last executing test programs: 11m30.011166406s ago: executing program 1 (id=2035): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xd, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xc, "09e12e5f0b6bdcf72f2ec700"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x168, 0x29, 0x36, {0x5e, 0x29, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2b8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m29.44019841s ago: executing program 1 (id=2038): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xd, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xc, "09e12e5f0b6bdcf72f2ec700"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x160, 0x29, 0x36, {0x5e, 0x28, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x298}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m26.617772255s ago: executing program 1 (id=2043): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x168, 0x29, 0x36, {0x5e, 0x29, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2b0}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11m25.558833747s ago: executing program 1 (id=2052): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x44) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 11m25.327309721s ago: executing program 1 (id=2053): write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x7, 0x2, {{0x4, 'GPL\x00'}, 0x100}}, 0x11) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040c04}, 0x20040840) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0xc2f1788970f1e6ef) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r2, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x80}, &(0x7f0000000100)=0x90) 11m21.884000253s ago: executing program 1 (id=2060): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$packet(0x11, 0x2, 0x300) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x6687e, 0x57) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 11m21.516806994s ago: executing program 32 (id=2060): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$packet(0x11, 0x2, 0x300) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x6687e, 0x57) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 5.79197408s ago: executing program 4 (id=5592): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.94054453s ago: executing program 3 (id=5598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x9, 0x4) syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') 3.40409495s ago: executing program 3 (id=5604): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x81001) fchdir(r5) close(r5) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3.40391659s ago: executing program 4 (id=5605): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="161cc7dda8db1354435e6886b5603f55ab0333cfe78b430a2a5312157e04252c08f5f8ea7c505f893c2ee695034946debda722e2d8a27ccecd465e12", 0x3c}], 0x1, 0x0, 0x0, 0x44870}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000180)=""/68, 0x44}], 0x2}, 0x40002140) 3.22454852s ago: executing program 4 (id=5606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0) clock_adjtime(0x3, &(0x7f0000004dc0)={0xb, 0x400000000045, 0xffffffff80000000, 0x6, 0x80000000, 0x7cca, 0x6, 0x5, 0x2, 0x4, 0xd, 0x7, 0xf, 0x8c, 0xd01, 0x0, 0x4, 0x40000080000, 0xfffffffffffffff9, 0x8000, 0x2, 0x7, 0x1, 0x9014, 0x11, 0x8000008}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.148008045s ago: executing program 2 (id=5608): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x2d, 0x2, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x1, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0x5}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xfffffffe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x3, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0xfffffffc, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x800009, 0x8000012f, 0x8004, 0x5, 0xd30, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000008, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x400003], [0x7, 0x40c, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0xb, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x40000005, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x0, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x5, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x5, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x80005, 0x937, 0x6, 0x6, 0x0, 0xb9, 0x4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) mq_timedreceive(r5, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r6, r2, 0x0) 3.037833021s ago: executing program 0 (id=5609): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x100, 0x8001002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.815322674s ago: executing program 4 (id=5610): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005ec0), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000005f000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x1, 0x1ff, 0x0) 2.496046584s ago: executing program 0 (id=5611): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 2.38406366s ago: executing program 0 (id=5612): r0 = syz_open_dev$video(0x0, 0x3, 0x88100) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)=@overlay={0x6, 0x9, 0x4, 0x100000, 0x1, {}, {0x1, 0x2, 0x0, 0x4, 0x8, 0x2, 'X\x00'}, 0xb}) 2.283344096s ago: executing program 0 (id=5613): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x9, 0x4) syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') 1.966683095s ago: executing program 2 (id=5614): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="161cc7dda8db1354435e6886b5603f55ab0333cfe78b430a2a5312157e04252c08f5f8ea7c505f893c2ee695034946debda722e2d8a27ccecd465e121749", 0x3e}], 0x1, 0x0, 0x0, 0x44870}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000180)=""/68, 0x44}], 0x2}, 0x40002140) 1.781396595s ago: executing program 2 (id=5615): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x874, 0x1, 0x3, 0x7fffffff, 0x0, 0xe44, 0x5}}], 0x30}, 0x8050) 1.624014974s ago: executing program 2 (id=5616): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x863e42) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x2012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="9500000004000000f8d1f3cdd12c9256e8f960a8a91008a6072e4bdcaeb676b5f0f0cf5f1ea6222f438e8687a6186fcb5e1595692e20e184af6adc4cdfce9089f26ddb0216ddacc138e7"], &(0x7f00000003c0)='GPL\x00', 0xc, 0x1005, &(0x7f0000001840)=""/4101, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x94) 1.572296818s ago: executing program 2 (id=5617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24044010) 1.374464809s ago: executing program 3 (id=5618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0) clock_adjtime(0x3, &(0x7f0000004dc0)={0xb, 0x400000000045, 0xffffffff80000000, 0x6, 0x80000000, 0x7cca, 0x6, 0x5, 0x2, 0x4, 0xd, 0x7, 0xf, 0x8c, 0xd01, 0x0, 0x4, 0x40000080000, 0xfffffffffffffff9, 0x8000, 0x2, 0x7, 0x1, 0x9014, 0x11, 0x8000008}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.313991603s ago: executing program 2 (id=5619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mlock2(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0xcd, 0x0, 0x12, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 908.004666ms ago: executing program 3 (id=5620): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 696.629019ms ago: executing program 3 (id=5621): r0 = syz_open_dev$video(0x0, 0x3, 0x88100) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)=@overlay={0x6, 0x9, 0x4, 0x100000, 0x1, {}, {0x1, 0x2, 0x0, 0x4, 0x8, 0x2, 'X\x00'}, 0xb}) 594.606085ms ago: executing program 3 (id=5622): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40051}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x101080) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x18, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r3 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70c, 0x1, 0x0, 0x1, 0x0, r2}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 160.23495ms ago: executing program 0 (id=5623): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) 153.843021ms ago: executing program 4 (id=5624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 64.493856ms ago: executing program 4 (id=5625): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000140)=[{r1, 0x2}], 0x1, 0x2a) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 0 (id=5626): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) kernel console output (not intermixed with test programs): axPacketSize 0 [ 1386.185274][ T42] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1386.206818][ T42] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1386.252259][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1386.263056][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.272109][ T42] usb 3-1: Product: ѕ [ 1386.279619][ T42] usb 3-1: Manufacturer: Х [ 1386.310511][ T42] usb 3-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1386.380047][ T42] hub 3-1:1.0: bad descriptor, ignoring hub [ 1386.391797][ T42] hub: probe of 3-1:1.0 failed with error -5 [ 1386.410645][ T5832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1386.449268][ T6009] IPVS: starting estimator thread 0... [ 1386.540885][T21692] IPVS: using max 32 ests per chain, 76800 per kthread [ 1386.603475][ T42] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1386.610525][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 1386.635830][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.656237][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.669950][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1386.720994][ T5832] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1386.754860][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.783374][ T5832] usb 5-1: config 0 descriptor?? [ 1386.833830][T21664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.872144][T21664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.211625][ T5832] HID 045e:07da: Invalid code 65791 type 1 [ 1387.263498][ T5832] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input8 [ 1387.382272][ T5832] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1387.757225][ T6009] usb 5-1: USB disconnect, device number 3 [ 1387.770811][ T42] usb 3-1: USB disconnect, device number 18 [ 1387.807821][ T42] usblp0: removed [ 1387.816641][T21699] fido_id[21699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1389.780623][T20233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1389.793073][T20233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1389.802521][T20233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1389.810271][T20233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1389.871305][T20233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1389.885503][T20233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1390.562558][T21733] chnl_net:caif_netlink_parms(): no params data found [ 1390.733498][T21733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.755291][T21733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.776244][T21733] bridge_slave_0: entered allmulticast mode [ 1390.784574][T21733] bridge_slave_0: entered promiscuous mode [ 1390.795962][T21733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.803609][T21733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.810910][T21733] bridge_slave_1: entered allmulticast mode [ 1390.820497][T21733] bridge_slave_1: entered promiscuous mode [ 1390.868367][T21733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.899734][T21733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.059399][T21733] team0: Port device team_slave_0 added [ 1391.069486][T21733] team0: Port device team_slave_1 added [ 1391.109935][T21733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.117280][T21733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.182597][T21733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.207552][T21733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.221863][T21733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.247808][ C0] vkms_vblank_simulate: vblank timer overrun [ 1391.278214][T21733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.348131][T21733] hsr_slave_0: entered promiscuous mode [ 1391.361617][T21733] hsr_slave_1: entered promiscuous mode [ 1391.389053][T21733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1391.421805][T21733] Cannot create hsr debugfs directory [ 1391.995858][T13075] Bluetooth: hci1: command tx timeout [ 1392.839664][T21733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1392.869201][T21733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1392.930056][T21733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1392.988122][T21733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1393.281212][T21733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.350992][T21733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.391831][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.399053][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.462061][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.469219][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.600670][T14370] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1393.791122][T14370] usb 1-1: Using ep0 maxpacket: 16 [ 1393.807278][T14370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.863174][T14370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.912178][T21777] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1393.921771][T14370] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1393.961252][T14370] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1393.978598][T14370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.998371][T14370] usb 1-1: config 0 descriptor?? [ 1394.061580][T20233] Bluetooth: hci1: command tx timeout [ 1394.192309][T21773] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1394.253447][T21773] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1394.274841][T21773] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1394.298238][T21773] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1394.312912][T21773] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1394.329996][T21773] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1394.344973][T21773] kvm: requested 88000 ns i8254 timer period limited to 200000 ns [ 1394.376804][T21773] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1394.412268][T21733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.423099][T21773] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1394.445143][T14370] HID 045e:07da: Invalid code 65791 type 1 [ 1394.489632][T14370] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input9 [ 