last executing test programs: 8m17.080235908s ago: executing program 3 (id=4): syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x12, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 8m14.650944152s ago: executing program 3 (id=9): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x800) shutdown(r0, 0x0) 8m13.878107218s ago: executing program 3 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x15) openat$vcsu(0xffffffffffffff9c, 0x0, 0x200080, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) signalfd4(r0, &(0x7f00000000c0)={[0x31a5]}, 0x8, 0x180000) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8m12.736015224s ago: executing program 3 (id=17): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 8m12.239528614s ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x220901, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 8m9.613085772s ago: executing program 3 (id=21): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x18080, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 7m54.278741082s ago: executing program 32 (id=21): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x18080, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 6m50.31437355s ago: executing program 1 (id=205): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000060000000800000002"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m49.644841289s ago: executing program 1 (id=208): r0 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r0) 6m49.075114863s ago: executing program 1 (id=210): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 6m48.196005633s ago: executing program 1 (id=215): syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=@string={0x32, 0x3, "2b8943bf95e2bd3b4a0b20d7039f12df0f378772179ff881b64b7dd3255ff3ce514a4030b3215a2abcd79930216d95d3"}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40095}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m46.533522266s ago: executing program 1 (id=223): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0xf, 0xf, 0x200, 0x0}) 6m45.921868923s ago: executing program 1 (id=226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="2f77abd63ebfe7dbf2f6bfd198b30957f888d4114bbe8a57a5fdc09f903c1d7b5fa8f24db0fdafe48b0405a97cdb0826dc0000000000a1cc5ec9c66a9914a800bdaf69416b535f3c35d8950367b47dec292546c56079060001ee9c74cdc83c4ce9b1e4ef329334b3efedd1e50100000041173086073cae790d486b0881febbce71d1a2331f3a6bf67b9317d0d37ab63d65c6b2d66e6b46ab901d4189a4fc154b6a", 0xa1, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 6m30.53160468s ago: executing program 33 (id=226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="2f77abd63ebfe7dbf2f6bfd198b30957f888d4114bbe8a57a5fdc09f903c1d7b5fa8f24db0fdafe48b0405a97cdb0826dc0000000000a1cc5ec9c66a9914a800bdaf69416b535f3c35d8950367b47dec292546c56079060001ee9c74cdc83c4ce9b1e4ef329334b3efedd1e50100000041173086073cae790d486b0881febbce71d1a2331f3a6bf67b9317d0d37ab63d65c6b2d66e6b46ab901d4189a4fc154b6a", 0xa1, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 4m1.811765181s ago: executing program 2 (id=686): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_ethernet(0xfc6, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 3m58.570691872s ago: executing program 2 (id=709): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='io_uring_req_failed\x00', r0, 0x0, 0x2000000000003}, 0x18) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xca43, 0x80, 0x1, 0x3b3}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 3m57.884334424s ago: executing program 2 (id=712): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c00c1c4757b5c517a"], 0x0, 0x26, 0x0, 0x8}, 0x28) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) 3m57.533578237s ago: executing program 2 (id=714): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 3m57.408195436s ago: executing program 2 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setpgid(0x0, r0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) 3m57.110237063s ago: executing program 2 (id=717): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6f, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m57.00773218s ago: executing program 5 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x3, 0x0, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 3m54.051491462s ago: executing program 5 (id=724): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c00c1c4757b5c517a"], 0x0, 0x26, 0x0, 0x8}, 0x28) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) 3m53.587064588s ago: executing program 5 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}}, 0x0) 3m52.911176116s ago: executing program 5 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) close(r1) 3m52.50807955s ago: executing program 5 (id=727): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setpgid(0x0, r0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) 3m51.822600565s ago: executing program 5 (id=728): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 3m49.820658632s ago: executing program 6 (id=734): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 3m49.643736069s ago: executing program 6 (id=735): r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3m49.527709598s ago: executing program 6 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x10) writev(r0, &(0x7f0000000040), 0x2) close(r0) io_uring_setup(0x41d9, &(0x7f0000000100)={0x0, 0xcfcd, 0x2, 0x3, 0x44}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, 0x0) 3m49.277329775s ago: executing program 6 (id=737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) close(r1) 3m49.079266139s ago: executing program 6 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setpgid(0x0, r0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) 3m48.937833711s ago: executing program 6 (id=739): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) 3m42.029143021s ago: executing program 34 (id=717): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6f, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m36.146466161s ago: executing program 35 (id=728): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 3m33.575272632s ago: executing program 36 (id=739): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) 19.592197036s ago: executing program 0 (id=1546): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x82063, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x5028, 0x0) write$proc_mixer(r0, 0x0, 0xb8) 14.588292543s ago: executing program 0 (id=1553): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 11.060882956s ago: executing program 0 (id=1563): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000300)={0x8009, 0x100000d, 0x1, 'queue0\x00', 0x16}) tkill(r0, 0x7) 10.342575798s ago: executing program 0 (id=1565): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x2100) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000005140)=""/4085, 0xff5}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000000040)=""/52, 0x34}], 0x7}, 0x40010102) 9.908202135s ago: executing program 4 (id=1566): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 9.859734293s ago: executing program 9 (id=1567): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffdb2}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 9.594171288s ago: executing program 0 (id=1569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x8080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) set_mempolicy(0x3, &(0x7f00000002c0)=0x6, 0x6) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x33) 9.410495934s ago: executing program 4 (id=1570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 9.165619258s ago: executing program 9 (id=1571): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000420000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xa4000021) read(0xffffffffffffffff, 0x0, 0x20) close(0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 9.044246705s ago: executing program 4 (id=1572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x47d6839b43067ebd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 7.825416732s ago: executing program 9 (id=1575): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000300)={0x8009, 0x100000d, 0x1, 'queue0\x00', 0x16}) tkill(r0, 0x7) 7.793943714s ago: executing program 4 (id=1576): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x9}}, 0x4000) 7.239900003s ago: executing program 9 (id=1578): syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) write(0xffffffffffffffff, &(0x7f0000000340)="996ca76991e353259bd05604920398c9e323c95ddbdd40573532872458391fd5179a8bff767cb4e8f12dd68f9fdbbb69e6a767de05678068c08eb6f525a45b59364da99653c5b111287109af75db589f834e4a3a5e0d855aff6357bd6be208a6cc1493037ba51d8a81461f", 0x6b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4], 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000c00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r5) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) pwrite64(r0, &(0x7f0000000440)='}', 0x1, 0x4) 6.242208577s ago: executing program 7 (id=1580): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.69555514s ago: executing program 7 (id=1581): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffdb2}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 4.584269491s ago: executing program 8 (id=1582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c0004800800014000000000"], 0xac}}, 0x0) 4.044136633s ago: executing program 7 (id=1583): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) 3.90419408s ago: executing program 4 (id=1584): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f00000002c0)={0x20, 0xc}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.608791283s ago: executing program 8 (id=1585): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000420000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xa4000021) read(0xffffffffffffffff, 0x0, 0x20) close(0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 2.715787123s ago: executing program 9 (id=1586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0xffffff71, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200408d5}, 