last executing test programs: 2m7.775668851s ago: executing program 2 (id=1555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 2m7.099000451s ago: executing program 2 (id=1558): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@delnexthop={0x17, 0x69, 0xb, 0x70bd28, 0x0, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}]}, 0x50}}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x101102) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffb8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r1, 0xd, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000800'], 0x2a, 0xfffffffffffffffc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2m5.908771441s ago: executing program 2 (id=1561): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r0, &(0x7f00000006c0)="208d34b7", 0x4) close(r0) 2m5.118499307s ago: executing program 2 (id=1563): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 2m4.891329251s ago: executing program 2 (id=1565): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', 0x0, 0xf0, 0x0) 2m4.674677513s ago: executing program 2 (id=1566): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdd250101f2800c001300ff07000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) 1m48.486501842s ago: executing program 32 (id=1566): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdd250101f2800c001300ff07000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) 1m40.825332891s ago: executing program 0 (id=1617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x90, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0}, 0x440}], 0x0, 0x0, 0x0}) 1m40.704716888s ago: executing program 0 (id=1618): r0 = getpid() prctl$PR_SET_PTRACER(0x17, r0) 1m40.514502609s ago: executing program 0 (id=1619): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m38.370442695s ago: executing program 0 (id=1624): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="184a00000200000000000000000000001831000003000000000000000000000018270000", @ANYRES32, @ANYBLOB="000000000100000018010000756c6c2500ffffffff2020207b1af8ff00000000bfa10000000000000701ffffb702000008000000b7"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c20000030806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m37.570688402s ago: executing program 0 (id=1626): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) 1m37.305596217s ago: executing program 0 (id=1628): syz_usb_connect(0x6, 0x373, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xdb, 0x59, 0x56, 0x40, 0x572, 0x58a4, 0xa717, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x361, 0x2, 0x6, 0x8, 0x10, 0x0, [{{0x9, 0x4, 0x73, 0x7, 0x7, 0xb1, 0x31, 0x71, 0x15, [], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0x3b, 0x6}}, {{0x9, 0x5, 0x8e, 0x2, 0x10, 0x4, 0x9e, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0xff, 0x2, [@generic={0x2, 0xe}, @generic={0x42, 0xd, "93a94473963f44b786def330f2841b47991978afde76a3e30f25d395bc1fa9f9977734af9d818711112f69e9d2da972d0eae059d06806fe0838c001f8cb49fb3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x5, 0x5, 0x2, [@generic={0x95, 0x24, "5b883b81563b3acbcdc2c377562b29ef5759e7ea87b6c06ca47fb3ad40d1f2b6d8f7b7af12dd5bf49eb79838a363a3a5ae1d8b93f487448f178b6a0134139789684ef19255eef757293e0a46b5732830d11072ef5b49afe3dc0753b0e8430a68ba4447cf4974c539f0c44ddd27a82dc26db3eb6e0799eadccaabb178f9fd1ec6cc9da328109d9e607217dfe3cd96491f2f4a41"}]}}, {{0x9, 0x5, 0x7, 0x17, 0x200, 0x82, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x28, 0x4, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x2}, @generic={0xc8, 0x22, "5e648034343f850787115ec35df7550b61c64e395bd4240e0dd3104c8881f85b05a43cdd4baeed428781c0ba5e64c6179906219095b33584043bc5b24c75889e0c104481d9a9aa3efb721359cb1e112702fc93271bcf606483bba18bd541e2aae6ae4d0fe807e1093c3e96e394035a610bb90b2b5b0a5701a59944d5d13bb4458ca830680bf4c090231b807de9fecdbe4cff4d8978a98d62c0e934d83cfd8d98d7498a5d96ff3887130ca6915f45ff4a5be58fe6d873d54037faa567674899dce6b161134f55"}]}}, {{0x9, 0x5, 0x1f, 0x8, 0x40, 0x4b, 0x3, 0x7, [@generic={0xbe, 0xd, "9be3609bf8fb152dad7bf307cb6442f58bc72115fdb8d798e22bb6a59cf2b7e43be523ed30506e6f6cae765bc4a2a17778508444af8292bfd71d1398f3af15a814a9f4a15ad178d8be9d3f488294fbc13ac18ed15d22a982d66dabaf5e82606509eef1adad0c2018ed2731215fca9b72e0421cfe8d30dd7e5001398780bc2be8d7ee53bfeb2fe1db147908e5098522923546d78052c86d67a1af7aaeb87cfe11ecf31c945d45e58f865405cf91caaee68c51122976e9839f7d5318be"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}]}}, {{0x9, 0x4, 0x47, 0x9, 0x0, 0xff, 0xff, 0xff, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9466, 0x0, 0x7f, 0x7f}, {0x6, 0x24, 0x1a, 0x4, 0x2a}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0x55, 0x24, 0x13, 0x3, "b8b253355f49aec117e72d85e4ca271d11352714368a8d6430ee4277b68d3df3ceb2f4799ac4ce4398260e0592622e8a5e7f0a72bb79b6716bb440e709e04426fafa416ee84b93cde5e759dbd9dfcbc1d8"}, @dmm={0x7, 0x24, 0x14, 0xfff, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x0, [0x90d2, 0x7, 0x7ff, 0x5, 0x6]}]}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x3, 0x7, 0x40}, 0x119, &(0x7f0000000080)={0x5, 0xf, 0x119, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x5, 0x84, 0x3, 0x7}, @generic={0xff, 0x10, 0xa, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x0, 0x7fe}, @ptm_cap={0x3}]}, 0x4, [{0xb3, &(0x7f00000007c0)=@string={0xb3, 0x3, "79ed0ccee86d84bdd449f2fad1d281461d5472f43533f489d6c1262600742db6a8e385b9e6af83d3037ad8b10784c1ee853df1ffce36880404d77a18e830a038eb1e0bde74827196ad0195a55fb1a76fcf1de49d73fea5d7bc232511fd724bc56a97e5608b2bef4b1170696e856004a5f18c1e2dbe20dbcb80af7ba696b5c81efd85ac34e4ec6589368a05d4064c706694dbd227625bce93ce1846a1da38a6055cbe3c881f5b10b36a84a69d21b8fd6665"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x5, &(0x7f0000000200)=@string={0x5, 0x3, "e29e19"}}, {0xbd, &(0x7f0000000880)=@string={0xbd, 0x3, "be3b6707744a75b403609a20c84dd916fa208da03f5c59f08a639d92e4aa5058277e94c39fb9341eb3ab737c39f98c99450636fb7886689953ba76d73ec2fd3b4907aea5ea4730dc9d18a2f7f2a64b22d233476073d9a052baadc5958835882ad3079c514d5fe9083e8d42c078ae72bc63edd217936dec17a37fe6aceedf4f354c8192cd12160e24b7f353016a6a002b30acbb6f1da886982fe433b227b13efa3285d5b6c457f98c9526eddd11071049992a228ee309879f52181c"}}]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = io_uring_setup(0x2d08, &(0x7f0000000000)={0x0, 0x4, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000400)={0x1, 0x2000000, 0x0, &(0x7f0000000380)=[{0x0}], 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000006c0)=0x507, 0x4) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2e, &(0x7f0000000040)=0x2, 0xf6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) 1m22.251414949s ago: executing program 33 (id=1628): syz_usb_connect(0x6, 0x373, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xdb, 0x59, 0x56, 0x40, 0x572, 0x58a4, 0xa717, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x361, 0x2, 0x6, 0x8, 0x10, 0x0, [{{0x9, 0x4, 0x73, 0x7, 0x7, 0xb1, 0x31, 0x71, 0x15, [], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0x3b, 0x6}}, {{0x9, 0x5, 0x8e, 0x2, 0x10, 0x4, 0x9e, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0xff, 0x2, [@generic={0x2, 0xe}, @generic={0x42, 0xd, "93a94473963f44b786def330f2841b47991978afde76a3e30f25d395bc1fa9f9977734af9d818711112f69e9d2da972d0eae059d06806fe0838c001f8cb49fb3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x5, 0x5, 0x2, [@generic={0x95, 0x24, "5b883b81563b3acbcdc2c377562b29ef5759e7ea87b6c06ca47fb3ad40d1f2b6d8f7b7af12dd5bf49eb79838a363a3a5ae1d8b93f487448f178b6a0134139789684ef19255eef757293e0a46b5732830d11072ef5b49afe3dc0753b0e8430a68ba4447cf4974c539f0c44ddd27a82dc26db3eb6e0799eadccaabb178f9fd1ec6cc9da328109d9e607217dfe3cd96491f2f4a41"}]}}, {{0x9, 0x5, 0x7, 0x17, 0x200, 0x82, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x28, 0x4, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x2}, @generic={0xc8, 0x22, "5e648034343f850787115ec35df7550b61c64e395bd4240e0dd3104c8881f85b05a43cdd4baeed428781c0ba5e64c6179906219095b33584043bc5b24c75889e0c104481d9a9aa3efb721359cb1e112702fc93271bcf606483bba18bd541e2aae6ae4d0fe807e1093c3e96e394035a610bb90b2b5b0a5701a59944d5d13bb4458ca830680bf4c090231b807de9fecdbe4cff4d8978a98d62c0e934d83cfd8d98d7498a5d96ff3887130ca6915f45ff4a5be58fe6d873d54037faa567674899dce6b161134f55"}]}}, {{0x9, 0x5, 0x1f, 0x8, 0x40, 0x4b, 0x3, 0x7, [@generic={0xbe, 0xd, "9be3609bf8fb152dad7bf307cb6442f58bc72115fdb8d798e22bb6a59cf2b7e43be523ed30506e6f6cae765bc4a2a17778508444af8292bfd71d1398f3af15a814a9f4a15ad178d8be9d3f488294fbc13ac18ed15d22a982d66dabaf5e82606509eef1adad0c2018ed2731215fca9b72e0421cfe8d30dd7e5001398780bc2be8d7ee53bfeb2fe1db147908e5098522923546d78052c86d67a1af7aaeb87cfe11ecf31c945d45e58f865405cf91caaee68c51122976e9839f7d5318be"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}]}}, {{0x9, 0x4, 0x47, 0x9, 0x0, 0xff, 0xff, 0xff, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9466, 0x0, 0x7f, 0x7f}, {0x6, 0x24, 0x1a, 0x4, 0x2a}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0x55, 0x24, 0x13, 0x3, "b8b253355f49aec117e72d85e4ca271d11352714368a8d6430ee4277b68d3df3ceb2f4799ac4ce4398260e0592622e8a5e7f0a72bb79b6716bb440e709e04426fafa416ee84b93cde5e759dbd9dfcbc1d8"}, @dmm={0x7, 0x24, 0x14, 0xfff, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x0, [0x90d2, 0x7, 0x7ff, 0x5, 0x6]}]}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x3, 0x7, 0x40}, 0x119, &(0x7f0000000080)={0x5, 0xf, 0x119, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x5, 0x84, 0x3, 0x7}, @generic={0xff, 0x10, 0xa, "440d1237aa9e0a2260317fe120513838fe87fa85038985820bb7e221169512d711ec9bd66783297b914b9d7863389ff69f98f71736e393bc8bf2b265342a86d878434f1e463aabd3a43326182f2571c5cbe73d8de33bb9e7d67d59bc8f509665ae24c7dd2b455940041cfd2aa0b59b9459e59056784cf29d56bfe30f5fc4e3522997dc6e98b6e9d57076aa5787359bf4124f46c858a1b49f6138639317356cbf13b43fabae4885514b810f69eaa4fe2a9c9dbcdc91026c242c6e71f6d9edd4ae718d8f17dc4067e340126bcc3bf613fffaf4d0ecff816bfab4831b4ff04b4a235a2d7e72bd007056a1ccbd1645a5d3eefdbb096eb7696c929e258cb4"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x0, 0x7fe}, @ptm_cap={0x3}]}, 0x4, [{0xb3, &(0x7f00000007c0)=@string={0xb3, 0x3, "79ed0ccee86d84bdd449f2fad1d281461d5472f43533f489d6c1262600742db6a8e385b9e6af83d3037ad8b10784c1ee853df1ffce36880404d77a18e830a038eb1e0bde74827196ad0195a55fb1a76fcf1de49d73fea5d7bc232511fd724bc56a97e5608b2bef4b1170696e856004a5f18c1e2dbe20dbcb80af7ba696b5c81efd85ac34e4ec6589368a05d4064c706694dbd227625bce93ce1846a1da38a6055cbe3c881f5b10b36a84a69d21b8fd6665"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x5, &(0x7f0000000200)=@string={0x5, 0x3, "e29e19"}}, {0xbd, &(0x7f0000000880)=@string={0xbd, 0x3, "be3b6707744a75b403609a20c84dd916fa208da03f5c59f08a639d92e4aa5058277e94c39fb9341eb3ab737c39f98c99450636fb7886689953ba76d73ec2fd3b4907aea5ea4730dc9d18a2f7f2a64b22d233476073d9a052baadc5958835882ad3079c514d5fe9083e8d42c078ae72bc63edd217936dec17a37fe6aceedf4f354c8192cd12160e24b7f353016a6a002b30acbb6f1da886982fe433b227b13efa3285d5b6c457f98c9526eddd11071049992a228ee309879f52181c"}}]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = io_uring_setup(0x2d08, &(0x7f0000000000)={0x0, 0x4, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000400)={0x1, 0x2000000, 0x0, &(0x7f0000000380)=[{0x0}], 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000006c0)=0x507, 0x4) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2e, &(0x7f0000000040)=0x2, 0xf6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) 8.007268631s ago: executing program 4 (id=1870): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000002c0), 0x3, 0x100) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1, &(0x7f0000000a00)=""/135, 0x87}, 0x40000101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.572846856s ago: executing program 3 (id=1871): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x100, 0x88c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r2, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.842255229s ago: executing program 4 (id=1872): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) 6.533324997s ago: executing program 3 (id=1873): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) 6.214715186s ago: executing program 3 (id=1875): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/wireless\x00') preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x0) 6.002931428s ago: executing program 3 (id=1877): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000001200)={0x2020}, 0x2020) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0xdf, 0x3, @tick, {0x40, 0x31}, {0x0, 0x8}, @addr={0x2a, 0x5}}, {0x7, 0x0, 0x0, 0x0, @tick=0x4, {0x39, 0x40}, {0x1, 0x4}, @result={0x800}}], 0x38) 5.834524179s ago: executing program 3 (id=1878): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.80220551s ago: executing program 5 (id=1879): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="700009450220"], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) 5.668072948s ago: executing program 1 (id=1880): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) eventfd(0x3ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x40440c0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='hfsplus\x00', 0x401, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0x3, 0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 5.390238585s ago: executing program 1 (id=1881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 5.28944661s ago: executing program 5 (id=1882): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xfffffffffffffffc, 0x15d001) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) socket$inet6(0xa, 0x3, 0x3a) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x106, 0x70bd27, 0x3, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc01c) 5.206213565s ago: executing program 1 (id=1883): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) 4.95440928s ago: executing program 1 (id=1884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x2, 0x2, 0x2, 0x1}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 4.695965305s ago: executing program 4 (id=1885): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)={0x18, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000811}, 0x400c000) 4.595473151s ago: executing program 1 (id=1886): syz_usb_connect(0x0, 0xc08, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003c65c2540d8048200aed0010203010902f60b0200000007090490070d02020102092107004a01221a0d07"], &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0}) 4.414563921s ago: executing program 4 (id=1887): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.462528987s ago: executing program 4 (id=1888): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x3, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) 3.212013313s ago: executing program 5 (id=1889): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40180) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x9) 2.91075259s ago: executing program 4 (id=1890): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000a0010c410cf8a00000000000109022d00010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00221b00"], 0x0}, 0x0) 2.813738325s ago: executing program 5 (id=1891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd825}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) close(r3) io_uring_setup(0x2efe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 2.749894679s ago: executing program 1 (id=1892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 592.546176ms ago: executing program 5 (id=1893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 149.745541ms ago: executing program 5 (id=1894): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) 0s ago: executing program 3 (id=1895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x2, 0x2, 0x2, 0x1}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) kernel console output (not intermixed with test programs): ll=202 compat=0 ip=0x7fdb9eb9acb9 code=0x7ffc0000 [ 444.853638][ T27] audit: type=1326 audit(1769343939.643:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9eb9acb9 code=0x7ffc0000 [ 444.901530][ T27] audit: type=1326 