last executing test programs: 38.080104073s ago: executing program 2 (id=2335): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc82480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0x0, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 37.466501062s ago: executing program 2 (id=2336): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x9) 37.031172183s ago: executing program 2 (id=2337): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 36.638030658s ago: executing program 2 (id=2339): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0xcc, 0x2, 0x8, 0x302, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x101}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xee4}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7e08}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1800}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 36.266307878s ago: executing program 2 (id=2342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="54000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8", @ANYRES32=r2], 0x54}, 0x1, 0xba01}, 0x810) 35.852190789s ago: executing program 2 (id=2343): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x8, 0x6011, 0xffffffffffffffff, 0xffffffffffffc000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$usbmon(0x0, 0x3, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, 0x0, 0x80) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x5, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x18, 0xfffffffffffffffd) keyctl$revoke(0x3, r7) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xffffffffffffffc8, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) sendto(r5, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 17.054056987s ago: executing program 1 (id=2475): socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x3, 0x8) socket(0x11, 0xa, 0x8) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x38, 0x1) 16.791692038s ago: executing program 1 (id=2477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000001240)="b6", 0x1, 0x24000000, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x85}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x2, 0x4) 15.772034703s ago: executing program 1 (id=2489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) socket(0x10, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x800, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0xb, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x7, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x4], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x5, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x2000000e, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r4, 0x5602, 0x0) 12.876120414s ago: executing program 1 (id=2505): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x54}}, 0x800) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) socket$packet(0x11, 0x2, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 10.131494648s ago: executing program 0 (id=2529): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r2, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000001cc0)=ANY=[]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 6.909834526s ago: executing program 0 (id=2552): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4", 0xe1}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c0a", 0x65}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.607510119s ago: executing program 0 (id=2557): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000000)={0x6, 0x1, 0xd, 0x9, 0x0, 0x5, 0x2, 0x4}, &(0x7f0000000040)={0x8, 0x0, 0x3, 0x7fffffff, 0x7fffffff, 0x9, 0xfffffffffffffff7, 0x8001}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 4.809166421s ago: executing program 1 (id=2571): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r2, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000001cc0)=ANY=[]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.980852147s ago: executing program 4 (id=2581): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 1.707184087s ago: executing program 1 (id=2583): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="1268a3db5ba40fe82ecf3465af3b9884890941251ee0", 0x16}, {&(0x7f00000004c0)="6059337673465062eacefc40e1b438cebc348d134fc35955cd0faaf679", 0x1d}, {&(0x7f00000001c0)="421451baa0a0db86bb45108b5682e3b12e9794b15c70cc3e977a8947cae6d3aaa0a213355827b2ed96d2097dcbef0d6848e99cb81065", 0x36}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="56a8c6ad830a8f74a318", 0xa}, {&(0x7f0000000840)="18c01ab5a41c262306d7d5661e70c1f60d254a68318c81aad7e16dd36ba3358d2385a2616333ebb179d83c74ce920187e2d2a1a5c6507cfefcd91f2900bdfb8a75f58a01a375754dd9756703ca8e7387d78db3c315da549d3a18dece16b7951c6983eeb2c377114769295d6498e328acb507395066e37e087d26f4f4389f", 0x7e}, {&(0x7f0000000600)="9c46f2b6aec7ddf8fe83fd452bb6ed0d3949234d4bf8f7f5ae31889f08042779c2a20d1ebee3a5b435b9632debfc43d90571315da865ef", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a80)="5a7bfb23ecd78eb611f04e232fc7a3b9cf746eb059e3ef86a60c", 0x1a}, {&(0x7f0000001400)="4e9c6ea4d55899dde1e3a575597ce06ac118933a2ba40800da2d5febc66f3ddfb40fbf41596fa303000000000000003cc2972f3c9bbdea7d528c1ce3810000000000000022e1", 0x46}, {&(0x7f0000000c80)='*', 0x1}, {&(0x7f0000000d00)="f05a43f1c3a0f11db08405c5f817983bb055efacfe3ff4498ca1f6184c093c91b8a4c352d1840019", 0x28}], 0x4}}], 0x3, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) 1.444381345s ago: executing program 4 (id=2585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) 1.283444767s ago: executing program 0 (id=2587): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4", 0xe1}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c0a", 0x65}], 0x5}}, {{0x0, 0x0, &(0x7f00000009c0)}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.133291323s ago: executing program 4 (id=2588): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 1.072192076s ago: executing program 0 (id=2590): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000004c0)=[{&(0x7f0000000580)='\t', 0x1}], 0x1, 0x10, 0x0) 897.476767ms ago: executing program 3 (id=2591): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x54}}, 0x800) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) socket$packet(0x11, 0x2, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 897.121413ms ago: executing program 0 (id=2592): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = epoll_create1(0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000780)={0x10000000}) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 726.280574ms ago: executing program 3 (id=2593): r0 = epoll_create1(0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)={0x10000000}) read$dsp(r1, &(0x7f0000000140)=""/40, 0x28) 713.62716ms ago: executing program 4 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "4abefa"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x4044054) 327.07646ms ago: executing program 4 (id=2595): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 250.114895ms ago: executing program 3 (id=2596): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0x8, [0x204, 0x2, 0xfffa, 0x0, 0xfff, 0x8000, 0x5, 0x47, 0x3, 0x1, 0x4, 0xd20, 0x7, 0xfff8, 0x4, 0x8, 0x7867, 0x7e27, 0xac, 0xa, 0x8, 0x5109, 0x81, 0x7, 0x0, 0xfff, 0x6, 0x2, 0x400, 0xcad, 0x6, 0x9, 0x7ff, 0x0, 0x1, 0x12, 0x7, 0x63, 0x7, 0xb5, 0x5, 0xd, 0x1000, 0x9, 0x3ff, 0xfffc, 0x4, 0xc8], 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000400)={0x0, 0x2400000, 0x7, r1, 0x0, &(0x7f00000003c0)={0x990a77, 0xff, '\x00', @ptr=0x83e}}) 215.160534ms ago: executing program 4 (id=2597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) 177.671281ms ago: executing program 3 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000026c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000208000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 25.592046ms ago: executing program 3 (id=2599): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10001}) 0s ago: executing program 3 (id=2600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6", 0xaa}, {&(0x7f0000002f80)="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", 0xfe0}], 0x5}}], 0x1, 0x8800) kernel console output (not intermixed with test programs): 0... [ 312.539309][ T9511] IPVS: using max 15 ests per chain, 36000 per kthread [ 312.985797][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 312.990391][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'. [ 314.385203][ T9535] loop2: detected capacity change from 0 to 7 [ 314.397470][ T9535] loop2: [ 314.397490][ T9535] loop2: partition table partially beyond EOD, truncated [ 315.031400][ T5882] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 315.203832][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 315.214393][ T5882] usb 2-1: config 0 has no interfaces? [ 315.216916][ T5882] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 315.216944][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.217018][ T5882] usb 2-1: Product: syz [ 315.217029][ T5882] usb 2-1: Manufacturer: syz [ 315.217052][ T5882] usb 2-1: SerialNumber: syz [ 315.221213][ T5882] usb 2-1: config 0 descriptor?? [ 315.456575][ T5856] usb 2-1: USB disconnect, device number 8 [ 316.393108][ T6347] IPVS: starting estimator thread 0... [ 316.526458][ T9569] IPVS: using max 8 ests per chain, 19200 per kthread [ 316.647128][ T5123] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 317.173628][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.173671][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.360023][ T5856] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 318.509241][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 318.511260][ T5856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.511283][ T5856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.516400][ T5856] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.516418][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.516429][ T5856] usb 5-1: Product: syz [ 318.516436][ T5856] usb 5-1: Manufacturer: syz [ 318.516444][ T5856] usb 5-1: SerialNumber: syz [ 318.844285][ T5856] usb 5-1: 0:2 : does not exist [ 318.844339][ T5856] usb 5-1: unit 6 not found! [ 318.898262][ T5856] usb 5-1: USB disconnect, device number 42 [ 319.025846][ T8659] udevd[8659]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.499369][ T5856] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 319.769556][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 319.772091][ T5856] usb 1-1: config 0 has no interfaces? [ 319.776476][ T5856] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 319.776505][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.776524][ T5856] usb 1-1: Product: syz [ 319.776537][ T5856] usb 1-1: Manufacturer: syz [ 319.776549][ T5856] usb 1-1: SerialNumber: syz [ 319.782122][ T5856] usb 1-1: config 0 descriptor?? [ 320.084597][ T9] usb 1-1: USB disconnect, device number 41 [ 320.620820][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 320.774043][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.774071][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 320.774136][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 320.774219][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.829574][ T6347] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 320.832700][ T9] usb 4-1: config 0 descriptor?? [ 320.984203][ T6347] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 320.984224][ T6347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 320.986386][ T6347] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 320.986404][ T6347] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 320.986415][ T6347] usb 5-1: Product: syz [ 320.986423][ T6347] usb 5-1: Manufacturer: syz [ 320.986431][ T6347] usb 5-1: SerialNumber: syz [ 321.041055][ T6347] usb 5-1: config 0 descriptor?? [ 321.051985][ T6347] usb 5-1: selecting invalid altsetting 0 [ 321.263492][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.263786][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.264708][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.264986][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.274928][ T9618] batadv0: entered promiscuous mode [ 321.275153][ T9618] vlan2: entered promiscuous mode [ 322.004766][ T9617] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 322.005807][ T6347] usb 5-1: USB disconnect, device number 43 [ 323.279252][ T5882] usb 4-1: USB disconnect, device number 36 [ 323.403254][ T9648] input: syz0 as /devices/virtual/input/input26 [ 323.559379][ T31] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 323.649399][ T5856] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 323.712178][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.712209][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.712253][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.712277][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.717305][ T31] usb 1-1: config 0 descriptor?? [ 323.773317][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 323.849211][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 323.853097][ T5856] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 323.878161][ T5856] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 323.878191][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.878211][ T5856] usb 2-1: Product: syz [ 323.878224][ T5856] usb 2-1: Manufacturer: syz [ 323.878236][ T5856] usb 2-1: SerialNumber: syz [ 323.933371][ T5856] usb 2-1: config 0 descriptor?? [ 323.942036][ T9648] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 323.956519][ T5856] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.287959][ T5856] usb 2-1: USB disconnect, device number 9 [ 324.378996][ T8669] udevd[8669]: setting mode of /dev/bus/usb/002/009 to 020664 failed: No such file or directory [ 324.379678][ T8669] udevd[8669]: setting owner of /dev/bus/usb/002/009 to uid=0, gid=0 failed: No such file or directory [ 324.453535][ T8676] udevd[8676]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.889639][ T5882] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 326.047861][ T5882] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.047906][ T5882] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 326.047923][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.056987][ T5882] usb 2-1: config 0 descriptor?? [ 326.366878][ T5882] usb 1-1: USB disconnect, device number 42 [ 326.840289][ T9705] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.840589][ T9705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 326.840787][ T9705] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.840978][ T9705] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.841471][ T9705] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 328.555325][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 328.555352][ T37] audit: type=1326 audit(1768585050.041:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db089f749 code=0x7ffc0000 [ 328.555403][ T37] audit: type=1326 audit(1768585050.041:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db089f749 code=0x7ffc0000 [ 328.555452][ T37] audit: type=1326 audit(1768585050.041:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1db089f749 code=0x7ffc0000 [ 328.555475][ T37] audit: type=1326 audit(1768585050.041:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db089f749 code=0x7ffc0000 [ 328.555499][ T37] audit: type=1326 audit(1768585050.041:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1db08a1667 code=0x7ffc0000 [ 328.555522][ T37] audit: type=1326 audit(1768585050.061:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1db08a15dc code=0x7ffc0000 [ 328.555544][ T37] audit: type=1326 audit(1768585050.061:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1db08a1514 code=0x7ffc0000 [ 328.555567][ T37] audit: type=1326 audit(1768585050.061:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1db08a1514 code=0x7ffc0000 [ 328.555588][ T37] audit: type=1326 audit(1768585050.061:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1db089e3aa code=0x7ffc0000 [ 328.555610][ T37] audit: type=1326 audit(1768585050.061:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9721 comm="syz.2.