0x8000) 2.715602665s ago: executing program 7 (id=1587): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x202002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) read$FUSE(r2, 0x0, 0x0) 2.279232637s ago: executing program 8 (id=1588): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, 0x0) tkill(r0, 0x7) 2.088665181s ago: executing program 9 (id=1589): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xfffc, 0xd010, 0x0, 0x0}], 0x1}) 2.069255257s ago: executing program 7 (id=1590): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x2100) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/127, 0x7f}, {0x0}, {&(0x7f0000005140)=""/4085, 0xff5}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000000040)=""/52, 0x34}], 0x8}, 0x40010102) 1.80878104s ago: executing program 8 (id=1591): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.66655274s ago: executing program 7 (id=1592): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 1.469946245s ago: executing program 8 (id=1593): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x1) recvfrom(r5, 0x0, 0x0, 0x4100, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 291.031582ms ago: executing program 8 (id=1594): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x9}}, 0x4000) 55.119589ms ago: executing program 4 (id=1595): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x3, &(0x7f0000000040)={0x1c, "b020dcf7df12eff7e9c3fe81d507fe9f43779d424d92f1b25b5d42f5eb6e4bbe70"}}) 0s ago: executing program 0 (id=1596): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x1000, 0x10000000, 0x7, 0x65fb}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): 11] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 483.500163][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 483.519601][ T8448] chnl_net:caif_netlink_parms(): no params data found [ 483.533889][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.544365][ T11] usb 5-1: config 0 has no interfaces? [ 483.563831][ T11] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 483.573920][ T11] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 483.582448][ T11] usb 5-1: Manufacturer: syz [ 483.597767][ T11] usb 5-1: config 0 descriptor?? [ 484.052708][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.060521][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.068692][ T8448] bridge_slave_0: entered allmulticast mode [ 484.080314][ T8448] bridge_slave_0: entered promiscuous mode [ 484.096699][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.104624][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.112800][ T8448] bridge_slave_1: entered allmulticast mode [ 484.128757][ T8448] bridge_slave_1: entered promiscuous mode [ 484.257236][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.291311][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.401625][ T8448] team0: Port device team_slave_0 added [ 484.433529][ T8448] team0: Port device team_slave_1 added [ 484.528945][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.541421][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.571516][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.588738][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.595838][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.625754][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.671579][ T5794] Bluetooth: hci1: command tx timeout [ 484.791336][ T8448] hsr_slave_0: entered promiscuous mode [ 484.801616][ T8448] hsr_slave_1: entered promiscuous mode [ 484.812045][ T8448] debugfs: 'hsr0' already exists in 'hsr' [ 484.818049][ T8448] Cannot create hsr debugfs directory [ 485.303187][ T8448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 485.348315][ T8448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 485.615318][ T8448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 485.684927][ T8448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 486.396562][ T5880] usb 5-1: USB disconnect, device number 23 [ 486.744913][ T5794] Bluetooth: hci1: command tx timeout [ 486.801005][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.001256][ T8448] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.056875][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.064707][ T6570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.192329][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.200640][ T6570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.818705][ T5794] Bluetooth: hci1: command tx timeout [ 489.459436][ T5095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.470966][ T5095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.492508][ T5095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.515210][ T5095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.535661][ T5095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.421343][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.936897][ T5095] Bluetooth: hci1: command tx timeout [ 491.618529][ T5095] Bluetooth: hci4: command tx timeout [ 491.770097][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 491.930668][ T5794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 491.971485][ T5794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 492.010338][ T5794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 492.059713][ T5794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 492.080279][ T5794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 493.635840][ T8448] veth0_vlan: entered promiscuous mode [ 493.712330][ T5794] Bluetooth: hci4: command tx timeout [ 493.912568][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.921760][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.929738][ T8489] bridge_slave_0: entered allmulticast mode [ 493.938069][ T8489] bridge_slave_0: entered promiscuous mode [ 494.082625][ T8448] veth1_vlan: entered promiscuous mode [ 494.119710][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.127460][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.135556][ T8489] bridge_slave_1: entered allmulticast mode [ 494.144118][ T8489] bridge_slave_1: entered promiscuous mode [ 494.262841][ T5794] Bluetooth: hci6: command tx timeout [ 494.514788][ T8509] chnl_net:caif_netlink_parms(): no params data found [ 494.564756][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.625302][ T2963] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.751621][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.885781][ T2963] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.090957][ T2963] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.162142][ T8489] team0: Port device team_slave_0 added [ 495.274630][ T2963] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.446890][ T8448] veth0_macvtap: entered promiscuous mode [ 495.469411][ T8489] team0: Port device team_slave_1 added [ 495.788789][ T5794] Bluetooth: hci4: command tx timeout [ 496.016663][ T8448] veth1_macvtap: entered promiscuous mode [ 496.050907][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.059921][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.087486][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.114450][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.123262][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.151393][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.343757][ T5794] Bluetooth: hci6: command tx timeout [ 496.382192][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.390606][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.398892][ T8509] bridge_slave_0: entered allmulticast mode [ 496.408946][ T8509] bridge_slave_0: entered promiscuous mode [ 496.439556][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.447280][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.455852][ T8509] bridge_slave_1: entered allmulticast mode [ 496.465435][ T8509] bridge_slave_1: entered promiscuous mode [ 496.532103][ T2963] bridge_slave_1: left allmulticast mode [ 496.538057][ T2963] bridge_slave_1: left promiscuous mode [ 496.545216][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.560851][ T2963] bridge_slave_0: left allmulticast mode [ 496.566714][ T2963] bridge_slave_0: left promiscuous mode [ 496.574342][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.971013][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.010246][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.045449][ T2963] bond0 (unregistering): Released all slaves [ 497.312524][ T2963] tipc: Left network mode [ 497.317010][ T8553] fuse: Bad value for 'fd' [ 497.346609][ T8509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.482674][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.507613][ T8509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.587451][ T8489] hsr_slave_0: entered promiscuous mode [ 497.597531][ T8489] hsr_slave_1: entered promiscuous mode [ 497.607211][ T8489] debugfs: 'hsr0' already exists in 'hsr' [ 497.613242][ T8489] Cannot create hsr debugfs directory [ 497.738053][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.856138][ T8509] team0: Port device team_slave_0 added [ 497.869578][ T5794] Bluetooth: hci4: command tx timeout [ 497.959806][ T8509] team0: Port device team_slave_1 added [ 498.080579][ T2963] hsr_slave_0: left promiscuous mode [ 498.092398][ T2963] hsr_slave_1: left promiscuous mode [ 498.102185][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.110241][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.125206][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.133140][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.327968][ T2963] veth1_macvtap: left promiscuous mode [ 498.334083][ T2963] veth0_macvtap: left promiscuous mode [ 498.340216][ T2963] veth1_vlan: left promiscuous mode [ 498.345743][ T2963] veth0_vlan: left promiscuous mode [ 498.699084][ T5794] Bluetooth: hci6: command tx timeout [ 500.584655][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 500.685687][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 500.867655][ T5794] Bluetooth: hci6: command tx timeout [ 501.375121][ T3659] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.394041][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.402847][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.439474][ T8509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.482636][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.491005][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.518406][ T8509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.551766][ T3659] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.591052][ T3659] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.651064][ T3911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.865817][ T8509] hsr_slave_0: entered promiscuous mode [ 501.876111][ T8509] hsr_slave_1: entered promiscuous mode [ 501.885090][ T8509] debugfs: 'hsr0' already exists in 'hsr' [ 501.891494][ T8509] Cannot create hsr debugfs directory [ 502.797387][ T8489] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 502.877869][ T8489] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 502.924407][ T8509] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 502.968014][ T8489] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 503.002077][ T8509] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 503.020970][ T1896] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 503.049729][ T8489] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 503.095318][ T8509] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 503.139964][ T8509] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 503.208580][ T1896] usb 1-1: Using ep0 maxpacket: 8 [ 503.244151][ T1896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.255665][ T1896] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 503.265787][ T1896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.347692][ T1896] usb 1-1: config 0 descriptor?? [ 503.618086][ T1896] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 503.865444][ T11] usb 1-1: USB disconnect, device number 39 [ 504.985303][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.043063][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.121590][ T8610] QAT: failed to copy from user. [ 505.130486][ T8612] No control pipe specified [ 505.152381][ T8509] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.251282][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.258933][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.277497][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.389864][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.397395][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.414072][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.421755][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.581292][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.589036][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.881649][ T6568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.890324][ T6568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.986218][ T3659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.994665][ T3659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.464461][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.502165][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.887629][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 509.017602][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 509.215421][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 509.252836][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.265106][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 509.274682][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.375616][ T9] usb 5-1: config 0 descriptor?? [ 509.503054][ T8509] veth0_vlan: entered promiscuous mode [ 509.567273][ T8489] veth0_vlan: entered promiscuous mode [ 509.663951][ T8509] veth1_vlan: entered promiscuous mode [ 509.707529][ T8489] veth1_vlan: entered promiscuous mode [ 509.710491][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 509.904026][ T9] usb 5-1: USB disconnect, device number 24 [ 509.934387][ T8509] veth0_macvtap: entered promiscuous mode [ 509.958867][ T8489] veth0_macvtap: entered promiscuous mode [ 509.993114][ T8509] veth1_macvtap: entered promiscuous mode [ 510.036230][ T8489] veth1_macvtap: entered promiscuous mode [ 510.136588][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.154055][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.231210][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.249844][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.314070][ T6564] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.122457][ T6564] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.145497][ T2963] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.772778][ T6557] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.326613][ T4248] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.439768][ T4248] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.517053][ T4248] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.559273][ T4248] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.833572][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 514.987986][ T8720] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 515.396071][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 515.578767][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 515.616979][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.629659][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.640698][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 515.650291][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.881127][ T9] usb 5-1: config 0 descriptor?? [ 516.393874][ T9] apple 0003:05AC:024B.0008: unknown global tag 0xe [ 516.402135][ T9] apple 0003:05AC:024B.0008: item 0 1 1 14 parsing failed [ 516.537307][ T9] apple 0003:05AC:024B.0008: parse failed [ 516.547117][ T9] apple 0003:05AC:024B.0008: probe with driver apple failed with error -22 [ 516.745809][ T9] usb 5-1: USB disconnect, device number 25 [ 518.249116][ T6570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.257253][ T6570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.395983][ T6562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.404200][ T6562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.544080][ T6568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.552435][ T6568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.677305][ T6560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.686432][ T6560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.286586][ T8777] netlink: set zone limit has 8 unknown bytes [ 519.320459][ T1896] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 519.438815][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 519.490794][ T1896] usb 5-1: Using ep0 maxpacket: 8 [ 519.528664][ T1896] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 519.537381][ T1896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.549255][ T1896] usb 5-1: config 0 has no interface number 0 [ 519.560121][ T1896] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 519.575406][ T1896] usb 5-1: config 0 interface 52 has no altsetting 0 [ 519.670242][ T1896] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 519.680298][ T1896] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 519.683793][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.688856][ T1896] usb 5-1: Manufacturer: syz [ 519.704151][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.772840][ T9] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 519.780725][ T1896] usb 5-1: config 0 descriptor?? [ 519.782784][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 519.800847][ T9] usb 8-1: SerialNumber: syz [ 519.810315][ T1896] hub 5-1:0.52: bad descriptor, ignoring hub [ 519.816684][ T1896] hub 5-1:0.52: probe with driver hub failed with error -5 [ 520.095370][ T9] usb 8-1: 0:2 : does not exist [ 520.100965][ T9] usb 8-1: unit 5: unexpected type 0x03 [ 520.106815][ T9] usb 8-1: unit 4 not found! [ 520.178601][ T8629] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 520.200562][ T9] usb 8-1: USB disconnect, device number 2 [ 520.341057][ T1896] usb 5-1: USB disconnect, device number 26 [ 520.391737][ T8629] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 520.401410][ T8629] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 520.412400][ T8629] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 520.422406][ T8629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 520.434223][ T8629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 520.526159][ T8629] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 520.535981][ T8629] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 520.544675][ T8629] usb 1-1: Product: syz [ 520.549133][ T8629] usb 1-1: Manufacturer: syz [ 520.571999][ T8629] cdc_wdm 1-1:1.0: skipping garbage [ 520.587190][ T8629] cdc_wdm 1-1:1.0: skipping garbage [ 520.601367][ T8629] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 520.607506][ T8629] cdc_wdm 1-1:1.0: Unknown control protocol [ 520.907614][ T5849] usb 1-1: USB disconnect, device number 40 [ 520.959820][ T30] audit: type=1326 audit(1760391242.083:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 520.983725][ T30] audit: type=1326 audit(1760391242.083:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 521.006755][ T30] audit: type=1326 audit(1760391242.103:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 521.032637][ T30] audit: type=1326 audit(1760391242.103:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 521.056520][ T30] audit: type=1326 audit(1760391242.103:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 521.079368][ T30] audit: type=1326 audit(1760391242.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 521.106211][ T30] audit: type=1326 audit(1760391242.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 521.130504][ T30] audit: type=1326 audit(1760391242.103:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 521.155082][ T30] audit: type=1326 audit(1760391242.