last executing test programs: 6.794463354s ago: executing program 2 (id=5073): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 6.607919347s ago: executing program 2 (id=5074): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.384215477s ago: executing program 1 (id=5077): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900676c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) 6.144682596s ago: executing program 1 (id=5080): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) 6.03402011s ago: executing program 2 (id=5083): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000040), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x22020600) r3 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) 5.773393632s ago: executing program 1 (id=5087): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @empty}, 0x1c) 5.700187776s ago: executing program 2 (id=5089): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000200)=""/73, 0x49) 5.501411113s ago: executing program 3 (id=5090): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) unshare(0x22020600) r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000100)={0x0, "a3a1b56a4c84226a928a751f1cb50b3e6421ca43d00c7441b04e9026e3dbaf07"}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.096869797s ago: executing program 3 (id=5094): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000ff0100005c0000", @ANYBLOB="0400000000"], 0x50) 4.937403284s ago: executing program 4 (id=5095): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e00"], &(0x7f00000002c0)={0x0, 0xf, 0x82, {0x5, 0xf, 0x82, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0xd8, 0xfff4}, @generic={0x6c, 0x10, 0x3, "288baa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3533d684a7426a14b40824a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077e88ae2e172ccf1ee1947201fecff11"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 4.820652168s ago: executing program 1 (id=5096): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) 4.597172604s ago: executing program 1 (id=5097): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, 0x0) 4.45350259s ago: executing program 1 (id=5098): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r2 = syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare(0x6a040000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 2.868682579s ago: executing program 3 (id=5099): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000040), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x22020600) r3 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) 2.140707081s ago: executing program 3 (id=5101): openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x5e41, &(0x7f00000003c0)={0x0, 0x3e59, 0x800, 0x3, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 2.106686132s ago: executing program 2 (id=5102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020300000009210000000122070009058103"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_notify(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.73344908s ago: executing program 4 (id=5104): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15}) 1.658931202s ago: executing program 4 (id=5106): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = fcntl$dupfd(r3, 0x0, r2) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4040841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x28, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="1000000000000000280012800b000100"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 994.621903ms ago: executing program 0 (id=5107): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 914.093454ms ago: executing program 4 (id=5108): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 457.176152ms ago: executing program 0 (id=5109): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) syz_open_pts(r0, 0x141601) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) unshare(0x28020480) process_mrelease(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 340.283921ms ago: executing program 0 (id=5110): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) 323.234313ms ago: executing program 3 (id=5111): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x8014) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 256.403449ms ago: executing program 4 (id=5112): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x22020600) r3 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) 165.820701ms ago: executing program 0 (id=5113): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 114.423639ms ago: executing program 0 (id=5114): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) connect$inet6(r0, 0x0, 0x0) 113.055123ms ago: executing program 2 (id=5115): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x20018010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[]) 37.366106ms ago: executing program 4 (id=5116): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15}) 1.185136ms ago: executing program 3 (id=5117): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0xfffffff8) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=5118): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): ce: batadv_slave_1 [ 609.219893][ T5828] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.219918][ T5828] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 609.219935][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.219987][ T5828] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 609.220009][ T5828] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 609.222089][ T5828] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.222113][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 609.222130][ T5828] usb 4-1: Product: syz [ 609.222142][ T5828] usb 4-1: Manufacturer: syz [ 609.235058][ T5828] cdc_wdm 4-1:1.0: skipping garbage [ 609.235077][ T5828] cdc_wdm 4-1:1.0: skipping garbage [ 609.253417][ T5828] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 609.253438][ T5828] cdc_wdm 4-1:1.0: Unknown control protocol [ 609.363354][ T5892] usb 1-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 609.363380][ T5892] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 1 [ 609.363420][ T5892] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 609.363441][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.566114][ T12] veth1_macvtap: left promiscuous mode [ 609.566224][ T12] veth0_macvtap: left promiscuous mode [ 609.566503][ T12] veth1_vlan: left promiscuous mode [ 609.566685][ T12] veth0_vlan: left promiscuous mode [ 609.994517][ T5892] usb 1-1: string descriptor 0 read error: -71 [ 610.014139][T10405] usb 4-1: USB disconnect, device number 36 [ 610.032552][ T5892] usb 1-1: USB disconnect, device number 44 [ 613.194140][ T1597] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 613.344193][ T1597] usb 5-1: Using ep0 maxpacket: 8 [ 613.346592][ T1597] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.346647][ T1597] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 613.346672][ T1597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 613.346696][ T1597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 613.346717][ T1597] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 613.350098][ T1597] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 613.350125][ T1597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 613.350144][ T1597] usb 5-1: Product: syz [ 613.350157][ T1597] usb 5-1: Manufacturer: syz [ 613.350170][ T1597] usb 5-1: SerialNumber: syz [ 613.435963][ T1597] usb 5-1: config 0 descriptor?? [ 613.642471][ T1597] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 613.642487][ T1597] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 613.775198][ T12] team0 (unregistering): Port device team_slave_1 removed [ 613.853235][ T1597] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 613.853264][ T1597] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 613.853274][ T1597] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 614.035874][ T12] team0 (unregistering): Port device team_slave_0 removed [ 614.063354][ T1597] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 614.063413][ T1597] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 614.064431][ T1597] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 614.064763][ T1597] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 614.107223][ T1597] usb 5-1: USB disconnect, device number 28 [ 614.586341][T13279] binder: 13278:13279 ioctl c0306201 0 returned -14 [ 614.905883][T13287] input: syz1 as /devices/virtual/input/input48 [ 615.484161][ T44] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 615.664219][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 615.669539][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.669608][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 615.669633][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 615.669655][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 615.669674][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 615.695778][ T44] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 615.695804][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 615.695822][ T44] usb 5-1: Product: syz [ 615.695833][ T44] usb 5-1: Manufacturer: syz [ 615.695845][ T44] usb 5-1: SerialNumber: syz [ 615.704837][ T44] usb 5-1: config 0 descriptor?? [ 615.921756][ T44] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 615.921783][ T44] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 616.128096][ T44] radio-si470x 5-1:0.0: software version 253, hardware version 55 [ 616.128123][ T44] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 616.346630][ T44] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 616.346696][ T44] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 616.347137][ T44] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 616.347470][ T44] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 616.353646][ T44] usb 5-1: USB disconnect, device number 29 [ 617.496785][T13319] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 617.680599][T13103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.680616][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.680642][T13103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.688055][T13103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.688072][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.688096][T13103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.029117][T13330] input: syz1 as /devices/virtual/input/input49 [ 618.095716][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.182224][T13103] hsr_slave_0: entered promiscuous mode [ 618.183012][T13103] hsr_slave_1: entered promiscuous mode [ 618.183524][T13103] debugfs: 'hsr0' already exists in 'hsr' [ 618.183538][T13103] Cannot create hsr debugfs directory [ 618.333654][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 618.407411][T13338] bridge_slave_1: left allmulticast mode [ 618.407442][T13338] bridge_slave_1: left promiscuous mode [ 618.407754][T13338] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.508335][T13338] bridge_slave_0: left allmulticast mode [ 618.508363][T13338] bridge_slave_0: left promiscuous mode [ 618.508667][T13338] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.778307][T13383] input: syz1 as /devices/virtual/input/input51 [ 621.537305][ T44] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 621.686884][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.686944][ T44] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 621.686965][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.692650][ T44] usb 4-1: config 0 descriptor?? [ 621.733290][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 622.136102][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 622.136894][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 622.141169][ T44] pwc: recv_control_msg error -32 req 02 val 2c00 [ 622.142106][ T44] pwc: recv_control_msg error -32 req 04 val 1000 [ 622.143845][ T44] pwc: recv_control_msg error -32 req 04 val 1300 [ 622.178930][ T44] pwc: recv_control_msg error -32 req 04 val 1400 [ 622.191067][ T44] pwc: recv_control_msg error -32 req 02 val 2000 [ 622.214076][ T44] pwc: recv_control_msg error -32 req 02 val 2100 [ 622.234646][ T44] pwc: recv_control_msg error -32 req 04 val 1500 [ 622.237235][ T44] pwc: recv_control_msg error -32 req 02 val 2500 [ 622.244348][ T44] pwc: recv_control_msg error -32 req 02 val 2400 [ 622.448200][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 622.448685][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 622.449331][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 622.449761][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 622.452454][ T44] pwc: Registered as video103. [ 622.487521][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 622.551369][ T44] usb 4-1: USB disconnect, device number 37 [ 622.938641][T13103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 623.032036][T13103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 623.162002][T13421] binder: BINDER_SET_CONTEXT_MGR already set [ 623.162018][T13421] binder: 13420:13421 ioctl 4018620d 200000000040 returned -16 [ 623.325265][T13103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 623.676335][T13103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 624.444373][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.444437][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.919067][T13103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.004900][T13103] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.018365][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.019844][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.050015][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.050146][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.251984][T13103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.034101][ T5892] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 626.100245][T13103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.184089][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 626.186568][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.186621][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 626.186644][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 626.186667][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 626.186687][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 626.189680][ T5892] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 626.189707][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 626.189725][ T5892] usb 2-1: Product: syz [ 626.189738][ T5892] usb 2-1: Manufacturer: syz [ 626.189750][ T5892] usb 2-1: SerialNumber: syz [ 626.292450][ T5892] usb 2-1: config 0 descriptor?? [ 626.312189][T13103] veth0_vlan: entered promiscuous mode [ 626.416256][T13103] veth1_vlan: entered promiscuous mode [ 626.501554][ T5892] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 626.501578][ T5892] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 626.619451][T13103] veth0_macvtap: entered promiscuous mode [ 626.656981][T13103] veth1_macvtap: entered promiscuous mode [ 626.702708][ T5892] radio-si470x 2-1:0.0: software version 253, hardware version 55 [ 626.702733][ T5892] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 626.807054][T13103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.829246][T13103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.884199][ T4259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.905097][ T5892] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 626.905155][ T5892] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 626.905587][ T5892] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 626.905929][ T5892] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 626.925703][ T4259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.934395][ T4259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.951000][ T4259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.985674][ T5892] usb 2-1: USB disconnect, device number 21 [ 627.397186][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.397207][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.546283][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.546303][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.876140][T13521] binder: BINDER_SET_CONTEXT_MGR already set [ 629.876154][T13521] binder: 13520:13521 ioctl 4018620d 200000000040 returned -16 [ 630.358192][T12675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 630.361636][T12675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 630.365808][T12675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 630.397802][T12675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 630.398677][T12675] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 631.741281][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.312393][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.514802][T12675] Bluetooth: hci1: command tx timeout [ 632.784823][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.202855][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.889465][T13526] chnl_net:caif_netlink_parms(): no params data found [ 634.512488][ T70] bridge_slave_1: left allmulticast mode [ 634.512513][ T70] bridge_slave_1: left promiscuous mode [ 634.512758][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.594221][T12675] Bluetooth: hci1: command tx timeout [ 634.635751][T13616] netlink: 'syz.1.3206': attribute type 4 has an invalid length. [ 634.653271][ T70] bridge_slave_0: left allmulticast mode [ 634.653298][ T70] bridge_slave_0: left promiscuous mode [ 634.653558][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.675820][T12675] Bluetooth: hci1: command tx timeout [ 637.486918][T13526] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.487053][T13526] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.487289][T13526] bridge_slave_0: entered allmulticast mode [ 637.490203][T13526] bridge_slave_0: entered promiscuous mode [ 638.215683][T13526] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.215820][T13526] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.216055][T13526] bridge_slave_1: entered allmulticast mode [ 638.219197][T13526] bridge_slave_1: entered promiscuous mode [ 638.754209][T12675] Bluetooth: hci1: command tx timeout [ 638.922710][T13687] input: syz1 as /devices/virtual/input/input53 [ 639.269105][T13692] netlink: 'syz.0.3232': attribute type 4 has an invalid length. [ 639.270004][T13526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.385561][T13526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.840091][ T70] hsr_slave_0: left promiscuous mode [ 639.888584][ T70] hsr_slave_1: left promiscuous mode [ 639.889586][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.889612][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.948249][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.948279][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.085974][ T70] veth1_macvtap: left promiscuous mode [ 640.088042][ T70] veth0_macvtap: left promiscuous mode [ 640.088344][ T70] veth1_vlan: left promiscuous mode [ 640.088527][ T70] veth0_vlan: left promiscuous mode [ 640.570976][T13706] binder: BINDER_SET_CONTEXT_MGR already set [ 640.570990][T13706] binder: 13705:13706 ioctl 4018620d 200000000040 returned -16 [ 641.687131][T13713] input: syz1 as /devices/virtual/input/input54 [ 643.756965][ T70] team0 (unregistering): Port device team_slave_1 removed [ 644.084824][ T70] team0 (unregistering): Port device team_slave_0 removed [ 645.263430][T13747] binder: BINDER_SET_CONTEXT_MGR already set [ 645.263440][T13747] binder: 13746:13747 ioctl 4018620d 200000000040 returned -16 [ 647.745304][T13526] team0: Port device team_slave_0 added [ 647.762037][T13526] team0: Port device team_slave_1 added [ 648.150171][T13526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.150188][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.150213][T13526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.174124][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 648.216863][T13526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.216879][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.216903][T13526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.314094][ T31] usb 1-1: device descriptor read/64, error -71 [ 648.574136][ T31] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 648.684226][T13526] hsr_slave_0: entered promiscuous mode [ 648.685664][T13526] hsr_slave_1: entered promiscuous mode [ 648.714108][ T31] usb 1-1: device descriptor read/64, error -71 [ 648.824565][ T31] usb usb1-port1: attempt power cycle [ 649.174263][ T31] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 649.194863][ T31] usb 1-1: device descriptor read/8, error -71 [ 649.368180][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3279'. [ 649.437536][T13796] veth1_to_bond: entered allmulticast mode [ 649.449946][ T31] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 649.465014][ T31] usb 1-1: device descriptor read/8, error -71 [ 649.594717][ T31] usb usb1-port1: unable to enumerate USB device [ 649.734683][T13801] bond0: (slave bond_slave_1): Releasing backup interface [ 649.957274][T13801] veth1_to_bond (unregistering): left allmulticast mode [ 650.096350][ T70] IPVS: stop unused estimator thread 0... [ 652.856077][T13526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 652.958383][T13526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 653.028075][T13526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 653.126191][T13526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 653.621652][T13526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.704951][T13526] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.733366][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.733517][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.773186][ T1964] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.773455][ T1964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.903158][T13526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.169175][T13526] veth0_vlan: entered promiscuous mode [ 657.197279][T13526] veth1_vlan: entered promiscuous mode [ 657.628502][T13526] veth0_macvtap: entered promiscuous mode [ 657.696277][T13526] veth1_macvtap: entered promiscuous mode [ 657.781840][T13526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.816766][T13526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.837763][ T162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.840802][ T162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.841627][ T162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.876418][ T162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.336165][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.336186][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.528147][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.528165][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.688421][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 658.846446][ T31] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.846473][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.846490][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.846545][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.846568][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.849115][ T31] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.849141][ T31] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.849159][ T31] usb 2-1: Product: syz [ 658.849172][ T31] usb 2-1: Manufacturer: syz [ 658.942693][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 658.942713][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 658.971157][ T31] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 658.971177][ T31] cdc_wdm 2-1:1.0: Unknown control protocol [ 659.492366][T13999] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 661.225042][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 661.241785][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 661.252191][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 661.267408][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 661.284239][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 661.479017][ T31] usb 2-1: USB disconnect, device number 22 [ 662.620248][ T993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.853497][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3360'. [ 663.029475][T14077] binder: BINDER_SET_CONTEXT_MGR already set [ 663.029490][T14077] binder: 14076:14077 ioctl 4018620d 200000000040 returned -16 [ 663.097262][ T993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.146836][T14071] bridge_slave_1: left allmulticast mode [ 663.146866][T14071] bridge_slave_1: left promiscuous mode [ 663.147273][T14071] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.245710][T14071] bridge_slave_0: left allmulticast mode [ 663.245739][T14071] bridge_slave_0: left promiscuous mode [ 663.246010][T14071] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.394924][ T5118] Bluetooth: hci2: command tx timeout [ 663.975531][ T993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.184059][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 664.336566][ T31] usb 2-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 664.336592][ T31] usb 2-1: config 15 has 0 interfaces, different from the descriptor's value: 1 [ 664.336626][ T31] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 664.336647][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.553775][ T993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.747797][T14103] binder_alloc: 14100: binder_alloc_buf, no vma [ 665.016333][ T31] usb 2-1: string descriptor 0 read error: -71 [ 665.032408][ T31] usb 2-1: USB disconnect, device number 23 [ 665.225375][T14030] chnl_net:caif_netlink_parms(): no params data found [ 665.440596][T14116] input: syz1 as /devices/virtual/input/input55 [ 665.474851][ T5118] Bluetooth: hci2: command tx timeout [ 667.564366][ T5118] Bluetooth: hci2: command tx timeout [ 669.644151][ T5118] Bluetooth: hci2: command tx timeout [ 669.737700][T14030] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.737870][T14030] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.738365][T14030] bridge_slave_0: entered allmulticast mode [ 669.741009][T14030] bridge_slave_0: entered promiscuous mode [ 669.811581][T14030] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.811791][T14030] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.812048][T14030] bridge_slave_1: entered allmulticast mode [ 669.836888][T14030] bridge_slave_1: entered promiscuous mode [ 670.633917][T14030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.668900][T14030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.156686][T14030] team0: Port device team_slave_0 added [ 672.328555][ T993] hsr_slave_0: left promiscuous mode [ 672.384398][ T993] hsr_slave_1: left promiscuous mode [ 672.385418][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.385452][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.469693][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.469721][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.626216][ T993] veth1_macvtap: left promiscuous mode [ 672.626327][ T993] veth0_macvtap: left promiscuous mode [ 672.626600][ T993] veth1_vlan: left promiscuous mode [ 672.626784][ T993] veth0_vlan: left promiscuous mode [ 677.386054][ T993] team0 (unregistering): Port device team_slave_1 removed [ 677.875241][ T993] team0 (unregistering): Port device team_slave_0 removed [ 680.071180][T14242] syz.4.3427 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 681.594123][ T31] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 681.776393][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.776439][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 681.776459][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.788574][ T31] usb 3-1: config 0 descriptor?? [ 682.212154][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 682.212274][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 682.236863][ T31] usb 3-1: USB disconnect, device number 37 [ 682.548987][T14276] binder: 14275:14276 ioctl c0306201 0 returned -14 [ 683.108608][T14030] team0: Port device team_slave_1 added [ 683.204139][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 683.361244][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.361279][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 683.361313][ T31] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 683.361334][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.366808][ T31] usb 3-1: config 0 descriptor?? [ 