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db089f749 code=0x7ffc0000 [ 328.750843][ T9724] tipc: Enabling of bearer rejected, failed to enable media [ 328.899278][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 328.899340][ T5809] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.899380][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 328.899420][ T5123] Bluetooth: hci1: command 0x0c1a tx timeout [ 328.899458][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 328.952789][ T5882] usb 2-1: USB disconnect, device number 10 [ 330.269698][ T56] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 330.442929][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.442948][ T56] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.443026][ T56] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.443039][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.447170][ T56] usb 1-1: config 0 descriptor?? [ 330.515305][ T56] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 333.180619][ T930] usb 1-1: USB disconnect, device number 43 [ 335.504714][ T9797] ubi31: attaching mtd0 [ 335.506916][ T9797] ubi31: scanning is finished [ 335.770202][ T9797] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 336.618018][ T5882] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 336.773807][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.773840][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.773863][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.773906][ T5882] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.773929][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.780419][ T5882] usb 1-1: config 0 descriptor?? [ 337.315676][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1470'. [ 338.000042][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 338.000177][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 338.014249][ T5882] usb 1-1: USB disconnect, device number 44 [ 338.862539][ T9848] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1475'. [ 339.826838][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 339.857206][ T9859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.858082][ T9859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.870845][ T9859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.887238][ T9859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 339.887466][ T9859] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 340.907335][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1492'. [ 341.028712][ T9894] input: syz1 as /devices/virtual/input/input27 [ 341.028745][ T9894] input: failed to attach handler leds to device input27, error: -6 [ 341.859325][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.859380][ T5123] Bluetooth: hci2: command 0x0c1a tx timeout [ 341.859419][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.940281][ T5123] Bluetooth: hci5: command 0x0c1a tx timeout [ 341.940337][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 342.118263][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'. [ 343.863015][ T9929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1504'. [ 344.194093][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 344.518932][ T9937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.520170][ T9937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.520396][ T9937] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.520595][ T9937] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.520792][ T9937] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 346.249308][ T6347] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 346.401452][ T6347] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 346.401488][ T6347] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.422313][ T6347] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 346.422342][ T6347] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 346.422361][ T6347] usb 3-1: Product: syz [ 346.422376][ T6347] usb 3-1: Manufacturer: syz [ 346.422390][ T6347] usb 3-1: SerialNumber: syz [ 346.507798][ T6347] usb 3-1: config 0 descriptor?? [ 346.526088][ T6347] usb 3-1: selecting invalid altsetting 0 [ 346.529331][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1516'. [ 346.589911][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 346.589964][ T5809] Bluetooth: hci5: command 0x0c1a tx timeout [ 346.590009][ T5816] Bluetooth: hci4: command 0x0c1a tx timeout [ 346.590048][ T5123] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.590087][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 347.973502][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1518'. [ 348.903496][ T6347] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 349.049315][ T6347] usb 4-1: Using ep0 maxpacket: 32 [ 349.057226][ T6347] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 349.057269][ T6347] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 349.057310][ T6347] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 349.057337][ T6347] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 349.057362][ T6347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 349.060748][ T6347] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 349.060780][ T6347] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 349.060801][ T6347] usb 4-1: Product: syz [ 349.060815][ T6347] usb 4-1: Manufacturer: syz [ 349.060829][ T6347] usb 4-1: SerialNumber: syz [ 349.066063][ T6347] usb 4-1: config 0 descriptor?? [ 349.083513][ T6347] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 349.110496][ T6347] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 349.476897][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 349.476902][ T9] usb 4-1: USB disconnect, device number 37 [ 349.484721][ T9981] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 349.485867][ T9982] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 349.517910][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 349.824619][ T6347] usb 3-1: USB disconnect, device number 29 [ 349.930545][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 350.236993][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 351.182769][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1527'. [ 351.316218][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 352.542631][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 352.822779][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 352.839533][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 352.997969][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 353.002655][ T10] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 353.002684][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.002703][ T10] usb 3-1: Product: syz [ 353.002713][ T10] usb 3-1: Manufacturer: syz [ 353.002721][ T10] usb 3-1: SerialNumber: syz [ 353.009364][ T10] usb 3-1: config 0 descriptor?? [ 353.069785][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 353.073300][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 353.112204][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.132548][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 353.132606][ T10] usb 3-1: media controller created [ 353.160097][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 353.219907][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.248384][T10041] dvb-usb: bulk message failed: -22 (4/0) [ 353.248406][T10041] cxusb: i2c read failed [ 353.271370][ T10] usb 3-1: selecting invalid altsetting 7 [ 353.271390][ T10] cxusb: set interface failed [ 353.271404][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 353.430855][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 353.430879][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 353.434387][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 353.529872][ T56] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 353.551799][ T10] rc_core: IR keymap rc-dvico-portable not found [ 353.551817][ T10] Registered IR keymap rc-empty [ 353.581429][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 353.604382][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input28 [ 353.626800][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 353.626824][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 353.653870][ T10] usb 3-1: USB disconnect, device number 30 [ 353.683080][ T56] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 353.683111][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.725164][ T56] usb 2-1: config 0 descriptor?? [ 353.828980][ T56] cp210x 2-1:0.0: cp210x converter detected [ 353.895264][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 353.938250][ T56] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 353.938268][ T56] cp210x 2-1:0.0: querying part number failed [ 353.981617][ T56] usb 2-1: cp210x converter now attached to ttyUSB0 [ 356.321119][ T5897] usb 2-1: USB disconnect, device number 11 [ 356.325492][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 356.325921][ T5897] cp210x 2-1:0.0: device disconnected [ 356.498132][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1555'. [ 357.672764][ T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 357.819199][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 357.820794][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.820810][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 357.820838][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 357.820853][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 357.820877][ T31] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 357.820890][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.831795][ T31] hub 3-1:1.0: bad descriptor, ignoring hub [ 357.831833][ T31] hub 3-1:1.0: probe with driver hub failed with error -5 [ 357.834615][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 357.834633][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 357.842567][ T31] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 357.842600][ T31] cdc_wdm 3-1:1.0: Unknown control protocol [ 357.889641][ T5897] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 358.039237][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 358.046640][ T5897] usb 5-1: config 0 has no interfaces? [ 358.062532][ T5897] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 358.062550][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.062561][ T5897] usb 5-1: Product: syz [ 358.062570][ T5897] usb 5-1: Manufacturer: syz [ 358.062577][ T5897] usb 5-1: SerialNumber: syz [ 358.127127][ T5897] usb 5-1: config 0 descriptor?? [ 358.349632][ T31] usb 3-1: USB disconnect, device number 31 [ 358.392350][ T5897] usb 5-1: USB disconnect, device number 44 [ 359.360569][T10152] tipc: Enabled bearer , priority 0 [ 359.361202][T10152] syzkaller0: entered promiscuous mode [ 359.361224][T10152] syzkaller0: entered allmulticast mode [ 359.361833][T10152] tipc: Resetting bearer [ 359.406631][T10151] input: syz0 as /devices/virtual/input/input29 [ 359.795898][ T930] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 359.886236][T10152] tipc: Resetting bearer [ 359.919238][ T930] usb 1-1: device descriptor read/64, error -71 [ 360.102355][ T5897] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 360.161969][ T930] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 360.249169][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 360.251272][ T5897] usb 5-1: config 0 has no interfaces? [ 360.253485][ T5897] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 360.253515][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.253527][ T5897] usb 5-1: Product: syz [ 360.253534][ T5897] usb 5-1: Manufacturer: syz [ 360.253542][ T5897] usb 5-1: SerialNumber: syz [ 360.257057][ T5897] usb 5-1: config 0 descriptor?? [ 360.289450][ T930] usb 1-1: device descriptor read/64, error -71 [ 360.399743][ T930] usb usb1-port1: attempt power cycle [ 360.554014][ T5897] tipc: Node number set to 1555042789 [ 360.739564][ T930] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 360.760823][ T930] usb 1-1: device descriptor read/8, error -71 [ 361.010123][ T930] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 361.036421][ T930] usb 1-1: device descriptor read/8, error -71 [ 361.165937][ T930] usb usb1-port1: unable to enumerate USB device [ 361.180432][ T5856] usb 5-1: USB disconnect, device number 45 [ 361.479284][ T930] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 361.629237][ T930] usb 3-1: Using ep0 maxpacket: 16 [ 361.631648][ T930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.631703][ T930] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 361.631718][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.638388][ T930] usb 3-1: config 0 descriptor?? [ 362.147306][ T930] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 362.147346][ T930] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 362.147374][ T930] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 362.147402][ T930] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 362.147430][ T930] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 362.148707][ T930] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 362.444478][T10199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.474072][T10199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.549780][ C0] usb 3-1: input irq status -75 received [ 362.771954][ T930] usb 3-1: USB disconnect, device number 32 [ 363.229243][ T5932] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 363.404336][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 363.412256][ T5932] usb 4-1: config 0 has no interfaces? [ 363.415818][ T5932] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 363.415959][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.415981][ T5932] usb 4-1: Product: syz [ 363.415995][ T5932] usb 4-1: Manufacturer: syz [ 363.416010][ T5932] usb 4-1: SerialNumber: syz [ 363.423863][ T5932] usb 4-1: config 0 descriptor?? [ 363.662216][ T5932] usb 4-1: USB disconnect, device number 38 [ 364.014671][T10235] input: syz0 as /devices/virtual/input/input30 [ 364.297310][ T5932] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 364.489383][ T5932] usb 1-1: device descriptor read/64, error -71 [ 364.729320][ T5932] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 364.862525][ T5932] usb 1-1: device descriptor read/64, error -71 [ 364.974091][ T5932] usb usb1-port1: attempt power cycle [ 365.149250][ T5856] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 365.304071][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 365.304105][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 365.306946][ T5856] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 365.307027][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.307048][ T5856] usb 5-1: Product: syz [ 365.307063][ T5856] usb 5-1: Manufacturer: syz [ 365.307077][ T5856] usb 5-1: SerialNumber: syz [ 365.309268][ T5932] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 365.329920][ T5932] usb 1-1: device descriptor read/8, error -71 [ 365.343888][ T5856] usb 5-1: config 0 descriptor?? [ 365.393161][ T5856] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 365.394944][ T5856] usb 5-1: Detected SIO [ 365.394965][ T5856] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 365.411740][ T5856] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 365.553689][ T5897] usb 5-1: USB