][T18630] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2080.763210][T18630] usb 3-1: Using ep0 maxpacket: 32 [ 2080.790752][T18630] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2080.838921][T18630] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2080.880419][T18630] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2080.915087][T18630] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2080.963854][T18630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.001893][T18630] usb 3-1: Product: syz [ 2081.037166][T18630] usb 3-1: Manufacturer: syz [ 2081.058912][T18630] usb 3-1: SerialNumber: syz [ 2081.091210][T18630] usb 3-1: config 0 descriptor?? [ 2081.534574][T18630] gs_usb 3-1:0.0: Configuring for 108 interfaces [ 2081.683062][T15903] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2081.737652][T18630] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2081.772012][T18630] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 2081.862588][T15903] usb 4-1: Using ep0 maxpacket: 16 [ 2081.893558][T15903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.933042][T15903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2081.971312][T19137] usb 3-1: USB disconnect, device number 42 [ 2082.017551][T15903] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2082.077124][T15903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.111463][T15903] usb 4-1: Product: syz [ 2082.130173][T15903] usb 4-1: Manufacturer: syz [ 2082.158576][T15903] usb 4-1: SerialNumber: syz [ 2082.222249][T15903] usb 4-1: 0:2 : does not exist [ 2082.413096][T15903] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2082.631744][T15903] usb 4-1: USB disconnect, device number 115 [ 2082.849671][T15135] udevd[15135]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2083.432524][ T42] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2083.584446][ T42] usb 4-1: device descriptor read/64, error -71 [ 2083.824248][ T42] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2083.887840][T13251] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2083.962490][ T42] usb 4-1: device descriptor read/64, error -71 [ 2084.077770][T13251] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2084.108565][ T42] usb usb4-port1: attempt power cycle [ 2084.117211][T13251] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 2084.159169][T13251] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2084.198062][T13251] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 2084.221151][T13251] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 2084.248277][T13251] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 2084.285325][T13251] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 2084.309088][T13251] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 2084.330112][T13251] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 2084.352150][T13251] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 2084.372236][T13251] usb 2-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 2084.405916][T13251] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 2084.425620][T13251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.442783][T13251] usb 2-1: Product: syz [ 2084.452752][T13251] usb 2-1: Manufacturer: syz [ 2084.464905][T13251] usb 2-1: SerialNumber: syz [ 2084.487068][T18124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2084.493842][ T42] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2084.509389][T18124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2084.521025][T18124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2084.544413][ T42] usb 4-1: device descriptor read/8, error -71 [ 2084.544861][T18124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2084.582824][T18124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2084.601448][T18124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2084.623425][T18124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2084.631949][T18124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2084.640409][T18124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2084.651531][T13251] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 2084.661519][T13251] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 2084.674065][T13251] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5 [ 2084.686859][T18138] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17425'. [ 2084.699036][T13251] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2084.715072][T13251] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 2084.733277][T13251] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 2084.759457][T13251] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 2084.770170][T13251] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2084.806695][ T42] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2084.848007][ T42] usb 