last executing test programs: 20m32.37610039s ago: executing program 2 (id=3): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0xffffffffffffff72) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 20m31.929264994s ago: executing program 2 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @empty}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000000c0)=0x91) 20m16.413939132s ago: executing program 32 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @empty}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000000c0)=0x91) 18m5.427304976s ago: executing program 3 (id=383): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/20, 0x14}, 0x7}], 0x4000000000000d4, 0x102, 0x0) 18m5.303072702s ago: executing program 3 (id=384): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@void, @actul_num={@void, 0xfff, 0x45}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x428}}}, 0x7) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_getaffinity(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 18m3.831231363s ago: executing program 3 (id=385): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x78, 0x0, 0xb0d, {0xa05, 0x2e, 0x0, {0x0, 0xa8f, 0x4, 0x2, 0x6, 0x7, 0x3, 0x7, 0xffff, 0xc000, 0x10000, 0x0, 0x0, 0x10, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000140)='./file0\x00') 18m3.082238773s ago: executing program 3 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) 17m57.47182612s ago: executing program 3 (id=403): syz_usb_connect(0x0, 0x24, &(0x7f00000035c0)={{0x12, 0x1, 0x110, 0xd5, 0xb4, 0x6, 0x20, 0xbda, 0x158, 0x4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x9, 0x80, 0xf8, [{{0x9, 0x4, 0x88, 0x4, 0x0, 0x8, 0x6, 0x1, 0x6d}}]}}]}}, 0x0) 17m54.877406827s ago: executing program 3 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)={0x4c, r1, 0x5, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x24, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30048011}, 0x4c000) 17m38.784932817s ago: executing program 33 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)={0x4c, r1, 0x5, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x24, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30048011}, 0x4c000) 6.911060765s ago: executing program 4 (id=3339): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x14, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0xa}}, 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f00000000c0)=[{0x0}], 0x5e) 6.213095714s ago: executing program 4 (id=3345): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 4.192734892s ago: executing program 6 (id=3351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09020000000000000000020000000900020073797a310000000008000440000000000800034000000004090001"], 0x64}}, 0x4040000) 4.149462405s ago: executing program 4 (id=3353): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) memfd_secret(0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d6db187a94e5dadfe181d20d3a4bd08e8b0e6eeb79fdee230dd852a36dfc9046d03b8f316b2d460ca5d08c515d914db8ce430ea0237911c440ee750fe787aaffa83b809651c529e4cf68c8219a827ea003c59e3e51b00cd7f9464f37be2eb3e1475819ad37edcc238b85ab205a2b394916815d9cf7bf3f8e3d19a4697756299e21f2afd3ae31e0f09b8153965635216de47156f4e5fc97cb04f9c5e13256be1d9e0a94f9c6387940de1bcd7b532d16ebba216601cf23be6a7c259550bd059a5a7aee85eb558de8201c1d9c7b29e27313f61cf0b07dd790071bdbceabdd32ce2bcc279b1575a1431b03e5dc37307d15a2782175c87dad1a3aadf48b382bea4ae0b423edee0e12ada4c1dacc40bf387630792ab5c7ed6e2ef7e8a77268b0ff8978ccddfa8da4521d24b3fddc70d181c20caa9a584df9b2e"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.981121514s ago: executing program 0 (id=3356): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc0205647, &(0x7f0000001080)={0x80000002, 0x100070d8}) 3.883576616s ago: executing program 6 (id=3358): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') unlinkat(r0, &(0x7f00000001c0)='./bus\x00', 0x200) 3.789215199s ago: executing program 0 (id=3359): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) 3.663718519s ago: executing program 4 (id=3361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r4) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) 3.616824299s ago: executing program 0 (id=3363): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000080), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0xa, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000000880)={{r3}, "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"}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe", 0x16) read$char_usb(r0, &(0x7f00000003c0)=""/241, 0xf1) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0xb, 0x32, 0x9}) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket(0x2b, 0x1, 0x1) 3.616671748s ago: executing program 6 (id=3364): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x8001, 0x1, 0x80000000, 0x40, 0x7, r0}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 3.315599719s ago: executing program 1 (id=3365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) 1.945343636s ago: executing program 4 (id=3367): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x6000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.941799566s ago: executing program 6 (id=3368): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x1e, 0x9f, 0xe0, 0x40, 0x6a3, 0xff04, 0x12e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x18, 0x6, 0xa0, 0x1, [{{0x9, 0x4, 0xcd, 0x5, 0x2, 0x31, 0xfb, 0x4, 0x6, [], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x4, 0x4, 0xcf}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x3, 0x1, 0x4c}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 1.512905799s ago: executing program 1 (id=3370): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) close(0x4) 1.238055082s ago: executing program 1 (id=3371): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xe0000018}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4}) 1.162555287s ago: executing program 5 (id=3372): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x119, 0x1, 0x0, 0x0) 991.855618ms ago: executing program 0 (id=3373): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000240)) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 884.748389ms ago: executing program 5 (id=3374): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8971, 0x0) 728.801164ms ago: executing program 1 (id=3375): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) 625.24627ms ago: executing program 5 (id=3376): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) 597.49492ms ago: executing program 1 (id=3377): r0 = socket$inet6(0xa, 0x3, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0xd95b}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) 534.310721ms ago: executing program 5 (id=3378): mount$binder(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000200)={[{@stats}, {@max={'max', 0x3d, 0x4}}]}) 422.151182ms ago: executing program 4 (id=3379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 333.25643ms ago: executing program 0 (id=3380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) 333.077507ms ago: executing program 5 (id=3381): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000340)) 83.949812ms ago: executing program 0 (id=3382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x76) 83.269988ms ago: executing program 1 (id=3383): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000080), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0xa, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000000880)={{r3}, "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"}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe", 0x16) read$char_usb(r0, &(0x7f00000003c0)=""/241, 0xf1) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0xb, 0x32, 0x9}) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket(0x2b, 0x1, 0x1) 82.891797ms ago: executing program 5 (id=3384): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9d, 0xfd, 0x28}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 82.627947ms ago: executing program 6 (id=3385): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x162, 0x0) 0s ago: executing program 6 (id=3386): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) io_setup(0x20, &(0x7f0000001140)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast}) kernel console output (not intermixed with test programs): b 5-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 947.206127][T10747] usb 5-1: config 0 interface 0 has no altsetting 0 [ 947.206146][T10747] usb 5-1: config 0 interface 242 has no altsetting 0 [ 947.206165][T10747] usb 5-1: config 0 interface 188 has no altsetting 0 [ 947.206182][T10747] usb 5-1: config 0 interface 184 has no altsetting 0 [ 947.206200][T10747] usb 5-1: config 0 interface 146 has no altsetting 0 [ 947.206236][T10747] usb 5-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 947.206258][T10747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.226336][T10747] usb 5-1: config 0 descriptor?? [ 947.280165][ T5878] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 947.319655][ C1] vkms_vblank_simulate: vblank timer overrun [ 947.436404][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.436790][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.722074][ C1] vkms_vblank_simulate: vblank timer overrun [ 947.954809][T13077] vhci_hcd: connection reset by peer [ 947.959804][ T1100] vhci_hcd: stop threads [ 947.959825][ T1100] vhci_hcd: release socket [ 947.980283][ T1100] vhci_hcd: disconnect device [ 948.630166][ T5807] Bluetooth: hci0: command tx timeout [ 948.638181][T10747] usb 5-1: string descriptor 0 read error: -71 [ 948.668892][T10747] usb 5-1: unknown number of interfaces: 5 [ 948.730411][ C1] vkms_vblank_simulate: vblank timer overrun [ 948.760634][T10747] usb 5-1: USB disconnect, device number 24 [ 949.271092][ C1] vkms_vblank_simulate: vblank timer overrun [ 949.430767][ T4543] bridge_slave_1: left allmulticast mode [ 949.430796][ T4543] bridge_slave_1: left promiscuous mode [ 949.431021][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.802080][ T4543] bridge_slave_0: left allmulticast mode [ 949.802109][ T4543] bridge_slave_0: left promiscuous mode [ 949.802376][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.720023][ T5807] Bluetooth: hci0: command tx timeout [ 951.012136][ T4543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.756965][T13120] binder: 13114:13120 unknown command 0 [ 951.757017][T13120] binder: 13114:13120 ioctl c0306201 200000001040 returned -22 [ 952.467915][T13124] binder: BINDER_SET_CONTEXT_MGR already set [ 952.467932][T13124] binder: 13100:13124 ioctl 4018620d 200000000040 returned -16 [ 952.468607][T13124] binder: 13100:13124 unknown command 0 [ 952.468625][T13124] binder: 13100:13124 ioctl c0306201 200000001040 returned -22 [ 952.654471][ T5878] vhci_hcd: vhci_device speed not set [ 952.717773][ T4543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.790163][ T5807] Bluetooth: hci0: command tx timeout [ 952.823350][ T4543] bond0 (unregistering): Released all slaves [ 953.161306][T13104] infiniband syz2: set active [ 953.161322][T13104] infiniband syz2: added veth1_to_team [ 953.164112][T13104] syz2: rxe_create_cq: returned err = -12 [ 953.164259][T13104] infiniband syz2: Couldn't create ib_mad CQ [ 953.164384][T13104] infiniband syz2: Couldn't open port 1 [ 953.309920][T13130] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 953.310018][T13130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 953.312411][T13130] vhci_hcd vhci_hcd.0: Device attached [ 953.464552][T13104] RDS/IB: syz2: added [ 953.465427][T13104] smc: adding ib device syz2 with port count 1 [ 953.465693][T13104] smc: ib device syz2 port 1 has no pnetid [ 953.850081][ T5892] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 955.203550][T13134] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 955.220151][T13133] vhci_hcd: connection closed [ 955.268943][ T1414] vhci_hcd: stop threads [ 955.268964][ T1414] vhci_hcd: release socket [ 955.269031][ T1414] vhci_hcd: disconnect device [ 956.510515][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 956.681012][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 956.994995][ T10] usb 7-1: config 0 has an invalid interface number: 242 but max is 3 [ 956.995716][ T10] usb 7-1: config 0 has an invalid interface number: 188 but max is 3 [ 956.996468][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 3 [ 956.997143][ T10] usb 7-1: config 0 has an invalid interface number: 146 but max is 3 [ 956.998792][ T10] usb 7-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 956.999489][ T10] usb 7-1: config 0 has no interface number 1 [ 956.999867][ T10] usb 7-1: config 0 has no interface number 2 [ 957.078425][ T10] usb 7-1: config 0 has no interface number 3 [ 957.078455][ T10] usb 7-1: config 0 has no interface number 4 [ 957.078633][ T10] usb 7-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 957.078720][ T10] usb 7-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 957.078750][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 957.078769][ T10] usb 7-1: config 0 interface 242 has no altsetting 0 [ 957.078788][ T10] usb 7-1: config 0 interface 188 has no altsetting 0 [ 957.078806][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 957.078824][ T10] usb 7-1: config 0 interface 146 has no altsetting 0 [ 957.078859][ T10] usb 7-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 957.078883][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.498170][ T10] usb 7-1: config 0 descriptor?? [ 957.580847][T13055] chnl_net:caif_netlink_parms(): no params data found [ 957.718750][T13143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.719377][T13143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.359535][ T5892] vhci_hcd: vhci_device speed not set [ 960.540711][ T10] usb 7-1: string descriptor 0 read error: -71 [ 960.862202][T13177] Device name cannot be null; rc = [-22] [ 961.053989][T13174] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 961.054069][T13174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 961.054589][T13174] vhci_hcd vhci_hcd.0: Device attached [ 961.262758][T13178] vhci_hcd: connection closed [ 961.314995][ T6255] vhci_hcd: stop threads [ 961.315056][ T6255] vhci_hcd: release socket [ 961.315814][ T6255] vhci_hcd: disconnect device [ 961.351122][T12052] vhci_hcd: vhci_device speed not set [ 961.798418][ T10] usb 7-1: unknown number of interfaces: 5 [ 961.926407][ T10] usb 7-1: USB disconnect, device number 8 [ 963.822367][T13055] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.822503][T13055] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.822714][T13055] bridge_slave_0: entered allmulticast mode [ 963.825453][T13055] bridge_slave_0: entered promiscuous mode [ 964.714387][ T4543] hsr_slave_0: left promiscuous mode [ 965.194566][T13214] Device name cannot be null; rc = [-22] [ 965.416661][ T4543] hsr_slave_1: left promiscuous mode [ 965.417719][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.434430][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.620299][T12052] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 965.700429][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 965.813175][T12052] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.813227][T12052] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 965.813252][T12052] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.818982][T12052] usb 7-1: config 0 descriptor?? [ 965.900225][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 965.948778][ T10] usb 1-1: config 0 has an invalid interface number: 242 but max is 3 [ 965.948808][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 3 [ 965.948829][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 3 [ 965.948917][ T10] usb 1-1: config 0 has an invalid interface number: 146 but max is 3 [ 965.948940][ T10] usb 1-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 965.948962][ T10] usb 1-1: config 0 has no interface number 1 [ 965.948977][ T10] usb 1-1: config 0 has