audit(1769343939.643:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9eb9acb9 code=0x7ffc0000 [ 444.926058][ T9106] loop2: detected capacity change from 0 to 1764 [ 444.946145][ T27] audit: type=1326 audit(1769343939.643:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9eb9acb9 code=0x7ffc0000 [ 444.975213][ T27] audit: type=1326 audit(1769343939.643:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9eb9acb9 code=0x7ffc0000 [ 445.018624][ T27] audit: type=1326 audit(1769343939.643:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb9eb5b58e code=0x7ffc0000 [ 445.049128][ T27] audit: type=1326 audit(1769343939.643:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb9eb9a94b code=0x7ffc0000 [ 445.075499][ T27] audit: type=1326 audit(1769343939.643:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9eb9acb9 code=0x7ffc0000 [ 445.103569][ T27] audit: type=1326 audit(1769343939.643:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9eb9acb9 code=0x7ffc0000 [ 445.256510][ T9106] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 445.265975][ T9106] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 445.547959][ T788] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 445.743146][ T788] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 445.757768][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.777204][ T788] usb 3-1: Product: syz [ 445.786480][ T788] usb 3-1: Manufacturer: syz [ 445.800679][ T788] usb 3-1: SerialNumber: syz [ 445.829015][ T788] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 445.891197][ T5840] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 446.278082][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 446.489079][ T5884] usb 1-1: USB disconnect, device number 17 [ 446.987789][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 447.008341][ T5840] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 447.025090][ T5840] ath9k_htc: Failed to initialize the device [ 447.074893][ T5840] usb 3-1: ath9k_htc: USB layer deinitialized [ 447.518057][ T9106] delete_channel: no stack [ 447.523035][ T8] usb 3-1: USB disconnect, device number 15 [ 448.041358][ T9133] loop3: detected capacity change from 0 to 1024 [ 448.661227][ T9143] binder: 9141:9143 ioctl c018620c 2000000000c0 returned -1 [ 448.917128][ T9148] loop1: detected capacity change from 0 to 1764 [ 449.013860][ T9148] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 450.078302][ T9148] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 450.957847][ T5896] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 451.057832][ T788] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 451.152241][ T5896] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.162151][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.188312][ T5896] usb 2-1: Product: syz [ 451.192672][ T5896] usb 2-1: Manufacturer: syz [ 451.197310][ T5896] usb 2-1: SerialNumber: syz [ 451.214880][ T5896] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 451.238106][ T5884] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 451.275521][ T788] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 451.300180][ T788] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 451.333451][ T788] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 451.343737][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.358700][ T788] usb 3-1: Product: syz [ 451.363022][ T788] usb 3-1: Manufacturer: syz [ 451.368201][ T788] usb 3-1: SerialNumber: syz [ 451.388814][ T788] usb 3-1: config 0 descriptor?? [ 451.405611][ T9155] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 451.418791][ T9155] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 451.670021][ T9155] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 451.688318][ T9155] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 451.929999][ T788] Error reading MAC address [ 451.941229][ T788] usb 3-1: USB disconnect, device number 16 [ 452.287928][ T5884] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 452.312911][ T5884] ath9k_htc: Failed to initialize the device [ 452.356450][ T5884] usb 2-1: ath9k_htc: USB layer deinitialized [ 452.656764][ T788] usb 2-1: USB disconnect, device number 12 [ 452.670657][ T9148] delete_channel: no stack [ 452.730446][ T9168] loop2: detected capacity change from 0 to 1024 [ 453.898117][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 454.218349][ T8] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 454.227581][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.347836][ T6959] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 454.371002][ T8] usb 4-1: config 0 has no interface number 0 [ 454.377340][ T8] usb 4-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.392371][ T8] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 454.401815][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.418759][ T8] usb 4-1: config 0 descriptor?? [ 454.488660][ T8] gspca_main: spca561-2.14.0 probing abcd:cdee [ 454.728716][ T6959] usb 2-1: Using ep0 maxpacket: 8 [ 454.743245][ T6959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.770526][ T6959] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 454.778824][ T8] spca561: probe of 4-1:0.156 failed with error -22 [ 454.781117][ T6959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.196657][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 455.210010][ T8] usb 4-1: MIDIStreaming interface descriptor not found [ 455.479540][ T6959] usb 2-1: Product: syz [ 455.483814][ T6959] usb 2-1: Manufacturer: syz [ 455.498006][ T6959] usb 2-1: SerialNumber: syz [ 455.506547][ T6959] usb 2-1: config 0 descriptor?? [ 455.547420][ T6959] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 455.586332][ T6959] usb 2-1: selecting invalid altsetting 2 [ 455.599094][ T6959] snd_usb_toneport 2-1:0.0: set_interface failed [ 455.625030][ T6959] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 455.637049][ T8] usb 4-1: USB disconnect, device number 15 [ 455.667987][ T6959] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 455.767650][ T6959] usb 2-1: USB disconnect, device number 13 [ 456.198985][ T9192] loop0: detected capacity change from 0 to 1764 [ 456.592546][ T9192] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 456.778609][ T9195] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 457.013892][ T9197] tmpfs: Bad value for 'mpol' [ 457.087834][ T788] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 457.289797][ T788] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 457.309265][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.328815][ T788] usb 1-1: Product: syz [ 457.333730][ T788] usb 1-1: Manufacturer: syz [ 457.344181][ T788] usb 1-1: SerialNumber: syz [ 457.374727][ T788] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 457.402467][ T6959] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 457.476160][ T9205] loop1: detected capacity change from 0 to 1024 [ 458.443018][ T6959] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 458.671820][ T6959] ath9k_htc: Failed to initialize the device [ 458.976053][ T6959] usb 1-1: ath9k_htc: USB layer deinitialized [ 459.075501][ T5840] usb 1-1: USB disconnect, device number 19 [ 459.094490][ T9192] delete_channel: no stack [ 459.197311][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 459.346709][ T9216] kvm: apic: phys broadcast and lowest prio [ 459.430334][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 459.439320][ T8] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 459.460384][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.488831][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.499609][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.525071][ T8] usb 2-1: Product: syz [ 459.535470][ T8] usb 2-1: Manufacturer: syz [ 459.562902][ T8] usb 2-1: SerialNumber: syz [ 459.807314][ T8] usb 2-1: 0:2 : does not exist [ 459.848505][ T8] usb 2-1: unit 9 not found! [ 459.921996][ T8] usb 2-1: USB disconnect, device number 14 [ 459.942529][ T9230] loop3: detected capacity change from 0 to 1024 [ 459.972937][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.310984][ T9241] loop0: detected capacity change from 0 to 1764 [ 461.374740][ T8] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 461.392269][ T9241] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 461.440492][ T9241] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 462.035860][ T9251] warning: `syz.1.1076' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 462.051539][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.060995][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.072941][ T5896] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 462.300343][ T5896] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 462.670680][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.703254][ T5896] usb 1-1: Product: syz [ 462.720339][ T5896] usb 1-1: Manufacturer: syz [ 462.741518][ T5896] usb 1-1: SerialNumber: syz [ 463.784200][ T5896] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 463.819276][ T5884] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 464.842649][ T5884] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 464.868227][ T5884] ath9k_htc: Failed to initialize the device [ 464.918625][ T5884] usb 1-1: ath9k_htc: USB layer deinitialized [ 464.981783][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 465.028408][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 465.069131][ T8] usb 2-1: can't read configurations, error -71 [ 465.205795][ T9261] loop2: detected capacity change from 0 to 1024 [ 465.880189][ T5896] usb 1-1: USB disconnect, device number 20 [ 465.942420][ T9241] delete_channel: no stack [ 467.267905][ T5840] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 467.467858][ T5840] usb 4-1: device descriptor read/64, error -71 [ 467.737900][ T5840] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 467.897843][ T5840] usb 4-1: device descriptor read/64, error -71 [ 468.028013][ T5840] usb usb4-port1: attempt power cycle [ 468.325886][ T9294] loop0: detected capacity change from 0 to 1024 [ 468.458031][ T5840] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 468.498809][ T5840] usb 4-1: device descriptor read/8, error -71 [ 468.788090][ T5840] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 470.390709][ T5840] usb 4-1: device descriptor read/8, error -71 [ 470.476838][ T9306] loop0: detected capacity change from 0 to 1764 [ 470.890752][ T5840] usb usb4-port1: unable to enumerate USB device [ 470.955996][ T9306] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 470.974606][ T9306] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 471.356511][ T5840] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 471.712932][ T5840] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 471.737776][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.449690][ T5840] usb 1-1: Product: syz [ 472.455133][ T5840] usb 1-1: Manufacturer: syz [ 472.466499][ T5840] usb 1-1: SerialNumber: syz [ 472.488183][ T5840] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 472.547925][ T5819] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 473.440769][ T9330] loop2: detected capacity change from 0 to 1024 [ 473.666479][ T5819] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 473.674181][ T5819] ath9k_htc: Failed to initialize the device [ 473.807535][ T5819] usb 1-1: ath9k_htc: USB layer deinitialized [ 474.001733][ T28] usb 1-1: USB disconnect, device number 21 [ 474.053091][ T9306] delete_channel: no stack [ 477.174872][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 479.007441][ T9360] loop3: detected capacity change from 0 to 1024 [ 479.262278][ T9362] loop0: detected capacity change from 0 to 1764 [ 479.444764][ T9362] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 479.503827][ T9362] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 479.797891][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 480.002688][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 480.033895][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.103662][ T8] usb 1-1: Product: syz [ 480.123872][ T8] usb 1-1: Manufacturer: syz [ 480.137108][ T8] usb 1-1: SerialNumber: syz [ 480.170682][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 480.203098][ T5884] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 481.237918][ T5884] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 481.245052][ T5884] ath9k_htc: Failed to initialize the device [ 481.332054][ T5884] usb 1-1: ath9k_htc: USB layer deinitialized [ 482.019038][ T5896] usb 1-1: USB disconnect, device number 22 [ 482.062589][ T9362] delete_channel: no stack [ 483.375107][ T9385] binder: 9384:9385 unknown command 112 [ 483.381060][ T9385] binder: 9384:9385 ioctl c0306201 200000000580 returned -22 [ 483.813234][ T9401] loop0: detected capacity change from 0 to 1764 [ 483.885008][ T9401] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 483.908885][ T9401] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 484.198819][ T5896] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 484.385665][ T5896] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 484.394981][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.409972][ T5896] usb 1-1: Product: syz [ 484.429815][ T5896] usb 1-1: Manufacturer: syz [ 484.449573][ T5896] usb 1-1: SerialNumber: syz [ 484.479007][ T5896] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 484.515552][ T5884] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 485.658744][ T5884] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 485.699377][ T5884] ath9k_htc: Failed to initialize the device [ 485.756976][ T5884] usb 1-1: ath9k_htc: USB layer deinitialized [ 485.983981][ T9414] block device autoloading is deprecated and will be removed. [ 486.383883][ T9423] tipc: Started in network mode [ 486.406773][ T9423] tipc: Node identity 2a93ffd9d851, cluster identity 4711 [ 486.451391][ T9423] tipc: Enabled bearer , priority 0 [ 486.477566][ T9419] tipc: Resetting bearer [ 486.605438][ T9426] trusted_key: encrypted_key: insufficient parameters specified [ 487.088644][ T9401] delete_channel: no stack [ 487.314829][ T28] usb 1-1: USB disconnect, device number 23 [ 487.969047][ T9433] capability: warning: `syz.1.1136' uses deprecated v2 capabilities in a way that may be insecure [ 490.037248][ T9444] Bluetooth: MGMT ver 1.22 [ 490.241714][ T9450] loop0: detected capacity change from 0 to 1764 [ 490.275992][ T9450] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 490.286843][ T9450] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 490.602205][ T5875] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 490.858404][ T5875] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 490.867523][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.875806][ T5875] usb 1-1: Product: syz [ 490.897047][ T5875] usb 1-1: Manufacturer: syz [ 490.909079][ T5875] usb 1-1: SerialNumber: syz [ 490.934811][ T5875] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 490.959742][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 492.010880][ T9419] tipc: Disabling bearer [ 492.022307][ T5896] tipc: Node number set to 4072865753 [ 492.056329][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 492.078462][ T8] ath9k_htc: Failed to initialize the device [ 492.147213][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 493.276427][ T5884] usb 1-1: USB disconnect, device number 24 [ 493.290598][ T9450] delete_channel: no stack [ 493.597635][ T9470] syzkaller0: entered promiscuous mode [ 493.608048][ T9470] syzkaller0: entered allmulticast mode [ 493.627749][ T9470] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 495.379163][ T9492] loop1: detected capacity change from 0 to 1764 [ 495.434655][ T9492] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 495.447518][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 495.468046][ T9492] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 495.686971][ T5884] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 495.758068][ T5840] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 495.837962][ T28] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 495.888589][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 495.925105][ T5884] usb 3-1: config 1 has no interfaces? [ 495.979086][ T5884] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 496.049007][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.059369][ T5884] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 496.060585][ T5840] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 496.098600][ T5884] usb 3-1: Manufacturer: syz [ 496.100617][ T5840] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 496.117056][ T28] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 496.127775][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.135880][ T28] usb 2-1: Product: syz [ 496.140467][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.148791][ T28] usb 2-1: Manufacturer: syz [ 496.153575][ T28] usb 2-1: SerialNumber: syz [ 496.199072][ T5840] usb 1-1: config 0 descriptor?? [ 496.265093][ T28] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 496.450351][ T788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 496.491482][ T5884] usb 3-1: USB disconnect, device number 17 [ 496.571712][ T5896] usb 1-1: USB disconnect, device number 25 [ 497.562963][ T788] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 497.570518][ T788] ath9k_htc: Failed to initialize the device [ 497.658051][ T788] usb 2-1: ath9k_htc: USB layer deinitialized [ 498.050642][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 498.304628][ T9492] delete_channel: no stack [ 498.313518][ T5896] usb 2-1: USB disconnect, device number 17 [ 499.816707][ T9534] xt_socket: unknown flags 0x4 [ 499.997984][ T5840] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 500.200915][ T5840] usb 3-1: no configurations [ 500.205565][ T5840] usb 3-1: can't read configurations, error -22 [ 500.397839][ T5840] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 500.723248][ T5840] usb 3-1: no configurations [ 500.728089][ T5840] usb 3-1: can't read configurations, error -22 [ 500.743303][ T5840] usb usb3-port1: attempt power cycle [ 501.178036][ T5840] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 501.219759][ T5840] usb 3-1: no configurations [ 501.224419][ T5840] usb 3-1: can't read configurations, error -22 [ 501.408229][ T5840] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 501.470467][ T5840] usb 3-1: no configurations [ 501.475281][ T5840] usb 3-1: can't read configurations, error -22 [ 501.498677][ T5840] usb usb3-port1: unable to enumerate USB device [ 501.608119][ T9539] comedi comedi2: reset error (fatal) [ 501.800750][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.809060][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.645605][ T9550] loop1: detected capacity change from 0 to 1764 [ 502.869042][ T9550] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 502.949148][ T9550] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 503.287841][ T788] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 503.502162][ T788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 503.535968][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.567075][ T788] usb 2-1: Product: syz [ 503.588153][ T788] usb 2-1: Manufacturer: syz [ 503.601935][ T788] usb 2-1: SerialNumber: syz [ 503.648996][ T788] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 503.686440][ T5840] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 504.638947][ T788] usb 2-1: USB disconnect, device number 18 [ 504.656258][ T9550] delete_channel: no stack [ 504.761929][ T5840] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 504.789798][ T5840] ath9k_htc: Failed to initialize the device [ 504.850936][ T788] usb 2-1: ath9k_htc: USB layer deinitialized [ 504.871607][ T9576] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1186'. [ 508.951389][ T9609] loop0: detected capacity change from 0 to 1764 [ 508.993340][ T9609] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 509.016241][ T9609] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 509.337802][ T5896] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 509.553739][ T5896] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 509.567903][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.593376][ T5896] usb 1-1: Product: syz [ 509.603540][ T5896] usb 1-1: Manufacturer: syz [ 509.618634][ T5896] usb 1-1: SerialNumber: syz [ 509.634260][ T5896] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 509.706178][ T5896] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 510.649868][ T5875] usb 1-1: USB disconnect, device number 26 [ 510.709790][ T9609] delete_channel: no stack [ 510.842764][ T5896] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 510.858271][ T5896] ath9k_htc: Failed to initialize the device [ 510.884821][ T5875] usb 1-1: ath9k_htc: USB layer deinitialized [ 511.134194][ T9631] binder: 9625:9631 ioctl 4018620d 0 returned -22 [ 511.142874][ T9631] binder: 9625:9631 ioctl d000941e 0 returned -22 [ 512.213940][ T9632] syz.0.1200 (9632): drop_caches: 2 [ 515.011423][ T9661] loop0: detected capacity change from 0 to 1764 [ 515.071815][ T9661] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 515.119500][ T9661] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 515.427948][ T5884] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 515.665636][ T9668] netlink: 'syz.2.1206': attribute type 4 has an invalid length. [ 515.665872][ T5884] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 515.713591][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.742326][ T9670] netlink: 'syz.2.1206': attribute type 4 has an invalid length. [ 515.748060][ T5884] usb 1-1: Product: syz [ 515.757961][ T5884] usb 1-1: Manufacturer: syz [ 515.773175][ T5884] usb 1-1: SerialNumber: syz [ 515.811700][ T5884] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 515.835958][ T5875] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 516.826922][ T5819] usb 1-1: USB disconnect, device number 27 [ 516.854032][ T9661] delete_channel: no stack [ 516.917948][ T5875] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 516.958257][ T5875] ath9k_htc: Failed to initialize the device [ 516.965348][ T5819] usb 1-1: ath9k_htc: USB layer deinitialized [ 526.077869][ T5875] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 526.987908][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 527.025975][ T5875] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 527.065032][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.094396][ T5875] usb 4-1: Product: syz [ 527.106810][ T5875] usb 4-1: Manufacturer: syz [ 527.121022][ T5875] usb 4-1: SerialNumber: syz [ 527.148316][ T5875] r8152-cfgselector 4-1: config 0 descriptor?? [ 527.698320][ T5875] r8152-cfgselector 4-1: Unknown version 0x0000 [ 527.726639][ T5875] r8152-cfgselector 4-1: bad CDC descriptors [ 527.775329][ T5875] r8152-cfgselector 4-1: Unknown version 0x0000 [ 527.801361][ T5875] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 529.357146][ T9043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.415413][ T9043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.558097][ T788] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 531.763711][ T788] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 531.796993][ T788] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 531.827840][ T788] usb 1-1: config 0 has no interface number 0 [ 531.834035][ T788] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 531.891172][ T788] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.922896][ T788] usb 1-1: config 0 interface 52 has no altsetting 0 [ 531.954912][ T788] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 531.977713][ T788] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 531.999320][ T788] usb 1-1: Manufacturer: syz [ 532.027616][ T788] usb 1-1: config 0 descriptor?? [ 532.038634][ T788] hub 1-1:0.52: bad descriptor, ignoring hub [ 532.055005][ T788] hub: probe of 1-1:0.52 failed with error -5 [ 532.271246][ T788] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input9 [ 532.578052][ T788] usb 1-1: USB disconnect, device number 28 [ 533.088747][ T9788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1247'. [ 533.704699][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 534.258030][ T5896] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 534.450307][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 534.472337][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 534.515954][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 534.537873][ T788] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 534.539574][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 534.571251][ T5896] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 534.582772][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.601340][ T5896] usb 4-1: Product: syz [ 534.605798][ T5896] usb 4-1: Manufacturer: syz [ 534.621433][ T5896] usb 4-1: SerialNumber: syz [ 534.645864][ T5896] usb 4-1: config 0 descriptor?? [ 534.799795][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.841252][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.877187][ T788] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 534.893628][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 534.943057][ T788] usb 2-1: SerialNumber: syz [ 535.191869][ T788] usb 2-1: 0:2 : does not exist [ 535.220043][ T788] usb 2-1: unit 5: unexpected type 0x09 [ 535.276968][ T788] usb 2-1: USB disconnect, device number 19 [ 535.321177][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.745036][ T9824] syz.0.1259 (9824) used greatest stack depth: 17864 bytes left [ 537.789272][ T28] usb 4-1: USB disconnect, device number 21 [ 544.698199][ T9892] Cannot find add_set index 0 as target [ 547.204575][ T9913] overlayfs: missing 'lowerdir' [ 547.338123][ T5875] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 547.357463][ T9914] block nbd0: NBD_DISCONNECT [ 547.373772][ T9914] block nbd0: Send disconnect failed -104 [ 547.397092][ T9914] block nbd0: shutting down sockets [ 547.569800][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 547.584413][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 547.626435][ T5875] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 547.666860][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.700291][ T5875] usb 3-1: config 0 descriptor?? [ 547.934847][ T5875] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 548.006883][ T9917] tmpfs: Bad value for 'mpol' [ 548.164196][ T5875] usb 3-1: USB disconnect, device number 22 [ 550.727900][ T5896] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 550.929951][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.957930][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.187867][ T5896] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 551.200827][ T5896] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 551.210301][ T5896] usb 4-1: Manufacturer: syz [ 552.118680][ T5896] usb 4-1: config 0 descriptor?? [ 552.472976][ T9970] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 553.340266][ T9981] loop8: detected capacity change from 0 to 7 [ 553.418663][ T9981] Dev loop8: unable to read RDB block 7 [ 553.461107][ T9981] loop8: unable to read partition table [ 553.520681][ T9981] loop8: partition table beyond EOD, truncated [ 553.556211][ T9981] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 554.387749][ T5819] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 554.637864][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 554.711784][ T5819] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 554.734080][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.757754][ T5819] usb 1-1: Product: syz [ 554.772075][ T5819] usb 1-1: Manufacturer: syz [ 554.776737][ T5819] usb 1-1: SerialNumber: syz [ 554.802578][ T5819] usb 1-1: config 0 descriptor?? [ 555.057143][ T5819] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 555.437538][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 555.458724][ T5896] usbhid: probe of 4-1:0.0 failed with error -71 [ 555.490562][ T5896] usb 4-1: USB disconnect, device number 22 [ 555.723839][ T5819] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 555.735545][ T5819] usb 1-1: USB disconnect, device number 29 [ 558.187767][ T5884] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 558.387812][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 558.398766][ T5884] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.417112][ T5884] usb 1-1: config 0 has no interface number 0 [ 558.433592][ T5884] usb 1-1: config 0 interface 1 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 558.484034][ T5884] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 558.501157][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.525707][ T5884] usb 1-1: Product: syz [ 558.533924][ T5884] usb 1-1: Manufacturer: syz [ 558.557222][ T5884] usb 1-1: SerialNumber: syz [ 558.578607][ T5884] usb 1-1: config 0 descriptor?? [ 558.611817][ T5884] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 558.687466][ T5884] snd-usb-audio: probe of 1-1:0.1 failed with error -2 [ 558.808000][ T5884] usb 1-1: USB disconnect, device number 30 [ 558.850173][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.247806][ T788] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 560.488776][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 560.506333][ T788] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 560.531788][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.633874][ T788] usb 3-1: config 0 descriptor?? [ 560.656053][T10043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 561.183461][ T788] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 561.311234][ T788] IPVS: starting estimator thread 0... [ 561.350333][T10054] IPVS: rr: FWM 3 0x00000003 - no destination available [ 561.508090][ T788] usb 3-1: USB disconnect, device number 23 [ 561.529359][T10057] IPVS: using max 26 ests per chain, 62400 per kthread [ 561.963930][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1343'. [ 563.241987][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.251271][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.357915][ T5884] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 563.598487][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 563.608507][ T5884] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 563.633323][ T5884] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.244153][ T5884] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.258132][ T5884] usb 4-1: config 1 interface 0 has no altsetting 0 [ 565.272771][ T5884] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 565.297727][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.305815][ T5884] usb 4-1: Product: syz [ 565.320997][ T5884] usb 4-1: Manufacturer: syz [ 565.325683][ T5884] usb 4-1: SerialNumber: syz [ 565.584999][ T5884] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 565.993901][T10077] usblp0:failed reading printer status (-32) [ 566.461439][ T788] usb 4-1: USB disconnect, device number 23 [ 566.490826][ T788] usblp0: removed [ 571.037830][ T788] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 571.422485][T10189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1383'. [ 572.127697][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 572.135155][ T788] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 572.147686][ T788] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 572.156373][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 572.205592][ T788] usb 2-1: config 1 has no interface number 0 [ 572.211858][ T788] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.226561][ T788] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 572.242693][ T788] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 572.257750][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=228 [ 572.265990][ T788] usb 2-1: SerialNumber: syz [ 572.312695][ T788] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 