683.440289][T14030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.440305][T14030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.440328][T14030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.506287][T14030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.506301][T14030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.506321][T14030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.875779][T14030] hsr_slave_0: entered promiscuous mode [ 683.879552][T14030] hsr_slave_1: entered promiscuous mode [ 683.900039][T14030] debugfs: 'hsr0' already exists in 'hsr' [ 683.900067][T14030] Cannot create hsr debugfs directory [ 683.974165][ T5892] usb 3-1: USB disconnect, device number 38 [ 685.885178][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.885252][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.357924][T14316] binder: 14315:14316 ioctl c0306201 0 returned -14 [ 687.488441][T14320] veth1_to_bond: entered allmulticast mode [ 687.489664][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3451'. [ 687.575439][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.802016][T14320] bond0: (slave bond_slave_1): Releasing backup interface [ 687.961879][T12675] Bluetooth: hci5: command 0x0406 tx timeout [ 688.166286][T14320] veth1_to_bond (unregistering): left allmulticast mode [ 689.207558][T14355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3460'. [ 689.562227][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.054283][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 690.246525][ T31] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 690.246554][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.252508][ T31] usb 4-1: config 0 descriptor?? [ 690.294242][ T5895] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 690.453448][ T5895] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 690.453475][ T5895] usb 5-1: config 0 has no interface number 0 [ 690.453602][ T5895] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 690.453629][ T5895] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 690.463645][ T5895] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 690.463725][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.463744][ T5895] usb 5-1: Product: syz [ 690.463756][ T5895] usb 5-1: Manufacturer: syz [ 690.463768][ T5895] usb 5-1: SerialNumber: syz [ 690.505787][ T5895] usb 5-1: config 0 descriptor?? [ 690.543763][T14369] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 690.587566][ T5895] plusb 5-1:0.231: probe with driver plusb failed with error -22 [ 690.787948][T10405] usb 5-1: USB disconnect, device number 30 [ 691.223757][T14030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 691.304836][T14030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 691.366574][T14030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 691.448929][T14030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 692.006833][T14030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.086878][T14030] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.136426][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.137022][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.188687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.189350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.597409][ T31] usb 4-1: Cannot set autoneg [ 692.597647][ T31] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 692.656565][ T31] usb 4-1: USB disconnect, device number 38 [ 693.430855][T14030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.652646][T14030] veth0_vlan: entered promiscuous mode [ 693.686361][T14030] veth1_vlan: entered promiscuous mode [ 693.748758][T14030] veth0_macvtap: entered promiscuous mode [ 693.764480][T14030] veth1_macvtap: entered promiscuous mode [ 693.802322][T14030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.818387][T14030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.869431][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.943686][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.945023][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.955892][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.119914][T14450] fuseblk: Bad value for 'fd' [ 695.304095][ T44] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 695.496351][ T44] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 695.496379][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.504714][ T44] usb 4-1: config 0 descriptor?? [ 695.535654][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.535674][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.193528][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.193547][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.209340][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.747349][ T44] usb 4-1: Cannot set autoneg [ 697.747512][ T44] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 697.889275][ T44] usb 4-1: USB disconnect, device number 39 [ 698.260663][T14496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3494'. [ 699.324234][ T44] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 699.507870][ T44] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 699.507899][ T44] usb 3-1: config 0 has no interface number 0 [ 699.507947][ T44] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 699.507971][ T44] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 699.510952][ T44] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 699.510994][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.511011][ T44] usb 3-1: Product: syz [ 699.511023][ T44] usb 3-1: Manufacturer: syz [ 699.511035][ T44] usb 3-1: SerialNumber: syz [ 699.526423][ T44] usb 3-1: config 0 descriptor?? [ 699.539283][T14512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 699.600711][ T44] plusb 3-1:0.231: probe with driver plusb failed with error -22 [ 699.786066][ T44] usb 3-1: USB disconnect, device number 39 [ 699.912190][T12675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 699.920333][T12675] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 699.931831][T12675] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 699.946999][T12675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 699.953894][T12675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 700.502842][T14528] binder: 14526:14528 ioctl 4018620d 0 returned -22 [ 700.997943][T14537] binder_alloc: 14536: binder_alloc_buf, no vma [ 701.258122][T14541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3507'. [ 701.553177][ T162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.653326][T14550] binder: 14549:14550 ioctl 4018620d 0 returned -22 [ 701.795813][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3513'. [ 701.965746][T14562] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3516'. [ 701.988671][ T162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.044143][T12675] Bluetooth: hci3: command tx timeout [ 702.083029][T14552] bridge_slave_1: left allmulticast mode [ 702.083056][T14552] bridge_slave_1: left promiscuous mode [ 702.083303][T14552] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.199358][T14552] bridge_slave_0: left allmulticast mode [ 702.199387][T14552] bridge_slave_0: left promiscuous mode [ 702.199701][T14552] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.991550][ T162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.320363][ T162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.424757][T14523] chnl_net:caif_netlink_parms(): no params data found [ 704.124572][T12675] Bluetooth: hci3: command tx timeout [ 704.142309][T14523] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.142444][T14523] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.142682][T14523] bridge_slave_0: entered allmulticast mode [ 704.169568][T14523] bridge_slave_0: entered promiscuous mode [ 704.410237][T14523] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.410449][T14523] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.410693][T14523] bridge_slave_1: entered allmulticast mode [ 704.413417][T14523] bridge_slave_1: entered promiscuous mode [ 705.111386][T14523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.177707][T14523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.198139][T12675] Bluetooth: hci3: command tx timeout [ 707.394242][ T44] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 707.546287][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 707.551605][ T44] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 707.551633][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.551651][ T44] usb 4-1: Product: syz [ 707.551663][ T44] usb 4-1: Manufacturer: syz [ 707.551677][ T44] usb 4-1: SerialNumber: syz [ 707.615868][ T44] usb 4-1: config 0 descriptor?? [ 707.651924][ T44] usb-storage 4-1:0.0: USB Mass Storage device detected [ 707.697810][ T44] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 707.853078][ T44] usb 4-1: USB disconnect, device number 40 [ 708.274221][T12675] Bluetooth: hci3: command tx timeout [ 709.004152][ T44] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 709.224130][ T44] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 709.224171][ T44] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 709.224184][ T44] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 709.224195][ T44] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.224218][ T44] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 709.224229][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.232273][ T44] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 709.232881][ T44] usb 4-1: invalid MIDI out EP 0 [ 709.885387][T14270] udevd[14270]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.944360][ T44] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 710.038487][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.068456][ T162] bond0 (unregistering): Released all slaves [ 710.191304][T14523] team0: Port device team_slave_0 added [ 710.243844][T14523] team0: Port device team_slave_1 added [ 711.240526][T14523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.240544][T14523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.240568][T14523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.262294][T14523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.262311][T14523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.262336][T14523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.666067][ T5960] usb 4-1: USB disconnect, device number 41 [ 712.133781][T14635] binder: 14634:14635 ioctl c0306201 0 returned -14 [ 712.385657][T14523] hsr_slave_0: entered promiscuous mode [ 712.391717][T14523] hsr_slave_1: entered promiscuous mode [ 712.392849][T14523] debugfs: 'hsr0' already exists in 'hsr' [ 712.392872][T14523] Cannot create hsr debugfs directory [ 712.581431][ T162] hsr_slave_0: left promiscuous mode [ 712.624760][ T162] hsr_slave_1: left promiscuous mode [ 712.625709][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.625734][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.695177][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.695205][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.840735][ T162] veth1_macvtap: left promiscuous mode [ 712.840847][ T162] veth0_macvtap: left promiscuous mode [ 712.841113][ T162] veth1_vlan: left promiscuous mode [ 712.841301][ T162] veth0_vlan: left promiscuous mode [ 716.656024][T14672] binder: 14671:14672 ioctl c0306201 0 returned -14 [ 716.824749][ T162] team0 (unregistering): Port device team_slave_1 removed [ 717.164719][ T162] team0 (unregistering): Port device team_slave_0 removed [ 719.959210][T14726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3570'. [ 720.358731][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3549'. [ 720.939145][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.985512][T14760] binder: 14759:14760 ioctl c0306201 0 returned -14 [ 721.070267][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.031494][ T162] IPVS: stop unused estimator thread 0... [ 723.318490][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.681928][T14523] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 723.761818][T14523] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 723.794175][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 723.854809][T14523] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 723.972856][T14523] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 724.420830][T14523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.527939][T14523] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.550799][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.551044][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.606833][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.607061][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.141797][ T37] audit: type=1326 audit(1763463248.343:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14834 comm="syz.3.3613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6920cdf6c9 code=0x0 [ 725.745998][ T5895] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 726.449349][ T5895] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 726.449413][ T5895] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 726.449436][ T5895] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 726.449456][ T5895] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.449497][ T5895] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 726.449517][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.521943][ T5895] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.523057][ T5895] usb 5-1: invalid MIDI out EP 0 [ 727.324956][T14523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.560847][T14668] udevd[14668]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.707455][T14523] veth0_vlan: entered promiscuous mode [ 727.712912][ T5895] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 727.993225][T14523] veth1_vlan: entered promiscuous mode [ 728.192840][T14523] veth0_macvtap: entered promiscuous mode [ 728.220997][T14523] veth1_macvtap: entered promiscuous mode [ 728.317646][T14523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.420873][T14523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.495696][T14466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.498729][T14466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.499357][T14466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.499734][T14466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.757029][T14871] veth1_to_bond: entered allmulticast mode [ 728.777454][T14870] veth1_to_bond: left allmulticast mode [ 729.026715][ T5895] usb 5-1: USB disconnect, device number 31 [ 729.220647][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.220667][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.297584][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.297604][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.754651][ T5817] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 730.921049][ T5817] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 730.921109][ T5817] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 730.921133][ T5817] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 730.921154][ T5817] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.921194][ T5817] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 730.921214][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.952734][ T5817] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 730.953811][ T5817] usb 1-1: invalid MIDI out EP 0 [ 731.532712][ T5817] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 731.575393][T14668] udevd[14668]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.576004][T14932] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.748217][ T5817] usb 1-1: USB disconnect, device number 49 [ 735.800916][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3667'. [ 739.074126][T14371] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 739.236736][T14371] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 739.236764][T14371] usb 2-1: config 0 has no interface number 0 [ 739.236818][T14371] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 739.236843][T14371] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 739.239423][T14371] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 739.239450][T14371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.239469][T14371] usb 2-1: Product: syz [ 739.239481][T14371] usb 2-1: Manufacturer: syz [ 739.239493][T14371] usb 2-1: SerialNumber: syz [ 739.253604][T14371] usb 2-1: config 0 descriptor?? [ 739.255768][T15064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 739.337955][T14371] plusb 2-1:0.231: probe with driver plusb failed with error -22 [ 739.463279][ T5817] usb 2-1: USB disconnect, device number 24 [ 740.344166][ T5828] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 740.506869][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.506900][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.506937][ T5828] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 740.506957][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.518325][ T5828] usb 3-1: config 0 descriptor?? [ 740.786372][ T5828] usbhid 3-1:0.0: can't add hid device: -71 [ 740.786498][ T5828] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 740.790933][ T5828] usb 3-1: USB disconnect, device number 40 [ 741.424050][T14371] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 741.586400][T14371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.586445][T14371] usb 5-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 741.586474][T14371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.596316][T14371] usb 5-1: config 0 descriptor?? [ 742.223587][T14371] usbhid 5-1:0.0: can't add hid device: -71 [ 742.223718][T14371] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 742.298764][T14371] usb 5-1: USB disconnect, device number 32 [ 742.492247][T15117] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 746.404270][T14371] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 746.566678][T14371] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.566703][T14371] usb 2-1: config 0 has no interfaces? [ 746.566732][T14371] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 746.566753][T14371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.690854][T14371] usb 2-1: config 0 descriptor?? [ 747.322703][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.322777][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.860081][T15232] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3752'. [ 748.063279][T15240] binder_alloc: 15237: binder_alloc_buf, no vma [ 748.611014][T15254] fuseblk: Bad value for 'fd' [ 749.165833][ T44] usb 2-1: USB disconnect, device number 25 [ 749.326209][T15276] binder: 15272:15276 ioctl c0306201 2000000004c0 returned -22 [ 749.376929][T15280] fuseblk: Bad value for 'fd' [ 752.154116][ T5960] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 752.315997][ T5960] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 752.316016][ T5960] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 752.316024][ T5960] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 752.316053][ T5960] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.317513][ T5960] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 752.317528][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 752.317538][ T5960] usb 4-1: Product: syz [ 752.317545][ T5960] usb 4-1: Manufacturer: syz [ 752.397679][ T5960] cdc_wdm 4-1:1.0: skipping garbage [ 752.397704][ T5960] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 754.144144][ T5960] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 754.306331][ T5960] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 754.306359][ T5960] usb 1-1: config 0 has no interface number 0 [ 754.306406][ T5960] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 754.306430][ T5960] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 754.310307][ T5960] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 754.310333][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.310350][ T5960] usb 1-1: Product: syz [ 754.310361][ T5960] usb 1-1: Manufacturer: syz [ 754.310373][ T5960] usb 1-1: SerialNumber: syz [ 754.386770][ T5960] usb 1-1: config 0 descriptor?? [ 754.387563][T15334] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 754.393807][ T5960] plusb 1-1:0.231: probe with driver plusb failed with error -22 [ 754.517144][T12675] Bluetooth: hci1: command 0x0406 tx timeout [ 754.601943][ T5895] usb 1-1: USB disconnect, device number 50 [ 754.895633][ T5960] usb 4-1: USB disconnect, device number 42 [ 756.275732][ T5817] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 756.430046][ T5817] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 756.430075][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.468907][ T5817] usb 1-1: config 0 descriptor?? [ 756.473774][ T5817] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 756.942211][T15395] binder: 15392:15395 ioctl c0306201 0 returned -14 [ 757.522601][T15410] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 758.374457][ T5817] usb 1-1: USB disconnect, device number 51 [ 761.274131][ T5817] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 761.436551][ T5817] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 761.436580][ T5817] usb 4-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 761.436597][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 761.436647][ T5817] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.438890][ T5817] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 761.438917][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 761.438934][ T5817] usb 4-1: Product: syz [ 761.438946][ T5817] usb 4-1: Manufacturer: syz [ 761.524789][ T5817] cdc_wdm 4-1:1.0: skipping garbage [ 761.524833][ T5817] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 764.131633][ T5817] usb 4-1: USB disconnect, device number 43 [ 764.720126][T15543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.674224][ T44] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 765.848996][ T44] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 765.849038][ T44] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 765.849078][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 765.849142][ T44] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 765.852124][ T44] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 765.852160][ T44] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.852178][ T44] usb 5-1: Product: syz [ 765.852192][ T44] usb 5-1: Manufacturer: syz [ 765.985736][T15565] binder: BINDER_SET_CONTEXT_MGR already set [ 765.985751][T15565] binder: 15563:15565 ioctl 4018620d 200000000040 returned -16 [ 765.995796][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 765.995835][ T44] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 766.238510][T15571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 768.263901][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.503646][ T44] usb 5-1: USB disconnect, device number 33 [ 769.199632][T15632] bridge_slave_1: entered allmulticast mode [ 769.554320][ T5817] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 769.709591][ T5817] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 769.709617][ T5817] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 769.709635][ T5817] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 769.709685][ T5817] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 769.716018][ T5817] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 769.716044][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 769.716062][ T5817] usb 5-1: Product: syz [ 769.716075][ T5817] usb 5-1: Manufacturer: syz [ 769.792158][ T5817] cdc_wdm 5-1:1.0: skipping garbage [ 769.792177][ T5817] cdc_wdm 5-1:1.0: skipping garbage [ 769.792212][ T5817] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 772.376922][ T44] usb 5-1: USB disconnect, device number 34 [ 773.960487][T15733] binder: 15732:15733 ioctl c0306201 2000000004c0 returned -22 [ 776.258483][T15795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 779.124110][ T5817] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 779.276431][ T5817] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 779.276456][ T5817] usb 5-1: config 0 has no interface number 0 [ 779.276501][ T5817] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 779.276526][ T5817] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 779.281580][ T5817] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 779.281608][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.281626][ T5817] usb 5-1: Product: syz [ 779.281639][ T5817] usb 5-1: Manufacturer: syz [ 779.281652][ T5817] usb 5-1: SerialNumber: syz [ 779.368535][ T5817] usb 5-1: config 0 descriptor?? [ 779.369697][T15837] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 779.373538][ T5817] plusb 5-1:0.231: probe with driver plusb failed with error -22 [ 779.587720][ T5817] usb 5-1: USB disconnect, device number 35 [ 780.684073][ T44] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 780.853852][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 780.853873][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.864659][ T44] usb 5-1: config 0 descriptor?? [ 780.890187][ T44] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 782.726476][ T44] usb 5-1: USB disconnect, device number 36 [ 783.193319][T15916] netlink: 'syz.3.4051': attribute type 4 has an invalid length. [ 785.234097][T12675] Bluetooth: hci2: command 0x0406 tx timeout [ 785.934100][ T5895] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 786.095867][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 786.098235][ T5895] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 786.098259][ T5895] usb 4-1: config 4 has no interface number 0 [ 786.098304][ T5895] usb 4-1: config 4 interface 128 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 786.098337][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 786.098365][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.104128][ T31] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 786.121920][ T5895] hub 4-1:4.128: bad descriptor, ignoring hub [ 786.121957][ T5895] hub 4-1:4.128: probe with driver hub failed with error -5 [ 786.128774][ T5895] usbhid 4-1:4.128: couldn't find an input interrupt endpoint [ 786.258523][ T31] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 786.258540][ T31] usb 1-1: config 0 has no interface number 0 [ 786.258655][ T31] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 786.258671][ T31] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 786.261428][ T31] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 786.261446][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.261456][ T31] usb 1-1: Product: syz [ 786.261462][ T31] usb 1-1: Manufacturer: syz [ 786.261469][ T31] usb 1-1: SerialNumber: syz [ 786.267342][ T31] usb 1-1: config 0 descriptor?? [ 786.268606][T15973] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 786.278023][ T31] plusb 1-1:0.231: probe with driver plusb failed with error -22 [ 786.438413][ T44] usb 4-1: USB disconnect, device number 44 [ 786.489377][ T44] usb 1-1: USB disconnect, device number 52 [ 789.297335][T16010] fuseblk: Bad value for 'fd' [ 790.274178][ T44] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 790.446823][ T44] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 790.446850][ T44] usb 3-1: config 0 has no interface number 0 [ 790.446901][ T44] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 790.446926][ T44] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 790.449983][ T44] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 790.450017][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.450035][ T44] usb 3-1: Product: syz [ 790.450048][ T44] usb 3-1: Manufacturer: syz [ 790.450060][ T44] usb 3-1: SerialNumber: syz [ 790.626909][ T44] usb 3-1: config 0 descriptor?? [ 790.627950][T16014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 790.663010][ T44] plusb 3-1:0.231: probe with driver plusb failed with error -22 [ 790.833055][ T44] usb 3-1: USB disconnect, device number 41 [ 792.152351][T16043] binder: 16042:16043 ioctl c0306201 2000000004c0 returned -22 [ 792.164120][ T31] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 792.367588][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.367651][ T31] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 792.367671][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.373169][ T31] usb 3-1: config 0 descriptor?? [ 792.426219][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 792.781145][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 792.781885][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 792.782475][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 792.783116][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 792.783671][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 792.784516][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 