no interface number 2 [ 965.949002][ T10] usb 1-1: config 0 has no interface number 3 [ 965.949081][ T10] usb 1-1: config 0 has no interface number 4 [ 965.949178][ T10] usb 1-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 965.949298][ T10] usb 1-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 965.949328][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 965.949347][ T10] usb 1-1: config 0 interface 242 has no altsetting 0 [ 965.949427][ T10] usb 1-1: config 0 interface 188 has no altsetting 0 [ 965.949447][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 965.949466][ T10] usb 1-1: config 0 interface 146 has no altsetting 0 [ 965.949502][ T10] usb 1-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 965.949586][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.146919][ T10] usb 1-1: config 0 descriptor?? [ 966.332120][T12052] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 966.332408][T12052] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 966.358935][ T4543] team0 (unregistering): Port device team_slave_1 removed [ 966.378675][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.379224][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.412584][T12052] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 966.517538][T12052] lenovo 0003:17EF:6047.000E: Failed to switch F7/9/11 mode: -71 [ 966.529051][T12052] lenovo 0003:17EF:6047.000E: Failed to switch middle button: -71 [ 966.531361][ T4543] team0 (unregistering): Port device team_slave_0 removed [ 966.547766][T12052] lenovo 0003:17EF:6047.000E: Fn-lock setting failed: -71 [ 966.558609][T12052] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71 [ 966.643621][T12052] usb 7-1: USB disconnect, device number 9 [ 967.164617][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.164772][T13055] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.165014][T13055] bridge_slave_1: entered allmulticast mode [ 967.167933][T13055] bridge_slave_1: entered promiscuous mode [ 967.364590][T13223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 967.364607][T13223] IPv6: NLM_F_CREATE should be set when creating new route [ 967.364672][T13223] IPv6: NLM_F_CREATE should be set when creating new route [ 967.364703][T13223] IPv6: NLM_F_CREATE should be set when creating new route [ 967.749078][ T10] usb 1-1: string descriptor 0 read error: -71 [ 967.974524][T13055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.067873][T13055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.134577][ T10] usb 1-1: unknown number of interfaces: 5 [ 968.177373][ T10] usb 1-1: USB disconnect, device number 33 [ 969.615401][T13255] binder: 13247:13255 unknown command 0 [ 969.615426][T13255] binder: 13247:13255 ioctl c0306201 200000001040 returned -22 [ 969.704316][T13055] team0: Port device team_slave_0 added [ 969.711433][T13257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 969.895101][T13055] team0: Port device team_slave_1 added [ 970.314654][T13269] evm: overlay not supported [ 970.452486][T13055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.452504][T13055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.452534][T13055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.465998][T13055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.466017][T13055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.466068][T13055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.198222][T13055] hsr_slave_0: entered promiscuous mode [ 971.207165][T13055] hsr_slave_1: entered promiscuous mode [ 971.208494][T13055] debugfs: 'hsr0' already exists in 'hsr' [ 971.208521][T13055] Cannot create hsr debugfs directory [ 971.440026][ T5814] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 971.600190][ T5814] usb 7-1: Using ep0 maxpacket: 8 [ 971.603007][ T5814] usb 7-1: config 0 has an invalid interface number: 242 but max is 3 [ 971.603034][ T5814] usb 7-1: config 0 has an invalid interface number: 188 but max is 3 [ 971.603056][ T5814] usb 7-1: config 0 has an invalid interface number: 184 but max is 3 [ 971.603078][ T5814] usb 7-1: config 0 has an invalid interface number: 146 but max is 3 [ 971.603099][ T5814] usb 7-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 971.603122][ T5814] usb 7-1: config 0 has no interface number 1 [ 971.603140][ T5814] usb 7-1: config 0 has no interface number 2 [ 971.603156][ T5814] usb 7-1: config 0 has no interface number 3 [ 971.603173][ T5814] usb 7-1: config 0 has no interface number 4 [ 971.603263][ T5814] usb 7-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 971.603311][ T5814] usb 7-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 971.603340][ T5814] usb 7-1: config 0 interface 0 has no altsetting 0 [ 971.603360][ T5814] usb 7-1: config 0 interface 242 has no altsetting 0 [ 971.603379][ T5814] usb 7-1: config 0 interface 188 has no altsetting 0 [ 971.603397][ T5814] usb 7-1: config 0 interface 184 has no altsetting 0 [ 971.603414][ T5814] usb 7-1: config 0 interface 146 has no altsetting 0 [ 971.603450][ T5814] usb 7-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 971.603475][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.940202][ T5814] usb 7-1: config 0 descriptor?? [ 972.156910][T13279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.159526][T13279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.871111][ T5814] usb 7-1: string descriptor 0 read error: -71 [ 974.906310][ T5814] usb 7-1: unknown number of interfaces: 5 [ 974.921486][T13055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 974.982530][ T5814] usb 7-1: USB disconnect, device number 10 [ 975.188873][T13055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 976.007205][T13055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 976.636301][T13055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 977.304449][T13339] smk_cipso_doi:692 cipso add rc = -17 [ 977.783322][T13055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.863288][T13055] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.908367][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.909736][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.925849][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.935667][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.080186][ T5999] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 979.148547][T13055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.230087][ T5999] usb 6-1: Using ep0 maxpacket: 8 [ 979.232963][ T5999] usb 6-1: config 0 has an invalid interface number: 242 but max is 3 [ 979.232996][ T5999] usb 6-1: config 0 has an invalid interface number: 188 but max is 3 [ 979.233018][ T5999] usb 6-1: config 0 has an invalid interface number: 184 but max is 3 [ 979.233038][ T5999] usb 6-1: config 0 has an invalid interface number: 146 but max is 3 [ 979.233058][ T5999] usb 6-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 979.233080][ T5999] usb 6-1: config 0 has no interface number 1 [ 979.233096][ T5999] usb 6-1: config 0 has no interface number 2 [ 979.233112][ T5999] usb 6-1: config 0 has no interface number 3 [ 979.233129][ T5999] usb 6-1: config 0 has no interface number 4 [ 979.233217][ T5999] usb 6-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 979.233277][ T5999] usb 6-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 979.233307][ T5999] usb 6-1: config 0 interface 0 has no altsetting 0 [ 979.233326][ T5999] usb 6-1: config 0 interface 242 has no altsetting 0 [ 979.233345][ T5999] usb 6-1: config 0 interface 188 has no altsetting 0 [ 979.233363][ T5999] usb 6-1: config 0 interface 184 has no altsetting 0 [ 979.233383][ T5999] usb 6-1: config 0 interface 146 has no altsetting 0 [ 979.233418][ T5999] usb 6-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 979.233442][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.239206][ T5999] usb 6-1: config 0 descriptor?? [ 979.618566][T13360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.619158][T13360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.819601][T13055] veth0_vlan: entered promiscuous mode [ 979.874178][T13055] veth1_vlan: entered promiscuous mode [ 980.974379][T13055] veth0_macvtap: entered promiscuous mode [ 980.998992][T13369] binder: 13354:13369 unknown command 0 [ 980.999008][T13369] binder: 13354:13369 ioctl c0306201 200000001040 returned -22 [ 981.134647][T13055] veth1_macvtap: entered promiscuous mode [ 981.569126][T13055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.657538][T13055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.796766][ T1489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.797046][ T1489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.797088][ T1489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.797186][ T1489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.970107][ T5999] usb 6-1: string descriptor 0 read error: -71 [ 982.035286][ T5999] usb 6-1: unknown number of interfaces: 5 [ 982.114748][T13373] smk_cipso_doi:679 remove rc = -2 [ 982.114792][T13373] smk_cipso_doi:692 cipso add rc = -17 [ 982.193102][ T5999] usb 6-1: USB disconnect, device number 6 [ 982.726102][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2192'. [ 982.940297][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.940321][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.174181][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.174204][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.401305][T12052] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 983.560091][T12052] usb 1-1: Using ep0 maxpacket: 8 [ 983.562503][T12052] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.562562][T12052] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 983.562587][T12052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.689546][T12052] usb 1-1: config 0 descriptor?? [ 984.090002][T12052] usb 1-1: USB disconnect, device number 34 [ 984.451127][ T9307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 984.461269][ T9307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 984.477108][ T9307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 984.479284][ T9307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 984.480099][ T9307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 985.000637][ T44] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 985.212866][ T44] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 985.212933][ T44] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 985.212959][ T44] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.213004][ T44] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 985.213027][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.528083][ T44] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 986.341747][ T44] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 986.550081][ T5807] Bluetooth: hci5: command tx timeout [ 986.571898][ T44] usb 6-1: USB disconnect, device number 7 [ 986.604835][T11748] udevd[11748]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.602833][T13437] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 988.602879][T13437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 988.604396][T13437] vhci_hcd vhci_hcd.0: Device attached [ 988.640065][ T9307] Bluetooth: hci5: command tx timeout [ 988.894367][ T44] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 989.258169][T13438] vhci_hcd: connection reset by peer [ 989.264774][ T37] vhci_hcd: stop threads [ 989.264795][ T37] vhci_hcd: release socket [ 989.264870][ T37] vhci_hcd: disconnect device [ 989.766473][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.150273][ T9307] Bluetooth: hci1: command 0x0406 tx timeout [ 990.375943][ T6255] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.507407][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.577705][T13459] fuse: Unknown parameter '0x0000000000000004' [ 991.306136][T13462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.418138][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.419338][ T5807] Bluetooth: hci5: command tx timeout [ 991.540544][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.750166][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.108682][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.718920][ T6255] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.809972][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.080653][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.752346][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.774670][ T5807] Bluetooth: hci5: command tx timeout [ 993.921047][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.990149][ T44] vhci_hcd: vhci_device speed not set [ 994.160806][T13499] fuse: Unknown parameter '0x0000000000000004' [ 994.287551][T13403] chnl_net:caif_netlink_parms(): no params data found [ 994.306987][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.768494][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.878006][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.977377][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.032168][ T6255] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.464361][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.903522][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.268023][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.385575][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.872874][ T6255] bridge0: port 3(netdevsim0) entered disabled state [ 998.564391][T13534] binder: BINDER_SET_CONTEXT_MGR already set [ 998.564408][T13534] binder: 13528:13534 ioctl 4018620d 200000000040 returned -16 [ 998.565029][T13534] binder: 13528:13534 unknown command 0 [ 998.565046][T13534] binder: 13528:13534 ioctl c0306201 200000001040 returned -22 [ 998.598580][ T5814] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 999.092592][ T6255] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 999.092619][ T6255] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 999.123332][ T5814] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.123363][ T5814] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 999.123425][ T5814] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 999.123452][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.130177][ T5814] usb 6-1: config 0 descriptor?? [ 999.144399][ T5814] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 999.144908][ T5814] dvb-usb: bulk message failed: -22 (3/0) [ 999.182605][ T6255] bridge0: port 3(netdevsim0) entered disabled state [ 999.195935][ T5814] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 999.203928][ T5814] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 999.204027][ T5814] usb 6-1: media controller created [ 999.208415][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 999.318002][ T5814] dvb-usb: bulk message failed: -22 (6/0) [ 999.318143][ T5814] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 999.326658][ T5814] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 999.356852][ T6255] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.374691][T13524] dvb-usb: bulk message failed: -22 (2/0) [ 999.384360][ T5814] dvb-usb: schedule remote query interval to 150 msecs. [ 999.384385][ T5814] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 999.438138][ T5814] usb 6-1: USB disconnect, device number 8 [ 1000.427921][T13555] fuse: Unknown parameter '0x0000000000000004' [ 1000.519688][ T5814] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1002.057519][ T38] audit: type=1326 audit(1763605639.109:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13569 comm="syz.1.2257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bb778f749 code=0x0 [ 1002.440656][T12052] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1002.590233][T12052] usb 7-1: Using ep0 maxpacket: 16 [ 1002.592922][T12052] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1002.593016][T12052] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1002.593057][T12052] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1002.593084][T12052] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1002.597516][T12052] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1002.597546][T12052] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.597567][T12052] usb 