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 521.178796][ T30] audit: type=1326 audit(1760391242.103:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd178eec9 code=0x7ffc0000 [ 521.329668][ T1896] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 521.488590][ T1896] usb 9-1: Using ep0 maxpacket: 16 [ 521.505454][ T1896] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 521.514607][ T1896] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 521.523431][ T1896] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.535522][ T1896] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 521.545210][ T1896] usb 9-1: config 0 has no interface number 0 [ 521.551932][ T1896] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 521.564049][ T1896] usb 9-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 521.579471][ T1896] usb 9-1: config 0 interface 125 has no altsetting 0 [ 521.690667][ T1896] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 521.704342][ T1896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.716421][ T1896] usb 9-1: Product: syz [ 521.722381][ T1896] usb 9-1: Manufacturer: syz [ 521.727286][ T1896] usb 9-1: SerialNumber: syz [ 521.735083][ T5855] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 521.792672][ T1896] usb 9-1: config 0 descriptor?? [ 521.911888][ T5855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.923311][ T5855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.933612][ T5855] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 521.943296][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.060823][ T5855] usb 10-1: config 0 descriptor?? [ 522.284133][ T8818] fuse: Unknown parameter 'group_id00000000000000000000' [ 522.492272][ T5855] usbhid 10-1:0.0: can't add hid device: -71 [ 522.499217][ T5855] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 522.547946][ T5855] usb 10-1: USB disconnect, device number 2 [ 522.799589][ T8827] overlayfs: failed to resolve './file0': -2 [ 523.902575][ T5855] usb 9-1: USB disconnect, device number 2 [ 524.323024][ T8852] overlayfs: failed to resolve './file0': -2 [ 524.634803][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.9.879'. [ 527.120442][ T8870] fuse: Bad value for 'fd' [ 528.321770][ T8629] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 529.221990][ T8629] usb 1-1: Using ep0 maxpacket: 16 [ 529.340958][ T8629] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 529.350055][ T8629] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 529.358640][ T8629] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.369270][ T8629] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 529.378998][ T8629] usb 1-1: config 0 has no interface number 0 [ 529.392090][ T8629] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 529.406377][ T8629] usb 1-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 529.420679][ T8629] usb 1-1: config 0 interface 125 has no altsetting 0 [ 529.641521][ T8893] overlayfs: failed to resolve './file0': -2 [ 530.130616][ T8629] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 530.142581][ T8629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.151491][ T8629] usb 1-1: Product: syz [ 530.155903][ T8629] usb 1-1: Manufacturer: syz [ 530.160799][ T8629] usb 1-1: SerialNumber: syz [ 530.424081][ T8629] usb 1-1: config 0 descriptor?? [ 530.813710][ T8629] usb 1-1: can't set config #0, error -71 [ 530.842790][ T8629] usb 1-1: USB disconnect, device number 41 [ 530.953510][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.7.895'. [ 531.149701][ T5794] Bluetooth: hci0: Malformed Event: 0x02 [ 531.295986][ T8908] fuse: Bad value for 'fd' [ 532.260790][ T8928] overlayfs: failed to resolve './file0': -2 [ 532.539300][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.7.908'. [ 532.852223][ T8944] fuse: Bad value for 'user_id' [ 532.857409][ T8944] fuse: Bad value for 'user_id' [ 533.061751][ T8947] fuse: Bad value for 'fd' [ 533.770472][ T8964] overlayfs: failed to resolve './file0': -2 [ 534.240306][ T8970] netlink: 20 bytes leftover after parsing attributes in process `syz.9.922'. [ 534.850468][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 535.202024][ T8996] overlayfs: failed to resolve './file1': -2 [ 537.185396][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.192160][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.598480][ T9027] fuse: Bad value for 'fd' [ 538.736827][ T5794] Bluetooth: hci6: link tx timeout [ 538.744481][ T5794] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.756596][ T5794] Bluetooth: hci6: link tx timeout [ 538.762366][ T5794] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.778852][ T5794] Bluetooth: hci6: link tx timeout [ 538.784569][ T5794] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.794673][ T5794] Bluetooth: hci6: link tx timeout [ 538.800268][ T5794] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.822829][ T5794] Bluetooth: hci6: link tx timeout [ 538.828174][ T5794] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.896789][ T5794] Bluetooth: hci6: link tx timeout [ 538.902842][ T5794] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.924867][ T5794] Bluetooth: hci6: link tx timeout [ 538.930434][ T5794] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.958782][ T5794] Bluetooth: hci6: link tx timeout [ 538.964337][ T5794] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 539.020127][ T5794] Bluetooth: hci6: link tx timeout [ 539.025608][ T5794] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 540.821972][ T5794] Bluetooth: hci6: command 0x0406 tx timeout [ 541.997814][ T9070] loop8: detected capacity change from 0 to 8 [ 542.038495][ T9070] Dev loop8: unable to read RDB block 8 [ 542.044373][ T9070] loop8: unable to read partition table [ 542.119471][ T9070] loop8: partition table beyond EOD, truncated [ 542.125984][ T9070] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 542.158848][ T9076] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 544.314368][ T9116] loop8: detected capacity change from 0 to 8 [ 544.348689][ T5855] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 544.349692][ T9116] Dev loop8: unable to read RDB block 8 [ 544.362693][ T9116] loop8: unable to read partition table [ 544.400085][ T9116] loop8: partition table beyond EOD, truncated [ 544.406608][ T9116] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 544.558623][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 544.590833][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.602747][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.613170][ T5855] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 544.622683][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.737199][ T5855] usb 5-1: config 0 descriptor?? [ 545.260971][ T5855] hid (null): unknown global tag 0xd [ 545.268544][ T5855] hid (null): unknown global tag 0xd [ 545.437228][ T5855] usb 5-1: string descriptor 0 read error: -71 [ 545.486195][ T5855] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 545.494771][ T5855] letsketch 0003:6161:4D15.0009: probe with driver letsketch failed with error -32 [ 545.523803][ T5855] usb 5-1: USB disconnect, device number 27 [ 546.581098][ T9144] No control pipe specified [ 546.597605][ T9154] loop8: detected capacity change from 0 to 8 [ 546.656369][ T9154] Dev loop8: unable to read RDB block 8 [ 546.662742][ T9154] loop8: unable to read partition table [ 546.761848][ T9154] loop8: partition table beyond EOD, truncated [ 546.771851][ T9154] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 548.035370][ T5855] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 548.243723][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.255188][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.265523][ T5855] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 548.275028][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.413245][ T5855] usb 1-1: config 0 descriptor?? [ 548.789970][ T9183] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 549.272468][ T5855] usbhid 1-1:0.0: can't add hid device: -71 [ 549.279330][ T5855] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 549.312769][ T5855] usb 1-1: USB disconnect, device number 42 [ 549.440299][ T9187] No control pipe specified [ 549.522403][ T9192] loop8: detected capacity change from 0 to 8 [ 549.533907][ T9192] Dev loop8: unable to read RDB block 8 [ 549.540162][ T9192] loop8: unable to read partition table [ 549.584296][ T9192] loop8: partition table beyond EOD, truncated [ 549.591095][ T9192] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 552.284007][ T9218] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 552.952345][ T9224] loop8: detected capacity change from 0 to 8 [ 553.010685][ T9224] Dev loop8: unable to read RDB block 8 [ 553.016790][ T9224] loop8: unable to read partition table [ 553.091082][ T9224] loop8: partition table beyond EOD, truncated [ 553.097647][ T9224] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 553.173592][ T9227] No control pipe specified [ 554.238682][ T5855] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 554.820428][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.831752][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.841956][ T5855] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 554.851497][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.866268][ T5855] usb 5-1: config 0 descriptor?? [ 555.530068][ T5855] usbhid 5-1:0.0: can't add hid device: -71 [ 555.536695][ T5855] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 555.571264][ T5855] usb 5-1: USB disconnect, device number 28 [ 555.749443][ T9255] loop8: detected capacity change from 0 to 8 [ 555.780380][ T9255] Dev loop8: unable to read RDB block 8 [ 555.786410][ T9255] loop8: unable to read partition table [ 555.826916][ T9255] loop8: partition table beyond EOD, truncated [ 555.833807][ T9255] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 555.969617][ T9260] autofs: Bad value for 'fd' [ 556.379865][ T9268] random: crng reseeded on system resumption [ 556.595400][ T9271] Restarting kernel threads ... [ 556.635884][ T9271] Done restarting kernel threads. [ 558.305865][ T5095] Bluetooth: min 0 < 6 [ 560.338805][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 560.935671][ T8629] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 561.140553][ T9295] autofs: Bad value for 'fd' [ 561.196891][ T8629] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.207525][ T8629] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.276794][ T8629] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 561.286593][ T8629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 561.295010][ T8629] usb 1-1: SerialNumber: syz [ 561.428469][ T5855] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 561.448769][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 561.569339][ T8629] usb 1-1: 0:2 : does not exist [ 561.574481][ T8629] usb 1-1: unit 255 not found! [ 561.614957][ T5855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.620131][ T8629] usb 1-1: USB disconnect, device number 43 [ 561.626788][ T5855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.645710][ T5855] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 561.646070][ T9] usb 9-1: device descriptor read/64, error -71 [ 561.656334][ T5855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.734725][ T5855] usb 8-1: config 0 descriptor?? [ 561.908978][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 562.058837][ T9] usb 9-1: device descriptor read/64, error -71 [ 562.176510][ T9] usb usb9-port1: attempt power cycle [ 562.404862][ T5855] usbhid 8-1:0.0: can't add hid device: -71 [ 562.411564][ T5855] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 562.444519][ T5855] usb 8-1: USB disconnect, device number 3 [ 562.506978][ T5095] Bluetooth: hci6: unexpected event for opcode 0x2006 [ 562.550479][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 562.631558][ T9] usb 9-1: device descriptor read/8, error -71 [ 562.806786][ T2963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.884272][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 562.911992][ T9] usb 9-1: device descriptor read/8, error -71 [ 562.994740][ T2963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.029891][ T9] usb usb9-port1: unable to enumerate USB device [ 563.133119][ T2963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.193282][ T9327] autofs: Bad value for 'fd' [ 563.315418][ T2963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.696293][ T2963] bridge_slave_0: left allmulticast mode [ 563.702500][ T2963] bridge_slave_0: left promiscuous mode [ 563.709240][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.309995][ T5855] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 564.355529][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.441799][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.490250][ T2963] bond0 (unregistering): Released all slaves [ 564.534556][ T5855] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.545258][ T5855] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.631941][ T5855] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 564.641757][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 564.650273][ T5855] usb 10-1: SerialNumber: syz [ 564.958100][ T5855] usb 10-1: 0:2 : does not exist [ 564.963847][ T5855] usb 10-1: unit 255 not found! [ 564.973935][ T2963] tipc: Left network mode [ 565.060714][ T5855] usb 10-1: USB disconnect, device number 3 [ 565.498330][ T2963] hsr_slave_0: left promiscuous mode [ 565.506972][ T2963] hsr_slave_1: left promiscuous mode [ 565.518682][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.526652][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.620895][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.628562][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.709073][ T2963] veth1_macvtap: left promiscuous mode [ 565.714899][ T2963] veth0_macvtap: left promiscuous mode [ 565.721500][ T2963] veth1_vlan: left promiscuous mode [ 565.727010][ T2963] veth0_vlan: left promiscuous mode [ 566.057847][ T5855] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 566.385461][ T5855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.396849][ T5855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.407035][ T5855] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 566.416366][ T5855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.559775][ T5855] usb 8-1: config 0 descriptor?? [ 566.669757][ T9372] autofs: Unknown parameter '00000000000000000000' [ 566.778068][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 566.905977][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 567.152686][ T5855] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7 [ 567.232607][ T5855] cp2112 0003:10C4:EA90.000A: parse failed [ 567.241064][ T5855] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -22 [ 568.834479][ T5855] usb 8-1: USB disconnect, device number 4 [ 569.258133][ T5095] Bluetooth: hci6: unexpected event for opcode 0x2006 [ 569.661867][ T9393] syzkaller0: entered promiscuous mode [ 569.667563][ T9393] syzkaller0: entered allmulticast mode [ 570.252472][ T9407] capability: warning: `syz.4.1084' uses deprecated v2 capabilities in a way that may be insecure [ 570.294167][ T9407] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 570.304122][ T9407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 570.458504][ T5855] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 570.627808][ T5855] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 570.638482][ T5855] usb 8-1: config 0 interface 0 has no altsetting 0 [ 570.687993][ T5855] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 570.697685][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 570.706443][ T5855] usb 8-1: Product: syz [ 570.710964][ T5855] usb 8-1: Manufacturer: syz [ 570.716174][ T5855] usb 8-1: SerialNumber: syz [ 570.733380][ T5855] usb 8-1: config 0 descriptor?? [ 570.766633][ T5855] usb 8-1: selecting invalid altsetting 0 [ 570.868741][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 571.077981][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.089561][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.093646][ T5855] usb 8-1: USB disconnect, device number 5 [ 571.099808][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 571.115347][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.159524][ T9] usb 5-1: config 0 descriptor?? [ 571.204770][ T5095] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 571.606004][ T9] cp2112 0003:10C4:EA90.000B: item fetching failed at offset 5/7 [ 571.646935][ T9] cp2112 0003:10C4:EA90.000B: parse failed [ 571.653799][ T9] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -22 [ 573.224486][ T9427] syzkaller0: entered promiscuous mode [ 573.230651][ T9427] syzkaller0: entered allmulticast mode [ 573.682823][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 573.761857][ T5855] usb 5-1: USB disconnect, device number 29 [ 573.838723][ T9433] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 573.861232][ T9436] overlayfs: missing 'workdir' [ 573.916248][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 573.931207][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.941331][ T9] usb 8-1: Product: syz [ 573.945673][ T9] usb 8-1: Manufacturer: syz [ 573.950543][ T9] usb 8-1: SerialNumber: syz [ 575.652642][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 575.674950][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 575.689551][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 575.785927][ T9] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 575.838100][ T9459] syzkaller0: entered promiscuous mode [ 575.844247][ T9459] syzkaller0: entered allmulticast mode [ 575.887109][ T9] usb 8-1: USB disconnect, device number 6 [ 576.300179][ T5855] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 576.478159][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.496423][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.508066][ T5855] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 576.517496][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.541579][ T5855] usb 1-1: config 0 descriptor?? [ 576.972566][ T5855] cp2112 0003:10C4:EA90.000C: item fetching failed at offset 5/7 [ 577.006844][ T5855] cp2112 0003:10C4:EA90.000C: parse failed [ 577.013915][ T5855] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -22 [ 577.854709][ T9492] syzkaller0: entered promiscuous mode [ 577.864613][ T9492] syzkaller0: entered allmulticast mode [ 579.003491][ T5855] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 579.408690][ T5855] usb 9-1: Using ep0 maxpacket: 16 [ 579.478930][ T5855] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 579.490967][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 579.633283][ T9] usb 1-1: USB disconnect, device number 44 [ 579.634951][ T5855] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 579.648857][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.657068][ T5855] usb 9-1: Product: syz [ 579.669640][ T5855] usb 9-1: Manufacturer: syz [ 579.674440][ T5855] usb 9-1: SerialNumber: syz [ 579.717579][ T5855] usb 9-1: config 0 descriptor?? [ 579.863319][ T5855] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 579.879620][ T5855] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 580.928749][ T5855] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 580.948607][ T5855] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 583.147575][ T5855] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 583.155954][ T5855] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 583.171116][ T5855] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 583.179503][ T5855] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 583.187697][ T5855] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 583.195377][ T5855] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 583.209336][ T9535] syzkaller0: entered promiscuous mode [ 583.215321][ T9535] syzkaller0: entered allmulticast mode [ 583.626046][ T5855] usb 9-1: USB disconnect, device number 7 [ 584.045245][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 584.287263][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 584.314985][ T9] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 584.323893][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.509428][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 584.519103][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.527283][ T9] usb 5-1: Product: syz [ 584.531837][ T9] usb 5-1: Manufacturer: syz [ 584.536677][ T9] usb 5-1: SerialNumber: syz [ 584.749341][ T9] usb 5-1: config 0 descriptor?? [ 585.046683][ T9] usb 5-1: USB disconnect, device number 30 [ 586.755788][ T9571] syzkaller0: entered promiscuous mode [ 586.761927][ T9571] syzkaller0: entered allmulticast mode [ 586.988041][ T5855] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 587.158627][ T5855] usb 8-1: Using ep0 maxpacket: 16 [ 587.202106][ T5855] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 587.214674][ T5855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 587.882644][ T5855] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 587.892227][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.900564][ T5855] usb 8-1: Product: syz [ 587.904895][ T5855] usb 8-1: Manufacturer: syz [ 587.909746][ T5855] usb 8-1: SerialNumber: syz [ 587.923943][ T5855] usb 8-1: config 0 descriptor?? [ 587.940299][ T5855] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 587.950076][ T5855] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 588.448857][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 588.551240][ T5855] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 588.562391][ T5855] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 588.686840][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 588.714225][ T9] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 588.779087][ T9] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 588.790572][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.799036][ T9] usb 1-1: Product: syz [ 588.803373][ T9] usb 1-1: Manufacturer: syz [ 588.808139][ T9] usb 1-1: SerialNumber: syz [ 588.919140][ T9] usb 1-1: config 0 descriptor?? [ 588.944114][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 588.957039][ T9] usb 1-1: setting power ON [ 588.968176][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 589.044445][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 589.076779][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 589.093543][ T9] usb 1-1: media controller created [ 589.204129][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.229787][ T5855] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 589.460925][ T5855] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 589.514157][ T5855] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 589.569404][ T5855] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 589.608757][ T5855] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 589.666609][ T5855] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 589.729358][ T5855] usb 8-1: USB disconnect, device number 7 [ 589.918627][ T9] usb 1-1: selecting invalid altsetting 6 [ 589.924568][ T9] usb 1-1: digital interface selection failed (-22) [ 589.931708][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 590.189609][ T9] usb 1-1: setting power OFF [ 590.194384][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 590.201613][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 590.219479][ T9] (NULL device *): no alternate interface [ 590.931845][ T9605] syzkaller0: entered promiscuous mode [ 590.943863][ T9605] syzkaller0: entered allmulticast mode [ 591.251327][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 591.400167][ T9] usb 1-1: USB disconnect, device number 45 [ 593.018673][ T5855] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 593.048840][ T1896] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 593.188585][ T5855] usb 8-1: Using ep0 maxpacket: 8 [ 593.211356][ T5855] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 593.228712][ T1896] usb 9-1: Using ep0 maxpacket: 16 [ 593.243086][ T5855] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 593.252745][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.261365][ T5855] usb 8-1: Product: syz [ 593.265703][ T5855] usb 8-1: Manufacturer: syz [ 593.270790][ T5855] usb 8-1: SerialNumber: syz [ 593.309115][ T1896] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 593.321130][ T1896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 593.340759][ T9641] syzkaller0: entered promiscuous mode [ 593.346595][ T9641] syzkaller0: entered allmulticast mode [ 593.403920][ T1896] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 593.413761][ T1896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.422154][ T1896] usb 9-1: Product: syz [ 593.426511][ T1896] usb 9-1: Manufacturer: syz [ 593.431416][ T1896] usb 9-1: SerialNumber: syz [ 593.454145][ T5855] usb 8-1: config 0 descriptor?? [ 593.505570][ T5855] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 593.514052][ T5855] usb 8-1: setting power ON [ 593.518978][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 593.593071][ T1896] usb 9-1: config 0 descriptor?? [ 593.630152][ T5849] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 593.644443][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 593.743646][ T1896] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 593.753711][ T1896] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 593.817453][ T5849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.828754][ T5849] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 593.842358][ T5849] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 593.852790][ T5849] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.927248][ T5855] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 593.937076][ T5855] usb 8-1: media controller created [ 594.072380][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.324785][ T5849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.335344][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.343891][ T5849] usb 1-1: Product: syz [ 594.348549][ T5849] usb 1-1: Manufacturer: syz [ 594.353427][ T5849] usb 1-1: SerialNumber: syz [ 594.428086][ T1896] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 594.462404][ T1896] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 594.700697][ T5849] cdc_ncm 1-1:1.0: skipping garbage [ 594.951868][ T5855] usb 8-1: selecting invalid altsetting 6 [ 594.958166][ T5855] usb 8-1: digital interface selection failed (-22) [ 594.965602][ T5855] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 594.986139][ T5855] usb 8-1: setting power OFF [ 594.991307][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 594.997340][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 595.007194][ T5855] (NULL device *): no alternate interface [ 595.092825][ T1896] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 595.321392][ T1896] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 595.405687][ T1896] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 595.475158][ T1896] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 595.566837][ T1896] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 595.664699][ T5849] cdc_ncm 1-1:1.0: bind() failure [ 595.681176][ T5849] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 595.688453][ T5849] cdc_ncm 1-1:1.1: bind() failure [ 595.729540][ T1896] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 595.804279][ T1896] usb 9-1: USB disconnect, device number 8 [ 595.915860][ T5849] usb 1-1: USB disconnect, device number 46 [ 596.271685][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 596.350126][ T5855] usb 8-1: USB disconnect, device number 8 [ 596.479811][ T9656] loop6: detected capacity change from 0 to 7 [ 596.509292][ T9656] Dev loop6: unable to read RDB block 7 [ 596.515234][ T9656] loop6: AHDI p3 [ 596.519491][ T9656] loop6: partition table partially beyond EOD, truncated [ 597.276570][ T9672] fuse: Unknown parameter 'user_i00000000000000000000' [ 597.341338][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 597.493108][ T9] usb 9-1: device descriptor read/64, error -71 [ 597.740712][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 597.938620][ T9] usb 9-1: device descriptor read/64, error -71 [ 598.054400][ T9] usb usb9-port1: attempt power cycle [ 598.279900][ T5855] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 598.464569][ T5855] usb 8-1: Using ep0 maxpacket: 8 [ 598.533277][ T5855] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 598.614309][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.621058][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.641044][ T5849] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 598.713135][ T5855] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 598.723954][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.732349][ T5855] usb 8-1: Product: syz [ 598.736684][ T5855] usb 8-1: Manufacturer: syz [ 598.741690][ T5855] usb 8-1: SerialNumber: syz [ 598.791727][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 598.836969][ T5855] usb 8-1: config 0 descriptor?? [ 598.846245][ T9] usb 9-1: device descriptor read/8, error -71 [ 598.865307][ T5855] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 598.874325][ T5855] usb 8-1: setting power ON [ 598.879140][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 598.892374][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 598.904796][ T5855] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 598.919616][ T5855] usb 8-1: media controller created [ 598.927497][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 598.982672][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.993098][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 599.005352][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 599.046509][ T5849] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 599.055958][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.064336][ T5849] usb 1-1: Product: syz [ 599.068867][ T5849] usb 1-1: Manufacturer: syz [ 599.073643][ T5849] usb 1-1: SerialNumber: syz [ 599.108987][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 599.125919][ T8629] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 599.137583][ T5849] usb 1-1: config 0 descriptor?? [ 599.153289][ T5849] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 599.162872][ T5849] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 599.172582][ T5855] usb 8-1: selecting invalid altsetting 6 [ 599.173920][ T9] usb 9-1: device descriptor read/8, error -71 [ 599.178712][ T5855] usb 8-1: digital interface selection failed (-22) [ 599.178859][ T5855] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 599.232273][ T5855] usb 8-1: setting power OFF [ 599.237277][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 599.243569][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 599.253374][ T5855] (NULL device *): no alternate interface [ 599.294353][ T9] usb usb9-port1: unable to enumerate USB device [ 599.317597][ T8629] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.333648][ T8629] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.348717][ T8629] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.358946][ T8629] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.396506][ T8629] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.406552][ T8629] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.415106][ T8629] usb 10-1: Product: syz [ 599.419729][ T8629] usb 10-1: Manufacturer: syz [ 599.430054][ T8629] usb 10-1: SerialNumber: syz [ 599.459225][ T8629] cdc_ncm 10-1:1.0: skipping garbage [ 599.593345][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 599.663915][ T5855] usb 8-1: USB disconnect, device number 9 [ 599.823990][ T5849] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 599.837039][ T5849] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 600.336361][ T8629] cdc_ncm 10-1:1.0: bind() failure [ 600.361328][ T8629] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 600.368846][ T8629] cdc_ncm 10-1:1.1: bind() failure [ 600.400349][ T8629] usb 10-1: USB disconnect, device number 4 [ 600.458512][ T5849] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 600.477104][ T5849] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 600.500528][ T5849] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 600.532015][ T5849] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 600.559316][ T5849] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 600.589185][ T5849] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 600.603132][ T5849] usb 1-1: USB disconnect, device number 47 [ 603.305055][ T5849] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 603.451507][ T9726] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1208'. [ 603.461299][ T9726] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1208'. [ 603.529990][ T5849] usb 10-1: Using ep0 maxpacket: 8 [ 603.572793][ T5849] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 603.653445][ T5849] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 603.664132][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.672851][ T5849] usb 10-1: Product: syz [ 603.677283][ T5849] usb 10-1: Manufacturer: syz [ 603.682352][ T5849] usb 10-1: SerialNumber: syz [ 603.700344][ T5855] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 603.717037][ T5849] usb 10-1: config 0 descriptor?? [ 603.737081][ T5849] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 603.746509][ T5849] usb 10-1: setting power ON [ 603.752344][ T5849] dvb-usb: bulk message failed: -22 (2/0) [ 603.833979][ T5849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 603.848635][ T5855] usb 5-1: device descriptor read/64, error -71 [ 603.876482][ T5849] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 603.886025][ T5849] usb 10-1: media controller created [ 604.015848][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.100611][ T5849] usb 10-1: selecting invalid altsetting 6 [ 604.107467][ T5849] usb 10-1: digital interface selection failed (-22) [ 604.114944][ T5849] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 604.124315][ T5855] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 604.180173][ T5849] usb 10-1: setting power OFF [ 604.185142][ T5849] dvb-usb: bulk message failed: -22 (2/0) [ 604.192579][ T5849] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 604.202438][ T5849] (NULL device *): no alternate interface [ 604.308499][ T5855] usb 5-1: device descriptor read/64, error -71 [ 604.433016][ T5855] usb usb5-port1: attempt power cycle [ 604.573732][ T5849] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 604.601714][ T5849] usb 10-1: USB disconnect, device number 5 [ 604.699015][ T1896] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 604.779246][ T8596] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 605.421240][ T5855] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 605.470968][ T1896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.482210][ T1896] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 605.495726][ T1896] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 605.505915][ T1896] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.520299][ T5855] usb 5-1: device descriptor read/8, error -71 [ 605.539171][ T8596] usb 8-1: Using ep0 maxpacket: 16 [ 605.545766][ T1896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.555519][ T1896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.563849][ T1896] usb 1-1: Product: syz [ 605.571837][ T1896] usb 1-1: Manufacturer: syz [ 605.576621][ T1896] usb 1-1: SerialNumber: syz [ 605.596801][ T8596] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 605.608823][ T8596] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 605.624850][ T1896] cdc_ncm 1-1:1.0: skipping garbage [ 605.665809][ T8596] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 605.679479][ T8596] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.687715][ T8596] usb 8-1: Product: syz [ 605.693656][ T8596] usb 8-1: Manufacturer: syz [ 605.698755][ T8596] usb 8-1: SerialNumber: syz [ 605.768798][ T5855] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 605.789252][ T5095] Bluetooth: hci1: command 0x0406 tx timeout [ 605.801265][ T5855] usb 5-1: device descriptor read/8, error -71 [ 605.882856][ T8596] usb 8-1: config 0 descriptor?? [ 605.928089][ T5855] usb usb5-port1: unable to enumerate USB device [ 605.955044][ T8596] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 605.964782][ T8596] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 606.515089][ T1896] cdc_ncm 1-1:1.0: bind() failure [ 606.533417][ T1896] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 606.540869][ T1896] cdc_ncm 1-1:1.1: bind() failure [ 606.576691][ T8596] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 606.598522][ T8596] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 606.612149][ T1896] usb 1-1: USB disconnect, device number 48 [ 607.227212][ T8596] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 607.241792][ T8596] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 607.265380][ T8596] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 607.280930][ T8596] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 607.300288][ T8596] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 607.320315][ T8596] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 607.383937][ T9767] fuse: Unknown parameter 'group_i00000000000000000000' [ 607.391715][ T8596] usb 8-1: USB disconnect, device number 10 [ 607.708712][ T1896] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 607.927575][ T1896] usb 1-1: Using ep0 maxpacket: 8 [ 607.968823][ T1896] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 608.110784][ T1896] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 608.121015][ T1896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.133328][ T1896] usb 1-1: Product: syz [ 608.137668][ T1896] usb 1-1: Manufacturer: syz [ 608.143708][ T1896] usb 1-1: SerialNumber: syz [ 608.406028][ T1896] usb 1-1: config 0 descriptor?? [ 608.502268][ T1896] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 608.510853][ T1896] usb 1-1: setting power ON [ 608.515508][ T1896] dvb-usb: bulk message failed: -22 (2/0) [ 609.324165][ T1896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 609.362809][ T1896] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 609.372050][ T1896] usb 1-1: media controller created [ 609.599124][ T5095] Bluetooth: hci1: unexpected subevent 0x12 length: 11 > 5 [ 610.154882][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 610.154954][ T30] audit: type=1326 audit(1760391331.183:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3a58eec9 code=0x7ffc0000 [ 610.189354][ T30] audit: type=1326 audit(1760391331.183:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3a58eec9 code=0x7ffc0000 [ 610.211736][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.219943][ T30] audit: type=1326 audit(1760391331.253:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda3a58d710 code=0x7ffc0000 [ 610.244340][ T30] audit: type=1326 audit(1760391331.253:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3a58eec9 code=0x7ffc0000 [ 610.266688][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.273358][ T30] audit: type=1326 audit(1760391331.293:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda3a58eec9 code=0x7ffc0000 [ 610.295610][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.306746][ T30] audit: type=1326 audit(1760391331.293:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3a58eec9 code=0x7ffc0000 [ 610.329359][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.375022][ T1896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.188769][ T30] audit: type=1326 audit(1760391331.473:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda3a58eec9 code=0x7ffc0000 [ 611.211685][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.227618][ T30] audit: type=1326 audit(1760391331.483:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3a58eec9 code=0x7ffc0000 [ 611.250081][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.256960][ T30] audit: type=1326 audit(1760391331.493:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda3a58eec9 code=0x7ffc0000 [ 611.279606][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.286210][ T30] audit: type=1326 audit(1760391331.493:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.9.