4-1: device descriptor read/8, error -71 [ 2084.881464][T15903] usb 2-1: USB disconnect, device number 33 [ 2084.961892][T15903] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2084.982964][ T42] usb usb4-port1: unable to enumerate USB device [ 2084.995818][T15903] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2085.030140][T15903] keyspan 2-1:1.0: device disconnected [ 2085.512912][T15903] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2085.580012][T18165] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2085.658482][T18169] random: crng reseeded on system resumption [ 2085.692515][T15903] usb 5-1: Using ep0 maxpacket: 16 [ 2085.704939][T15903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.733920][T15903] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2085.760557][T15903] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2085.778171][T15903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.787453][T15903] usb 5-1: Product: syz [ 2085.791767][T15903] usb 5-1: Manufacturer: syz [ 2085.802670][T15903] usb 5-1: SerialNumber: syz [ 2085.811341][T15903] usb 5-1: config 0 descriptor?? [ 2085.964380][T13251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2086.381667][T18182] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2086.614414][T15903] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 2086.773902][T15903] usb 4-1: not running at top speed; connect to a high speed hub [ 2086.784065][T15903] usb 4-1: config 1 has an invalid interface number: 167 but max is 0 [ 2086.792839][T15903] usb 4-1: config 1 has no interface number 0 [ 2086.799116][T15903] usb 4-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2086.813033][T15903] usb 4-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2086.823590][T15903] usb 4-1: config 1 interface 167 has no altsetting 0 [ 2086.840039][T15903] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2086.849762][T15903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.885866][T15903] usb 4-1: Product: syz [ 2086.894440][T15903] usb 4-1: Manufacturer: syz [ 2086.899646][T15903] usb 4-1: SerialNumber: syz [ 2087.148479][T15903] em28xx 4-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2087.179948][T15903] em28xx 4-1:1.167: Device initialization failed. [ 2087.193964][T15903] em28xx 4-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2087.210759][T18197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17450'. [ 2087.225479][T18197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17450'. [ 2087.235197][T15903] usb 4-1: USB disconnect, device number 120 [ 2087.305488][T18199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17451'. [ 2087.682551][T19137] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2087.759096][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17457'. [ 2087.839160][T19137] usb 2-1: Using ep0 maxpacket: 32 [ 2087.850304][T19137] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2087.874498][T19137] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2087.898557][T19137] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2087.912324][T19137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.924084][T19137] usb 2-1: config 0 descriptor?? [ 2088.013598][T18224] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17463'. [ 2088.148383][ T29] audit: type=1326 audit(1785583507.522:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.195900][ T29] audit: type=1326 audit(1785583507.552:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.225336][ T29] audit: type=1326 audit(1785583507.552:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.251268][ T29] audit: type=1326 audit(1785583507.552:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.277560][ T29] audit: type=1326 audit(1785583507.552:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.324485][ T29] audit: type=1326 audit(1785583507.552:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.353665][ T2137] usb 5-1: USB disconnect, device number 41 [ 2088.420965][ T29] audit: type=1326 audit(1785583507.552:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.487474][ T29] audit: type=1326 audit(1785583507.552:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.517516][ T29] audit: type=1326 audit(1785583507.552:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.545466][ T29] audit: type=1326 audit(1785583507.572:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.3.17466" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2088.570419][T18237] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17468'. [ 2088.603299][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2088.796689][ T2137] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 2088.964321][ T2137] usb 5-1: not running at top speed; connect to a high speed hub [ 2088.995856][ T2137] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 