7-1: Product: syz [ 1002.597582][T12052] usb 7-1: Manufacturer: syz [ 1002.597596][T12052] usb 7-1: SerialNumber: syz [ 1002.835773][T13403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.836742][T13403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.837877][T13403] bridge_slave_0: entered allmulticast mode [ 1002.868851][T13403] bridge_slave_0: entered promiscuous mode [ 1002.946131][T13403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.946286][T13403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.946505][T13403] bridge_slave_1: entered allmulticast mode [ 1002.989538][T13403] bridge_slave_1: entered promiscuous mode [ 1003.154101][T12052] usb 7-1: USB disconnect, device number 11 [ 1003.509718][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.510706][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.972081][T13593] fuse: Unknown parameter 'fd0x0000000000000004' [ 1005.142309][T13596] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2266'. [ 1005.376677][T13403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.459102][T13403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.486601][T13602] Device name cannot be null; rc = [-22] [ 1007.372886][T13619] fuse: Unknown parameter 'fd0x0000000000000004' [ 1008.390524][T13403] team0: Port device team_slave_0 added [ 1008.412727][T13403] team0: Port device team_slave_1 added [ 1008.589889][T13635] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2280'. [ 1009.302733][T13640] Invalid source name [ 1010.105856][T13651] Device name cannot be null; rc = [-22] [ 1010.541554][ T6255] bridge_slave_1: left promiscuous mode [ 1010.541844][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.902517][T13653] fuse: Unknown parameter 'fd0x0000000000000004' [ 1011.307667][ T6255] bridge_slave_0: left allmulticast mode [ 1011.307697][ T6255] bridge_slave_0: left promiscuous mode [ 1011.307961][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.945365][T13671] binder: 13665:13671 unknown command 0 [ 1012.945388][T13671] binder: 13665:13671 ioctl c0306201 200000001040 returned -22 [ 1014.799718][T13687] Device name cannot be null; rc = [-22] [ 1018.504499][T13715] binder: 13708:13715 unknown command 0 [ 1018.504547][T13715] binder: 13708:13715 ioctl c0306201 200000001040 returned -22 [ 1023.793261][T13769] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1023.793292][T13769] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1023.793354][T13769] vhci_hcd vhci_hcd.0: Device attached [ 1024.180381][ T44] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1024.551965][T13770] vhci_hcd: connection reset by peer [ 1024.572482][ T1489] vhci_hcd: stop threads [ 1024.572543][ T1489] vhci_hcd: release socket [ 1024.572800][ T1489] vhci_hcd: disconnect device [ 1025.066927][ T6255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.180887][ T6255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.264232][ T6255] bond0 (unregistering): Released all slaves [ 1025.545482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.561489][T13403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.561505][T13403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.561534][T13403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.767567][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.825712][T13729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1025.844408][T13732] bond_slave_0: entered promiscuous mode [ 1025.844499][T13732] bond_slave_1: entered promiscuous mode [ 1025.913473][T13732] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1025.916492][T13732] bond1: (slave macvlan2): making interface the new active one [ 1025.918561][T13732] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1025.938062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.996650][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.016486][T13734] vlan2: entered allmulticast mode [ 1026.016519][T13734] bond1: entered allmulticast mode [ 1026.016533][T13734] macvlan2: entered allmulticast mode [ 1026.016546][T13734] bond0: entered allmulticast mode [ 1026.016559][T13734] bond_slave_0: entered allmulticast mode [ 1026.016580][T13734] bond_slave_1: entered allmulticast mode [ 1026.017945][T13403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.017960][T13403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.017991][T13403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.518623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.161334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.397033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.495981][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.143733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.303776][T13810] binder: 13806:13810 unknown command 0 [ 1028.303828][T13810] binder: 13806:13810 ioctl c0306201 200000001040 returned -22 [ 1028.721954][T13802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.745795][T13403] hsr_slave_0: entered promiscuous mode [ 1028.771555][T13403] hsr_slave_1: entered promiscuous mode [ 1028.777148][T13403] debugfs: 'hsr0' already exists in 'hsr' [ 1028.777177][T13403] Cannot create hsr debugfs directory [ 1029.000587][T13803] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1029.100414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.270275][ T44] vhci_hcd: vhci_device speed not set [ 1033.081841][T13859] binder: 13852:13859 unknown command 0 [ 1033.081892][T13859] binder: 13852:13859 ioctl c0306201 200000001040 returned -22 [ 1035.022179][T13872] binder: 13866:13872 unknown command 0 [ 1035.022202][T13872] binder: 13866:13872 ioctl c0306201 200000001040 returned -22 [ 1035.966115][ T6255] hsr_slave_0: left promiscuous mode [ 1036.270203][ T6255] hsr_slave_1: left promiscuous mode [ 1036.272148][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.274776][ T6255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.317151][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.317180][ T6255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.723316][ T6255] veth1_macvtap: left promiscuous mode [ 1036.723489][ T6255] veth0_macvtap: left promiscuous mode [ 1036.723799][ T6255] veth1_vlan: left promiscuous mode [ 1036.725081][ T6255] veth0_vlan: left promiscuous mode [ 1037.151235][ T6255] pimreg (unregistering): left allmulticast mode [ 1037.560812][ T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1037.612568][T13914] binder: 13906:13914 unknown command 0 [ 1037.612617][T13914] binder: 13906:13914 ioctl c0306201 200000001040 returned -22 [ 1038.097571][ T9] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1038.097603][ T9] usb 1-1: config 1 has no interface number 0 [ 1038.097748][ T9] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1038.124299][ T9] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1038.124330][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.124352][ T9] usb 1-1: Product: syz [ 1038.124368][ T9] usb 1-1: Manufacturer: syz [ 1038.124383][ T9] usb 1-1: SerialNumber: syz [ 1039.014022][T13918] binder: BINDER_SET_CONTEXT_MGR already set [ 1039.014038][T13918] binder: 13915:13918 ioctl 4018620d 200000000040 returned -16 [ 1039.014698][T13918] binder: 13915:13918 unknown command 0 [ 1039.014714][T13918] binder: 13915:13918 ioctl c0306201 200000001040 returned -22 [ 1039.296714][ T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1039.502386][ T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1039.874358][T13924] loop8: detected capacity change from 0 to 8 [ 1039.893142][T13924] Dev loop8: unable to read RDB block 8 [ 1039.893205][T13924] loop8: unable to read partition table [ 1039.893430][T13924] loop8: partition table beyond EOD, truncated [ 1039.893463][T13924] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1041.172779][ T6255] team0 (unregistering): Port device team_slave_1 removed [ 1041.412596][ T6255] team0 (unregistering): Port device team_slave_0 removed [ 1043.873274][T13900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1043.891966][T13902] bond_slave_0: entered promiscuous mode [ 1043.892045][T13902] bond_slave_1: entered promiscuous mode [ 1043.892758][T13902] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1043.895232][T13902] bond1: (slave macvlan2): making interface the new active one [ 1043.896241][T13902] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1044.010165][ T9] aqc111 1-1:1.105 eth12: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 40:ca:e0:e2:4d:8d [ 1044.080171][ T9] usb 1-1: USB disconnect, device number 35 [ 1044.083904][ T9] aqc111 1-1:1.105 eth12: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1044.685829][ T9307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1044.688880][ T9307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1044.702992][ T9307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1044.704474][ T9307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1044.705400][ T9307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1044.822615][T13946] binder: 13941:13946 unknown command 0 [ 1044.822664][T13946] binder: 13941:13946 ioctl c0306201 200000001040 returned -22 [ 1045.505523][ T5999] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1045.678205][ T9] aqc111 1-1:1.105 eth12 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1045.678357][ T9] aqc111 1-1:1.105 eth12 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1045.678504][ T9] aqc111 1-1:1.105 eth12 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1045.709879][ T5999] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1045.711943][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.711971][ T5999] usb 6-1: Product: syz [ 1045.711988][ T5999] usb 6-1: Manufacturer: syz [ 1045.712007][ T5999] usb 6-1: SerialNumber: syz [ 1045.761727][ T5999] usb 6-1: config 0 descriptor?? [ 1046.251489][ T5999] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 1046.251517][ T5999] usb 6-1: Firmware version (0.0) predates our first public release. [ 1046.251535][ T5999] usb 6-1: Please update to version 0.2 or newer [ 1046.921637][T13962] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.921653][T13962] binder: 13950:13962 ioctl 4018620d 200000000040 returned -16 [ 1046.922050][T13962] binder: 13950:13962 unknown command 0 [ 1046.922066][T13962] binder: 13950:13962 ioctl c0306201 200000001040 returned -22 [ 1047.033385][ T5807] Bluetooth: hci3: command tx timeout [ 1047.498262][ T5999] usb 6-1: USB disconnect, device number 9 [ 1047.992928][T13976] bond1: option mode: unable to set because the bond device has slaves [ 1048.157991][T13980] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1049.110153][ T5807] Bluetooth: hci3: command tx timeout [ 1051.181618][T13943] chnl_net:caif_netlink_parms(): no params data found [ 1051.190456][ T5807] Bluetooth: hci3: command tx timeout [ 1051.905394][ T6255] bridge_slave_1: left allmulticast mode [ 1051.905424][ T6255] bridge_slave_1: left promiscuous mode [ 1051.905696][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.012058][ T6255] bridge_slave_0: left allmulticast mode [ 1052.012088][ T6255] bridge_slave_0: left promiscuous mode [ 1052.012368][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.781151][ T6255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.270077][ T5807] Bluetooth: hci3: command tx timeout [ 1053.338524][ T6255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.393060][ T6255] bond0 (unregistering): Released all slaves [ 1053.745750][T13943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.745860][T13943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.746052][T13943] bridge_slave_0: entered allmulticast mode [ 1053.748964][T13943] bridge_slave_0: entered promiscuous mode [ 1053.771550][T13943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.772129][T13943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.772545][T13943] bridge_slave_1: entered allmulticast mode [ 1053.904131][T13943] bridge_slave_1: entered promiscuous mode [ 1054.935040][T13943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.982307][ T6255] hsr_slave_0: left promiscuous mode [ 1057.023061][ T6255] hsr_slave_1: left promiscuous mode [ 1057.024074][ T6255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.203034][ T6255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.080933][ T6255] team0 (unregistering): Port device team_slave_1 removed [ 1060.420722][ T6255] team0 (unregistering): Port device team_slave_0 removed [ 1060.525090][T14120] binder: 14115:14120 unknown command 0 [ 1060.525111][T14120] binder: 14115:14120 ioctl c0306201 200000001040 returned -22 [ 1061.030470][T13943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.761913][T14112] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1063.120032][ T5999] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1063.330269][ T5999] usb 7-1: Using ep0 maxpacket: 32 [ 1063.332757][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.332792][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.332833][ T5999] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1063.332858][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.339364][ T5999] usb 7-1: config 0 descriptor?? [ 1064.076716][T14141] binder: BINDER_SET_CONTEXT_MGR already set [ 1064.076733][T14141] binder: 14139:14141 ioctl 4018620d 200000000040 returned -16 [ 1064.077517][T14141] binder: 14139:14141 unknown command 0 [ 1064.077535][T14141] binder: 14139:14141 ioctl c0306201 200000001040 returned -22 [ 1064.703061][T13943] team0: Port device team_slave_0 added [ 1064.729883][T13943] team0: Port device team_slave_1 added [ 1064.968474][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.968552][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.279862][ T5999] usbhid 7-1:0.0: can't add hid device: -71 [ 1066.290393][ T5999] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1066.295068][ T5999] usb 7-1: USB disconnect, device number 12 [ 1066.373576][T13943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.373592][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.373615][T13943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.375756][T13943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.375771][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.375800][T13943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.117485][ T9307] Bluetooth: hci0: command 0x0406 tx timeout [ 1068.694108][T14185] binder: 14177:14185 unknown command 0 [ 1068.694159][T14185] binder: 14177:14185 ioctl c0306201 200000001040 returned -22 [ 1069.519482][T13943] hsr_slave_0: entered promiscuous mode [ 1069.536859][T14192] binder: BINDER_SET_CONTEXT_MGR already set [ 1069.536876][T14192] binder: 14191:14192 ioctl 4018620d 200000000040 returned -16 [ 1069.537821][T14192] binder: 14191:14192 unknown command 0 [ 1069.537841][T14192] binder: 14191:14192 ioctl c0306201 200000001040 returned -22 [ 1069.538484][T13943] hsr_slave_1: entered promiscuous mode [ 1069.574123][T13943] debugfs: 'hsr0' already exists in 'hsr' [ 1069.574151][T13943] Cannot create hsr debugfs directory [ 1070.171809][T14209] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1071.974035][T14223] binder: 14216:14223 unknown command 0 [ 1071.974060][T14223] binder: 14216:14223 ioctl c0306201 200000001040 returned -22 [ 1072.654399][T13943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1072.699453][T13943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1073.028805][T13943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1073.067012][T13943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1074.375328][T13943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.437993][T13943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.472382][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.472534][ T6255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.483991][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.495041][ T6255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.983371][T14273] binder: 14258:14273 unknown command 0 [ 1074.983419][T14273] binder: 14258:14273 ioctl c0306201 200000001040 returned -22 [ 1076.206112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.629223][T13943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.702938][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.173326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.705125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.943832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.499422][T13943] veth0_vlan: entered promiscuous mode [ 1079.550958][T13943] veth1_vlan: entered promiscuous mode [ 1079.703896][T13943] veth0_macvtap: entered promiscuous mode [ 1079.715810][T13943] veth1_macvtap: entered promiscuous mode [ 1079.804135][T13943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.825714][T13943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.943109][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.016591][ T3546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.017828][ T3546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.018416][ T3546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.018683][ T3546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.467278][T14327] binder: BINDER_SET_CONTEXT_MGR already set [ 1080.467323][T14327] binder: 14318:14327 ioctl 4018620d 200000000040 returned -16 [ 1080.468836][T14327] binder: 14318:14327 unknown command 0 [ 1080.468892][T14327] binder: 14318:14327 ioctl c0306201 200000001040 returned -22 [ 1080.472077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.634749][T12022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.634774][T12022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.635088][T12022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.635103][T12022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.690095][ T990] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1084.850144][ T990] usb 5-1: Using ep0 maxpacket: 8 [ 1084.852278][ T990] usb 5-1: config 0 has an invalid interface number: 242 but max is 3 [ 1084.852304][ T990] usb 5-1: config 0 has an invalid interface number: 188 but max is 3 [ 1084.852324][ T990] usb 5-1: config 0 has an invalid interface number: 184 but max is 3 [ 1084.852344][ T990] usb 5-1: config 0 has an invalid interface number: 146 but max is 3 [ 1084.852363][ T990] usb 5-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 1084.852384][ T990] usb 5-1: config 0 has no interface number 1 [ 1084.852400][ T990] usb 5-1: config 0 has no interface number 2 [ 1084.852416][ T990] usb 5-1: config 0 has no interface number 3 [ 1084.852432][ T990] usb 5-1: config 0 has no interface number 4 [ 1084.852515][ T990] usb 5-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 1084.852559][ T990] usb 5-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 1084.852588][ T990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1084.852666][ T990] usb 5-1: config 0 interface 242 has no altsetting 0 [ 1084.852685][ T990] usb 5-1: config 0 interface 188 has no altsetting 0 [ 1084.852703][ T990] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1084.852722][ T990] usb 5-1: config 0 interface 146 has no altsetting 0 [ 1084.852756][ T990] usb 5-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 1084.852780][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.022697][ T990] usb 5-1: config 0 descriptor?? [ 1085.230805][T14357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.231431][T14357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.024928][T14374] binder: BINDER_SET_CONTEXT_MGR already set [ 1086.024971][T14374] binder: 14370:14374 ioctl 4018620d 200000000040 returned -16 [ 1086.026506][T14374] binder: 14370:14374 unknown command 0 [ 1086.026560][T14374] binder: 14370:14374 ioctl c0306201 200000001040 returned -22 [ 1086.665215][T14375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1086.730834][T14377] bond_slave_0: entered promiscuous mode [ 1086.730897][T14377] bond_slave_1: entered promiscuous mode [ 1086.731690][T14377] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1086.738156][T14377] bond1: (slave macvlan2): making interface the new active one [ 1086.784551][ T9307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1086.805799][ T9307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1086.823065][ T9307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1086.827956][ T9307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1086.847311][ T9307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1086.873926][T14377] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1087.260001][ T990] usb 5-1: string descriptor 0 read error: -71 [ 1087.320505][ T990] usb 5-1: unknown number of interfaces: 5 [ 1087.485097][ T990] usb 5-1: USB disconnect, device number 25 [ 1088.950166][ T9307] Bluetooth: hci5: command tx timeout [ 1090.380665][T14404] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1090.456376][T14404] VFS: Can't find a romfs filesystem on dev nullb0. [ 1090.456376][T14404] [ 1091.443917][ T9307] Bluetooth: hci5: command tx timeout [ 1091.705889][ T5878] IPVS: starting estimator thread 0... [ 1091.800355][T14411] IPVS: using max 9 ests per chain, 21600 per kthread [ 1092.551224][T14420] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2521'. [ 1093.510036][ T9307] Bluetooth: hci5: command tx timeout [ 1093.610592][ T5878] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1093.724724][T14378] chnl_net:caif_netlink_parms(): no params data found [ 1093.770015][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 1093.773277][ T5878] usb 5-1: config 0 has an invalid interface number: 242 but max is 3 [ 1093.773303][ T5878] usb 5-1: config 0 has an invalid interface number: 188 but max is 3 [ 1093.773323][ T5878] usb 5-1: config 0 has an invalid interface number: 184 but max is 3 [ 1093.773344][ T5878] usb 5-1: config 0 has an invalid interface number: 146 but max is 3 [ 1093.773365][ T5878] usb 5-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 1093.773386][ T5878] usb 5-1: config 0 has no interface number 1 [ 1093.773403][ T5878] usb 5-1: config 0 has no interface number 2 [ 1093.773420][ T5878] usb 5-1: config 0 has no interface number 3 [ 1093.773436][ T5878] usb 5-1: config 0 has no interface number 4 [ 1093.773525][ T5878] usb 5-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 1093.773607][ T5878] usb 5-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 1093.773635][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1093.773654][ T5878] usb 5-1: config 0 interface 242 has no altsetting 0 [ 1093.773672][ T5878] usb 5-1: config 0 interface 188 has no altsetting 0 [ 1093.773691][ T5878] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1093.773710][ T5878] usb 5-1: config 0 interface 146 has no altsetting 0 [ 1093.773746][ T5878] usb 5-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 1093.773779][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.958439][ T5878] usb 5-1: config 0 descriptor?? [ 1094.166175][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.166787][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.598045][ T9307] Bluetooth: hci5: command tx timeout [ 1095.959344][ T5878] usb 5-1: string descriptor 0 read error: -71 [ 1096.034990][ T5878] usb 5-1: unknown number of interfaces: 5 [ 1096.303968][ T5878] usb 5-1: USB disconnect, device number 26 [ 1098.135422][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2534'. [ 1098.152765][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.053716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.108338][T14471] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2537'. [ 1099.110251][ T5892] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1099.270413][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 1099.276150][ T5892] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1099.276179][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.276199][ T5892] usb 2-1: Product: syz [ 1099.276213][ T5892] usb 2-1: Manufacturer: syz [ 1099.276227][ T5892] usb 2-1: SerialNumber: syz [ 1099.329810][ T5892] usb 2-1: config 0 descriptor?? [ 1099.348493][ T5892] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1099.348557][ T5892] usb 2-1: setting power ON [ 1099.365820][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 1099.386277][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1099.387302][ T5892] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1099.387368][ T5892] usb 2-1: media controller created [ 1099.473363][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1099.570965][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.662152][T14463] dvb-usb: bulk message failed: -22 (3/0) [ 1099.662245][T14463] dvb-usb: bulk message failed: -22 (7/0) [ 1099.668012][T14463] dvb-usb: bulk message failed: -22 (3/0) [ 1100.216864][T12052] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1100.428353][ T5892] usb 2-1: selecting invalid altsetting 6 [ 1100.428379][ T5892] usb 2-1: digital interface selection failed (-22) [ 1100.428396][ T5892] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1100.453324][ T5892] usb 2-1: setting power OFF [ 1100.453642][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 1100.453663][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1100.453674][ T5892] (NULL device *): no alternate interface [ 1100.469029][T14467] hsr0: entered promiscuous mode [ 1100.469491][T14467] macvlan3: entered allmulticast mode [ 1100.469509][T14467] hsr0: entered allmulticast mode [ 1100.469525][T14467] hsr_slave_0: entered allmulticast mode [ 1100.469547][T14467] hsr_slave_1: entered allmulticast mode [ 1100.550055][T12052] usb 5-1: Using ep0 maxpacket: 8 [ 1100.551967][T12052] usb 5-1: config 0 has an invalid interface number: 242 but max is 3 [ 1100.551993][T12052] usb 5-1: config 0 has an invalid interface number: 188 but max is 3 [ 1100.552012][T12052] usb 5-1: config 0 has an invalid interface number: 184 but max is 3 [ 1100.552032][T12052] usb 5-1: config 0 has an invalid interface number: 146 but max is 3 [ 1100.552051][T12052] usb 5-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 1100.552071][T12052] usb 5-1: config 0 has no interface number 1 [ 1100.552086][T12052] usb 5-1: config 0 has no interface number 2 [ 1100.552102][T12052] usb 5-1: config 0 has no interface number 3 [ 1100.552119][T12052] usb 5-1: config 0 has no interface number 4 [ 1100.552224][T12052] usb 5-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 1100.552270][T12052] usb 5-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 1100.552300][T12052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1100.552319][T12052] usb 5-1: config 0 interface 242 has no altsetting 0 [ 1100.552338][T12052] usb 5-1: config 0 interface 188 has no altsetting 0 [ 1100.552357][T12052] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1100.552375][T12052] usb 5-1: config 0 interface 146 has no altsetting 0 [ 1100.552409][T12052] usb 5-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 1100.552431][T12052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.701287][T12052] usb 5-1: config 0 descriptor?? [ 1100.805225][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1100.828506][ T5892] usb 2-1: USB disconnect, device number 20 [ 1100.853156][T13775] udevd[13775]: setting owner of /dev/bus/usb/002/020 to uid=0, gid=0 failed: No such file or directory [ 1100.914357][T14474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.915854][T14474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.085210][T14378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.085359][T14378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.085651][T14378] bridge_slave_0: entered allmulticast mode [ 1101.094338][T14378] bridge_slave_0: entered promiscuous mode [ 1101.111572][T14378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.111831][T14378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.112087][T14378] bridge_slave_1: entered allmulticast mode [ 1101.117941][T14378] bridge_slave_1: entered promiscuous mode [ 1101.277903][T14484] kvm: pic: non byte read [ 1101.286449][T14484] kvm: pic: non byte read [ 1101.287021][T14484] kvm: pic: level sensitive irq not supported [ 1101.287087][T14484] kvm: pic: non byte read [ 1101.296820][T14484] kvm: pic: level sensitive irq not supported [ 1101.296909][T14484] kvm: pic: non byte read [ 1101.297272][T14484] kvm: pic: non byte read [ 1101.306413][T14484] kvm: pic: single mode not supported [ 1101.306534][T14484] kvm: pic: non byte read [ 1101.306922][T14484] kvm: pic: non byte read [ 1101.312862][T14484] kvm: pic: non byte read [ 1101.313240][T14484] kvm: pic: non byte read [ 1101.451445][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.529266][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.143227][T12052] usb 5-1: string descriptor 0 read error: -71 [ 1103.195411][T12052] usb 5-1: unknown number of interfaces: 5 [ 1103.225672][T12052] usb 5-1: USB disconnect, device number 27 [ 1103.445836][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.528713][T14378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.546391][T14378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.854164][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.991534][ T5878] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1104.106993][T14378] team0: Port device team_slave_0 added [ 1104.140157][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 1104.142806][ T5878] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1104.142834][ T5878] usb 5-1: config 0 has no interface number 0 [ 1104.142884][ T5878] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1104.146211][ T5878] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1104.146238][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.146259][ T5878] usb 5-1: Product: syz [ 1104.146272][ T5878] usb 5-1: Manufacturer: syz [ 1104.146287][ T5878] usb 5-1: SerialNumber: syz [ 1104.240299][ T5878] usb 5-1: config 0 descriptor?? [ 1104.243948][T14520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1104.401474][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.452953][T14520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1104.503938][T14378] team0: Port device team_slave_1 added [ 1105.951082][T14378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.951105][T14378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.951137][T14378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.955854][T14378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.955868][T14378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.955892][T14378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.063195][ T5878] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1106.063494][ T5878] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1106.094079][ T5878] usb 5-1: USB disconnect, device number 28 [ 1106.343019][T14378] hsr_slave_0: entered promiscuous mode [ 1106.346646][T14378] hsr_slave_1: entered promiscuous mode [ 1106.347648][T14378] debugfs: 'hsr0' already exists in 'hsr' [ 1106.347673][T14378] Cannot create hsr debugfs directory [ 1106.924281][T14552] netlink: 'syz.6.2567': attribute type 4 has an invalid length. [ 1106.958013][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.663685][T14570] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1108.663715][T14570] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1108.663943][T14570] vhci_hcd vhci_hcd.0: Device attached [ 1108.900083][ T5814] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 1109.104508][T14575] vhci_hcd: connection reset by peer [ 1109.109747][ T3523] vhci_hcd: stop threads [ 1109.109766][ T3523] vhci_hcd: release socket [ 1109.109842][ T3523] vhci_hcd: disconnect device [ 