1394.526495][T14370] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1394.744102][T21733] veth0_vlan: entered promiscuous mode [ 1394.821110][T21733] veth1_vlan: entered promiscuous mode [ 1394.841240][T14370] usb 1-1: USB disconnect, device number 10 [ 1394.900131][T21785] fido_id[21785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1394.934826][T21733] veth0_macvtap: entered promiscuous mode [ 1395.010888][T21733] veth1_macvtap: entered promiscuous mode [ 1395.033699][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.072247][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.096068][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.210865][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.298543][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.351200][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.412932][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.527648][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.741496][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.823020][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.849445][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.966016][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.072776][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.140577][T20233] Bluetooth: hci1: command tx timeout [ 1396.183291][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.228980][T21733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.317214][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.371910][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.416607][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.467285][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.481287][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.502948][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.530441][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.566019][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.600556][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.621216][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.648262][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.659308][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.669303][T21733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.687426][T21733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.727418][T21733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.806663][T21733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.829876][T21733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.864563][T21733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.890486][T21733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.140010][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.172135][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.253431][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.278700][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.331031][T21803] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4908'. [ 1397.765926][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4910'. [ 1398.220538][T20233] Bluetooth: hci1: command tx timeout [ 1398.986366][T21838] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4917'. [ 1399.190540][T13075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1399.205926][T13075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1399.229340][T13075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1399.240093][T13075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1399.249936][T13075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1399.259674][T13075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1399.790179][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.055210][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.314844][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.415996][T21840] chnl_net:caif_netlink_parms(): no params data found [ 1400.557632][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.991307][T21840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.998631][T21840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.028403][T21840] bridge_slave_0: entered allmulticast mode [ 1401.043094][T21840] bridge_slave_0: entered promiscuous mode [ 1401.065991][T21840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.087106][T21840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.104803][T21840] bridge_slave_1: entered allmulticast mode [ 1401.132609][T21840] bridge_slave_1: entered promiscuous mode [ 1401.162664][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4930'. [ 1401.341380][T20233] Bluetooth: hci3: command tx timeout [ 1401.483397][T21840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.521434][T21840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.725511][ T11] tipc: Left network mode [ 1401.739603][T21840] team0: Port device team_slave_0 added [ 1401.745761][T21840] team0: Port device team_slave_1 added [ 1401.773323][T21840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.773336][T21840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.773351][T21840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.774807][T21840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.774815][T21840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.774830][T21840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.909714][T21840] hsr_slave_0: entered promiscuous mode [ 1401.981329][T21840] hsr_slave_1: entered promiscuous mode [ 1401.982316][T21840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.982425][T21840] Cannot create hsr debugfs directory [ 1403.421537][T20233] Bluetooth: hci3: command tx timeout [ 1403.435308][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4939'. [ 1404.071653][ T11] bond2: (slave gretap1): Releasing backup interface [ 1404.150615][ T42] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 1404.344330][ T42] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1404.370622][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1404.396112][ T42] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1404.432639][ T42] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1404.440099][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1404.470719][ T42] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1404.586037][ T42] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1404.623593][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1404.639817][T21944] SET target dimension over the limit! [ 1404.669514][ T42] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1404.729115][T21942] input: syz0 as /devices/virtual/input/input10 [ 1404.759921][ T42] usb 5-1: string descriptor 0 read error: -22 [ 1404.776970][ T42] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1404.900556][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.992891][ T42] adutux 5-1:168.0: interrupt endpoints not found [ 1405.428200][T21930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.462532][T21930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.510846][T20233] Bluetooth: hci3: command tx timeout [ 1405.598221][T14362] usb 5-1: USB disconnect, device number 4 [ 1405.635252][ T11] hsr_slave_0: left promiscuous mode [ 1405.678364][ T11] hsr_slave_1: left promiscuous mode [ 1405.707742][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1405.795035][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.880932][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.988660][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.121701][ T11] bridge_slave_1: left allmulticast mode [ 1406.174532][ T11] bridge_slave_1: left promiscuous mode [ 1406.287833][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.451352][ T11] bridge_slave_0: left allmulticast mode [ 1406.457171][ T11] bridge_slave_0: left promiscuous mode [ 1406.572267][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.976816][ T11] veth1_macvtap: left promiscuous mode [ 1406.984559][ T11] veth0_macvtap: left promiscuous mode [ 1406.991072][ T11] veth1_vlan: left promiscuous mode [ 1406.996447][ T11] veth0_vlan: left promiscuous mode [ 1407.606554][T20233] Bluetooth: hci3: command tx timeout [ 1407.634818][ T11] bond12 (unregistering): Released all slaves [ 1407.911019][ T11] bond11 (unregistering): Released all slaves [ 1408.173645][ T11] bond10 (unregistering): Released all slaves [ 1408.419737][ T11] bond9 (unregistering): Released all slaves [ 1408.668303][ T11] bond8 (unregistering): Released all slaves [ 1408.901280][ T11] bond7 (unregistering): Released all slaves [ 1409.132238][ T11] bond6 (unregistering): Released all slaves [ 1409.362387][ T11] bond5 (unregistering): Released all slaves [ 1409.611906][ T11] bond4 (unregistering): Released all slaves [ 1409.837153][ T11] bond3 (unregistering): Released all slaves [ 1409.868212][ T11] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1409.876807][ T11] bridge1 (unregistering): left promiscuous mode [ 1410.205662][ T11] bond2 (unregistering): Released all slaves [ 1410.429423][ T11] bond1 (unregistering): Released all slaves [ 1411.283951][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1411.350081][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1411.415774][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.488681][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.094278][ T11] bond0 (unregistering): Released all slaves [ 1412.564286][T21840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1412.662120][T21840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1412.704359][T21840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1414.109873][T21840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1414.617738][T21840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.779187][T21840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1414.891572][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.898778][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1414.962596][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.969820][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.331481][T21998] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1415.570654][T21998] usb 1-1: Using ep0 maxpacket: 32 [ 1415.595035][T21998] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1415.622547][T21998] usb 1-1: config 0 has no interface number 0 [ 1415.645184][T21998] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1415.686167][T21998] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1415.711935][T21998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.739281][T21998] usb 1-1: Product: syz [ 1415.749912][T21998] usb 1-1: Manufacturer: syz [ 1415.760740][T21998] usb 1-1: SerialNumber: syz [ 1415.779658][T21998] usb 1-1: config 0 descriptor?? [ 1415.804686][T21998] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1415.836007][T21998] em28xx 1-1:0.132: Video interface 132 found: [ 1415.893813][T21840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.124202][T21840] veth0_vlan: entered promiscuous mode [ 1416.141557][T12488] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1416.155227][T21840] veth1_vlan: entered promiscuous mode [ 1416.223548][T21998] em28xx 1-1:0.132: chip ID is em2765 [ 1416.241003][T21840] veth0_macvtap: entered promiscuous mode [ 1416.256726][T21840] veth1_macvtap: entered promiscuous mode [ 1416.308666][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.347131][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.367005][T12488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1416.392583][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.410792][T12488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1416.430478][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.450719][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.471595][T12488] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1416.487521][T12488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.497608][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.551713][T12488] usb 4-1: Product: syz [ 1416.559790][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.573897][T12488] usb 4-1: Manufacturer: syz [ 1416.599506][T12488] usb 4-1: SerialNumber: syz [ 1416.615909][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.636505][T12488] usb 4-1: config 0 descriptor?? [ 1416.689684][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.708800][T12488] snd-usb-audio: probe of 4-1:0.0 failed with error -90 [ 1416.750014][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.796937][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.845079][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.876985][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.901943][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.969498][T21840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.047435][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.109949][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.147551][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.249478][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.297262][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.340689][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.372986][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.406797][T22065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.420404][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.456554][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.484703][T22065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.509334][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.579831][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.584824][T21998] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1417.616143][T21998] em28xx 1-1:0.132: board has no eeprom [ 1417.634632][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.669611][T21840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.704508][T21840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.727645][T21998] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1417.729412][T21840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.791653][T21840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.822019][T21840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.842785][T21998] em28xx 1-1:0.132: analog set to bulk mode. [ 1417.844456][T21840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.857165][T14362] em28xx 1-1:0.132: Registering V4L2 extension [ 1417.868365][T21840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.896808][T21998] usb 1-1: USB disconnect, device number 11 [ 1417.912441][T21998] em28xx 1-1:0.132: Disconnecting em28xx [ 