disconnect, device number 46 [ 365.569246][ T5932] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 365.588296][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 365.593691][ T5932] usb 1-1: device descriptor read/8, error -71 [ 365.597284][ T5897] ftdi_sio 5-1:0.0: device disconnected [ 365.699632][ T5932] usb usb1-port1: unable to enumerate USB device [ 369.430389][T10316] input: syz0 as /devices/virtual/input/input32 [ 369.679595][ T5897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 369.809799][ T5897] usb 2-1: device descriptor read/64, error -71 [ 370.050245][ T5897] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 370.190242][ T5897] usb 2-1: device descriptor read/64, error -71 [ 370.307908][ T5897] usb usb2-port1: attempt power cycle [ 370.699903][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 370.732510][ T5897] usb 2-1: device descriptor read/8, error -71 [ 371.851945][ T5897] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 371.869527][T10350] ubi31: attaching mtd0 [ 371.871169][T10350] ubi31: scanning is finished [ 371.880031][ T5897] usb 2-1: device descriptor read/8, error -71 [ 371.989712][ T5897] usb usb2-port1: unable to enumerate USB device [ 372.090645][T10350] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 373.373160][ T56] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 373.584417][ T56] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 373.601601][ T56] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 373.601631][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.601651][ T56] usb 2-1: Product: syz [ 373.601666][ T56] usb 2-1: Manufacturer: syz [ 373.601680][ T56] usb 2-1: SerialNumber: syz [ 373.634944][ T56] usb 2-1: config 0 descriptor?? [ 373.718891][ T56] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 373.908292][ T8659] udevd[8659]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.064343][ T5856] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 375.259212][ T5856] usb 3-1: Using ep0 maxpacket: 8 [ 375.261048][ T5856] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 375.261064][ T5856] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 375.261075][ T5856] usb 3-1: config 179 has no interface number 0 [ 375.261104][ T5856] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 375.261117][ T5856] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 375.261140][ T5856] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 375.261153][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.474855][ T5934] usb 3-1: USB disconnect, device number 33 [ 375.500341][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1649'. [ 375.500392][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1649'. [ 376.847242][T10394] ubi31: attaching mtd0 [ 376.848921][T10394] ubi31: scanning is finished [ 377.167899][ T5882] usb 2-1: USB disconnect, device number 16 [ 377.174669][T10394] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 377.274186][T10401] input: syz0 as /devices/virtual/input/input33 [ 377.719188][ T5934] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 377.849329][ T5934] usb 3-1: device descriptor read/64, error -71 [ 378.102793][ T5934] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 378.250527][ T5934] usb 3-1: device descriptor read/64, error -71 [ 378.359819][ T5934] usb usb3-port1: attempt power cycle [ 378.590286][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.590357][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.709238][ T5934] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 378.731222][ T5934] usb 3-1: device descriptor read/8, error -71 [ 378.970057][ T5934] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 378.995091][ T5934] usb 3-1: device descriptor read/8, error -71 [ 379.099634][ T5934] usb usb3-port1: unable to enumerate USB device [ 379.830749][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 379.838249][T10427] vlan2: entered promiscuous mode [ 379.838263][T10427] bond0: entered promiscuous mode [ 379.838271][T10427] bond_slave_0: entered promiscuous mode [ 379.838394][T10427] bond_slave_1: entered promiscuous mode [ 380.539422][ T5985] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 380.689554][ T5985] usb 3-1: Using ep0 maxpacket: 8 [ 380.692192][ T5985] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 380.692209][ T5985] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 380.692220][ T5985] usb 3-1: config 179 has no interface number 0 [ 380.692262][ T5985] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 380.692275][ T5985] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 380.692299][ T5985] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 380.692311][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.943949][ T5924] usb 3-1: USB disconnect, device number 38 [ 381.232867][T10445] capability: warning: `syz.1.1666' uses deprecated v2 capabilities in a way that may be insecure [ 381.369734][ T5856] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 381.585402][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.746338][ T5856] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 381.746369][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.746390][ T5856] usb 5-1: Product: syz [ 381.746404][ T5856] usb 5-1: Manufacturer: syz [ 381.746419][ T5856] usb 5-1: SerialNumber: syz [ 381.750688][ T5856] usb 5-1: config 0 descriptor?? [ 382.052485][ T5856] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 382.201918][ T8659] udevd[8659]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.352656][ T5882] usb 5-1: USB disconnect, device number 47 [ 386.145720][T10503] kvm: kvm [10499]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4820 [ 386.171697][T10503] kvm: kvm [10499]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1100 [ 386.176470][T10503] kvm: kvm [10499]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2900 [ 386.238091][T10503] kvm: kvm [10499]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100 [ 386.288791][T10503] kvm: kvm [10499]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3100 [ 386.431990][ T5897] IPVS: starting estimator thread 0... [ 386.537952][T10514] IPVS: using max 15 ests per chain, 36000 per kthread [ 387.369216][ T5897] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 387.529475][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 387.529512][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 387.529541][ T5897] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 387.538687][ T5897] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 387.538706][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.538717][ T5897] usb 5-1: Product: syz [ 387.538725][ T5897] usb 5-1: Manufacturer: syz [ 387.538733][ T5897] usb 5-1: SerialNumber: syz [ 387.554644][ T5897] usb 5-1: config 0 descriptor?? [ 387.556471][T10522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 387.763237][T10522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 388.416130][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'. [ 388.466516][T10538] bridge_slave_1: left allmulticast mode [ 388.466537][T10538] bridge_slave_1: left promiscuous mode [ 388.483055][T10538] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.673840][T10538] bridge_slave_0: left allmulticast mode [ 388.673877][T10538] bridge_slave_0: left promiscuous mode [ 388.674140][T10538] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.634311][ T5945] usb 5-1: USB disconnect, device number 48 [ 391.219207][ T5945] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 391.399177][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 391.401037][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.401085][ T5945] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 391.401109][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.500338][ T5945] usb 5-1: config 0 descriptor?? [ 391.556309][T10563] kvm: kvm [10562]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4820 [ 391.635089][T10563] kvm: kvm [10562]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1100 [ 391.742336][T10563] kvm: kvm [10562]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2900 [ 391.821778][T10563] kvm: kvm [10562]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100 [ 391.906317][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 391.909295][ T5945] usbhid 5-1:0.0: can't add hid device: -71 [ 391.909416][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 391.937969][T10563] kvm: kvm [10562]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3100 [ 391.939429][ T5945] usb 5-1: USB disconnect, device number 49 [ 392.669906][ T6347] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 392.859182][ T6347] usb 2-1: Using ep0 maxpacket: 8 [ 392.869705][ T6347] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 392.869733][ T6347] usb 2-1: config 179 has no interface number 0 [ 392.869773][ T6347] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 392.869788][ T6347] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 392.869803][ T6347] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 392.869816][ T6347] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 392.869841][ T6347] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 392.869853][ T6347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.880363][T10583] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 393.085272][ T5897] usb 2-1: USB disconnect, device number 17 [ 393.333876][ T5985] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 393.555951][ T5985] usb 5-1: config 0 has no interfaces? [ 393.555977][ T5985] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 393.555990][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.617487][ T5985] usb 5-1: config 0 descriptor?? [ 394.144677][T10613] kvm: kvm [10609]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4820 [ 394.148108][T10613] kvm: kvm [10609]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1100 [ 394.177902][T10613] kvm: kvm [10609]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2900 [ 394.186498][T10613] kvm: kvm [10609]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100 [ 394.297436][T10613] kvm: kvm [10609]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3100 [ 395.729281][ T5985] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 395.891513][ T5985] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 395.891533][ T5985] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 395.891545][ T5985] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 395.891566][ T5985] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 395.891597][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.891609][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 395.967064][ T5985] usb 3-1: language id specifier not provided by device, defaulting to English [ 396.063930][ T5985] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 396.063949][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.066852][ T5985] usb 3-1: config 0 descriptor?? [ 396.112749][ T5985] hub 3-1:0.0: bad descriptor, ignoring hub [ 396.112789][ T5985] hub 3-1:0.0: probe with driver hub failed with error -5 [ 396.137146][T10642] : renamed from bond0 (while UP) [ 396.160086][ T5897] usb 5-1: USB disconnect, device number 50 [ 396.250618][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 396.399467][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 396.401454][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 396.401471][ T10] usb 1-1: config 179 has no interface number 0 [ 396.401499][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 396.401514][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 396.401530][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 396.401542][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 396.401566][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 396.401579][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.406809][T10640] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 396.634106][ T10] usb 1-1: USB disconnect, device number 53 [ 396.652136][ T5897] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 396.800906][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 396.802893][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 396.802914][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 396.804876][ T5897] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 396.804893][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.804904][ T5897] usb 2-1: Product: syz [ 396.804912][ T5897] usb 2-1: Manufacturer: syz [ 396.804920][ T5897] usb 2-1: SerialNumber: syz [ 396.815476][ T5897] usb 2-1: config 0 descriptor?? [ 396.839732][ T5897] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 396.839970][ T5897] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 397.425043][ T5897] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 397.426197][ T5897] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 397.841680][ T5897] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 397.841711][ T5897] em28xx 2-1:0.0: No AC97 audio processor [ 398.509274][T10673] loop7: detected capacity change from 0 to 16384 [ 398.519631][ T56] usb 3-1: USB disconnect, device number 39 [ 398.556353][ T5897] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 398.727339][ T5897] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 398.727373][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.762866][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.762897][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 398.762917][ T5897] usb 4-1: Product: syz [ 398.762934][ T5897] usb 4-1: Manufacturer: syz [ 398.762942][ T5897] usb 4-1: SerialNumber: syz [ 398.776771][ T5897] usb 4-1: config 0 descriptor?? [ 398.805983][T10678] : renamed from bond0 (while UP) [ 398.821420][ T5897] usb 4-1: selecting invalid altsetting 0 [ 398.870212][ C0] I/O error, dev loop7, sector 15704 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 398.870971][T10675] loop7: detected capacity change from 16384 to 0 [ 398.871984][ C0] I/O error, dev loop7, sector 15704 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 398.872219][ C0] Buffer I/O error on dev loop7, logical block 1963, async page read [ 398.888683][ C0] I/O error, dev loop7, sector 776 op 0x0:(READ) flags 0x80700 phys_seg 14 prio class 2 [ 399.047264][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.047774][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.077473][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.078012][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.086322][T10671] 8021q: VLANs not supported on caif0 [ 399.121906][ T5897] usb 4-1: USB disconnect, device number 39 [ 399.372446][ T5882] usb 2-1: USB disconnect, device number 18 [ 399.374625][ T5882] em28xx 2-1:0.0: Disconnecting em28xx [ 399.378300][ T5882] em28xx 2-1:0.0: Freeing device [ 399.799194][ T5945] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 399.973903][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.973938][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.973962][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.974165][ T5945] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.974189][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.041952][ T5945] usb 5-1: config 0 descriptor?? [ 401.350415][ T5945] usbhid 5-1:0.0: can't add hid device: -71 [ 401.350540][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 401.386663][ T5945] usb 5-1: USB disconnect, device number 51 [ 401.441197][ T5897] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 401.590099][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 401.593763][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 401.593783][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 