572.744532][ T788] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 572.939585][ T5875] usb 2-1: USB disconnect, device number 20 [ 572.969119][ T5875] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 573.262211][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'. [ 573.571204][T10213] kvm: kvm [10212]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf900 [ 574.203784][ T5780] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 577.296050][T10257] vivid-007: disconnect [ 578.027816][T10253] vivid-007: reconnect [ 578.467769][ T5896] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 579.043874][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.054175][ T5896] usb 3-1: config 0 has no interfaces? [ 579.077709][ T5896] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 579.100516][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.133273][ T5896] usb 3-1: config 0 descriptor?? [ 579.366796][ T5875] usb 3-1: USB disconnect, device number 24 [ 580.001626][T10276] ======================================================= [ 580.001626][T10276] WARNING: The mand mount option has been deprecated and [ 580.001626][T10276] and is ignored by this kernel. Remove the mand [ 580.001626][T10276] option from the mount to silence this warning. [ 580.001626][T10276] ======================================================= [ 580.375781][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 581.127802][ T28] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 581.317878][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 581.333869][ T28] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 581.358492][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.380076][ T28] usb 2-1: Product: syz [ 581.384329][ T28] usb 2-1: Manufacturer: syz [ 581.402163][ T28] usb 2-1: SerialNumber: syz [ 581.428116][ T28] usb 2-1: config 0 descriptor?? [ 581.877921][ T28] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 581.960353][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 582.013213][ T28] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 582.056819][ T28] usb 2-1: media controller created [ 582.795141][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.151065][ T28] zl10353_read_register: readreg error (reg=127, ret==0) [ 583.203174][ T28] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 583.257721][ T28] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 583.319257][ T28] usb 2-1: USB disconnect, device number 21 [ 583.384471][ T5780] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 583.423580][ T28] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 584.223526][ T5884] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 584.428030][ T5884] usb 4-1: device descriptor read/64, error -71 [ 584.877918][ T5884] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 586.566502][ T5884] usb 4-1: device descriptor read/64, error -71 [ 586.688016][ T5884] usb usb4-port1: attempt power cycle [ 587.428211][ T5780] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 587.438634][ T5780] Bluetooth: hci1: Injecting HCI hardware error event [ 587.448272][ T5780] Bluetooth: hci1: hardware error 0x00 [ 590.487760][ T5780] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 592.110805][ T5875] kernel write not supported for file /vcs (pid: 5875 comm: kworker/0:4) [ 593.943638][T10405] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 593.950816][T10405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 594.032857][T10405] vhci_hcd vhci_hcd.0: Device attached [ 594.048834][T10407] vhci_hcd: connection closed [ 594.056615][ T64] vhci_hcd: stop threads [ 594.067154][ T64] vhci_hcd: release socket [ 594.376502][ T64] vhci_hcd: disconnect device [ 599.128205][ T5875] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 600.498597][T10458] syz.0.1468: attempt to access beyond end of device [ 600.498597][T10458] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 606.782718][T10500] binder: 10498:10500 ioctl c0306201 0 returned -14 [ 607.327970][ T28] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 607.568200][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 607.586105][ T28] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 607.595402][ T28] usb 4-1: config 0 has no interface number 0 [ 607.608000][ T28] usb 4-1: config 0 interface 184 has no altsetting 0 [ 607.638522][ T28] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 607.779757][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.800212][ T28] usb 4-1: Product: syz [ 607.804804][ T28] usb 4-1: Manufacturer: syz [ 607.809940][ T28] usb 4-1: SerialNumber: syz [ 607.846574][ T28] usb 4-1: config 0 descriptor?? [ 607.903789][ T28] smsc75xx v1.0.0 [ 608.917793][ T5884] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 609.107900][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 609.114585][ T28] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 609.126303][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.141092][ T28] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 609.157302][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.171698][ T28] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 609.192731][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.207790][ T28] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 609.207801][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.207833][ T5884] usb 2-1: Product: syz [ 609.245252][ T5884] usb 2-1: Manufacturer: syz [ 609.250078][ T28] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 609.261058][ T5884] usb 2-1: SerialNumber: syz [ 609.297973][ T28] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 609.339403][ T28] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 609.365637][ T28] usb 4-1: USB disconnect, device number 28 [ 613.574173][ T5884] usb 2-1: 0:2 : does not exist [ 613.617190][ T5884] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 613.756162][ T5884] usb 2-1: USB disconnect, device number 22 [ 613.918929][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.348147][ T28] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 614.547748][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 614.581947][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.655736][ T788] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 614.686703][ T28] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 614.783408][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.858208][ T28] usb 1-1: Product: syz [ 614.892884][ T28] usb 1-1: Manufacturer: syz [ 614.945086][ T28] usb 1-1: SerialNumber: syz [ 614.981539][ T788] usb 2-1: config 0 has no interfaces? [ 614.991906][ T28] usb 1-1: config 0 descriptor?? [ 615.000099][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 615.039276][ T28] cdc_ether: probe of 1-1:0.0 failed with error -22 [ 615.046170][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 615.065586][ T28] usb 1-1: unsupported MDLM descriptors [ 615.071681][ T788] usb 2-1: SerialNumber: syz [ 615.092783][ T788] usb 2-1: config 0 descriptor?? [ 615.221900][ T788] usb 1-1: USB disconnect, device number 31 [ 615.308559][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 615.308576][ T27] audit: type=1326 audit(1769344110.253:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.2.1489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa2e19acb9 code=0x0 [ 615.486738][ T28] usb 2-1: USB disconnect, device number 23 [ 619.333206][T10620] netlink: 'syz.2.1503': attribute type 10 has an invalid length. [ 619.342745][T10620] bond0: (slave wlan1): Opening slave failed [ 619.457975][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 622.327974][ T5875] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 622.534177][ T5875] usb 3-1: config 64 has an invalid interface number: 146 but max is 0 [ 622.553451][ T5875] usb 3-1: config 64 has no interface number 0 [ 622.573708][ T5875] usb 3-1: config 64 interface 146 has no altsetting 0 [ 622.609995][ T5875] usb 3-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 622.630725][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.657763][ T5875] usb 3-1: Product: syz [ 622.662098][ T5875] usb 3-1: Manufacturer: syz [ 622.666739][ T5875] usb 3-1: SerialNumber: syz [ 622.929791][T10635] bond_slave_0: entered promiscuous mode [ 622.936042][T10635] bond_slave_1: entered promiscuous mode [ 623.022729][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 623.038798][T10635] bond_slave_0: left promiscuous mode [ 623.044361][T10635] bond_slave_1: left promiscuous mode [ 623.820808][ T5875] ftdi_sio 3-1:64.146: FTDI USB Serial Device converter detected [ 623.839097][ T5875] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 623.848530][ T5875] usb 3-1: USB disconnect, device number 25 [ 623.869654][ T5875] ftdi_sio 3-1:64.146: device disconnected [ 624.699340][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.705783][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.816514][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.825346][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.837853][T10667] bridge0: entered allmulticast mode [ 625.130418][T10665] bridge_slave_1: left allmulticast mode [ 625.136507][T10665] bridge_slave_1: left promiscuous mode [ 625.143691][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.170116][T10665] bridge_slave_0: left allmulticast mode [ 625.175856][T10665] bridge_slave_0: left promiscuous mode [ 625.181719][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.087707][ T788] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 626.280098][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 626.289627][ T788] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 626.307722][ T788] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 626.317461][ T788] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.337434][ T788] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 626.354625][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.363306][ T788] usb 4-1: Product: syz [ 626.367528][ T788] usb 4-1: Manufacturer: syz [ 626.373841][ T788] usb 4-1: SerialNumber: syz [ 626.942604][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.107312][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.210306][ T788] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 627.684551][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 627.705651][T10691] netlink: 'syz.1.1522': attribute type 30 has an invalid length. [ 627.744716][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 627.755190][T10691] netlink: 'syz.1.1522': attribute type 30 has an invalid length. [ 628.967749][ T788] usb 4-1: current rate 3342080 is different from the runtime rate 9338507 [ 629.219579][ T788] usb 4-1: USB disconnect, device number 29 [ 629.274565][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.305910][T10709] block nbd0: Unsupported socket: should be TCP or UNIX. [ 629.328349][ T5840] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 629.558543][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.568936][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.599941][ T5840] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 629.609553][ T5840] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 629.627921][ T5840] usb 2-1: Manufacturer: syz [ 629.636387][ T5840] usb 2-1: config 0 descriptor?? [ 629.651934][ T5840] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 631.587781][ T5840] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 631.828537][ T5840] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 631.861316][ T5840] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 631.891448][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.906369][ T5840] usb 3-1: Product: syz [ 631.916138][ T5840] usb 3-1: Manufacturer: syz [ 631.927931][ T5840] usb 3-1: SerialNumber: syz [ 631.950740][ T5840] usb 3-1: config 0 descriptor?? [ 631.962832][ T5840] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 631.993339][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 632.019897][ T5840] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 632.050739][ T5840] usb 3-1: media controller created [ 632.121349][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.170834][T10735] dvb-usb: bulk message failed: -22 (7/0) [ 632.342731][ T5840] DVB: Unable to find symbol mt352_attach() [ 632.592046][ T5840] DVB: Unable to find symbol nxt6000_attach() [ 632.626277][ T5840] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 632.684612][ T5840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 632.887814][ T5840] dvb-usb: schedule remote query interval to 1000 msecs. [ 632.894948][ T5840] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 633.624229][ T5840] dvb-usb: bulk message failed: -22 (7/0) [ 633.633823][ T5840] dvb-usb: bulk message failed: -22 (7/0) [ 633.654695][ T5840] usb 3-1: USB disconnect, device number 26 [ 633.841201][ T5840] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 633.956185][ T5896] usb 2-1: USB disconnect, device number 24 [ 634.951882][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1541'. [ 637.477737][ T5875] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 637.677997][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 637.696721][ T5875] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 638.517796][ T5875] usb 4-1: config 0 has no interface number 0 [ 638.524000][ T5875] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.538071][ T5875] usb 4-1: config 0 interface 85 has no altsetting 0 [ 638.569576][ T5875] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 638.587694][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.604983][ T5875] usb 4-1: Product: syz [ 638.613067][ T5875] usb 4-1: Manufacturer: syz [ 638.622929][ T5875] usb 4-1: SerialNumber: syz [ 638.675504][ T5875] usb 4-1: config 0 descriptor?? [ 639.027280][T10807] program syz.2.1558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.062772][T10807] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 639.832846][ T5875] appletouch 4-1:0.85: Geyser mode initialized. [ 639.869223][ T5875] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input11 [ 639.893772][ T5875] usb 4-1: USB disconnect, device number 30 [ 639.893929][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 639.935516][ T5875] appletouch 4-1:0.85: input: appletouch disconnected [ 640.178123][ T5884] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 640.378777][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 640.399455][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 640.420460][ T5884] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 640.429982][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.445470][ T5884] usb 2-1: Product: syz [ 640.455438][ T5884] usb 2-1: Manufacturer: syz [ 640.465812][ T5884] usb 2-1: SerialNumber: syz [ 640.481633][ T5884] usb 2-1: config 0 descriptor?? [ 640.501960][ T5884] usb 2-1: no audio or video endpoints found [ 642.688322][ T5780] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 642.697355][ T5780] Bluetooth: hci3: Injecting HCI hardware error event [ 642.710066][ T51] Bluetooth: hci3: hardware error 0x00 [ 642.744515][ T5896] usb 2-1: USB disconnect, device number 25 [ 643.347785][ T5896] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 643.537746][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 643.545138][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 643.566094][ T5896] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 643.575419][ T5896] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 643.584217][ T5896] usb 2-1: Product: syz [ 643.593152][ T5896] usb 2-1: Manufacturer: syz [ 643.598121][ T5896] usb 2-1: SerialNumber: syz [ 644.075262][ T5896] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 644.084336][ T5896] usb 2-1: Handspring Visor / Palm OS: port 206, is for unknown use [ 644.093529][ T5896] usb 2-1: Handspring Visor / Palm OS: port 23, is for unknown use [ 644.108392][ T5896] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 