1418.354245][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.442572][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.456350][T21797] usb 4-1: USB disconnect, device number 8 [ 1418.539694][T14362] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1418.570527][T14362] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1418.596705][T14362] em28xx 1-1:0.132: No AC97 audio processor [ 1418.609948][T14019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.628598][T14019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.704389][T14362] usb 1-1: Decoder not found [ 1418.709067][T14362] em28xx 1-1:0.132: failed to create media graph [ 1418.750636][T14362] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1418.802265][T14362] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1418.865394][T21998] em28xx 1-1:0.132: Closing input extension [ 1418.992395][T21998] em28xx 1-1:0.132: Freeing device [ 1420.800551][ T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1421.116714][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1421.170853][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1421.232861][ T9] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1421.310642][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.344716][ T9] usb 3-1: Product: syz [ 1421.365087][ T9] usb 3-1: Manufacturer: syz [ 1421.373692][ T9] usb 3-1: SerialNumber: syz [ 1421.415820][ T9] usb 3-1: config 0 descriptor?? [ 1421.463566][ T9] snd-usb-audio: probe of 3-1:0.0 failed with error -90 [ 1423.353966][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.360454][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.518209][T22165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4992'. [ 1423.590916][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4992'. [ 1423.950644][ T9] usb 3-1: USB disconnect, device number 19 [ 1424.006285][T22174] input: syz1 as /devices/virtual/input/input12 [ 1424.407632][T22187] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5000'. [ 1425.490466][T14362] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1425.734583][T14362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1425.783750][T14362] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1425.808050][T14362] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1425.845281][T14362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1425.870606][T14362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.890403][T14362] usb 4-1: Product: syz [ 1425.896788][T14362] usb 4-1: Manufacturer: syz [ 1425.915218][T14362] usb 4-1: SerialNumber: syz [ 1425.944117][T14362] hub 4-1:1.0: bad descriptor, ignoring hub [ 1425.950121][T14362] hub: probe of 4-1:1.0 failed with error -5 [ 1426.160655][T14362] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1426.670585][T22197] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 1426.879080][T22197] usb 4-1: device firmware changed [ 1426.916099][T14362] usb 4-1: USB disconnect, device number 9 [ 1426.955655][T14362] usblp0: removed [ 1427.152506][T14362] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1427.399862][T14362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1427.445112][T14362] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1427.485619][T14362] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1427.535403][T14362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1427.550486][T14362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.593082][T14362] usb 4-1: Product: ѕ [ 1427.626918][T14362] usb 4-1: Manufacturer: Х [ 1427.644884][T14362] usb 4-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1427.714279][T14362] hub 4-1:1.0: bad descriptor, ignoring hub [ 1427.736798][T14362] hub: probe of 4-1:1.0 failed with error -5 [ 1427.929148][T14362] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1428.157756][T22197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.176540][T22197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.936124][T14362] usb 4-1: USB disconnect, device number 10 [ 1428.955247][T14362] usblp0: removed [ 1429.790542][T14370] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1430.054573][T14370] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1430.065278][T14370] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.081754][T14370] usb 3-1: config 0 has no interfaces? [ 1430.088857][T14370] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1430.115926][T14370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.173055][T14370] usb 3-1: config 0 descriptor?? [ 1430.312287][T22275] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5032'. [ 1432.793643][ T42] usb 3-1: USB disconnect, device number 20 [ 1436.710855][T12488] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1436.905184][T12488] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1436.919473][T12488] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1436.930433][T12488] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1436.957148][T12488] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1436.970479][T12488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.981155][T12488] usb 5-1: Product: syz [ 1436.987018][T12488] usb 5-1: Manufacturer: syz [ 1437.012652][T12488] usb 5-1: SerialNumber: syz [ 1437.034251][T12488] hub 5-1:1.0: bad descriptor, ignoring hub [ 1437.040188][T12488] hub: probe of 5-1:1.0 failed with error -5 [ 1437.248561][T12488] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1437.930776][T22360] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 1438.124145][T22360] usb 5-1: device firmware changed [ 1438.164178][ T9] usb 5-1: USB disconnect, device number 5 [ 1438.178806][ T9] usblp0: removed [ 1438.333035][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1438.534209][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1438.561863][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1438.580155][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1438.607650][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1438.621542][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.640386][ T9] usb 5-1: Product: ѕ [ 1438.644995][ T9] usb 5-1: Manufacturer: Х [ 1438.649763][ T9] usb 5-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1438.695525][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 1438.738441][ T9] hub: probe of 5-1:1.0 failed with error -5 [ 1438.912638][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1439.112168][T22360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.142399][T22360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.652454][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5077'. [ 1439.720871][ T42] usb 5-1: USB disconnect, device number 6 [ 1439.744672][ T42] usblp0: removed [ 1440.583522][T22414] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5084'. [ 1442.480460][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1442.710456][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 1442.717329][ T42] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1442.729675][ T42] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1442.786246][ T42] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1442.811752][ T42] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1442.825429][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1442.834548][ T42] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1442.853896][ T42] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1442.871601][ T42] usb 4-1: Product: syz [ 1442.876076][ T42] usb 4-1: Manufacturer: syz [ 1442.885579][ T42] usb 4-1: SerialNumber: syz [ 1442.910927][ T42] usb 4-1: config 0 descriptor?? [ 1442.963008][ T42] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1443.046901][ T42] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1443.633567][ T9] usb 4-1: USB disconnect, device number 11 [ 1443.642645][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1444.441250][T14362] IPVS: starting estimator thread 0... [ 1444.560460][T22469] IPVS: using max 32 ests per chain, 76800 per kthread [ 1445.820574][T12488] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1446.021982][T12488] usb 5-1: Using ep0 maxpacket: 32 [ 1446.035678][T12488] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1446.060417][T12488] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1446.100465][T12488] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1446.139569][T12488] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1446.178766][T12488] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1446.191611][T12488] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1446.209340][T12488] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1446.239044][T12488] usb 5-1: Product: syz [ 1446.247403][T12488] usb 5-1: Manufacturer: syz [ 1446.262133][T12488] usb 5-1: SerialNumber: syz [ 1446.284162][T22507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5118'. [ 1446.291519][T12488] usb 5-1: config 0 descriptor?? [ 1446.305689][T12488] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1446.358560][T12488] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1446.730540][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1446.963527][ T9] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1447.034806][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.077604][T22515] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1447.100584][ T9] usb 1-1: config 0 has no interfaces? [ 1447.146702][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1447.212687][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.273679][ T9] usb 1-1: config 0 descriptor?? [ 1450.132312][T14362] usb 1-1: USB disconnect, device number 12 [ 1451.611192][T22492] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1451.743080][T14362] usb 5-1: USB disconnect, device number 7 [ 1451.771142][T14362] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1453.899269][T12488] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1454.130558][T12488] usb 4-1: Using ep0 maxpacket: 32 [ 1454.149314][T12488] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1454.180408][T12488] usb 4-1: config 0 has no interface number 0 [ 1454.210623][T12488] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1454.252437][T12488] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1454.276552][T12488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.390538][T12488] usb 4-1: Product: syz [ 1454.406631][T12488] usb 4-1: Manufacturer: syz [ 1454.417226][T12488] usb 4-1: SerialNumber: syz [ 1454.446765][T12488] usb 4-1: config 0 descriptor?? [ 1454.481815][T12488] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1454.540578][T12488] em28xx 4-1:0.132: Video interface 132 found: [ 1454.880777][T12488] em28xx 4-1:0.132: chip ID is em2765 [ 1456.231777][T12488] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1456.253550][T12488] em28xx 4-1:0.132: board has no eeprom [ 1456.370481][T12488] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1456.407706][T12488] em28xx 4-1:0.132: analog set to bulk mode. [ 1456.448146][T21797] em28xx 4-1:0.132: Registering V4L2 extension [ 1456.542234][T12488] usb 4-1: USB disconnect, device number 12 [ 1456.596550][T21797] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 1456.607610][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1456.626131][T12488] em28xx 4-1:0.132: Disconnecting em28xx [ 1456.867544][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1456.918245][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.994163][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.009452][T21797] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1457.033381][T21797] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1457.040717][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1457.055718][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1457.066775][T21797] em28xx 4-1:0.132: No AC97 audio processor [ 1457.101899][T21797] usb 4-1: Decoder not found [ 1457.107723][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.126958][T21797] em28xx 4-1:0.132: failed to create media graph [ 1457.149465][ T9] usb 3-1: config 0 descriptor?? [ 1457.157358][T21797] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1457.203685][T21797] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1457.241068][T12488] em28xx 4-1:0.132: Closing input extension [ 1457.284518][T12488] em28xx 4-1:0.132: Freeing device [ 1457.451290][T22597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.513316][T22597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.471364][T14362] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1458.752112][T14362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1458.790400][T14362] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1458.823391][T14362] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.853194][T14362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1458.868033][T14362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.894447][T14362] usb 4-1: Product: syz [ 1458.898767][T14362] usb 4-1: Manufacturer: syz [ 1458.903875][T14362] usb 4-1: SerialNumber: syz [ 1458.924254][T14362] hub 4-1:1.0: bad descriptor, ignoring hub [ 1458.934999][T14362] hub: probe of 4-1:1.0 failed with error -5 [ 1459.132486][T14362] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1459.611416][T22614] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 1459.743638][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1459.749635][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 1459.791238][ T9] usb 3-1: USB disconnect, device number 21 [ 1459.844655][T22614] usb 4-1: device firmware changed [ 1459.852938][T14362] usb 4-1: USB disconnect, device number 13 [ 1459.873495][T14362] usblp0: removed [ 1459.960499][ T42] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1460.052261][T14362] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1460.151783][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 1460.183009][ T42] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1460.195888][ T42] usb 1-1: config 0 has no interface number 0 [ 1460.211385][ T42] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1460.229818][ T42] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1460.239350][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.254550][ T42] usb 1-1: Product: syz [ 1460.258735][ T42] usb 1-1: Manufacturer: syz [ 1460.265963][ T42] usb 1-1: SerialNumber: syz [ 1460.272599][T14362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1460.284784][T14362] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1460.296450][ T42] usb 1-1: config 0 descriptor?? [ 