401.601851][ T5897] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 401.601879][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.601896][ T5897] usb 2-1: Product: syz [ 401.601907][ T5897] usb 2-1: Manufacturer: syz [ 401.601919][ T5897] usb 2-1: SerialNumber: syz [ 401.634780][ T5897] usb 2-1: config 0 descriptor?? [ 401.663622][ T5897] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 401.663658][ T5897] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 402.253721][ T5897] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 402.260855][ T5897] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 402.665018][ T5897] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 402.665040][ T5897] em28xx 2-1:0.0: No AC97 audio processor [ 403.140914][T10742] netlink: 'syz.2.1768': attribute type 2 has an invalid length. [ 403.859820][ T5882] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 404.010891][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.010931][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.010946][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.010970][ T5882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.010982][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.023585][ T5882] usb 5-1: config 0 descriptor?? [ 404.188713][ T10] usb 2-1: USB disconnect, device number 19 [ 404.191920][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 404.203187][ T10] em28xx 2-1:0.0: Freeing device [ 405.115047][ T5882] usbhid 5-1:0.0: can't add hid device: -71 [ 405.115163][ T5882] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 405.125761][ T5882] usb 5-1: USB disconnect, device number 52 [ 405.469827][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 405.623464][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 405.623485][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.636090][ T10] usb 2-1: config 0 descriptor?? [ 405.639304][ T10] cp210x 2-1:0.0: cp210x converter detected [ 405.726474][T10793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 405.726848][T10793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.727148][T10793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.727475][T10793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 405.730903][T10793] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 405.907250][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 406.339416][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 406.489495][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 406.496475][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.496516][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 406.496531][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.501238][ T10] usb 5-1: config 0 descriptor?? [ 406.986062][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 406.986147][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 407.019365][ T10] usb 5-1: USB disconnect, device number 53 [ 407.805330][ T5816] Bluetooth: hci4: command 0x0c1a tx timeout [ 407.805373][ T5123] Bluetooth: hci5: command 0x0c1a tx timeout [ 407.805399][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 407.805425][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.805450][T10796] Bluetooth: hci2: command 0x0c1a tx timeout [ 407.859855][ T5945] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 408.020498][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 408.022771][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 408.022805][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 408.025505][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 408.025535][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.025555][ T5945] usb 5-1: Product: syz [ 408.025570][ T5945] usb 5-1: Manufacturer: syz [ 408.025585][ T5945] usb 5-1: SerialNumber: syz [ 408.033067][ T5945] usb 5-1: config 0 descriptor?? [ 408.125225][ T5945] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 408.125247][ T5945] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 408.277596][ T10] usb 2-1: USB disconnect, device number 20 [ 408.389722][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 408.447300][ T10] cp210x 2-1:0.0: device disconnected [ 408.663727][ T5945] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 408.664419][ T5945] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 409.282148][ T5945] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 409.282783][ T5945] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 409.283678][ T5945] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 409.284243][ T5945] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 409.284683][ T5945] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 409.285194][ T5945] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 409.288780][ T5945] usb 5-1: USB disconnect, device number 54 [ 409.740134][ T5945] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 409.889485][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 409.901478][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.901511][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.901534][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 409.901574][ T5945] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.901597][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.906489][ T5945] usb 4-1: config 0 descriptor?? [ 410.039480][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 410.041800][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.041849][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 410.041875][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.076528][ T10] usb 3-1: config 0 descriptor?? [ 410.496031][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 410.496155][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 410.524070][ T10] usb 3-1: USB disconnect, device number 40 [ 410.776778][ T5945] usbhid 4-1:0.0: can't add hid device: -71 [ 410.776907][ T5945] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 410.788436][ T5945] usb 4-1: USB disconnect, device number 40 [ 412.749536][ T5985] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 412.899676][ T5985] usb 3-1: Using ep0 maxpacket: 32 [ 412.907150][ T5985] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 412.907205][ T5985] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 412.907232][ T5985] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.907259][ T5985] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 412.935982][ T5985] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 412.936002][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.936013][ T5985] usb 3-1: Product: syz [ 412.936021][ T5985] usb 3-1: Manufacturer: syz [ 412.936028][ T5985] usb 3-1: SerialNumber: syz [ 413.009215][ T5897] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 413.053226][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 413.056576][ T5985] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input35 [ 413.179160][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 413.183589][ T5897] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 413.183608][ T5897] usb 4-1: config 179 has no interface number 0 [ 413.183649][ T5897] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 413.183663][ T5897] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 413.183714][ T5897] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 413.183729][ T5897] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 413.183744][ T5897] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 413.183769][ T5897] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 413.183781][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.249187][ T5882] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 413.316340][T10901] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 413.319477][ T5985] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 413.319495][ T5985] (id 0x00) [ 413.444496][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.444654][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.444678][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.444724][ T5882] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.444862][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.524848][ T5882] usb 1-1: config 0 descriptor?? [ 413.659279][ T5985] rc_core: IR keymap rc-imon-pad not found [ 413.659301][ T5985] Registered IR keymap rc-empty [ 413.659520][ T5985] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 413.659533][ T5985] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 413.723414][ T5985] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 413.834775][ T5985] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input36 [ 413.931507][ T5985] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:41> initialized [ 413.967289][ T5897] usb 4-1: USB disconnect, device number 41 [ 413.967371][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 413.967408][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 415.006983][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 415.007107][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 415.040188][ T5882] usb 1-1: USB disconnect, device number 54 [ 415.505415][ T5882] usb 3-1: USB disconnect, device number 41 [ 418.119835][ T5945] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 418.279254][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 418.281030][ T5945] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 418.281072][ T5945] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 418.281093][ T5945] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.281120][ T5945] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 418.286330][ T5945] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 418.286361][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.286381][ T5945] usb 5-1: Product: syz [ 418.286394][ T5945] usb 5-1: Manufacturer: syz [ 418.286407][ T5945] usb 5-1: SerialNumber: syz [ 418.417652][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 418.459820][ T6347] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 418.485420][ T5945] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input37 [ 418.629529][ T6347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.629565][ T6347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.629588][ T6347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.629616][ T6347] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.629629][ T6347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.638314][ T6347] usb 4-1: config 0 descriptor?? [ 418.653525][ T5945] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 418.653544][ T5945] (id 0x00) [ 418.969243][ T5945] rc_core: IR keymap rc-imon-pad not found [ 418.969265][ T5945] Registered IR keymap rc-empty [ 418.969399][ T5945] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 418.969416][ T5945] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 419.033492][ T5945] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 419.106097][ T5945] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input38 [ 419.267425][ T5945] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:55> initialized [ 419.472875][ T5882] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 419.626674][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 419.626710][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 419.663048][ T5882] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 419.663079][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.663099][ T5882] usb 1-1: Product: syz [ 419.663111][ T5882] usb 1-1: Manufacturer: syz [ 419.663124][ T5882] usb 1-1: SerialNumber: syz [ 419.777189][ T5882] usb 1-1: config 0 descriptor?? [ 419.804266][ T5882] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 419.830178][ T5882] usb 1-1: Detected SIO [ 419.834144][ T5882] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 419.834167][ T5882] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 419.860127][ T5882] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 420.275316][ T5882] usb 1-1: USB disconnect, device number 55 [ 420.367301][ T5882] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 420.368741][ T5882] ftdi_sio 1-1:0.0: device disconnected [ 420.484831][ T6347] usbhid 4-1:0.0: can't add hid device: -71 [ 420.484916][ T6347] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 420.533819][ T6347] usb 4-1: USB disconnect, device number 42 [ 421.669288][ T6347] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 421.749479][ T56] usb 5-1: USB disconnect, device number 55 [ 421.820927][ T6347] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 421.820949][ T6347] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 421.820972][ T6347] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 421.820985][ T6347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.824547][T10990] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 421.827941][ T6347] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.889668][ T5945] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 422.071064][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 422.072621][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.072648][ T5945] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 422.072661][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.097369][ T5945] usb 2-1: config 0 descriptor?? [ 422.441222][ T6347] usb 1-1: USB disconnect, device number 56 [ 422.760408][ T5945] usbhid 2-1:0.0: can't add hid device: -71 [ 422.760529][ T5945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 422.764420][ T5945] usb 2-1: USB disconnect, device number 21 [ 424.432932][ T5945] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 424.612203][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.612236][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.612260][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.612300][ T5945] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.612331][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.618049][ T5945] usb 1-1: config 0 descriptor?? [ 424.809597][ T5882] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 424.967664][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 424.967699][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 425.007235][ T5882] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 425.007268][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.007287][ T5882] usb 4-1: Product: syz [ 425.007301][ T5882] usb 4-1: Manufacturer: syz [ 425.007315][ T5882] usb 4-1: SerialNumber: syz [ 425.055463][ T5882] usb 4-1: config 0 descriptor?? [ 425.066719][ T5882] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 425.078452][ T5882] usb 4-1: Detected SIO [ 425.078473][ T5882] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 425.078489][ T5882] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 425.107405][ T5882] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 425.288995][ T5882] usb 4-1: USB disconnect, device number 43 [ 425.388355][ T5882] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 425.407516][ T5882] ftdi_sio 4-1:0.0: device disconnected [ 425.944724][ T5945] usbhid 1-1:0.0: can't add hid device: -71 [ 425.944849][ T5945] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 426.000023][ T5945] usb 1-1: USB disconnect, device number 57 [ 426.168733][T11023] input: syz0 as /devices/virtual/input/input39 [ 426.421527][ T5934] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 426.449972][ T5945] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 426.450177][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 426.610125][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 