last executing test programs: 6.326978629s ago: executing program 2 (id=4980): r0 = syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) pread64(r0, 0x0, 0x0, 0x4fd9) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) socket(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x1, 0x0, [0x0], [0x0, 0x7], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_GET_STATS(r2, 0x807c6406, &(0x7f0000000280)=""/104) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 5.568360589s ago: executing program 0 (id=4985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.411101677s ago: executing program 0 (id=4987): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000003c0), 0x7, 0x80) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000380)={0x5, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000200)=[0x7fff, 0xc, 0x2], &(0x7f0000000240)=[0x404, 0x4]}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x8, 0x0, 0x1000}}}}}}, 0x0) 5.205653678s ago: executing program 2 (id=4988): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000500)=[{0xd0, 0x2000, 0x6, &(0x7f0000000080)="839fdcc826b1"}], 0x1}) 4.942207072s ago: executing program 1 (id=4990): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f00003b0000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.881910085s ago: executing program 1 (id=4991): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000500)=[{0xd0, 0x2000, 0x6, &(0x7f0000000080)="839fdcc826b1"}], 0x1}) 4.59914768s ago: executing program 0 (id=4992): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 3.206735492s ago: executing program 2 (id=4997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031400d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.87692829s ago: executing program 1 (id=4999): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f00003b0000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.87662171s ago: executing program 2 (id=5000): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000003c0), 0x7, 0x80) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000380)={0x5, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000200)=[0x7fff, 0xc, 0x2], &(0x7f0000000240)=[0x404, 0x4]}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x8, 0x0, 0x1000}}}}}}, 0x0) 2.771003035s ago: executing program 1 (id=5001): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 2.698534369s ago: executing program 3 (id=5002): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) 2.67925689s ago: executing program 1 (id=5003): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6dbf}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) r3 = getpid() syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x28, 0x0, 0xffffffffffff625e, {{0x5, 0x6c2, 0x1, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x0, 0x2}) 2.593521175s ago: executing program 3 (id=5004): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000580)}}, 0x18) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x88}, 0x1, 0xba01}, 0x0) pselect6(0x40, &(0x7f0000000340)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180f3ff00006861736800000000140002800800074000000001080002400000000e0900010073797a300000000009"], 0x7c}}, 0x0) shutdown(r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) syz_emit_ethernet(0x107, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) 2.530646378s ago: executing program 0 (id=5005): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) write$char_usb(r1, &(0x7f0000000100)="da", 0x1) 2.145058878s ago: executing program 2 (id=5006): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000500)=[{0xd0, 0x2000, 0x6, &(0x7f0000000080)="839fdcc826b1"}], 0x1}) 1.715664571s ago: executing program 1 (id=5007): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, 0x0) 1.483105393s ago: executing program 3 (id=5008): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, 0x0, 0x13f, 0x3}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.353647519s ago: executing program 3 (id=5009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00003b0000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 740.939242ms ago: executing program 0 (id=5010): socket$kcm(0x2, 0x5, 0x84) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x4) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = syz_io_uring_setup(0xf82, &(0x7f0000000200)={0x0, 0x80000002, 0x400, 0x3, 0x380}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r4, r5, 0x0, 0x0) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 582.0723ms ago: executing program 0 (id=5011): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) io_submit(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f00000001c0)=@v1={0x1000000, [{0x5c, 0x7}]}, 0xc, 0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) 303.612095ms ago: executing program 3 (id=5012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) 255.978807ms ago: executing program 2 (id=5013): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 0s ago: executing program 3 (id=5014): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5dc}], 0x1}, 0x4) kernel console output (not intermixed with test programs): using dummy_hcd [ 1483.183765][ T8816] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1483.223818][ T8816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.243219][ T8816] usb 1-1: config 0 has no interfaces? [ 1483.258213][ T8816] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1483.268106][ T8816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.291011][ T8816] usb 1-1: config 0 descriptor?? [ 1483.393801][ T5760] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 1483.563795][ T5760] usb 2-1: device descriptor read/64, error -71 [ 1483.836717][ T5760] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 1484.020889][ T5760] usb 2-1: device descriptor read/64, error -71 [ 1484.164895][ T5760] usb usb2-port1: attempt power cycle [ 1484.613610][ T5760] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 1484.675009][ T5760] usb 2-1: device descriptor read/8, error -71 [ 1484.921599][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.928156][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.013719][ T5760] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 1485.055085][ T5760] usb 2-1: device descriptor read/8, error -71 [ 1485.182482][ T5760] usb usb2-port1: unable to enumerate USB device [ 1485.694201][ T8816] usb 1-1: USB disconnect, device number 85 [ 1486.183784][ T8816] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1486.451417][ T8816] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1486.461069][ T8816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.473968][ T8816] usb 1-1: Product: syz [ 1486.478201][ T8816] usb 1-1: Manufacturer: syz [ 1486.482841][ T8816] usb 1-1: SerialNumber: syz [ 1486.504565][ T8816] usb 1-1: config 0 descriptor?? [ 1486.832223][T20844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4557'. [ 1486.868567][ T5777] usb 3-1: USB disconnect, device number 89 [ 1486.982494][T20848] syzkaller0: entered promiscuous mode [ 1486.988496][T20848] syzkaller0: entered allmulticast mode [ 1487.101842][T20854] netlink: 'syz.2.4569': attribute type 1 has an invalid length. [ 1487.183364][T20854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1487.226141][T20858] vlan2: entered allmulticast mode [ 1487.253711][T20858] bond1: entered allmulticast mode [ 1487.329820][ T8816] usb 1-1: Firmware version (0.0) predates our first public release. [ 1487.338156][ T8816] usb 1-1: Please update to version 0.2 or newer [ 1487.350670][T20862] kAFS: unable to lookup cell '' [ 1487.483298][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 1487.483316][ T28] audit: type=1326 audit(1776739014.532:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1487.528788][ T28] audit: type=1326 audit(1776739014.572:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1487.557789][ T28] audit: type=1326 audit(1776739014.572:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1487.627055][ T28] audit: type=1326 audit(1776739014.572:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1487.664003][ T8816] usb 1-1: USB disconnect, device number 86 [ 1487.677644][ T28] audit: type=1326 audit(1776739014.572:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1487.720780][ T28] audit: type=1326 audit(1776739014.572:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1487.760935][ T28] audit: type=1326 audit(1776739014.572:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1487.784886][ T28] audit: type=1326 audit(1776739014.572:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1487.831263][ T5760] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1487.853111][ T28] audit: type=1326 audit(1776739014.572:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1487.927826][ T28] audit: type=1326 audit(1776739014.572:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5059c819 code=0x7ffc0000 [ 1488.035314][ T5760] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1488.053659][T16077] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1488.064163][ T5760] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1488.075687][ T5760] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1488.125388][ T5760] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1488.148407][ T5760] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1488.191986][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.210476][ T5760] usb 4-1: Product: syz [ 1488.219118][ T5760] usb 4-1: Manufacturer: syz [ 1488.224519][ T5760] usb 4-1: SerialNumber: syz [ 1488.248104][ T5760] smsusb:smsusb_probe: board id=8, interface number 0 [ 1488.267475][T16077] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 1488.306668][T16077] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.382563][T16077] usb 3-1: config 0 has no interfaces? [ 1488.395432][T16077] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1488.445428][ T5777] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1488.534933][ T5760] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1488.574830][T16077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.608370][ T5760] smsusb: probe of 4-1:1.0 failed with error -71 [ 1488.648601][ T5777] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1488.682296][ T5777] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1488.695919][ T5760] usb 4-1: USB disconnect, device number 97 [ 1488.713951][T16077] usb 3-1: config 0 descriptor?? [ 1488.738348][ T5777] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1488.770888][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.797941][ T5777] usb 2-1: config 0 descriptor?? [ 1488.847536][ T5777] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1488.934210][T20880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1489.003619][T20880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1489.012370][T20880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1489.040618][T20880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1489.053110][T20880] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1489.061177][T20880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1489.089256][T14739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1489.152735][T14739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1489.165507][T14739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1489.180268][T14739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1489.189694][T14739] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1489.198005][ T6956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.209294][T14739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1489.316281][T20883] fuse: Bad value for 'fd' [ 1489.340265][ T6956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.459679][ T6956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.492453][T20886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1489.589387][ T6956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.675925][T20888] syzkaller0: entered promiscuous mode [ 1489.681755][T20888] syzkaller0: entered allmulticast mode [ 1489.810731][T20879] chnl_net:caif_netlink_parms(): no params data found [ 1490.257808][T20879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.257817][T20900] kAFS: unable to lookup cell '' [ 1490.267458][T20879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.287961][T20879] bridge_slave_0: entered allmulticast mode [ 1490.304246][T20879] bridge_slave_0: entered promiscuous mode [ 1490.336297][ T6956] tipc: Disabling bearer [ 1490.344458][ T6956] tipc: Left network mode [ 1490.349041][T20879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.370877][T20879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.406440][T20879] bridge_slave_1: entered allmulticast mode [ 1490.430545][T20879] bridge_slave_1: entered promiscuous mode [ 1490.650859][T20879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.679459][T20879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.899871][T20879] team0: Port device team_slave_0 added [ 1490.917911][T20879] team0: Port device team_slave_1 added [ 1491.002809][T16077] usb 3-1: USB disconnect, device number 90 [ 1491.066998][T20879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.074585][T20879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.129180][T20879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.216929][ T5777] usb 2-1: USB disconnect, device number 86 [ 1491.274516][T20879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.293065][T20879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.327159][T14739] Bluetooth: hci3: command tx timeout [ 1491.372914][T20879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.922891][T20879] hsr_slave_0: entered promiscuous mode [ 1491.961491][T20879] hsr_slave_1: entered promiscuous mode [ 1491.976421][T20879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1492.011964][T20879] Cannot create hsr debugfs directory [ 1492.218313][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 1492.253925][T20931] bond_slave_0: entered promiscuous mode [ 1492.259736][T20931] bond_slave_1: entered promiscuous mode [ 1492.338352][T20931] : entered promiscuous mode [ 1492.384218][T20931] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1492.535316][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 1492.583087][T20933] : left promiscuous mode [ 1492.595539][T20933] bond_slave_0: left promiscuous mode [ 1492.601179][T20933] bond_slave_1: left promiscuous mode [ 1492.715795][T20939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4588'. [ 1493.087278][T20948] kAFS: unable to lookup cell '' [ 1493.347264][ T6956] hsr_slave_0: left promiscuous mode [ 1493.366106][ T6956] hsr_slave_1: left promiscuous mode [ 1493.380930][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.393891][T14739] Bluetooth: hci3: command tx timeout [ 1493.400916][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.411336][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.419373][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.427689][ T6956] bridge_slave_1: left allmulticast mode [ 1493.433380][ T6956] bridge_slave_1: left promiscuous mode [ 1493.439904][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.449606][ T6956] bridge_slave_0: left allmulticast mode [ 1493.456220][ T6956] bridge_slave_0: left promiscuous mode [ 1493.462104][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.533045][ T6956] veth1_macvtap: left promiscuous mode [ 1493.538726][ T6956] veth0_macvtap: left promiscuous mode [ 1493.545199][ T6956] veth1_vlan: left promiscuous mode [ 1493.551013][ T6956] veth0_vlan: left promiscuous mode [ 1493.654166][T16077] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1493.856947][T16077] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1493.868732][T16077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.898710][T16077] usb 4-1: Product: syz [ 1493.903194][T16077] usb 4-1: Manufacturer: syz [ 1493.908165][T16077] usb 4-1: SerialNumber: syz [ 1493.947010][T16077] usb 4-1: config 0 descriptor?? [ 1493.957086][T16077] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 098 [ 1494.043644][ T23] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1494.131679][ T6956] bond0 (unregistering): Released all slaves [ 1494.248489][ T23] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 1494.257886][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.291854][ T23] usb 3-1: config 0 has no interfaces? [ 1494.304081][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1494.332638][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.347020][ T23] usb 3-1: config 0 descriptor?? [ 1494.381573][T20961] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000' [ 1494.922336][T16077] (null): failure reading functionality [ 1494.941346][T16077] i2c i2c-1: failure reading functionality [ 1495.003314][T16077] i2c i2c-1: connected i2c-tiny-usb device [ 1495.034261][T16077] usb 4-1: USB disconnect, device number 98 [ 1495.478257][T14739] Bluetooth: hci3: command tx timeout [ 1496.039409][ T6956] team0 (unregistering): Port device team_slave_1 removed [ 1496.227584][ T6956] team0 (unregistering): Port device team_slave_0 removed [ 1496.470533][ T6956]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.482956][ T6956] bond_slave_1 (unregistering): left allmulticast mode [ 1496.705150][ T6956]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.721113][T12324] usb 3-1: USB disconnect, device number 91 [ 1496.727613][ T6956] bond_slave_0 (unregistering): left allmulticast mode [ 1497.087411][T20984] kAFS: unable to lookup cell '' [ 1497.563684][T14739] Bluetooth: hci3: command tx timeout [ 1497.702617][ T6956]  (unregistering): Released all slaves [ 1498.846796][ T6956] IPVS: stop unused estimator thread 0... [ 1499.216802][T20879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1499.269660][T20879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1499.306250][T20879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1499.329458][T20879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1499.691715][T20879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.799324][T20879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.846634][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.854150][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.915100][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.922301][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.135650][T20879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1500.436228][ T5848] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 1500.671175][ T5848] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1500.692579][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.716887][ T5848] usb 4-1: config 0 has no interfaces? [ 1500.754992][ T5848] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1500.784208][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.820374][ T5848] usb 4-1: config 0 descriptor?? [ 1500.893655][T12324] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1500.945157][T20879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.016973][T20879] veth0_vlan: entered promiscuous mode [ 1501.035358][T20879] veth1_vlan: entered promiscuous mode [ 1501.108319][T12324] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1501.128849][T20879] veth0_macvtap: entered promiscuous mode [ 1501.135061][T12324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.167864][T20879] veth1_macvtap: entered promiscuous mode [ 1501.187198][T12324] usb 2-1: Product: syz [ 1501.191417][T12324] usb 2-1: Manufacturer: syz [ 1501.202702][T12324] usb 2-1: SerialNumber: syz [ 1501.235387][T12324] usb 2-1: config 0 descriptor?? [ 1501.250337][T20879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.281499][T20879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.311870][T20879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.332024][T20879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.343039][T20879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.354716][T20879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.368974][T20879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.379868][T20879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.404898][T20879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.423980][T20879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.444618][T20879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.467292][T20879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.478815][T20879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.498524][T20879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.552558][T20879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.571402][T20879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.602235][T20879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.630898][T20879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.693872][ T23] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1501.951909][ T23] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1501.970815][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.992824][ T23] usb 3-1: Product: syz [ 1502.000699][ T23] usb 3-1: Manufacturer: syz [ 1502.011958][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.027703][ T23] usb 3-1: SerialNumber: syz [ 1502.044359][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.062719][ T23] usb 3-1: config 0 descriptor?? [ 1502.105554][ T8817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.110002][ T23] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 092 [ 1502.134682][ T8817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.270278][T12324] usb 2-1: Firmware version (0.0) predates our first public release. [ 1502.300242][T12324] usb 2-1: Please update to version 0.2 or newer [ 1502.506038][T21043] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000' [ 1502.547712][T21060] kAFS: unable to lookup cell '' [ 1502.572001][T12324] usb 2-1: USB disconnect, device number 87 [ 1503.093108][T11831] usb 4-1: USB disconnect, device number 99 [ 1503.102972][ T23] (null): failure reading functionality [ 1503.139231][ T23] i2c i2c-1: failure reading functionality [ 1503.179569][ T23] i2c i2c-1: connected i2c-tiny-usb device [ 1503.200780][ T23] usb 3-1: USB disconnect, device number 92 [ 1503.365151][T21077] binder: BINDER_SET_CONTEXT_MGR already set [ 1503.371371][T21077] binder: 21076:21077 ioctl 4018620d 200000000100 returned -16 [ 1503.944245][ T5821] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1504.143677][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 1504.169263][ T5821] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1504.207618][ T5821] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1504.251125][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1504.301995][ T5821] usb 3-1: Product: syz [ 1504.333698][ T5821] usb 3-1: Manufacturer: syz [ 1504.377358][ T5821] usb 3-1: SerialNumber: syz [ 1504.408865][ T5821] usb 3-1: config 0 descriptor?? [ 1504.426406][T21091] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1504.439388][ T5821] hub 3-1:0.0: bad descriptor, ignoring hub [ 1504.458344][ T5821] hub: probe of 3-1:0.0 failed with error -5 [ 1504.805002][T21109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4616'. [ 1504.882888][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4616'. [ 1504.990708][T21121] kAFS: unable to lookup cell '' [ 1505.253799][T12324] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1505.267264][T21091] usb 3-1: reset high-speed USB device number 93 using dummy_hcd [ 1505.455005][T12324] usb 4-1: not running at top speed; connect to a high speed hub [ 1505.470698][T12324] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.487510][T12324] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 1505.506715][T12324] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 1505.523617][T12324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.542396][T12324] usb 4-1: Product: syz [ 1505.544066][T21091] usb 3-1: device firmware changed [ 1505.552584][T12324] usb 4-1: Manufacturer: syz [ 1505.562706][T12324] usb 4-1: SerialNumber: syz [ 1505.575394][ T5821] usb 3-1: USB disconnect, device number 93 [ 1505.733577][T16077] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1505.753646][ T5821] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1505.764165][ T23] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1505.831789][T12324] usb 4-1: USB disconnect, device number 100 [ 1505.933739][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 1505.938374][T16077] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1505.947923][ T5821] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1505.948898][T16077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.969393][T16077] usb 2-1: Product: syz [ 1505.976710][T16077] usb 2-1: Manufacturer: syz [ 1505.981799][T16077] usb 2-1: SerialNumber: syz [ 1505.984186][ T5821] usb 3-1: string descriptor 0 read error: -22 [ 1505.986884][ T23] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1505.999348][ T5821] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1506.005041][T16077] usb 2-1: config 0 descriptor?? [ 1506.012451][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1506.025507][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.039991][ T5821] usb 3-1: config 0 descriptor?? [ 1506.046458][T21117] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1506.048673][ T23] usb 1-1: Product: syz [ 1506.060555][ T23] usb 1-1: Manufacturer: syz [ 1506.064124][ T5821] hub 3-1:0.0: bad descriptor, ignoring hub [ 1506.067095][ T23] usb 1-1: SerialNumber: syz [ 1506.079467][ T5821] hub: probe of 3-1:0.0 failed with error -5 [ 1506.086183][ T23] usb 1-1: config 0 descriptor?? [ 1506.102690][ T23] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 087 [ 1506.443852][ T5821] usb 3-1: USB disconnect, device number 94 [ 1506.505802][T21133] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000' [ 1506.757161][T21139] binder: 21138:21139 ioctl 4018620d 0 returned -22 [ 1507.029543][ T23] (null): failure reading functionality [ 1507.045831][ T23] i2c i2c-1: failure reading functionality [ 1507.058787][ T23] i2c i2c-1: connected i2c-tiny-usb device [ 1507.068579][T16077] usb 2-1: Firmware version (0.0) predates our first public release. [ 1507.083893][ T23] usb 1-1: USB disconnect, device number 87 [ 1507.092250][T16077] usb 2-1: Please update to version 0.2 or newer [ 1507.321707][T16077] usb 2-1: USB disconnect, device number 88 [ 1507.504403][ T23] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1507.575018][T21150] kAFS: unable to lookup cell '' [ 1507.705434][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1507.716597][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1507.743503][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1507.752794][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.776224][ T23] usb 1-1: config 0 descriptor?? [ 1507.804829][ T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1507.901009][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1507.916179][T21158] bond_slave_0: entered promiscuous mode [ 1507.921913][T21158] bond_slave_1: entered promiscuous mode [ 1507.928717][T21158] : entered promiscuous mode [ 1507.936370][T21158] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1507.955924][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1507.977223][T21158] : left promiscuous mode [ 1507.982693][T21158] bond_slave_0: left promiscuous mode [ 1507.988336][T21158] bond_slave_1: left promiscuous mode [ 1508.388498][T21169] fuse: Bad value for 'fd' [ 1508.421347][T21167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1509.329819][T21177] kAFS: unable to lookup cell '' [ 1509.713703][ T23] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1509.906298][ T23] usb 2-1: config 0 has no interfaces? [ 1509.919725][ T23] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1509.943612][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.996312][ T23] usb 2-1: Product: syz [ 1510.002903][ T23] usb 2-1: Manufacturer: syz [ 1510.011244][ T23] usb 2-1: SerialNumber: syz [ 1510.019862][ T23] usb 2-1: config 0 descriptor?? [ 1510.068928][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4640'. [ 1510.085338][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4640'. [ 1510.223219][ T23] usb 1-1: USB disconnect, device number 88 [ 1510.281499][ T5821] usb 2-1: USB disconnect, device number 89 [ 1510.787364][T21201] fuse: Invalid rootmode [ 1511.020473][T21204] kAFS: unable to lookup cell '' [ 1512.493671][ T5821] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1512.698186][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1512.719502][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1512.748099][ T5821] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1512.757729][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.796312][ T5821] usb 2-1: config 0 descriptor?? [ 1512.816074][ T5821] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1513.763842][T20880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1513.789016][T20880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1513.807704][T20880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1513.838069][T20880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1513.873579][T20880] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1513.900613][T20880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1515.784950][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'. [ 1515.795193][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4649'. [ 1515.804861][T21225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4651'. [ 1515.853076][ T5760] usb 2-1: USB disconnect, device number 90 [ 1515.987694][ T5848] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1516.034774][ T5848] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1516.043834][T14739] Bluetooth: hci4: command tx timeout [ 1516.044527][T21232] kAFS: unable to lookup cell '' [ 1516.213366][T14437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.363266][T14437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.544166][T14437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.656638][T14437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.973661][ T5760] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1516.991786][T21227] chnl_net:caif_netlink_parms(): no params data found [ 1516.999099][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 1516.999113][ T28] audit: type=1326 audit(1776739044.052:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.2.