792.785318][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 792.785916][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 792.786799][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 792.787529][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 792.788146][ T31] pwc: recv_control_msg error -32 req 02 val 2400 [ 792.788745][ T31] pwc: recv_control_msg error -32 req 02 val 2600 [ 792.789318][ T31] pwc: recv_control_msg error -32 req 02 val 2900 [ 792.789667][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 792.789930][ T31] pwc: recv_control_msg error -32 req 02 val 2800 [ 792.790395][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 792.790481][ T31] pwc: recv_control_msg error -32 req 04 val 1100 [ 792.790891][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 792.796033][ T31] pwc: Registered as video103. [ 792.798090][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input59 [ 792.804430][ T31] usb 3-1: USB disconnect, device number 42 [ 794.093808][T16087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4123'. [ 794.772603][T16116] binder_alloc: 16113: binder_alloc_buf, no vma [ 795.299810][T16124] capability: warning: `syz.4.4139' uses deprecated v2 capabilities in a way that may be insecure [ 795.376367][T16126] netlink: 'syz.1.4141': attribute type 4 has an invalid length. [ 799.104129][ T5817] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 799.276549][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.276611][ T5817] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 799.276632][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.329680][ T5817] usb 3-1: config 0 descriptor?? [ 799.343279][ T5817] pwc: Askey VC010 type 2 USB webcam detected. [ 799.748174][ T5817] pwc: recv_control_msg error -32 req 02 val 2b00 [ 799.749404][ T5817] pwc: recv_control_msg error -32 req 02 val 2700 [ 799.750711][ T5817] pwc: recv_control_msg error -32 req 02 val 2c00 [ 799.752564][ T5817] pwc: recv_control_msg error -32 req 04 val 1000 [ 799.781225][ T5817] pwc: recv_control_msg error -32 req 04 val 1300 [ 799.783028][ T5817] pwc: recv_control_msg error -32 req 04 val 1400 [ 799.797142][ T5817] pwc: recv_control_msg error -32 req 02 val 2000 [ 799.804388][ T5817] pwc: recv_control_msg error -32 req 02 val 2100 [ 799.814377][ T5817] pwc: recv_control_msg error -32 req 04 val 1500 [ 799.815224][ T5817] pwc: recv_control_msg error -32 req 02 val 2500 [ 799.820475][ T5817] pwc: recv_control_msg error -32 req 02 val 2400 [ 799.824357][ T5817] pwc: recv_control_msg error -32 req 02 val 2600 [ 799.825175][ T5817] pwc: recv_control_msg error -32 req 02 val 2900 [ 799.825632][ T5817] pwc: recv_control_msg error -71 req 02 val 2800 [ 799.844164][ T5817] pwc: recv_control_msg error -71 req 04 val 1100 [ 799.865979][ T5817] pwc: recv_control_msg error -71 req 04 val 1200 [ 799.873194][ T5817] pwc: Registered as video103. [ 799.888467][ T5817] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 799.923005][ T5817] usb 3-1: USB disconnect, device number 43 [ 800.824662][T16203] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4175'. [ 801.430986][T16214] binder_alloc: 16212: binder_alloc_buf, no vma [ 801.894404][T16229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4189'. [ 802.044180][T10405] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 802.197031][T10405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.197068][T10405] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 802.197080][T10405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.207488][T10405] usb 3-1: config 0 descriptor?? [ 802.232887][T10405] pwc: Askey VC010 type 2 USB webcam detected. [ 802.634404][T10405] pwc: recv_control_msg error -32 req 02 val 2b00 [ 802.635540][T10405] pwc: recv_control_msg error -32 req 02 val 2700 [ 802.638315][T10405] pwc: recv_control_msg error -32 req 02 val 2c00 [ 802.639342][T10405] pwc: recv_control_msg error -32 req 04 val 1000 [ 802.640868][T10405] pwc: recv_control_msg error -32 req 04 val 1300 [ 802.643247][T10405] pwc: recv_control_msg error -32 req 04 val 1400 [ 802.644848][T10405] pwc: recv_control_msg error -32 req 02 val 2000 [ 802.650334][T10405] pwc: recv_control_msg error -32 req 02 val 2100 [ 802.651478][T10405] pwc: recv_control_msg error -32 req 04 val 1500 [ 802.652998][T10405] pwc: recv_control_msg error -32 req 02 val 2500 [ 802.654641][T10405] pwc: recv_control_msg error -32 req 02 val 2400 [ 802.658226][T10405] pwc: recv_control_msg error -32 req 02 val 2600 [ 802.658910][T10405] pwc: recv_control_msg error -32 req 02 val 2900 [ 802.659309][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 802.659881][T10405] pwc: recv_control_msg error -32 req 02 val 2800 [ 802.661427][T10405] pwc: recv_control_msg error -71 req 04 val 1100 [ 802.663715][T10405] pwc: recv_control_msg error -71 req 04 val 1200 [ 802.676745][T10405] pwc: Registered as video103. [ 802.778175][T10405] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61 [ 802.824500][T10405] usb 3-1: USB disconnect, device number 44 [ 803.426658][T16257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4201'. [ 803.970839][ T37] audit: type=1326 audit(1763463327.173:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16260 comm="syz.0.4204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcba2c3f6c9 code=0x0 [ 804.047086][ T5960] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 804.216511][ T5960] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 804.216539][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.241254][ T5960] usb 3-1: config 0 descriptor?? [ 804.270724][ T5960] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 806.095885][ T5960] usb 3-1: USB disconnect, device number 45 [ 806.728745][T16299] netlink: 'syz.3.4219': attribute type 4 has an invalid length. [ 808.762441][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.762495][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.427811][ T37] audit: type=1326 audit(1763463334.633:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16361 comm="syz.1.4246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85dbfcf6c9 code=0x0 [ 814.734606][T16412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4265'. [ 815.314230][ T5960] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 815.489800][ T5960] usb 5-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 815.489828][ T5960] usb 5-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 815.489845][ T5960] usb 5-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 815.489881][ T5960] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 815.489902][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.684173][ T5817] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 815.814180][ T5817] usb 1-1: device descriptor read/64, error -71 [ 816.054755][ T5817] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 816.067575][ T5960] usb 5-1: string descriptor 0 read error: -71 [ 816.085945][ T5960] usb 5-1: USB disconnect, device number 37 [ 816.194161][ T5817] usb 1-1: device descriptor read/64, error -71 [ 816.313145][ T5817] usb usb1-port1: attempt power cycle [ 816.613049][T16459] netlink: 'syz.1.4285': attribute type 1 has an invalid length. [ 816.746876][T16459] bond1: entered promiscuous mode [ 816.747511][T16459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.752454][ T5817] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 816.764771][ T5817] usb 1-1: device descriptor read/8, error -71 [ 816.808501][ T37] audit: type=1326 audit(1763463340.013:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16447 comm="syz.2.4281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe45fa4f6c9 code=0x0 [ 817.976789][T16462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.977378][T16462] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 817.977399][T16462] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 817.983150][T16462] bond1: (slave gre1): making interface the new active one [ 817.983227][T16462] gre1: entered promiscuous mode [ 817.986075][T16462] bond1: (slave gre1): Enslaving as an active interface with an up link [ 817.995492][ T5817] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 818.016591][ T5817] usb 1-1: device descriptor read/8, error -71 [ 818.124737][ T5817] usb usb1-port1: unable to enumerate USB device [ 820.732525][T16496] fuseblk: Bad value for 'fd' [ 820.894134][ T5960] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 821.024112][ T5960] usb 1-1: device descriptor read/64, error -71 [ 821.277488][ T5960] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 821.404100][ T5960] usb 1-1: device descriptor read/64, error -71 [ 821.515825][ T5960] usb usb1-port1: attempt power cycle [ 821.867073][ T5960] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 821.901026][ T5960] usb 1-1: device descriptor read/8, error -71 [ 822.159429][ T5960] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 822.179568][ T5960] usb 1-1: device descriptor read/8, error -71 [ 822.325307][ T5960] usb usb1-port1: unable to enumerate USB device [ 826.194485][T12675] Bluetooth: hci3: command 0x0406 tx timeout [ 833.720069][T16693] binder: BINDER_SET_CONTEXT_MGR already set [ 833.720085][T16693] binder: 16691:16693 ioctl 4018620d 200000000040 returned -16 [ 841.505359][T16769] fuseblk: Bad value for 'fd' [ 841.629754][T16776] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4417'. [ 841.824617][ T5895] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 841.977632][ T5895] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 841.977658][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 841.977706][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.977730][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.977748][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.977792][ T5895] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 841.977814][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.062941][ T5895] usb 5-1: config 0 descriptor?? [ 842.592701][ T5895] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0003/input/input62 [ 842.801940][ T5895] uclogic 0003:28BD:0909.0003: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 843.587741][ T5817] usb 5-1: USB disconnect, device number 38 [ 848.076401][ T5817] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 848.172882][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4440'. [ 848.239369][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.239394][ T5817] usb 3-1: config 0 has no interfaces? [ 848.239422][ T5817] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 848.239443][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.319864][ T5817] usb 3-1: config 0 descriptor?? [ 848.529758][ T5828] usb 3-1: USB disconnect, device number 46 [ 848.688734][T16844] binder: BINDER_SET_CONTEXT_MGR already set [ 848.688752][T16844] binder: 16843:16844 ioctl 4018620d 200000000040 returned -16 [ 849.735376][T16864] TCP: TCP_TX_DELAY enabled [ 850.154124][ T5828] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 850.184175][ T5817] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 850.304084][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 850.307742][ T5828] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 850.307767][ T5828] usb 1-1: config 4 has no interface number 0 [ 850.307813][ T5828] usb 1-1: config 4 interface 128 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 850.307849][ T5828] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 850.307870][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.341302][ T5817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.341327][ T5817] usb 5-1: config 0 has no interfaces? [ 850.341353][ T5817] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 850.341373][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.351108][ T5828] hub 1-1:4.128: bad descriptor, ignoring hub [ 850.351145][ T5828] hub 1-1:4.128: probe with driver hub failed with error -5 [ 850.373633][ T5817] usb 5-1: config 0 descriptor?? [ 850.384700][ T5828] usbhid 1-1:4.128: couldn't find an input interrupt endpoint [ 850.414219][ T5960] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 850.566461][ T5960] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 850.566488][ T5960] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 850.566539][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.566563][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.566583][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.566622][ T5960] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 850.566642][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.581508][ T5960] usb 4-1: config 0 descriptor?? [ 850.647283][ T5828] usb 1-1: USB disconnect, device number 61 [ 851.037174][ T5960] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.0004/input/input63 [ 851.194112][ T5960] uclogic 0003:28BD:0909.