1460.304478][T14362] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1460.321522][T14362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1460.334174][ T42] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1460.345005][T14362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.353172][ T42] em28xx 1-1:0.132: Video interface 132 found: [ 1460.359518][T14362] usb 4-1: Product: ѕ [ 1460.363797][T14362] usb 4-1: Manufacturer: Х [ 1460.369373][T14362] usb 4-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1460.398253][T14362] hub 4-1:1.0: bad descriptor, ignoring hub [ 1460.404802][T14362] hub: probe of 4-1:1.0 failed with error -5 [ 1460.602402][T14362] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1460.748819][ T42] em28xx 1-1:0.132: chip ID is em2765 [ 1460.808599][T22614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.817781][T22614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.175306][ T5899] usb 4-1: USB disconnect, device number 14 [ 1461.201764][ T5899] usblp0: removed [ 1462.051083][ T5899] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1462.067208][ T42] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1462.096551][ T42] em28xx 1-1:0.132: board has no eeprom [ 1462.200585][ T42] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1462.217304][ T42] em28xx 1-1:0.132: analog set to bulk mode. [ 1462.240048][T21998] em28xx 1-1:0.132: Registering V4L2 extension [ 1462.252376][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1462.281034][ T42] usb 1-1: USB disconnect, device number 13 [ 1462.290236][ T5899] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1462.316761][ T42] em28xx 1-1:0.132: Disconnecting em28xx [ 1462.332383][ T5899] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1462.365361][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1462.388205][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.430106][ T5899] usb 5-1: Product: syz [ 1462.452780][ T5899] usb 5-1: Manufacturer: syz [ 1462.476778][ T5899] usb 5-1: SerialNumber: syz [ 1462.504926][ T5899] hub 5-1:1.0: bad descriptor, ignoring hub [ 1462.514944][ T5899] hub: probe of 5-1:1.0 failed with error -5 [ 1462.671176][T21998] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1462.690914][T21998] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1462.713801][ T5899] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1462.730590][T21998] em28xx 1-1:0.132: No AC97 audio processor [ 1462.748690][T21998] usb 1-1: Decoder not found [ 1462.788286][T21998] em28xx 1-1:0.132: failed to create media graph [ 1462.808159][T21998] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1462.833863][T21998] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1462.852834][ T42] em28xx 1-1:0.132: Closing input extension [ 1462.894449][ T42] em28xx 1-1:0.132: Freeing device [ 1463.215024][T22649] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 1463.352837][ T9] IPVS: starting estimator thread 0... [ 1463.459973][T22677] IPVS: using max 32 ests per chain, 76800 per kthread [ 1463.482040][T22649] usb 5-1: device firmware changed [ 1463.501859][ T5899] usb 5-1: USB disconnect, device number 8 [ 1463.539861][ T5899] usblp0: removed [ 1463.740799][ T5899] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1463.972612][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1464.010657][ T5899] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1464.040566][ T5899] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1464.093866][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1464.130379][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.160506][ T5899] usb 5-1: Product: ѕ [ 1464.165248][ T5899] usb 5-1: Manufacturer: Х [ 1464.234151][ T5899] usb 5-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1464.326224][ T5899] hub 5-1:1.0: bad descriptor, ignoring hub [ 1464.340444][ T5899] hub: probe of 5-1:1.0 failed with error -5 [ 1464.552701][ T5899] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1464.746437][T22649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.802835][T22649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.416894][ T27] audit: type=1326 audit(1771080021.427:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.0.5174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feffb99bf79 code=0x0 [ 1465.440824][ T42] usb 5-1: USB disconnect, device number 9 [ 1465.449164][ T42] usblp0: removed [ 1466.520425][T14370] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1466.547996][T22706] vlan2: entered allmulticast mode [ 1466.556373][T22706] geneve1: entered allmulticast mode [ 1466.740597][T14370] usb 3-1: Using ep0 maxpacket: 32 [ 1466.772236][T14370] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1466.796969][T14370] usb 3-1: config 0 has no interface number 0 [ 1466.810703][T14370] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1466.858870][T14370] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1466.890155][T14370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.934396][ T3441] hsr_slave_0: left promiscuous mode [ 1466.954554][T14370] usb 3-1: Product: syz [ 1466.958848][T14370] usb 3-1: Manufacturer: syz [ 1466.971067][ T3441] hsr_slave_1: left promiscuous mode [ 1466.979224][T14370] usb 3-1: SerialNumber: syz [ 1467.008927][T14370] usb 3-1: config 0 descriptor?? [ 1467.047837][T14370] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1467.090439][T14370] em28xx 3-1:0.132: Video interface 132 found: [ 1467.453343][T14370] em28xx 3-1:0.132: chip ID is em2765 [ 1468.107308][ T3441] bond17 (unregistering): Released all slaves [ 1468.535255][ T27] audit: type=1326 audit(1771080024.547:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.3.5189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca2e99bf79 code=0x0 [ 1468.622180][ T3441] bond16 (unregistering): Released all slaves [ 1468.796406][T14370] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1468.821409][T14370] em28xx 3-1:0.132: board has no eeprom [ 1468.896124][T14370] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1468.909736][T14370] em28xx 3-1:0.132: analog set to bulk mode. [ 1468.921669][T12488] em28xx 3-1:0.132: Registering V4L2 extension [ 1468.956520][T14370] usb 3-1: USB disconnect, device number 22 [ 1468.957622][T14370] em28xx 3-1:0.132: Disconnecting em28xx [ 1469.151859][ T3441] bond15 (unregistering): Released all slaves [ 1469.262335][T12488] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1469.263657][T12488] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1469.263676][T12488] em28xx 3-1:0.132: No AC97 audio processor [ 1469.273052][T12488] usb 3-1: Decoder not found [ 1469.273074][T12488] em28xx 3-1:0.132: failed to create media graph [ 1469.273103][T12488] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1469.318600][T12488] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1469.318672][T14370] em28xx 3-1:0.132: Closing input extension [ 1469.371416][T14370] em28xx 3-1:0.132: Freeing device [ 1470.107932][ T3441] bond14 (unregistering): Released all slaves [ 1470.600497][ T6009] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1470.848763][ T3441] bond13 (unregistering): Released all slaves [ 1470.864469][ T6009] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1470.874783][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.891612][ T6009] usb 5-1: config 0 descriptor?? [ 1471.276290][ T3441] bond12 (unregistering): Released all slaves [ 1471.606463][ T3441] bond11 (unregistering): Released all slaves [ 1471.934934][ T3441] bond10 (unregistering): Released all slaves [ 1472.336925][ T3441] bond9 (unregistering): Released all slaves [ 1472.646502][ T3441] bond8 (unregistering): Released all slaves [ 1472.938598][ T3441] bond7 (unregistering): Released all slaves [ 1473.195234][ T3441] bond6 (unregistering): Released all slaves [ 1473.449947][ T3441] bond5 (unregistering): Released all slaves [ 1473.725657][ T3441] bond4 (unregistering): Released all slaves [ 1473.761659][ T3441] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1473.769860][ T3441] bridge1 (unregistering): left promiscuous mode [ 1474.055983][ T3441] bond3 (unregistering): Released all slaves [ 1474.306832][ T3441] bond2 (unregistering): Released all slaves [ 1474.327840][ T3441] bond1 (unregistering): Released all slaves [ 1476.010432][ T6009] [drm] vendor descriptor length:92 data:00 00 00 00 00 00 00 00 00 00 00 [ 1476.019115][ T6009] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1476.040897][ T6009] [drm:udl_init] *ERROR* Selecting channel failed [ 1476.094180][ T6009] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1476.108044][ T6009] [drm] Initialized udl on minor 2 [ 1476.120556][ T6009] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1476.128836][ T6009] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1476.145370][T21998] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1476.189388][T21998] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1476.200557][T21998] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1476.226621][ T3441] bond0 (unregistering): Released all slaves [ 1476.519760][T14370] usb 5-1: USB disconnect, device number 10 [ 1477.150418][T12488] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1477.272854][ T3441] IPVS: stop unused estimator thread 0... [ 1477.397098][T12488] usb 5-1: Using ep0 maxpacket: 32 [ 1477.409460][T12488] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1477.428428][T12488] usb 5-1: config 0 has no interface number 0 [ 1477.461301][T12488] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1477.520787][T12488] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1477.530221][T12488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.564355][T12488] usb 5-1: Product: syz [ 1477.568551][T12488] usb 5-1: Manufacturer: syz [ 1477.596726][T12488] usb 5-1: SerialNumber: syz [ 1477.628169][T12488] usb 5-1: config 0 descriptor?? [ 1477.656448][T12488] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1477.711860][T12488] em28xx 5-1:0.132: Video interface 132 found: [ 1477.933205][T22786] vlan2: entered allmulticast mode [ 1477.947940][T22786] geneve1: entered allmulticast mode [ 1478.048410][T12488] em28xx 5-1:0.132: chip ID is em2765 [ 1478.960502][ T6009] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1479.120000][T22806] kvm: pic: non byte write [ 1479.232535][ T6009] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1479.259324][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.288817][ T6009] usb 4-1: config 0 descriptor?? [ 1479.366280][T12488] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1479.431937][T12488] em28xx 5-1:0.132: board has no eeprom [ 1479.580621][T12488] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1479.588558][T12488] em28xx 5-1:0.132: analog set to bulk mode. [ 1479.621060][ T9] em28xx 5-1:0.132: Registering V4L2 extension [ 1479.647461][T12488] usb 5-1: USB disconnect, device number 11 [ 1479.761181][T12488] em28xx 5-1:0.132: Disconnecting em28xx [ 1480.189363][T22821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5213'. [ 1480.269797][ T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1480.335140][ T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1480.367334][ T9] em28xx 5-1:0.132: No AC97 audio processor [ 1480.411065][ T9] usb 5-1: Decoder not found [ 1480.423208][T22823] vlan0: entered allmulticast mode [ 1480.439538][ T9] em28xx 5-1:0.132: failed to create media graph [ 1480.455926][T22823] geneve1: entered allmulticast mode [ 1480.462060][ T9] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1480.498144][ T9] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1480.554595][T12488] em28xx 5-1:0.132: Closing input extension [ 1480.632011][T12488] em28xx 5-1:0.132: Freeing device [ 1480.681547][T22828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5216'. [ 1482.270436][T14362] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1482.471278][ T6009] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1482.541148][T14362] usb 1-1: Using ep0 maxpacket: 32 [ 1482.595100][T14362] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1482.603542][ T6009] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1482.615461][T14362] usb 1-1: config 0 has no interface number 0 [ 1482.624301][ T6009] [drm:udl_init] *ERROR* Selecting channel failed [ 1482.631365][T14362] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1482.654584][T14362] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1482.673197][ T6009] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1482.683023][T14362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.735875][ T6009] [drm] Initialized udl on minor 2 [ 1482.741610][T14362] usb 1-1: Product: syz [ 1482.760021][ T6009] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1482.768390][T14362] usb 1-1: Manufacturer: syz [ 1482.800898][T14362] usb 1-1: SerialNumber: syz [ 1482.810688][ T6009] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1482.835948][T14362] usb 1-1: config 0 descriptor?? [ 1482.847433][ T42] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1482.875525][T14362] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1482.892279][ T6009] usb 4-1: USB disconnect, device number 15 [ 1482.903340][ T42] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1482.946230][T14362] em28xx 1-1:0.132: Video interface 132 found: [ 1483.286435][T14362] em28xx 1-1:0.132: chip ID is em2765 [ 1483.350063][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5225'. [ 1483.564121][T14362] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1483.596130][T14362] em28xx 1-1:0.132: board has no eeprom [ 1483.690479][T14362] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1483.710910][T14362] em28xx 1-1:0.132: analog set to bulk mode. [ 1483.737519][ T5899] em28xx 1-1:0.132: Registering V4L2 extension [ 1483.769133][T14362] usb 1-1: USB disconnect, device number 14 [ 1483.797725][T14362] em28xx 1-1:0.132: Disconnecting em28xx [ 1483.827990][T12488] IPVS: starting estimator thread 0... [ 1483.961155][T22871] IPVS: using max 32 ests per chain, 76800 per kthread [ 1484.095719][ T5899] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1484.107575][ T5899] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1484.151851][ T5899] em28xx 1-1:0.132: No AC97 audio processor [ 1484.185271][ T5899] usb 1-1: Decoder not found [ 1484.190014][ T5899] em28xx 1-1:0.132: failed to create media graph [ 1484.209377][ T5899] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1484.243100][ T5899] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1484.262700][T14362] em28xx 1-1:0.132: Closing input extension [ 1484.285838][T14362] em28xx 1-1:0.132: Freeing device [ 