426.610378][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 426.620188][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.620236][ T31] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 426.620438][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 426.620462][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 426.620695][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.636675][ T5934] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 426.636764][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.651880][ T5945] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 426.651911][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.651931][ T5945] usb 5-1: Product: syz [ 426.651944][ T5945] usb 5-1: Manufacturer: syz [ 426.652004][ T5945] usb 5-1: SerialNumber: syz [ 426.654974][ T5934] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.655004][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 426.655024][ T5934] usb 4-1: Product: syz [ 426.655038][ T5934] usb 4-1: Manufacturer: syz [ 426.655053][ T5934] usb 4-1: SerialNumber: syz [ 426.683490][ T31] usb 2-1: config 0 descriptor?? [ 426.692431][ T5934] usb 4-1: config 0 descriptor?? [ 426.764506][ T5945] usb 5-1: config 0 descriptor?? [ 426.788846][ T5934] usb 4-1: selecting invalid altsetting 0 [ 426.979692][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.011559][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.038422][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.115779][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.232226][T11027] 8021q: VLANs not supported on nlmon0 [ 427.324352][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 427.324480][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 427.343814][ T31] usb 2-1: USB disconnect, device number 22 [ 427.448352][ T5945] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.527564][ T5934] usb 4-1: USB disconnect, device number 44 [ 427.642974][ T5945] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 427.668596][ T5945] usb 5-1: USB disconnect, device number 56 [ 427.800439][ T8762] udevd[8762]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 427.880985][ T8669] udevd[8669]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.609192][ T5897] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 428.759195][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 428.762003][ T5897] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 428.762037][ T5897] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 428.762052][ T5897] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.762068][ T5897] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 428.763904][ T5897] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 428.763933][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.763950][ T5897] usb 5-1: Product: syz [ 428.763958][ T5897] usb 5-1: Manufacturer: syz [ 428.763965][ T5897] usb 5-1: SerialNumber: syz [ 428.778360][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 428.798876][ T5897] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input40 [ 428.947963][T11090] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 428.953637][T11090] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 428.960596][T11090] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.962128][T11090] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 428.963464][T11090] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 429.029263][ T5897] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 429.029284][ T5897] (id 0x00) [ 429.449488][ T5897] rc_core: IR keymap rc-imon-pad not found [ 429.449509][ T5897] Registered IR keymap rc-empty [ 429.449597][ T5897] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 429.449616][ T5897] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 429.470803][ T5897] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 429.472622][ T5897] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input41 [ 429.482093][ T5897] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:57> initialized [ 430.679204][ T5882] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 430.832054][T10796] Bluetooth: hci1: command 0x0c1a tx timeout [ 430.879158][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 430.885386][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.885438][ T5882] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 430.885461][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.925694][ T5882] usb 2-1: config 0 descriptor?? [ 431.006346][ T5123] Bluetooth: hci2: command 0x0c1a tx timeout [ 431.008596][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 431.008658][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 431.008703][T10796] Bluetooth: hci5: command 0x0c1a tx timeout [ 431.429880][ T5882] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 431.624561][ T5882] usb 2-1: USB disconnect, device number 23 [ 431.838547][ T10] usb 5-1: USB disconnect, device number 57 [ 432.809487][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 432.959224][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 432.961687][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.961759][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.961797][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 432.961821][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.968209][ T10] usb 2-1: config 0 descriptor?? [ 433.030416][ T5924] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 433.209182][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 433.211286][ T5924] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 433.211342][ T5924] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 433.211370][ T5924] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 433.211397][ T5924] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 433.214429][ T5924] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 433.214458][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.214479][ T5924] usb 5-1: Product: syz [ 433.214493][ T5924] usb 5-1: Manufacturer: syz [ 433.214507][ T5924] usb 5-1: SerialNumber: syz [ 433.382696][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 433.390952][T11171] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 433.395639][T11171] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 433.396721][T11171] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 433.398997][T11171] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 433.400269][T11171] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 433.452557][ T10] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 433.452596][ T10] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 433.557523][ T5924] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input42 [ 433.589650][ T10] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 433.622758][ T5924] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 433.622779][ T5924] (id 0x00) [ 433.790919][ T10] ft260 0003:0403:6030.000E: failed to retrieve system status [ 433.791324][ T10] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -5 [ 433.909411][ T5924] rc_core: IR keymap rc-imon-pad not found [ 433.909436][ T5924] Registered IR keymap rc-empty [ 433.909519][ T5924] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 433.909538][ T5924] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 433.934423][ T5924] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 433.947800][ T5924] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input43 [ 434.132660][ T5924] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:58> initialized [ 435.459260][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 435.459319][ T5123] Bluetooth: hci2: command 0x0c1a tx timeout [ 435.459358][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 435.459397][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 435.459432][T10796] Bluetooth: hci4: command 0x0c1a tx timeout [ 435.729906][ T5882] usb 2-1: USB disconnect, device number 24 [ 435.881995][ T5897] usb 5-1: USB disconnect, device number 58 [ 436.699229][ T5897] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 437.179169][ T5897] usb 5-1: device descriptor read/64, error -71 [ 437.419195][ T5897] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 437.609718][ T5897] usb 5-1: device descriptor read/64, error -71 [ 437.720570][ T5897] usb usb5-port1: attempt power cycle [ 437.839203][ T5924] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 437.991737][ T5924] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.991760][ T5924] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 437.991784][ T5924] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.991796][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.996373][T11249] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 438.001433][ T5924] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.059874][ T5897] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 438.080266][ T5897] usb 5-1: device descriptor read/8, error -71 [ 438.210331][ T9] usb 4-1: USB disconnect, device number 45 [ 438.319677][ T5897] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 438.340215][ T5897] usb 5-1: device descriptor read/8, error -71 [ 438.450561][ T5897] usb usb5-port1: unable to enumerate USB device [ 438.949264][ T5897] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 439.109218][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 439.113909][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.113943][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.113982][ T5897] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 439.114005][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.176748][ T5897] usb 2-1: config 0 descriptor?? [ 439.644256][ T5897] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 439.644303][ T5897] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 439.816818][ T5897] ft260 0003:0403:6030.000F: chip code: 6424 8183 [ 440.017331][ T5897] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 440.028773][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.028817][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.218422][ T5897] ft260 0003:0403:6030.000F: failed to retrieve status: -32, no wakeup [ 440.224432][ T5897] ft260 0003:0403:6030.000F: failed to retrieve status: -32 [ 440.224942][ T5897] ft260 0003:0403:6030.000F: failed to reset I2C controller: -71 [ 440.294935][ T5897] usb 2-1: USB disconnect, device number 25 [ 440.680226][ T31] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 440.840668][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 440.840700][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.840719][ T31] usb 1-1: Product: syz [ 440.840727][ T31] usb 1-1: Manufacturer: syz [ 440.840735][ T31] usb 1-1: SerialNumber: syz [ 440.897203][ T31] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 440.922112][ T56] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 442.027180][ T56] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 442.031465][ T56] ath9k_htc: Failed to initialize the device [ 442.150283][ T56] usb 1-1: ath9k_htc: USB layer deinitialized [ 443.627505][ T5897] usb 1-1: USB disconnect, device number 58 [ 450.888377][T11466] tipc: Enabled bearer , priority 0 [ 450.891562][T11466] syzkaller0: entered promiscuous mode [ 450.891586][T11466] syzkaller0: entered allmulticast mode [ 450.962304][T11466] tipc: Resetting bearer [ 451.048593][T11465] tipc: Resetting bearer [ 451.067938][T11476] loop2: detected capacity change from 0 to 7 [ 451.150179][ T5807] Dev loop2: unable to read RDB block 7 [ 451.150212][ T5807] loop2: unable to read partition table [ 451.150358][ T5807] loop2: partition table beyond EOD, truncated [ 451.204666][T11476] Dev loop2: unable to read RDB block 7 [ 451.204699][T11476] loop2: unable to read partition table [ 451.204830][T11476] loop2: partition table beyond EOD, truncated [ 451.204865][T11476] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 451.361493][T11465] tipc: Disabling bearer [ 451.803098][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'. [ 453.617345][ T1358] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.198579][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 454.222737][ T1358] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.231618][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 454.238553][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 454.240671][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 454.246526][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 454.248263][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 454.723476][ T1358] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.560133][ T6347] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 455.667804][ T1358] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.736242][ T6347] usb 5-1: config 0 has no interfaces? [ 455.736283][ T6347] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 455.736309][ T6347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.790436][ T6347] usb 5-1: config 0 descriptor?? [ 456.443734][ T5811] Bluetooth: hci3: command tx timeout [ 456.890481][T11428] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 457.042668][T11428] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 457.042702][T11428] usb 1-1: config 0 interface 0 has no altsetting 0 [ 457.045707][T11428] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.045738][T11428] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 457.045759][T11428] usb 1-1: Product: syz [ 457.045775][T11428] usb 1-1: Manufacturer: syz [ 457.045782][T11428] usb 1-1: SerialNumber: syz [ 457.048861][T11428] usb 1-1: config 0 descriptor?? [ 457.142283][T11428] usb 1-1: selecting invalid altsetting 0 [ 457.278783][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.293132][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.294401][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.294691][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.355395][T11586] 8021q: VLANs not supported on caif0 [ 457.444699][ T9] usb 1-1: USB disconnect, device number 59 [ 457.559776][T11598] udevd[11598]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.463218][T11428] usb 5-1: USB disconnect, device number 63 [ 458.500033][ T5811] Bluetooth: hci3: command tx timeout [ 459.709715][ T5934] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 459.868441][ T5934] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 459.868526][ T5934] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.896383][ T5934] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 459.896403][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 459.896414][ T5934] usb 5-1: Product: syz [ 459.896422][ T5934] usb 5-1: Manufacturer: syz [ 459.896430][ T5934] usb 5-1: SerialNumber: syz [ 459.939823][ T5934] usb 5-1: config 0 descriptor?? [ 459.974792][ T5934] usb 5-1: selecting invalid altsetting 0 [ 459.999174][T11428] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 460.157983][T11428] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 460.158024][T11428] usb 4-1: can't read configurations, error -61 [ 460.171433][T11644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.171993][T11644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.182049][T11644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.182550][T11644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.283871][T11428] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 460.432122][T11428] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 460.432161][T11428] usb 4-1: can't read configurations, error -61 [ 460.432714][T11428] usb usb4-port1: attempt power cycle [ 460.584865][ T5811] Bluetooth: hci3: command tx timeout [ 