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 851.856936][ T5828] usb 4-1: USB disconnect, device number 45 [ 852.303010][T16900] misc userio: No port type given on /dev/userio [ 853.028872][ T31] usb 5-1: USB disconnect, device number 39 [ 853.178312][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 853.609657][T16938] misc userio: No port type given on /dev/userio [ 854.417145][T16937] Falling back ldisc for ttyprintk. [ 854.759212][T16928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.788561][T16928] bond0 (unregistering): Released all slaves [ 855.374128][ T5828] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 855.528879][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.528905][ T5828] usb 5-1: config 0 has no interfaces? [ 855.528936][ T5828] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 855.528956][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.574632][ T5828] usb 5-1: config 0 descriptor?? [ 858.167705][ T31] usb 5-1: USB disconnect, device number 40 [ 859.486588][T16991] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4506'. [ 860.264831][T17001] fuseblk: Bad value for 'fd' [ 861.227292][T17012] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4517'. [ 861.393543][T17014] misc userio: No port type given on /dev/userio [ 864.124074][ T5828] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 864.278685][ T5828] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 864.278713][ T5828] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 864.278731][ T5828] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 864.278784][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 864.278807][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 864.281080][ T5828] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 864.281106][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 864.281123][ T5828] usb 3-1: Product: syz [ 864.281135][ T5828] usb 3-1: Manufacturer: syz [ 864.386566][ T5828] cdc_wdm 3-1:1.0: skipping garbage [ 864.386586][ T5828] cdc_wdm 3-1:1.0: skipping garbage [ 864.391474][ T5828] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 864.391494][ T5828] cdc_wdm 3-1:1.0: Unknown control protocol [ 864.932899][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 866.928658][ T5960] usb 3-1: USB disconnect, device number 47 [ 867.516446][T17084] misc userio: No port type given on /dev/userio [ 870.202853][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.202924][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.879258][T17162] misc userio: No port type given on /dev/userio [ 872.994218][ T992] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 873.146438][ T992] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.146479][ T992] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 873.146493][ T992] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 873.148899][ T992] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.148916][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.148925][ T992] usb 2-1: Product: syz [ 873.148932][ T992] usb 2-1: Manufacturer: syz [ 873.148939][ T992] usb 2-1: SerialNumber: syz [ 874.320726][ T992] cdc_ncm 2-1:1.0: bind() failure [ 874.370067][ T992] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 874.410126][ T992] usb 2-1: USB disconnect, device number 26 [ 876.454118][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 876.654089][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 876.657457][ T5895] usb 2-1: unable to get BOS descriptor or descriptor too short [ 876.659191][ T5895] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 876.659222][ T5895] usb 2-1: config 13 has no interface number 0 [ 876.659282][ T5895] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 876.659305][ T5895] usb 2-1: config 13 interface 50 has no altsetting 0 [ 876.663444][ T5895] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 876.663469][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.663487][ T5895] usb 2-1: Product: syz [ 876.663499][ T5895] usb 2-1: Manufacturer: syz [ 876.663512][ T5895] usb 2-1: SerialNumber: syz [ 876.772090][T17214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 877.032359][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 877.032399][ T5895] usb 2-1: MIDIStreaming interface descriptor not found [ 877.322066][ T5895] usb 2-1: USB disconnect, device number 27 [ 877.415350][T14851] udevd[14851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.450688][T17225] mkiss: ax0: crc mode is auto. [ 878.074110][ T5895] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 878.233281][ T5895] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 878.233309][ T5895] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 878.233326][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 878.233374][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 878.233398][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 878.293858][ T5895] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 878.293888][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 878.293906][ T5895] usb 2-1: Product: syz [ 878.293919][ T5895] usb 2-1: Manufacturer: syz [ 878.344753][ T5895] cdc_wdm 2-1:1.0: skipping garbage [ 878.344772][ T5895] cdc_wdm 2-1:1.0: skipping garbage [ 878.351431][ T5895] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 878.351452][ T5895] cdc_wdm 2-1:1.0: Unknown control protocol [ 878.708448][T17260] fuseblk: Bad value for 'fd' [ 878.854135][ T992] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 878.893525][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 879.007822][ T992] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 879.007906][ T992] usb 3-1: config 0 has no interface number 0 [ 879.007955][ T992] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 879.007981][ T992] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.012562][ T992] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 879.012653][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.012672][ T992] usb 3-1: Product: syz [ 879.012686][ T992] usb 3-1: Manufacturer: syz [ 879.012699][ T992] usb 3-1: SerialNumber: syz [ 879.044166][ T992] usb 3-1: config 0 descriptor?? [ 879.046766][T17256] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 879.100597][ T992] plusb 3-1:0.231: probe with driver plusb failed with error -22 [ 879.214058][ T44] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 879.260681][ T992] usb 3-1: USB disconnect, device number 48 [ 879.378445][ T44] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 879.378472][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 879.378529][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.378551][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.378570][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 879.378610][ T44] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 879.378728][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.454540][ T44] usb 1-1: config 0 descriptor?? [ 879.985807][ T44] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0005/input/input64 [ 880.095654][ T44] uclogic 0003:28BD:0909.0005: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 880.888554][ T31] usb 2-1: USB disconnect, device number 28 [ 880.961218][ T5960] usb 1-1: USB disconnect, device number 62 [ 882.244083][ T44] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 882.406717][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.406765][ T44] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 882.406790][ T44] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 882.409893][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.409921][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.409939][ T44] usb 5-1: Product: syz [ 882.409952][ T44] usb 5-1: Manufacturer: syz [ 882.409965][ T44] usb 5-1: SerialNumber: syz [ 883.298134][ T44] cdc_ncm 5-1:1.0: bind() failure [ 883.322732][ T44] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 883.322775][ T44] cdc_ncm 5-1:1.1: bind() failure [ 883.351900][ T44] usb 5-1: USB disconnect, device number 41 [ 883.844232][ T992] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 883.999753][ T992] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 883.999842][ T992] usb 4-1: config 0 has no interface number 0 [ 883.999889][ T992] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 883.999913][ T992] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 884.003066][ T992] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 884.003093][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.003111][ T992] usb 4-1: Product: syz [ 884.003123][ T992] usb 4-1: Manufacturer: syz [ 884.003135][ T992] usb 4-1: SerialNumber: syz [ 884.092306][ T992] usb 4-1: config 0 descriptor?? [ 884.116380][T17309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 884.130834][ T992] plusb 4-1:0.231: probe with driver plusb failed with error -22 [ 884.336361][ T31] usb 4-1: USB disconnect, device number 46 [ 890.280137][T17426] fuseblk: Bad value for 'fd' [ 890.320567][T17428] misc userio: No port type given on /dev/userio [ 892.826668][T17468] misc userio: No port type given on /dev/userio [ 894.464979][T17492] binder: 17491:17492 ioctl c0306201 2000000004c0 returned -22 [ 894.665804][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'. [ 894.827836][T17502] binder: 17501:17502 ioctl 4018620d 0 returned -22 [ 894.884221][ T992] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 895.035911][ T992] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 895.035929][ T992] usb 5-1: config 0 has no interface number 0 [ 895.035956][ T992] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 895.035969][ T992] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 895.037791][ T992] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 895.037807][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.037817][ T992] usb 5-1: Product: syz [ 895.037824][ T992] usb 5-1: Manufacturer: syz [ 895.037830][ T992] usb 5-1: SerialNumber: syz [ 895.040997][ T992] usb 5-1: config 0 descriptor?? [ 895.041580][T17496] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 895.043621][ T992] plusb 5-1:0.231: probe with driver plusb failed with error -22 [ 895.275745][ T992] usb 5-1: USB disconnect, device number 42 [ 896.363703][T17498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.454858][T17498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.498465][T17498] bond0 (unregistering): Released all slaves [ 899.968276][T17533] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4742'. [ 902.846962][T17582] binder: 17581:17582 ioctl c0306201 0 returned -14 [ 905.634259][ T992] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 905.788282][ T992] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 905.788310][ T992] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 905.788328][ T992] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 905.788380][ T992] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 905.788403][ T992] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 905.791036][ T992] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 905.791064][ T992] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 905.791081][ T992] usb 5-1: Product: syz [ 905.791093][ T992] usb 5-1: Manufacturer: syz [ 905.845001][ T992] cdc_wdm 5-1:1.0: skipping garbage [ 905.845019][ T992] cdc_wdm 5-1:1.0: skipping garbage [ 905.867273][ T992] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 905.867293][ T992] cdc_wdm 5-1:1.0: Unknown control protocol [ 906.232064][T17625] fuseblk: Unknown parameter '0x000000000000000b' [ 906.393028][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 7 bytes [ 906.981052][T17632] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4785'. [ 907.385070][ T44] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 907.444141][ T31] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 907.536376][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.536401][ T44] usb 2-1: config 0 has no interfaces? [ 907.536431][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 907.536451][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.584204][ T44] usb 2-1: config 0 descriptor?? [ 907.600997][ T31] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 907.601025][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.623931][ T31] usb 1-1: config 0 descriptor?? [ 907.888611][ T31] usb 1-1: Cannot read MAC address [ 907.888896][ T31] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 908.388612][ T31] usb 5-1: USB disconnect, device number 43 [ 908.758628][T17655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4797'. [ 909.383564][T17666] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4800'. [ 909.410221][T17668] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4796'. [ 910.064174][ T5828] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 910.064379][ T992] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 910.198153][ T5960] usb 2-1: USB disconnect, device number 29 [ 910.214115][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 910.224942][ T992] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 910.224969][ T992] usb 3-1: config 0 has no interface number 0 [ 910.225035][ T992] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 910.225109][ T992] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 910.231998][ T5828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 910.245106][ T5828] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 910.245133][ T5828] usb 5-1: config 13 has no interface number 0 [ 910.245247][ T5828] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 910.245272][ T5828] usb 5-1: config 13 interface 50 has no altsetting 0 [ 910.251426][ T992] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 910.251454][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.251472][ T992] usb 3-1: Product: syz [ 910.251485][ T992] usb 3-1: Manufacturer: syz [ 910.251547][ T992] usb 3-1: SerialNumber: syz [ 910.270801][ T5828] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 910.270830][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.270848][ T5828] usb 5-1: Product: syz [ 910.270860][ T5828] usb 5-1: Manufacturer: syz [ 910.270873][ T5828] usb 5-1: SerialNumber: syz [ 910.300229][ T992] usb 3-1: config 0 descriptor?? [ 910.311421][T17682] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 910.337531][ T992] plusb 3-1:0.231: probe with driver plusb failed with error -22 [ 910.359614][T17680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 910.548241][ T992] usb 3-1: USB disconnect, device number 49 [ 910.635206][ T5828] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 910.635263][ T5828] usb 5-1: MIDIStreaming interface descriptor not found [ 910.666135][ T5960] usb 1-1: USB disconnect, device number 63 [ 910.853791][ T5828] usb 5-1: USB disconnect, device number 44 [ 911.016727][T17696] udevd[17696]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.164159][T17686] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 911.165132][T17701] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4812'. [ 911.326597][T17686] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 911.326625][T17686] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 911.326677][T17686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.326697][T17686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.326716][T17686] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.326752][T17686] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 911.326772][T17686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.354662][T17686] usb 2-1: config 0 descriptor?? [ 911.816489][T17686] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0006/input/input65 [ 911.963407][T17686] uclogic 0003:28BD:0909.0006: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 911.993864][ T37] audit: type=1326 audit(1763463435.193:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 911.995091][ T37] audit: type=1326 audit(1763463435.203:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 911.995203][ T37] audit: type=1326 audit(1763463435.203:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 912.000573][ T37] audit: type=1326 audit(1763463435.203:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 912.000622][ T37] audit: type=1326 audit(1763463435.203:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 912.000660][ T37] audit: type=1326 audit(1763463435.203:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 912.001807][ T37] audit: type=1326 audit(1763463435.203:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 912.001848][ T37] audit: type=1326 audit(1763463435.203:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 912.002617][ T37] audit: type=1326 audit(1763463435.203:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 912.003455][ T37] audit: type=1326 audit(1763463435.203:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17719 comm="syz.2.