1484.785381][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.791932][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.240473][ T6009] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1485.440498][ T6009] usb 5-1: Using ep0 maxpacket: 32 [ 1485.448537][ T6009] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1485.461230][ T6009] usb 5-1: config 0 has no interface number 0 [ 1485.467512][ T6009] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1485.484495][ T6009] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1485.501725][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.518066][ T6009] usb 5-1: Product: syz [ 1485.523014][ T6009] usb 5-1: Manufacturer: syz [ 1485.527652][ T6009] usb 5-1: SerialNumber: syz [ 1485.545508][ T6009] usb 5-1: config 0 descriptor?? [ 1485.560110][ T6009] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1485.570412][ T6009] em28xx 5-1:0.132: Video interface 132 found: [ 1486.029043][ T6009] em28xx 5-1:0.132: chip ID is em2765 [ 1486.305024][ T6009] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1486.321462][ T6009] em28xx 5-1:0.132: board has no eeprom [ 1486.400923][ T6009] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1486.414471][ T6009] em28xx 5-1:0.132: analog set to bulk mode. [ 1486.467534][ T5899] em28xx 5-1:0.132: Registering V4L2 extension [ 1486.490793][ T6009] usb 5-1: USB disconnect, device number 12 [ 1486.505947][ T6009] em28xx 5-1:0.132: Disconnecting em28xx [ 1486.830843][ T5899] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1486.839955][ T5899] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1486.898909][ T5899] em28xx 5-1:0.132: No AC97 audio processor [ 1486.922283][ T5899] usb 5-1: Decoder not found [ 1486.940622][ T5899] em28xx 5-1:0.132: failed to create media graph [ 1486.968586][ T5899] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1487.015887][ T5899] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1487.055170][ T6009] em28xx 5-1:0.132: Closing input extension [ 1487.107454][ T6009] em28xx 5-1:0.132: Freeing device [ 1488.170473][T14370] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1488.353502][T14370] usb 3-1: Using ep0 maxpacket: 32 [ 1488.363725][T14370] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1488.386455][T14370] usb 3-1: config 0 has no interface number 0 [ 1488.396470][T14370] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1488.415433][T14370] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1488.429338][T14370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.437909][T14370] usb 3-1: Product: syz [ 1488.452731][T14370] usb 3-1: Manufacturer: syz [ 1488.459983][T14370] usb 3-1: SerialNumber: syz [ 1488.484005][T14370] usb 3-1: config 0 descriptor?? [ 1488.533774][T14370] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1488.611808][T14370] em28xx 3-1:0.132: Video interface 132 found: [ 1488.930597][T14370] em28xx 3-1:0.132: chip ID is em2765 [ 1489.228707][T14370] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1489.268419][T14370] em28xx 3-1:0.132: board has no eeprom [ 1489.360409][T14370] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1489.385667][T14370] em28xx 3-1:0.132: analog set to bulk mode. [ 1489.421448][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 1489.447277][T14370] usb 3-1: USB disconnect, device number 23 [ 1489.473328][T14370] em28xx 3-1:0.132: Disconnecting em28xx [ 1489.776865][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1489.795933][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1489.826768][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 1489.837530][ T9] usb 3-1: Decoder not found [ 1489.849931][ T9] em28xx 3-1:0.132: failed to create media graph [ 1489.874958][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1489.891688][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1489.911842][T14370] em28xx 3-1:0.132: Closing input extension [ 1489.911840][T14362] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1489.947513][T14370] em28xx 3-1:0.132: Freeing device [ 1490.101030][T14362] usb 1-1: Using ep0 maxpacket: 32 [ 1490.116490][T14362] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1490.145270][T14362] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1490.183107][T14362] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1490.207232][T14362] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1490.230925][T14362] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1490.247315][T14362] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1490.272374][T14362] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1490.293156][T14362] usb 1-1: Product: syz [ 1490.301878][T14362] usb 1-1: Manufacturer: syz [ 1490.313975][T14362] usb 1-1: SerialNumber: syz [ 1490.344103][T14362] usb 1-1: config 0 descriptor?? [ 1490.374030][T14362] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1490.409040][T14362] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1490.705547][T23010] kvm: pic: non byte write [ 1491.383301][T14362] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1491.571776][T14362] usb 3-1: Using ep0 maxpacket: 32 [ 1491.579443][T14362] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1491.608222][T14362] usb 3-1: config 0 has no interface number 0 [ 1491.622877][T14362] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1491.646616][T14362] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1491.660693][T14362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.668729][T14362] usb 3-1: Product: syz [ 1491.685076][T14362] usb 3-1: Manufacturer: syz [ 1491.695148][T14362] usb 3-1: SerialNumber: syz [ 1491.711711][T14362] usb 3-1: config 0 descriptor?? [ 1491.729386][T14362] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1491.740205][T14362] em28xx 3-1:0.132: Video interface 132 found: [ 1492.128526][T14362] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1492.226013][T14362] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1492.235235][T14362] em28xx 3-1:0.132: board has no eeprom [ 1492.310583][T14362] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1492.335478][T14362] em28xx 3-1:0.132: analog set to bulk mode. [ 1492.354753][ T42] em28xx 3-1:0.132: Registering V4L2 extension [ 1492.384272][T14362] usb 3-1: USB disconnect, device number 24 [ 1492.456241][T14362] em28xx 3-1:0.132: Disconnecting em28xx [ 1492.683995][ T42] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1492.733845][ T42] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1492.763200][ T42] em28xx 3-1:0.132: No AC97 audio processor [ 1492.789125][ T42] usb 3-1: Decoder not found [ 1492.800981][ T42] em28xx 3-1:0.132: failed to create media graph [ 1492.814045][ T42] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1492.832999][ T42] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1492.847436][T14362] em28xx 3-1:0.132: Closing input extension [ 1492.868361][T14362] em28xx 3-1:0.132: Freeing device [ 1494.332406][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5297'. [ 1494.750462][ T5899] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1494.945568][ T5899] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1495.008511][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.136477][ T5899] usb 3-1: config 0 descriptor?? [ 1495.661886][T22992] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1496.005056][ T42] usb 1-1: USB disconnect, device number 15 [ 1496.074382][ T42] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1496.580474][ T42] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1496.787119][T23083] kvm: pic: non byte write [ 1496.803857][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1496.864924][ T42] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1496.920971][ T42] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1497.007934][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1497.040370][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.088642][ T42] usb 1-1: Product: syz [ 1497.120732][ T42] usb 1-1: Manufacturer: syz [ 1497.134012][ T42] usb 1-1: SerialNumber: syz [ 1497.187827][ T42] hub 1-1:1.0: bad descriptor, ignoring hub [ 1497.224932][ T42] hub: probe of 1-1:1.0 failed with error -5 [ 1497.441542][ T42] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1497.972751][ T42] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 1498.242638][ T42] usb 1-1: device firmware changed [ 1498.301350][ T42] usb 1-1: USB disconnect, device number 16 [ 1498.344176][ T42] usblp0: removed [ 1498.386356][ T5899] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1498.410570][ T5899] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1498.463168][ T5899] [drm:udl_init] *ERROR* Selecting channel failed [ 1498.514212][ T5899] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1498.540717][ T42] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1498.550457][ T5899] [drm] Initialized udl on minor 2 [ 1498.586518][ T5899] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1498.627418][ T5899] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1498.651434][ T6009] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1498.680055][ T5899] usb 3-1: USB disconnect, device number 25 [ 1498.686520][ T6009] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1498.772358][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1498.802544][ T42] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1498.840129][ T42] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1498.873470][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1498.895042][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.916016][ T42] usb 1-1: Product: ѕ [ 1498.920156][ T42] usb 1-1: Manufacturer: Х [ 1498.944866][ T42] usb 1-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1499.012485][ T42] hub 1-1:1.0: bad descriptor, ignoring hub [ 1499.043172][ T42] hub: probe of 1-1:1.0 failed with error -5 [ 1499.261972][ T42] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1499.363569][ T5899] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1499.372982][ T42] usb 1-1: USB disconnect, device number 17 [ 1499.405624][ T42] usblp0: removed [ 1499.570736][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 1499.582491][ T5899] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1499.603890][ T5899] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1499.663541][ T5899] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1499.710090][ T5899] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1499.757304][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1499.783128][ T5899] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1499.793788][ T5899] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1499.809208][ T5899] usb 3-1: Product: syz [ 1499.815698][ T5899] usb 3-1: Manufacturer: syz [ 1499.830172][ T5899] usb 3-1: SerialNumber: syz [ 1499.848766][ T5899] usb 3-1: config 0 descriptor?? [ 1499.864209][ T5899] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1499.903914][ T5899] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1500.201337][ T42] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1500.410442][ T42] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1500.451283][T12488] usb 3-1: USB disconnect, device number 26 [ 1500.477653][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.481270][T12488] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1500.504553][ T42] usb 4-1: config 0 descriptor?? [ 1501.910450][T14370] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1502.112598][T14370] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1502.137361][T14370] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1502.168330][T14370] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1502.193236][T14370] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1502.203730][T14370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.212925][T14370] usb 3-1: Product: syz [ 1502.219564][T14370] usb 3-1: Manufacturer: syz [ 1502.225376][T14370] usb 3-1: SerialNumber: syz [ 1502.237809][T14370] hub 3-1:1.0: bad descriptor, ignoring hub [ 1502.245756][T14370] hub: probe of 3-1:1.0 failed with error -5 [ 1502.550146][T14370] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1503.042357][T23134] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 1503.252961][T23134] usb 3-1: device firmware changed [ 1503.268830][T12488] usb 3-1: USB disconnect, device number 27 [ 1503.280532][T14362] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1503.287048][T12488] usblp0: removed [ 1503.338587][ T42] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1503.352582][ T42] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1503.361414][ T42] [drm:udl_init] *ERROR* Selecting channel failed [ 1503.379459][ T42] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1503.387733][ T42] [drm] Initialized udl on minor 2 [ 1503.395385][ T42] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1503.423112][ T42] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1503.442667][T21998] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1503.459697][ T42] usb 4-1: USB disconnect, device number 16 [ 1503.469814][T21998] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1503.480435][T14362] usb 1-1: Using ep0 maxpacket: 32 [ 1503.480604][T12488] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1503.521881][T14362] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1503.562554][T14362] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1503.615224][T14362] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1503.657139][T14362] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1503.700365][T14362] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1503.722874][T12488] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1503.743047][T12488] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1503.756609][T14362] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1503.765958][T12488] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1503.796609][T14362] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1503.820516][T14362] usb 1-1: Product: syz [ 1503.824867][T14362] usb 1-1: Manufacturer: syz [ 1503.832849][T12488] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1503.845987][T12488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.846020][T14362] usb 1-1: SerialNumber: syz [ 1503.880169][T12488] usb 3-1: Product: ѕ [ 1503.953097][T12488] usb 3-1: Manufacturer: Х [ 1503.965111][T12488] usb 3-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1503.965322][T14362] usb 1-1: config 0 descriptor?? [ 