460.791405][T11428] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 460.812756][T11428] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 460.812845][T11428] usb 4-1: can't read configurations, error -61 [ 460.941569][T11428] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 460.965142][T11428] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 460.965183][T11428] usb 4-1: can't read configurations, error -61 [ 460.969855][T11428] usb usb4-port1: unable to enumerate USB device [ 461.871168][ T1358]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.919659][ T1358] bond_slave_0: left promiscuous mode [ 461.961066][ T1358]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.000486][ T1358] bond_slave_1: left promiscuous mode [ 462.004092][ T1358]  (unregistering): Released all slaves [ 462.134165][T11644] 8021q: VLANs not supported on caif0 [ 462.202609][T11533] chnl_net:caif_netlink_parms(): no params data found [ 462.210714][T11428] usb 5-1: USB disconnect, device number 64 [ 462.414785][ T1358] tipc: Disabling bearer [ 462.418139][ T1358] tipc: Left network mode [ 462.434628][T11718] tipc: Started in network mode [ 462.434659][T11718] tipc: Node identity ac141441, cluster identity 4711 [ 462.437952][T11718] tipc: Enabled bearer , priority 10 [ 462.659380][ T5811] Bluetooth: hci3: command tx timeout [ 463.385460][T11428] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 463.529176][T11428] usb 4-1: Using ep0 maxpacket: 32 [ 463.532281][T11428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.532316][T11428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.532355][T11428] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 463.532379][T11428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.537697][T11428] usb 4-1: config 0 descriptor?? [ 463.719448][ T5934] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 463.870531][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 463.872587][ T5934] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 463.872672][ T5934] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 463.872693][ T5934] usb 5-1: config 127 has no interface number 1 [ 463.872735][ T5934] usb 5-1: config 127 interface 171 has no altsetting 0 [ 463.875287][ T5934] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 463.875306][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.875316][ T5934] usb 5-1: Product: syz [ 463.875324][ T5934] usb 5-1: Manufacturer: syz [ 463.875332][ T5934] usb 5-1: SerialNumber: syz [ 464.098289][T11428] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 464.098722][T11428] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 464.161785][ T9] tipc: Node number set to 2886997057 [ 464.197527][T11428] ft260 0003:0403:6030.0010: chip code: 6424 8183 [ 464.231451][T11533] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.231567][T11533] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.231819][T11533] bridge_slave_0: entered allmulticast mode [ 464.323181][T11533] bridge_slave_0: entered promiscuous mode [ 464.404335][T11428] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 464.605196][T11428] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup [ 464.608963][T11428] ft260 0003:0403:6030.0010: failed to retrieve status: -5 [ 464.625128][ T1358] hsr_slave_0: left promiscuous mode [ 464.639522][ T1358] hsr_slave_1: left promiscuous mode [ 464.640631][ T1358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.640658][ T1358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.671709][ T1358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.671802][ T1358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.816074][T11428] ft260 0003:0403:6030.0010: failed to reset I2C controller: -71 [ 464.929698][ T1358] veth1_macvtap: left promiscuous mode [ 464.929805][ T1358] veth0_macvtap: left promiscuous mode [ 464.930051][ T1358] veth1_vlan: left promiscuous mode [ 464.932461][ T1358] veth0_vlan: left promiscuous mode [ 465.053233][T11428] usb 4-1: USB disconnect, device number 50 [ 466.100112][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 466.285066][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 466.285100][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 466.307080][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 466.307111][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 466.307132][ T9] usb 4-1: Product: syz [ 466.307147][ T9] usb 4-1: Manufacturer: syz [ 466.307161][ T9] usb 4-1: SerialNumber: syz [ 466.346907][ T9] usb 4-1: config 0 descriptor?? [ 466.367435][ T9] usb 4-1: selecting invalid altsetting 0 [ 466.503475][ T5934] xr_serial 5-1:127.171: xr_serial converter detected [ 466.523566][ T5934] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 466.523606][ T5934] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 466.554194][ T5934] usb 5-1: USB disconnect, device number 65 [ 466.556819][ T5934] xr_serial 5-1:127.171: device disconnected [ 466.589582][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.609844][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.612112][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.612622][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.786469][ T5945] usb 4-1: USB disconnect, device number 51 [ 467.249185][ T6347] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 467.411491][ T6347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 467.411528][ T6347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 467.413832][ T6347] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 467.413861][ T6347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.413881][ T6347] usb 5-1: Product: syz [ 467.413896][ T6347] usb 5-1: Manufacturer: syz [ 467.413910][ T6347] usb 5-1: SerialNumber: syz [ 467.429966][ T6347] usb 5-1: config 0 descriptor?? [ 467.445550][ T6347] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 467.447348][ T6347] usb 5-1: Detected SIO [ 467.447374][ T6347] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 467.447390][ T6347] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 467.462606][ T6347] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 467.658200][ T6347] usb 5-1: USB disconnect, device number 66 [ 467.726549][ T6347] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 467.727299][ T6347] ftdi_sio 5-1:0.0: device disconnected [ 468.009484][ T5945] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 468.179247][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 468.228378][ T5945] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 468.228407][ T5945] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 468.228427][ T5945] usb 4-1: config 127 has no interface number 1 [ 468.228472][ T5945] usb 4-1: config 127 interface 171 has no altsetting 0 [ 468.268517][ T5945] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 468.268549][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.268570][ T5945] usb 4-1: Product: syz [ 468.268584][ T5945] usb 4-1: Manufacturer: syz [ 468.268598][ T5945] usb 4-1: SerialNumber: syz [ 471.760788][ T1358] team0 (unregistering): Port device team_slave_1 removed [ 472.112741][ T1358] team0 (unregistering): Port device team_slave_0 removed [ 473.009227][ T5978] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 473.159414][ T5978] usb 5-1: Using ep0 maxpacket: 32 [ 473.162473][ T5978] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 473.162517][ T5978] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 473.162568][ T5978] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 473.162591][ T5978] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 473.162617][ T5978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.165522][ T5978] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 473.165552][ T5978] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 473.165573][ T5978] usb 5-1: Product: syz [ 473.165587][ T5978] usb 5-1: Manufacturer: syz [ 473.165601][ T5978] usb 5-1: SerialNumber: syz [ 473.257989][ T5978] usb 5-1: config 0 descriptor?? [ 473.268466][ T5978] ldusb 5-1:0.0: Interrupt in endpoint not found [ 473.414230][ T5945] xr_serial 4-1:127.171: xr_serial converter detected [ 473.417760][ T5945] xr_serial ttyUSB0: Failed to set reg 0x1a: -32 [ 473.417819][ T5945] xr_serial ttyUSB0: probe with driver xr_serial failed with error -32 [ 473.475652][ T5945] usb 5-1: USB disconnect, device number 67 [ 476.500089][T11533] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.500274][T11533] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.500503][T11533] bridge_slave_1: entered allmulticast mode [ 476.502348][T11533] bridge_slave_1: entered promiscuous mode [ 476.623544][ T5945] usb 4-1: USB disconnect, device number 52 [ 476.628376][ T5945] xr_serial 4-1:127.171: device disconnected [ 476.883571][T11533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.893940][T11533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.169246][ T5945] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 477.400860][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.400894][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.400917][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 477.400958][ T5945] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.401031][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.407399][ T5945] usb 4-1: config 0 descriptor?? [ 477.504649][T11533] team0: Port device team_slave_0 added [ 477.557789][T11533] team0: Port device team_slave_1 added [ 477.926924][ T5945] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 478.124080][ T5978] usb 4-1: USB disconnect, device number 53 [ 478.208828][T11999] fido_id[11999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 478.367326][T11533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.367342][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.367367][T11533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.416978][T11533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.416995][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.417022][T11533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.917123][T12017] fuse: Unknown parameter 'group_i00000000000000000000' [ 479.131564][T11533] hsr_slave_0: entered promiscuous mode [ 479.132384][T11533] hsr_slave_1: entered promiscuous mode [ 479.132935][T11533] debugfs: 'hsr0' already exists in 'hsr' [ 479.132951][T11533] Cannot create hsr debugfs directory [ 479.191044][ T1358] IPVS: stop unused estimator thread 0... [ 479.310080][ T6347] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 479.499793][ T6347] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 479.499827][ T6347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 479.504497][ T6347] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 479.504532][ T6347] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 479.504553][ T6347] usb 4-1: Product: syz [ 479.504567][ T6347] usb 4-1: Manufacturer: syz [ 479.504582][ T6347] usb 4-1: SerialNumber: syz [ 479.512068][ T6347] usb 4-1: config 0 descriptor?? [ 479.567158][ T6347] usb 4-1: selecting invalid altsetting 0 [ 479.801903][T12021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.802436][T12021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.842258][T12021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.842780][T12021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.924355][T12021] 8021q: VLANs not supported on caif0 [ 480.013475][ T6347] usb 4-1: USB disconnect, device number 54 [ 480.570549][ T31] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 480.732680][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.732715][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.732738][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 480.732781][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 480.732805][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.754648][ T31] usb 5-1: config 0 descriptor?? [ 481.221434][ T31] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 481.437240][ T5978] usb 5-1: USB disconnect, device number 68 [ 481.448561][T12089] fido_id[12089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:047F:FFFF.0012/report_descriptor': No such device [ 481.506774][T11594] udevd[11594]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 481.506935][T11594] udevd[11594]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 482.449931][ T6347] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 482.601337][ T6347] usb 4-1: Using ep0 maxpacket: 32 [ 482.617047][ T6347] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 482.617101][ T6347] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 482.617117][ T6347] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.617134][ T6347] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 482.622304][ T6347] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 482.622334][ T6347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.622354][ T6347] usb 4-1: Product: syz [ 482.622368][ T6347] usb 4-1: Manufacturer: syz [ 482.622383][ T6347] usb 4-1: SerialNumber: syz [ 482.645129][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 482.645387][ T5978] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 482.745219][ T6347] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input46 [ 482.799812][ T5978] usb 5-1: Using ep0 maxpacket: 32 [ 482.812774][ T5978] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 482.812817][ T5978] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 482.812868][ T5978] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 482.812894][ T5978] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 482.812916][ T5978] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 482.812943][ T5978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 482.817132][ T5978] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 482.817161][ T5978] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 482.817182][ T5978] usb 5-1: Product: syz [ 482.817196][ T5978] usb 5-1: Manufacturer: syz [ 482.817210][ T5978] usb 5-1: SerialNumber: syz [ 482.879130][ T6347] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 482.879152][ T6347] (id 0x00) [ 482.933473][ T5978] usb 5-1: config 0 descriptor?? [ 482.948066][ T5978] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 483.041558][ T6347] rc_core: IR keymap rc-imon-pad not found [ 483.041580][ T6347] Registered IR keymap rc-empty [ 483.041663][ T6347] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 483.041682][ T6347] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 483.056304][ T5978] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 483.080918][ T6347] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 483.084671][ T6347] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input47 [ 483.156066][ T6347] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:55> initialized [ 483.205536][ T5978] usb 5-1: USB disconnect, device number 69 [ 483.346086][ T5978] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 483.615386][T11533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 483.703398][T11533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 483.737517][T11533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 483.769145][ T5978] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 483.804208][T11533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 483.921033][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.921073][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.921095][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.921134][ T5978] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.921157][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.927322][ T5978] usb 5-1: config 0 descriptor?? [ 484.484755][ T5978] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 484.703278][ T31] usb 5-1: USB disconnect, device number 70 [ 484.720977][T11533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.905284][T12181] fido_id[12181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 485.110012][T11533] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.204788][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.220787][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.332621][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.332770][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.729753][ T9] usb 4-1: USB disconnect, device number 55 [ 486.479210][ T5978] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 486.492095][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 486.575307][T11533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.629120][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 486.632154][ T5978] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 486.632260][ T5978] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 486.632287][ T5978] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.632313][ T5978] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 486.635581][ T5978] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 486.635611][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.635631][ T5978] usb 1-1: Product: syz [ 486.635645][ T5978] usb 1-1: Manufacturer: syz [ 486.635660][ T5978] usb 1-1: SerialNumber: syz [ 486.751156][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 486.751192][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 486.755118][ T9] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 486.755137][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.755147][ T9] usb 4-1: Product: syz [ 486.755155][ T9] usb 4-1: Manufacturer: syz [ 486.755163][ T9] usb 4-1: SerialNumber: syz [ 486.758019][ T9] usb 4-1: config 0 descriptor?? [ 486.826918][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 486.827894][ T9] usb 4-1: Detected SIO [ 486.827905][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 486.827914][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 486.858307][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 486.868006][ T5978] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input49 [ 486.881455][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 486.959152][ T5978] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 486.959172][ T5978] (id 0x00) [ 487.023324][ T6347] usb 4-1: USB disconnect, device number 56 [ 487.059206][ T5978] rc_core: IR keymap rc-imon-pad not found [ 487.059231][ T5978] Registered IR keymap rc-empty [ 487.059315][ T5978] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 487.059337][ T5978] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 487.059695][ T6347] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 487.060264][ T6347] ftdi_sio 4-1:0.0: device disconnected [ 487.180953][ T5978] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 487.184266][ T5978] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input50 [ 487.224228][ T5978] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:60> initialized [ 487.284234][T11533] veth0_vlan: entered promiscuous mode [ 487.381439][ T5978] usb 1-1: USB disconnect, device number 60 [ 487.387656][T11533] veth1_vlan: entered promiscuous mode [ 487.637934][T11538] udevd[11538]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 487.675214][T11533] veth0_macvtap: entered promiscuous mode [ 487.716454][T11533] veth1_macvtap: entered promiscuous mode [ 487.815296][T11533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.910050][T11533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.956225][ T3500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.957695][ T3500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.957734][ T3500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.957765][ T3500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.679395][ T5978] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 488.899607][ T5978] usb 1-1: Using ep0 maxpacket: 8 [ 488.940577][ T5978] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 488.948651][ T5978] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 488.948681][ T5978] usb 1-1: config 127 has no interface number 1 [ 488.948731][ T5978] usb 1-1: config 127 interface 171 has no altsetting 0 [ 488.966348][ T5978] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 488.966382][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.966402][ T5978] usb 1-1: Product: syz [ 488.966417][ T5978] usb 1-1: Manufacturer: syz [ 488.966432][ T5978] usb 1-1: SerialNumber: syz [ 489.580383][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.580403][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.590981][ T1358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.591125][ T1358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.863796][T12301] tipc: Started in network mode [ 491.863817][T12301] tipc: Node identity 2660f4f93e11, cluster identity 4711 [ 491.863976][T12301] tipc: Enabled bearer , priority 0 [ 491.865655][T12301] syzkaller0: entered promiscuous mode [ 491.865675][T12301] syzkaller0: entered allmulticast mode [ 492.032311][T12301] tipc: Resetting bearer [ 492.155605][T12299] tipc: Resetting bearer [ 492.388239][T12299] tipc: Disabling bearer [ 494.062326][ T5978] xr_serial 1-1:127.171: xr_serial converter detected [ 494.088799][ T5978] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 494.088850][ T5978] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 494.136162][ T5978] usb 1-1: USB disconnect, device number 61 [ 494.157941][ T5978] xr_serial 1-1:127.171: device disconnected [ 494.310773][ T6347] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 494.461856][ T6347] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 494.461887][ T6347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.467003][ T6347] usb 4-1: config 0 descriptor?? [ 494.501900][ T6347] cp210x 4-1:0.0: cp210x converter detected [ 494.895347][ T6347] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 495.097351][ T6347] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 495.097380][ T6347] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 495.121032][ T6347] usb 4-1: cp210x converter now attached to ttyUSB0 [ 495.278433][T10796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.303930][ T5945] usb 4-1: USB disconnect, device number 57 [ 495.315202][T10796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.324884][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 495.325761][ T5945] cp210x 4-1:0.0: device disconnected [ 495.345698][T10796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.350583][T10796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.351368][T10796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.925484][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2353'. [ 495.999719][T10009] tipc: Resetting bearer [ 496.180975][T10009] tipc: Disabling bearer [ 496.529222][ T5897] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 496.689358][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 496.723553][ T5897] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 496.723572][ T5897] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 496.723583][ T5897] usb 2-1: config 127 has no interface number 1 [ 496.723608][ T5897] usb 2-1: config 127 interface 171 has no altsetting 0 [ 496.791442][ T5897] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 496.791474][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.791495][ T5897] usb 2-1: Product: syz [ 496.791509][ T5897] usb 2-1: Manufacturer: syz [ 496.791524][ T5897] usb 2-1: SerialNumber: syz [ 497.381361][T10796] Bluetooth: hci5: command tx timeout [ 498.068297][ T1280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.267314][ T1280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.459275][T10796] Bluetooth: hci5: command tx timeout [ 500.024131][ T1280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.369225][ T6347] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 500.569367][ T6347] usb 4-1: Using ep0 maxpacket: 32 [ 500.593823][ T6347] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 500.593868][ T6347] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 500.593945][ T6347] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 500.593969][ T6347] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 500.593993][ T6347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 500.599451][ T6347] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 500.599476][ T6347] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 500.599494][ T6347] usb 4-1: Product: syz [ 500.599507][ T6347] usb 4-1: Manufacturer: syz [ 500.599520][ T6347] usb 4-1: SerialNumber: syz [ 500.614102][ T6347] usb 4-1: config 0 descriptor?? [ 500.723174][ T6347] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 500.763001][ T6347] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 500.845715][ T1280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.873719][ T56] usb 4-1: USB disconnect, device number 58 [ 500.960240][ T56] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 501.040824][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2370'. [ 501.068170][T12346] chnl_net:caif_netlink_parms(): no params data found [ 501.466254][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.466342][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.546492][T10796] Bluetooth: hci5: command tx timeout [ 501.895646][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'. [ 501.915750][ T5897] xr_serial 2-1:127.171: xr_serial converter detected [ 501.929511][ T5897] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 501.929570][ T5897] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 501.973439][ T5897] usb 2-1: USB disconnect, device number 26 [ 501.990706][ T5897] xr_serial 2-1:127.171: device disconnected [ 502.478245][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.478837][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.499244][T12346] bridge_slave_0: entered allmulticast mode [ 502.502419][T12346] bridge_slave_0: entered promiscuous mode [ 502.634617][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.637157][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.637404][T12346] bridge_slave_1: entered allmulticast mode [ 502.644229][T12346] bridge_slave_1: entered promiscuous mode [ 502.909225][ T56] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 503.144548][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 503.146448][ T56] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 503.146466][ T56] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.146487][ T56] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 503.146508][ T56] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 503.146523][ T56] usb 5-1: config 0 interface 0 has no altsetting 0 [ 503.148529][ T56] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 503.148547][ T56] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 503.148558][ T56] usb 5-1: Product: syz [ 503.148566][ T56] usb 5-1: Manufacturer: syz [ 503.148574][ T56] usb 5-1: SerialNumber: syz [ 503.263363][ T56] usb 5-1: config 0 descriptor?? [ 503.283386][ T56] ldusb 5-1:0.0: Interrupt in endpoint not found [ 503.500024][ T6347] usb 5-1: USB disconnect, device number 71 [ 503.564346][T12481] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2393'. [ 503.625003][T10796] Bluetooth: hci5: command tx timeout [ 503.637019][T12346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.668948][T12346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.879646][ T1280] bridge_slave_1: left allmulticast mode [ 503.879676][ T1280] bridge_slave_1: left promiscuous mode [ 503.879935][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.993588][ T1280] bridge_slave_0: left allmulticast mode [ 503.993620][ T1280] bridge_slave_0: left promiscuous mode [ 503.993910][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.209163][ T5897] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 504.362195][ T5897] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 504.362234][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 504.367138][ T5897] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 504.367172][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.367193][ T5897] usb 2-1: Product: syz [ 504.367208][ T5897] usb 2-1: Manufacturer: syz [ 504.367221][ T5897] usb 2-1: SerialNumber: syz [ 504.404385][ T5897] usb 2-1: config 0 descriptor?? [ 504.458533][ T5897] usb 2-1: selecting invalid altsetting 0 [ 504.654423][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.733214][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.989234][ T56] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 505.200383][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 505.202992][ T56] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 505.203036][ T56] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 505.203086][ T56] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 505.203109][ T56] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 505.203142][ T56] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.205486][ T56] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 505.205596][ T56] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 505.205616][ T56] usb 1-1: Product: syz [ 505.205630][ T56] usb 1-1: Manufacturer: syz [ 505.205643][ T56] usb 1-1: SerialNumber: syz [ 505.328825][ T56] usb 1-1: config 0 descriptor?? [ 505.369523][ T56] ldusb 1-1:0.0: Interrupt in endpoint not found [ 505.611189][ T56] usb 1-1: USB disconnect, device number 62 [ 507.781276][ T1280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.862760][ T1280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.919576][ T1280] bond0 (unregistering): Released all slaves [ 508.160801][T12490] 8021q: VLANs not supported on caif0 [ 508.197962][ T1280] tipc: Left network mode [ 508.204789][T12346] team0: Port device team_slave_0 added [ 508.247133][T12346] team0: Port device team_slave_1 added [ 508.296733][ T6347] usb 2-1: USB disconnect, device number 27 [ 508.534253][T12616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2443'. [ 509.064016][T12346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.064033][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.064058][T12346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.104061][T12346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.104078][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.104104][T12346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.706101][T12656] input: syz1 as /devices/virtual/input/input53 [ 511.955710][ T1280] hsr_slave_0: left promiscuous mode [ 512.148407][ T1280] hsr_slave_1: left promiscuous mode [ 512.153936][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.153966][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.230958][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.230990][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.578481][ T1280] veth1_macvtap: left promiscuous mode [ 512.578559][ T1280] veth0_macvtap: left promiscuous mode [ 512.578713][ T1280] veth1_vlan: left promiscuous mode [ 512.578786][ T1280] veth0_vlan: left promiscuous mode [ 514.339561][T12744] input: syz1 as /devices/virtual/input/input54 [ 518.366906][T12804] input: syz1 as /devices/virtual/input/input55 [ 518.919745][ T1280] team0 (unregistering): Port device team_slave_1 removed [ 519.289700][ T1280] team0 (unregistering): Port device team_slave_0 removed [ 519.889480][ T5897] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 520.074263][ T5897] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 