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 912.318390][T17686] usb 2-1: USB disconnect, device number 30 [ 912.519480][T17725] fido_id[17725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 912.534123][ T31] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 912.687795][ T31] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 912.687822][ T31] usb 5-1: config 0 has no interface number 0 [ 912.687872][ T31] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 912.687897][ T31] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.690545][ T31] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 912.690571][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.690589][ T31] usb 5-1: Product: syz [ 912.690601][ T31] usb 5-1: Manufacturer: syz [ 912.690613][ T31] usb 5-1: SerialNumber: syz [ 912.746168][ T31] usb 5-1: config 0 descriptor?? [ 912.770024][T17729] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 912.773602][ T31] plusb 5-1:0.231: probe with driver plusb failed with error -22 [ 912.818251][ T5960] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 912.976456][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 912.978397][ T31] usb 5-1: USB disconnect, device number 45 [ 912.979174][ T5960] usb 4-1: unable to get BOS descriptor or descriptor too short [ 912.981936][ T5960] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 912.981959][ T5960] usb 4-1: config 13 has no interface number 0 [ 912.982004][ T5960] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 912.982028][ T5960] usb 4-1: config 13 interface 50 has no altsetting 0 [ 912.987803][ T5960] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 912.987829][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.987847][ T5960] usb 4-1: Product: syz [ 912.987864][ T5960] usb 4-1: Manufacturer: syz [ 912.987876][ T5960] usb 4-1: SerialNumber: syz [ 913.128958][T17732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 913.354751][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 913.354802][ T5960] usb 4-1: MIDIStreaming interface descriptor not found [ 913.412290][ T5960] usb 4-1: USB disconnect, device number 47 [ 913.677953][T17639] udevd[17639]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.744124][ T31] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 915.896455][ T31] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 915.896483][ T31] usb 1-1: config 0 has no interface number 0 [ 915.896530][ T31] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 915.896555][ T31] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 915.899627][ T31] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 915.899653][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.899671][ T31] usb 1-1: Product: syz [ 915.899684][ T31] usb 1-1: Manufacturer: syz [ 915.899696][ T31] usb 1-1: SerialNumber: syz [ 915.978706][ T31] usb 1-1: config 0 descriptor?? [ 915.979543][T17783] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 915.999325][ T31] plusb 1-1:0.231: probe with driver plusb failed with error -22 [ 916.191305][ T5960] usb 1-1: USB disconnect, device number 64 [ 916.924828][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4853'. [ 917.022367][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.702253][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.619692][T17790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.725109][T17790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.779045][T17790] bond0 (unregistering): Released all slaves [ 918.919538][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.274108][ T44] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 921.445443][ T44] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 921.445500][ T44] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 921.445525][ T44] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 921.445544][ T44] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 921.445583][ T44] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 921.445603][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.520445][ T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.521018][ T44] usb 5-1: invalid MIDI out EP 0 [ 921.605147][ T44] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 922.007869][T17847] udevd[17847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.034129][T17686] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 923.188196][T17686] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 923.188225][T17686] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 923.188249][T17686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 923.188273][T17686] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 923.193917][T17686] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 923.193944][T17686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.194884][T17686] usb 4-1: Product: syz [ 923.194899][T17686] usb 4-1: Manufacturer: syz [ 923.194911][T17686] usb 4-1: SerialNumber: syz [ 923.219208][T17686] usb 4-1: config 0 descriptor?? [ 923.224646][T17854] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 923.462583][T17854] usb usb8: usbfs: process 17854 (syz.3.4878) did not claim interface 4 before use [ 923.574817][T17686] rc_core: IR keymap rc-imon-rsc not found [ 923.574868][T17686] Registered IR keymap rc-empty [ 923.652192][T17686] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 923.657843][T17686] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input67 [ 923.811326][T17686] usb 4-1: USB disconnect, device number 48 [ 924.320721][ T44] usb 5-1: USB disconnect, device number 46 [ 924.646211][T17686] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 924.801929][T17686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.801954][T17686] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 924.801989][T17686] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 924.802010][T17686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.822305][T17686] usb 3-1: config 0 descriptor?? [ 925.684226][ T44] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 925.836512][ T44] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 925.836541][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.874268][ T44] usb 5-1: config 0 descriptor?? [ 926.296868][ T44] usb 5-1: Cannot read MAC address [ 926.297154][ T44] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 927.428609][ T44] usb 3-1: USB disconnect, device number 50 [ 927.577323][T17921] netlink: 'syz.2.4906': attribute type 4 has an invalid length. [ 927.649484][T17928] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4909'. [ 928.234340][ T5828] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 928.356035][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4924'. [ 928.386379][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 928.386414][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 928.386437][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 928.386459][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 928.389488][ T5828] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 928.389515][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.389532][ T5828] usb 4-1: Product: syz [ 928.389545][ T5828] usb 4-1: Manufacturer: syz [ 928.389558][ T5828] usb 4-1: SerialNumber: syz [ 928.478326][ T5828] usb 4-1: config 0 descriptor?? [ 928.479564][T17943] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 928.502864][ T44] usb 5-1: USB disconnect, device number 47 [ 928.774725][ T5828] rc_core: IR keymap rc-imon-rsc not found [ 928.774746][ T5828] Registered IR keymap rc-empty [ 928.780627][ T5828] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 928.807007][ T5828] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input68 [ 928.875040][ T5828] usb 4-1: USB disconnect, device number 49 [ 930.609215][T17990] binder: 17989:17990 ioctl c0306201 0 returned -14 [ 930.818230][T17994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4937'. [ 930.818257][T17994] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4937'. [ 931.463376][T18004] syz.2.4943 (18004): /proc/18003/oom_adj is deprecated, please use /proc/18003/oom_score_adj instead. [ 931.641942][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.642015][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.715979][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4944'. [ 932.735146][ T5960] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 932.854123][ T44] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 932.895927][ T5960] usb 2-1: device descriptor read/64, error -71 [ 933.024986][ T44] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 933.025014][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.028214][ T44] usb 5-1: config 0 descriptor?? [ 933.105229][T18006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.135190][ T5960] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 933.138259][T18006] bond0 (unregistering): Released all slaves [ 933.260900][T18024] mkiss: ax0: crc mode is auto. [ 933.269559][ T5960] usb 2-1: device descriptor read/64, error -71 [ 933.305091][ T44] kaweth 5-1:0.0: Firmware present in device. [ 933.374468][ T5960] usb usb2-port1: attempt power cycle [ 933.495293][ T44] kaweth 5-1:0.0: Error reading configuration (-32), no net device created [ 933.495582][ T44] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 933.660666][T18036] binder: 18035:18036 ioctl c0306201 2000000004c0 returned -22 [ 933.714248][ T5960] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 933.737974][ T5960] usb 2-1: device descriptor read/8, error -71 [ 933.974120][ T5960] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 933.994916][ T5960] usb 2-1: device descriptor read/8, error -71 [ 934.104446][ T5960] usb usb2-port1: unable to enumerate USB device [ 935.692844][ T5960] usb 5-1: USB disconnect, device number 48 [ 936.104094][ T5960] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 936.269027][ T5960] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 936.269054][ T5960] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 936.269070][ T5960] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 936.269107][ T5960] usb 5-1: config 220 has no interface number 2 [ 936.269201][ T5960] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 936.269225][ T5960] usb 5-1: config 220 interface 0 has no altsetting 0 [ 936.269241][ T5960] usb 5-1: config 220 interface 76 has no altsetting 0 [ 936.269258][ T5960] usb 5-1: config 220 interface 1 has no altsetting 0 [ 936.350992][ T5960] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 936.351021][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.351038][ T5960] usb 5-1: Product: syz [ 936.351051][ T5960] usb 5-1: Manufacturer: syz [ 936.351063][ T5960] usb 5-1: SerialNumber: syz [ 936.377984][T18066] mkiss: ax0: crc mode is auto. [ 936.622013][ T5960] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 936.622045][ T5960] uvcvideo 5-1:220.0: No valid video chain found. [ 936.622108][ T5960] usb 5-1: selecting invalid altsetting 0 [ 936.685112][ T5960] usb 5-1: selecting invalid altsetting 0 [ 936.685150][ T5960] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 936.690052][ T5960] usb 5-1: USB disconnect, device number 49 [ 937.802594][T17686] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 937.938728][T17686] usb 5-1: device descriptor read/64, error -71 [ 938.174152][T17686] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 938.304116][T17686] usb 5-1: device descriptor read/64, error -71 [ 938.417816][T17686] usb usb5-port1: attempt power cycle [ 938.784286][T17686] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 938.809212][T17686] usb 5-1: device descriptor read/8, error -71 [ 939.044083][T17686] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 939.065977][T17686] usb 5-1: device descriptor read/8, error -71 [ 939.183226][T17686] usb usb5-port1: unable to enumerate USB device [ 940.880411][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4984'. [ 940.968773][ T37] audit: type=1326 audit(1763463464.173:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 940.974429][ T37] audit: type=1326 audit(1763463464.183:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 940.984462][ T37] audit: type=1326 audit(1763463464.183:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 940.984782][ T37] audit: type=1326 audit(1763463464.193:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 940.985961][ T37] audit: type=1326 audit(1763463464.193:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 940.992914][ T37] audit: type=1326 audit(1763463464.193:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 940.993272][ T37] audit: type=1326 audit(1763463464.193:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 940.993922][ T37] audit: type=1326 audit(1763463464.193:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 940.995872][ T37] audit: type=1326 audit(1763463464.203:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 940.996135][ T37] audit: type=1326 audit(1763463464.203:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45fa4f6c9 code=0x7ffc0000 [ 941.835698][ T5828] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 941.994123][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 941.996572][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 941.996609][ T5828] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 