644.168030][ T5896] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 644.179705][ T5896] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 644.320362][ T5896] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 644.473308][ T5896] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 644.650008][ T5896] usb 2-1: USB disconnect, device number 26 [ 644.759250][ T5896] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 644.782612][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 644.818604][ T5896] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 644.851416][ T5896] visor 2-1:1.0: device disconnected [ 645.117898][ T6959] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 645.322696][ T6959] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.334757][ T6959] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.349656][ T6959] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 645.363979][ T6959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 645.372158][ T5840] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 645.381616][ T6959] usb 1-1: SerialNumber: syz [ 645.590478][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.611894][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.621459][ T6959] usb 1-1: 0:2 : does not exist [ 645.630651][ T6959] usb 1-1: unit 5 not found! [ 645.636979][ T5840] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 645.653008][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 645.674508][ T6959] usb 1-1: USB disconnect, device number 32 [ 645.681739][ T5840] usb 4-1: SerialNumber: syz [ 645.740786][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.909207][ T5840] usb 4-1: 0:2 : does not exist [ 645.920474][ T5840] usb 4-1: unit 1 not found! [ 645.940003][ T5840] usb 4-1: USB disconnect, device number 31 [ 645.974481][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.227615][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.217783][ T6959] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 653.287258][T10923] 9pnet_fd: Insufficient options for proto=fd [ 654.972038][ T6959] usb 2-1: Using ep0 maxpacket: 16 [ 654.981670][ T6959] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 654.994487][ T6959] usb 2-1: config 0 has no interface number 0 [ 655.008033][ T6959] usb 2-1: config 0 interface 1 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 655.030472][ T6959] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 655.047676][ T6959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.055840][ T6959] usb 2-1: Product: syz [ 655.065978][ T6959] usb 2-1: Manufacturer: syz [ 655.076098][ T6959] usb 2-1: SerialNumber: syz [ 655.089748][ T6959] usb 2-1: config 0 descriptor?? [ 655.095571][T10919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 655.119790][ T6959] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 655.145472][ T6959] snd-usb-audio: probe of 2-1:0.1 failed with error -2 [ 655.182599][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.341138][ T6959] usb 2-1: USB disconnect, device number 27 [ 657.368023][ T5896] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 657.569795][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 657.580924][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 657.600952][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.642382][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 657.680742][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 657.700969][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.722828][ T5896] usb 1-1: Product: syz [ 657.727066][ T5896] usb 1-1: Manufacturer: syz [ 657.752282][ T5896] usb 1-1: SerialNumber: syz [ 658.094605][ T5896] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 658.182815][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 658.193107][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 658.202007][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 658.214499][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 658.222437][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 658.232487][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 658.240868][ T5896] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 658.256019][ T5896] usb 1-1: USB disconnect, device number 33 [ 658.354253][ T6744] udevd[6744]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.207351][T10940] chnl_net:caif_netlink_parms(): no params data found [ 659.539484][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.547282][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.555352][T10940] bridge_slave_0: entered allmulticast mode [ 659.563540][T10940] bridge_slave_0: entered promiscuous mode [ 659.572779][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.580127][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.587383][T10940] bridge_slave_1: entered allmulticast mode [ 659.595028][T10940] bridge_slave_1: entered promiscuous mode [ 659.863081][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.875024][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.277827][ T5780] Bluetooth: hci0: command tx timeout [ 661.499963][T10940] team0: Port device team_slave_0 added [ 661.511071][T10940] team0: Port device team_slave_1 added [ 661.564754][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.572581][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.608873][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.631321][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.648081][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.725016][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.891207][T10940] hsr_slave_0: entered promiscuous mode [ 661.928926][T10940] hsr_slave_1: entered promiscuous mode [ 661.976109][T10940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.987782][T10940] Cannot create hsr debugfs directory [ 662.360301][ T5780] Bluetooth: hci0: command tx timeout [ 662.633126][T10940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 663.096013][T10940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 663.329916][T10940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 663.387400][T10940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 663.652081][T10940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.690843][T10940] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.740000][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.748449][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.770734][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.777986][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.887927][ T5875] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 664.069957][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 664.087339][ T5875] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 664.109773][ T5875] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 664.129180][ T5875] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 664.149584][ T5875] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.183105][ T5875] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 664.212210][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.316217][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.439134][ T5780] Bluetooth: hci0: command tx timeout [ 664.459384][ T5875] usb 4-1: GET_CAPABILITIES returned 0 [ 664.485363][ T5875] usbtmc 4-1:16.0: can't read capabilities [ 664.669322][ T5840] usb 4-1: USB disconnect, device number 32 [ 664.696249][T11004] netlink: 'syz.0.1616': attribute type 27 has an invalid length. [ 664.745942][T11004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1616'. [ 664.812450][T11004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.822713][T11004] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.836437][T11004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.969172][T11008] binder_alloc: 11007: binder_alloc_buf size 65856 failed, no address space [ 664.979889][T10940] veth0_vlan: entered promiscuous mode [ 664.984940][T11008] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 665.023821][T10940] veth1_vlan: entered promiscuous mode [ 665.074990][T10940] veth0_macvtap: entered promiscuous mode [ 665.094681][T10940] veth1_macvtap: entered promiscuous mode [ 665.115015][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.126185][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.136312][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.148445][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.160865][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.202324][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.235057][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.262417][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.307785][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.344136][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.392791][T10940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.458100][T10940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.513684][T10940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.543280][T10940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.547711][ T5780] Bluetooth: hci0: command tx timeout [ 666.666748][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.714220][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.965294][ T9036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.979722][ T9036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.232288][T11033] syzkaller1: entered promiscuous mode [ 668.255447][T11033] syzkaller1: entered allmulticast mode [ 669.634571][ T28] IPVS: starting estimator thread 0... [ 669.672571][T11054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1631'. [ 669.746306][T11058] loop5: detected capacity change from 0 to 7 [ 669.752555][T11056] IPVS: using max 26 ests per chain, 62400 per kthread [ 669.787355][ T6744] loop5: [POWERTEC] [ 669.825678][T11058] loop5: [POWERTEC] [ 671.788651][T11073] overlayfs: failed to clone upperpath [ 674.957918][ T5896] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 675.155496][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.174764][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.187200][ T5896] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 675.204035][ T5896] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 675.212430][ T5896] usb 5-1: Manufacturer: syz [ 675.229142][ T5896] usb 5-1: config 0 descriptor?? [ 676.085599][ T5896] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input12 [ 676.222903][ T5896] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input13 [ 676.250653][ T5896] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input14 [ 676.303215][ T5896] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input15 [ 676.404752][ T5896] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 676.433651][ T5896] usb 5-1: USB disconnect, device number 2 [ 676.857668][T11100] udevd[11100]: setting owner of /dev/input/event7 to uid=0, gid=104 failed: No such file or directory [ 676.858789][T11096] fido_id[11096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 677.397901][ T788] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 677.588021][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 677.624874][ T788] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 677.637787][ T788] usb 2-1: config 0 has no interface number 0 [ 677.643999][ T788] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.677678][ T788] usb 2-1: config 0 interface 85 has no altsetting 0 [ 677.696719][ T788] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 677.713990][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.727632][ T788] usb 2-1: Product: syz [ 677.731877][ T788] usb 2-1: Manufacturer: syz [ 677.746717][ T788] usb 2-1: SerialNumber: syz [ 677.754181][ T788] usb 2-1: config 0 descriptor?? [ 678.374203][ T788] appletouch 2-1:0.85: Geyser mode initialized. [ 678.388000][ T788] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input16 [ 678.568503][ T6959] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 678.605322][ T788] usb 2-1: USB disconnect, device number 28 [ 678.631446][ T788] appletouch 2-1:0.85: input: appletouch disconnected [ 678.787898][ T6959] usb 5-1: Using ep0 maxpacket: 16 [ 678.802615][ T6959] usb 5-1: config index 0 descriptor too short (expected 65315, got 36) [ 678.811538][ T6959] usb 5-1: config 0 has too many interfaces: 239, using maximum allowed: 32 [ 678.820676][ T6959] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 239 [ 678.830395][ T6959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.841698][ T6959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.852488][ T6959] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 678.882536][ T6959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.967186][ T6959] usb 5-1: config 0 descriptor?? [ 679.621740][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.654136][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.684392][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.708011][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.717083][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.730135][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.737341][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.746709][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.754481][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.763123][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.770804][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.780606][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.792475][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.800123][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.807530][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.815097][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.825397][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.833186][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.847162][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.855271][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.868734][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.876140][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.887757][ T5896] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 679.896437][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.909801][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.917171][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.927314][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.939875][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.950253][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.961303][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.969075][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.976276][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.983789][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 679.991080][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.000651][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.010244][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.017520][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.027006][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.036614][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.061132][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.074036][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.081391][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.088824][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 680.096302][ T5896] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 680.104363][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.104467][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.104493][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.104544][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.132496][ T5896] usb 2-1: config 0 has no interface number 0 [ 680.145433][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.154483][ T5896] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 