520.074298][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.074319][ T5897] usb 1-1: Product: syz [ 520.074335][ T5897] usb 1-1: Manufacturer: syz [ 520.074350][ T5897] usb 1-1: SerialNumber: syz [ 520.143445][ T5897] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 520.212214][ T5978] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 521.299265][ T5978] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 521.301614][ T5978] ath9k_htc: Failed to initialize the device [ 521.349856][ T5978] usb 1-1: ath9k_htc: USB layer deinitialized [ 522.829871][ T31] usb 1-1: USB disconnect, device number 63 [ 523.622796][ T805] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 523.827656][ T805] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 523.827685][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 523.827702][ T805] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 523.871304][ T805] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 523.871337][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.871359][ T805] usb 1-1: Product: syz [ 523.871374][ T805] usb 1-1: Manufacturer: syz [ 523.871389][ T805] usb 1-1: SerialNumber: syz [ 523.891304][ T805] usb 1-1: config 0 descriptor?? [ 523.893526][T12894] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 524.112092][T12894] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 524.865821][T12346] hsr_slave_0: entered promiscuous mode [ 524.866803][T12346] hsr_slave_1: entered promiscuous mode [ 525.229139][ T5897] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 525.283799][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 525.396186][ T5897] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 525.396374][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.396387][ T5897] usb 2-1: Product: syz [ 525.396396][ T5897] usb 2-1: Manufacturer: syz [ 525.396405][ T5897] usb 2-1: SerialNumber: syz [ 525.451689][ T5897] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 525.597304][ T5978] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 526.659212][ T5978] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 526.659726][ T5978] ath9k_htc: Failed to initialize the device [ 526.707951][ T5978] usb 2-1: ath9k_htc: USB layer deinitialized [ 528.000230][ T805] usb 2-1: USB disconnect, device number 28 [ 528.263184][ T1280] IPVS: stop unused estimator thread 0... [ 528.370313][ T5978] usb 1-1: USB disconnect, device number 64 [ 529.794620][T12982] ================================================================== [ 529.794638][T12982] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0 [ 529.794675][T12982] Read of size 1 at addr ffff88803389b170 by task syz.0.2592/12982 [ 529.794694][T12982] [ 529.794723][T12982] CPU: 0 UID: 0 PID: 12982 Comm: syz.0.2592 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 529.794754][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.794774][T12982] Call Trace: [ 529.794785][T12982] [ 529.794795][T12982] dump_stack_lvl+0xe8/0x150 [ 529.794826][T12982] print_report+0xca/0x240 [ 529.794851][T12982] ? rt_spin_lock+0x88/0x3e0 [ 529.794878][T12982] kasan_report+0x118/0x150 [ 529.794919][T12982] ? rt_spin_lock+0x88/0x3e0 [ 529.794950][T12982] ? __wake_up_common_lock+0x2f/0x1e0 [ 529.794976][T12982] __kasan_check_byte+0x2a/0x40 [ 529.795006][T12982] lock_acquire+0x84/0x340 [ 529.795029][T12982] ? preempt_schedule_thunk+0x16/0x30 [ 529.795050][T12982] ? preempt_schedule_common+0x83/0xd0 [ 529.795071][T12982] rt_spin_lock+0x88/0x3e0 [ 529.795096][T12982] ? __wake_up_common_lock+0x2f/0x1e0 [ 529.795119][T12982] ? __pfx_rt_spin_lock+0x10/0x10 [ 529.795142][T12982] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 529.795167][T12982] __wake_up_common_lock+0x2f/0x1e0 [ 529.795190][T12982] snd_pcm_post_stop+0x14a/0x1e0 [ 529.795210][T12982] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 529.795226][T12982] snd_pcm_action+0x1f4/0x240 [ 529.795249][T12982] loopback_trigger+0xb82/0x1b60 [ 529.795268][T12982] ? rcu_is_watching+0x15/0xb0 [ 529.795287][T12982] snd_pcm_do_start+0xb7/0x180 [ 529.795304][T12982] snd_pcm_action+0xe7/0x240 [ 529.795327][T12982] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 529.795350][T12982] ? __pfx_interleaved_copy+0x10/0x10 [ 529.795369][T12982] ? __pfx_default_write_copy+0x10/0x10 [ 529.795390][T12982] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.795411][T12982] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 529.795430][T12982] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 529.795452][T12982] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 529.795476][T12982] ? snd_pcm_oss_write3+0x1a2/0x350 [ 529.795495][T12982] snd_pcm_oss_write3+0x1bc/0x350 [ 529.795513][T12982] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 529.795538][T12982] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 529.795559][T12982] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 529.795583][T12982] snd_pcm_oss_write+0xa31/0xf20 [ 529.795606][T12982] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 529.795622][T12982] ? __pfx_futex_wait+0x10/0x10 [ 529.795641][T12982] ? rw_verify_area+0x25b/0x4e0 [ 529.795663][T12982] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 529.795680][T12982] vfs_write+0x287/0xb40 [ 529.795705][T12982] ? __pfx_vfs_write+0x10/0x10 [ 529.795727][T12982] ? __fget_files+0x2a/0x420 [ 529.795745][T12982] ? __fget_files+0x2a/0x420 [ 529.795761][T12982] ? __fget_files+0x3a6/0x420 [ 529.795778][T12982] ? __fget_files+0x2a/0x420 [ 529.795798][T12982] ksys_write+0x14b/0x260 [ 529.795821][T12982] ? __pfx_ksys_write+0x10/0x10 [ 529.795847][T12982] do_syscall_64+0xec/0xf80 [ 529.795865][T12982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.795887][T12982] ? clear_bhb_loop+0x60/0xb0 [ 529.795907][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.795924][T12982] RIP: 0033:0x7f7f0193f749 [ 529.795945][T12982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.795962][T12982] RSP: 002b:00007f7effb64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.795984][T12982] RAX: ffffffffffffffda RBX: 00007f7f01b96180 RCX: 00007f7f0193f749 [ 529.795999][T12982] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 529.796011][T12982] RBP: 00007f7f019c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.796022][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.796034][T12982] R13: 00007f7f01b96218 R14: 00007f7f01b96180 R15: 00007fff26c551a8 [ 529.796054][T12982] [ 529.796060][T12982] [ 529.796066][T12982] Allocated by task 12982: [ 529.796074][T12982] kasan_save_track+0x3e/0x80 [ 529.796095][T12982] __kasan_kmalloc+0x93/0xb0 [ 529.796115][T12982] __kmalloc_cache_noprof+0x1fb/0x6d0 [ 529.796137][T12982] snd_pcm_attach_substream+0x5b7/0xb30 [ 529.796155][T12982] snd_pcm_open_substream+0xb6/0x2410 [ 529.796177][T12982] snd_pcm_oss_open+0xf2a/0x1bd0 [ 529.796192][T12982] chrdev_open+0x4cf/0x5e0 [ 529.796206][T12982] do_dentry_open+0x7d0/0x1270 [ 529.796221][T12982] vfs_open+0x3b/0x350 [ 529.796236][T12982] path_openat+0x342a/0x3df0 [ 529.796255][T12982] do_filp_open+0x1fa/0x410 [ 529.796274][T12982] do_sys_openat2+0x121/0x200 [ 529.796290][T12982] __x64_sys_openat+0x138/0x170 [ 529.796306][T12982] do_syscall_64+0xec/0xf80 [ 529.796322][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.796337][T12982] [ 529.796341][T12982] Freed by task 12975: [ 529.796349][T12982] kasan_save_track+0x3e/0x80 [ 529.796368][T12982] kasan_save_free_info+0x46/0x50 [ 529.796385][T12982] __kasan_slab_free+0x5c/0x80 [ 529.796405][T12982] kfree+0x1bd/0x900 [ 529.796423][T12982] snd_pcm_detach_substream+0x1e1/0x290 [ 529.796442][T12982] snd_pcm_oss_release+0x184/0x250 [ 529.796456][T12982] __fput+0x45b/0xa80 [ 529.796472][T12982] task_work_run+0x1d4/0x260 [ 529.796493][T12982] exit_to_user_mode_loop+0xef/0x4e0 [ 529.796514][T12982] do_syscall_64+0x2c1/0xf80 [ 529.796529][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.796544][T12982] [ 529.796549][T12982] The buggy address belongs to the object at ffff88803389b000 [ 529.796549][T12982] which belongs to the cache kmalloc-2k of size 2048 [ 529.796564][T12982] The buggy address is located 368 bytes inside of [ 529.796564][T12982] freed 2048-byte region [ffff88803389b000, ffff88803389b800) [ 529.796583][T12982] [ 529.796587][T12982] The buggy address belongs to the physical page: [ 529.796611][T12982] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33898 [ 529.796628][T12982] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 529.796649][T12982] flags: 0x80000000000040(head|node=0|zone=1) [ 529.796668][T12982] page_type: f5(slab) [ 529.796685][T12982] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 529.796701][T12982] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 529.796717][T12982] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 529.796732][T12982] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 529.796748][T12982] head: 0080000000000003 ffffea0000ce2601 00000000ffffffff 00000000ffffffff [ 529.796763][T12982] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 529.796773][T12982] page dumped because: kasan: bad access detected [ 529.796786][T12982] page_owner tracks the page as allocated [ 529.796792][T12982] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11533, tgid 11533 (syz-executor), ts 488153371630, free_ts 488125823791 [ 529.796824][T12982] post_alloc_hook+0x234/0x290 [ 529.796845][T12982] get_page_from_freelist+0x28c0/0x2960 [ 529.796861][T12982] __alloc_frozen_pages_noprof+0x181/0x370 [ 529.796877][T12982] alloc_pages_mpol+0xd1/0x380 [ 529.796897][T12982] allocate_slab+0x86/0x3b0 [ 529.796914][T12982] ___slab_alloc+0xb10/0x13e0 [ 529.796930][T12982] __slab_alloc+0xc6/0x1f0 [ 529.796945][T12982] __kmalloc_cache_noprof+0x101/0x6d0 [ 529.796966][T12982] rtnl_newlink+0xfb/0x1c90 [ 529.796984][T12982] rtnetlink_rcv_msg+0x7cf/0xb70 [ 529.797002][T12982] netlink_rcv_skb+0x208/0x470 [ 529.797022][T12982] netlink_unicast+0x846/0xa10 [ 529.797039][T12982] netlink_sendmsg+0x805/0xb30 [ 529.797060][T12982] __sock_sendmsg+0x21c/0x270 [ 529.797074][T12982] __sys_sendto+0x3c7/0x520 [ 529.797090][T12982] __x64_sys_sendto+0xde/0x100 [ 529.797107][T12982] page last free pid 5792 tgid 5792 stack trace: [ 529.797117][T12982] __free_frozen_pages+0xfe1/0x1170 [ 529.797139][T12982] __put_partials+0x149/0x170 [ 529.797154][T12982] __slab_free+0x2af/0x330 [ 529.797170][T12982] qlist_free_all+0x97/0x100 [ 529.797189][T12982] kasan_quarantine_reduce+0x148/0x160 [ 529.797210][T12982] __kasan_slab_alloc+0x22/0x80 [ 529.797230][T12982] kmem_cache_alloc_node_noprof+0x23c/0x6f0 [ 529.797252][T12982] __alloc_skb+0x1dc/0x3a0 [ 529.797269][T12982] tcp_stream_alloc_skb+0x3d/0x350 [ 529.797287][T12982] tcp_sendmsg_locked+0x1abe/0x5520 [ 529.797306][T12982] tcp_sendmsg+0x2f/0x50 [ 529.797323][T12982] __sock_sendmsg+0x19c/0x270 [ 529.797336][T12982] sock_write_iter+0x27f/0x370 [ 529.797358][T12982] vfs_write+0x5d5/0xb40 [ 529.797377][T12982] ksys_write+0x14b/0x260 [ 529.797396][T12982] do_syscall_64+0xec/0xf80 [ 529.797412][T12982] [ 529.797416][T12982] Memory state around the buggy address: [ 529.797425][T12982] ffff88803389b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.797438][T12982] ffff88803389b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.797450][T12982] >ffff88803389b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.797458][T12982] ^ [ 529.797468][T12982] ffff88803389b180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.797480][T12982] ffff88803389b200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.797489][T12982] ================================================================== [ 529.797541][T12982] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 529.797560][T12982] CPU: 0 UID: 0 PID: 12982 Comm: syz.0.2592 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 529.797583][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.797596][T12982] Call Trace: [ 529.797605][T12982] [ 529.797613][T12982] vpanic+0x1e0/0x670 [ 529.797643][T12982] panic+0xb9/0xc0 [ 529.797670][T12982] ? __pfx_panic+0x10/0x10 [ 529.797698][T12982] ? preempt_schedule_thunk+0x16/0x30 [ 529.797722][T12982] ? preempt_schedule_thunk+0x16/0x30 [ 529.797744][T12982] ? rt_spin_lock+0x88/0x3e0 [ 529.797772][T12982] check_panic_on_warn+0x89/0xb0 [ 529.797802][T12982] ? rt_spin_lock+0x88/0x3e0 [ 529.797829][T12982] end_report+0x6f/0x140 [ 529.797859][T12982] kasan_report+0x129/0x150 [ 529.797898][T12982] ? rt_spin_lock+0x88/0x3e0 [ 529.797929][T12982] ? __wake_up_common_lock+0x2f/0x1e0 [ 529.797955][T12982] __kasan_check_byte+0x2a/0x40 [ 529.797985][T12982] lock_acquire+0x84/0x340 [ 529.798012][T12982] ? preempt_schedule_thunk+0x16/0x30 [ 529.798035][T12982] ? preempt_schedule_common+0x83/0xd0 [ 529.798056][T12982] rt_spin_lock+0x88/0x3e0 [ 529.798080][T12982] ? __wake_up_common_lock+0x2f/0x1e0 [ 529.798103][T12982] ? __pfx_rt_spin_lock+0x10/0x10 [ 529.798129][T12982] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 529.798154][T12982] __wake_up_common_lock+0x2f/0x1e0 [ 529.798177][T12982] snd_pcm_post_stop+0x14a/0x1e0 [ 529.798196][T12982] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 529.798213][T12982] snd_pcm_action+0x1f4/0x240 [ 529.798236][T12982] loopback_trigger+0xb82/0x1b60 [ 529.798256][T12982] ? rcu_is_watching+0x15/0xb0 [ 529.798275][T12982] snd_pcm_do_start+0xb7/0x180 [ 529.798292][T12982] snd_pcm_action+0xe7/0x240 [ 529.798316][T12982] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 529.798346][T12982] ? __pfx_interleaved_copy+0x10/0x10 [ 529.798366][T12982] ? __pfx_default_write_copy+0x10/0x10 [ 529.798386][T12982] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.798407][T12982] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 529.798425][T12982] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 529.798449][T12982] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 529.798473][T12982] ? snd_pcm_oss_write3+0x1a2/0x350 [ 529.798492][T12982] snd_pcm_oss_write3+0x1bc/0x350 [ 529.798534][T12982] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 529.798561][T12982] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 529.798583][T12982] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 529.798607][T12982] snd_pcm_oss_write+0xa31/0xf20 [ 529.798630][T12982] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 529.798647][T12982] ? __pfx_futex_wait+0x10/0x10 [ 529.798666][T12982] ? rw_verify_area+0x25b/0x4e0 [ 529.798693][T12982] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 529.798711][T12982] vfs_write+0x287/0xb40 [ 529.798736][T12982] ? __pfx_vfs_write+0x10/0x10 [ 529.798758][T12982] ? __fget_files+0x2a/0x420 [ 529.798778][T12982] ? __fget_files+0x2a/0x420 [ 529.798795][T12982] ? __fget_files+0x3a6/0x420 [ 529.798812][T12982] ? __fget_files+0x2a/0x420 [ 529.798832][T12982] ksys_write+0x14b/0x260 [ 529.798856][T12982] ? __pfx_ksys_write+0x10/0x10 [ 529.798886][T12982] do_syscall_64+0xec/0xf80 [ 529.798905][T12982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.798922][T12982] ? clear_bhb_loop+0x60/0xb0 [ 529.798946][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.798964][T12982] RIP: 0033:0x7f7f0193f749 [ 529.798979][T12982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.799000][T12982] RSP: 002b:00007f7effb64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.799019][T12982] RAX: ffffffffffffffda RBX: 00007f7f01b96180 RCX: 00007f7f0193f749 [ 529.799034][T12982] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 529.799047][T12982] RBP: 00007f7f019c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.799060][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.799071][T12982] R13: 00007f7f01b96218 R14: 00007f7f01b96180 R15: 00007fff26c551a8 [ 529.799091][T12982] [ 529.799529][T12982] Kernel Offset: disabled