last executing test programs: 4m5.599989017s ago: executing program 1 (id=1992): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4080) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 4m4.199763359s ago: executing program 1 (id=1998): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x8eb0, 0x2) read(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000e11e00820000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100018f1b565c09cb278b3eabf4de550e8acd588fdb7a754a163bcea76b40249de432e9b28cb48e426657a12e2306e9e344a4e93b90"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', 0x2000}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r5 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r5, 0x0, 0x0, 0x24000080, &(0x7f0000000000)={0x2, 0x5e22, @rand_addr=0x64010101}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000500)=r6, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x0, 0xff, 0x0, 0x0, 0x0, @empty, @empty, 0x8, 0x0, 0x0, 0xc}}) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000540), &(0x7f0000000580)=0x4) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000900)=@assoc_value={0x0, 0x8}, 0x8) syz_emit_ethernet(0xd0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x1, 0x4, [0xe7b, 0xb76, 0x72c, 0x78a]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') 4m3.902140393s ago: executing program 1 (id=2001): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00200000000000009800128008000100767469008c000280080001", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080006"], 0xcc}}, 0x0) 4m2.892857779s ago: executing program 1 (id=2003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x76, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r7, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7}) 4m1.917441494s ago: executing program 1 (id=2006): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4080) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 4m0.795578982s ago: executing program 1 (id=2009): socket$inet(0x2, 0x4000000000000001, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 3m45.118503676s ago: executing program 32 (id=2009): socket$inet(0x2, 0x4000000000000001, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 10.511939257s ago: executing program 2 (id=2620): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = dup(0xffffffffffffffff) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2800000, 0x1, 0x0, 0x0, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) memfd_create(0x0, 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r7, 0x4b49, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 8.828060523s ago: executing program 2 (id=2625): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r2 = syz_open_procfs(r0, &(0x7f00000002c0)='oom_score\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0x1, 0x9) 8.060068125s ago: executing program 3 (id=2628): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) getpgid(r1) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 7.72804105s ago: executing program 4 (id=2631): r0 = fsopen(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) listen(r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 7.292554337s ago: executing program 4 (id=2632): socket$kcm(0x2a, 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x142, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x57, 0xac, 0x51, 0x20, 0x1608, 0x308, 0x103a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x2, 0x8, 0x4, 0x20, 0x26, [{{0x9, 0x4, 0x9c, 0xf1, 0x1, 0x9, 0x2, 0x1d, 0xaa, [], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x8, 0xff}}]}}, {{0x9, 0x4, 0xf8, 0x5, 0x7, 0x5d, 0xc2, 0x36, 0x97, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0xa7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xe}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x2, 0x6, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3}, @generic={0xb, 0x3916b9b4465e5531, "d8abead468526b88e7"}]}}, {{0x9, 0x5, 0x4488441534d210c2, 0x10, 0x400, 0x8, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xfe00}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x10, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x4, 0xa, 0xb6, [@generic={0xa6, 0x1, "7d77743bb72b0dee7a0f332a616bb1903696f7b5f1c858f85c8c7b5810cd5cae3afbdc31bb90d73fffe460f14dfe1d6c6b16db9ba390ac5adfb2eb88fc5ceb8b4f2a9430e28aa2ae28666d551817ce875b4343e580aa46bb73ce306b75c8e9c2178e063b87698afd99f1ac2575de063c607cb92df46d6da592b90e7ee10bfa1c7c1acc7f26010166b2be4f00d54f75f82d8aadadaad7ebad5352017546d2d1b2fdd66988"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xc, 0xff, 0x29}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 7.14141009s ago: executing program 3 (id=2633): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) 6.882948923s ago: executing program 0 (id=2634): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000e11e00820000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100018f1b565c09cb278b3eabf4de550e8acd588fdb7a754a163bcea76b40249de432e9b28cb48e426657a12e2306e9e344a4e93b"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', 0x2000}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008094}, 0x40000d0) socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r5 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r5, 0x0, 0x0, 0x24000080, &(0x7f0000000000)={0x2, 0x5e22, @rand_addr=0x64010101}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000500)=r6, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x0, 0xff, 0x0, 0x0, 0x0, @empty, @empty, 0x8, 0x0, 0x0, 0xc}}) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000540), &(0x7f0000000580)=0x4) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000900)=@assoc_value={0x0, 0x8}, 0x8) syz_emit_ethernet(0xd0, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000180c200000e080500021313bc340a9e4c09a05d426bbe25f524f26d9bb145d7d284eb188034ee01dcec0747eff69cfdb0d1f48ddab11fd13bca1f40bf1caa2122ba6c5a3e35e85632b27ccb3c07504eb0924a393591c0d1f89191bc11a3af510f64669478e4de0eb5963770746a1f7e108c60522655453823725c756f32be6e6f47885a646de967d965fcbd65f9dd1ec66b989cc64753ffda85699ad38cdac8d4429df4d47bab16897200d4077e54c99e4f68316e366afbc9d2cd3eb36d92f1e6eba156ef77b3d5f9ccf18e1144829566a262c93440ee4076422991c73f8b9e6f603fce339a9bf896356a9deaabe4f7d7e34240be29bcc2350ab9dc7bf3c7909311912283047dac2b5872041afc06ea24d42b36c73414974efa1af7f97848c5c7721ebd83f766e5351497829cfc9180"], &(0x7f0000000240)={0x1, 0x4, [0xe7b, 0xb76, 0x72c, 0x78a]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') 6.43328565s ago: executing program 0 (id=2635): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x1c) r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x7079, 0x1000, 0x14, 0x28b}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3af6, 0xbebb, 0x0, 0x0, 0xfffffea9) 6.349292292s ago: executing program 3 (id=2636): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x20000000, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}, 0x1c) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000d80ffff", 0x8) r1 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x10c, 0x10}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x7, 0x8, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffe, 0x5, 0x2, 0x7ff, 0x2, 0x7}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0xf, 0x0, 0x0}) openat(r1, 0x0, 0x40001, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 6.348987061s ago: executing program 0 (id=2637): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0) 5.273029899s ago: executing program 4 (id=2638): r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0xfffffea6, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x9, "919f"}, @main=@item_012={0x1, 0x0, 0x9, "ed"}]}}, 0x0}, 0x0) 5.203978649s ago: executing program 2 (id=2639): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) r8 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000380)="5e73663bf4082f7c6c9ed7f09d6dd7be5a06dfd645630500c1a303434a36bfc41f1c1eb3c4f54167ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) 4.610736219s ago: executing program 3 (id=2640): r0 = fsopen(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) listen(r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 3.88814002s ago: executing program 4 (id=2641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) getpgid(r1) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 3.820053061s ago: executing program 3 (id=2642): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) 3.319221279s ago: executing program 2 (id=2643): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000e11e00820000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100018f1b565c09cb278b3eabf4de550e8acd588fdb7a754a163bcea76b40249de432e9b28cb48e426657a12e2306e9e344a4e93b"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', 0x2000}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008094}, 0x40000d0) socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r5 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r5, 0x0, 0x0, 0x24000080, &(0x7f0000000000)={0x2, 0x5e22, @rand_addr=0x64010101}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000500)=r6, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x0, 0xff, 0x0, 0x0, 0x0, @empty, @empty, 0x8, 0x0, 0x0, 0xc}}) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000540), &(0x7f0000000580)=0x4) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000900)=@assoc_value={0x0, 0x8}, 0x8) syz_emit_ethernet(0xd0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x1, 0x4, [0xe7b, 0xb76, 0x72c, 0x78a]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') 3.26728358s ago: executing program 2 (id=2644): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) 2.934609955s ago: executing program 4 (id=2645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') fanotify_init(0x0, 0x80000) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r3, r5}, 0xc) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdd, 0x8}}) 2.666515999s ago: executing program 2 (id=2646): socket$kcm(0x2a, 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x142, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x57, 0xac, 0x51, 0x20, 0x1608, 0x308, 0x103a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x2, 0x8, 0x4, 0x20, 0x26, [{{0x9, 0x4, 0x9c, 0xf1, 0x1, 0x9, 0x2, 0x1d, 0xaa, [], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x8, 0xff}}]}}, {{0x9, 0x4, 0xf8, 0x5, 0x7, 0x5d, 0xc2, 0x36, 0x97, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0xa7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xe}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x2, 0x6, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3}, @generic={0xb, 0x3916b9b4465e5531, "d8abead468526b88e7"}]}}, {{0x9, 0x5, 0x4488441534d210c2, 0x10, 0x400, 0x8, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xfe00}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x10, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x4, 0xa, 0xb6, [@generic={0xa6, 0x1, "7d77743bb72b0dee7a0f332a616bb1903696f7b5f1c858f85c8c7b5810cd5cae3afbdc31bb90d73fffe460f14dfe1d6c6b16db9ba390ac5adfb2eb88fc5ceb8b4f2a9430e28aa2ae28666d551817ce875b4343e580aa46bb73ce306b75c8e9c2178e063b87698afd99f1ac2575de063c607cb92df46d6da592b90e7ee10bfa1c7c1acc7f26010166b2be4f00d54f75f82d8aadadaad7ebad5352017546d2d1b2fdd66988"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xc, 0xff, 0x29}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 2.651336429s ago: executing program 3 (id=2647): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) r2 = syz_open_procfs(r0, &(0x7f00000002c0)='oom_score\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0x1, 0x9) 2.58480264s ago: executing program 0 (id=2648): capset(0x0, &(0x7f00000000c0)={0x200000, 0x240001, 0x8, 0x1007, 0xfffffffd}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xc7}, 0x18, 0x0}, 0xee) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r2, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) ioctl$KVM_RUN(r2, 0xae80, 0x0) read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x2020) 1.592800886s ago: executing program 4 (id=2649): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0xfffffea6, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x9, "919f"}, @main=@item_012={0x1, 0x0, 0x9, "ed"}]}}, 0x0}, 0x0) 781.253328ms ago: executing program 0 (id=2650): r0 = fsopen(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) listen(r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 0s ago: executing program 0 (id=2651): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) r8 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000380)="5e73663bf4082f7c6c9ed7f09d6dd7be5a06dfd645630500c1a303434a36bfc41f1c1eb3c4f54167ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) kernel console output (not intermixed with test programs): z.2.2146'. [ 883.802640][ T8] usb 1-1: can't set config #0, error -71 [ 883.829484][ T8] usb 1-1: USB disconnect, device number 43 [ 884.468303][T13873] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2151'. [ 885.512996][T13889] 9pnet_virtio: no channels available for device syz [ 886.702423][T13897] UBIFS error (pid: 13897): cannot open "", error -22 [ 886.709325][T13897] overlayfs: failed to resolve './file1': -2 [ 886.778039][T13897] tmpfs: Bad value for 'huge' [ 887.783242][ T8] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 888.012637][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 888.022767][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.046105][ T8] usb 1-1: config 0 has no interfaces? [ 888.051647][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 888.113202][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.147087][ T8] usb 1-1: config 0 descriptor?? [ 888.570042][ T8] usb 1-1: USB disconnect, device number 44 [ 888.598226][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'. [ 888.744607][T13914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2158'. [ 888.768107][T13931] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2160'. [ 889.098203][ T5771] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 889.109853][ T5771] CPU: 1 PID: 5771 Comm: kworker/u5:4 Not tainted 6.6.95-syzkaller #0 [ 889.118052][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 889.128131][ T5771] Workqueue: hci4 hci_rx_work [ 889.132857][ T5771] Call Trace: [ 889.136152][ T5771] [ 889.139104][ T5771] dump_stack_lvl+0x16c/0x230 [ 889.143818][ T5771] ? show_regs_print_info+0x20/0x20 [ 889.149031][ T5771] ? load_image+0x3b0/0x3b0 [ 889.153565][ T5771] sysfs_create_dir_ns+0x256/0x280 [ 889.158690][ T5771] ? hci_rx_work+0x43a/0xd80 [ 889.163286][ T5771] ? sysfs_warn_dup+0xa0/0xa0 [ 889.167961][ T5771] ? do_raw_spin_unlock+0x121/0x230 [ 889.173162][ T5771] kobject_add_internal+0x6b8/0xc70 [ 889.178370][ T5771] kobject_add+0x156/0x220 [ 889.182781][ T5771] ? __rwlock_init+0x150/0x150 [ 889.187541][ T5771] ? kobject_init+0x1e0/0x1e0 [ 889.192209][ T5771] ? _raw_spin_unlock+0x28/0x40 [ 889.197060][ T5771] ? get_device_parent+0x366/0x390 [ 889.202165][ T5771] device_add+0x408/0xc20 [ 889.206489][ T5771] hci_conn_add_sysfs+0xd5/0x1e0 [ 889.211422][ T5771] le_conn_complete_evt+0xc37/0x1220 [ 889.216699][ T5771] ? hci_event_packet+0x4a7/0x1210 [ 889.221809][ T5771] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 889.228041][ T5771] ? __copy_skb_header+0xa7/0x550 [ 889.233062][ T5771] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 889.238695][ T5771] ? skb_pull_data+0xfb/0x200 [ 889.243370][ T5771] hci_le_conn_complete_evt+0x187/0x440 [ 889.248917][ T5771] ? hci_remote_host_features_evt+0x160/0x160 [ 889.254976][ T5771] hci_event_packet+0x795/0x1210 [ 889.259910][ T5771] ? bis_list+0x290/0x290 [ 889.264252][ T5771] ? lockdep_hardirqs_on+0x98/0x150 [ 889.269468][ T5771] ? hci_send_to_monitor+0xd7/0x4f0 [ 889.274675][ T5771] hci_rx_work+0x43a/0xd80 [ 889.279108][ T5771] ? process_scheduled_works+0x957/0x15b0 [ 889.284830][ T5771] process_scheduled_works+0xa45/0x15b0 [ 889.290391][ T5771] ? assign_work+0x400/0x400 [ 889.294983][ T5771] ? assign_work+0x39e/0x400 [ 889.299573][ T5771] worker_thread+0xa55/0xfc0 [ 889.304177][ T5771] kthread+0x2fa/0x390 [ 889.308237][ T5771] ? pr_cont_work+0x560/0x560 [ 889.312906][ T5771] ? kthread_blkcg+0xd0/0xd0 [ 889.317496][ T5771] ret_from_fork+0x48/0x80 [ 889.321907][ T5771] ? kthread_blkcg+0xd0/0xd0 [ 889.326487][ T5771] ret_from_fork_asm+0x11/0x20 [ 889.331271][ T5771] [ 889.338212][ T5771] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 889.352887][ T5771] Bluetooth: hci4: failed to register connection device [ 889.402810][ T788] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 889.607511][ T788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.624759][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 890.218979][ T788] usb 3-1: config 1 has no interface number 0 [ 890.336310][ T788] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.492560][ T788] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 890.712129][ T788] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 890.756329][T13971] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2170'. [ 891.992356][ T788] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 892.500741][ T788] usb 3-1: string descriptor 0 read error: -71 [ 892.530512][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 892.591593][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.661030][ T788] usb 3-1: can't set config #1, error -71 [ 892.796751][ T788] usb 3-1: USB disconnect, device number 47 [ 892.802433][T13979] lo speed is unknown, defaulting to 1000 [ 893.567244][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'. [ 893.587116][T13985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2172'. [ 893.733048][ T787] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 895.493693][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 895.587569][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.660343][ T787] usb 1-1: config 0 has no interfaces? [ 895.710984][ T787] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 895.775333][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.956503][ T787] usb 1-1: config 0 descriptor?? [ 896.005663][ T787] usb 1-1: can't set config #0, error -71 [ 896.061271][ T787] usb 1-1: USB disconnect, device number 45 [ 896.202906][T14025] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2179'. [ 898.123135][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'. [ 901.313110][T14068] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2189'. [ 901.339182][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 901.383051][T14070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2186'. [ 901.445032][ T8] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 901.677365][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 901.699516][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.722012][ T8] usb 4-1: config 0 has no interfaces? [ 901.738901][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 901.750843][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.767831][ T8] usb 4-1: config 0 descriptor?? [ 901.845260][T11147] Bluetooth: hci1: Frame reassembly failed (-84) [ 901.981397][ T8] usb 4-1: USB disconnect, device number 31 [ 903.892745][T13094] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 903.896196][ T5771] Bluetooth: hci1: command 0xfc11 tx timeout [ 905.112750][T14121] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2198'. [ 906.196805][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'. [ 906.245573][T14153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2202'. [ 906.452653][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 907.517239][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 907.554770][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.592804][ T787] usb 5-1: config 0 has no interfaces? [ 907.621813][ T787] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 907.661780][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.686471][ T787] usb 5-1: config 0 descriptor?? [ 907.998703][ T787] usb 5-1: USB disconnect, device number 2 [ 908.635251][T14179] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2210'. [ 908.695474][T14181] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 910.712446][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 910.735925][T14220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2217'. [ 911.772774][ T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 911.994721][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 912.734164][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.744436][ T787] usb 5-1: config 0 has no interfaces? [ 912.749918][ T787] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 912.759574][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.787508][ T787] usb 5-1: config 0 descriptor?? [ 913.018084][ T787] usb 5-1: USB disconnect, device number 3 [ 914.654866][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 914.710350][T14299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2230'. [ 915.162755][ T9781] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 915.346607][T14305] fuse: Bad value for 'group_id' [ 915.353043][ T9781] usb 4-1: Using ep0 maxpacket: 32 [ 915.370665][ T9781] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 915.390114][ T9781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.415919][ T9781] usb 4-1: Product: syz [ 915.436160][ T9781] usb 4-1: Manufacturer: syz [ 915.472158][ T9781] usb 4-1: SerialNumber: syz [ 915.497103][ T9781] usb 4-1: config 0 descriptor?? [ 917.635865][ T9781] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 917.660122][ T9781] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 917.804901][ T9781] peak_usb: probe of 4-1:0.0 failed with error -71 [ 917.982570][T10101] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 918.062519][ T9781] usb 4-1: USB disconnect, device number 32 [ 918.172686][T10101] usb 1-1: Using ep0 maxpacket: 16 [ 918.191240][T10101] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.225792][T10101] usb 1-1: config 0 has no interfaces? [ 918.252751][T10101] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 918.262600][T10101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.402734][T10101] usb 1-1: config 0 descriptor?? [ 919.284348][ T8] usb 1-1: USB disconnect, device number 46 [ 919.764151][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2241'. [ 919.852541][T14345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2241'. [ 920.098653][T14358] fuse: Bad value for 'group_id' [ 922.248255][T14371] nbd: must specify at least one socket [ 923.562679][ T787] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 923.961981][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 923.981399][ T787] usb 4-1: config 8 has an invalid interface number: 156 but max is 1 [ 924.600780][ T787] usb 4-1: config 8 has an invalid interface number: 248 but max is 1 [ 924.679564][ T787] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 925.092545][ T787] usb 4-1: config 8 has no interface number 0 [ 925.098691][ T787] usb 4-1: config 8 has no interface number 1 [ 925.133464][ T787] usb 4-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 925.279591][ T787] usb 4-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 925.342622][ T787] usb 4-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 925.383232][ T787] usb 4-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 925.410285][ T787] usb 4-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 925.413957][T10101] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 925.429123][ T787] usb 4-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 925.449511][ T787] usb 4-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 925.532892][ T787] usb 4-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 925.560535][ T787] usb 4-1: config 8 interface 156 has no altsetting 0 [ 925.570080][ T787] usb 4-1: config 8 interface 248 has no altsetting 0 [ 925.602674][T10101] usb 1-1: device descriptor read/64, error -71 [ 925.614501][ T787] usb 4-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 925.693955][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.772824][ T787] usb 4-1: Product: syz [ 925.796808][ T787] usb 4-1: Manufacturer: syz [ 925.859569][ T787] usb 4-1: SerialNumber: syz [ 925.882764][T10101] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 926.042603][T10101] usb 1-1: device descriptor read/64, error -71 [ 926.042694][ T787] usb 4-1: can't set config #8, error -71 [ 926.184750][T10101] usb usb1-port1: attempt power cycle [ 926.213728][ T787] usb 4-1: USB disconnect, device number 33 [ 926.508787][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 926.521996][T14439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2259'. [ 926.672971][T10101] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 926.829030][T10101] usb 1-1: device descriptor read/8, error -71 [ 927.122817][T10101] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 927.163560][T10101] usb 1-1: device descriptor read/8, error -71 [ 927.324811][T10101] usb usb1-port1: unable to enumerate USB device [ 930.572620][T14465] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.620062][ T8] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 930.992660][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 931.054858][ T8] usb 1-1: config 8 has an invalid interface number: 156 but max is 1 [ 931.095616][ T8] usb 1-1: config 8 has an invalid interface number: 248 but max is 1 [ 931.116432][ T8] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 931.127665][ T8] usb 1-1: config 8 has no interface number 0 [ 931.137278][ T8] usb 1-1: config 8 has no interface number 1 [ 931.150041][ T8] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 931.219088][ T8] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 931.368579][ T8] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 931.385834][ T8] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 931.414514][ T8] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 931.859687][ T8] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 931.871662][ T8] usb 1-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 932.161188][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.170377][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.285003][ T8] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 932.361248][ T8] usb 1-1: config 8 interface 156 has no altsetting 0 [ 932.401283][ T8] usb 1-1: config 8 interface 248 has no altsetting 0 [ 932.541508][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2268'. [ 932.683502][T14493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2268'. [ 932.856388][ T8] usb 1-1: string descriptor 0 read error: -71 [ 932.868602][ T8] usb 1-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 932.906047][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.137538][ T8] usb 1-1: can't set config #8, error -71 [ 933.154733][ T8] usb 1-1: USB disconnect, device number 51 [ 934.232529][T14520] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.722625][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 934.972750][ T23] usb 5-1: device descriptor read/64, error -71 [ 935.263055][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 935.424868][ T23] usb 5-1: device descriptor read/64, error -71 [ 935.452945][T14539] fuse: Bad value for 'group_id' [ 935.546043][ T23] usb usb5-port1: attempt power cycle [ 936.422653][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 936.480033][ T23] usb 5-1: device descriptor read/8, error -71 [ 936.792703][ T787] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 936.970327][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 937.592604][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 937.600078][ T787] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 937.622644][ T787] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 937.652667][ T787] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 937.681852][ T787] usb 3-1: config 8 has no interface number 0 [ 937.689186][ T23] usb 5-1: device descriptor read/8, error -71 [ 937.746140][ T787] usb 3-1: config 8 has no interface number 1 [ 937.752325][ T787] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 937.862653][ T787] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 937.901651][ T23] usb usb5-port1: unable to enumerate USB device [ 937.948343][ T787] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 938.072448][ T787] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 938.309225][ T787] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 938.652650][ T787] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 938.657352][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.674113][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.682721][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.683011][ T787] usb 3-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 938.693935][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.896981][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 938.906187][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 939.101596][T14577] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.242526][ T787] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 939.262559][ T787] usb 3-1: config 8 interface 156 has no altsetting 0 [ 939.269389][ T787] usb 3-1: config 8 interface 248 has no altsetting 0 [ 939.303567][ T787] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 939.328427][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.356954][ T787] usb 3-1: Product: syz [ 939.361164][ T787] usb 3-1: Manufacturer: syz [ 939.540104][ T787] usb 3-1: SerialNumber: syz [ 939.907864][T14570] lo speed is unknown, defaulting to 1000 [ 939.946375][ T787] usb 3-1: can't set config #8, error -71 [ 939.987766][ T787] usb 3-1: USB disconnect, device number 48 [ 941.013924][ T5771] Bluetooth: hci1: command tx timeout [ 942.112150][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 942.916928][T14621] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.993330][ T9] usb 1-1: device descriptor read/64, error -71 [ 943.092675][ T5771] Bluetooth: hci1: command tx timeout [ 943.273011][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 943.380299][T14570] chnl_net:caif_netlink_parms(): no params data found [ 943.453773][ T9] usb 1-1: device descriptor read/64, error -71 [ 943.913138][ T9] usb usb1-port1: attempt power cycle [ 944.404049][T14570] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.423007][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 944.432662][T14570] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.659682][T14570] bridge_slave_0: entered allmulticast mode [ 944.810422][T14570] bridge_slave_0: entered promiscuous mode [ 944.894300][ T9] usb 1-1: device descriptor read/8, error -71 [ 945.172565][ T5771] Bluetooth: hci1: command tx timeout [ 945.565907][T14570] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.665330][T14570] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.683096][T14570] bridge_slave_1: entered allmulticast mode [ 945.717101][T14570] bridge_slave_1: entered promiscuous mode [ 945.834272][T14570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.894896][T14570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.970199][T14570] team0: Port device team_slave_0 added [ 946.009241][T14570] team0: Port device team_slave_1 added [ 946.401033][T14570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.491376][T14570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.775386][T14570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.831267][T14570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.870621][T14570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.872825][ T787] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 946.948765][T14570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.087584][T14679] ieee802154 phy0 wpan0: encryption failed: -22 [ 947.098321][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 947.137215][ T787] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 947.157078][ T787] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 947.363566][ T5771] Bluetooth: hci1: command tx timeout [ 947.806910][ T787] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 947.815891][ T787] usb 3-1: config 8 has no interface number 0 [ 947.823864][ T787] usb 3-1: config 8 has no interface number 1 [ 947.830069][ T787] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 947.841732][ T787] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 947.855214][ T787] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 947.866606][ T787] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 947.892051][ T787] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 947.910475][ T787] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 947.992818][ T787] usb 3-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 948.044881][ T787] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 948.062324][ T787] usb 3-1: config 8 interface 156 has no altsetting 0 [ 948.072284][ T787] usb 3-1: config 8 interface 248 has no altsetting 0 [ 948.388280][T14570] hsr_slave_0: entered promiscuous mode [ 948.601663][T14570] hsr_slave_1: entered promiscuous mode [ 948.608848][T14570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.615012][ T787] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 948.619630][T14570] Cannot create hsr debugfs directory [ 948.631396][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.650032][ T787] usb 3-1: Product: syz [ 948.701095][ T787] usb 3-1: can't set config #8, error -71 [ 948.753145][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 948.761296][ T787] usb 3-1: USB disconnect, device number 49 [ 949.691840][ T9] usb 1-1: device descriptor read/64, error -71 [ 949.783803][ T6864] bond0: (slave wlan1): Releasing backup interface [ 950.002706][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 950.117486][ T6864] hsr_slave_0: left promiscuous mode [ 950.127009][ T6864] hsr_slave_1: left promiscuous mode [ 950.312688][ T9] usb 1-1: device descriptor read/64, error -71 [ 950.975069][ T9] usb usb1-port1: attempt power cycle [ 952.155802][ T9] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 952.315448][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 952.392316][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 952.481665][ T9] usb 1-1: config 8 has an invalid interface number: 156 but max is 1 [ 952.499579][ T9] usb 1-1: config 8 has an invalid interface number: 248 but max is 1 [ 952.562579][ T9] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 952.577270][ T9] usb 1-1: config 8 has no interface number 0 [ 952.585348][ T9] usb 1-1: config 8 has no interface number 1 [ 952.591799][ T9] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 952.612528][ T9] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 952.672626][ T9] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 952.802557][ T9] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 952.815379][ T9] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 952.869074][ T9] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 952.890303][ T9] usb 1-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 952.983179][ T9] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 953.006714][ T9] usb 1-1: config 8 interface 156 has no altsetting 0 [ 953.044094][ T9] usb 1-1: config 8 interface 248 has no altsetting 0 [ 953.099948][ T9] usb 1-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 953.126067][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.139795][ T9] usb 1-1: Product: syz [ 953.144289][ T9] usb 1-1: Manufacturer: syz [ 953.148917][ T9] usb 1-1: SerialNumber: syz [ 953.480835][ T9] hub 1-1:8.156: Invalid hub with more than one config or interface [ 953.651133][ T9] hub: probe of 1-1:8.156 failed with error -22 [ 953.680513][ T9] io_ti 1-1:8.156: required endpoints missing [ 953.729155][ T9] io_ti 1-1:8.248: required endpoints missing [ 953.767845][ T9] usb 1-1: USB disconnect, device number 59 [ 955.356967][ T6864] bond0 (unregistering): Released all slaves [ 955.492802][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 955.663182][ T9] usb 1-1: device descriptor read/64, error -71 [ 955.757699][T14759] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.956167][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 956.512579][ T9] usb 1-1: device descriptor read/64, error -71 [ 956.661394][ T9] usb usb1-port1: attempt power cycle [ 957.232399][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 957.357089][ T9] usb 1-1: device descriptor read/8, error -71 [ 957.490346][T14570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 957.515885][T14570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 957.536781][T14570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 957.552974][T14570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 957.643283][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 957.693768][ T9] usb 1-1: device descriptor read/8, error -71 [ 957.766791][T14570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.820132][T14570] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.827925][ T9] usb usb1-port1: unable to enumerate USB device [ 957.852709][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.859866][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.876063][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.883266][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.978237][T14570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.066662][ T23] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 958.292777][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 958.316066][ T23] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 958.337968][ T23] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 958.356885][ T23] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 958.366276][T14570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.368879][ T23] usb 3-1: config 8 has no interface number 0 [ 958.381182][ T23] usb 3-1: config 8 has no interface number 1 [ 958.508006][T14570] veth0_vlan: entered promiscuous mode [ 958.562306][ T23] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 958.575313][ T23] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 958.586109][ T23] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 958.596906][ T23] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 958.606921][T14570] veth1_vlan: entered promiscuous mode [ 958.613053][ T23] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 958.613083][ T23] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 959.697659][ T23] usb 3-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 959.707870][ T23] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 959.718918][ T23] usb 3-1: config 8 interface 156 has no altsetting 0 [ 959.725744][ T23] usb 3-1: config 8 interface 248 has no altsetting 0 [ 959.862407][ T23] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 959.883431][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.891709][ T23] usb 3-1: Product: syz [ 959.900385][ T23] usb 3-1: Manufacturer: syz [ 959.906210][ T23] usb 3-1: SerialNumber: syz [ 959.922303][T14570] veth0_macvtap: entered promiscuous mode [ 959.981456][T14570] veth1_macvtap: entered promiscuous mode [ 960.017239][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.028629][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.044615][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.057922][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.090634][T14570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.125802][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.144483][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.168540][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.185763][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.197223][ T23] hub 3-1:8.156: Invalid hub with more than one config or interface [ 960.205431][ T23] hub: probe of 3-1:8.156 failed with error -22 [ 960.212328][ T23] io_ti 3-1:8.156: required endpoints missing [ 960.214660][T14570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.228999][ T23] io_ti 3-1:8.248: required endpoints missing [ 960.396472][T14570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.520693][T14570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.652109][T14570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.822840][T14570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.924067][ T23] usb 3-1: USB disconnect, device number 50 [ 961.020931][T14831] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.639833][ T5934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.702140][ T5934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.780416][ T6864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.801079][ T6864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.692278][ T5796] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 963.002893][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 963.020791][ T5796] usb 5-1: no configurations [ 963.028711][ T5796] usb 5-1: can't read configurations, error -22 [ 963.183063][ T5796] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 963.183767][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 963.374274][T14860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2284'. [ 963.422984][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 963.433026][ T5796] usb 5-1: no configurations [ 963.443428][ T5796] usb 5-1: can't read configurations, error -22 [ 963.482883][ T5796] usb usb5-port1: attempt power cycle [ 963.811572][T13094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 963.826480][T13094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 963.835441][T13094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 963.845646][T13094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 963.855589][T13094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 963.863089][T13094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 964.155894][T14863] lo speed is unknown, defaulting to 1000 [ 964.174830][ T5796] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 964.234416][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 964.240401][ T5796] usb 5-1: no configurations [ 964.251501][ T5796] usb 5-1: can't read configurations, error -22 [ 964.401841][T14863] chnl_net:caif_netlink_parms(): no params data found [ 964.422868][ T5796] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 964.482027][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 964.488202][ T5796] usb 5-1: no configurations [ 964.497809][ T5796] usb 5-1: can't read configurations, error -22 [ 964.506566][ T5796] usb usb5-port1: unable to enumerate USB device [ 964.508209][T14863] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.527529][T14863] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.554919][T14863] bridge_slave_0: entered allmulticast mode [ 964.562361][T14863] bridge_slave_0: entered promiscuous mode [ 964.576609][T14863] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.591464][T14863] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.667122][T14863] bridge_slave_1: entered allmulticast mode [ 964.674170][T14863] bridge_slave_1: entered promiscuous mode [ 964.705770][T14863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.722946][T14863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.506303][T14863] team0: Port device team_slave_0 added [ 965.506783][T14882] ieee802154 phy0 wpan0: encryption failed: -22 [ 965.521048][T14863] team0: Port device team_slave_1 added [ 965.648765][T14863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.671417][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.744125][T14863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.818562][T14863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.829093][ T9781] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 965.849174][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.981027][T14863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.063411][ T9781] usb 1-1: Using ep0 maxpacket: 32 [ 966.080057][ T9781] usb 1-1: config 8 has an invalid interface number: 156 but max is 1 [ 966.133813][T13094] Bluetooth: hci2: command tx timeout [ 966.184421][ T9781] usb 1-1: config 8 has an invalid interface number: 248 but max is 1 [ 966.243115][ T9781] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 966.287667][ T9781] usb 1-1: config 8 has no interface number 0 [ 966.315576][ T9781] usb 1-1: config 8 has no interface number 1 [ 966.328126][ T9781] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 966.349241][ T9781] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 966.361358][ T9781] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 966.377721][ T9781] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 966.379275][T14863] hsr_slave_0: entered promiscuous mode [ 966.390664][ T9781] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 966.411852][ T9781] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 966.423806][T14863] hsr_slave_1: entered promiscuous mode [ 966.428386][ T9781] usb 1-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 966.440780][ T9781] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 966.441225][T14863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 966.452483][ T9781] usb 1-1: config 8 interface 156 has no altsetting 0 [ 966.477580][ T9781] usb 1-1: config 8 interface 248 has no altsetting 0 [ 966.480255][T14863] Cannot create hsr debugfs directory [ 966.612666][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 966.703976][ T9781] usb 1-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 966.713123][ T9781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.721130][ T9781] usb 1-1: Product: syz [ 966.725573][ T9781] usb 1-1: Manufacturer: syz [ 966.730197][ T9781] usb 1-1: SerialNumber: syz [ 966.888375][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 966.913817][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.961926][ T23] usb 5-1: config 0 has no interfaces? [ 967.027197][ T23] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 967.182779][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.322133][ T23] usb 5-1: config 0 descriptor?? [ 967.423789][ T9781] hub 1-1:8.156: Invalid hub with more than one config or interface [ 967.442533][ T9781] hub: probe of 1-1:8.156 failed with error -22 [ 967.449573][ T9781] io_ti 1-1:8.156: required endpoints missing [ 967.459666][ T9781] io_ti 1-1:8.248: required endpoints missing [ 967.482032][ T9781] usb 1-1: USB disconnect, device number 64 [ 967.571060][ T23] usb 5-1: USB disconnect, device number 12 [ 967.738485][T14863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 967.804508][T14863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 967.818523][T14863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 967.835686][T14863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 968.118444][T14863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.139153][T14863] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.153930][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.161062][ T6864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.178262][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.185396][ T6864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.212653][T13094] Bluetooth: hci2: command tx timeout [ 969.842773][ T9781] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 969.979020][T14863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.051057][T14863] veth0_vlan: entered promiscuous mode [ 970.106018][T14863] veth1_vlan: entered promiscuous mode [ 970.172757][ T9781] usb 5-1: Using ep0 maxpacket: 8 [ 970.178663][ T9781] usb 5-1: no configurations [ 970.194358][ T9781] usb 5-1: can't read configurations, error -22 [ 970.402959][T13094] Bluetooth: hci2: command tx timeout [ 970.925047][T14863] veth0_macvtap: entered promiscuous mode [ 970.956735][ T9781] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 971.134451][T14863] veth1_macvtap: entered promiscuous mode [ 971.156277][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2361'. [ 971.232615][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 971.362681][ T9781] usb 5-1: Using ep0 maxpacket: 8 [ 971.422990][ T9781] usb 5-1: no configurations [ 971.475500][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.492549][ T9781] usb 5-1: can't read configurations, error -22 [ 971.506906][ T9781] usb usb5-port1: attempt power cycle [ 971.515991][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.516493][T14934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2359'. [ 971.529860][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.572245][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.590205][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.602322][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.618344][T14863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.643694][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.655293][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.666318][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.677133][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.690081][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.700786][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.714951][T14863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.736228][T14863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.750713][T14863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.760515][T14863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.822272][T14863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.882609][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 971.897374][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.910651][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.932859][ T9781] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 971.946393][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.954674][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.963541][ T9781] usb 5-1: Using ep0 maxpacket: 8 [ 971.983979][ T9781] usb 5-1: no configurations [ 971.988628][ T9781] usb 5-1: can't read configurations, error -22 [ 972.062620][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 972.168046][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.180174][ T9] usb 1-1: config 0 has no interfaces? [ 972.186125][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 972.195440][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.205334][ T9] usb 1-1: config 0 descriptor?? [ 972.222583][ T9781] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 972.452819][T13094] Bluetooth: hci2: command tx timeout [ 972.945805][ T9781] usb 5-1: device descriptor read/8, error -71 [ 972.981830][ T787] usb 1-1: USB disconnect, device number 65 [ 973.067730][ T9781] usb usb5-port1: unable to enumerate USB device [ 975.150530][T14967] autofs4:pid:14967:autofs_fill_super: called with bogus options [ 975.743813][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2371'. [ 976.212776][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 976.325320][ T787] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 976.353521][T14976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2370'. [ 976.596308][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 976.929216][T14995] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 977.014837][T14995] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 977.230072][T14995] team0: Device ipvlan1 failed to register rx_handler [ 977.304253][ T787] usb 5-1: no configurations [ 977.308903][ T787] usb 5-1: can't read configurations, error -22 [ 977.462797][ T787] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 977.472517][ T9781] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 977.662720][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 977.668025][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 977.682918][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 977.698968][ T787] usb 5-1: no configurations [ 977.716571][ T9781] usb 4-1: config 0 interface 0 has no altsetting 0 [ 977.738343][ T787] usb 5-1: can't read configurations, error -22 [ 977.773084][ T9781] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 977.801110][ T787] usb usb5-port1: attempt power cycle [ 977.832648][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.966615][ T9781] usb 4-1: config 0 descriptor?? [ 977.985124][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 978.106328][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.192215][ T9] usb 3-1: config 0 has no interfaces? [ 978.198149][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 978.209161][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.221338][ T9] usb 3-1: config 0 descriptor?? [ 978.314056][ T787] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 978.353217][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 978.359330][ T787] usb 5-1: no configurations [ 978.364239][ T787] usb 5-1: can't read configurations, error -22 [ 978.441092][ T5753] usb 3-1: USB disconnect, device number 51 [ 978.502981][ T9781] hid-u2fzero 0003:20A0:4287.000A: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 978.533001][ T787] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 978.559832][ T9781] hid-u2fzero 0003:20A0:4287.000A: NitroKey U2F LED initialised [ 978.583238][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 978.589029][ T787] usb 5-1: no configurations [ 978.594142][ T787] usb 5-1: can't read configurations, error -22 [ 978.601573][ T787] usb usb5-port1: unable to enumerate USB device [ 978.819199][ T9781] hid-u2fzero 0003:20A0:4287.000A: hid_hw_output_report failed: -71 [ 978.968782][ T9781] hid-u2fzero 0003:20A0:4287.000A: NitroKey U2F RNG initialised [ 979.199537][ T9781] usb 4-1: USB disconnect, device number 34 [ 979.389217][T15015] autofs4:pid:15015:autofs_fill_super: called with bogus options [ 979.604495][T15020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2382'. [ 979.682663][ T787] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 980.673791][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 980.791594][ T787] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 980.805423][ T787] usb 1-1: config 0 has no interface number 0 [ 980.977559][ T787] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 981.016672][ T787] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 981.813206][ T787] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 982.000020][ T787] usb 1-1: Product: syz [ 982.048607][ T787] usb 1-1: SerialNumber: syz [ 982.083097][ T787] usb 1-1: config 0 descriptor?? [ 982.107944][ T787] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 982.957491][ T787] usb 1-1: USB disconnect, device number 66 [ 984.168223][T15024] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 984.352094][T15059] autofs4:pid:15059:autofs_fill_super: called with bogus options [ 984.392723][T15024] usb 4-1: Using ep0 maxpacket: 8 [ 984.405523][T15024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.441381][T15024] usb 4-1: config 0 has no interfaces? [ 984.451074][T15024] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 984.467305][T15024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.477264][T15024] usb 4-1: Product: syz [ 984.481487][T15024] usb 4-1: Manufacturer: syz [ 984.491936][T15024] usb 4-1: SerialNumber: syz [ 984.508304][T15024] usb 4-1: config 0 descriptor?? [ 984.542538][ T9781] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 984.846525][ T787] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 985.533006][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 985.538174][ T9781] usb 1-1: Using ep0 maxpacket: 16 [ 985.545467][ T787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 985.552081][ T787] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 986.241721][ T9781] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.258041][ T9781] usb 1-1: config 0 has no interfaces? [ 986.263646][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.272756][ T9781] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 986.281821][ T9781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.301249][ T787] usb 5-1: config 0 descriptor?? [ 986.352727][ T9] usb 4-1: USB disconnect, device number 35 [ 986.369502][ T9781] usb 1-1: config 0 descriptor?? [ 986.632002][T15024] usb 1-1: USB disconnect, device number 67 [ 986.732713][ T5753] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 986.759827][ T787] hid-u2fzero 0003:20A0:4287.000B: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0 [ 986.774737][ T787] hid-u2fzero 0003:20A0:4287.000B: NitroKey U2F LED initialised [ 986.902628][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 986.944031][ T5753] usb 3-1: Using ep0 maxpacket: 32 [ 986.951858][ T5753] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 986.960190][ T5753] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 986.968499][ T787] hid-u2fzero 0003:20A0:4287.000B: hid_hw_output_report failed: -71 [ 986.976543][ T787] hid-u2fzero 0003:20A0:4287.000B: NitroKey U2F RNG initialised [ 986.984277][ T5753] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 986.996928][ T5753] usb 3-1: config 8 has no interface number 0 [ 987.003401][ T787] usb 5-1: USB disconnect, device number 21 [ 987.009687][ T5753] usb 3-1: config 8 has no interface number 1 [ 987.017189][ T5753] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 987.034718][ T5753] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 987.047865][ T5753] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 987.062495][ T5753] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 987.073923][ T5753] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 987.085250][ T5753] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 987.096400][ T5753] usb 3-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 987.106561][ T5753] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 987.117571][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 987.122634][ T5753] usb 3-1: config 8 interface 156 has no altsetting 0 [ 987.130838][ T5753] usb 3-1: config 8 interface 248 has no altsetting 0 [ 987.139331][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.157575][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.157918][ T5753] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 987.177078][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 987.189970][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.198296][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 987.207435][ T5753] usb 3-1: Product: syz [ 987.211618][ T5753] usb 3-1: Manufacturer: syz [ 987.216670][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.225237][ T5753] usb 3-1: SerialNumber: syz [ 987.236866][ T9] usb 4-1: config 0 descriptor?? [ 987.461751][ T5753] hub 3-1:8.156: Invalid hub with more than one config or interface [ 987.470219][ T5753] hub: probe of 3-1:8.156 failed with error -22 [ 987.477184][ T5753] io_ti 3-1:8.156: required endpoints missing [ 987.488000][ T5753] io_ti 3-1:8.248: required endpoints missing [ 987.509917][ T5753] usb 3-1: USB disconnect, device number 52 [ 987.655674][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 987.847960][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 987.857446][ T9] usb 4-1: USB disconnect, device number 36 [ 989.195395][T15088] sp0: Synchronizing with TNC [ 989.680929][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'. [ 992.282993][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 992.385896][T15120] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 992.385896][T15120] program syz.2.2407 not setting count and/or reply_len properly [ 992.803957][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 992.872692][T15024] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 992.878779][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.880334][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 992.880346][ T27] audit: type=1326 audit(1751244465.465:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.2407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311b58e929 code=0x0 [ 992.892253][ T9] usb 1-1: config 0 has no interfaces? [ 992.932647][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 992.941929][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.953025][ T9] usb 1-1: config 0 descriptor?? [ 993.073025][T15024] usb 5-1: Using ep0 maxpacket: 32 [ 993.089982][T15024] usb 5-1: config 8 has an invalid interface number: 156 but max is 1 [ 993.112774][T15024] usb 5-1: config 8 has an invalid interface number: 248 but max is 1 [ 993.120986][T15024] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 993.133584][T15024] usb 5-1: config 8 has no interface number 0 [ 993.139704][T15024] usb 5-1: config 8 has no interface number 1 [ 993.152015][T15024] usb 5-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 993.165962][T15024] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 993.181059][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.185158][T15024] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 993.189434][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.199108][T15024] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 993.219017][ T5753] usb 1-1: USB disconnect, device number 68 [ 993.225098][T15024] usb 5-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 993.225128][T15024] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 993.254615][T15024] usb 5-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 993.288880][T15024] usb 5-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 993.300457][T15024] usb 5-1: config 8 interface 156 has no altsetting 0 [ 993.310903][T15024] usb 5-1: config 8 interface 248 has no altsetting 0 [ 993.334965][T15024] usb 5-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 993.349539][T15024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.358264][T15026] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 993.363912][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2410'. [ 993.366119][T15024] usb 5-1: Product: syz [ 993.385616][T15024] usb 5-1: Manufacturer: syz [ 993.390350][T15024] usb 5-1: SerialNumber: syz [ 993.508082][T15135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2410'. [ 993.572855][T15026] usb 3-1: Using ep0 maxpacket: 8 [ 993.603493][T15026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.615519][T15026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.625840][T15026] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 993.661700][T15026] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 993.695014][T15024] hub 5-1:8.156: Invalid hub with more than one config or interface [ 993.703489][T15026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.739416][T15026] usb 3-1: config 0 descriptor?? [ 993.745846][T15024] hub: probe of 5-1:8.156 failed with error -22 [ 993.758186][T15024] io_ti 5-1:8.156: required endpoints missing [ 993.836140][T15024] io_ti 5-1:8.248: required endpoints missing [ 993.907385][T15024] usb 5-1: USB disconnect, device number 22 [ 994.748667][T15026] usbhid 3-1:0.0: can't add hid device: -71 [ 994.903571][T15026] usbhid: probe of 3-1:0.0 failed with