680.155132][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.167710][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.181806][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.190384][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.198057][ T5896] usb 2-1: Product: syz [ 680.202375][ T5896] usb 2-1: Manufacturer: syz [ 680.207010][ T5896] usb 2-1: SerialNumber: syz [ 680.210306][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.223054][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.231941][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.240104][ T5896] usb 2-1: config 0 descriptor?? [ 680.247259][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.260506][ T5896] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 680.271031][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.281875][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.291600][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.302444][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.312278][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.323136][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.333396][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.344433][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.355050][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.373570][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.383600][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.394931][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.405300][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.416603][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.426726][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.437278][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.446727][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.460441][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.471109][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.482987][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.490449][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.492909][ T5896] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 680.497763][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.497793][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.497828][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.497854][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.497879][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.497904][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.553404][ T5896] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 680.574457][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.585132][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.600784][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.614045][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.624882][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.652709][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.673769][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.692208][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 40 [ 680.704413][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.725734][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.747824][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.759562][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.777670][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.784900][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.792724][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.801277][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.811128][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.818938][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.826127][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.833698][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.843854][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.853448][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.864511][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.874849][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.884667][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.895650][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.905551][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.920086][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.927295][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.935322][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 680.938783][T10417] usb 2-1: USB disconnect, device number 29 [ 680.954496][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.968467][T10417] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 680.985146][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 680.993488][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.010395][T10417] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 681.031555][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.044304][T10417] quatech2 2-1:0.51: device disconnected [ 681.050620][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.068338][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.076391][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.099553][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.106762][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.118148][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.125377][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.142226][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.153294][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.163246][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.175580][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.185928][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.193664][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.206829][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.214359][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.227925][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.235124][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.250706][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.262843][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.272591][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.285838][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.294573][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.306671][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.315478][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.327495][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.336238][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.348788][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.356016][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.372370][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.380970][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.389151][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.396363][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.404256][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.415770][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.423491][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.431752][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.439468][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.446677][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.455333][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.464033][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.497733][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.515262][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.537337][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.557334][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.587890][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.606843][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.625701][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.650498][ T6959] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 681.681430][ T6959] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 681.705485][ T6959] logitech 0003:046D:C29C.0004: no inputs found [ 681.729192][ T6959] usb 5-1: USB disconnect, device number 3 [ 682.330496][T11134] fido_id[11134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 683.357630][T11135] comedi comedi2: reset error (fatal) [ 684.489458][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 684.501645][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 684.516427][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 684.526240][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 684.536744][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 684.544143][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 685.215881][T11155] chnl_net:caif_netlink_parms(): no params data found [ 685.534969][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.557899][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.568218][T11155] bridge_slave_0: entered allmulticast mode [ 685.585093][T11155] bridge_slave_0: entered promiscuous mode [ 685.609552][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.616809][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.640918][T11155] bridge_slave_1: entered allmulticast mode [ 685.677034][T11155] bridge_slave_1: entered promiscuous mode [ 685.745477][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.783648][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.948843][T11155] team0: Port device team_slave_0 added [ 685.988740][T11155] team0: Port device team_slave_1 added [ 686.022014][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.029624][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.067463][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.338798][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.345385][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.620521][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.679468][ T5780] Bluetooth: hci3: command tx timeout [ 686.762050][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.798745][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.894068][T11155] hsr_slave_0: entered promiscuous mode [ 686.909125][T11155] hsr_slave_1: entered promiscuous mode [ 686.915729][T11155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.934805][T11155] Cannot create hsr debugfs directory [ 687.333552][T11155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 687.352728][T11155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 687.375266][T11155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 687.400371][T11155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 687.595694][T11155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.743944][T11155] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.793598][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.800868][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.875001][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.882441][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.638158][T11155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 688.649077][T11155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.777813][ T5780] Bluetooth: hci3: command tx timeout [ 689.031328][T11198] binder: BC_ATTEMPT_ACQUIRE not supported [ 689.038753][T11198] binder: 11197:11198 ioctl c0306201 2000000001c0 returned -22 [ 689.410749][T11207] Cannot find add_set index 0 as target [ 690.081698][T11155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.349437][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 690.392470][T11213] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.401772][T11213] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.410628][T11213] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.419822][T11213] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.441206][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 690.588411][T10417] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 690.795465][T10417] usb 2-1: Using ep0 maxpacket: 16 [ 690.829111][T10417] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 690.839301][T10417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.847494][T10417] usb 2-1: Product: syz [ 690.848737][ T5780] Bluetooth: hci3: command tx timeout [ 690.867690][T10417] usb 2-1: Manufacturer: syz [ 690.872412][T10417] usb 2-1: SerialNumber: syz [ 690.912120][T11155] veth0_vlan: entered promiscuous mode [ 690.924544][T10417] usb 2-1: config 0 descriptor?? [ 690.950574][T10417] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 690.981654][T11155] veth1_vlan: entered promiscuous mode [ 691.039045][T11224] kvm: MWAIT instruction emulated as NOP! [ 691.093733][T11155] veth0_macvtap: entered promiscuous mode [ 691.123253][T11155] veth1_macvtap: entered promiscuous mode [ 691.175816][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.191447][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.202167][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.223561][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.240868][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.253000][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.280937][T11155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.303865][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.337862][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.353151][T10417] ssu100: probe of 2-1:0.0 failed with error -71 [ 691.367058][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.386954][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.397384][T10417] usb 2-1: USB disconnect, device number 30 [ 691.418515][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.446550][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.478975][T11155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.506466][T11155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.518708][T11155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.527557][T11155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.538325][T11155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.732266][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.752086][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.796429][ T9022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.818214][ T9022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.951431][ T5780] Bluetooth: hci3: command tx timeout [ 695.502528][T10817] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 695.725184][T10817] usb 6-1: Using ep0 maxpacket: 8 [ 695.761309][T10817] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 695.782996][T10817] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 695.823311][T10817] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 695.870251][T10817] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 695.894797][T10817] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.926428][T10817] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 695.976926][T10817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.213796][T10817] usb 6-1: usb_control_msg returned -32 [ 696.233580][T10817] usbtmc 6-1:16.0: can't read capabilities [ 696.589334][T11282] usbtmc 6-1:16.0: stb usb_control_msg returned -32 [ 696.631624][T10817] usb 6-1: USB disconnect, device number 2 [ 698.090107][T11308] syz.3.1698 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 698.252967][T11308] hub 1-0:1.0: USB hub found [ 698.267155][T11308] hub 1-0:1.0: 1 port detected [ 698.879189][T11312] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 699.068987][T11312] team0 (unregistering): Port device team_slave_0 removed [ 699.106793][T11312] team0 (unregistering): Port device team_slave_1 removed [ 699.688030][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1702'. [ 701.298984][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.306523][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.334941][T11342] bridge0: entered allmulticast mode [ 701.833480][T11336] bridge_slave_1: left allmulticast mode [ 701.908072][T11336] bridge_slave_1: left promiscuous mode [ 701.916740][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.034715][T11336] bridge_slave_0: left