1504.014195][T14362] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1504.052487][T14362] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1504.088009][T12488] hub 3-1:1.0: bad descriptor, ignoring hub [ 1504.110658][T12488] hub: probe of 3-1:1.0 failed with error -5 [ 1504.163440][T23152] geneve2: entered promiscuous mode [ 1504.320937][T12488] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1504.520863][T23134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.537793][T23134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.698532][ T9] usb 1-1: USB disconnect, device number 18 [ 1504.724729][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1505.071458][T14370] usb 3-1: USB disconnect, device number 28 [ 1505.081355][T14370] usblp1: removed [ 1506.450450][ T42] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1506.659757][ T42] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1506.673772][T23180] kvm: pic: non byte write [ 1506.685508][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.702915][ T42] usb 3-1: config 0 descriptor?? [ 1508.821936][ T5899] IPVS: starting estimator thread 0... [ 1508.900459][T14370] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1508.920862][T23201] IPVS: using max 32 ests per chain, 76800 per kthread [ 1509.144581][T14370] usb 1-1: Using ep0 maxpacket: 32 [ 1509.175759][T14370] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1509.197565][T14370] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1509.217118][T14370] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1509.233128][T14370] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1509.302606][T14370] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1509.439267][T14370] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1509.588531][T14370] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1509.645403][T14370] usb 1-1: Product: syz [ 1509.665110][T14370] usb 1-1: Manufacturer: syz [ 1509.669738][T14370] usb 1-1: SerialNumber: syz [ 1509.688743][T14370] usb 1-1: config 0 descriptor?? [ 1509.724528][T14370] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1509.764323][ T42] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1509.765304][T14370] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1509.799896][ T42] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1509.866092][ T42] [drm:udl_init] *ERROR* Selecting channel failed [ 1509.899254][ T42] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1509.943864][ T42] [drm] Initialized udl on minor 2 [ 1509.953024][ T42] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1509.979066][ T42] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1510.013572][ T5899] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1510.040505][ T42] usb 3-1: USB disconnect, device number 29 [ 1510.070920][ T5899] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1510.267775][T14370] usb 1-1: USB disconnect, device number 19 [ 1510.274665][T14370] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1512.540513][T14370] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1512.640174][T23248] kvm: pic: non byte write [ 1512.753767][T14370] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1512.768254][T14370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.779154][T14370] usb 3-1: config 0 descriptor?? [ 1515.710670][T14370] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1515.735878][T14370] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1515.773854][T14370] [drm:udl_init] *ERROR* Selecting channel failed [ 1515.827965][T14370] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1515.854322][T14370] [drm] Initialized udl on minor 2 [ 1515.878159][T14370] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1515.901268][T14370] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1515.917266][T12488] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1515.934038][T12488] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1515.941011][T14370] usb 3-1: USB disconnect, device number 30 [ 1517.211203][T14370] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1517.410476][T14370] usb 4-1: Using ep0 maxpacket: 32 [ 1517.423219][T14370] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1517.443219][T14370] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1517.467791][T14370] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1517.480189][T14370] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1517.493981][T14370] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1517.506577][T14370] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1517.516145][T14370] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1517.525066][T14370] usb 4-1: Product: syz [ 1517.529355][T14370] usb 4-1: Manufacturer: syz [ 1517.535028][T14370] usb 4-1: SerialNumber: syz [ 1517.556589][T14370] usb 4-1: config 0 descriptor?? [ 1517.577046][T14370] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1517.601317][T14370] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1518.014297][T14370] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1518.157712][T21998] usb 4-1: USB disconnect, device number 17 [ 1518.182618][T21998] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1518.225709][T14370] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1518.283109][T14370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.365969][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5377'. [ 1518.401717][T14370] usb 3-1: config 0 descriptor?? [ 1519.686306][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5382'. [ 1519.709877][T23338] vlan2: entered allmulticast mode [ 1520.280484][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1520.503329][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 1520.540458][ T42] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1520.573066][ T42] usb 5-1: config 0 has no interface number 0 [ 1520.616017][ T42] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1520.647316][ T42] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1520.664880][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.683077][ T42] usb 5-1: Product: syz [ 1520.691972][ T42] usb 5-1: Manufacturer: syz [ 1520.699934][ T42] usb 5-1: SerialNumber: syz [ 1520.714330][ T42] usb 5-1: config 0 descriptor?? [ 1520.728074][ T42] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1520.753142][ T42] em28xx 5-1:0.132: Video interface 132 found: [ 1520.850572][T12488] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1521.090730][T12488] usb 1-1: Using ep0 maxpacket: 32 [ 1521.098713][T12488] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1521.130550][T12488] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1521.144098][ T42] em28xx 5-1:0.132: chip ID is em2765 [ 1521.170449][T12488] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1521.210436][T12488] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1521.242320][T14370] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1521.285683][T12488] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1521.293410][T14370] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1521.344147][T12488] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1521.361234][T14370] [drm:udl_init] *ERROR* Selecting channel failed [ 1521.380372][T12488] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1521.388870][T12488] usb 1-1: Product: syz [ 1521.402231][T12488] usb 1-1: Manufacturer: syz [ 1521.410802][T12488] usb 1-1: SerialNumber: syz [ 1521.429151][T12488] usb 1-1: config 0 descriptor?? [ 1521.435297][T14370] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1521.456108][T12488] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1521.471003][T14370] [drm] Initialized udl on minor 2 [ 1521.490754][T14370] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1521.500906][T12488] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1521.512574][T14370] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1521.543054][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1521.570460][T14370] usb 3-1: USB disconnect, device number 31 [ 1521.581333][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1521.851367][T23359] syzkaller0: entered promiscuous mode [ 1521.882772][T23359] syzkaller0: entered allmulticast mode [ 1522.085508][ T9] usb 1-1: USB disconnect, device number 20 [ 1522.106351][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1522.462014][ T42] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1522.462063][ T42] em28xx 5-1:0.132: board has no eeprom [ 1522.530536][ T42] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1522.530569][ T42] em28xx 5-1:0.132: analog set to bulk mode. [ 1522.539888][T21998] em28xx 5-1:0.132: Registering V4L2 extension [ 1522.540211][ T42] usb 5-1: USB disconnect, device number 13 [ 1522.541222][ T42] em28xx 5-1:0.132: Disconnecting em28xx [ 1522.788143][T23376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1522.812041][T23376] vlan2: entered allmulticast mode [ 1523.009418][T21998] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1523.036142][T21998] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1523.057772][T21998] em28xx 5-1:0.132: No AC97 audio processor [ 1523.065046][T23384] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5396'. [ 1523.079538][T21998] usb 5-1: Decoder not found [ 1523.093418][T21998] em28xx 5-1:0.132: failed to create media graph [ 1523.112910][T21998] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1523.149104][T21998] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1523.215495][ T42] em28xx 5-1:0.132: Closing input extension [ 1523.259277][ T42] em28xx 5-1:0.132: Freeing device [ 1523.264067][T23386] geneve2: entered promiscuous mode [ 1523.625334][ T27] audit: type=1326 audit(1771080079.637:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.0.5395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feffb99bf79 code=0x0 [ 1524.540684][ T42] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1524.750570][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 1524.773389][ T42] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1524.790792][ T42] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1524.810499][ T42] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1524.855792][ T42] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1524.877236][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1524.900085][ T42] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1524.916144][ T42] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1524.925999][ T42] usb 1-1: Product: syz [ 1524.931099][ T42] usb 1-1: Manufacturer: syz [ 1524.939986][ T42] usb 1-1: SerialNumber: syz [ 1524.966846][ T42] usb 1-1: config 0 descriptor?? [ 1524.996397][ T42] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1525.032638][ T42] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1525.043687][T23410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5405'. [ 1525.080484][T23410] vlan0: entered allmulticast mode [ 1525.315556][T23416] geneve2: entered promiscuous mode [ 1525.410899][T14362] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1525.555590][ T9] usb 1-1: USB disconnect, device number 21 [ 1525.567636][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1525.620747][T14362] usb 3-1: Using ep0 maxpacket: 32 [ 1525.629775][T14362] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1525.638498][T14362] usb 3-1: config 0 has no interface number 0 [ 1525.644940][T14362] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1525.666747][T14362] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1525.677371][T14362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.685512][T14362] usb 3-1: Product: syz [ 1525.689998][T14362] usb 3-1: Manufacturer: syz [ 1525.694866][T14362] usb 3-1: SerialNumber: syz [ 1525.708789][T14362] usb 3-1: config 0 descriptor?? [ 1525.718075][T14362] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1525.728635][T14362] em28xx 3-1:0.132: Video interface 132 found: [ 1525.730806][T21797] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1525.944292][T21797] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1525.954207][T21797] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1525.964608][T21797] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1525.981396][T21797] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1525.990810][T21797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.998927][T21797] usb 4-1: Product: syz [ 1526.003243][T21797] usb 4-1: Manufacturer: syz [ 1526.009222][T21797] usb 4-1: SerialNumber: syz [ 1526.025103][T21797] hub 4-1:1.0: bad descriptor, ignoring hub [ 1526.031180][T21797] hub: probe of 4-1:1.0 failed with error -5 [ 1526.121534][T14362] em28xx 3-1:0.132: chip ID is em2765 [ 1526.250223][T21797] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1526.706059][ T27] audit: type=1326 audit(1771080082.717:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23426 comm="syz.0.5411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feffb99bf79 code=0x0 [ 1526.733032][T23419] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 1526.946724][T23419] usb 4-1: device firmware changed [ 1526.961720][ T42] usb 4-1: USB disconnect, device number 18 [ 1526.971403][ T42] usblp0: removed [ 1527.150580][ T42] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1527.338165][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1527.362353][ T42] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1527.392934][ T42] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1527.410940][ T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1527.423137][T14362] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1527.432145][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.443526][T14362] em28xx 3-1:0.132: board has no eeprom [ 1527.449319][ T42] usb 4-1: Product: ѕ [ 1527.454341][ T42] usb 4-1: Manufacturer: Х [ 1527.459211][ T42] usb 4-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1527.492020][ T42] hub 4-1:1.0: bad descriptor, ignoring hub [ 1527.509064][ T42] hub: probe of 4-1:1.0 failed with error -5 [ 1527.520505][T14362] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1527.529031][T14362] em28xx 3-1:0.132: analog set to bulk mode. [ 1527.549016][ T5899] em28xx 3-1:0.132: Registering V4L2 extension [ 1527.566006][T14362] usb 3-1: USB disconnect, device number 32 [ 1527.577240][T14362] em28xx 3-1:0.132: Disconnecting em28xx [ 1527.704471][ T42] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1527.816716][ T5899] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1527.825066][ T5899] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1527.832787][ T5899] em28xx 3-1:0.132: No AC97 audio