error -71 [ 994.913295][T15026] usb 3-1: USB disconnect, device number 53 [ 995.461268][T15150] sp0: Synchronizing with TNC [ 995.642653][ T5753] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 995.978642][ T5753] usb 5-1: Using ep0 maxpacket: 32 [ 996.317072][ T5753] usb 5-1: config 8 has an invalid interface number: 156 but max is 1 [ 996.334571][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2414'. [ 996.344550][ T5753] usb 5-1: config 8 has an invalid interface number: 248 but max is 1 [ 996.368991][ T5753] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 996.395150][ T5753] usb 5-1: config 8 has no interface number 0 [ 996.427558][ T5753] usb 5-1: config 8 has no interface number 1 [ 996.444776][ T5753] usb 5-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 996.462419][ T5753] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 996.479298][ T5753] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 996.493690][ T5753] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 996.522503][ T5753] usb 5-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 996.567849][ T5753] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 996.617489][ T5753] usb 5-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 996.637605][ T5753] usb 5-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 996.662750][ T5753] usb 5-1: config 8 interface 156 has no altsetting 0 [ 996.669582][ T5753] usb 5-1: config 8 interface 248 has no altsetting 0 [ 996.705935][ T5753] usb 5-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 996.733715][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.777860][ T5753] usb 5-1: Product: syz [ 996.808431][ T5753] usb 5-1: Manufacturer: syz [ 996.868809][ T5753] usb 5-1: SerialNumber: syz [ 997.174512][ T5753] hub 5-1:8.156: Invalid hub with more than one config or interface [ 997.193149][ T5753] hub: probe of 5-1:8.156 failed with error -22 [ 998.032587][ T5753] io_ti 5-1:8.156: required endpoints missing [ 998.213170][ T5753] io_ti 5-1:8.248: required endpoints missing [ 998.342895][ T787] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 998.794482][ T5753] usb 5-1: USB disconnect, device number 23 [ 998.992574][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 999.004495][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.055760][ T787] usb 4-1: config 0 has no interfaces? [ 999.061300][ T787] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 999.282538][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.342925][T15026] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 999.350384][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2421'. [ 999.371754][T15174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2421'. [ 999.496486][ T787] usb 4-1: config 0 descriptor?? [ 999.752611][T15026] usb 1-1: Using ep0 maxpacket: 8 [ 999.760584][T15026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.825556][T15026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.872758][T15026] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 999.918467][ T787] usb 4-1: USB disconnect, device number 37 [ 999.962143][T15026] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1000.005752][T15026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.043728][T15026] usb 1-1: config 0 descriptor?? [ 1000.342579][T15024] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1000.461774][T15026] usbhid 1-1:0.0: can't add hid device: -71 [ 1000.472398][T15026] usbhid: probe of 1-1:0.0 failed with error -71 [ 1000.492332][T15026] usb 1-1: USB disconnect, device number 69 [ 1000.522639][T15024] usb 5-1: Using ep0 maxpacket: 8 [ 1000.529293][T15024] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.541852][T15024] usb 5-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1000.555990][T15024] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1000.565277][T15024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.573332][T15024] usb 5-1: Product: syz [ 1000.577489][T15024] usb 5-1: Manufacturer: syz [ 1000.582065][T15024] usb 5-1: SerialNumber: syz [ 1000.732608][ T787] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1000.776530][ T5753] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1000.912531][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 1000.920866][ T787] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1000.930067][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.938392][ T787] usb 4-1: Product: syz [ 1000.942794][ T787] usb 4-1: Manufacturer: syz [ 1000.948060][ T787] usb 4-1: SerialNumber: syz [ 1000.955286][ T787] usb 4-1: config 0 descriptor?? [ 1000.972624][ T5753] usb 3-1: Using ep0 maxpacket: 16 [ 1000.984458][ T5753] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.995319][ T5753] usb 3-1: config 0 has no interfaces? [ 1001.000854][ T5753] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1001.009995][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.030907][ T5753] usb 3-1: config 0 descriptor?? [ 1001.421170][ T787] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1001.448075][ T5753] usb 3-1: USB disconnect, device number 54 [ 1003.145560][ T9] usb 5-1: USB disconnect, device number 24 [ 1003.382764][ T787] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1003.399644][ T787] usb 4-1: USB disconnect, device number 38 [ 1003.522538][T15026] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1003.652554][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1003.702501][T15026] usb 3-1: Using ep0 maxpacket: 32 [ 1003.709024][T15026] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 1003.718086][T15026] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 1003.726427][T15026] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1003.735242][T15026] usb 3-1: config 8 has no interface number 0 [ 1003.741333][T15026] usb 3-1: config 8 has no interface number 1 [ 1003.747538][T15026] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 1003.758815][T15026] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 1003.769651][T15026] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 1003.780399][T15026] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 1003.791158][T15026] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1003.802062][T15026] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1003.815031][T15026] usb 3-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1003.825234][T15026] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1003.836314][T15026] usb 3-1: config 8 interface 156 has no altsetting 0 [ 1003.843175][T15026] usb 3-1: config 8 interface 248 has no altsetting 0 [ 1003.851897][T15026] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1003.858818][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.861000][T15026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.879217][T15026] usb 3-1: Product: syz [ 1003.884084][T15026] usb 3-1: Manufacturer: syz [ 1003.884218][ T9] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1003.888685][T15026] usb 3-1: SerialNumber: syz [ 1003.902927][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.923786][ T9] usb 5-1: config 0 descriptor?? [ 1003.940164][ T9] rndis_wlan: probe of 5-1:0.0 failed with error -22 [ 1003.948580][ T9] rndis_host: probe of 5-1:0.0 failed with error -22 [ 1004.152332][T15026] hub 3-1:8.156: Invalid hub with more than one config or interface [ 1004.160898][T15026] hub: probe of 3-1:8.156 failed with error -22 [ 1004.169054][T15026] io_ti 3-1:8.156: required endpoints missing [ 1004.180116][T15026] io_ti 3-1:8.248: required endpoints missing [ 1004.194213][T15026] usb 3-1: USB disconnect, device number 55 [ 1004.233475][ T9] usb 5-1: USB disconnect, device number 25 [ 1005.792117][ T9781] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1006.226579][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.237447][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 1006.259976][ T9781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.274266][ T9781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.306034][ T9781] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1006.415246][ T9781] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1006.475043][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.502550][T15024] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1006.674770][ T9781] usb 4-1: config 0 descriptor?? [ 1006.683323][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.863708][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1006.870266][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.883120][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1006.892401][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1006.892732][T15024] usb 3-1: Using ep0 maxpacket: 16 [ 1006.906167][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1006.907340][T15024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.945984][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1006.953473][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1006.991555][T15024] usb 3-1: config 0 has no interfaces? [ 1007.011715][T15024] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1007.021297][T15024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.044047][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.048720][T15024] usb 3-1: config 0 descriptor?? [ 1007.125443][ T9781] usbhid 4-1:0.0: can't add hid device: -71 [ 1007.203119][ T9781] usbhid: probe of 4-1:0.0 failed with error -71 [ 1007.382013][ T9781] usb 4-1: USB disconnect, device number 39 [ 1007.751903][T15234] lo speed is unknown, defaulting to 1000 [ 1008.243804][T15024] usb 3-1: USB disconnect, device number 56 [ 1008.305855][ T58] tipc: Left network mode [ 1009.012828][ T5771] Bluetooth: hci0: command tx timeout [ 1009.081554][T15026] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1009.302574][T15026] usb 4-1: Using ep0 maxpacket: 8 [ 1009.323669][T15026] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1009.330551][T15026] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1009.345476][T15026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.396024][T15026] usb 4-1: config 0 descriptor?? [ 1009.589853][T15259] ax25_connect(): syz.4.2445 uses autobind, please contact jreuter@yaina.de [ 1009.965906][T15026] usbhid 4-1:0.0: can't add hid device: -71 [ 1009.982928][T15026] usbhid: probe of 4-1:0.0 failed with error -71 [ 1010.003230][T15026] usb 4-1: USB disconnect, device number 40 [ 1010.702592][T15234] chnl_net:caif_netlink_parms(): no params data found [ 1011.168914][ T5771] Bluetooth: hci0: command tx timeout [ 1012.246487][T15234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.261082][T15234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.262713][ T5753] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1012.269974][T15234] bridge_slave_0: entered allmulticast mode [ 1012.295005][T15234] bridge_slave_0: entered promiscuous mode [ 1012.302729][T15026] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1012.324624][T15234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.331790][T15234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.345575][T15234] bridge_slave_1: entered allmulticast mode [ 1012.356786][T15234] bridge_slave_1: entered promiscuous mode [ 1012.464538][ T5753] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1012.469052][T15234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.472999][ T787] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1012.483443][ T5753] usb 3-1: config 0 has no interface number 0 [ 1012.506514][ T5753] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1012.521242][ T5753] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1012.539141][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.550005][T15234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.560197][T15026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.566526][ T5753] usb 3-1: Product: syz [ 1012.581792][T15026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.593072][ T5753] usb 3-1: Manufacturer: syz [ 1012.595293][T15026] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1012.601320][ T5753] usb 3-1: SerialNumber: syz [ 1012.628841][T15026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.637876][ T5753] usb 3-1: config 0 descriptor?? [ 1012.650378][T15026] usb 4-1: config 0 descriptor?? [ 1012.656272][ T58] hsr_slave_0: left promiscuous mode [ 1012.671021][ T58] hsr_slave_1: left promiscuous mode [ 1012.677178][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 1012.685944][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.701984][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.710201][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.717684][ T787] usb 5-1: config 0 has no interfaces? [ 1012.724858][ T787] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1012.735788][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.743656][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.751977][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.760612][ T58] bridge_slave_1: left allmulticast mode [ 1012.769615][ T787] usb 5-1: config 0 descriptor?? [ 1012.782669][ T58] bridge_slave_1: left promiscuous mode [ 1012.792963][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.803610][ T58] bridge_slave_0: left allmulticast mode [ 1012.809318][ T58] bridge_slave_0: left promiscuous mode [ 1012.815753][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.869218][ T5753] usbtouchscreen 3-1:0.214: Failed to read FW rev: 0 [ 1012.886862][ T5753] usbtouchscreen: probe of 3-1:0.214 failed with error -5 [ 1012.908614][ T58] veth1_macvtap: left promiscuous mode [ 1012.914353][ T58] veth0_macvtap: left promiscuous mode [ 1012.921425][ T58] veth1_vlan: left promiscuous mode [ 1013.004712][ T9] usb 5-1: USB disconnect, device number 26 [ 1013.096312][T15026] usbhid 4-1:0.0: can't add hid device: -71 [ 1013.110472][T15026] usbhid: probe of 4-1:0.0 failed with error -71 [ 1013.121282][T15026] usb 4-1: USB disconnect, device number 41 [ 1013.166651][ T8] usb 3-1: USB disconnect, device number 57 [ 1013.257211][ T5771] Bluetooth: hci0: command tx timeout [ 1014.692602][T15026] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1014.983802][T15026] usb 4-1: Using ep0 maxpacket: 8 [ 1015.000847][T15026] usb 4-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.016886][T15026] usb 4-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1015.036123][T15026] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1015.070703][T15026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.081311][T15026] usb 4-1: Product: syz [ 1015.092813][T15026] usb 4-1: Manufacturer: syz [ 1015.097821][T15026] usb 4-1: SerialNumber: syz [ 1015.168810][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1015.224240][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1015.282064][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.372923][ T5771] Bluetooth: hci0: command tx timeout [ 1015.421338][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.995616][T15332] ax25_connect(): syz.2.2458 uses autobind, please contact jreuter@yaina.de [ 1016.200898][ T58] bond0 (unregistering): Released all slaves [ 1016.302080][T15234] team0: Port device team_slave_0 added [ 1016.345491][ T5753] lo speed is unknown, defaulting to 1000 [ 1016.358983][T15234] team0: Port device team_slave_1 added [ 1016.383356][ T8] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1016.427039][T15234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.434287][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.461985][T15234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.482358][T15234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.510146][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.557005][T15234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.578300][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1016.589567][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.643473][ T8] usb 3-1: config 0 has no interfaces? [ 1016.649169][ T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1016.676877][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.747974][T15234] hsr_slave_0: entered promiscuous mode [ 1016.753037][ T8] usb 3-1: config 0 descriptor?? [ 1016.758912][T15234] hsr_slave_1: entered promiscuous mode [ 1016.774532][T15234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1016.792498][T15234] Cannot create hsr debugfs directory [ 1016.837838][ T8] usb 4-1: USB disconnect, device number 42 [ 1016.972535][T15026] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1016.981125][ T787] usb 3-1: USB disconnect, device number 58 [ 1017.198646][T15026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.221718][T15026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.234408][T15026] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1017.247021][T15026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.270929][T15026] usb 5-1: config 0 descriptor?? [ 1017.725425][T15026] usbhid 5-1:0.0: can't add hid device: -71 [ 1017.753012][T15026] usbhid: probe of 5-1:0.0 failed with error -71 [ 1017.778641][T15026] usb 5-1: USB disconnect, device number 27 [ 1017.942296][T15234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1017.973580][T15234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1017.993647][T15234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1018.004126][T15234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1018.805891][T15234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.933667][T15234] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.028344][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.035615][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.069448][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.076625][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.252983][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1019.285812][ T8] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1019.364826][T15234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.446349][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.459053][T15234] veth0_vlan: entered promiscuous mode [ 1019.475591][ T8] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1019.488972][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.501291][ T8] usb 4-1: config 0 has no interface number 0 [ 1019.519683][T15234] veth1_vlan: entered promiscuous mode [ 1019.525801][ T8] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1019.536820][ T9] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1019.554556][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.565106][ T8] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1019.581894][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.600977][ T9] usb 3-1: config 0 descriptor?? [ 1019.611612][ T8] usb 4-1: Product: syz [ 1019.618298][ T8] usb 4-1: Manufacturer: syz [ 1019.631788][T15234] veth0_macvtap: entered promiscuous mode [ 1019.637903][ T8] usb 4-1: SerialNumber: syz [ 1019.652282][T15234] veth1_macvtap: entered promiscuous mode [ 1019.676636][ T8] usb 4-1: config 0 descriptor?? [ 1019.764700][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.786668][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.801791][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.813742][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.823956][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.835958][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.849777][T15234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.874813][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.897932][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.910125][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.925746][ T8] usbtouchscreen 4-1:0.214: Failed to read FW rev: 0 [ 1019.930002][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.942917][ T8] usbtouchscreen: probe of 4-1:0.214 failed with error -5 [ 1019.943252][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.966161][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.988360][T15234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.004208][T15234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.015354][T15234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.024940][T15234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.034826][T15234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.040836][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1020.058428][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 1020.087382][ T9] usb 3-1: USB disconnect, device number 59 [ 1020.166650][ T787] usb 4-1: USB disconnect, device number 43 [ 1020.203043][ T6864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.210880][ T6864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.261996][ T6864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.274984][ T6864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.910082][T13094] Bluetooth: hci4: command 0x0406 tx timeout [ 1021.488260][ T787] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1021.528755][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'. [ 1021.694228][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 1021.716225][ T787] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1021.739966][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.763548][ T787] usb 1-1: Product: syz [ 1021.767758][ T787] usb 1-1: Manufacturer: syz [ 1021.791303][ T787] usb 1-1: SerialNumber: syz [ 1021.821006][ T787] usb 1-1: config 0 descriptor?? [ 1021.837260][ T9781] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1022.156968][ T787] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1022.222632][ T9781] usb 4-1: Using ep0 maxpacket: 16 [ 1022.244229][ T9781] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.276612][ T9781] usb 4-1: config 0 has no interfaces? [ 1022.289778][ T9781] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1022.309827][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.329299][ T9781] usb 4-1: config 0 descriptor?? [ 1022.625638][ T23] usb 4-1: USB disconnect, device number 44 [ 1023.368289][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 1023.380278][T15471] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2478'. [ 1023.652025][ T787] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1023.684406][ T787] usb 1-1: USB disconnect, device number 70 [ 1024.002940][ T9781] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1024.315205][ T9781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1024.418180][ T9781] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1024.548136][ T9781] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1024.582481][ T9781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.607583][ T9781] usb 3-1: Product: syz [ 1024.622142][ T9781] usb 3-1: Manufacturer: syz [ 1024.642608][ T9781] usb 3-1: SerialNumber: syz [ 1024.671040][ T9781] usb 3-1: config 0 descriptor?? [ 1024.683428][ T23] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1024.694465][T15480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1024.703486][T15480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1024.714459][ T9781] usb 3-1: ucan: probing device on interface #0 [ 1024.721208][ T9781] usb 3-1: ucan: invalid EP count (1) [ 1024.734208][ T9781] usb 3-1: ucan: probe failed; try to update the device firmware [ 1025.034339][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.045807][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.055807][ T23] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1025.065268][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.779773][ T23] usb 4-1: config 0 descriptor?? [ 1025.952673][T15501] binder: 15499:15501 ioctl c0306201 0 returned -14 [ 1025.981683][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'. [ 1026.064410][T15502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2487'. [ 1026.153266][ T787] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1026.259440][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 1026.269472][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 1026.313570][ T23] usb 4-1: USB disconnect, device number 45 [ 1026.532952][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 1026.542762][ T787] usb 5-1: config 8 has an invalid interface number: 156 but max is 0 [ 1026.551556][ T787] usb 5-1: config 8 has no interface number 0 [ 1026.559026][ T787] usb 5-1: config 8 interface 156 has no altsetting 0 [ 1026.568182][ T787] usb 5-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1026.577605][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.585679][ T787] usb 5-1: Product: syz [ 1026.590062][ T787] usb 5-1: Manufacturer: syz [ 1026.594829][ T787] usb 5-1: SerialNumber: syz [ 1026.810575][ T787] hub 5-1:8.156: bad descriptor, ignoring hub [ 1026.816879][ T787] hub: probe of 5-1:8.156 failed with error -5 [ 1026.823671][ T787] io_ti 5-1:8.156: required endpoints missing [ 1026.864006][ T787] usb 5-1: USB disconnect, device number 28 [ 1027.242777][T10101] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1027.442682][T10101] usb 1-1: Using ep0 maxpacket: 16 [ 1027.458568][T10101] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.471039][T10101] usb 1-1: config 0 has no interfaces? [ 1027.477085][T10101] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1027.486688][T10101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.526790][T10101] usb 1-1: config 0 descriptor?? [ 1027.626119][ T9781] usb 3-1: USB disconnect, device number 60 [ 1027.758868][T15026] usb 1-1: USB disconnect, device number 71 [ 1027.797444][T15518] autofs4:pid:15518:autofs_fill_super: called with bogus options [ 1027.992807][T10101] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1028.182796][ T23] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1028.198740][T10101] usb 5-1: Using ep0 maxpacket: 8 [ 1028.298771][T10101] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1028.389245][T10101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.443615][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1028.515222][T10101] usb 5-1: Product: syz [ 1028.547006][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1028.566246][T10101] usb 5-1: Manufacturer: syz [ 1028.571221][ T23] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1028.592587][T10101] usb 5-1: SerialNumber: syz [ 1028.603721][T10101] usb 5-1: config 0 descriptor?? [ 1028.622656][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.654867][ T23] usb 4-1: config 0 descriptor?? [ 1028.835628][T10101] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1029.667673][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 1029.681107][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 1030.120685][ T23] usb 4-1: USB disconnect, device number 46 [ 1030.297175][T15544] binder: 15536:15544 ioctl c0306201 0 returned -14 [ 1030.460818][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 1030.483698][T15548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2498'. [ 1030.565156][T10101] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1030.602697][T10101] usb 5-1: USB disconnect, device number 29 [ 1031.202541][T15026] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1031.413150][T15026] usb 3-1: Using ep0 maxpacket: 32 [ 1031.449194][T15026] usb 3-1: config 8 has an invalid interface number: 156 but max is 0 [ 1031.483607][T15026] usb 3-1: config 8 has no interface number 0 [ 1031.490400][T15026] usb 3-1: config 8 interface 156 has no altsetting 0 [ 1031.513573][T15026] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1031.543615][T15026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.551951][T15026] usb 3-1: Product: syz [ 1031.556339][T15026] usb 3-1: Manufacturer: syz [ 1031.561033][T15026] usb 3-1: SerialNumber: syz [ 1031.861999][T15026] hub 3-1:8.156: bad descriptor, ignoring hub [ 1031.868212][T15026] hub: probe of 3-1:8.156 failed with error -5 [ 1031.877763][T15026] io_ti 3-1:8.156: required endpoints missing [ 1031.927659][T15026] usb 3-1: USB disconnect, device number 61 [ 1032.213507][ T9781] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1032.312800][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1032.422960][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 1032.477861][ T9781] usb 4-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1032.527883][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1032.607628][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.674857][ T9781] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1032.748053][ T9] usb 1-1: config 0 has no interfaces? [ 1032.768704][ T9781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.826555][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1032.839078][ T9781] usb 4-1: Product: syz [ 1032.854914][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.863102][ T9781] usb 4-1: Manufacturer: syz [ 1032.867710][ T9781] usb 4-1: SerialNumber: syz [ 1032.924720][ T9] usb 1-1: config 0 descriptor?? [ 1033.166232][T15026] usb 1-1: USB disconnect, device number 72 [ 1033.851753][T15582] binder: 15579:15582 ioctl c0306201 0 returned -14 [ 1033.898412][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'. [ 1033.979865][T15585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2510'. [ 1035.319016][ T5753] usb 4-1: USB disconnect, device number 47 [ 1035.723631][T15607] netlink: 'syz.2.2518': attribute type 27 has an invalid length. [ 1035.882774][ T5753] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1036.072810][ T5753] usb 4-1: Using ep0 maxpacket: 32 [ 1036.083241][ T5753] usb 4-1: config 8 has an invalid interface number: 156 but max is 0 [ 1036.093830][ T5753] usb 4-1: config 8 has no interface number 0 [ 1036.100046][ T5753] usb 4-1: config 8 interface 156 has no altsetting 0 [ 1036.117712][T15607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.125851][T15607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.142656][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1036.153792][ T5753] usb 4-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1036.163444][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.171926][ T5753] usb 4-1: Product: syz [ 1036.178563][ T5753] usb 4-1: Manufacturer: syz [ 1036.183522][ T5753] usb 4-1: SerialNumber: syz [ 1036.322614][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1036.336099][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.356776][ T8] usb 5-1: config 0 has no interfaces? [ 1036.372866][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1036.402890][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.429506][ T8] usb 5-1: config 0 descriptor?? [ 1036.435698][ T5753] hub 4-1:8.156: bad descriptor, ignoring hub [ 1036.441820][ T5753] hub: probe of 4-1:8.156 failed with error -5 [ 1036.456330][ T5753] io_ti 4-1:8.156: required endpoints missing [ 1036.496654][ T5753] usb 4-1: USB disconnect, device number 48 [ 1036.661990][ T9781] usb 5-1: USB disconnect, device number 30 [ 1036.902307][T15607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.943360][T15607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.310250][T15607] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.321171][T15607] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.331278][T15607] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.340367][T15607] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.563028][ T788] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1037.792638][ T788] usb 5-1: Using ep0 maxpacket: 8 [ 1037.810836][ T788] usb 5-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1037.853484][ T788] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1037.894962][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.931466][ T788] usb 5-1: Product: syz [ 1037.952093][ T788] usb 5-1: Manufacturer: syz [ 1037.972780][ T788] usb 5-1: SerialNumber: syz [ 1038.070510][T15634] fuse: Bad value for 'fd' [ 1038.132174][ T5771] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1038.142628][ T5771] CPU: 1 PID: 5771 Comm: kworker/u5:4 Not tainted 6.6.95-syzkaller #0 [ 1038.150814][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1038.160881][ T5771] Workqueue: hci1 hci_rx_work [ 1038.165557][ T5771] Call Trace: [ 1038.168822][ T5771] [ 1038.171740][ T5771] dump_stack_lvl+0x16c/0x230 [ 1038.176411][ T5771] ? show_regs_print_info+0x20/0x20 [ 1038.181595][ T5771] ? load_image+0x3b0/0x3b0 [ 1038.186088][ T5771] sysfs_create_dir_ns+0x256/0x280 [ 1038.191185][ T5771] ? hci_rx_work+0x43a/0xd80 [ 1038.195767][ T5771] ? sysfs_warn_dup+0xa0/0xa0 [ 1038.200431][ T5771] ? do_raw_spin_unlock+0x121/0x230 [ 1038.205620][ T5771] kobject_add_internal+0x6b8/0xc70 [ 1038.210811][ T5771] kobject_add+0x156/0x220 [ 1038.215221][ T5771] ? __rwlock_init+0x150/0x150 [ 1038.219975][ T5771] ? kobject_init+0x1e0/0x1e0 [ 1038.224641][ T5771] ? _raw_spin_unlock+0x28/0x40 [ 1038.229482][ T5771] ? get_device_parent+0x366/0x390 [ 1038.234578][ T5771] device_add+0x408/0xc20 [ 1038.238896][ T5771] hci_conn_add_sysfs+0xd5/0x1e0 [ 1038.243828][ T5771] le_conn_complete_evt+0xc37/0x1220 [ 1038.249097][ T5771] ? hci_event_packet+0x4a7/0x1210 [ 1038.254206][ T5771] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1038.260433][ T5771] ? __copy_skb_header+0xa7/0x550 [ 1038.265450][ T5771] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1038.271075][ T5771] ? skb_pull_data+0xfb/0x200 [ 1038.275746][ T5771] hci_le_conn_complete_evt+0x187/0x440 [ 1038.281284][ T5771] ? hci_remote_host_features_evt+0x160/0x160 [ 1038.287340][ T5771] hci_event_packet+0x795/0x1210 [ 1038.292268][ T5771] ? bis_list+0x290/0x290 [ 1038.296585][ T5771] ? lockdep_hardirqs_on+0x98/0x150 [ 1038.301774][ T5771] ? hci_send_to_monitor+0xd7/0x4f0 [ 1038.306978][ T5771] hci_rx_work+0x43a/0xd80 [ 1038.311391][ T5771] ? process_scheduled_works+0x957/0x15b0 [ 1038.317099][ T5771] process_scheduled_works+0xa45/0x15b0 [ 1038.322649][ T5771] ? assign_work+0x400/0x400 [ 1038.327231][ T5771] ? assign_work+0x39e/0x400 [ 1038.331812][ T5771] worker_thread+0xa55/0xfc0 [ 1038.336403][ T5771] kthread+0x2fa/0x390 [ 1038.340453][ T5771] ? pr_cont_work+0x560/0x560 [ 1038.345121][ T5771] ? kthread_blkcg+0xd0/0xd0 [ 1038.349695][ T5771] ret_from_fork+0x48/0x80 [ 1038.354098][ T5771] ? kthread_blkcg+0xd0/0xd0 [ 1038.358675][ T5771] ret_from_fork_asm+0x11/0x20 [ 1038.363435][ T5771] [ 1038.369605][ T5771] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1038.383783][ T5771] Bluetooth: hci1: failed to register connection device [ 1039.848410][T12626] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1039.859908][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2540'. [ 1039.943532][T15648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2540'. [ 1040.092641][T12626] usb 3-1: Using ep0 maxpacket: 32 [ 1040.107573][T12626] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 1040.116168][T12626] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 1040.129793][T12626] usb 3-1: config 8 has no interface number 0 [ 1040.136304][T12626] usb 3-1: config 8 has no interface number 1 [ 1040.147873][T12626] usb 3-1: config 8 interface 156 has no altsetting 0 [ 1040.156900][T12626] usb 3-1: config 8 interface 248 has no altsetting 0 [ 1040.175329][T12626] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1040.189827][T12626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.198009][T12626] usb 3-1: Product: syz [ 1040.202250][T12626] usb 3-1: Manufacturer: syz [ 1040.212388][T12626] usb 3-1: SerialNumber: syz [ 1040.306112][T15024] usb 5-1: USB disconnect, device number 31 [ 1040.427246][T12626] hub 3-1:8.156: Invalid hub with more than one config or interface [ 1040.440682][T12626] hub: probe of 3-1:8.156 failed with error -22 [ 1040.449365][T12626] io_ti 3-1:8.156: required endpoints missing [ 1040.492100][T12626] io_ti 3-1:8.248: required endpoints missing [ 1040.514637][T12626] usb 3-1: USB disconnect, device number 62 [ 1040.560907][ T788] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1040.762774][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 1040.828398][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.903253][ T788] usb 1-1: config 0 has no interfaces? [ 1040.936380][ T788] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1040.993859][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.126239][ T788] usb 1-1: config 0 descriptor?? [ 1041.398962][T15669] fuse: Bad value for 'fd' [ 1041.414285][T15666] block nbd2: shutting down sockets [ 1041.490608][ T788] usb 1-1: USB disconnect, device number 73 [ 1042.354172][T12626] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1042.889330][T12626] usb 5-1: Using ep0 maxpacket: 8 [ 1042.989401][T12626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.081609][T12626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.170871][T12626] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1043.194348][T12626] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1043.211194][T12626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.259934][T12626] usb 5-1: config 0 descriptor?? [ 1043.470906][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 1043.497574][T15694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2544'. [ 1043.854072][T12626] logitech 0003:046D:C293.000C: nested delimiters [ 1043.860595][T12626] logitech 0003:046D:C293.000C: item 0 4 2 10 parsing failed [ 1043.876928][T12626] logitech 0003:046D:C293.000C: parse failed [ 1043.884787][T12626] logitech: probe of 0003:046D:C293.000C failed with error -22 [ 1043.909927][T15696] futex_wake_op: syz.2.2545 tries to shift op by 535; fix this program [ 1044.057002][T12626] usb 5-1: USB disconnect, device number 32 [ 1044.424960][T15024] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1045.277464][T15024] usb 1-1: Using ep0 maxpacket: 32 [ 1045.306550][T15024] usb 1-1: config 8 has an invalid interface number: 156 but max is 1 [ 1045.320364][T15024] usb 1-1: config 8 has an invalid interface number: 248 but max is 1 [ 1045.329969][T15024] usb 1-1: config 8 has no interface number 0 [ 1045.359494][T15024] usb 1-1: config 8 has no interface number 1 [ 1045.382027][T15024] usb 1-1: config 8 interface 156 has no altsetting 0 [ 1045.397744][T15024] usb 1-1: config 8 interface 248 has no altsetting 0 [ 1045.437831][T15024] usb 1-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1045.460872][T15024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.488011][T15024] usb 1-1: Product: syz [ 1045.530728][T15024] usb 1-1: Manufacturer: syz [ 1045.540048][T15024] usb 1-1: SerialNumber: syz [ 1045.589669][T15711] fuse: Bad value for 'fd' [ 1045.996975][T15024] hub 1-1:8.156: Invalid hub with more than one config or interface [ 1046.005774][T15024] hub: probe of 1-1:8.156 failed with error -22 [ 1046.041193][T15024] io_ti 1-1:8.156: required endpoints missing [ 1046.082510][T15024] io_ti 1-1:8.248: required endpoints missing [ 1046.132850][T15024] usb 1-1: USB disconnect, device number 74 [ 1048.312532][T12626] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1048.576731][T12626] usb 1-1: Using ep0 maxpacket: 32 [ 1048.637548][T12626] usb 1-1: config 8 has an invalid interface number: 156 but max is 1 [ 1048.768290][T12626] usb 1-1: config 8 has an invalid interface number: 248 but max is 1 [ 1048.777845][T12626] usb 1-1: config 8 has no interface number 0 [ 1048.792492][T12626] usb 1-1: config 8 has no interface number 1 [ 1048.799194][T12626] usb 1-1: config 8 interface 156 has no altsetting 0 [ 1048.806687][T12626] usb 1-1: config 8 interface 248 has no altsetting 0 [ 1048.818771][T12626] usb 1-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1048.828432][T12626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.862765][T12626] usb 1-1: Product: syz [ 1048.866968][T12626] usb 1-1: Manufacturer: syz [ 1048.912472][T12626] usb 1-1: SerialNumber: syz [ 1048.926252][T15742] fuse: Invalid rootmode [ 1049.252022][T12626] hub 1-1:8.156: Invalid hub with more than one config or interface [ 1049.394585][T15750] syz.3.2558: attempt to access beyond end of device [ 1049.394585][T15750] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1049.407450][T15750] qnx6: unable to read the first superblock [ 1049.413745][T15750] syz.3.2558: attempt to access beyond end of device [ 1049.413745][T15750] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1049.426500][T15750] qnx6: unable to read the first superblock [ 1049.432395][T15750] qnx6: unable to read the first superblock [ 1049.796544][T12626] hub: probe of 1-1:8.156 failed with error -22 [ 1049.926354][T12626] io_ti 1-1:8.156: required endpoints missing [ 1050.125908][T12626] io_ti 1-1:8.248: required endpoints missing [ 1050.271478][T12626] usb 1-1: USB disconnect, device number 75 [ 1052.109558][T15776] fuse: Invalid rootmode [ 1052.552834][T12626] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1052.822227][T12626] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.895837][T12626] usb 1-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 1052.962105][T12626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.149320][T12626] usb 1-1: config 0 descriptor?? [ 1053.162174][T12626] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 1053.362982][T15777] block nbd0: shutting down sockets [ 1053.368668][T12626] pwc: send_video_command error -71 [ 1053.391013][T12626] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1053.400032][T12626] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 1053.428312][T12626] usb 1-1: USB disconnect, device number 76 [ 1053.732577][ T5796] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1053.922703][ T5796] usb 3-1: Using ep0 maxpacket: 32 [ 1053.950426][ T5796] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 1053.986520][ T5796] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 1054.044471][ T5796] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1054.122233][ T5796] usb 3-1: config 8 has no interface number 0 [ 1054.377579][ T5796] usb 3-1: config 8 has no interface number 1 [ 1054.384310][ T5796] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 1054.397476][ T5796] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 1054.414008][ T5796] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 1054.425288][ T5796] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 1054.436312][ T5796] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1054.447452][ T5796] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1054.458440][ T5796] usb 3-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1054.470418][ T5796] usb 3-1: config 8 interface 156 has no altsetting 0 [ 1054.477837][ T5796] usb 3-1: config 8 interface 248 has no altsetting 0 [ 1054.489765][ T5796] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1054.505159][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.513662][ T5796] usb 3-1: Product: syz [ 1054.517929][ T5796] usb 3-1: Manufacturer: syz [ 1054.523043][ T5796] usb 3-1: SerialNumber: syz [ 1054.645287][T15802] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1054.645287][T15802] program syz.4.2579 not setting count and/or reply_len properly [ 1054.665590][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.680377][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.893531][ T5796] hub 3-1:8.156: Invalid hub with more than one config or interface [ 1054.902543][ T5796] hub: probe of 3-1:8.156 failed with error -22 [ 1054.916872][ T5796] io_ti 3-1:8.156: required endpoints missing [ 1054.947967][ T5796] io_ti 3-1:8.248: required endpoints missing [ 1055.034132][ T5796] usb 3-1: USB disconnect, device number 63 [ 1055.492903][ T9781] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1055.555590][T15811] fuse: Invalid rootmode [ 1055.982751][ T5796] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1056.242656][ T5796] usb 3-1: Using ep0 maxpacket: 8 [ 1056.257076][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.269511][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.285954][ T5796] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1056.309747][ T5796] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1056.342588][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.376381][ T5796] usb 3-1: config 0 descriptor?? [ 1056.541488][ T9781] usb 5-1: device descriptor read/64, error -71 [ 1056.928569][ T5796] logitech 0003:046D:C293.000D: unknown main item tag 0x0 [ 1057.000743][ T5796] logitech 0003:046D:C293.000D: unknown main item tag 0x0 [ 1057.047261][ T5796] logitech 0003:046D:C293.000D: unknown main item tag 0x0 [ 1057.109197][ T5796] logitech 0003:046D:C293.000D: unknown main item tag 0x0 [ 1057.208017][ T5796] logitech 0003:046D:C293.000D: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.2-1/input0 [ 1057.235786][ T5796] logitech 0003:046D:C293.000D: no inputs found [ 1057.262049][ T5796] usb 3-1: USB disconnect, device number 64 [ 1057.329920][T15825] fido_id[15825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1057.362805][ T787] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1057.373789][ T9781] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1057.543832][ T9781] usb 5-1: device descriptor read/64, error -71 [ 1057.552352][T15832] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1057.552352][T15832] program syz.3.2589 not setting count and/or reply_len properly [ 1057.662586][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.724954][ T9781] usb usb5-port1: attempt power cycle [ 1057.960906][ T787] usb 1-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 1057.973031][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.994896][ T787] usb 1-1: config 0 descriptor?? [ 1058.005178][ T787] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 1058.205092][ T787] pwc: send_video_command error -71 [ 1058.210332][ T787] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1058.229053][ T787] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 1058.259173][ T787] usb 1-1: USB disconnect, device number 77 [ 1058.283824][ T9781] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1058.754538][ T9781] usb 5-1: device not accepting address 35, error -71 [ 1060.002498][T12626] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1060.202511][T12626] usb 1-1: Using ep0 maxpacket: 8 [ 1060.215007][T12626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.236396][T12626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.256769][T12626] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1060.282749][T12626] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1060.302448][T12626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.332072][T12626] usb 1-1: config 0 descriptor?? [ 1060.734021][ T12] tipc: Left network mode [ 1060.855522][T12626] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 1060.951160][T12626] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 1061.075447][T12626] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 1061.095699][T12626] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 1061.117745][T12626] logitech 0003:046D:C293.000E: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.0-1/input0 [ 1061.141776][T12626] logitech 0003:046D:C293.000E: no inputs found [ 1061.179752][T12626] usb 1-1: USB disconnect, device number 78 [ 1061.274185][T15865] fido_id[15865]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1061.562609][ T9781] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1061.722560][ T9781] usb 3-1: device descriptor read/64, error -71 [ 1061.812789][ T5771] Bluetooth: hci1: command 0x0406 tx timeout [ 1062.053004][ T9781] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1062.568302][ T9781] usb 3-1: device descriptor read/64, error -71 [ 1062.932360][ T9781] usb usb3-port1: attempt power cycle [ 1063.372656][ T9781] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1063.693694][ T9781] usb 3-1: device descriptor read/8, error -71 [ 1063.824579][ T12] hsr_slave_0: left promiscuous mode [ 1063.839938][ T12] hsr_slave_1: left promiscuous mode [ 1063.851740][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.875794][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.885355][ T12] bridge_slave_1: left allmulticast mode [ 1063.891039][ T12] bridge_slave_1: left promiscuous mode [ 1063.900333][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.910881][ T12] bridge_slave_0: left allmulticast mode [ 1063.917130][ T12] bridge_slave_0: left promiscuous mode [ 1063.924644][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.993023][ T9781] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1064.041128][ T9781] usb 3-1: device descriptor read/8, error -71 [ 1064.162970][ T9781] usb usb3-port1: unable to enumerate USB device [ 1065.262672][ T9781] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1065.351950][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1065.405502][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1065.454670][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.503624][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 1065.509910][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.510663][ T9781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.532275][ T9781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.549225][ T9781] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1065.562830][ T9781] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1065.571991][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.592262][ T9781] usb 4-1: config 0 descriptor?? [ 1066.634217][ T9781] logitech 0003:046D:C293.000F: unknown main item tag 0x0 [ 1066.657560][ T9781] logitech 0003:046D:C293.000F: unknown main item tag 0x0 [ 1066.669714][ T9781] logitech 0003:046D:C293.000F: unknown main item tag 0x0 [ 1066.679067][ T9781] logitech 0003:046D:C293.000F: unknown main item tag 0x0 [ 1066.706198][ T9781] logitech 0003:046D:C293.000F: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 1066.747624][ T9781] logitech 0003:046D:C293.000F: no inputs found [ 1067.565489][ T12] team0 (unregistering): Port device bond0 removed [ 1067.967257][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1067.986907][ T12] bond0 (unregistering): Released all slaves [ 1068.313251][ T5796] usb 4-1: USB disconnect, device number 49 [ 1068.431485][T15947] netlink: 'syz.0.2626': attribute type 2 has an invalid length. [ 1068.442183][T15947] netlink: 'syz.0.2626': attribute type 1 has an invalid length. [ 1068.626211][ T9781] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1068.749654][ T12] IPVS: stop unused estimator thread 0... [ 1069.303602][ T9781] usb 3-1: device descriptor read/64, error -71 [ 1069.938827][ T9781] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1070.103440][ T9781] usb 3-1: device descriptor read/64, error -71 [ 1070.104524][T15026] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1070.346655][ T9781] usb usb3-port1: attempt power cycle [ 1070.352814][T15026] usb 5-1: Using ep0 maxpacket: 32 [ 1070.367490][T15026] usb 5-1: config 8 has an invalid interface number: 156 but max is 1 [ 1070.377253][T15026] usb 5-1: config 8 has an invalid interface number: 248 but max is 1 [ 1070.385618][T15026] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1070.394508][T15026] usb 5-1: config 8 has no interface number 0 [ 1070.400684][T15026] usb 5-1: config 8 has no interface number 1 [ 1070.410233][T15026] usb 5-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 1070.422905][T15026] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 1070.435723][T15026] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 1070.447079][T15026] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 1070.461866][T15026] usb 5-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1070.474784][T15026] usb 5-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1070.488330][T15026] usb 5-1: config 8 interface 156 has no altsetting 0 [ 1070.495521][T15026] usb 5-1: config 8 interface 248 has no altsetting 0 [ 1070.516408][T15026] usb 5-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1070.525785][T15026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.537634][T15026] usb 5-1: Product: syz [ 1070.541945][T15026] usb 5-1: Manufacturer: syz [ 1070.549455][T15026] usb 5-1: SerialNumber: syz [ 1070.795070][T15026] hub 5-1:8.156: Invalid hub with more than one config or interface [ 1070.803266][T15026] hub: probe of 5-1:8.156 failed with error -22 [ 1070.809902][T15026] io_ti 5-1:8.156: required endpoints missing [ 1070.812652][ T9781] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1070.823670][T15026] io_ti 5-1:8.248: required endpoints missing [ 1070.837561][T15026] usb 5-1: USB disconnect, device number 37 [ 1070.853161][ T9781] usb 3-1: device descriptor read/8, error -71 [ 1071.042573][T15024] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1071.142744][ T9781] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1071.240370][ T9781] usb 3-1: device descriptor read/8, error -71 [ 1071.373406][ T9781] usb usb3-port1: unable to enumerate USB device [ 1072.633047][T15024] usb 1-1: Using ep0 maxpacket: 8 [ 1072.708168][T15024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.730886][T15024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.750297][T15024] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1072.771978][T15024] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1072.815410][T15024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.946613][T15024] usb 1-1: config 0 descriptor?? [ 1073.471255][T15024] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 1073.479496][T15024] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 1073.486949][T15024] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 1073.495203][T15024] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 1073.507171][T15024] logitech 0003:046D:C293.0010: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.0-1/input0 [ 1073.518902][T15024] logitech 0003:046D:C293.0010: no inputs found [ 1073.616385][T15024] usb 1-1: USB disconnect, device number 79 [ 1075.504249][ T8] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1075.752632][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1075.927116][ T8] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 1075.940901][ T8] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 1075.949714][ T8] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1075.967358][ T8] usb 3-1: config 8 has no interface number 0 [ 1075.974611][ T8] usb 3-1: config 8 has no interface number 1 [ 1075.980725][ T8] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 1075.992167][ T8] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 1076.003423][ T8] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 1076.015758][ T8] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 1076.027246][ T8] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1076.038880][ T8] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1076.050154][ T8] usb 3-1: config 8 interface 156 has no altsetting 0 [ 1076.072473][ T8] usb 3-1: config 8 interface 248 has no altsetting 0 [ 1076.107067][ T8] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 1076.118302][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.127562][ T8] usb 3-1: Product: syz [ 1076.132681][ T8] usb 3-1: Manufacturer: syz [ 1076.137320][ T8] usb 3-1: SerialNumber: syz [ 1076.222631][T15026] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1076.230619][T15024] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1076.432638][T15026] usb 4-1: device descriptor read/64, error -71 [ 1076.462699][T15024] usb 5-1: Using ep0 maxpacket: 8 [ 1076.481523][T15024] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1076.495318][T15024] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1076.503049][T15024] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1076.506948][ T8] hub 3-1:8.156: Invalid hub with more than one config or interface [ 1076.512205][T15024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.562726][T15024] usb 5-1: config 0 descriptor?? [ 1076.682066][ T8] hub: probe of 3-1:8.156 failed with error -22 [ 1076.703433][T15026] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1076.741709][ T8] io_ti 3-1:8.156: required endpoints missing [ 1076.841698][ T8] io_ti 3-1:8.248: required endpoints missing [ 1076.914507][ T8] usb 3-1: USB disconnect, device number 73 [ 1077.058517][T15024] hid-u2fzero 0003:20A0:4287.0011: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0 [ 1077.070450][T15026] usb 4-1: device descriptor read/64, error -71 [ 1077.083141][T15024] hid-u2fzero 0003:20A0:4287.0011: NitroKey U2F LED initialised [ 1077.091166][T15024] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 1077.102995][T15024] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 1077.111438][T15024] CPU: 1 PID: 15024 Comm: kworker/1:5 Not tainted 6.6.95-syzkaller #0 [ 1077.119613][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1077.129692][T15024] Workqueue: usb_hub_wq hub_event [ 1077.134757][T15024] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 1077.140418][T15024] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 1077.160212][T15024] RSP: 0018:ffffc9000384e780 EFLAGS: 00010202 [ 1077.166315][T15024] RAX: 0000000000000015 RBX: ffff88805ad8e030 RCX: dffffc0000000000 [ 1077.174280][T15024] RDX: 0000000000000000 RSI: ffffc9000384e8a0 RDI: ffff88805f64ba68 [ 1077.182251][T15024] RBP: ffffc9000384e998 R08: 0000000000000000 R09: 0000000000000000 [ 1077.190213][T15024] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805ad8e300 [ 1077.198174][T15024] R13: 1ffff92000709cf8 R14: ffff88805ad8e418 R15: 00000000000000a8 [ 1077.206135][T15024] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1077.215057][T15024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1077.221631][T15024] CR2: 00007f1cd517e2d8 CR3: 0000000031b33000 CR4: 00000000003506e0 [ 1077.229593][T15024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1077.237576][T15024] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1077.245544][T15024] Call Trace: [ 1077.248819][T15024] [ 1077.251748][T15024] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1077.257292][T15024] ? add_early_randomness+0x1e/0x1a0 [ 1077.262583][T15024] ? mutex_unlock+0x10/0x10 [ 1077.267082][T15024] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1077.272612][T15024] add_early_randomness+0x7a/0x1a0 [ 1077.277720][T15024] hwrng_register+0x3db/0x4a0 [ 1077.282416][T15024] devm_hwrng_register+0x47/0xb0 [ 1077.287347][T15024] u2fzero_probe+0x348/0x460 [ 1077.291924][T15024] hid_device_probe+0x293/0x5b0 [ 1077.296769][T15024] ? hid_uevent+0x350/0x350 [ 1077.301272][T15024] really_probe+0x25b/0xb40 [ 1077.305783][T15024] ? pm_runtime_barrier+0x14b/0x1c0 [ 1077.310978][T15024] __driver_probe_device+0x18c/0x330 [ 1077.316261][T15024] driver_probe_device+0x4f/0x420 [ 1077.321277][T15024] __device_attach_driver+0x2ca/0x520 [ 1077.326640][T15024] bus_for_each_drv+0x24b/0x2d0 [ 1077.331479][T15024] ? coredump_store+0x90/0x90 [ 1077.336145][T15024] ? bus_find_device+0x320/0x320 [ 1077.341079][T15024] __device_attach+0x2b5/0x400 [ 1077.345835][T15024] ? device_attach+0x20/0x20 [ 1077.350415][T15024] ? do_raw_spin_unlock+0x121/0x230 [ 1077.355690][T15024] bus_probe_device+0x180/0x260 [ 1077.360544][T15024] device_add+0x85b/0xc20 [ 1077.364861][T15024] hid_add_device+0x38d/0x530 [ 1077.369532][T15024] usbhid_probe+0xe02/0x1220 [ 1077.374117][T15024] usb_probe_interface+0x5a4/0xb00 [ 1077.379221][T15024] ? usb_register_driver+0x3d0/0x3d0 [ 1077.384492][T15024] really_probe+0x25b/0xb40 [ 1077.388989][T15024] ? pm_runtime_barrier+0x14b/0x1c0 [ 1077.394183][T15024] __driver_probe_device+0x18c/0x330 [ 1077.399500][T15024] driver_probe_device+0x4f/0x420 [ 1077.404540][T15024] __device_attach_driver+0x2ca/0x520 [ 1077.409918][T15024] bus_for_each_drv+0x24b/0x2d0 [ 1077.414764][T15024] ? coredump_store+0x90/0x90 [ 1077.419432][T15024] ? bus_find_device+0x320/0x320 [ 1077.424363][T15024] __device_attach+0x2b5/0x400 [ 1077.429142][T15024] ? device_attach+0x20/0x20 [ 1077.433724][T15024] bus_probe_device+0x180/0x260 [ 1077.438568][T15024] device_add+0x85b/0xc20 [ 1077.442889][T15024] usb_set_configuration+0x1a79/0x20c0 [ 1077.448351][T15024] usb_generic_driver_probe+0x8d/0x150 [ 1077.453861][T15024] usb_probe_device+0x13d/0x280 [ 1077.458699][T15024] ? usb_register_device_driver+0x230/0x230 [ 1077.464580][T15024] really_probe+0x25b/0xb40 [ 1077.469073][T15024] ? pm_runtime_barrier+0x14b/0x1c0 [ 1077.474351][T15024] __driver_probe_device+0x18c/0x330 [ 1077.479628][T15024] driver_probe_device+0x4f/0x420 [ 1077.484656][T15024] __device_attach_driver+0x2ca/0x520 [ 1077.490022][T15024] bus_for_each_drv+0x24b/0x2d0 [ 1077.494873][T15024] ? coredump_store+0x90/0x90 [ 1077.499540][T15024] ? bus_find_device+0x320/0x320 [ 1077.504465][T15024] ? lock_release+0x57c/0x8b0 [ 1077.509132][T15024] __device_attach+0x2b5/0x400 [ 1077.513888][T15024] ? device_attach+0x20/0x20 [ 1077.518477][T15024] bus_probe_device+0x180/0x260 [ 1077.523317][T15024] device_add+0x85b/0xc20 [ 1077.527634][T15024] usb_new_device+0xa31/0x1630 [ 1077.532389][T15024] ? usb_disconnect+0x8a0/0x8a0 [ 1077.537234][T15024] ? preempt_schedule_thunk+0x1a/0x30 [ 1077.542604][T15024] hub_event+0x2957/0x49c0 [ 1077.547032][T15024] ? led_work+0x720/0x720 [ 1077.551351][T15024] ? read_lock_is_recursive+0x20/0x20 [ 1077.556716][T15024] ? process_scheduled_works+0x957/0x15b0 [ 1077.562430][T15024] ? process_scheduled_works+0x957/0x15b0 [ 1077.568147][T15024] process_scheduled_works+0xa45/0x15b0 [ 1077.573693][T15024] ? assign_work+0x400/0x400 [ 1077.578272][T15024] ? assign_work+0x39e/0x400 [ 1077.582851][T15024] worker_thread+0xa55/0xfc0 [ 1077.587440][T15024] kthread+0x2fa/0x390 [ 1077.591497][T15024] ? pr_cont_work+0x560/0x560 [ 1077.596164][T15024] ? kthread_blkcg+0xd0/0xd0 [ 1077.600744][T15024] ret_from_fork+0x48/0x80 [ 1077.605153][T15024] ? kthread_blkcg+0xd0/0xd0 [ 1077.609751][T15024] ret_from_fork_asm+0x11/0x20 [ 1077.614537][T15024] [ 1077.617559][T15024] Modules linked in: [ 1077.632826][T15026] usb usb4-port1: attempt power cycle [ 1077.639421][T15024] ---[ end trace 0000000000000000 ]--- [ 1077.646511][T15024] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 1077.652750][T15024] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 1077.674940][T15024] RSP: 0018:ffffc9000384e780 EFLAGS: 00010202 [ 1077.683573][T15024] RAX: 0000000000000015 RBX: ffff88805ad8e030 RCX: dffffc0000000000 [ 1077.691939][T15024] RDX: 0000000000000000 RSI: ffffc9000384e8a0 RDI: ffff88805f64ba68 [ 1077.700244][T15024] RBP: ffffc9000384e998 R08: 0000000000000000 R09: 0000000000000000 [ 1077.709827][T15024] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805ad8e300 [ 1077.717915][T15024] R13: 1ffff92000709cf8 R14: ffff88805ad8e418 R15: 00000000000000a8 [ 1077.727666][T15024] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1077.740606][T15024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1077.750589][T15024] CR2: 00007f1cd51b7bac CR3: 0000000031b33000 CR4: 00000000003506e0 [ 1077.759251][T15024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1077.774513][T15024] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1077.782741][T15024] Kernel panic - not syncing: Fatal exception [ 1077.789103][T15024] Kernel Offset: disabled [ 1077.793422][T15024] Rebooting in 86400 seconds..