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1517.049528][ T28] audit: type=1326 audit(1776739044.092:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.2.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1517.119502][ T28] audit: type=1326 audit(1776739044.092:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.2.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1517.147289][ T28] audit: type=1326 audit(1776739044.092:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.2.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1517.171464][ T5760] usb 2-1: device descriptor read/64, error -71 [ 1517.208344][ T28] audit: type=1326 audit(1776739044.092:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.2.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1517.251944][ T28] audit: type=1326 audit(1776739044.092:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.2.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1517.280318][ T28] audit: type=1326 audit(1776739044.092:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.2.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1517.463610][ T5760] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1517.511733][T14437] tipc: Disabling bearer [ 1517.524885][T14437] tipc: Left network mode [ 1517.532047][T21227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.540392][T21227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.553982][T21227] bridge_slave_0: entered allmulticast mode [ 1517.561800][T21227] bridge_slave_0: entered promiscuous mode [ 1517.571659][T21227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.579391][T21227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.587656][T21227] bridge_slave_1: entered allmulticast mode [ 1517.595403][T21227] bridge_slave_1: entered promiscuous mode [ 1517.685600][ T5760] usb 2-1: device descriptor read/64, error -71 [ 1517.748344][T21227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.836693][ T5760] usb usb2-port1: attempt power cycle [ 1517.869084][T21227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.115445][T14739] Bluetooth: hci4: command tx timeout [ 1518.170449][T21227] team0: Port device team_slave_0 added [ 1518.194442][T21266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4661'. [ 1518.267092][T21266] bond_slave_0: entered promiscuous mode [ 1518.272818][T21266] bond_slave_1: entered promiscuous mode [ 1518.294017][T21266] macvtap1: entered promiscuous mode [ 1518.308017][T21266] bond0: entered promiscuous mode [ 1518.309635][ T5760] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1518.323927][T21266] macvtap1: entered allmulticast mode [ 1518.341645][T21266] bond0: entered allmulticast mode [ 1518.359533][T21266] bond_slave_0: entered allmulticast mode [ 1518.371069][T21266] bond_slave_1: entered allmulticast mode [ 1518.379029][T21266] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1518.392510][ T5760] usb 2-1: device descriptor read/8, error -71 [ 1518.496217][T21227] team0: Port device team_slave_1 added [ 1518.502556][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4661'. [ 1518.564774][T21267] bond0: left allmulticast mode [ 1518.573353][T21267] bond_slave_0: left allmulticast mode [ 1518.579840][T21267] bond_slave_1: left allmulticast mode [ 1518.593718][T21267] bond0: left promiscuous mode [ 1518.599304][T21267] bond_slave_0: left promiscuous mode [ 1518.604893][T21267] bond_slave_1: left promiscuous mode [ 1518.703814][ T5760] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1518.737037][T21227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.765579][T21227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.774293][ T5760] usb 2-1: device descriptor read/8, error -71 [ 1518.853570][T21227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.954360][ T5760] usb usb2-port1: unable to enumerate USB device [ 1518.956061][T21227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.969260][T21227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.023551][T21227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.132246][T21227] hsr_slave_0: entered promiscuous mode [ 1519.138860][T21227] hsr_slave_1: entered promiscuous mode [ 1519.147013][T21227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1519.155786][T21227] Cannot create hsr debugfs directory [ 1519.213922][T16077] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1519.415800][T16077] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1519.440862][T16077] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1519.467659][T16077] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1519.490251][T16077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.524745][T16077] usb 1-1: config 0 descriptor?? [ 1519.536281][T16077] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1519.665322][T21280] kAFS: unable to lookup cell '' [ 1520.193650][T14739] Bluetooth: hci4: command tx timeout [ 1522.279779][T14739] Bluetooth: hci4: command tx timeout [ 1522.571117][T21284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4662'. [ 1522.656066][ T5848] usb 1-1: USB disconnect, device number 89 [ 1522.878949][T16077] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1522.934092][T16077] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1523.277412][T14437] hsr_slave_0: left promiscuous mode [ 1523.293944][T14437] hsr_slave_1: left promiscuous mode [ 1523.300149][T14437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1523.319349][T14437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1523.333674][T16077] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1523.357515][T14437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1523.373112][T14437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.391928][T14437] bridge_slave_1: left allmulticast mode [ 1523.397948][T14437] bridge_slave_1: left promiscuous mode [ 1523.404048][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.427868][T14437] bridge_slave_0: left allmulticast mode [ 1523.434157][T14437] bridge_slave_0: left promiscuous mode [ 1523.443390][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.539819][T16077] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1523.568312][T16077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.600791][T16077] usb 2-1: Product: syz [ 1523.629091][T16077] usb 2-1: Manufacturer: syz [ 1523.663737][T16077] usb 2-1: SerialNumber: syz [ 1523.686962][T14437] veth1_macvtap: left promiscuous mode [ 1523.710791][T14437] veth0_macvtap: left promiscuous mode [ 1523.718202][T16077] usb 2-1: config 0 descriptor?? [ 1523.732084][T14437] veth1_vlan: left promiscuous mode [ 1523.754573][T14437] veth0_vlan: left promiscuous mode [ 1524.470548][T14437] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1524.479164][T14437] geneve2 (unregistering): left allmulticast mode [ 1524.751509][T16077] usb 2-1: Firmware version (0.0) predates our first public release. [ 1524.764952][T16077] usb 2-1: Please update to version 0.2 or newer [ 1525.483674][T14437] bond0 (unregistering): Released all slaves [ 1525.610959][T21333] kAFS: unable to lookup cell '' [ 1525.857561][ T5872] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1526.080857][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1526.111336][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1526.139463][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1526.149002][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.162887][ T5872] usb 1-1: config 0 descriptor?? [ 1526.173726][ T5872] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1526.595487][T14437] team0 (unregistering): Port device team_slave_1 removed [ 1526.668221][T14437] team0 (unregistering): Port device team_slave_0 removed [ 1526.742522][T14437]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.754176][T14437] bond_slave_1 (unregistering): left allmulticast mode [ 1526.827901][T14437]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.838134][T14437] bond_slave_0 (unregistering): left allmulticast mode [ 1527.423023][T14437]  (unregistering): Released all slaves [ 1527.624554][T16077] usb 2-1: USB disconnect, device number 95 [ 1527.696074][T21345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4673'. [ 1527.949136][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1527.959055][ T5821] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1528.788209][T11831] usb 1-1: USB disconnect, device number 90 [ 1532.110765][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4680'. [ 1532.173332][T21369] kAFS: unable to lookup cell '' [ 1532.442078][T21373] fuse: Bad value for 'group_id' [ 1532.569864][ T5760] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1532.588221][ T5760] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1532.633512][T16077] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1532.691082][T14437] IPVS: stop unused estimator thread 0... [ 1532.850331][T16077] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1532.893494][T16077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.923480][T16077] usb 2-1: Product: syz [ 1532.932087][T16077] usb 2-1: Manufacturer: syz [ 1532.951400][T16077] usb 2-1: SerialNumber: syz [ 1532.974731][T16077] usb 2-1: config 0 descriptor?? [ 1533.084495][T16077] usb 2-1: Firmware version (0.0) predates our first public release. [ 1533.093132][T16077] usb 2-1: Please update to version 0.2 or newer [ 1533.198794][T21227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1533.236440][T21227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1533.247596][T16077] usb 2-1: USB disconnect, device number 96 [ 1533.296184][T21227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1533.369211][T21227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1533.927133][T21227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.079686][T21227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1534.182271][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.189554][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.258204][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.265366][T14437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.446587][T21227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1534.535319][T21415] kAFS: unable to lookup cell '' [ 1534.593149][T21417] fuse: Bad value for 'group_id' [ 1535.199186][T21227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.232713][ T5760] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1535.291219][ T5760] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1535.357717][T21227] veth0_vlan: entered promiscuous mode [ 1535.402527][T21227] veth1_vlan: entered promiscuous mode [ 1535.444088][T12324] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1535.510006][T21227] veth0_macvtap: entered promiscuous mode [ 1535.531581][T21227] veth1_macvtap: entered promiscuous mode [ 1535.572978][T21227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.586918][T21227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.598533][T21227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.613077][T21227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.625432][T21227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.642590][T21227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.662660][T21227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.679760][T12324] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1535.696566][T21227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.725459][T12324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.730857][T21227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.751318][T12324] usb 2-1: Product: syz [ 1535.767891][T12324] usb 2-1: Manufacturer: syz [ 1535.772613][T12324] usb 2-1: SerialNumber: syz [ 1535.799235][T21227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.799885][T12324] usb 2-1: config 0 descriptor?? [ 1535.838621][T21227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.893665][T21227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.917811][T21227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.939805][T21227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.056224][T21227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.083581][T21227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.120607][T21227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.153507][T21227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.421884][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.454242][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.559565][ T8817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.598423][ T8817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.858527][T12324] usb 2-1: Firmware version (0.0) predates our first public release. [ 1536.896617][T12324] usb 2-1: Please update to version 0.2 or newer [ 1537.078748][T12324] usb 2-1: USB disconnect, device number 97 [ 1537.567979][T21475] kAFS: unable to lookup cell '' [ 1537.785013][T21478] fuse: Bad value for 'group_id' [ 1538.893564][T12324] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1539.283278][T12324] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 1539.317502][T12324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.374857][T12324] usb 2-1: config 0 has no interfaces? [ 1539.392798][T12324] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1539.433542][T12324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.458822][T12324] usb 2-1: config 0 descriptor?? [ 1540.106847][T21509] kAFS: unable to lookup cell '' [ 1540.468579][T21516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4712'. [ 1540.512149][T21516] bond_slave_0: entered promiscuous mode [ 1540.517948][T21516] bond_slave_1: entered promiscuous mode [ 1540.586175][T21516] bond0: entered allmulticast mode [ 1540.594171][T21516] bond_slave_0: entered allmulticast mode [ 1540.608893][T21516] bond_slave_1: entered allmulticast mode [ 1540.622487][T21516] bond0: entered promiscuous mode [ 1540.646392][T21516] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1540.671982][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4712'. [ 1540.687914][T21520] bond0: left allmulticast mode [ 1540.692808][T21520] bond_slave_0: left allmulticast mode [ 1540.707866][T21520] bond_slave_1: left allmulticast mode [ 1540.762244][T21520] bond0: left promiscuous mode [ 1540.774734][T21520] bond_slave_0: left promiscuous mode [ 1540.780241][T21520] bond_slave_1: left promiscuous mode [ 1540.822530][T21519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4714'. [ 1541.203594][ T5872] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1541.445632][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1541.499958][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1541.553542][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1541.563185][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.598360][ T5872] usb 1-1: config 0 descriptor?? [ 1541.614749][ T5872] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1541.721155][ T5872] usb 2-1: USB disconnect, device number 98 [ 1541.850655][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4718'. [ 1542.080286][T21527] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2072421113 (4144842226 ns) > initial count (1961237654 ns). Using initial count to start timer. [ 1542.242218][T21536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1543.180843][T21541] kAFS: unable to lookup cell '' [ 1543.543666][T21549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4724'. [ 1543.713731][ T5872] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1543.903673][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 1543.915723][ T5872] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1543.927031][ T5872] usb 3-1: config 0 has no interface number 0 [ 1543.933487][ T5872] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1543.945604][ T5872] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1543.955332][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.977520][ T5872] usb 3-1: config 0 descriptor?? [ 1543.979855][ T5821] usb 1-1: USB disconnect, device number 91 [ 1543.992485][ T5872] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1544.199718][T11831] usb 3-1: USB disconnect, device number 95 [ 1544.653545][ T5821] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1544.894610][T21564] fuse: Unknown parameter '0x0000000000000003' [ 1544.936429][ T5821] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1544.945791][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.971955][ T5821] usb 1-1: config 0 has no interfaces? [ 1545.006885][ T5821] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1545.025672][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.079450][ T5821] usb 1-1: config 0 descriptor?? [ 1545.443530][T11831] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1545.657421][T11831] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1545.703319][T11831] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1545.738647][T11831] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1545.759339][T11831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.799969][T11831] usb 3-1: config 0 descriptor?? [ 1545.829624][T11831] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1546.356467][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.369262][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.472860][T21578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4729'. [ 1546.540059][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4733'. [ 1547.095967][ T5848] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1547.309413][ T5821] usb 1-1: USB disconnect, device number 92 [ 1547.320077][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1547.343045][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1547.356735][ T5848] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1547.369807][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.382073][ T5848] usb 4-1: config 0 descriptor?? [ 1547.408346][ T5848] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1547.677594][T21589] fuse: Unknown parameter '0x0000000000000003' [ 1548.030194][T21593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4734'. [ 1548.199728][ T28] audit: type=1326 audit(1776739075.252:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21594 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01b59c819 code=0x7ffc0000 [ 1548.241926][ T5848] usb 3-1: USB disconnect, device number 96 [ 1548.250039][ T28] audit: type=1326 audit(1776739075.252:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21594 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01b59c819 code=0x7ffc0000 [ 1548.318367][ T28] audit: type=1326 audit(1776739075.252:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21594 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa01b59c819 code=0x7ffc0000 [ 1548.357506][ T28] audit: type=1326 audit(1776739075.252:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21594 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01b59c819 code=0x7ffc0000 [ 1548.386811][ T28] audit: type=1326 audit(1776739075.252:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21594 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01b59c819 code=0x7ffc0000 [ 1548.473570][ T28] audit: type=1326 audit(1776739075.252:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21594 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa01b59c819 code=0x7ffc0000 [ 1548.510821][ T28] audit: type=1326 audit(1776739075.252:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21594 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01b59c819 code=0x7ffc0000 [ 1549.037480][T21599] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1549.056658][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026199c00: rx timeout, send abort [ 1549.079884][T21599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4741'. [ 1549.097458][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4741'. [ 1549.388752][T21611] program syz.0.4744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1549.511335][T21615] fuse: Unknown parameter '0x0000000000000003' [ 1549.565160][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026199c00: abort rx timeout. Force session deactivation [ 1549.711907][T21622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4747'. [ 1549.841505][ T5777] usb 4-1: USB disconnect, device number 101 [ 1549.892082][ T28] audit: type=1326 audit(1776739076.942:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21624 comm="syz.2.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1549.940972][ T28] audit: type=1326 audit(1776739076.942:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21624 comm="syz.2.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1549.997285][ T28] audit: type=1326 audit(1776739076.972:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21624 comm="syz.2.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43c919c819 code=0x7ffc0000 [ 1550.441480][ T5777] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1550.645896][ T5777] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1550.662926][ T5777] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1550.683735][ T5777] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1550.692960][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.709761][ T5777] usb 4-1: config 0 descriptor?? [ 1550.728226][ T5777] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1550.974021][T21643] fuse: Unknown parameter '0x0000000000000003' [ 1551.043596][ T5760] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1551.243555][ T5760] usb 2-1: Using ep0 maxpacket: 16 [ 1551.267378][ T5760] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 1551.294489][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.318210][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.336235][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.350043][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.363776][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.374726][T21649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1551.375725][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.404375][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.420166][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.424643][ T5777] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1551.431964][ T5760] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1551.452397][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1551.462137][ T5760] usb 2-1: SerialNumber: syz [ 1551.472140][ T5760] usb 2-1: config 0 descriptor?? [ 1551.486517][ T5760] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 1551.626966][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1551.651685][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1551.672445][ T5777] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1551.687708][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1551.701767][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.717699][ T5777] usb 3-1: config 0 descriptor?? [ 1551.736481][ T5777] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1551.936388][T21659] vlan2: entered allmulticast mode [ 1551.959374][T21659] bond0: entered allmulticast mode [ 1552.120519][ T5123] bcm5974 2-1:0.0: could not read from device [ 1552.153835][ T5123] bcm5974 2-1:0.0: could not read from device [ 1552.160324][ T5760] usb 2-1: USB disconnect, device number 99 [ 1552.182725][ T5123] bcm5974 2-1:0.0: could not read from device [ 1552.315813][T21661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4757'. [ 1552.729215][T21665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4761'. [ 1552.791049][T21667] fuse: Unknown parameter 'grou00000000000000000000' [ 1552.943553][ T5760] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1553.028883][ T5777] usb 4-1: USB disconnect, device number 102 [ 1553.147858][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.159550][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.170542][ T5760] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1553.181676][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.199135][ T5760] usb 1-1: config 0 descriptor?? [ 1553.637000][ T5760] usbhid 1-1:0.0: can't add hid device: -71 [ 1553.690912][ T5760] usbhid: probe of 1-1:0.0 failed with error -71 [ 1553.740250][ T5760] usb 1-1: USB disconnect, device number 93 [ 1553.819808][T21679] fuse: Unknown parameter '0x0000000000000003' [ 1554.214057][ T5777] usb 3-1: USB disconnect, device number 97 [ 1554.623628][ T5872] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1554.823975][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 1554.843580][ T5872] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1554.864554][T21693] fuse: Unknown parameter 'grou00000000000000000000' [ 1554.866750][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.899225][ T5872] usb 1-1: config 0 has no interface number 0 [ 1554.910864][ T5872] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1554.913862][T21697] binder: BINDER_SET_CONTEXT_MGR already set [ 1554.927112][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.938071][T21697] binder: 21696:21697 ioctl 4018620d 200000000100 returned -16 [ 1554.946023][ T5872] usb 1-1: Product: syz [ 1554.950337][ T5872] usb 1-1: Manufacturer: syz [ 1554.956054][ T5872] usb 1-1: SerialNumber: syz [ 1554.965656][ T5872] usb 1-1: config 0 descriptor?? [ 1554.978741][T21697] binder: BINDER_SET_CONTEXT_MGR already set [ 1554.978805][T21699] fuse: Unknown parameter 'fd0x0000000000000003' [ 1554.987572][T21697] binder: 21696:21697 ioctl 4018620d 2000000002c0 returned -16 [ 1555.115569][ T5848] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1555.308326][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1555.320136][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1555.333785][ T5848] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1555.342861][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.354752][ T5848] usb 2-1: config 0 descriptor?? [ 1555.369976][ T5848] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1555.503745][ T5777] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1555.686108][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.697513][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.707460][ T5777] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1555.716744][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.727480][ T5777] usb 4-1: config 0 descriptor?? [ 1555.976083][T21710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1556.149547][ T5777] usbhid 4-1:0.0: can't add hid device: -71 [ 1556.165676][ T5777] usbhid: probe of 4-1:0.0 failed with error -71 [ 1556.190614][ T5777] usb 4-1: USB disconnect, device number 103 [ 1556.245334][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4778'. [ 1556.278631][T21713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1557.112407][T21726] fuse: Unknown parameter 'grou00000000000000000000' [ 1557.402362][T21728] fuse: Unknown parameter 'fd0x0000000000000003' [ 1557.418862][ T5777] usb 1-1: USB disconnect, device number 94 [ 1557.884401][ T5777] usb 2-1: USB disconnect, device number 100 [ 1557.963529][ T5872] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1558.063513][T21742] fuse: Bad value for 'fd' [ 1558.183846][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 1558.194519][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.218797][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1558.250319][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1558.284336][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1558.323525][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1558.350118][ T5872] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1558.362921][ T5872] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1558.392946][ T5872] usb 4-1: Manufacturer: syz [ 1558.413647][ T5872] usb 4-1: config 0 descriptor?? [ 1558.662370][T21747] fuse: Unknown parameter 'group_i00000000000000000000' [ 1558.803693][ T5872] rc_core: IR keymap rc-hauppauge not found [ 1558.810042][ T5872] Registered IR keymap rc-empty [ 1558.824966][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1558.872790][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1558.939097][ T5872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1558.981801][ T5872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 1559.034730][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.073268][T20880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1559.093680][T20880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1559.107618][T20880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1559.114096][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.125735][T20880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1559.146365][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.154844][T20880] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1559.162583][T20880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1559.183897][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.215575][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.242309][ T4357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.285536][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.292770][ T4357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.321550][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.410219][T21765] fuse: Unknown parameter 'fd0x0000000000000003' [ 1559.422118][T21761] syzkaller0: entered promiscuous mode [ 1559.428067][T21761] syzkaller0: entered allmulticast mode [ 1559.443638][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.473873][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.533273][ T5872] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1559.592487][ T5872] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1559.617218][ T5872] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1559.629011][ T4357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.660367][ T4357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.753565][ T5872] usb 4-1: USB disconnect, device number 104 [ 1559.816947][ T4357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.857231][ T4357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.987187][ T5848] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1560.003255][ T4357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.045024][ T4357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.235287][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1560.246043][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1560.259743][ T5848] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1560.269894][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.281927][ T5848] usb 2-1: config 0 descriptor?? [ 1560.291758][ T5848] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1560.317987][T21778] fuse: Unknown parameter 'group_i00000000000000000000' [ 1560.447523][T21753] chnl_net:caif_netlink_parms(): no params data found [ 1560.509433][T21780] fuse: Bad value for 'fd' [ 1560.925659][T21753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.936808][T21753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.945229][T21753] bridge_slave_0: entered allmulticast mode [ 1560.955799][T21753] bridge_slave_0: entered promiscuous mode [ 1560.974397][T21793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1560.991076][ T4357] tipc: Disabling bearer [ 1560.998392][ T4357] tipc: Left network mode [ 1560.998552][T21753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.035359][T21753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.050713][T21753] bridge_slave_1: entered allmulticast mode [ 1561.075954][T21753] bridge_slave_1: entered promiscuous mode [ 1561.248014][T20880] Bluetooth: hci0: command tx timeout [ 1561.273725][T21753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.332158][T21753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.618598][T21753] team0: Port device team_slave_0 added [ 1561.636659][T21806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4802'. [ 1561.797886][T21753] team0: Port device team_slave_1 added [ 1561.958128][T21753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.966239][T21753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.995597][T21753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.046696][T21753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.067192][T21753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.123501][T21753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.328002][T21753] hsr_slave_0: entered promiscuous mode [ 1562.343083][T21753] hsr_slave_1: entered promiscuous mode [ 1562.769559][ T5848] usb 2-1: USB disconnect, device number 101 [ 1562.806115][ T4357] hsr_slave_0: left promiscuous mode [ 1562.825535][ T4357] hsr_slave_1: left promiscuous mode [ 1562.857633][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.879713][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.904413][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.912439][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.934423][ T4357] team0: left allmulticast mode [ 1562.939466][ T4357] team_slave_0: left allmulticast mode [ 1562.952815][ T4357] team_slave_1: left allmulticast mode [ 1562.959994][ T4357] team0: left promiscuous mode [ 1562.972514][ T4357] team_slave_0: left promiscuous mode [ 1562.978934][ T4357] team_slave_1: left promiscuous mode [ 1562.992299][ T4357] bridge0: port 3(team0) entered disabled state [ 1563.042794][ T4357] bridge_slave_1: left allmulticast mode [ 1563.074500][ T4357] bridge_slave_1: left promiscuous mode [ 1563.080471][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.107125][ T4357] bridge_slave_0: left allmulticast mode [ 1563.113128][ T4357] bridge_slave_0: left promiscuous mode [ 1563.133689][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.263097][ T4357] veth1_macvtap: left promiscuous mode [ 1563.272560][ T4357] veth0_macvtap: left promiscuous mode [ 1563.282767][ T4357] veth1_vlan: left promiscuous mode [ 1563.289726][ T4357] veth0_vlan: left promiscuous mode [ 1563.323919][T20880] Bluetooth: hci0: command tx timeout [ 1563.604474][T21835] fuse: Unknown parameter 'group_i00000000000000000000' [ 1564.094350][ T4357] bond2 (unregistering): Released all slaves [ 1564.671274][ T4357] bond1 (unregistering): Released all slaves [ 1564.773994][ T4357] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1565.170020][ T4357] bond0 (unregistering): Released all slaves [ 1565.307081][ T4357] team0 (unregistering): Port device bridge2 removed [ 1565.403575][T20880] Bluetooth: hci0: command tx timeout [ 1565.510596][T21842] fuse: Unknown parameter '0x0000000000000003' [ 1566.807669][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 1566.842279][T12324] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1566.907624][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 1566.985700][ T4357]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.036044][T12324] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1567.052979][T12324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1567.066725][T12324] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1567.076582][ T4357]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.093542][T12324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.110566][T12324] usb 4-1: config 0 descriptor?? [ 1567.128409][T12324] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1567.495729][T20880] Bluetooth: hci0: command tx timeout [ 1567.676394][ T4357]  (unregistering): Released all slaves [ 1567.793933][T21822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4804'. [ 1567.803775][T21822] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1567.913154][T21856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4811'. [ 1568.182395][T21865] fuse: Unknown parameter 'group_id00000000000000000000' [ 1568.668269][T21877] fuse: Unknown parameter '0x0000000000000003' [ 1568.960111][T21753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1568.972337][T21753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1568.987446][T21753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1569.009753][T21753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1569.158443][T21753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.194886][T21753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.212679][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.220112][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.247142][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.254756][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1569.612039][T16077] usb 4-1: USB disconnect, device number 105 [ 1569.774214][T21893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4819'. [ 1570.181480][T21753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.328230][T21753] veth0_vlan: entered promiscuous mode [ 1570.350542][T21908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4821'. [ 1570.404962][T21908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1570.427182][T21753] veth1_vlan: entered promiscuous mode [ 1570.539290][T21753] veth0_macvtap: entered promiscuous mode [ 1570.626536][T21753] veth1_macvtap: entered promiscuous mode [ 1570.749158][T21753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1570.781240][T21753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.802778][T21753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1570.817578][T21753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.829692][T21753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1570.872730][T21753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.928085][T21753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.949300][T21921] fuse: Unknown parameter 'group_id00000000000000000000' [ 1570.983160][T21753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.997949][T21753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.022940][T21753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1571.064936][T21753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.101386][T21753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1571.123682][T21753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.147652][T21753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1571.184516][T21753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.205819][T21753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.224987][T21753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.245270][T21753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.272368][T21927] fuse: Unknown parameter '0x0000000000000003' [ 1571.508925][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.535353][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.628906][ T8817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.653125][ T8817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.163590][ T8] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1572.355943][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1572.383497][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1572.458152][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1572.572140][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.642579][ T8] usb 1-1: config 0 descriptor?? [ 1572.704869][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1573.374581][T21972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4826'. [ 1573.438716][T21940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4827'. [ 1573.683606][T11831] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1573.783632][ T5872] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1573.874145][T11831] usb 4-1: Using ep0 maxpacket: 8 [ 1573.889560][T11831] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1573.913680][T11831] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1573.940973][T11831] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1573.983684][T11831] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1573.996047][ T5872] usb 3-1: not running at top speed; connect to a high speed hub [ 1574.012961][T11831] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1574.033943][T11831] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1574.051874][ T5872] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.065312][T11831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.074380][ T5872] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 1574.091613][ T5872] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 1574.102067][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.110779][ T5872] usb 3-1: Product: syz [ 1574.115458][ T5872] usb 3-1: Manufacturer: syz [ 1574.120151][ T5872] usb 3-1: SerialNumber: syz [ 1574.756026][ T5872] usb 3-1: USB disconnect, device number 98 [ 1574.920321][T11831] usb 1-1: USB disconnect, device number 95 [ 1575.636321][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1575.687261][T22020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1575.829968][T22025] fuse: Unknown parameter '0x0000000000000003' [ 1576.468109][ T5848] usb 4-1: USB disconnect, device number 106 [ 1577.153642][ T5848] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1577.408801][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1577.431353][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1577.448607][ T5848] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1577.466928][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.486076][ T5848] usb 3-1: config 0 descriptor?? [ 1577.505620][ T5848] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1577.633658][ T5821] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1577.823608][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 1577.837382][ T5821] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1577.846007][ T5821] usb 2-1: config 0 has no interface number 0 [ 1577.852284][ T5821] usb 2-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1577.873132][ T5821] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1577.883114][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.891636][ T5821] usb 2-1: Product: syz [ 1577.896013][ T5821] usb 2-1: Manufacturer: syz [ 1577.900790][ T5821] usb 2-1: SerialNumber: syz [ 1577.911222][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4844'. [ 1577.922033][ T5821] usb 2-1: config 0 descriptor?? [ 1577.940653][T22049] bond_slave_0: entered promiscuous mode [ 1577.946832][T22049] bond_slave_1: entered promiscuous mode [ 1577.952869][T22049] macvtap1: entered promiscuous mode [ 1577.959062][T22049] bond0: entered promiscuous mode [ 1577.966951][T22049] macvtap1: entered allmulticast mode [ 1577.972368][T22049] bond0: entered allmulticast mode [ 1577.977901][T22049] bond_slave_0: entered allmulticast mode [ 1577.983845][T22049] bond_slave_1: entered allmulticast mode [ 1577.991672][T22049] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1578.001250][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4844'. [ 1578.108296][T22054] fuse: Bad value for 'fd' [ 1578.124590][T22056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4841'. [ 1578.473562][ T5848] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1578.647634][T22063] fuse: Unknown parameter '0x0000000000000003' [ 1578.654389][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 1578.661776][ T5848] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1578.670763][ T5848] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1578.681720][ T5848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1578.691934][ T5848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1578.702247][ T5848] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1578.719760][ T5848] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1578.728911][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.873180][ T5821] usb 3-1: USB disconnect, device number 99 [ 1579.877241][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4851'. [ 1579.939034][T22072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1580.397228][ T5821] usb 2-1: USB disconnect, device number 102 [ 1581.165434][T22092] fuse: Bad value for 'fd' [ 1581.269711][ T5821] usb 4-1: USB disconnect, device number 107 [ 1581.744655][T22097] syzkaller0: entered promiscuous mode [ 1581.764350][T22097] syzkaller0: entered allmulticast mode [ 1581.813335][T22097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1581.822593][ T8] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1582.076970][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1582.094411][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1582.114605][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1582.123958][ T5848] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1582.143677][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.154013][ T8] usb 3-1: config 0 descriptor?? [ 1582.162884][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1582.313520][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 1582.335873][ T5848] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1582.344360][ T5848] usb 1-1: config 0 has no interface number 0 [ 1582.350780][ T5848] usb 1-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1582.386149][ T5848] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1582.402240][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.410615][ T5848] usb 1-1: Product: syz [ 1582.419083][ T5848] usb 1-1: Manufacturer: syz [ 1582.425016][ T5848] usb 1-1: SerialNumber: syz [ 1582.432594][ T5848] usb 1-1: config 0 descriptor?? [ 1582.796882][T22118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4860'. [ 1583.103739][T22121] fuse: Bad value for 'fd' [ 1583.444077][ T5760] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1583.560307][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1583.560326][ T28] audit: type=1326 audit(1776739110.612:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.3.