941.996629][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.007879][ T5828] usb 2-1: config 0 descriptor?? [ 942.277199][ T5828] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 944.738385][ T31] usb 2-1: USB disconnect, device number 35 [ 946.234086][ T31] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 946.386961][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 946.386991][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.392439][ T31] usb 4-1: config 0 descriptor?? [ 946.431240][ T31] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 948.272120][ T31] usb 4-1: USB disconnect, device number 50 [ 948.674219][ T5895] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 948.830115][ T5895] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 948.830143][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.863434][ T5895] usb 5-1: config 0 descriptor?? [ 948.933312][T18238] mkiss: ax0: crc mode is auto. [ 949.098584][ T5895] kaweth 5-1:0.0: Firmware present in device. [ 949.285738][ T5895] kaweth 5-1:0.0: Error reading configuration (-32), no net device created [ 949.286010][ T5895] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 950.964070][ T5895] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 951.126211][ T5895] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 951.126238][ T5895] usb 1-1: config 220 has an invalid descriptor of length 161, skipping remainder of the config [ 951.126256][ T5895] usb 1-1: config 220 has no interface number 2 [ 951.126335][ T5895] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 951.126359][ T5895] usb 1-1: config 220 interface 0 has no altsetting 0 [ 951.126376][ T5895] usb 1-1: config 220 interface 76 has no altsetting 0 [ 951.126391][ T5895] usb 1-1: config 220 interface 1 has no altsetting 0 [ 951.201396][ T5895] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 951.201423][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.201441][ T5895] usb 1-1: Product: syz [ 951.201453][ T5895] usb 1-1: Manufacturer: syz [ 951.201473][ T5895] usb 1-1: SerialNumber: syz [ 951.473472][ T5895] usb 1-1: selecting invalid altsetting 0 [ 951.484581][ T5895] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 951.484616][ T5895] uvcvideo 1-1:220.0: No valid video chain found. [ 951.533632][ T5895] usb 1-1: selecting invalid altsetting 0 [ 951.533668][ T5895] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 951.550105][ T5828] usb 5-1: USB disconnect, device number 54 [ 951.570123][ T5895] usb 1-1: USB disconnect, device number 65 [ 951.947570][T18302] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5077'. [ 952.694465][ T5895] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 952.824171][ T31] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 952.846952][ T5895] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 952.846981][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.861706][T18330] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5091'. [ 952.882620][ T5895] usb 1-1: config 0 descriptor?? [ 952.974092][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 952.977087][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 952.977140][ T31] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 952.977372][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.025988][ T31] usb 3-1: config 0 descriptor?? [ 953.109696][ T5895] kaweth 1-1:0.0: Firmware present in device. [ 953.275743][ T31] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 953.301651][ T5895] kaweth 1-1:0.0: Error reading configuration (-32), no net device created [ 953.301931][ T5895] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 953.584100][ T5828] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 953.754101][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 953.756949][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.757032][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 953.757126][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 953.757146][ T5828] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 953.757165][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.758728][ T5828] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 953.758753][ T5828] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 953.758770][ T5828] usb 5-1: Manufacturer: syz [ 953.776370][ T5828] usb 5-1: config 0 descriptor?? [ 955.536830][T14371] usb 1-1: USB disconnect, device number 66 [ 955.834209][T17686] usb 3-1: USB disconnect, device number 51 [ 955.834303][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 956.464145][ T992] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 956.574162][ T5828] rc_core: IR keymap rc-hauppauge not found [ 956.574183][ T5828] Registered IR keymap rc-empty [ 956.574357][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.594922][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.614323][T14371] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 956.624119][ T992] usb 4-1: Using ep0 maxpacket: 8 [ 956.628612][ T992] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 956.628643][ T992] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 956.628664][ T992] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 956.628686][ T992] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.628724][ T992] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 956.628744][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.636274][ T5828] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 956.658293][ T5828] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input69 [ 956.690943][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.704251][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.729511][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.745153][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.766026][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.776581][T14371] usb 3-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 956.776612][T14371] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 956.776664][T14371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.776688][T14371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.776706][T14371] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 956.776745][T14371] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 956.776765][T14371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.794286][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.814297][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.839549][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.854295][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.881407][ T5828] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 956.882238][ T992] usb 4-1: GET_CAPABILITIES returned 0 [ 956.882285][ T992] usbtmc 4-1:16.0: can't read capabilities [ 956.913733][T14371] usb 3-1: config 0 descriptor?? [ 957.118673][ T5828] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 957.118696][ T5828] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 957.145550][ T5828] usb 5-1: USB disconnect, device number 55 [ 957.217829][ T992] usb 4-1: USB disconnect, device number 51 [ 957.506668][T14371] usbhid 3-1:0.0: can't add hid device: -71 [ 957.506787][T14371] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 957.538192][T14371] usb 3-1: USB disconnect, device number 52 [ 958.233065][T18347] ------------[ cut here ]------------ [ 958.233080][T18347] WARNING: CPU: 1 PID: 18347 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 958.233111][T18347] Modules linked in: [ 958.233140][T18347] CPU: 1 UID: 0 PID: 18347 Comm: syz.1.5098 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 958.233152][T18347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.233162][T18347] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 958.233177][T18347] Code: c7 c7 10 44 c5 8e 48 c7 c6 cb 26 da 8c 48 c7 c2 aa fc d8 8c 4c 89 f9 e8 72 4b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 2e 04 09 0f 1f 40 00 90 90 [ 958.233187][T18347] RSP: 0000:ffffc90006507ac0 EFLAGS: 00010206 [ 958.233195][T18347] RAX: f282ec019b164b00 RBX: ffff888040760d00 RCX: 0000000000000000 [ 958.233203][T18347] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 958.233209][T18347] RBP: ffffc90006507c28 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 958.233216][T18347] R10: dffffc0000000000 R11: fffffbfff1dac80f R12: 1ffff11005559d3d [ 958.233222][T18347] R13: 0000000000000000 R14: ffff888040760d08 R15: ffff8880248a9e00 [ 958.233230][T18347] FS: 00007f85d9d646c0(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 958.233238][T18347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.233245][T18347] CR2: 00007fcba0e9ed58 CR3: 000000005d1d2000 CR4: 00000000003526f0 [ 958.233255][T18347] Call Trace: [ 958.233262][T18347] [ 958.233269][T18347] do_exit+0x105/0x2300 [ 958.233285][T18347] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 958.233303][T18347] ? __lock_acquire+0xab9/0xd20 [ 958.233320][T18347] ? __pfx_do_exit+0x10/0x10 [ 958.233333][T18347] ? rt_mutex_slowunlock+0x493/0x8a0 [ 958.233345][T18347] ? rt_spin_lock+0x1c1/0x3e0 [ 958.233359][T18347] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 958.233375][T18347] do_group_exit+0x21c/0x2d0 [ 958.233384][T18347] ? rt_spin_unlock+0x161/0x200 [ 958.233396][T18347] get_signal+0x125d/0x1310 [ 958.233419][T18347] arch_do_signal_or_restart+0xa0/0x790 [ 958.233430][T18347] ? unshare_nsproxy_namespaces+0x145/0x170 [ 958.233443][T18347] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 958.233452][T18347] ? ksys_unshare+0x7b7/0x8c0 [ 958.233474][T18347] ? exit_to_user_mode_loop+0x40/0x130 [ 958.233488][T18347] exit_to_user_mode_loop+0x72/0x130 [ 958.233503][T18347] do_syscall_64+0x2bd/0xfa0 [ 958.233516][T18347] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.233583][T18347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.233593][T18347] ? clear_bhb_loop+0x60/0xb0 [ 958.233605][T18347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.233615][T18347] RIP: 0033:0x7f85dbfcf6c9 [ 958.233628][T18347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.233637][T18347] RSP: 002b:00007f85d9d64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 958.233647][T18347] RAX: fffffffffffffffc RBX: 00007f85dc226270 RCX: 00007f85dbfcf6c9 [ 958.233654][T18347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 958.233661][T18347] RBP: 00007f85dc051f91 R08: 0000000000000000 R09: 0000000000000000 [ 958.233667][T18347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.233673][T18347] R13: 00007f85dc226308 R14: 00007f85dc226270 R15: 00007ffe4d72a298 [ 958.233690][T18347] [ 958.233698][T18347] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 958.233706][T18347] CPU: 1 UID: 0 PID: 18347 Comm: syz.1.5098 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 958.233717][T18347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.233722][T18347] Call Trace: [ 958.233726][T18347] [ 958.233730][T18347] dump_stack_lvl+0x99/0x250 [ 958.233746][T18347] ? __asan_memcpy+0x40/0x70 [ 958.233758][T18347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.233774][T18347] ? __pfx__printk+0x10/0x10 [ 958.233799][T18347] vpanic+0x237/0x6d0 [ 958.233808][T18347] ? __pfx_vpanic+0x10/0x10 [ 958.233823][T18347] panic+0xb9/0xc0 [ 958.233832][T18347] ? __pfx_panic+0x10/0x10 [ 958.233849][T18347] __warn+0x31b/0x4b0 [ 958.233858][T18347] ? kcov_task_exit+0x13c/0x150 [ 958.233871][T18347] ? kcov_task_exit+0x13c/0x150 [ 958.233882][T18347] report_bug+0x2be/0x4f0 [ 958.233898][T18347] ? kcov_task_exit+0x13c/0x150 [ 958.233910][T18347] ? kcov_task_exit+0x13c/0x150 [ 958.233922][T18347] ? kcov_task_exit+0x13e/0x150 [ 958.233933][T18347] handle_bug+0x84/0x160 [ 958.233943][T18347] exc_invalid_op+0x1a/0x50 [ 958.233961][T18347] asm_exc_invalid_op+0x1a/0x20 [ 958.233976][T18347] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 958.233997][T18347] Code: c7 c7 10 44 c5 8e 48 c7 c6 cb 26 da 8c 48 c7 c2 aa fc d8 8c 4c 89 f9 e8 72 4b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 2e 04 09 0f 1f 40 00 90 90 [ 958.234012][T18347] RSP: 0000:ffffc90006507ac0 EFLAGS: 00010206 [ 958.234025][T18347] RAX: f282ec019b164b00 RBX: ffff888040760d00 RCX: 0000000000000000 [ 958.234037][T18347] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 958.234048][T18347] RBP: ffffc90006507c28 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 958.234059][T18347] R10: dffffc0000000000 R11: fffffbfff1dac80f R12: 1ffff11005559d3d [ 958.234072][T18347] R13: 0000000000000000 R14: ffff888040760d08 R15: ffff8880248a9e00 [ 958.234091][T18347] ? rt_spin_lock+0x1c1/0x3e0 [ 958.234121][T18347] do_exit+0x105/0x2300 [ 958.234146][T18347] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 958.234172][T18347] ? __lock_acquire+0xab9/0xd20 [ 958.234202][T18347] ? __pfx_do_exit+0x10/0x10 [ 958.234223][T18347] ? rt_mutex_slowunlock+0x493/0x8a0 [ 958.234242][T18347] ? rt_spin_lock+0x1c1/0x3e0 [ 958.234266][T18347] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 958.234294][T18347] do_group_exit+0x21c/0x2d0 [ 958.234310][T18347] ? rt_spin_unlock+0x161/0x200 [ 958.234334][T18347] get_signal+0x125d/0x1310 [ 958.234377][T18347] arch_do_signal_or_restart+0xa0/0x790 [ 958.234396][T18347] ? unshare_nsproxy_namespaces+0x145/0x170 [ 958.234419][T18347] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 958.234436][T18347] ? ksys_unshare+0x7b7/0x8c0 [ 958.234478][T18347] ? exit_to_user_mode_loop+0x40/0x130 [ 958.234504][T18347] exit_to_user_mode_loop+0x72/0x130 [ 958.234536][T18347] do_syscall_64+0x2bd/0xfa0 [ 958.234560][T18347] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.234584][T18347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.234602][T18347] ? clear_bhb_loop+0x60/0xb0 [ 958.234624][T18347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.234641][T18347] RIP: 0033:0x7f85dbfcf6c9 [ 958.234657][T18347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.234673][T18347] RSP: 002b:00007f85d9d64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 958.234691][T18347] RAX: fffffffffffffffc RBX: 00007f85dc226270 RCX: 00007f85dbfcf6c9 [ 958.234704][T18347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 958.234716][T18347] RBP: 00007f85dc051f91 R08: 0000000000000000 R09: 0000000000000000 [ 958.234728][T18347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.234739][T18347] R13: 00007f85dc226308 R14: 00007f85dc226270 R15: 00007ffe4d72a298 [ 958.234772][T18347] [ 958.235065][T18347] Kernel Offset: disabled