2089.005670][ T2137] usb 5-1: config 1 has no interface number 0 [ 2089.011919][ T2137] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2089.024305][ T2137] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2089.035057][ T2137] usb 5-1: config 1 interface 167 has no altsetting 0 [ 2089.045327][ T2137] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2089.054676][ T2137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.076138][ T2137] usb 5-1: Product: syz [ 2089.089362][ T2137] usb 5-1: Manufacturer: syz [ 2089.127336][ T2137] usb 5-1: SerialNumber: syz [ 2089.199443][T18253] netlink: 416 bytes leftover after parsing attributes in process `syz.2.17474'. [ 2089.424535][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17478'. [ 2089.437082][ T2137] em28xx 5-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2089.451607][ T2137] em28xx 5-1:1.167: Device initialization failed. [ 2089.460485][ T2137] em28xx 5-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2089.476237][ T2137] usb 5-1: USB disconnect, device number 42 [ 2089.612623][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2089.774414][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 2089.797383][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2089.815517][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2089.826559][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.850725][ T24] usb 3-1: Product: syz [ 2089.869376][ T24] usb 3-1: Manufacturer: syz [ 2089.885770][ T24] usb 3-1: SerialNumber: syz [ 2089.915026][ T24] usb 3-1: config 0 descriptor?? [ 2090.402557][T19137] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 2090.479570][ T24] usb 2-1: USB disconnect, device number 34 [ 2090.586993][T19137] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2090.614610][T19137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.654649][T19137] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2090.675643][T19137] pvrusb2: ********** [ 2090.681626][T19137] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2090.695048][T29265] Bluetooth: hci2: command 0x0406 tx timeout [ 2090.706412][T19137] pvrusb2: Important functionality might not be entirely working. [ 2090.719922][T19137] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2090.750006][T19137] pvrusb2: ********** [ 2090.877355][ T2367] pvrusb2: Invalid write control endpoint [ 2091.016082][ T2367] pvrusb2: Invalid write control endpoint [ 2091.022047][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2091.031825][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2091.043700][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2091.055761][ T2367] pvrusb2: Device being rendered inoperable [ 2091.061999][ T2367] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 2091.071004][ T2367] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 2091.118525][T13251] usb 5-1: USB disconnect, device number 43 [ 2091.138080][ T2367] pvrusb2: Attached sub-driver cx25840 [ 2091.144184][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2091.161188][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2091.652877][T18305] loop5: detected capacity change from 0 to 7 [ 2091.672147][T18305] Dev loop5: unable to read RDB block 7 [ 2091.685703][T18305] loop5: AHDI p1 [ 2091.693882][T18305] loop5: partition table partially beyond EOD, truncated [ 2091.861428][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17497'. [ 2092.132551][ T24] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2092.292597][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 2092.303554][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.328707][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2092.350446][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2092.385406][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2092.404313][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.421896][ T24] usb 4-1: Product: syz [ 2092.430850][ T24] usb 4-1: Manufacturer: syz [ 2092.446483][ T24] usb 4-1: SerialNumber: syz [ 2092.466936][T13251] usb 3-1: USB disconnect, device number 43 [ 2092.718815][ T24] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 2092.734832][ T24] cdc_ncm 4-1:1.0: bind() failure [ 2092.775021][ T24] usb 4-1: USB disconnect, device number 121 [ 2093.444425][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17502'. [ 2093.963354][ T24] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2094.127847][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 2094.147170][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.170572][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2094.191367][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2094.211032][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.238456][ T24] usb 4-1: config 0 descriptor?? [ 2094.254772][ T24] hub 4-1:0.0: USB hub found [ 2094.463810][ T24] hub 4-1:0.0: 1 port detected [ 2094.900759][ T24] usb 4-1: USB disconnect, device number 122 [ 2095.202529][T15903] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2095.364379][T15903] usb 5-1: Using ep0 maxpacket: 16 [ 2095.374192][T15903] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2095.388527][T15903] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2095.406956][T15903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.424418][T15903] usb 5-1: Product: syz [ 2095.437808][T15903] usb 5-1: Manufacturer: syz [ 2095.448537][T15903] usb 5-1: SerialNumber: syz [ 2095.466554][T15903] usb 5-1: config 0 descriptor?? [ 2095.506525][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17514'. [ 2096.259189][T18332] syz.2.17506 (18332): drop_caches: 1 [ 2097.101635][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17525'. [ 2097.160028][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17526'. [ 2097.315377][T18389] loop5: detected capacity change from 0 to 7 [ 2097.323664][T18389] Dev loop5: unable to read RDB block 7 [ 2097.329386][T18389] loop5: AHDI p1 [ 2097.333450][T18389] loop5: partition table partially beyond EOD, truncated [ 2097.413121][T13251] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2097.564509][T13251] usb 4-1: Using ep0 maxpacket: 8 [ 2097.576949][T13251] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.587983][T13251] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2097.597466][T13251] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2097.617333][T13251] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2097.629167][T13251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.645143][T13251] usb 4-1: Product: syz [ 2097.649715][T13251] usb 4-1: Manufacturer: syz [ 2097.656406][T13251] usb 4-1: SerialNumber: syz [ 2097.878588][T13251] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 2097.902629][T13251] cdc_ncm 4-1:1.0: bind() failure [ 2097.941053][T13251] usb 4-1: USB disconnect, device number 123 [ 2098.052155][T15903] usb 5-1: USB disconnect, device number 44 [ 2098.183806][T18402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17532'. [ 2098.612202][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17536'. [ 2098.722498][T15903] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2098.841659][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.849916][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.892614][T15903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2098.905279][T15903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2098.919488][T15903] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2098.929593][T15903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.939817][T15903] usb 4-1: Product: syz [ 2098.944697][T15903] usb 4-1: Manufacturer: syz [ 2098.950535][T15903] usb 4-1: SerialNumber: syz [ 2098.961705][T15903] usb 4-1: config 0 descriptor?? [ 2098.984258][T15903] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2099.009240][T15903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2099.040597][T15903] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2099.056011][T15903] usb 4-1: media controller created [ 2099.089565][T18420] loop5: detected capacity change from 0 to 7 [ 2099.103702][T18420] Dev loop5: unable to read RDB block 7 [ 2099.109589][T18420] loop5: AHDI p1 [ 2099.113823][T18420] loop5: partition table partially beyond EOD, truncated [ 2099.121556][T15903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2099.427506][T15903] DVB: Unable to find symbol tda10046_attach() [ 2099.434394][T15903] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2099.445248][T15903] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2099.640492][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17547'. [ 2099.659399][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17546'. [ 2099.892091][T18444] loop5: detected capacity change from 0 to 7 [ 2099.908101][T18443] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 2099.909296][T18444] Dev loop5: unable to read RDB block 7 [ 2099.923378][T18443] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 2099.934727][T18444] loop5: AHDI p1 [ 2099.938591][T18444] loop5: partition table partially beyond EOD, truncated [ 2100.167046][T15903] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2100.198292][T15903] usb 4-1: USB disconnect, device number 124 [ 2100.314401][T18459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17558'. [ 2100.480436][T18467] loop5: detected capacity change from 0 to 7 [ 2100.491423][T18467] Dev loop5: unable to read RDB block 7 [ 2100.498904][T18467] loop5: AHDI p1 [ 2100.503283][T18467] loop5: partition table partially beyond EOD, truncated [ 2100.622630][ T2137] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2100.785474][ T2137] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2100.800101][ T2137] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2100.812159][ T2137] usb 3-1: config 0 has no interface number 0 [ 2100.825476][ T2137] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 2100.835815][ T2137] usb 3-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 2100.847755][ T2137] usb 3-1: Product: syz [ 2100.856458][ T2137] usb 3-1: SerialNumber: syz [ 2100.871733][ T2137] usb 3-1: config 0 descriptor?? [ 2100.891064][ T2137] ftdi_sio 3-1:0.117: FTDI USB Serial Device converter detected [ 2100.911165][ T2137] usb 3-1: Detected SIO [ 2100.921843][ T2137] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2101.115254][T19137] usb 3-1: USB disconnect, device number 44 [ 2101.125694][T18488] netlink: 'syz.4.17574': attribute type 30 has an invalid length. [ 2101.148540][T19137] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2101.175447][T19137] ftdi_sio 3-1:0.117: device disconnected [ 2101.313099][T18500] openvswitch: netlink: Flow key attr not present in new flow. [ 2101.348764][T18498] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2101.355249][T18498] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2101.364843][T18498] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2101.377628][T18498] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2101.387097][T18498] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2101.418401][T18498] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2101.426177][T18498] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2101.444671][T18498] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2101.525339][T13251] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2101.670945][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17583'. [ 2101.692495][T13251] usb 2-1: Using ep0 maxpacket: 8 [ 2101.706903][T13251] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2101.719649][T13251] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2101.731993][T13251] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2101.741402][T13251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.751877][T13251] usb 2-1: Product: syz [ 2101.754946][ T2137] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 2101.756677][T13251] usb 2-1: Manufacturer: syz [ 2101.768484][T13251] usb 2-1: SerialNumber: syz [ 2101.788946][T13251] usb 2-1: config 0 descriptor?? [ 2101.909114][T18516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17584'. [ 2101.924377][ T2137] usb 5-1: not running at top speed; connect to a high speed hub [ 2101.947508][ T2137] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 2101.968596][ T2137] usb 5-1: config 1 has no interface number 0 [ 2101.983361][ T2137] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 2102.019323][ T2137] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2102.054289][ T2137] usb 5-1: config 1 interface 167 has no altsetting 0 [ 2102.076023][ T2137] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 2102.096219][ T2137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.129818][ T2137] usb 5-1: Product: syz [ 2102.142351][ T2137] usb 5-1: Manufacturer: syz [ 2102.155715][ T2137] usb 5-1: SerialNumber: syz [ 2102.405883][ T2137] em28xx 5-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 2102.419399][ T2137] em28xx 5-1:1.167: Device initialization failed. [ 2102.427233][ T2137] em28xx 5-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 2102.447404][ T2137] usb 5-1: USB disconnect, device number 45 [ 2102.756103][T15402] Bluetooth: hci2: unexpected event for opcode 0x00d0 [ 2103.394584][T29265] Bluetooth: hci4: command 0x0406 tx timeout [ 2103.401154][T15402] Bluetooth: hci6: command 0x0406 tx timeout [ 2103.407409][T29265] Bluetooth: hci5: command 0x0c1a tx timeout [ 2103.472575][T29265] Bluetooth: hci7: command 0x0c1a tx timeout [ 2103.956316][ T30] INFO: task syz.6.16033:14906 blocked for more than 143 seconds. [ 2103.988661][ T30] Tainted: G L syzkaller #0 [ 2103.996917][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2104.006818][ T30] task:syz.6.16033 state:D stack:28360 pid:14906 tgid:14905 ppid:12686 task_flags:0x400140 flags:0x08080002 [ 2104.020078][ T30] Call Trace: [ 2104.026215][ T30] [ 2104.029486][ T30] __schedule+0x17d9/0x56c0 [ 2104.036342][ T30] ? __lock_acquire+0x683/0x2cf0 [ 2104.041702][ T30] ? __pfx___schedule+0x10/0x10 [ 2104.049026][ T30] ? schedule+0x90/0x2b0 [ 2104.057782][ T30] schedule+0x164/0x2b0 [ 2104.063670][ T30] cgroup_lock_and_drain_offline+0x51a/0x650 [ 2104.070051][ T30] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 2104.077519][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2104.084125][ T30] cgroup_kn_lock_live+0x120/0x230 [ 2104.089792][ T30] cgroup_subtree_control_write+0x4b5/0x1080 [ 2104.098393][ T30] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2104.105776][ T30] ? kernfs_root+0x1c/0x230 [ 2104.110561][ T30] ? kernfs_root+0x1c/0x230 [ 2104.116108][ T30] ? kernfs_root+0x1ea/0x230 [ 2104.121020][ T30] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2104.141960][ T30] cgroup_file_write+0x331/0x8f0 [ 2104.154596][ T30] ? kernfs_fop_write_iter+0x22b/0x540 [ 2104.169594][ T30] ? __pfx_cgroup_file_write+0x10/0x10 [ 2104.175535][ T30] ? __kmalloc_noprof+0x396/0x720 [ 2104.180655][ T30] ? vfs_write+0x22b/0xba0 [ 2104.186110][ T30] ? __kmalloc_noprof+0x1ad/0x720 [ 2104.196965][ T30] ? __pfx_cgroup_file_write+0x10/0x10 [ 2104.203894][ T30] kernfs_fop_write_iter+0x3a4/0x540 [ 2104.209735][ T30] vfs_write+0x612/0xba0 [ 2104.214176][ T30] ? __pfx_vfs_write+0x10/0x10 [ 2104.218994][ T30] ? __fget_files+0x2a/0x420 [ 2104.224264][ T30] ksys_write+0x150/0x270 [ 2104.228793][ T30] ? __pfx_ksys_write+0x10/0x10 [ 2104.233879][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 2104.239243][ T30] ? do_fast_syscall_32+0x33/0x70 [ 2104.245400][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 2104.250752][ T30] ? irqentry_exit+0x10f/0x8f0 [ 2104.257361][ T30] ? trace_irq_disable+0x3b/0x140 [ 2104.267376][ T30] do_fast_syscall_32+0x33/0x70 [ 2104.274043][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2104.280534][ T30] RIP: 0023:0xf7f660ec [ 2104.286191][ T30] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2104.294865][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 2104.308272][ T30] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 2104.318682][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2104.327935][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2104.336218][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2104.344647][ T30] [ 2104.347966][ T30] [ 2104.347966][ T30] Showing all locks held in the system: [ 2104.369223][ T10] usb 2-1: USB disconnect, device number 35 [ 2104.387167][ T30] 3 locks held by kworker/0:1/10: [ 2104.396041][ T30] 1 lock held by khungtaskd/30: [ 2104.401108][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2104.411718][ T30] 1 lock held by klogd/4981: [ 2104.416635][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 2104.431256][ T30] 1 lock held by udevd/4992: [ 2104.437476][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 2104.447950][ T30] 2 locks held by getty/5380: [ 2104.453129][ T30] #0: ffff888035b5f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2104.463468][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2104.478663][ T30] 3 locks held by syz.6.16033/14906: [ 2104.485117][ T30] #0: ffff888025df0d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 2104.495605][ T30] #1: ffff8880124c8450 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 2104.506352][ T30] #2: ffff88805815fc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 2104.518750][ T30] [ 2104.521159][ T30] ============================================= [ 2104.521159][ T30] [ 2104.531424][ T30] NMI backtrace for cpu 1 [ 2104.531449][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2104.531478][ T30] Tainted: [L]=SOFTLOCKUP [ 2104.531486][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2104.531497][ T30] Call Trace: [ 2104.531505][ T30] [ 2104.531514][ T30] dump_stack_lvl+0xe8/0x150 [ 2104.531551][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 2104.531574][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2104.531608][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2104.531633][ T30] sys_info+0x135/0x170 [ 2104.531664][ T30] watchdog+0xfd7/0x1030 [ 2104.531701][ T30] ? watchdog+0x1c7/0x1030 [ 2104.531735][ T30] kthread+0x388/0x470 [ 2104.531767][ T30] ? __pfx_watchdog+0x10/0x10 [ 2104.531792][ T30] ? __pfx_kthread+0x10/0x10 [ 2104.531824][ T30] ret_from_fork+0x514/0xb70 [ 2104.531860][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2104.531892][ T30] ? __switch_to+0xc89/0x1420 [ 2104.531921][ T30] ? __pfx_kthread+0x10/0x10 [ 2104.531954][ T30] ret_from_fork_asm+0x1a/0x30 [ 2104.531991][ T30] [ 2104.532000][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2104.652168][ C0] NMI backtrace for cpu 0 [ 2104.652196][ C0] CPU: 0 UID: 0 PID: 27800 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 2104.652221][ C0] Tainted: [L]=SOFTLOCKUP [ 2104.652228][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2104.652241][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2104.652272][ C0] RIP: 0010:__lock_acquire+0x5c/0x2cf0 [ 2104.652300][ C0] Code: 0f 84 6e 13 00 00 49 89 fb 48 8b 07 48 3d 20 05 31 94 0f 84 5c 13 00 00 41 89 cd 41 89 d2 8b 0d 9a b4 ff 0c 85 c9 44 0f 44 c1 <31> ff 48 3d 10 05 31 94 41 0f 45 f8 8b 0d 02 cd d5 18 85 c9 0f 95 [ 2104.652317][ C0] RSP: 0000:ffffc9000e637338 EFLAGS: 00000002 [ 2104.652332][ C0] RAX: ffffffff9a7cbd20 RBX: 0000000000000000 RCX: 0000000000000001 [ 2104.652348][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb59c60 [ 2104.652360][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2104.652370][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 2104.652383][ C0] R13: 0000000000000002 R14: ffff888027a28000 R15: 0000000000000246 [ 2104.652397][ C0] FS: 0000000000000000(0000) GS:ffff888124f4c000(0000) knlGS:0000000000000000 [ 2104.652414][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2104.652427][ C0] CR2: 00005623fc21b168 CR3: 0000000041292000 CR4: 00000000003526f0 [ 2104.652444][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 2104.652457][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2104.652471][ C0] Call Trace: [ 2104.652479][ C0] [ 2104.652492][ C0] ? __lock_acquire+0x683/0x2cf0 [ 2104.652521][ C0] ? unwind_next_frame+0x8f/0x2550 [ 2104.652539][ C0] ? lock_acquire+0x106/0x350 [ 2104.652565][ C0] ? unwind_next_frame+0x8f/0x2550 [ 2104.652582][ C0] lock_acquire+0x106/0x350 [ 2104.652606][ C0] ? unwind_next_frame+0x8f/0x2550 [ 2104.652628][ C0] ? unwind_next_frame+0x8f/0x2550 [ 2104.652645][ C0] ? ret_from_fork+0x514/0xb70 [ 2104.652671][ C0] ? unwind_next_frame+0x8f/0x2550 [ 2104.652689][ C0] unwind_next_frame+0xac/0x2550 [ 2104.652707][ C0] ? unwind_next_frame+0x8f/0x2550 [ 2104.652727][ C0] ? kthread+0x388/0x470 [ 2104.652751][ C0] ? unwind_next_frame+0x8f/0x2550 [ 2104.652777][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2104.652801][ C0] arch_stack_walk+0x11b/0x150 [ 2104.652821][ C0] ? ret_from_fork+0x514/0xb70 [ 2104.652847][ C0] stack_trace_save+0xa9/0x100 [ 2104.652869][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2104.652892][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2104.652913][ C0] kasan_save_track+0x3e/0x80 [ 2104.652935][ C0] ? kasan_save_track+0x3e/0x80 [ 2104.652957][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 2104.652980][ C0] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 2104.653004][ C0] ? __alloc_skb+0x2bd/0x7a0 [ 2104.653020][ C0] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 2104.653042][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 2104.653061][ C0] ? worker_thread+0xa47/0xfb0 [ 2104.653080][ C0] ? kthread+0x388/0x470 [ 2104.653103][ C0] ? ret_from_fork+0x514/0xb70 [ 2104.653147][ C0] __kasan_kmalloc+0x93/0xb0 [ 2104.653171][ C0] __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 2104.653195][ C0] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 2104.653217][ C0] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 2104.653240][ C0] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 2104.653262][ C0] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 2104.653289][ C0] __alloc_skb+0x2bd/0x7a0 [ 2104.653308][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 2104.653337][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 2104.653357][ C0] process_scheduled_works+0xa8e/0x14e0 [ 2104.653389][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2104.653413][ C0] ? assign_work+0x3cf/0x5d0 [ 2104.653434][ C0] worker_thread+0xa47/0xfb0 [ 2104.653461][ C0] ? __kthread_parkme+0x71/0x1f0 [ 2104.653487][ C0] kthread+0x388/0x470 [ 2104.653513][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2104.653533][ C0] ? __pfx_kthread+0x10/0x10 [ 2104.653558][ C0] ret_from_fork+0x514/0xb70 [ 2104.653585][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2104.653610][ C0] ? __switch_to+0xc89/0x1420 [ 2104.653633][ C0] ? __pfx_kthread+0x10/0x10 [ 2104.653658][ C0] ret_from_fork_asm+0x1a/0x30 [ 2104.653682][ C0] [ 2104.668172][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2104.668254][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2104.668336][ T30] Tainted: [L]=SOFTLOCKUP [ 2104.668365][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2104.668397][ T30] Call Trace: [ 2104.668427][ T30] [ 2104.668450][ T30] vpanic+0x56c/0xa60 [ 2104.668560][ T30] ? __pfx___schedule+0x10/0x10 [ 2104.668624][ T30] ? __pfx_vpanic+0x10/0x10 [ 2104.668736][ T30] panic+0xc5/0xd0 [ 2104.668805][ T30] ? __pfx_panic+0x10/0x10 [ 2104.668885][ T30] ? preempt_schedule_common+0x82/0xd0 [ 2104.668956][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 2104.669030][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 2104.669094][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 2104.669158][ T30] watchdog+0x1030/0x1030 [ 2104.669254][ T30] ? watchdog+0x1c7/0x1030 [ 2105.161749][ T30] kthread+0x388/0x470 [ 2105.165858][ T30] ? __pfx_watchdog+0x10/0x10 [ 2105.170560][ T30] ? __pfx_kthread+0x10/0x10 [ 2105.175178][ T30] ret_from_fork+0x514/0xb70 [ 2105.179803][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2105.184946][ T30] ? __switch_to+0xc89/0x1420 [ 2105.189655][ T30] ? __pfx_kthread+0x10/0x10 [ 2105.194280][ T30] ret_from_fork_asm+0x1a/0x30 [ 2105.199078][ T30] [ 2105.202728][ T30] Kernel Offset: disabled [ 2105.207071][ T30] Rebooting in 86400 seconds..