1110.457035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.574900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.686135][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.692566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.456830][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.499389][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.784020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1114.040106][ T5814] vhci_hcd: vhci_device speed not set [ 1114.761048][T14626] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1114.762368][T14626] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1114.827887][T14626] vhci_hcd vhci_hcd.0: Device attached [ 1114.934320][T14633] vhci_hcd: connection closed [ 1114.935836][ T3627] vhci_hcd: stop threads [ 1114.935864][ T3627] vhci_hcd: release socket [ 1114.936108][ T3627] vhci_hcd: disconnect device [ 1115.000186][ T5814] vhci_hcd: vhci_device speed not set [ 1115.043675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1116.333054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1116.510583][ T12] dvmrp8 (unregistering): left allmulticast mode [ 1116.694292][ C0] vkms_vblank_simulate: vblank timer overrun [ 1117.235946][ C0] vkms_vblank_simulate: vblank timer overrun [ 1118.235878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1118.621064][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.253899][T14673] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.253915][T14673] binder: 14670:14673 ioctl 4018620d 200000000040 returned -16 [ 1119.254493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.254643][T14673] binder: 14670:14673 unknown command 0 [ 1119.254662][T14673] binder: 14670:14673 ioctl c0306201 200000001040 returned -22 [ 1119.504921][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.744514][T14687] netlink: 'syz.4.2612': attribute type 4 has an invalid length. [ 1119.812226][T14688] netlink: 'syz.4.2612': attribute type 4 has an invalid length. [ 1120.652215][T14695] input: syz1 as /devices/virtual/input/input21 [ 1121.063481][ T12] bond0 (unregistering): Released all slaves [ 1121.115426][T14700] PID 14700 killed due to inadequate hugepage pool [ 1121.824835][T14714] binder: BINDER_SET_CONTEXT_MGR already set [ 1121.824877][T14714] binder: 14711:14714 ioctl 4018620d 200000000040 returned -16 [ 1121.827726][T14714] binder: 14711:14714 unknown command 0 [ 1121.827772][T14714] binder: 14711:14714 ioctl c0306201 200000001040 returned -22 [ 1124.170931][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1124.190902][ T12] bond1 (unregistering): Released all slaves [ 1124.965815][ T12] bond2 (unregistering): Released all slaves [ 1125.886456][T14747] binder: BINDER_SET_CONTEXT_MGR already set [ 1125.886498][T14747] binder: 14737:14747 ioctl 4018620d 200000000040 returned -16 [ 1125.888995][T14747] binder: 14737:14747 unknown command 0 [ 1125.889073][T14747] binder: 14737:14747 ioctl c0306201 200000001040 returned -22 [ 1126.709634][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.709718][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.741493][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1126.914152][ T9] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 1126.914181][ T9] usb 6-1: config 0 has no interface number 1 [ 1126.914242][ T9] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1126.914275][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.432411][ T9] usb 6-1: config 0 descriptor?? [ 1127.447269][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1127.466007][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 1127.626415][ T5814] IPVS: starting estimator thread 0... [ 1128.272286][T14777] IPVS: using max 7 ests per chain, 16800 per kthread [ 1128.386264][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1128.397177][ T9] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 1128.412582][ T9] usb 6-1: USB disconnect, device number 10 [ 1128.536899][T13798] udevd[13798]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1128.625927][T14772] netlink: 'syz.1.2641': attribute type 12 has an invalid length. [ 1129.217124][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.429507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.675036][T14811] binder: BINDER_SET_CONTEXT_MGR already set [ 1129.675053][T14811] binder: 14797:14811 ioctl 4018620d 200000000040 returned -16 [ 1129.675838][T14811] binder: 14797:14811 unknown command 0 [ 1129.675855][T14811] binder: 14797:14811 ioctl c0306201 200000001040 returned -22 [ 1129.810796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.998288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.374282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.648361][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2655'. [ 1130.732919][T14827] binder: 14817:14827 unknown command 0 [ 1130.732940][T14827] binder: 14817:14827 ioctl c0306201 200000001040 returned -22 [ 1131.210129][ T5878] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1131.360069][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 1131.366086][ T5878] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 1131.366115][ T5878] usb 6-1: config 0 has no interface number 0 [ 1131.366165][ T5878] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1131.366190][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.434284][ T5878] usb 6-1: config 0 descriptor?? [ 1131.720128][T12052] usb 6-1: USB disconnect, device number 11 [ 1131.905270][ T5878] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1132.124736][T14847] binder: BINDER_SET_CONTEXT_MGR already set [ 1132.124778][T14847] binder: 14842:14847 ioctl 4018620d 200000000040 returned -16 [ 1132.127266][T14847] binder: 14842:14847 unknown command 0 [ 1132.127344][T14847] binder: 14842:14847 ioctl c0306201 200000001040 returned -22 [ 1132.524055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.648192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.654831][ T5878] usb 5-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1132.654870][ T5878] usb 5-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1132.654899][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1132.654934][ T5878] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1132.654958][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.664415][ T5878] usb 5-1: config 0 descriptor?? [ 1132.665625][T14840] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1133.140769][ T5878] itetech 0003:06CB:73F5.000F: hidraw0: USB HID vff.ed Device [HID 06cb:73f5] on usb-dummy_hcd.4-1/input0 [ 1133.163207][ T12] hsr_slave_0: left promiscuous mode [ 1133.211585][ T12] hsr_slave_1: left promiscuous mode [ 1133.292358][ T5878] usb 5-1: USB disconnect, device number 29 [ 1133.541810][T14861] fido_id[14861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1133.624015][ T12] veth1_macvtap: left promiscuous mode [ 1133.624130][ T12] veth0_macvtap: left promiscuous mode [ 1133.624403][ T12] veth1_vlan: left promiscuous mode [ 1133.624587][ T12] veth0_vlan: left promiscuous mode [ 1135.002028][T12052] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1135.200031][T12052] usb 5-1: Using ep0 maxpacket: 32 [ 1135.203442][T12052] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 1135.203470][T12052] usb 5-1: config 0 has no interface number 0 [ 1135.203506][T12052] usb 5-1: config 0 interface 164 has no altsetting 0 [ 1135.243564][T12052] usb 5-1: New USB device found, idVendor=045e, idProduct=0448, bcdDevice=fb.fc [ 1135.243595][T12052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.243616][T12052] usb 5-1: Product: syz [ 1135.243632][T12052] usb 5-1: Manufacturer: syz [ 1135.243647][T12052] usb 5-1: SerialNumber: syz [ 1135.293826][T12052] usb 5-1: config 0 descriptor?? [ 1135.505486][T12052] usb 5-1: USB disconnect, device number 30 [ 1137.644449][T14896] binder: BINDER_SET_CONTEXT_MGR already set [ 1137.644493][T14896] binder: 14893:14896 ioctl 4018620d 200000000040 returned -16 [ 1137.647055][T14896] binder: 14893:14896 unknown command 0 [ 1137.647099][T14896] binder: 14893:14896 ioctl c0306201 200000001040 returned -22 [ 1141.541410][T14924] binder: BINDER_SET_CONTEXT_MGR already set [ 1141.541455][T14924] binder: 14921:14924 ioctl 4018620d 200000000040 returned -16 [ 1141.543952][T14924] binder: 14921:14924 unknown command 0 [ 1141.543996][T14924] binder: 14921:14924 ioctl c0306201 200000001040 returned -22 [ 1144.379550][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1144.395058][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1144.398220][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1144.399634][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1144.450407][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1145.091329][T14851] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2663'. [ 1145.091356][T14851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2663'. [ 1145.091371][T14851] tipc: MTU too low for tipc bearer [ 1146.605751][ T5807] Bluetooth: hci4: command tx timeout [ 1146.881405][T14962] binder: BINDER_SET_CONTEXT_MGR already set [ 1146.881453][T14962] binder: 14953:14962 ioctl 4018620d 200000000040 returned -16 [ 1146.883972][T14962] binder: 14953:14962 unknown command 0 [ 1146.884015][T14962] binder: 14953:14962 ioctl c0306201 200000001040 returned -22 [ 1149.518526][ T5807] Bluetooth: hci4: command tx timeout [ 1150.721012][T15001] binder: BINDER_SET_CONTEXT_MGR already set [ 1150.721028][T15001] binder: 14990:15001 ioctl 4018620d 200000000040 returned -16 [ 1150.721875][T15001] binder: 14990:15001 unknown command 0 [ 1150.721893][T15001] binder: 14990:15001 ioctl c0306201 200000001040 returned -22 [ 1151.636912][ T5807] Bluetooth: hci4: command tx timeout [ 1152.537487][T14933] chnl_net:caif_netlink_parms(): no params data found [ 1153.670141][ T5807] Bluetooth: hci4: command tx timeout [ 1154.230219][ T31] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1154.320227][ T5814] Process accounting resumed [ 1155.434436][ T31] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1155.434469][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.459736][ T31] usb 7-1: config 0 descriptor?? [ 1155.573421][T15072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.609729][T14933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.610281][T14933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.611813][T14933] bridge_slave_0: entered allmulticast mode [ 1155.633460][T14933] bridge_slave_0: entered promiscuous mode [ 1156.512682][T14933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.512876][T14933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.518521][T14933] bridge_slave_1: entered allmulticast mode [ 1156.587458][T14933] bridge_slave_1: entered promiscuous mode [ 1157.496647][T14933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.528176][T14933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.549050][ T31] pegasus 7-1:0.0: can't reset MAC [ 1157.549410][ T31] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 1157.641762][ T31] usb 7-1: USB disconnect, device number 13 [ 1159.611814][ T9] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1159.764877][ T9] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1159.764927][ T9] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1159.764955][ T9] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1159.766331][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1159.766356][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1159.766375][ T9] usb 7-1: SerialNumber: syz [ 1159.771327][T14933] team0: Port device team_slave_0 added [ 1159.774914][T14933] team0: Port device team_slave_1 added [ 1159.998751][ T9] rndis_host 7-1:253.0: RNDIS init failed, -71 [ 1159.999050][ T9] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71 [ 1160.035350][ T9] usb 7-1: USB disconnect, device number 14 [ 1161.373772][T14933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.373803][T14933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.373832][T14933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.376246][T14933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.376261][T14933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.376290][T14933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.456642][T14933] hsr_slave_0: entered promiscuous mode [ 1163.458010][T14933] hsr_slave_1: entered promiscuous mode [ 1164.257155][ T12] bridge_slave_1: left allmulticast mode [ 1164.257185][ T12] bridge_slave_1: left promiscuous mode [ 1164.257433][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.385715][ T12] bridge_slave_0: left allmulticast mode [ 1164.385760][ T12] bridge_slave_0: left promiscuous mode [ 1164.386154][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.416922][T15173] syz.4.2773(15173): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1164.650224][T12052] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1164.803968][T12052] usb 2-1: Using ep0 maxpacket: 32 [ 1164.847933][T12052] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1164.852085][T12052] usb 2-1: config 2 has an invalid interface number: 204 but max is 0 [ 1164.852120][T12052] usb 2-1: config 2 has no interface number 0 [ 1164.852169][T12052] usb 2-1: config 2 interface 204 altsetting 15 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1164.852194][T12052] usb 2-1: config 2 interface 204 has no altsetting 0 [ 1164.859176][T12052] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=91.f9 [ 1164.859205][T12052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.859227][T12052] usb 2-1: Product: syz [ 1164.859242][T12052] usb 2-1: Manufacturer: syz [ 1164.859258][T12052] usb 2-1: SerialNumber: syz [ 1166.106887][T12052] ir_toy 2-1:2.204: required endpoints not found [ 1166.147418][T12052] usb 2-1: USB disconnect, device number 21 [ 1167.138380][T15214] netlink: 'syz.4.2780': attribute type 6 has an invalid length. [ 1167.263571][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.400778][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.474692][ T12] bond0 (unregistering): Released all slaves [ 1169.350055][ T9307] Bluetooth: hci3: command 0x0406 tx timeout [ 1171.045685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.078579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.442390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.746670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.688919][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.460057][ T12] hsr_slave_0: left promiscuous mode [ 1173.691288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.758925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.789610][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.160778][ T12] hsr_slave_1: left promiscuous mode [ 1174.323472][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.518292][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.485992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.544070][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.643668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.765901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.815018][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.860776][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1175.891899][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.000845][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1176.033956][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.132450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.181081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.241374][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.355046][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.565163][T15295] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2809'. [ 1176.565194][T15295] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2809'. [ 