processor [ 1527.840205][ T5899] usb 3-1: Decoder not found [ 1527.852533][ T5899] em28xx 3-1:0.132: failed to create media graph [ 1527.858963][ T5899] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1527.884859][ T5899] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1527.893922][T14362] em28xx 3-1:0.132: Closing input extension [ 1527.911686][T23419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.912116][T23419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.943985][T14362] em28xx 3-1:0.132: Freeing device [ 1528.821380][ T42] usb 4-1: USB disconnect, device number 19 [ 1528.842337][ T42] usblp0: removed [ 1529.359680][T23467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5420'. [ 1529.657473][T23471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5422'. [ 1529.700490][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1529.890422][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1529.936157][ T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1529.964129][ T9] usb 5-1: config 0 has no interface number 0 [ 1529.972602][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1529.990449][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 1530.083455][ T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1530.111226][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1530.135809][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.167236][ T9] usb 5-1: Product: syz [ 1530.178699][ T9] usb 5-1: Manufacturer: syz [ 1530.192221][ T9] usb 5-1: SerialNumber: syz [ 1530.216751][ T9] usb 5-1: config 0 descriptor?? [ 1530.254665][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input13 [ 1530.270531][T14362] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1530.518928][T14362] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1530.532674][T14362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.587241][T14362] usb 1-1: config 0 descriptor?? [ 1531.190678][ T6009] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1531.376269][ T6009] usb 4-1: Using ep0 maxpacket: 32 [ 1531.416944][ T6009] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1531.440239][ T6009] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1531.488386][ T6009] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1531.513465][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1531.528416][ T6009] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1531.557632][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1531.589434][ T6009] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1531.657381][ T6009] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1531.692943][ T6009] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1531.707042][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.726114][ T6009] usb 4-1: config 0 descriptor?? [ 1531.771462][T23482] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1532.092916][ T6009] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1532.464170][ C0] usblp0: nonzero read bulk status received: -71 [ 1532.512280][ T6009] usb 4-1: USB disconnect, device number 20 [ 1532.615431][ T6009] usblp0: removed [ 1533.115107][T21797] usb 5-1: USB disconnect, device number 14 [ 1533.455006][ T12] hsr_slave_0: left promiscuous mode [ 1533.483234][ T12] hsr_slave_1: left promiscuous mode [ 1533.611409][T12488] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1533.667041][T14362] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1533.700745][T14362] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1533.721209][T14362] [drm:udl_init] *ERROR* Selecting channel failed [ 1533.760574][T21797] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1533.763396][T14362] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1533.798105][T14362] [drm] Initialized udl on minor 2 [ 1533.811662][T14362] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1533.841480][T14362] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1533.842204][T12488] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1533.851072][T21998] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1533.872835][T14362] usb 1-1: USB disconnect, device number 22 [ 1533.882255][T21998] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1533.895720][T12488] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1533.920521][T12488] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1533.925595][T21998] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1533.970460][T21797] usb 5-1: Using ep0 maxpacket: 32 [ 1533.979149][T21797] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1533.996423][T12488] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1534.006668][T21797] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1534.019886][T12488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.027864][ T27] audit: type=1326 audit(1771080090.027:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.2.5429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20cf19bf79 code=0x0 [ 1534.028204][T21797] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1534.062156][T12488] usb 4-1: Product: syz [ 1534.066368][T12488] usb 4-1: Manufacturer: syz [ 1534.076192][T12488] usb 4-1: SerialNumber: syz [ 1534.083025][T21797] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1534.109990][T21797] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1534.117744][T12488] hub 4-1:1.0: bad descriptor, ignoring hub [ 1534.126459][T12488] hub: probe of 4-1:1.0 failed with error -5 [ 1534.138399][T21797] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1534.164036][T21797] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1534.173384][T21797] usb 5-1: Product: syz [ 1534.177667][T21797] usb 5-1: Manufacturer: syz [ 1534.182847][T21797] usb 5-1: SerialNumber: syz [ 1534.212246][T21797] usb 5-1: config 0 descriptor?? [ 1534.223718][T21797] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1534.261661][T21797] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1534.379501][T12488] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1534.479319][ T12] bond13 (unregistering): Released all slaves [ 1534.799016][ T12] bond12 (unregistering): Released all slaves [ 1534.885979][T12488] usb 5-1: USB disconnect, device number 15 [ 1534.905019][T12488] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1534.960849][T14362] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 1535.081011][ T12] bond11 (unregistering): Released all slaves [ 1535.183136][T14362] usb 4-1: device firmware changed [ 1535.194080][T14362] usb 4-1: USB disconnect, device number 21 [ 1535.210179][T14362] usblp1: removed [ 1535.343219][ T12] bond10 (unregistering): Released all slaves [ 1535.361069][ T12] bond9 (unregistering): Released all slaves [ 1535.625015][T14362] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1535.704131][ T12] bond8 (unregistering): Released all slaves [ 1535.832257][T14362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1535.854094][T14362] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1535.865281][T14362] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1535.898751][T14362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1535.915565][T14362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.924415][T14362] usb 4-1: Product: ѕ [ 1535.945673][T14362] usb 4-1: Manufacturer: Х [ 1535.950785][T14362] usb 4-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1536.007445][T14362] hub 4-1:1.0: bad descriptor, ignoring hub [ 1536.017002][T14362] hub: probe of 4-1:1.0 failed with error -5 [ 1536.171393][ T12] bond7 (unregistering): Released all slaves [ 1536.219429][T14362] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1536.421574][T23494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.453686][T23494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.706254][ T12] bond6 (unregistering): Released all slaves [ 1537.117890][ T12] bond5 (unregistering): Released all slaves [ 1537.156036][T21797] usb 4-1: USB disconnect, device number 22 [ 1537.173938][T21797] usblp0: removed [ 1537.504860][ T12] bond4 (unregistering): Released all slaves [ 1537.868273][ T12] bond3 (unregistering): Released all slaves [ 1538.154616][ T12] bond2 (unregistering): Released all slaves [ 1538.382151][ T12] bond1 (unregistering): Released all slaves [ 1540.107096][ T12] bond0 (unregistering): Released all slaves [ 1540.248622][T23498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5432'. [ 1540.258250][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5433'. [ 1540.278532][T23509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5433'. [ 1540.322428][T23509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5433'. [ 1540.986449][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5439'. [ 1541.861490][T14370] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1541.880672][T21998] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1542.070460][T14370] usb 3-1: Using ep0 maxpacket: 32 [ 1542.095016][T14370] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1542.095016][T21998] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1542.095046][T21998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1542.129446][T14370] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1542.163317][T21998] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1542.170431][T14370] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1542.182012][T21998] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1542.209134][T21998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.217442][T21998] usb 4-1: Product: syz [ 1542.227597][T21998] usb 4-1: Manufacturer: syz [ 1542.237749][T21998] usb 4-1: SerialNumber: syz [ 1542.268113][T14370] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1542.288699][T21998] hub 4-1:1.0: bad descriptor, ignoring hub [ 1542.308752][T14370] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1542.332025][T14370] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1542.339161][T21998] hub: probe of 4-1:1.0 failed with error -5 [ 1542.347750][T14370] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1542.379146][T14370] usb 3-1: Product: syz [ 1542.387469][T14370] usb 3-1: Manufacturer: syz [ 1542.403885][T14370] usb 3-1: SerialNumber: syz [ 1542.430916][T14370] usb 3-1: config 0 descriptor?? [ 1542.448756][T14370] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1542.471359][T14370] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1542.497607][T21998] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1543.047613][T12488] usb 3-1: USB disconnect, device number 33 [ 1543.050469][T21998] usb 4-1: reset high-speed USB device number 23 using dummy_hcd [ 1543.067484][T12488] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1543.296187][T21998] usb 4-1: device firmware changed [ 1543.344731][T21998] usb 4-1: USB disconnect, device number 23 [ 1543.393305][T21998] usblp1: removed [ 1543.770514][T21998] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1544.002160][T21998] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1544.040500][T21998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1544.092435][T21998] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1544.136869][T21998] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1544.170375][T21998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.210456][ T27] audit: type=1326 audit(1771080100.197:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23564 comm="syz.2.5449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20cf19bf79 code=0x0 [ 1544.237297][T21998] usb 4-1: Product: ѕ [ 1544.262770][T21998] usb 4-1: Manufacturer: Х [ 1544.278214][T21998] usb 4-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1544.421726][T21998] hub 4-1:1.0: bad descriptor, ignoring hub [ 1544.427723][T21998] hub: probe of 4-1:1.0 failed with error -5 [ 1544.643822][T21998] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1544.772281][T21998] usb 4-1: USB disconnect, device number 24 [ 1544.809017][T21998] usblp0: removed [ 1544.870162][T23578] kvm: pic: non byte write [ 1545.670610][T21797] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1545.822315][T23606] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1545.836796][T23606] PKCS7: Only support pkcs7_signedData type [ 1545.900679][T21797] usb 4-1: Using ep0 maxpacket: 32 [ 1545.910234][T21797] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1545.932318][T21797] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1546.005567][T21797] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1546.046963][T21797] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1546.080231][T21797] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1546.100436][T21797] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1546.110380][T21797] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1546.119758][T21797] usb 4-1: Product: syz [ 1546.127990][T21797] usb 4-1: Manufacturer: syz [ 1546.143617][T21797] usb 4-1: SerialNumber: syz [ 1546.156695][T21797] usb 4-1: config 0 descriptor?? [ 1546.175913][T21797] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1546.196158][T21797] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1546.239064][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.245633][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.748716][ T42] usb 4-1: USB disconnect, device number 25 [ 1546.769469][ T42] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1548.118999][T23627] kvm: pic: non byte write [ 1548.660833][T21797] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1548.880465][T21797] usb 5-1: Using ep0 maxpacket: 32 [ 1548.887560][T21797] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1548.909316][T21797] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1548.946053][T21797] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1548.981493][T21797] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1549.066229][T21797] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1549.079254][T21797] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1549.088746][T21797] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1549.148014][T21797] usb 5-1: Product: syz [ 1549.166958][T21797] usb 5-1: Manufacturer: syz [ 1549.188916][T21797] usb 5-1: SerialNumber: syz [ 1549.246940][T21797] usb 5-1: config 0 descriptor?? [ 1549.266624][T21797] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1549.298024][T21797] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1549.888653][T21998] usb 5-1: USB disconnect, device number 16 [ 1549.909176][T21998] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1551.205621][T23681] kvm: pic: non byte write [ 1553.670623][ T42] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1553.709351][T23696] snd_dummy snd_dummy.0: control 5:65278:0:syz0:-259 is already present [ 1553.870633][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 1553.886351][ T42] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1553.918821][ T42] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1553.970622][ T42] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1554.019271][ T42] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1554.088887][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.112103][ T42] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1554.142561][ T42] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1554.160348][ T42] usb 5-1: Product: syz [ 1554.186045][ T42] usb 5-1: Manufacturer: syz [ 1554.200386][ T42] usb 5-1: SerialNumber: syz [ 1554.227153][ T42] usb 5-1: config 0 descriptor?? [ 1554.302555][ T42] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1554.336049][ T42] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1554.428793][T23711] syzkaller0: entered promiscuous mode [ 1554.435540][T23711] syzkaller0: entered allmulticast mode [ 1556.467616][ T5832] usb 5-1: USB disconnect, device number 17 [ 1556.479961][ T5832] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1560.226580][T23765] kvm: pic: non byte write [ 1560.574899][T23776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5511'. [ 1560.618314][T23776] vlan2: entered allmulticast mode [ 1560.642949][T23776] geneve1: entered allmulticast mode [ 1564.250518][T14370] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1564.504073][T14370] usb 5-1: Using ep0 maxpacket: 32 [ 1564.516103][T14370] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1564.527338][T14370] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1564.542125][T14370] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1564.558841][T14370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1564.571732][T14370] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1564.583507][T14370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1564.596084][T14370] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1564.625740][T14370] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1564.639539][T14370] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1564.654655][T14370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.668480][T14370] usb 5-1: config 0 descriptor?? [ 1564.695193][T23820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1564.939007][T14370] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1566.294312][T23856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5539'. [ 1566.321409][T23856] vlan2: entered allmulticast mode [ 1566.998542][ T27] audit: type=1326 audit(1771080123.007:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.0.5540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feffb99bf79 code=0x0 [ 1567.033973][ T5832] usb 5-1: USB disconnect, device number 18 [ 1567.049424][ T5832] usblp0: removed [ 1567.840545][ T42] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1568.043693][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1568.072967][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1568.099961][ T42] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1568.125586][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1568.135014][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.143672][ T42] usb 5-1: Product: syz [ 1568.148003][ T42] usb 5-1: Manufacturer: syz [ 1568.152944][ T42] usb 5-1: SerialNumber: syz [ 1568.167680][ T42] hub 5-1:1.0: bad descriptor, ignoring hub [ 1568.183422][ T42] hub: probe of 5-1:1.0 failed with error -5 [ 1568.431603][ T42] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1568.768524][ T27] audit: type=1326 audit(1771080124.777:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23893 comm="syz.2.5551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20cf19bf79 code=0x0 [ 1568.880547][T23875] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 1569.084916][T23875] usb 5-1: device firmware changed [ 1569.092700][T14370] usb 5-1: USB disconnect, device number 19 [ 1569.107947][T14370] usblp0: removed [ 1569.354448][T14370] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1569.552427][T14370] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1569.592460][T14370] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1569.620541][T14370] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1569.668705][T14370] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1569.700337][T14370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.720604][T14370] usb 5-1: Product: ѕ [ 1569.724743][T14370] usb 5-1: Manufacturer: Х [ 1569.747191][T14370] usb 5-1: SerialNumber: 採⚂喃쓡▢⧟踅뮍腁렬축洊⥭癇㎚㪟놼宾謄ࣲ盉㪝펗䩑﾿ꏚ䬇蹦槊꺠濞彰+ಳ䚞넨铳纀ʼ쑞튍猨瑆즾务ཱ黡 [ 1569.760435][T21998] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1569.806047][T14370] hub 5-1:1.0: bad descriptor, ignoring hub [ 1569.834925][T14370] hub: probe of 5-1:1.0 failed with error -5 [ 1569.983520][T21998] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.012058][T21998] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1570.049668][T21998] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1570.100163][T21998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.137295][T21998] usb 1-1: Product: syz [ 1570.159642][T21998] usb 1-1: Manufacturer: syz [ 1570.180441][T21998] usb 1-1: SerialNumber: syz [ 1570.216275][T21998] usb 1-1: config 0 descriptor?? [ 1570.492412][T21998] usb 1-1: USB disconnect, device number 23 [ 1570.942047][T14370] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1571.002159][T14370] usb 5-1: USB disconnect, device number 20 [ 1571.020248][T14370] usblp0: removed [ 1571.104548][ T27] audit: type=1326 audit(1771080127.117:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23931 comm="syz.2.5562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20cf19bf79 code=0x0 [ 1573.200797][ T5832] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1573.401884][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1573.427110][ T5832] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1573.481821][ T5832] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1573.561260][ T5832] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1573.576728][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.611039][ T5832] usb 3-1: Product: syz [ 1573.615280][ T5832] usb 3-1: Manufacturer: syz [ 1573.619930][ T5832] usb 3-1: SerialNumber: syz [ 1573.688013][ T5832] hub 3-1:1.0: bad descriptor, ignoring hub [ 1573.702911][ T5832] hub: probe of 3-1:1.0 failed with error -5 [ 1573.730607][T23973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5574'. [ 1573.827959][T23973] vlan0: entered allmulticast mode [ 1573.898917][ T5832] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1574.929808][T23990] snd_dummy snd_dummy.0: control 5:65278:0:syz0:-259 is already present [ 1575.577632][T24003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5584'. [ 1576.028227][ T27] audit: type=1326 audit(1771080132.037:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24001 comm="syz.3.5585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca2e99bf79 code=0x0 [ 1576.502325][T24020] snd_dummy snd_dummy.0: control 5:65278:0:syz0:-259 is already present [ 1576.910622][ T5832] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1576.972282][T24028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5594'. [ 1577.110583][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 1577.122708][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1577.160475][ T5832] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1577.189996][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.221087][ T5832] usb 5-1: config 0 descriptor?? [ 1577.988354][ T27] audit: type=1326 audit(1771080133.997:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.0.5599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feffb99bf79 code=0x0 [ 1578.405107][ T5832] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1578.424056][T14370] usb 3-1: USB disconnect, device number 34 [ 1578.441829][T14370] usblp0: removed [ 1578.462392][ T5832] usb 5-1: USB disconnect, device number 21 [ 1578.830831][T24049] snd_dummy snd_dummy.0: control 5:65278:0:syz0:-259 is already present [ 1579.080695][T24056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5602'. [ 1579.527334][T24073] tipc: Started in network mode [ 1579.543664][T24073] tipc: Node identity 4, cluster identity 4711 [ 1579.568332][T24073] tipc: Node number set to 4 [ 1579.790246][ T27] audit: type=1326 audit(1771080135.797:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24067 comm="syz.2.5608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20cf19bf79 code=0x0 [ 1579.919205][T24079] snd_dummy snd_dummy.0: control 5:65278:0:syz0:-259 is already present [ 1579.981328][ T5832] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1580.211205][ T5832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1580.250440][ T5832] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1580.287796][ T5832] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1580.312244][ T5832] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1580.340735][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.390107][ T5832] usb 5-1: Product: syz [ 1580.400217][ T5832] usb 5-1: Manufacturer: syz [ 1580.405218][ T5832] usb 5-1: SerialNumber: syz [ 1580.443217][ T5832] hub 5-1:1.0: bad descriptor, ignoring hub [ 1580.449204][ T5832] hub: probe of 5-1:1.0 failed with error -5 [ 1580.651142][ T5832] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1581.473464][ T5832] usb 5-1: USB disconnect, device number 22 [ 1581.563120][ T5832] usblp0: removed [ 1581.670939][T24109] snd_dummy snd_dummy.0: control 5:65278:0:syz0:-259 is already present [ 1582.546956][T24124] netlink: 'syz.0.5626': attribute type 10 has an invalid length. [ 1582.622943][T24124] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1582.700680][T14362] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1582.745654][T24124] [ 1582.748059][T24124] ============================= [ 1582.753118][T24124] WARNING: suspicious RCU usage [ 1582.757998][T24124] syzkaller #0 Not tainted [ 1582.762627][T24124] ----------------------------- [ 1582.767471][T24124] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 1582.776003][T24124] [ 1582.776003][T24124] other info that might help us debug this: [ 1582.776003][T24124] [ 1582.786426][T24124] [ 1582.786426][T24124] rcu_scheduler_active = 2, debug_locks = 1 [ 1582.794584][T24124] 1 lock held by syz.0.5626/24124: [ 1582.799714][T24124] #0: ffffffff8e3c0208 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 1582.808982][T24124] [ 1582.808982][T24124] stack backtrace: [ 1582.815040][T24124] CPU: 1 PID: 24124 Comm: syz.0.5626 Not tainted syzkaller #0 [ 1582.822536][T24124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1582.832607][T24124] Call Trace: [ 1582.835899][T24124] [ 1582.838835][T24124] dump_stack_lvl+0x18c/0x250 [ 1582.843630][T24124] ? show_regs_print_info+0x20/0x20 [ 1582.848835][T24124] ? load_image+0x400/0x400 [ 1582.853362][T24124] lockdep_rcu_suspicious+0x1e1/0x300 [ 1582.858765][T24124] ieee80211_check_concurrent_iface+0x475/0x950 [ 1582.865056][T24124] ieee80211_open+0xc1/0x200 [ 1582.869659][T24124] __dev_open+0x2cb/0x430 [ 1582.874036][T24124] ? dev_open+0x190/0x190 [ 1582.878377][T24124] __dev_change_flags+0x211/0x6a0 [ 1582.883407][T24124] ? dev_get_flags+0x1c0/0x1c0 [ 1582.888206][T24124] ? mutex_lock_nested+0x20/0x20 [ 1582.893200][T24124] ? apparmor_capable+0x137/0x1a0 [ 1582.898260][T24124] dev_change_flags+0x88/0x1a0 [ 1582.903045][T24124] devinet_ioctl+0x95c/0x1c40 [ 1582.907729][T24124] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 1582.912836][T24124] ? _copy_from_user+0xa5/0xe0 [ 1582.917623][T24124] ? get_user_ifreq+0x12b/0x180 [ 1582.922502][T24124] inet_ioctl+0x42b/0x560 [ 1582.926833][T24124] ? tomoyo_path_number_perm+0x217/0x620 [ 1582.932473][T24124] ? inet_shutdown+0x370/0x370 [ 1582.937239][T24124] ? slab_free_freelist_hook+0x130/0x1a0 [ 1582.943009][T24124] ? tomoyo_path_number_perm+0x500/0x620 [ 1582.948651][T24124] ? __kmem_cache_free+0xba/0x1e0 [ 1582.953681][T24124] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1582.959240][T24124] sock_do_ioctl+0xfc/0x310 [ 1582.963751][T24124] ? sock_show_fdinfo+0xb0/0xb0 [ 1582.968697][T24124] sock_ioctl+0x5ba/0x7e0 [ 1582.973051][T24124] ? sock_poll+0x3e0/0x3e0 [ 1582.977481][T24124] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1582.982433][T24124] ? security_file_ioctl+0x80/0xa0 [ 1582.987547][T24124] ? sock_poll+0x3e0/0x3e0 [ 1582.992003][T24124] __se_sys_ioctl+0xfd/0x170 [ 1582.996700][T24124] do_syscall_64+0x55/0xa0 [ 1583.001117][T24124] ? clear_bhb_loop+0x40/0x90 [ 1583.005839][T24124] ? clear_bhb_loop+0x40/0x90 [ 1583.010511][T24124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.016412][T24124] RIP: 0033:0x7feffb99bf79 [ 1583.020847][T24124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.040555][T24124] RSP: 002b:00007feffc8b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.049089][T24124] RAX: ffffffffffffffda RBX: 00007feffbc15fa0 RCX: 00007feffb99bf79 [ 1583.057065][T24124] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 000000000000000b [ 1583.065036][T24124] RBP: 00007feffba327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.073036][T24124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.081013][T24124] R13: 00007feffbc16038 R14: 00007feffbc15fa0 R15: 00007fffea9c8618 [ 1583.088996][T24124] [ 1583.201591][T14362] usb 5-1: Using ep0 maxpacket: 32 [ 1583.209109][T14362] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1583.217706][T14362] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1583.252873][T14362] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1583.277642][T14362] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1583.305114][T14362] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1583.324741][T14362] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1583.334306][T14362] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1583.355479][T14362] usb 5-1: Product: syz [ 1583.368890][T14362] usb 5-1: Manufacturer: syz [ 1583.379428][T14362] usb 5-1: SerialNumber: syz [ 1583.403173][T14362] usb 5-1: config 0 descriptor?? [ 1583.424400][T14362] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1583.459816][T14362] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1585.426314][ T5832] usb 5-1: USB disconnect, device number 23 [ 1585.447884][ T5832] ldusb 5-1:0.0: LD USB Device #0 now disconnected