allmulticast mode [ 702.062953][T11336] bridge_slave_0: left promiscuous mode [ 702.096653][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.431195][ T5884] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 706.550916][T11388] loop3: detected capacity change from 0 to 128 [ 706.581867][T11388] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 706.605220][T11388] ext4 filesystem being mounted at /438/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 706.629814][ T5884] usb 2-1: config 64 has an invalid interface number: 146 but max is 0 [ 706.638478][ T5884] usb 2-1: config 64 has no interface number 0 [ 706.652692][ T5884] usb 2-1: config 64 interface 146 has no altsetting 0 [ 706.667461][ T5884] usb 2-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 706.687373][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.706683][ T5884] usb 2-1: Product: syz [ 706.717197][ T5884] usb 2-1: Manufacturer: syz [ 706.723276][ T5884] usb 2-1: SerialNumber: syz [ 706.763847][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 707.054847][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 707.160401][ T5884] ftdi_sio 2-1:64.146: FTDI USB Serial Device converter detected [ 707.170323][T11398] loop3: detected capacity change from 0 to 128 [ 707.179874][ T5884] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 707.197924][ T5884] usb 2-1: USB disconnect, device number 31 [ 707.215575][ T5884] ftdi_sio 2-1:64.146: device disconnected [ 707.316336][T11398] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 707.392708][T11398] ext4 filesystem being mounted at /440/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 708.588416][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 708.829915][T11413] fuse: Bad value for 'fd' [ 708.879099][T11414] loop3: detected capacity change from 0 to 1024 [ 709.002259][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1729'. [ 709.347382][T11421] loop5: detected capacity change from 0 to 128 [ 709.421775][T11421] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 709.447346][T11421] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 709.517741][T10417] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 709.714864][T11155] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 709.724211][T10417] usb 2-1: Using ep0 maxpacket: 32 [ 709.777844][T10417] usb 2-1: config 0 interface 0 has no altsetting 0 [ 709.806606][T10417] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 709.824630][T10417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.848149][T10417] usb 2-1: Product: syz [ 709.854389][T10417] usb 2-1: Manufacturer: syz [ 709.864547][T10417] usb 2-1: SerialNumber: syz [ 709.890501][T10417] usb 2-1: config 0 descriptor?? [ 710.319720][T10417] gs_usb 2-1:0.0: Configuring for 156 interfaces [ 710.772882][T11433] loop4: detected capacity change from 0 to 128 [ 710.844327][T11433] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 710.867901][T11433] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 710.931263][T10417] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 711.091947][T10417] gs_usb: probe of 2-1:0.0 failed with error -71 [ 711.100379][T10940] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 711.128992][T10417] usb 2-1: USB disconnect, device number 32 [ 711.702144][T11449] loop4: detected capacity change from 0 to 128 [ 711.759260][T11449] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 711.793033][T11449] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 711.895012][T10940] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 711.927771][ T6959] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 712.327688][ T6959] usb 2-1: Using ep0 maxpacket: 16 [ 712.335422][ T6959] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 712.346775][ T6959] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 713.132086][ T6959] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.146458][ T6959] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.155670][ T6959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.164092][ T6959] usb 2-1: Product: syz [ 713.168339][ T6959] usb 2-1: Manufacturer: syz [ 713.172982][ T6959] usb 2-1: SerialNumber: syz [ 713.612053][ T6959] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 714.081358][T11467] loop5: detected capacity change from 0 to 128 [ 714.195393][T11467] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 714.249354][T11467] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 714.367037][T11471] loop3: detected capacity change from 0 to 1024 [ 714.410341][T11155] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 714.502819][ T6959] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 714.597426][ T6959] usb 2-1: USB disconnect, device number 33 [ 714.777025][T11097] udevd[11097]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.253284][T11486] loop1: detected capacity change from 0 to 128 [ 715.366827][T11486] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 715.456691][T11486] ext4 filesystem being mounted at /446/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 715.756344][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 717.203603][T11502] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1756'. [ 717.284204][T11502] batadv1: entered allmulticast mode [ 718.237428][T11510] loop1: detected capacity change from 0 to 128 [ 718.318427][T11510] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 718.368097][T11510] ext4 filesystem being mounted at /448/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 718.558729][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 718.813619][T11519] loop4: detected capacity change from 0 to 128 [ 718.869134][T11519] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 718.909305][T11519] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 719.156455][T10940] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 719.467324][T11529] loop4: detected capacity change from 0 to 1024 [ 720.680568][T11536] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 722.338390][T11550] loop3: detected capacity change from 0 to 128 [ 722.516969][T11550] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 722.618070][T11550] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 722.689396][T11557] loop1: detected capacity change from 0 to 128 [ 722.734846][T11557] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 722.792201][T11095] udevd[11095]: incorrect ext4 checksum on /dev/loop1 [ 722.828515][T11557] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 722.973412][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 723.249042][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 723.603908][T11569] loop4: detected capacity change from 0 to 1024 [ 726.726076][T11592] loop5: detected capacity change from 0 to 128 [ 726.788724][T11592] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 726.916033][T11592] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 727.353218][T11155] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 727.751985][T11600] loop1: detected capacity change from 0 to 128 [ 727.880878][T11600] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 727.988214][T11600] ext4 filesystem being mounted at /456/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 728.373772][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 728.434826][T11607] netlink: 'syz.5.1785': attribute type 10 has an invalid length. [ 728.454703][T11607] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 730.980892][T11634] loop3: detected capacity change from 0 to 128 [ 731.041865][T11634] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 731.210852][T11634] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 731.444678][T11642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1796'. [ 731.462110][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 731.490979][T11642] geneve2: entered promiscuous mode [ 731.623988][T11645] loop3: detected capacity change from 0 to 1024 [ 732.429058][T11658] netlink: 'syz.5.1801': attribute type 3 has an invalid length. [ 732.617213][T11658] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 732.702344][ T64] Bluetooth: hci4: Frame reassembly failed (-84) [ 732.797897][ T6959] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 733.219923][ T6959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.241609][ T6959] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 733.262685][ T6959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.283965][ T6959] usb 2-1: config 0 descriptor?? [ 733.305682][ T6959] pwc: Askey VC010 type 2 USB webcam detected. [ 733.727778][ T6959] pwc: recv_control_msg error -32 req 02 val 2b00 [ 734.317693][ T6959] pwc: recv_control_msg error -71 req 04 val 1000 [ 734.329651][ T6959] pwc: recv_control_msg error -71 req 04 val 1300 [ 734.340242][ T6959] pwc: recv_control_msg error -71 req 04 val 1400 [ 734.369288][T11664] ceph: No mds server is up or the cluster is laggy [ 734.383951][ T6959] pwc: recv_control_msg error -71 req 02 val 2000 [ 734.397368][T10417] libceph: connect (1)[c::]:6789 error -101 [ 734.412352][ T6959] pwc: recv_control_msg error -71 req 02 val 2100 [ 734.420654][T10417] libceph: mon0 (1)[c::]:6789 connect error [ 734.442098][ T6959] pwc: recv_control_msg error -71 req 04 val 1500 [ 734.494233][ T6959] pwc: recv_control_msg error -71 req 02 val 2500 [ 734.506605][ T6959] pwc: recv_control_msg error -71 req 02 val 2400 [ 734.528318][ T6959] pwc: recv_control_msg error -71 req 02 val 2600 [ 734.539541][ T6959] pwc: recv_control_msg error -71 req 02 val 2900 [ 734.561187][ T6959] pwc: recv_control_msg error -71 req 02 val 2800 [ 734.581526][ T6959] pwc: recv_control_msg error -71 req 04 val 1100 [ 734.593233][ T6959] pwc: recv_control_msg error -71 req 04 val 1200 [ 734.612138][ T6959] pwc: Registered as video103. [ 734.625459][ T6959] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 734.657062][ T6959] usb 2-1: USB disconnect, device number 34 [ 734.678057][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 734.684736][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 734.946417][T11677] loop1: detected capacity change from 0 to 128 [ 734.957943][T10417] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 735.019018][T11677] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 735.045204][T11677] ext4 filesystem being mounted at /461/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 735.158340][T10417] usb 4-1: Using ep0 maxpacket: 32 [ 735.177621][T10417] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 735.185783][T10417] usb 4-1: config 0 has no interface number 0 [ 735.213843][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 735.218424][T10417] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 735.277847][T10417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.285917][T10417] usb 4-1: Product: syz [ 735.318001][T10417] usb 4-1: Manufacturer: syz [ 735.322678][T10417] usb 4-1: SerialNumber: syz [ 735.384549][T10417] usb 4-1: config 0 descriptor?? [ 735.414220][T10417] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 735.738591][T10417] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 735.755252][T10417] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 736.289666][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 736.297658][ T28] usb 4-1: USB disconnect, device number 33 [ 736.308695][ T28] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 736.324898][ T28] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 736.338811][ T28] quatech2 4-1:0.51: device disconnected [ 736.479761][T11693] loop1: detected capacity change from 0 to 1024 [ 737.273080][T11707] loop3: detected capacity change from 0 to 128 [ 737.331174][T11707] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 737.370693][T11707] ext4 filesystem being mounted at /460/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 737.620582][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 739.232716][T11720] capability: warning: `syz.1.1822' uses 32-bit capabilities (legacy support in use) [ 739.274864][T11720] program syz.1.1822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 739.330503][T11722] syzkaller0: entered promiscuous mode [ 739.347692][T11722] syzkaller0: entered allmulticast mode [ 739.865856][T11731] loop5: detected capacity change from 0 to 128 [ 739.917987][T11735] loop4: detected capacity change from 0 to 1024 [ 739.929310][T11731] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 739.971696][T11731] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 741.141430][T11155] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 747.562663][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.569433][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.605753][T11779] loop4: detected capacity change from 0 to 128 [ 747.722123][T11779] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 747.743365][T11779] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 747.955648][T10940] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 748.880654][T11800] GUP no longer grows the stack in syz.5.1845 (11800): 200000004000-20000000a000 (200000002000) [ 748.892382][T11800] CPU: 1 PID: 11800 Comm: syz.5.1845 Not tainted syzkaller #0 [ 748.899910][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.910032][T11800] Call Trace: [ 748.913364][T11800] [ 748.916353][T11800] dump_stack_lvl+0x18c/0x250 [ 748.921113][T11800] ? show_regs_print_info+0x20/0x20 [ 748.926387][T11800] ? load_image+0x400/0x400 [ 748.930949][T11800] ? find_vma+0x134/0x1b0 [ 748.935360][T11800] __get_user_pages+0xf0e/0x1380 [ 748.940387][T11800] ? populate_vma_page_range+0x380/0x380 [ 748.946093][T11800] get_user_pages_remote+0x3ea/0xbd0 [ 748.951464][T11800] ? __might_sleep+0x60/0xe0 [ 748.956121][T11800] ? get_dump_page+0x200/0x200 [ 748.960962][T11800] __access_remote_vm+0x1fd/0x570 [ 748.966051][T11800] ? generic_access_phys+0x650/0x650 [ 748.971406][T11800] ? alloc_pages+0x4dc/0x740 [ 748.976052][T11800] ? do_raw_spin_unlock+0x121/0x230 [ 748.981323][T11800] proc_pid_cmdline_read+0x453/0x840 [ 748.986674][T11800] ? schedule+0xc7/0x170 [ 748.990991][T11800] ? comm_show+0x150/0x150 [ 748.995467][T11800] ? common_file_perm+0xe0/0x1f0 [ 749.000559][T11800] ? fsnotify_perm+0x271/0x5e0 [ 749.005391][T11800] do_iter_read+0x4fa/0xc90 [ 749.010050][T11800] ? comm_show+0x150/0x150 [ 749.014570][T11800] ? vfs_iter_read+0xa0/0xa0 [ 749.019216][T11800] ? __import_iovec+0x5f2/0x850 [ 749.024141][T11800] ? import_iovec+0x73/0xa0 [ 749.028705][T11800] do_preadv+0x236/0x390 [ 749.033009][T11800] ? do_writev+0x480/0x480 [ 749.037494][T11800] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 749.043526][T11800] ? lock_chain_count+0x20/0x20 [ 749.048536][T11800] ? lockdep_hardirqs_on+0x98/0x150 [ 749.053790][T11800] do_syscall_64+0x55/0xa0 [ 749.058439][T11800] ? clear_bhb_loop+0x40/0x90 [ 749.063160][T11800] ? clear_bhb_loop+0x40/0x90 [ 749.068061][T11800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.074014][T11800] RIP: 0033:0x7faec799acb9 [ 749.078477][T11800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.098140][T11800] RSP: 002b:00007faec88e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 749.106616][T11800] RAX: ffffffffffffffda RBX: 00007faec7c15fa0 RCX: 00007faec799acb9 [ 749.114640][T11800] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 749.122667][T11800] RBP: 00007faec7a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 749.130684][T11800] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 749.138693][T11800] R13: 00007faec7c16038 R14: 00007faec7c15fa0 R15: 00007fff99838d38 [ 749.146809][T11800] [ 749.950939][T11812] loop3: detected capacity change from 0 to 1024 [ 750.101361][T11817] loop5: detected capacity change from 0 to 128 [ 750.138410][T11817] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 750.158068][T11817] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 750.198252][T10817] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 750.358786][T11155] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 