1176.928593][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.063274][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.231016][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.492855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.554412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.943580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.603066][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.235259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.799538][T15339] netlink: 'syz.4.2824': attribute type 36 has an invalid length. [ 1184.064867][T14933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1184.114852][T14933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1184.171417][T14933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1184.332672][T14933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1185.045998][T14933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.070098][T12052] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1185.132539][T14933] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.199401][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.207694][ T1414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.230236][T12052] usb 6-1: Using ep0 maxpacket: 16 [ 1185.233838][T12052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1185.238053][T12052] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1185.238082][T12052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.238103][T12052] usb 6-1: Product: syz [ 1185.238117][T12052] usb 6-1: Manufacturer: syz [ 1185.238150][T12052] usb 6-1: SerialNumber: syz [ 1185.308049][T12052] usb 6-1: config 0 descriptor?? [ 1185.332934][T12052] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1185.365994][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.366267][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.601853][ T3523] usb 6-1: Failed to submit usb control message: -110 [ 1186.601896][ T3523] usb 6-1: unable to send the bmi data to the device: -110 [ 1186.601916][ T3523] usb 6-1: unable to get target info from device [ 1186.601945][ T3523] usb 6-1: could not get target info (-110) [ 1186.602401][ T3523] usb 6-1: could not probe fw (-110) [ 1187.215345][ T990] usb 6-1: USB disconnect, device number 12 [ 1187.971283][T14933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.088551][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.088625][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.117062][T15462] loop7: detected capacity change from 0 to 7 [ 1188.229473][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.229650][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.348653][T15463] Invalid logical block size (6) [ 1188.358844][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.358877][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.359710][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.359744][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.420741][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.420783][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.469131][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.469171][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.495744][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.495784][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.511948][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.511992][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.532478][T15462] ldm_validate_partition_table(): Disk read failed. [ 1188.533197][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.533235][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.556303][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.556354][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.557722][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1188.557763][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.562172][T15462] Dev loop7: unable to read RDB block 0 [ 1188.607720][T15462] loop7: unable to read partition table [ 1188.607967][T15462] loop7: partition table beyond EOD, truncated [ 1188.608006][T15462] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1188.677034][T14933] veth0_vlan: entered promiscuous mode [ 1188.715446][T14933] veth1_vlan: entered promiscuous mode [ 1188.968636][T14933] veth0_macvtap: entered promiscuous mode [ 1189.002012][T14933] veth1_macvtap: entered promiscuous mode [ 1189.156926][T14933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.849303][T14933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.093781][ T3546] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.094272][ T3546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.094316][ T3546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.094355][ T3546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.530115][ T5814] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1191.693716][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 1191.696530][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.696564][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.696588][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1191.696632][ T5814] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1191.696656][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.107024][T15495] binder: BINDER_SET_CONTEXT_MGR already set [ 1192.107039][T15495] binder: 15492:15495 ioctl 4018620d 200000000040 returned -16 [ 1192.107722][T15495] binder: 15492:15495 unknown command 0 [ 1192.107739][T15495] binder: 15492:15495 ioctl c0306201 200000001040 returned -22 [ 1192.448599][ T5814] usb 2-1: config 0 descriptor?? [ 1192.814381][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.814403][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.936836][ T6255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.936859][ T6255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.983411][T15499] netlink: 'syz.4.2859': attribute type 4 has an invalid length. [ 1192.983434][T15499] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2859'. [ 1193.134732][ T5814] microsoft 0003:045E:07DA.0010: unbalanced collection at end of report description [ 1193.135499][ T5814] microsoft 0003:045E:07DA.0010: parse failed [ 1193.135595][ T5814] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 1193.654757][T12052] usb 2-1: USB disconnect, device number 22 [ 1198.131036][ T5878] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1198.211485][T15533] sp0: Synchronizing with TNC [ 1198.285994][T15539] Unknown status report in ack skb [ 1198.461294][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 1198.537890][ T5878] usb 5-1: device descriptor read/all, error -71 [ 1198.766554][T15548] fuse: Bad value for 'fd' [ 1200.457578][T15569] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2881'. [ 1201.701734][ T5878] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1202.380001][ T5814] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1202.420202][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 1202.425655][ T5878] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1202.425682][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.425701][ T5878] usb 5-1: config 0 has no interface number 0 [ 1202.428285][ T5878] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1202.428322][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.428342][ T5878] usb 5-1: Product: syz [ 1202.428356][ T5878] usb 5-1: Manufacturer: syz [ 1202.428371][ T5878] usb 5-1: SerialNumber: syz [ 1202.455017][ T5878] usb 5-1: config 0 descriptor?? [ 1202.520271][ T5878] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1202.520307][ T5878] uvcvideo 5-1:0.105: No valid video chain found. [ 1202.560717][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 1202.562766][ T5814] usb 2-1: config 0 has an invalid interface number: 242 but max is 3 [ 1202.562792][ T5814] usb 2-1: config 0 has an invalid interface number: 188 but max is 3 [ 1202.562813][ T5814] usb 2-1: config 0 has an invalid interface number: 184 but max is 3 [ 1202.562835][ T5814] usb 2-1: config 0 has an invalid interface number: 146 but max is 3 [ 1202.562856][ T5814] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 1202.562878][ T5814] usb 2-1: config 0 has no interface number 1 [ 1202.562894][ T5814] usb 2-1: config 0 has no interface number 2 [ 1202.562912][ T5814] usb 2-1: config 0 has no interface number 3 [ 1202.562928][ T5814] usb 2-1: config 0 has no interface number 4 [ 1202.563018][ T5814] usb 2-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 1202.563058][ T5814] usb 2-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 1202.563087][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1202.563113][ T5814] usb 2-1: config 0 interface 242 has no altsetting 0 [ 1202.563132][ T5814] usb 2-1: config 0 interface 188 has no altsetting 0 [ 1202.563151][ T5814] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1202.563170][ T5814] usb 2-1: config 0 interface 146 has no altsetting 0 [ 1202.563205][ T5814] usb 2-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 1202.563228][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.619984][T12052] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1202.619996][ T990] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1202.737121][ T5878] usb 5-1: USB disconnect, device number 33 [ 1202.752573][ T5814] usb 2-1: config 0 descriptor?? [ 1202.781384][T12052] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1202.781414][T12052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.830063][T12052] usb 1-1: config 0 descriptor?? [ 1202.835948][T12052] cp210x 1-1:0.0: cp210x converter detected [ 1202.854210][ T990] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1202.854238][ T990] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1202.854258][ T990] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.854513][ T990] usb 7-1: config 220 has no interface number 2 [ 1202.854592][ T990] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1202.854842][ T990] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1202.854863][ T990] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1202.854883][ T990] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1202.939263][ T990] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1202.939515][ T990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.939539][ T990] usb 7-1: Product: syz [ 1202.939555][ T990] usb 7-1: Manufacturer: syz [ 1202.939571][ T990] usb 7-1: SerialNumber: syz [ 1202.964046][T15579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.964669][T15579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.254297][T12052] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1203.254981][T12052] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1203.255005][T12052] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1203.312291][ T990] usb 7-1: selecting invalid altsetting 0 [ 1203.338068][ T990] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1203.338103][ T990] uvcvideo 7-1:220.0: No valid video chain found. [ 1203.435316][T12052] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1203.478373][ T990] usb 7-1: selecting invalid altsetting 0 [ 1203.479403][ T990] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1203.506065][T12052] usb 1-1: USB disconnect, device number 36 [ 1203.549246][ T990] usb 7-1: USB disconnect, device number 15 [ 1203.648212][T12052] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1203.650946][T12052] cp210x 1-1:0.0: device disconnected [ 1203.915595][T15590] fuse: Bad value for 'fd' [ 1204.731425][ T5814] usb 2-1: string descriptor 0 read error: -71 [ 1204.773540][ T5814] usb 2-1: unknown number of interfaces: 5 [ 1204.810638][ T5814] usb 2-1: USB disconnect, device number 23 [ 1206.655332][T15602] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1206.655377][T15602] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1206.655629][T15602] vhci_hcd vhci_hcd.0: Device attached [ 1206.966812][T15607] vhci_hcd: connection closed [ 1206.968679][ T12] vhci_hcd: stop threads [ 1206.968697][ T12] vhci_hcd: release socket [ 1206.992816][ T12] vhci_hcd: disconnect device [ 1207.000580][T12052] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 1207.000841][T12052] usb 33-1: enqueue for inactive port 0 [ 1208.155625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1208.177297][T12052] vhci_hcd: vhci_device speed not set [ 1208.508246][ C0] vkms_vblank_simulate: vblank timer overrun [ 1208.888836][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.285482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.488210][T15633] fuse: Bad value for 'fd' [ 1211.006086][ C0] vkms_vblank_simulate: vblank timer overrun [ 1211.033541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1211.160403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1211.790044][T12052] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1212.230319][T12052] usb 2-1: Using ep0 maxpacket: 8 [ 1212.232741][T12052] usb 2-1: config 0 has an invalid interface number: 242 but max is 3 [ 1212.232767][T12052] usb 2-1: config 0 has an invalid interface number: 188 but max is 3 [ 1212.232787][T12052] usb 2-1: config 0 has an invalid interface number: 184 but max is 3 [ 1212.232807][T12052] usb 2-1: config 0 has an invalid interface number: 146 but max is 3 [ 1212.232826][T12052] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 1212.232846][T12052] usb 2-1: config 0 has no interface number 1 [ 1212.232862][T12052] usb 2-1: config 0 has no interface number 2 [ 1212.232878][T12052] usb 2-1: config 0 has no interface number 3 [ 1212.232894][T12052] usb 2-1: config 0 has no interface number 4 [ 1212.232980][T12052] usb 2-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 1212.233020][T12052] usb 2-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 1212.233048][T12052] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1212.233066][T12052] usb 2-1: config 0 interface 242 has no altsetting 0 [ 1212.233084][T12052] usb 2-1: config 0 interface 188 has no altsetting 0 [ 1212.233102][T12052] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1212.233121][T12052] usb 2-1: config 0 interface 146 has no altsetting 0 [ 1212.233156][T12052] usb 2-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 1212.233180][T12052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.296772][T12052] usb 2-1: config 0 descriptor?? [ 1219.970445][T12052] usb 2-1: string descriptor 0 read error: -71 [ 1220.155850][T12052] usb 2-1: unknown number of interfaces: 5 [ 1220.329198][T15692] cgroup: subsys name conflicts with all [ 1220.329381][T12052] usb 2-1: USB disconnect, device number 24 [ 1220.506612][T15690] fuse: Invalid rootmode [ 1221.068155][ T990] IPVS: starting estimator thread 0... [ 1221.490418][T15700] IPVS: using max 9 ests per chain, 21600 per kthread [ 1221.716515][T15706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.338048][T15744] fuse: Invalid rootmode [ 1224.862212][T15757] binder: 15747:15757 unknown command 0 [ 1224.862273][T15757] binder: 15747:15757 ioctl c0306201 200000001040 returned -22 [ 1225.335273][T15758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2935'. [ 1225.335302][T15758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2935'. [ 1225.335320][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2935'. [ 1226.751594][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1226.873849][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 1226.944895][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1226.976896][ T9] usb 1-1: config 0 has an invalid interface number: 242 but max is 3 [ 1226.976927][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 3 [ 1226.976948][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 3 [ 1226.976968][ T9] usb 1-1: config 0 has an invalid interface number: 146 but max is 3 [ 1226.976990][ T9] usb 1-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 1226.977012][ T9] usb 1-1: config 0 has no interface number 1 [ 1226.977029][ T9] usb 1-1: config 0 has no interface number 2 [ 1226.977046][ T9] usb 1-1: config 0 has no interface number 3 [ 1226.977063][ T9] usb 1-1: config 0 has no interface number 4 [ 1226.977153][ T9] usb 