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2635f9c819 code=0x7ffc0000 [ 1583.613546][ T28] audit: type=1326 audit(1776739110.612:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.3.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2635f9c819 code=0x7ffc0000 [ 1583.642551][ T28] audit: type=1326 audit(1776739110.622:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.3.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2635f9c819 code=0x7ffc0000 [ 1583.668187][ T28] audit: type=1326 audit(1776739110.622:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.3.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2635f9c819 code=0x7ffc0000 [ 1583.673651][ T5760] usb 2-1: Using ep0 maxpacket: 8 [ 1583.697646][ T28] audit: type=1326 audit(1776739110.622:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.3.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2635f9c819 code=0x7ffc0000 [ 1583.727840][ T28] audit: type=1326 audit(1776739110.622:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.3.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2635f9c819 code=0x7ffc0000 [ 1583.757177][ T5760] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1583.766066][ T5760] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1583.781604][ T5760] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1583.795086][ T5760] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1583.812677][ T5760] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1583.831537][ T5760] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1583.843142][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.859348][ T28] audit: type=1326 audit(1776739110.912:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.3.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2635f9c819 code=0x7ffc0000 [ 1583.886137][ T28] audit: type=1326 audit(1776739110.912:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.3.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2635f9c819 code=0x7ffc0000 [ 1584.237238][ T5848] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1584.433576][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 1584.440816][ T5848] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1584.449020][ T5848] usb 4-1: config 0 has no interface number 0 [ 1584.457289][ T5848] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1584.468541][ T5848] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1584.477998][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.489138][ T5848] usb 4-1: config 0 descriptor?? [ 1584.507777][ T5848] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1584.508513][ T5760] usb 3-1: USB disconnect, device number 100 [ 1584.711465][T11831] usb 4-1: USB disconnect, device number 108 [ 1584.760998][ T5760] usb 1-1: USB disconnect, device number 96 [ 1586.059926][ T28] audit: type=1326 audit(1776739113.112:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22163 comm="syz.2.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5aa19c819 code=0x7ffc0000 [ 1586.123197][ T28] audit: type=1326 audit(1776739113.112:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22163 comm="syz.2.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5aa19c819 code=0x7ffc0000 [ 1586.251120][ T5760] usb 2-1: USB disconnect, device number 103 [ 1586.514908][ T5848] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1586.603669][ T8] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1586.715524][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1586.733473][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1586.753543][ T5848] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1586.765075][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.796501][ T5848] usb 3-1: config 0 descriptor?? [ 1586.803488][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1586.812519][ T5848] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1586.821439][ T8] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1586.832039][ T8] usb 1-1: config 0 has no interface number 0 [ 1586.840158][ T8] usb 1-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1586.857361][ T8] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1586.863987][ T5760] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1586.866783][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.883606][ T8] usb 1-1: Product: syz [ 1586.887837][ T8] usb 1-1: Manufacturer: syz [ 1586.892473][ T8] usb 1-1: SerialNumber: syz [ 1586.900740][ T8] usb 1-1: config 0 descriptor?? [ 1587.053578][ T5760] usb 2-1: Using ep0 maxpacket: 8 [ 1587.066728][ T5760] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1587.075222][ T5760] usb 2-1: config 0 has no interface number 0 [ 1587.081658][ T5760] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1587.092108][ T5760] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1587.101357][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.112481][ T5760] usb 2-1: config 0 descriptor?? [ 1587.121143][ T5760] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1587.327162][T11831] usb 2-1: USB disconnect, device number 104 [ 1587.428422][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4880'. [ 1588.168078][T22186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1589.314531][ T8] usb 3-1: USB disconnect, device number 101 [ 1589.377349][ T5821] usb 1-1: USB disconnect, device number 97 [ 1589.541450][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1589.541468][ T28] audit: type=1326 audit(1776739116.592:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.1.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4e19c819 code=0x7ffc0000 [ 1589.587002][ T28] audit: type=1326 audit(1776739116.622:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.1.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4e19c819 code=0x7ffc0000 [ 1589.616542][ T28] audit: type=1326 audit(1776739116.632:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.1.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda4e19c819 code=0x7ffc0000 [ 1589.649265][ T28] audit: type=1326 audit(1776739116.632:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.1.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4e19c819 code=0x7ffc0000 [ 1589.705648][ T28] audit: type=1326 audit(1776739116.632:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.1.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fda4e19c819 code=0x7ffc0000 [ 1589.761066][ T28] audit: type=1326 audit(1776739116.632:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.1.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4e19c819 code=0x7ffc0000 [ 1589.803600][ T28] audit: type=1326 audit(1776739116.632:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.1.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4e19c819 code=0x7ffc0000 [ 1589.934290][ T5821] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1590.123592][ T5821] usb 1-1: Using ep0 maxpacket: 8 [ 1590.148054][ T5821] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1590.206294][ T5821] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1590.295600][ T5821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1590.314541][ T5821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1590.346206][ T5821] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1590.378063][ T5821] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1590.411177][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.433875][ T5777] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1590.633752][ T5777] usb 2-1: Using ep0 maxpacket: 8 [ 1590.654362][ T5777] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1590.682007][ T5777] usb 2-1: config 0 has no interface number 0 [ 1590.688556][ T5777] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1590.708602][ T5777] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1590.721948][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.748586][ T5777] usb 2-1: config 0 descriptor?? [ 1590.758931][ T5777] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1590.961348][T11831] usb 2-1: USB disconnect, device number 105 [ 1591.041357][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4895'. [ 1591.070419][T22218] tipc: Failed to remove unknown binding: 66,0,0/0:2395365134/2395365136 [ 1591.079878][T22218] tipc: Failed to remove unknown binding: 66,0,0/0:2395365134/2395365135 [ 1591.090240][T22218] tipc: Failed to remove unknown binding: 66,0,0/0:2395365134/2395365136 [ 1591.099745][T22218] tipc: Failed to remove unknown binding: 66,0,0/0:2395365134/2395365135 [ 1591.116389][T22218] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4895'. [ 1591.127102][T22218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1591.448000][T22230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4900'. [ 1591.573129][T22234] syzkaller0: entered promiscuous mode [ 1591.581917][T22234] syzkaller0: entered allmulticast mode [ 1591.711309][T22239] tun0: tun_chr_ioctl cmd 1074025675 [ 1591.716938][T22239] tun0: persist enabled [ 1591.722462][T22239] tun0: tun_chr_ioctl cmd 1074025675 [ 1591.728211][T22239] tun0: persist disabled [ 1591.760314][T22239] netlink: 'syz.1.4904': attribute type 1 has an invalid length. [ 1591.790731][T22239] netlink: 'syz.1.4904': attribute type 2 has an invalid length. [ 1591.822385][T22242] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000' [ 1592.130442][T22256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1592.222974][T22262] syzkaller0: entered promiscuous mode [ 1592.228916][T22262] syzkaller0: entered allmulticast mode [ 1592.483870][ T5821] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1592.543203][ T5777] usb 1-1: USB disconnect, device number 98 [ 1592.633608][T11831] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1592.663510][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 1592.672142][ T5821] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1592.681423][ T5821] usb 4-1: config 0 has no interface number 0 [ 1592.689740][ T5821] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1592.702749][ T5821] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1592.713002][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.724841][ T5821] usb 4-1: config 0 descriptor?? [ 1592.735936][ T5821] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1592.847830][T22264] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.854733][T22264] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1592.863860][T22264] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.870474][T22264] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1592.884582][T22264] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.891215][T22264] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1592.895691][T22272] fuse: Bad value for 'group_id' [ 1592.907907][T22264] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.914439][T22264] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1592.921809][T22264] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.959797][ T5760] usb 4-1: USB disconnect, device number 109 [ 1593.081662][T22276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4918'. [ 1593.153129][T11831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1593.169564][T11831] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1593.181107][T11831] usb 2-1: can't read configurations, error -71 [ 1593.589706][T22283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1593.973519][ T5760] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1594.163756][ T5760] usb 4-1: Using ep0 maxpacket: 8 [ 1594.175561][ T5760] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1594.190397][ T5760] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1594.207468][ T5872] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1594.220220][ T5760] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1594.232614][ T5760] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1594.242815][ T5760] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1594.256038][ T5760] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1594.265260][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.403504][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 1594.411725][ T5872] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1594.423045][ T5872] usb 3-1: config 0 has no interface number 0 [ 1594.430718][ T5872] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1594.441424][ T5872] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1594.453513][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.489718][ T5872] usb 3-1: config 0 descriptor?? [ 1594.508129][ T5872] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1594.721720][ T5777] usb 3-1: USB disconnect, device number 102 [ 1594.973576][ T5821] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1595.185888][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1595.202502][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1595.216196][ T5821] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1595.226697][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.239860][ T5821] usb 2-1: config 0 descriptor?? [ 1595.270385][ T5821] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1595.526234][T22322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4930'. [ 1595.539509][ T23] usb 2-1: USB disconnect, device number 108 [ 1595.603626][ T5872] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1595.783642][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 1595.797197][ T5872] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1595.805854][ T5872] usb 3-1: config 0 has no interface number 0 [ 1595.812138][ T5872] usb 3-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1595.829824][ T5872] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1595.840058][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.851534][ T5872] usb 3-1: Product: syz [ 1595.855825][ T5872] usb 3-1: Manufacturer: syz [ 1595.860768][ T5872] usb 3-1: SerialNumber: syz [ 1595.870748][ T5872] usb 3-1: config 0 descriptor?? [ 1596.716759][ T8] usb 4-1: USB disconnect, device number 110 [ 1597.244798][ T8] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1597.466750][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1597.480112][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1597.493838][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1597.502974][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.515480][ T8] usb 1-1: config 0 descriptor?? [ 1597.534172][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1597.786376][T22370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4943'. [ 1597.799168][ T8] usb 1-1: USB disconnect, device