750.408589][T10817] usb 5-1: Using ep0 maxpacket: 16 [ 750.429971][T10817] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.462819][T10817] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.486723][T10817] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.509126][T10817] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 750.531536][T10817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.553627][T10817] usb 5-1: config 0 descriptor?? [ 750.976808][T10817] hid (null): report_id 0 is invalid [ 751.116640][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.205114][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.269282][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.276338][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.293958][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.315344][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.335296][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.353050][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.364516][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.377686][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.397342][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.409219][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.416452][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.424912][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.444969][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.457725][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.488850][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.520453][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.543306][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.551911][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.561933][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.574162][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.582397][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.597298][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.606098][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.635081][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.653058][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.664729][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.687628][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.729524][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.757021][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.791442][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.808051][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.846241][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.877666][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.928301][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.947778][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 751.954816][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.013222][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.030841][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.057647][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.085229][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.139611][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.146673][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.364693][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.608574][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.702523][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.851695][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.878001][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.895480][T11842] binder: 11838:11842 ioctl c018620c 0 returned -14 [ 752.927864][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 752.970630][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 753.037130][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 753.064686][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 753.084342][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 753.118020][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 753.132155][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 753.175285][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 753.203051][T10817] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 753.221404][T10817] cougar 0003:060B:500A.0005: report_id 0 is invalid [ 753.248325][T10817] cougar 0003:060B:500A.0005: item 0 0 1 8 parsing failed [ 753.271137][T10817] cougar 0003:060B:500A.0005: parse failed [ 753.299897][T10817] cougar: probe of 0003:060B:500A.0005 failed with error -22 [ 753.315538][T10817] usb 5-1: USB disconnect, device number 4 [ 753.632071][T11850] loop5: detected capacity change from 0 to 128 [ 753.656984][T11850] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 753.669853][T11850] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 755.489409][T11155] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 757.036107][T11865] loop5: detected capacity change from 0 to 1024 [ 758.099587][T11877] kvm: kvm [11876]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfffb00000000 [ 758.162589][T11877] kvm: kvm [11876]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe600000000 [ 758.245358][T11877] kvm: kvm [11876]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe600000000 [ 758.292187][T11877] kvm: kvm [11876]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe600000000 [ 758.373004][T11877] kvm: kvm [11876]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe600000000 [ 758.432001][T11877] kvm: kvm [11876]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe600000000 [ 758.532783][T11877] kvm: kvm [11876]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe600000000 [ 758.650799][T11877] kvm: kvm [11876]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe600000000 [ 759.698873][T11897] loop5: detected capacity change from 0 to 128 [ 759.737482][T11897] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 759.860416][T11897] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 759.965227][T11155] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 760.169785][T11909] syz.1.1880: attempt to access beyond end of device [ 760.169785][T11909] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 760.195999][T11909] hfsplus: unable to find HFS+ superblock [ 760.694544][T11920] loop5: detected capacity change from 0 to 1024 [ 761.517650][ T5896] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 761.714222][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 761.761827][ T5896] usb 2-1: config 0 has an invalid interface number: 144 but max is 1 [ 761.825200][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.869268][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 761.909226][ T5896] usb 2-1: config 0 has no interface number 0 [ 761.931770][ T5896] usb 2-1: config 0 interface 144 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 761.996516][ T5896] usb 2-1: config 0 interface 144 has no altsetting 0 [ 762.026174][ T5896] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=d0.ae [ 762.039260][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.080200][ T5896] usb 2-1: Product: syz [ 762.104963][ T5896] usb 2-1: Manufacturer: syz [ 762.122654][ T5896] usb 2-1: SerialNumber: syz [ 762.140659][ T5896] usb 2-1: config 0 descriptor?? [ 762.200250][ T5780] Bluetooth: hci3: command tx timeout [ 762.404482][ T5896] ims_pcu 2-1:0.144: Missing CDC union descriptor [ 762.420475][ T5896] ims_pcu: probe of 2-1:0.144 failed with error -22 [ 762.468949][T11936] loop4: detected capacity change from 0 to 128 [ 762.492008][ T5896] usb 2-1: USB disconnect, device number 35 [ 762.526809][T11936] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 762.579280][T11936] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 762.785616][T10940] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 763.277709][T10817] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 764.979326][T10817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.003458][T10817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 765.127975][T10817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.168348][T10817] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.208356][T10817] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 765.239136][T10817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.273266][T10817] usb 5-1: config 0 descriptor?? [ 766.698728][T10817] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 766.706229][T10817] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 766.743167][T10817] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 766.751443][T10817] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 766.760256][T10817] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 766.776872][T10817] hid-u2fzero 0003:10C4:8ACF.0006: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 766.871924][T10817] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero LED initialised [ 766.880613][T10817] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 766.892404][T10817] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 766.900868][T10817] CPU: 0 PID: 10817 Comm: kworker/0:1 Not tainted syzkaller #0 [ 766.908468][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.918587][T10817] Workqueue: usb_hub_wq hub_event [ 766.923685][T10817] RIP: 0010:u2fzero_rng_read+0x2a1/0x700 [ 766.929383][T10817] Code: 89 cc 80 3c 01 00 74 08 4c 89 ef e8 b9 af e6 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 31 b0 e6 f9 48 8d 44 24 60 48 89 03 [ 766.949048][T10817] RSP: 0018:ffffc9000bc56780 EFLAGS: 00010202 [ 766.955176][T10817] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 766.963210][T10817] RDX: 0000000000000000 RSI: ffffc9000bc568a0 RDI: ffff88805ce94c68 [ 766.971242][T10817] RBP: ffffc9000bc56998 R08: 0000000000000000 R09: 0000000000000000 [ 766.979267][T10817] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1100447f006 [ 766.987321][T10817] R13: ffff8880223f8030 R14: 1ffff1100447f083 R15: 1ffff9200178acf8 [ 766.995358][T10817] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 767.004559][T10817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.011200][T10817] CR2: 0000001b2d723ffc CR3: 0000000019a87000 CR4: 00000000003526f0 [ 767.019225][T10817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000000f [ 767.027336][T10817] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 767.035461][T10817] Call Trace: [ 767.038838][T10817] [ 767.041844][T10817] ? u2fzero_brightness_set+0x2e0/0x2e0 [ 767.047468][T10817] ? set_current_rng+0x3d0/0x3d0 [ 767.052475][T10817] ? mutex_unlock+0x10/0x10 [ 767.057046][T10817] ? u2fzero_brightness_set+0x2e0/0x2e0 [ 767.062653][T10817] add_early_randomness+0x7a/0x1a0 [ 767.067838][T10817] hwrng_register+0x3db/0x4a0 [ 767.072573][T10817] devm_hwrng_register+0x47/0xb0 [ 767.077643][T10817] u2fzero_probe+0x348/0x460 [ 767.082301][T10817] hid_device_probe+0x293/0x5b0 [ 767.087227][T10817] ? hid_uevent+0x350/0x350 [ 767.091811][T10817] really_probe+0x25b/0xb20 [ 767.096378][T10817] ? pm_runtime_barrier+0x14b/0x1c0 [ 767.101663][T10817] __driver_probe_device+0x18c/0x330 [ 767.107009][T10817] driver_probe_device+0x4f/0x420 [ 767.112096][T10817] __device_attach_driver+0x2ca/0x510 [ 767.117531][T10817] bus_for_each_drv+0x252/0x2e0 [ 767.122444][T10817] ? coredump_store+0x90/0x90 [ 767.127176][T10817] ? bus_find_device+0x300/0x300 [ 767.132182][T10817] __device_attach+0x2c2/0x420 [ 767.136998][T10817] ? device_attach+0x20/0x20 [ 767.141634][T10817] ? do_raw_spin_unlock+0x121/0x230 [ 767.146903][T10817] bus_probe_device+0x180/0x260 [ 767.151827][T10817] device_add+0x85b/0xc20 [ 767.156310][T10817] hid_add_device+0x38d/0x530 [ 767.161049][T10817] usbhid_probe+0xe02/0x1220 [ 767.165715][T10817] usb_probe_interface+0x5c9/0xb20 [ 767.170896][T10817] ? usb_register_driver+0x3d0/0x3d0 [ 767.176245][T10817] really_probe+0x25b/0xb20 [ 767.180809][T10817] ? pm_runtime_barrier+0x14b/0x1c0 [ 767.186085][T10817] __driver_probe_device+0x18c/0x330 [ 767.191430][T10817] driver_probe_device+0x4f/0x420 [ 767.196523][T10817] __device_attach_driver+0x2ca/0x510 [ 767.201956][T10817] bus_for_each_drv+0x252/0x2e0 [ 767.206905][T10817] ? coredump_store+0x90/0x90 [ 767.211640][T10817] ? bus_find_device+0x300/0x300 [ 767.216650][T10817] __device_attach+0x2c2/0x420 [ 767.221479][T10817] ? device_attach+0x20/0x20 [ 767.226123][T10817] ? __kmem_cache_free+0xba/0x1e0 [ 767.231214][T10817] ? do_raw_spin_unlock+0x121/0x230 [ 767.236477][T10817] bus_probe_device+0x180/0x260 [ 767.241565][T10817] device_add+0x85b/0xc20 [ 767.245957][T10817] usb_set_configuration+0x1a79/0x20c0 [ 767.251483][T10817] usb_generic_driver_probe+0x8d/0x150 [ 767.257001][T10817] usb_probe_device+0x13d/0x270 [ 767.261909][T10817] ? usb_register_device_driver+0x230/0x230 [ 767.267866][T10817] really_probe+0x25b/0xb20 [ 767.272436][T10817] ? pm_runtime_barrier+0x14b/0x1c0 [ 767.277691][T10817] __driver_probe_device+0x18c/0x330 [ 767.283110][T10817] driver_probe_device+0x4f/0x420 [ 767.288192][T10817] __device_attach_driver+0x2ca/0x510 [ 767.293665][T10817] bus_for_each_drv+0x252/0x2e0 [ 767.298579][T10817] ? coredump_store+0x90/0x90 [ 767.303300][T10817] ? bus_find_device+0x300/0x300 [ 767.308306][T10817] __device_attach+0x2c2/0x420 [ 767.313124][T10817] ? device_attach+0x20/0x20 [ 767.317758][T10817] ? __kmem_cache_free+0xba/0x1e0 [ 767.322840][T10817] ? do_raw_spin_unlock+0x121/0x230 [ 767.328104][T10817] bus_probe_device+0x180/0x260 [ 767.333016][T10817] device_add+0x85b/0xc20 [ 767.337396][T10817] usb_new_device+0xa3c/0x1660 [ 767.342223][T10817] ? usb_disconnect+0x8a0/0x8a0 [ 767.347137][T10817] ? _raw_spin_unlock_irq+0x23/0x50 [ 767.352385][T10817] ? lockdep_hardirqs_on+0x98/0x150 [ 767.357642][T10817] hub_event+0x29bf/0x49f0 [ 767.362133][T10817] ? hub_post_resume+0x120/0x120 [ 767.367138][T10817] ? read_lock_is_recursive+0x20/0x20 [ 767.372569][T10817] ? _raw_spin_unlock_irq+0x23/0x50 [ 767.377825][T10817] ? process_scheduled_works+0x96f/0x15d0 [ 767.383614][T10817] ? process_scheduled_works+0x96f/0x15d0 [ 767.389405][T10817] process_scheduled_works+0xa5d/0x15d0 [ 767.395031][T10817] ? assign_work+0x430/0x430 [ 767.399680][T10817] ? assign_work+0x3d0/0x430 [ 767.404430][T10817] worker_thread+0xa55/0xfc0 [ 767.409077][T10817] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 767.415025][T10817] ? _raw_spin_unlock+0x40/0x40 [ 767.419931][T10817] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 767.425972][T10817] kthread+0x2fa/0x390 [ 767.430091][T10817] ? pr_cont_work+0x560/0x560 [ 767.434819][T10817] ? kthread_blkcg+0xd0/0xd0 [ 767.439458][T10817] ret_from_fork+0x48/0x80 [ 767.443924][T10817] ? kthread_blkcg+0xd0/0xd0 [ 767.448571][T10817] ret_from_fork_asm+0x11/0x20 [ 767.453394][T10817] [ 767.456467][T10817] Modules linked in: [ 767.486633][T10817] ---[ end trace 0000000000000000 ]--- [ 767.519935][T10817] RIP: 0010:u2fzero_rng_read+0x2a1/0x700 [ 767.540790][T10817] Code: 89 cc 80 3c 01 00 74 08 4c 89 ef e8 b9 af e6 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 31 b0 e6 f9 48 8d 44 24 60 48 89 03 [ 767.606990][T10817] RSP: 0018:ffffc9000bc56780 EFLAGS: 00010202 [ 767.625073][T10817] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 767.638108][T10817] RDX: 0000000000000000 RSI: ffffc9000bc568a0 RDI: ffff88805ce94c68 [ 767.646406][T10817] RBP: ffffc9000bc56998 R08: 0000000000000000 R09: 0000000000000000 [ 767.656134][T10817] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1100447f006 [ 767.665436][T10817] R13: ffff8880223f8030 R14: 1ffff1100447f083 R15: 1ffff9200178acf8 [ 767.677251][T10817] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 767.690157][T10817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.696886][T10817] CR2: 00007fdb9ede1198 CR3: 0000000031036000 CR4: 00000000003506f0 [ 767.707846][T10817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000000f [ 767.717040][T10817] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 767.737213][T10817] Kernel panic - not syncing: Fatal exception [ 767.744026][T10817] Kernel Offset: disabled [ 767.748395][T10817] Rebooting in 86400 seconds..