1-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 1226.977198][ T9] usb 1-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 1226.977227][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1226.977258][ T9] usb 1-1: config 0 interface 242 has no altsetting 0 [ 1226.977277][ T9] usb 1-1: config 0 interface 188 has no altsetting 0 [ 1226.977296][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1226.977333][ T9] usb 1-1: config 0 interface 146 has no altsetting 0 [ 1226.977369][ T9] usb 1-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 1226.977394][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.252562][ T9] usb 1-1: config 0 descriptor?? [ 1229.338374][T15792] fuse: Invalid rootmode [ 1230.672567][T15807] binder: 15800:15807 unknown command 0 [ 1230.672677][T15807] binder: 15800:15807 ioctl c0306201 200000001040 returned -22 [ 1231.550011][ T990] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1231.741521][ T990] usb 6-1: Using ep0 maxpacket: 32 [ 1231.812998][ T990] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1231.849247][ T990] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1231.849361][ T990] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 1096, setting to 1024 [ 1231.849442][ T990] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1231.849532][ T990] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1232.553417][ T990] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1232.553452][ T990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.553474][ T990] usb 6-1: Product: syz [ 1232.553489][ T990] usb 6-1: Manufacturer: syz [ 1232.553504][ T990] usb 6-1: SerialNumber: syz [ 1232.619755][T15814] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1232.620059][T15814] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1232.693759][ T9] usb 1-1: can't set config #0, error -110 [ 1233.074161][ T990] usb 6-1: bad CDC descriptors [ 1233.084396][ T990] usb 6-1: USB disconnect, device number 13 [ 1235.329367][ T990] usb 1-1: USB disconnect, device number 37 [ 1235.450329][T15836] fuse: Bad value for 'rootmode' [ 1235.688481][T15837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1235.745662][T15843] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1235.777544][T15843] qnx6: unable to read the first superblock [ 1235.790790][T15841] vlan2: entered allmulticast mode [ 1235.790814][T15841] bond1: entered allmulticast mode [ 1235.790828][T15841] macvlan2: entered allmulticast mode [ 1235.790841][T15841] bond0: entered allmulticast mode [ 1235.790854][T15841] bond_slave_0: entered allmulticast mode [ 1235.790874][T15841] bond_slave_1: entered allmulticast mode [ 1235.794521][T15843] qnx6: unable to read the first superblock [ 1235.794536][T15843] qnx6: unable to read the first superblock [ 1235.970900][T15845] comedi comedi4: bad chanlist[1]=0x000000cf chan=207 range length=2 [ 1237.590098][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1237.739456][T15876] fuse: Bad value for 'rootmode' [ 1237.831995][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1237.832042][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1237.832068][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.851737][ T9] usb 2-1: config 0 descriptor?? [ 1239.027728][ T9] (null): keene_cmd_main failed (-110) [ 1239.140489][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1239.202336][ T9] video4linux radio48: keene_cmd_main failed (-32) [ 1239.202367][ T9] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1239.265522][T15881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1239.320183][T12292] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1239.322944][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1239.322977][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1239.323003][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1239.340022][ T10] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1239.340056][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.340076][ T10] usb 1-1: Product: syz [ 1239.340090][ T10] usb 1-1: Manufacturer: syz [ 1239.340106][ T10] usb 1-1: SerialNumber: syz [ 1239.407344][ T10] usb 1-1: config 0 descriptor?? [ 1239.480364][T12292] usb 5-1: Using ep0 maxpacket: 8 [ 1239.750863][T12292] usb 5-1: config 0 has an invalid interface number: 242 but max is 3 [ 1239.750892][T12292] usb 5-1: config 0 has an invalid interface number: 188 but max is 3 [ 1239.750914][T12292] usb 5-1: config 0 has an invalid interface number: 184 but max is 3 [ 1239.750935][T12292] usb 5-1: config 0 has an invalid interface number: 146 but max is 3 [ 1239.750955][T12292] usb 5-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 1239.750977][T12292] usb 5-1: config 0 has no interface number 1 [ 1239.750994][T12292] usb 5-1: config 0 has no interface number 2 [ 1239.751010][T12292] usb 5-1: config 0 has no interface number 3 [ 1239.751027][T12292] usb 5-1: config 0 has no interface number 4 [ 1239.751121][T12292] usb 5-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 1239.751162][T12292] usb 5-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 1239.751190][T12292] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1239.751210][T12292] usb 5-1: config 0 interface 242 has no altsetting 0 [ 1239.751229][T12292] usb 5-1: config 0 interface 188 has no altsetting 0 [ 1239.751256][T12292] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1239.751274][T12292] usb 5-1: config 0 interface 146 has no altsetting 0 [ 1239.751309][T12292] usb 5-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 1239.751333][T12292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.939165][T12292] usb 5-1: config 0 descriptor?? [ 1239.971487][ T10] powermate: unknown product id 0240 [ 1239.971506][ T10] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1239.971789][ T10] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 1240.003751][ T10] usb 1-1: USB disconnect, device number 38 [ 1240.152847][T15879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.153425][T15879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.265923][ T9] usb 2-1: USB disconnect, device number 25 [ 1243.450296][T12292] usb 5-1: string descriptor 0 read error: -71 [ 1243.508638][T12292] usb 5-1: unknown number of interfaces: 5 [ 1243.681868][T15917] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1243.916837][T12292] usb 5-1: USB disconnect, device number 34 [ 1245.031278][T15935] binder: BINDER_SET_CONTEXT_MGR already set [ 1245.031322][T15935] binder: 15932:15935 ioctl 4018620d 200000000040 returned -16 [ 1245.033961][T15935] binder: 15932:15935 unknown command 0 [ 1245.034005][T15935] binder: 15932:15935 ioctl c0306201 200000001040 returned -22 [ 1245.889502][T15942] binder: 15936:15942 ioctl c0306201 0 returned -14 [ 1245.930070][T15942] binder: 15936:15942 unknown command 0 [ 1245.930121][T15942] binder: 15936:15942 ioctl c0306201 200000001040 returned -22 [ 1249.304864][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.304941][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.614925][T15987] binder: BINDER_SET_CONTEXT_MGR already set [ 1249.614943][T15987] binder: 15973:15987 ioctl 4018620d 200000000040 returned -16 [ 1249.615776][T15987] binder: 15973:15987 unknown command 0 [ 1249.615793][T15987] binder: 15973:15987 ioctl c0306201 200000001040 returned -22 [ 1250.747760][ T990] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1250.978876][T15991] netlink: 'syz.1.3010': attribute type 2 has an invalid length. [ 1254.751908][ T990] usb 5-1: device descriptor read/64, error -71 [ 1255.190093][ T990] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1255.369967][ T990] usb 5-1: Using ep0 maxpacket: 8 [ 1255.372719][ T990] usb 5-1: config 0 has an invalid interface number: 242 but max is 3 [ 1255.372745][ T990] usb 5-1: config 0 has an invalid interface number: 188 but max is 3 [ 1255.372766][ T990] usb 5-1: config 0 has an invalid interface number: 184 but max is 3 [ 1255.372786][ T990] usb 5-1: config 0 has an invalid interface number: 146 but max is 3 [ 1255.372806][ T990] usb 5-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 1255.372828][ T990] usb 5-1: config 0 has no interface number 1 [ 1255.372844][ T990] usb 5-1: config 0 has no interface number 2 [ 1255.372861][ T990] usb 5-1: config 0 has no interface number 3 [ 1255.372877][ T990] usb 5-1: config 0 has no interface number 4 [ 1255.372966][ T990] usb 5-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30 [ 1255.373009][ T990] usb 5-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 1255.373038][ T990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1255.373056][ T990] usb 5-1: config 0 interface 242 has no altsetting 0 [ 1255.373085][ T990] usb 5-1: config 0 interface 188 has no altsetting 0 [ 1255.373105][ T990] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1255.373123][ T990] usb 5-1: config 0 interface 146 has no altsetting 0 [ 1255.373159][ T990] usb 5-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e [ 1255.373181][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.398748][ T990] usb 5-1: config 0 descriptor?? [ 1255.736873][T16014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.749225][T16014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.401336][T16056] tipc: Started in network mode [ 1257.401371][T16056] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1257.401431][T16056] tipc: Enabling of bearer rejected, failed to enable media [ 1257.511148][ T990] usb 5-1: string descriptor 0 read error: -71 [ 1257.546194][ T990] usb 5-1: unknown number of interfaces: 5 [ 1257.573149][ T990] usb 5-1: USB disconnect, device number 36 [ 1258.135248][T16068] tmpfs: Bad value for 'mpol' [ 1259.267054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.491729][T16087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3044'. [ 1259.738641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.925541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.965378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.910153][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.583864][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.884083][ C0] vkms_vblank_simulate: vblank timer overrun [ 1267.270132][T16129] Bluetooth: hci4: command 0x0406 tx timeout [ 1268.861887][ T5892] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1269.719933][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 1269.722709][ T5892] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1269.722737][ T5892] usb 5-1: config 0 has no interface number 0 [ 1269.722808][ T5892] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1269.722836][ T5892] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1269.722861][ T5892] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1269.725908][ T5892] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1269.725936][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.725959][ T5892] usb 5-1: Product: syz [ 1269.725974][ T5892] usb 5-1: Manufacturer: syz [ 1269.725988][ T5892] usb 5-1: SerialNumber: syz [ 1269.817479][ T5892] usb 5-1: config 0 descriptor?? [ 1269.830241][T16194] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1269.830559][T16194] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1270.036691][ T5892] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1270.078608][ T5892] usb 5-1: USB disconnect, device number 37 [ 1270.082568][T16207] fuse: Unknown parameter 'user_id00000000000000000000' [ 1270.178081][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3088'. [ 1270.315624][T16215] netlink: 3204 bytes leftover after parsing attributes in process `syz.1.3087'. [ 1272.717546][T16241] fuse: Unknown parameter 'user_id00000000000000000000' [ 1273.958547][T16261] binder: BINDER_SET_CONTEXT_MGR already set [ 1273.958589][T16261] binder: 16251:16261 ioctl 4018620d 200000000040 returned -16 [ 1273.961081][T16261] binder: 16251:16261 unknown command 0 [ 1273.961127][T16261] binder: 16251:16261 ioctl c0306201 200000001040 returned -22 [ 1274.501015][T16263] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3107'. [ 1278.948816][T16321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1285.950035][ T5999] IPVS: starting estimator thread 0... [ 1286.050263][T16397] IPVS: using max 7 ests per chain, 16800 per kthread [ 1286.360028][ T5999] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1286.779977][ T5999] usb 1-1: Using ep0 maxpacket: 32 [ 1286.782772][ T5999] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.782801][ T5999] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1286.782823][ T5999] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1286.782849][ T5999] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1286.782884][ T5999] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1286.782906][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.866442][ T5999] usb 1-1: config 0 descriptor?? [ 1287.122546][ T5999] usbhid 1-1:0.0: can't add hid device: -71 [ 1287.122680][ T5999] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1287.153317][ T5999] usb 1-1: USB disconnect, device number 39 [ 1287.481014][T16413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1287.556264][T16416] vlan0: entered promiscuous mode [ 1291.327239][T16457] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3179'. [ 1294.716637][T16517] tipc: Started in network mode [ 1294.716662][T16517] tipc: Node identity ac1414aa, cluster identity 4711 [ 1294.723268][T16517] tipc: Enabled bearer , priority 1 [ 1294.777892][T16517] tipc: Enabled bearer , priority 0 [ 1295.884903][ T9] tipc: Node number set to 2886997162 [ 1300.441408][T16533] overlayfs: missing 'lowerdir' [ 1305.938142][T16613] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.938158][T16613] binder: 16610:16613 ioctl 4018620d 200000000040 returned -16 [ 1305.938894][T16613] binder: 16610:16613 unknown command 0 [ 1305.938911][T16613] binder: 16610:16613 ioctl c0306201 200000001040 returned -22 [ 1306.752302][ T990] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1307.889899][ T990] usb 7-1: Using ep0 maxpacket: 16 [ 1308.020286][ T990] usb 7-1: device descriptor read/all, error -71 [ 1308.141356][T16639] [U] [ 1308.141415][T16639] [U] [ 1308.141458][T16639] [U] [ 1308.141499][T16639] [U] [ 1308.141541][T16639] [U] [ 1308.141584][T16639] [U] [ 1308.141626][T16639] [U] [ 1308.141668][T16639] [U] [ 1308.141749][T16639] [U] [ 1308.141791][T16639] [U] [ 1308.141832][T16639] [U] [ 1308.143335][T16638] [U] [ 1308.660841][ T990] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1309.850052][ T990] usb 7-1: Using ep0 maxpacket: 16 [ 1309.852570][ T990] usb 7-1: config 254 has an invalid interface number: 235 but max is 0 [ 1309.852598][ T990] usb 7-1: config 254 has no interface number 0 [ 1309.852669][ T990] usb 7-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1309.852695][ T990] usb 7-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1309.852723][ T990] usb 7-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 18357, setting to 1024 [ 1309.852751][ T990] usb 7-1: config 254 interface 235 has no altsetting 0 [ 1309.856098][ T990] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1309.856127][ T990] usb 7-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1309.856150][ T990] usb 7-1: Product: syz [ 1309.856164][ T990] usb 7-1: Manufacturer: syz [ 1309.856179][ T990] usb 7-1: SerialNumber: syz [ 1309.874834][T16641] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1309.875030][T16641] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1310.090383][ T990] usbtest 7-1:254.235: couldn't get endpoints, -71 [ 1310.090484][ T990] usbtest 7-1:254.235: probe with driver usbtest failed with error -71 [ 1310.132300][ T990] usb 7-1: USB disconnect, device number 17 [ 1310.711577][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.712176][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1314.040467][ T5892] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1314.202385][ T5892] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1314.202413][ T5892] usb 1-1: config 0 has no interface number 0 [ 1314.202462][ T5892] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1314.205958][ T5892] usb 1-1: New USB device found, idVendor=10cf, idProduct=5501, bcdDevice=97.b8 [ 1314.205986][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.206006][ T5892] usb 1-1: Product: syz [ 1314.206020][ T5892] usb 1-1: Manufacturer: syz [ 1314.206035][ T5892] usb 1-1: SerialNumber: syz [ 1314.258627][ T5892] usb 1-1: config 0 descriptor?? [ 1314.545330][ T5892] vmk80xx 1-1:0.113: driver 'vmk80xx' failed to auto-configure device. [ 1314.609179][ T5892] usb 1-1: USB disconnect, device number 40 [ 1317.155327][T16728] binder: BINDER_SET_CONTEXT_MGR already set [ 1317.155372][T16728] binder: 16723:16728 ioctl 4018620d 200000000040 returned -16 [ 1317.157646][T16728] binder: 16723:16728 unknown command 0 [ 1317.157699][T16728] binder: 16723:16728 ioctl c0306201 200000001040 returned -22 [ 1320.714105][T16779] binder: BINDER_SET_CONTEXT_MGR already set [ 1320.714146][T16779] binder: 16774:16779 ioctl 4018620d 200000000040 returned -16 [ 1320.716524][T16779] binder: 16774:16779 unknown command 0 [ 1320.716568][T16779] binder: 16774:16779 ioctl c0306201 200000001040 returned -22 [ 1322.156038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.696012][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.777230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.810024][T16796] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1323.810054][T16796] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1324.168972][T12052] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1324.637435][T16796] vhci_hcd vhci_hcd.0: Device attached [ 1324.772141][T16803] vhci_hcd: connection reset by peer [ 1324.795127][ T3627] vhci_hcd: stop threads [ 1324.795146][ T3627] vhci_hcd: release socket [ 1324.795223][ T3627] vhci_hcd: disconnect device [ 1325.182818][T16810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1325.202648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.785968][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.816521][T16826] binder: BINDER_SET_CONTEXT_MGR already set [ 1325.816537][T16826] binder: 16816:16826 ioctl 4018620d 200000000040 returned -16 [ 1325.817393][T16826] binder: 16816:16826 ioctl c0306201 0 returned -14 [ 1325.830478][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.102448][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.675085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.905421][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.006998][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.221561][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.349031][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.020773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.381399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.406658][T16858] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1329.450121][T12052] vhci_hcd: vhci_device speed not set [ 1329.983711][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.114534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.405146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.491535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1331.901046][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.195556][T16878] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 1332.195672][T16878] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1332.195751][T16878] vhci_hcd vhci_hcd.0: Device attached [ 1332.356056][T16880] vhci_hcd: connection closed [ 1332.356934][ T1414] vhci_hcd: stop threads [ 1332.356954][ T1414] vhci_hcd: release socket [ 1332.357029][ T1414] vhci_hcd: disconnect device [ 1332.402646][ T990] vhci_hcd: vhci_device speed not set [ 1332.905061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.905835][ T31] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1333.142041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.410770][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1333.826525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.827300][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1333.860676][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.860704][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1333.860744][ T31] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1333.860771][ T31] usb 5-1: config 0 interface 0 has no altsetting 1 [ 1333.866899][ T31] usb 5-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 1333.866929][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.866950][ T31] usb 5-1: Product: syz [ 1333.866965][ T31] usb 5-1: Manufacturer: syz [ 1333.866980][ T31] usb 5-1: SerialNumber: syz [ 1333.976301][ T31] usb 5-1: config 0 descriptor?? [ 1334.022773][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.022807][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.022832][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1334.022874][ T9] usb 1-1: New USB device found, idVendor=0463, idProduct=ffff, bcdDevice= 0.00 [ 1334.022900][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.028343][ T9] usb 1-1: config 0 descriptor?? [ 1334.547686][ T31] usb 5-1: USB disconnect, device number 38 [ 1334.599204][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.599244][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.599274][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.599302][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.599329][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.599358][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.599385][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.599414][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.599442][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.599478][ T9] hid-generic 0003:0463:FFFF.0011: unknown main item tag 0x0 [ 1334.746385][ T9] hid-generic 0003:0463:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 0463:ffff] on usb-dummy_hcd.0-1/input0 [ 1334.956294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.022392][ T9] usb 1-1: USB disconnect, device number 41 [ 1335.258690][T16908] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1335.347041][T16919] fido_id[16919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1335.379958][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.479482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.543740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.737561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.772789][ T38] audit: type=1326 audit(1763605972.829:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.6.3338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f574f6af749 code=0x0 [ 1336.055495][T16938] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1336.055590][T16938] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1336.055706][T16938] vhci_hcd vhci_hcd.0: Device attached [ 1336.369921][ T31] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 1336.801565][T16939] vhci_hcd: connection reset by peer [ 1336.802086][T14274] vhci_hcd: stop threads [ 1336.802102][T14274] vhci_hcd: release socket [ 1336.802174][T14274] vhci_hcd: disconnect device [ 1337.041800][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3346'. [ 1337.192129][T16954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1337.417325][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.292346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.420500][T16962] capability: warning: `syz.5.3350' uses 32-bit capabilities (legacy support in use) [ 1339.591161][T16995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1339.922094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1340.062631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1340.454210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1340.695931][T16999] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1340.695967][T16999] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1340.696058][T16999] vhci_hcd vhci_hcd.0: Device attached [ 1340.939998][T17002] vhci_hcd: connection closed [ 1340.941726][ T6255] vhci_hcd: stop threads [ 1340.941745][ T6255] vhci_hcd: release socket [ 1340.941782][ T6255] vhci_hcd: disconnect device [ 1341.271902][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1341.447748][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1341.461022][ T10] usb 7-1: config 24 has an invalid interface number: 205 but max is 0 [ 1341.461043][ T10] usb 7-1: config 24 has no interface number 0 [ 1341.461079][ T10] usb 7-1: config 24 interface 205 has no altsetting 0 [ 1341.463991][ T10] usb 7-1: New USB device found, idVendor=06a3, idProduct=ff04, bcdDevice=12.e5 [ 1341.464021][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.464041][ T10] usb 7-1: Product: syz [ 1341.464056][ T10] usb 7-1: Manufacturer: syz [ 1341.464071][ T10] usb 7-1: SerialNumber: syz [ 1341.530023][ T31] vhci_hcd: vhci_device speed not set [ 1341.650441][ C1] vkms_vblank_simulate: vblank timer overrun [ 1341.819321][ T10] usb 7-1: USB disconnect, device number 18 [ 1341.877308][T17024] netlink: 'syz.0.3373': attribute type 17 has an invalid length. [ 1342.678437][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.680349][ T10] ================================================================== [ 1342.680364][ T10] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1342.680448][ T10] Read of size 8 at addr ffffc9000dc83008 by task kworker/0:1/10 [ 1342.680466][ T10] [ 1342.680489][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1342.680514][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1342.680528][ T10] Workqueue: usb_hub_wq hub_event [ 1342.680608][ T10] Call Trace: [ 1342.680621][ T10] [ 1342.680631][ T10] dump_stack_lvl+0x189/0x250 [ 1342.680691][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1342.680722][ T10] ? __pfx__printk+0x10/0x10 [ 1342.680752][ T10] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1342.680869][ T10] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1342.680895][ T10] ? __virt_addr_valid+0xdc/0x5c0 [ 1342.680933][ T10] ? __virt_addr_valid+0xdc/0x5c0 [ 1342.680966][ T10] print_report+0xca/0x240 [ 1342.680996][ T10] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1342.681022][ T10] kasan_report+0x118/0x150 [ 1342.681079][ T10] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1342.681111][ T10] __list_del_entry_valid_or_report+0xb5/0x190 [ 1342.681140][ T10] kcov_remote_start+0x2b0/0x6f0 [ 1342.681173][ T10] hub_event+0x158/0x4a20 [ 1342.681196][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 1342.681266][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1342.681298][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1342.681330][ T10] ? __lock_acquire+0xab9/0xd20 [ 1342.681367][ T10] ? do_raw_spin_lock+0x121/0x290 [ 1342.681390][ T10] ? look_up_lock_class+0x74/0x170 [ 1342.681422][ T10] ? register_lock_class+0x51/0x320 [ 1342.681453][ T10] ? __lock_acquire+0xab9/0xd20 [ 1342.681486][ T10] ? __pfx_hub_event+0x10/0x10 [ 1342.681509][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 1342.681549][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 1342.681579][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 1342.681605][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 1342.681632][ T10] process_scheduled_works+0xae1/0x17b0 [ 1342.681674][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1342.681710][ T10] worker_thread+0x8a0/0xda0 [ 1342.681738][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1342.681774][ T10] ? __kthread_parkme+0x7b/0x200 [ 1342.681813][ T10] kthread+0x711/0x8a0 [ 1342.681846][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1342.681872][ T10] ? __pfx_kthread+0x10/0x10 [ 1342.681901][ T10] ? rt_spin_unlock+0x150/0x200 [ 1342.681929][ T10] ? rt_spin_unlock+0x161/0x200 [ 1342.681952][ T10] ? __pfx_kthread+0x10/0x10 [ 1342.681984][ T10] ret_from_fork+0x4bc/0x870 [ 1342.682017][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1342.682046][ T10] ? __switch_to_asm+0x39/0x70 [ 1342.682066][ T10] ? __switch_to_asm+0x33/0x70 [ 1342.682087][ T10] ? __pfx_kthread+0x10/0x10 [ 1342.682118][ T10] ret_from_fork_asm+0x1a/0x30 [ 1342.682149][ T10] [ 1342.682157][ T10] [ 1342.682162][ T10] The buggy address belongs to a vmalloc virtual mapping [ 1342.682181][ T10] Memory state around the buggy address: [ 1342.682197][ T10] ffffc9000dc82f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1342.682212][ T10] ffffc9000dc82f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1342.682227][ T10] >ffffc9000dc83000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1342.682243][ T10] ^ [ 1342.682253][ T10] ffffc9000dc83080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1342.682268][ T10] ffffc9000dc83100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1342.682279][ T10] ================================================================== [ 1342.684192][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1342.684211][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1342.684236][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1342.684250][ T10] Workqueue: usb_hub_wq hub_event [ 1342.684277][ T10] Call Trace: [ 1342.684284][ T10] [ 1342.684292][ T10] dump_stack_lvl+0x99/0x250 [ 1342.684327][ T10] ? __asan_memcpy+0x40/0x70 [ 1342.684352][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1342.684383][ T10] ? __pfx__printk+0x10/0x10 [ 1342.684415][ T10] vpanic+0x237/0x6d0 [ 1342.684435][ T10] ? __pfx_vpanic+0x10/0x10 [ 1342.684453][ T10] ? preempt_schedule+0xae/0xc0 [ 1342.684482][ T10] ? __pfx_preempt_schedule+0x10/0x10 [ 1342.684514][ T10] panic+0xb9/0xc0 [ 1342.684533][ T10] ? __pfx_panic+0x10/0x10 [ 1342.684554][ T10] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1342.684590][ T10] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1342.684618][ T10] check_panic_on_warn+0x89/0xb0 [ 1342.684638][ T10] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1342.684664][ T10] end_report+0x78/0x160 [ 1342.684692][ T10] kasan_report+0x129/0x150 [ 1342.684722][ T10] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1342.684753][ T10] __list_del_entry_valid_or_report+0xb5/0x190 [ 1342.684781][ T10] kcov_remote_start+0x2b0/0x6f0 [ 1342.684822][ T10] hub_event+0x158/0x4a20 [ 1342.684845][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 1342.684877][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1342.684909][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1342.684942][ T10] ? __lock_acquire+0xab9/0xd20 [ 1342.684979][ T10] ? do_raw_spin_lock+0x121/0x290 [ 1342.685002][ T10] ? look_up_lock_class+0x74/0x170 [ 1342.685034][ T10] ? register_lock_class+0x51/0x320 [ 1342.685065][ T10] ? __lock_acquire+0xab9/0xd20 [ 1342.685098][ T10] ? __pfx_hub_event+0x10/0x10 [ 1342.685122][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 1342.685151][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 1342.685181][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 1342.685206][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 1342.685233][ T10] process_scheduled_works+0xae1/0x17b0 [ 1342.685275][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1342.685312][ T10] worker_thread+0x8a0/0xda0 [ 1342.685340][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1342.685377][ T10] ? __kthread_parkme+0x7b/0x200 [ 1342.685410][ T10] kthread+0x711/0x8a0 [ 1342.685444][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1342.685470][ T10] ? __pfx_kthread+0x10/0x10 [ 1342.685500][ T10] ? rt_spin_unlock+0x150/0x200 [ 1342.685527][ T10] ? rt_spin_unlock+0x161/0x200 [ 1342.685551][ T10] ? __pfx_kthread+0x10/0x10 [ 1342.685582][ T10] ret_from_fork+0x4bc/0x870 [ 1342.685609][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1342.685637][ T10] ? __switch_to_asm+0x39/0x70 [ 1342.685658][ T10] ? __switch_to_asm+0x33/0x70 [ 1342.685679][ T10] ? __pfx_kthread+0x10/0x10 [ 1342.685708][ T10] ret_from_fork_asm+0x1a/0x30 [ 1342.685740][ T10] [ 1342.686059][ T10] Kernel Offset: disabled