number 99 [ 1597.953790][ T23] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1598.154851][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1598.165030][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1598.175130][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1598.186484][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1598.200663][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1598.211265][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1598.233787][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1598.242915][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.295189][T22376] syzkaller0: entered promiscuous mode [ 1598.300830][T22376] syzkaller0: entered allmulticast mode [ 1598.397703][ T5821] usb 3-1: USB disconnect, device number 103 [ 1598.896095][T22392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4959'. [ 1599.253675][ T5821] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1599.264619][ T5777] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1599.453598][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 1599.461811][ T5821] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1599.470316][ T5777] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1599.482126][ T5821] usb 3-1: config 0 has no interface number 0 [ 1599.488483][ T5777] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1599.502260][ T5821] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1599.512574][ T5777] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1599.522605][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.532935][ T5821] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1599.542349][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.551638][ T5777] usb 2-1: config 0 descriptor?? [ 1599.557286][ T5821] usb 3-1: Product: syz [ 1599.561594][ T5821] usb 3-1: Manufacturer: syz [ 1599.566417][ T5821] usb 3-1: SerialNumber: syz [ 1599.574058][ T5777] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1599.594398][ T5821] usb 3-1: config 0 descriptor?? [ 1599.604988][ T5821] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1599.615062][ T5821] em28xx 3-1:0.132: Video interface 132 found: [ 1599.769018][T22405] syzkaller0: entered promiscuous mode [ 1599.778915][T22405] syzkaller0: entered allmulticast mode [ 1599.854436][T22406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4961'. [ 1599.872060][ T5777] usb 2-1: USB disconnect, device number 109 [ 1600.013176][ T5821] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1600.222562][ T5821] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1600.243446][ T5821] em28xx 3-1:0.132: board has no eeprom [ 1600.313778][ T5821] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1600.328195][ T5821] em28xx 3-1:0.132: analog set to bulk mode. [ 1600.337458][ T5777] em28xx 3-1:0.132: Registering V4L2 extension [ 1600.371021][ T5821] usb 3-1: USB disconnect, device number 104 [ 1600.433006][ T5821] em28xx 3-1:0.132: Disconnecting em28xx [ 1600.638494][ T5777] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1600.651574][ T5777] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1600.660936][ T5777] em28xx 3-1:0.132: No AC97 audio processor [ 1600.677598][ T5777] usb 3-1: Decoder not found [ 1600.682365][ T5777] em28xx 3-1:0.132: failed to create media graph [ 1600.692914][ T5777] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1600.712203][ T5872] usb 4-1: USB disconnect, device number 111 [ 1600.713174][ T5777] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1600.732959][ T5821] em28xx 3-1:0.132: Closing input extension [ 1600.777140][ T5821] em28xx 3-1:0.132: Freeing device [ 1601.155540][T22427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4970'. [ 1601.271316][T22430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4971'. [ 1601.322135][T22432] syzkaller0: entered promiscuous mode [ 1601.334873][T22432] syzkaller0: entered allmulticast mode [ 1601.437967][T22435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4974'. [ 1601.683748][ T5872] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1601.691577][ T5760] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1601.813620][ T23] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1601.883563][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 1601.888865][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 1601.898055][ T5760] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1601.906495][ T5872] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1601.914945][ T5760] usb 2-1: config 0 has no interface number 0 [ 1601.921120][ T5760] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1601.931269][ T5872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1601.941540][ T5872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1601.951886][ T5872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1601.966540][ T5872] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1601.980945][ T5872] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1601.990789][ T5760] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1602.000786][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1602.006682][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.015568][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.025343][ T5760] usb 2-1: Product: syz [ 1602.034823][ T23] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1602.046950][ T5760] usb 2-1: Manufacturer: syz [ 1602.051691][ T5760] usb 2-1: SerialNumber: syz [ 1602.058603][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.074898][ T5760] usb 2-1: config 0 descriptor?? [ 1602.083487][ T23] usb 4-1: Product: syz [ 1602.087921][ T23] usb 4-1: Manufacturer: syz [ 1602.092834][ T23] usb 4-1: SerialNumber: syz [ 1602.101199][ T5760] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1602.112189][ T5760] em28xx 2-1:0.132: Video interface 132 found: [ 1602.120636][ T23] usb 4-1: config 0 descriptor?? [ 1602.132997][ T23] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1602.141730][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 1602.149880][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1602.160326][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 1602.166512][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1602.181010][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1602.192352][ T23] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1602.200793][ T23] usb 4-1: media controller created [ 1602.222260][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1602.242670][ T23] usb 4-1: selecting invalid altsetting 3 [ 1602.248951][ T23] ttusb2: set interface to alts=3 failed [ 1602.313289][ T23] DVB: Unable to find symbol tda10086_attach() [ 1602.320186][ T23] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1602.329671][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 1602.335748][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1602.346900][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 1602.352883][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1602.355695][T22444] dvb-usb: bulk message failed: -22 (8/0) [ 1602.363679][ T23] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1602.378597][T22444] ttusb2: there might have been an error during control message transfer. (rlen = 4, was 0) [ 1602.392456][T22444] ttusb2: i2c transfer failed. [ 1602.456032][ T23] usb 4-1: USB disconnect, device number 112 [ 1602.500961][ T23] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1602.511535][ T5760] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1602.721036][ T5760] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1602.731175][ T5760] em28xx 2-1:0.132: board has no eeprom [ 1602.816701][ T5760] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1602.825195][ T5760] em28xx 2-1:0.132: analog set to bulk mode. [ 1602.831039][T22450] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 1602.831453][ T23] em28xx 2-1:0.132: Registering V4L2 extension [ 1602.839804][ T5777] usb 1-1: USB disconnect, device number 100 [ 1602.862611][ T5760] usb 2-1: USB disconnect, device number 110 [ 1602.872073][ T5760] em28xx 2-1:0.132: Disconnecting em28xx [ 1603.072137][ T23] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1603.093505][ T23] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1603.113592][ T23] em28xx 2-1:0.132: No AC97 audio processor [ 1603.133789][ T23] usb 2-1: Decoder not found [ 1603.138487][ T23] em28xx 2-1:0.132: failed to create media graph [ 1603.153810][ T23] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1603.162602][ T23] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1603.183524][ T5760] em28xx 2-1:0.132: Closing input extension [ 1603.198101][ T5760] em28xx 2-1:0.132: Freeing device [ 1603.439838][T22465] syzkaller0: entered promiscuous mode [ 1603.506182][T22465] syzkaller0: entered allmulticast mode [ 1603.662689][T22471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4984'. [ 1603.905639][T22475] syzkaller0: entered promiscuous mode [ 1603.947487][T22475] syzkaller0: entered allmulticast mode [ 1604.058758][T22481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4987'. [ 1604.403635][ T5821] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1604.583507][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 1604.596338][ T5821] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1604.623519][ T5821] usb 3-1: config 0 has no interface number 0 [ 1604.629833][ T5821] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1604.668876][ T5760] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1604.697978][ T5821] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1604.714186][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.746586][ T5821] usb 3-1: Product: syz [ 1604.768924][ T5821] usb 3-1: Manufacturer: syz [ 1604.798035][ T5821] usb 3-1: SerialNumber: syz [ 1604.806689][ T5821] usb 3-1: config 0 descriptor?? [ 1604.835957][ T5821] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1604.846496][ T5821] em28xx 3-1:0.132: Video interface 132 found: [ 1604.863562][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 1604.877233][ T5760] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1604.886131][ T5760] usb 2-1: config 0 has no interface number 0 [ 1604.946166][ T5760] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1605.007711][ T8] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1605.010942][ T5760] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1605.029502][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.037966][ T5760] usb 2-1: Product: syz [ 1605.043052][ T5760] usb 2-1: Manufacturer: syz [ 1605.053060][ T5760] usb 2-1: SerialNumber: syz [ 1605.071214][ T5760] usb 2-1: config 0 descriptor?? [ 1605.089373][ T5760] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1605.100740][ T5760] em28xx 2-1:0.132: Video interface 132 found: [ 1605.109416][T22494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4993'. [ 1605.213540][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1605.228332][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1605.238343][ T5821] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1605.245545][T22496] syzkaller0: entered promiscuous mode [ 1605.251127][T22496] syzkaller0: entered allmulticast mode [ 1605.257806][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1605.268248][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1605.280390][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1605.305177][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1605.318885][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1605.329626][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.469532][ T5821] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1605.493623][ T5821] em28xx 3-1:0.132: board has no eeprom [ 1605.512669][ T5760] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1605.567860][ T5821] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1605.585662][ T5821] em28xx 3-1:0.132: analog set to bulk mode. [ 1605.601507][ T8] em28xx 3-1:0.132: Registering V4L2 extension [ 1605.620219][ T5821] usb 3-1: USB disconnect, device number 105 [ 1605.645877][ T5821] em28xx 3-1:0.132: Disconnecting em28xx [ 1605.732228][ T5760] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1605.747612][ T5760] em28xx 2-1:0.132: board has no eeprom [ 1605.833633][ T5760] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1605.852003][ T5760] em28xx 2-1:0.132: analog set to bulk mode. [ 1605.882797][ T5760] usb 2-1: USB disconnect, device number 111 [ 1605.904731][ T5760] em28xx 2-1:0.132: Disconnecting em28xx [ 1605.913761][ T8] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1605.921053][ T8] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1605.951469][ T8] em28xx 3-1:0.132: No AC97 audio processor [ 1605.972264][ T8] usb 3-1: Decoder not found [ 1605.977354][ T8] em28xx 3-1:0.132: failed to create media graph [ 1605.987541][ T8] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1606.004724][ T8] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1606.014307][ T23] em28xx 2-1:0.132: Registering V4L2 extension [ 1606.138635][T22508] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 1606.153988][T16077] usb 1-1: USB disconnect, device number 101 [ 1606.182868][T22509] syzkaller0: entered promiscuous mode [ 1606.214289][T22509] syzkaller0: entered allmulticast mode [ 1606.331820][ T23] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1606.349379][ T23] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1606.363574][ T23] em28xx 2-1:0.132: No AC97 audio processor [ 1606.382202][ T23] usb 2-1: Decoder not found [ 1606.389671][ T23] em28xx 2-1:0.132: failed to create media graph [ 1606.403578][ T23] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1606.422226][ T23] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1606.433210][ T5760] em28xx 2-1:0.132: Closing input extension [ 1606.440095][ T5821] em28xx 3-1:0.132: Closing input extension [ 1606.444656][ T5760] em28xx 2-1:0.132: Freeing device [ 1606.468441][ T5821] em28xx 3-1:0.132: Freeing device [ 1606.522709][T22518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5000'. [ 1606.618788][T22522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5002'. [ 1607.033532][ T23] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1607.233823][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1607.245909][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1607.258695][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1607.272061][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1607.287254][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1607.301614][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1607.315753][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.403515][ T5821] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1607.565334][ T23] usb 1-1: GET_CAPABILITIES returned 0 [ 1607.582982][ T23] usbtmc 1-1:16.0: can't read capabilities [ 1607.603495][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 1607.611588][ T5821] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1607.620078][ T5821] usb 3-1: config 0 has no interface number 0 [ 1607.626339][ T5821] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1607.639553][ T5821] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1607.648884][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.657170][ T5821] usb 3-1: Product: syz [ 1607.661403][ T5821] usb 3-1: Manufacturer: syz [ 1607.666197][ T5821] usb 3-1: SerialNumber: syz [ 1607.692029][ T5821] usb 3-1: config 0 descriptor?? [ 1607.736544][ T5821] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1607.758633][ T5821] em28xx 3-1:0.132: Video interface 132 found: [ 1607.801091][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.808040][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.822576][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1607.840691][T22528] usbtmc 1-1:16.0: Unable to send data, error -71 [ 1607.865065][T22540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5008'. [ 1607.963874][ T23] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1607.979908][ T5848] usb 1-1: USB disconnect, device number 102 [ 1608.143487][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1608.156884][ T23] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1608.157070][ T5821] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1608.165541][ T23] usb 2-1: config 0 has no interface number 0 [ 1608.165596][ T23] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1608.191567][ T23] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1608.201692][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.210131][ T23] usb 2-1: Product: syz [ 1608.214546][ T23] usb 2-1: Manufacturer: syz [ 1608.219235][ T23] usb 2-1: SerialNumber: syz [ 1608.229448][ T23] usb 2-1: config 0 descriptor?? [ 1608.248150][ T23] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1608.260442][ T23] em28xx 2-1:0.132: Video interface 132 found: [ 1608.393863][ T5821] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1608.402874][ T5821] em28xx 3-1:0.132: board has no eeprom [ 1608.493617][ T5821] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1608.501750][ T5821] em28xx 3-1:0.132: analog set to bulk mode. [ 1608.524390][ T5848] em28xx 3-1:0.132: Registering V4L2 extension [ 1608.535982][ T5821] usb 3-1: USB disconnect, device number 106 [ 1608.543253][ T5821] em28xx 3-1:0.132: Disconnecting em28xx [ 1608.649517][ T23] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1608.821406][ T5848] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1608.828911][ T5848] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1608.845355][ T5848] em28xx 3-1:0.132: No AC97 audio processor [ 1608.864626][ T5848] usb 3-1: Decoder not found [ 1608.872772][ T23] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1608.875679][ T5848] em28xx 3-1:0.132: failed to create media graph [ 1608.891232][ T23] em28xx 2-1:0.132: board has no eeprom [ 1608.912034][ T5848] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1608.926905][ T5848] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1608.969059][ T23] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1608.977470][ T5821] em28xx 3-1:0.132: Closing input extension [ 1608.988773][ T5821] em28xx 3-1:0.132: Freeing device [ 1609.002096][ T23] em28xx 2-1:0.132: analog set to bulk mode. [ 1609.032535][T16077] em28xx 2-1:0.132: Registering V4L2 extension [ 1609.039382][T22554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5012'. [ 1609.078264][ T23] usb 2-1: USB disconnect, device number 112 [ 1609.114196][ T23] em28xx 2-1:0.132: Disconnecting em28xx [ 1609.311959][T16077] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1609.330260][T16077] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1609.348529][T16077] em28xx 2-1:0.132: No AC97 audio processor [ 1609.375253][T16077] usb 2-1: Decoder not found [ 1609.392129][T16077] em28xx 2-1:0.132: failed to create media graph [ 1609.421312][T16077] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1609.456756][T22556] ================================================================== [ 1609.464980][T22556] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 1609.472416][T22556] Read of size 8 at addr ffff888031558738 by task v4l_id/22556 [ 1609.479955][T22556] [ 1609.482276][T22556] CPU: 0 PID: 22556 Comm: v4l_id Not tainted syzkaller #0 [ 1609.489394][T22556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1609.499632][T22556] Call Trace: [ 1609.502909][T22556] [ 1609.505839][T22556] dump_stack_lvl+0x18c/0x250 [ 1609.510637][T22556] ? __lock_acquire+0x7d40/0x7d40 [ 1609.515680][T22556] ? show_regs_print_info+0x20/0x20 [ 1609.520973][T22556] ? load_image+0x420/0x420 [ 1609.525596][T22556] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1609.531126][T22556] ? __virt_addr_valid+0x18c/0x540 [ 1609.536345][T22556] ? __virt_addr_valid+0x469/0x540 [ 1609.541542][T22556] print_report+0xa8/0x210 [ 1609.545989][T22556] ? v4l2_fh_open+0xca/0x430 [ 1609.550572][T22556] kasan_report+0x117/0x150 [ 1609.555099][T22556] ? v4l2_fh_open+0xca/0x430 [ 1609.560063][T22556] v4l2_fh_open+0xca/0x430 [ 1609.564480][T22556] em28xx_v4l2_open+0x157/0x980 [ 1609.569415][T22556] v4l2_open+0x212/0x360 [ 1609.573653][T22556] chrdev_open+0x5cc/0x6a0 [ 1609.578067][T22556] ? cd_forget+0x160/0x160 [ 1609.582480][T22556] ? fsnotify_perm+0x3ed/0x5e0 [ 1609.587367][T22556] ? cd_forget+0x160/0x160 [ 1609.591785][T22556] do_dentry_open+0x8c6/0x1500 [ 1609.596564][T22556] path_openat+0x27f1/0x3230 [ 1609.601255][T22556] ? do_sys_openat2+0xda/0x1d0 [ 1609.606114][T22556] ? verify_lock_unused+0x140/0x140 [ 1609.611327][T22556] ? do_filp_open+0x430/0x430 [ 1609.616002][T22556] ? __virt_addr_valid+0x18c/0x540 [ 1609.621114][T22556] do_filp_open+0x1f5/0x430 [ 1609.625613][T22556] ? vfs_tmpfile+0x490/0x490 [ 1609.630209][T22556] ? _raw_spin_unlock+0x28/0x40 [ 1609.635073][T22556] ? alloc_fd+0x58f/0x630 [ 1609.639407][T22556] do_sys_openat2+0x134/0x1d0 [ 1609.644084][T22556] ? do_sys_open+0xe0/0xe0 [ 1609.649107][T22556] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1609.655188][T22556] ? lock_chain_count+0x20/0x20 [ 1609.660086][T22556] ? lock_chain_count+0x20/0x20 [ 1609.665056][T22556] __x64_sys_openat+0x139/0x160 [ 1609.670003][T22556] do_syscall_64+0x55/0xa0 [ 1609.674527][T22556] ? clear_bhb_loop+0x40/0x90 [ 1609.679287][T22556] ? clear_bhb_loop+0x40/0x90 [ 1609.683987][T22556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.689901][T22556] RIP: 0033:0x7f40f5aa7407 [ 1609.694339][T22556] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1609.714146][T22556] RSP: 002b:00007ffff6620fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1609.722825][T22556] RAX: ffffffffffffffda RBX: 00007f40f61cc880 RCX: 00007f40f5aa7407 [ 1609.730795][T22556] RDX: 0000000000000000 RSI: 00007ffff6622f1b RDI: ffffffffffffff9c [ 1609.738763][T22556] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1609.746750][T22556] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1609.754721][T22556] R13: 00007ffff6621210 R14: 00007f40f632b000 R15: 0000557097d974d8 [ 1609.762708][T22556] [ 1609.765725][T22556] [ 1609.768128][T22556] Allocated by task 16077: [ 1609.772545][T22556] kasan_set_track+0x4e/0x70 [ 1609.777150][T22556] __kasan_kmalloc+0x8f/0xa0 [ 1609.781735][T22556] em28xx_v4l2_init+0x10b/0x2e70 [ 1609.786703][T22556] em28xx_init_extension+0x11c/0x1b0 [ 1609.791987][T22556] process_scheduled_works+0xa5d/0x15d0 [ 1609.797550][T22556] worker_thread+0xa55/0xfc0 [ 1609.802240][T22556] kthread+0x2fa/0x390 [ 1609.806323][T22556] ret_from_fork+0x48/0x80 [ 1609.810835][T22556] ret_from_fork_asm+0x11/0x20 [ 1609.815626][T22556] [ 1609.817949][T22556] Freed by task 16077: [ 1609.822013][T22556] kasan_set_track+0x4e/0x70 [ 1609.826651][T22556] kasan_save_free_info+0x2e/0x50 [ 1609.831870][T22556] ____kasan_slab_free+0x126/0x1e0 [ 1609.837086][T22556] slab_free_freelist_hook+0x130/0x1a0 [ 1609.842554][T22556] __kmem_cache_free+0xba/0x1e0 [ 1609.847507][T22556] em28xx_v4l2_init+0x1670/0x2e70 [ 1609.852636][T22556] em28xx_init_extension+0x11c/0x1b0 [ 1609.858012][T22556] process_scheduled_works+0xa5d/0x15d0 [ 1609.863744][T22556] worker_thread+0xa55/0xfc0 [ 1609.868331][T22556] kthread+0x2fa/0x390 [ 1609.872389][T22556] ret_from_fork+0x48/0x80 [ 1609.876894][T22556] ret_from_fork_asm+0x11/0x20 [ 1609.881657][T22556] [ 1609.883978][T22556] The buggy address belongs to the object at ffff888031558000 [ 1609.883978][T22556] which belongs to the cache kmalloc-8k of size 8192 [ 1609.898117][T22556] The buggy address is located 1848 bytes inside of [ 1609.898117][T22556] freed 8192-byte region [ffff888031558000, ffff88803155a000) [ 1609.912097][T22556] [ 1609.914426][T22556] The buggy address belongs to the physical page: [ 1609.920848][T22556] page:ffffea0000c55600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31558 [ 1609.931099][T22556] head:ffffea0000c55600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1609.940227][T22556] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1609.948643][T22556] page_type: 0xffffffff() [ 1609.953149][T22556] raw: 00fff00000000840 ffff888017c42280 ffffea0000b5c800 dead000000000003 [ 1609.961834][T22556] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 1609.970637][T22556] page dumped because: kasan: bad access detected [ 1609.977049][T22556] page_owner tracks the page as allocated [ 1609.982755][T22556] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5430, tgid 5430 (start-stop-daem), ts 49089573909, free_ts 49075187826 [ 1610.003880][T22556] post_alloc_hook+0x1c1/0x200 [ 1610.008677][T22556] get_page_from_freelist+0x1951/0x19e0 [ 1610.014390][T22556] __alloc_pages+0x1f0/0x460 [ 1610.018977][T22556] alloc_slab_page+0x5d/0x160 [ 1610.023664][T22556] new_slab+0x87/0x2d0 [ 1610.027731][T22556] ___slab_alloc+0xc5d/0x12f0 [ 1610.032419][T22556] __kmem_cache_alloc_node+0x19e/0x250 [ 1610.037894][T22556] kmalloc_trace+0x2a/0xe0 [ 1610.042325][T22556] tomoyo_init_log+0x1114/0x1f50 [ 1610.047284][T22556] tomoyo_supervisor+0x363/0x1170 [ 1610.052314][T22556] tomoyo_env_perm+0x152/0x1f0 [ 1610.057100][T22556] tomoyo_find_next_domain+0x1592/0x1a60 [ 1610.062836][T22556] tomoyo_bprm_check_security+0x116/0x170 [ 1610.068671][T22556] security_bprm_check+0x62/0xa0 [ 1610.073644][T22556] bprm_execve+0xa6e/0x1700 [ 1610.078152][T22556] do_execveat_common+0x51b/0x6c0 [ 1610.083175][T22556] page last free stack trace: [ 1610.088024][T22556] free_unref_page_prepare+0x7b2/0x8c0 [ 1610.093526][T22556] free_unref_page+0x32/0x2e0 [ 1610.098233][T22556] __unfreeze_partials+0x1cf/0x210 [ 1610.103350][T22556] put_cpu_partial+0x17c/0x250 [ 1610.108220][T22556] __slab_free+0x319/0x400 [ 1610.112723][T22556] qlist_free_all+0x75/0xd0 [ 1610.117448][T22556] kasan_quarantine_reduce+0x143/0x160 [ 1610.122914][T22556] __kasan_slab_alloc+0x22/0x80 [ 1610.127784][T22556] slab_post_alloc_hook+0x6e/0x4b0 [ 1610.132968][T22556] kmem_cache_alloc+0x11a/0x2d0 [ 1610.137837][T22556] vm_area_dup+0x27/0x270 [ 1610.142269][T22556] __split_vma+0x1b4/0xc60 [ 1610.146798][T22556] do_vmi_align_munmap+0x32a/0x16d0 [ 1610.152029][T22556] do_vmi_munmap+0x252/0x2d0 [ 1610.156641][T22556] mmap_region+0x773/0x2000 [ 1610.161242][T22556] do_mmap+0x92c/0x10a0 [ 1610.165543][T22556] [ 1610.167951][T22556] Memory state around the buggy address: [ 1610.173601][T22556] ffff888031558600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1610.181752][T22556] ffff888031558680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1610.190167][T22556] >ffff888031558700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1610.198224][T22556] ^ [ 1610.204293][T22556] ffff888031558780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1610.212374][T22556] ffff888031558800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1610.220500][T22556] ================================================================== [ 1610.228707][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.252725][T16077] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1610.252753][ T5821] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1610.302353][ T23] em28xx 2-1:0.132: Closing input extension [ 1610.308744][T22556] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1610.315974][T22556] CPU: 1 PID: 22556 Comm: v4l_id Not tainted syzkaller #0 [ 1610.323114][T22556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1610.333271][T22556] Call Trace: [ 1610.336646][T22556] [ 1610.339579][T22556] dump_stack_lvl+0x18c/0x250 [ 1610.344271][T22556] ? show_regs_print_info+0x20/0x20 [ 1610.349489][T22556] ? load_image+0x420/0x420 [ 1610.354099][T22556] panic+0x2dc/0x730 [ 1610.358026][T22556] ? bpf_jit_dump+0xd0/0xd0 [ 1610.362764][T22556] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1610.368848][T22556] ? _raw_spin_unlock+0x40/0x40 [ 1610.374224][T22556] ? print_memory_metadata+0x314/0x400 [ 1610.379781][T22556] ? v4l2_fh_open+0xca/0x430 [ 1610.384391][T22556] check_panic_on_warn+0x84/0xa0 [ 1610.389421][T22556] ? v4l2_fh_open+0xca/0x430 [ 1610.394013][T22556] end_report+0x6f/0x130 [ 1610.398295][T22556] kasan_report+0x128/0x150 [ 1610.402921][T22556] ? v4l2_fh_open+0xca/0x430 [ 1610.407528][T22556] v4l2_fh_open+0xca/0x430 [ 1610.411964][T22556] em28xx_v4l2_open+0x157/0x980 [ 1610.416856][T22556] v4l2_open+0x212/0x360 [ 1610.421119][T22556] chrdev_open+0x5cc/0x6a0 [ 1610.425568][T22556] ? cd_forget+0x160/0x160 [ 1610.430014][T22556] ? fsnotify_perm+0x3ed/0x5e0 [ 1610.434841][T22556] ? cd_forget+0x160/0x160 [ 1610.439274][T22556] do_dentry_open+0x8c6/0x1500 [ 1610.444061][T22556] path_openat+0x27f1/0x3230 [ 1610.448690][T22556] ? do_sys_openat2+0xda/0x1d0 [ 1610.453475][T22556] ? verify_lock_unused+0x140/0x140 [ 1610.458726][T22556] ? do_filp_open+0x430/0x430 [ 1610.463557][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 1610.468733][T22556] ? __virt_addr_valid+0x18c/0x540 [ 1610.474031][T22556] do_filp_open+0x1f5/0x430 [ 1610.478650][T22556] ? vfs_tmpfile+0x490/0x490 [ 1610.483290][T22556] ? _raw_spin_unlock+0x28/0x40 [ 1610.488278][T22556] ? alloc_fd+0x58f/0x630 [ 1610.492667][T22556] do_sys_openat2+0x134/0x1d0 [ 1610.497462][T22556] ? do_sys_open+0xe0/0xe0 [ 1610.501916][T22556] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1610.508072][T22556] ? lock_chain_count+0x20/0x20 [ 1610.512959][T22556] ? lock_chain_count+0x20/0x20 [ 1610.517947][T22556] __x64_sys_openat+0x139/0x160 [ 1610.522922][T22556] do_syscall_64+0x55/0xa0 [ 1610.527408][T22556] ? clear_bhb_loop+0x40/0x90 [ 1610.532307][T22556] ? clear_bhb_loop+0x40/0x90 [ 1610.537169][T22556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1610.543106][T22556] RIP: 0033:0x7f40f5aa7407 [ 1610.547567][T22556] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1610.567331][T22556] RSP: 002b:00007ffff6620fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1610.575777][T22556] RAX: ffffffffffffffda RBX: 00007f40f61cc880 RCX: 00007f40f5aa7407 [ 1610.583860][T22556] RDX: 0000000000000000 RSI: 00007ffff6622f1b RDI: ffffffffffffff9c [ 1610.591867][T22556] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1610.599885][T22556] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1610.607979][T22556] R13: 00007ffff6621210 R14: 00007f40f632b000 R15: 0000557097d974d8 [ 1610.616108][T22556] [ 1610.619695][T22556] Kernel Offset: disabled [ 1610.624026][T22556] Rebooting in 86400 seconds..