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3a58eec9 code=0x7ffc0000 [ 611.399517][ T1896] usb 1-1: selecting invalid altsetting 6 [ 611.411580][ T1896] usb 1-1: digital interface selection failed (-22) [ 611.420170][ T1896] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 611.478622][ T1896] usb 1-1: setting power OFF [ 611.483425][ T1896] dvb-usb: bulk message failed: -22 (2/0) [ 611.490060][ T1896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 611.499735][ T1896] (NULL device *): no alternate interface [ 611.681766][ T9797] fuse: Unknown parameter 'group_id00000000000000000000' [ 611.758902][ T8629] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 611.876990][ T1896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 611.936896][ T1896] usb 1-1: USB disconnect, device number 49 [ 611.942355][ T8629] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.953653][ T8629] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.968022][ T8629] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 611.968154][ T8629] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.042124][ T8629] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.042319][ T8629] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.042438][ T8629] usb 9-1: Product: syz [ 612.042534][ T8629] usb 9-1: Manufacturer: syz [ 612.042630][ T8629] usb 9-1: SerialNumber: syz [ 612.057336][ T8629] cdc_ncm 9-1:1.0: skipping garbage [ 612.719988][ T8629] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 612.726502][ T8629] cdc_ncm 9-1:1.0: bind() failure [ 612.753674][ T8629] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 612.760918][ T8629] cdc_ncm 9-1:1.1: bind() failure [ 612.901057][ T8629] usb 9-1: USB disconnect, device number 13 [ 614.994082][ T1896] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 615.190498][ T1896] usb 8-1: Using ep0 maxpacket: 8 [ 615.238905][ T1896] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 615.319547][ T1896] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 615.329065][ T1896] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.337244][ T1896] usb 8-1: Product: syz [ 615.341777][ T1896] usb 8-1: Manufacturer: syz [ 615.346534][ T1896] usb 8-1: SerialNumber: syz [ 615.654790][ T1896] usb 8-1: config 0 descriptor?? [ 615.701741][ T1896] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 615.715861][ T1896] usb 8-1: setting power ON [ 615.722243][ T1896] dvb-usb: bulk message failed: -22 (2/0) [ 615.950414][ T1896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 616.027485][ T9817] Bluetooth: hci4: command 0x0406 tx timeout [ 616.095106][ T1896] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 616.104479][ T1896] usb 8-1: media controller created [ 616.223223][ T1896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.608586][ T1896] usb 8-1: selecting invalid altsetting 6 [ 616.614667][ T1896] usb 8-1: digital interface selection failed (-22) [ 616.621685][ T1896] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 616.897170][ T1896] usb 8-1: setting power OFF [ 616.902626][ T1896] dvb-usb: bulk message failed: -22 (2/0) [ 616.908932][ T1896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 616.918483][ T1896] (NULL device *): no alternate interface [ 617.000963][ T9834] fuse: Unknown parameter 'group_id00000000000000000000' [ 617.677030][ T1896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 617.739737][ T1896] usb 8-1: USB disconnect, device number 11 [ 617.979160][ T8629] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 618.152141][ T8629] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.168616][ T8629] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.184164][ T8629] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 618.194366][ T8629] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.000257][ T1896] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 619.204514][ T8629] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 619.218855][ T8629] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.221702][ T1896] usb 1-1: Using ep0 maxpacket: 8 [ 619.227036][ T8629] usb 9-1: Product: syz [ 619.227130][ T8629] usb 9-1: Manufacturer: syz [ 619.227232][ T8629] usb 9-1: SerialNumber: syz [ 619.260410][ T8629] cdc_ncm 9-1:1.0: skipping garbage [ 619.285279][ T1896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 619.346485][ T1896] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 619.355492][ T1896] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 619.366120][ T1896] usb 1-1: config 4 has no interface number 0 [ 619.475822][ T1896] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 619.485637][ T1896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.497980][ T1896] usb 1-1: Product: syz [ 619.503700][ T1896] usb 1-1: Manufacturer: syz [ 619.508557][ T1896] usb 1-1: SerialNumber: syz [ 619.799102][ T8596] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 619.975218][ T1896] uvcvideo 1-1:4.147: probe with driver uvcvideo failed with error -22 [ 620.014253][ T1896] usb 1-1: USB disconnect, device number 50 [ 620.089931][ T8596] usb 8-1: Using ep0 maxpacket: 8 [ 620.111580][ T8596] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 620.141852][ T8629] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 620.148166][ T8629] cdc_ncm 9-1:1.0: bind() failure [ 620.164059][ T8629] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 620.167995][ T8596] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 620.171219][ T8629] cdc_ncm 9-1:1.1: bind() failure [ 620.182666][ T8596] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.195505][ T8596] usb 8-1: Product: syz [ 620.200093][ T8596] usb 8-1: Manufacturer: syz [ 620.204862][ T8596] usb 8-1: SerialNumber: syz [ 620.241129][ T8596] usb 8-1: config 0 descriptor?? [ 620.263175][ T8596] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 620.271586][ T8596] usb 8-1: setting power ON [ 620.276247][ T8596] dvb-usb: bulk message failed: -22 (2/0) [ 620.296191][ T8596] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 620.307927][ T8596] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 620.322360][ T8596] usb 8-1: media controller created [ 620.354372][ T5855] usb 9-1: USB disconnect, device number 14 [ 620.511107][ T9869] fuse: Unknown parameter 'group_id00000000000000000000' [ 620.542152][ T8596] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 620.626175][ T8596] usb 8-1: selecting invalid altsetting 6 [ 620.633713][ T8596] usb 8-1: digital interface selection failed (-22) [ 620.640854][ T8596] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 620.677807][ T8596] usb 8-1: setting power OFF [ 620.682916][ T8596] dvb-usb: bulk message failed: -22 (2/0) [ 620.688935][ T8596] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 620.698572][ T8596] (NULL device *): no alternate interface [ 620.989273][ T8596] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 621.204337][ T8596] usb 8-1: USB disconnect, device number 12 [ 622.025396][ T5095] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 623.523211][ T9901] fuse: Bad value for 'user_id' [ 623.528466][ T9901] fuse: Bad value for 'user_id' [ 624.091799][ T8629] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 624.277895][ T8629] usb 8-1: Using ep0 maxpacket: 8 [ 624.318604][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 624.356667][ T8629] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 624.407437][ T8629] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 624.422096][ T8629] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.432177][ T8629] usb 8-1: Product: syz [ 624.436546][ T8629] usb 8-1: Manufacturer: syz [ 624.441507][ T8629] usb 8-1: SerialNumber: syz [ 624.473619][ T8629] usb 8-1: config 0 descriptor?? [ 624.489315][ T8629] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 624.497712][ T8629] usb 8-1: setting power ON [ 624.502622][ T8629] dvb-usb: bulk message failed: -22 (2/0) [ 624.536209][ T8629] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 624.559548][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.570155][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.583771][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 624.593915][ T9] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.610633][ T8629] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 624.627416][ T8629] usb 8-1: media controller created [ 624.675781][ T8629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.759033][ T8629] usb 8-1: selecting invalid altsetting 6 [ 624.765447][ T8629] usb 8-1: digital interface selection failed (-22) [ 624.772507][ T8629] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 624.773431][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 624.773584][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.773703][ T9] usb 10-1: Product: syz [ 624.773797][ T9] usb 10-1: Manufacturer: syz [ 624.773894][ T9] usb 10-1: SerialNumber: syz [ 624.777718][ T8629] usb 8-1: setting power OFF [ 624.777799][ T8629] dvb-usb: bulk message failed: -22 (2/0) [ 624.777873][ T8629] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 624.777946][ T8629] (NULL device *): no alternate interface [ 624.861536][ T9] cdc_ncm 10-1:1.0: skipping garbage [ 624.963115][ T8629] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 624.971427][ T8629] usb 8-1: USB disconnect, device number 13 [ 625.496853][ T9] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 625.503791][ T9] cdc_ncm 10-1:1.0: bind() failure [ 625.519305][ T9] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 625.526454][ T9] cdc_ncm 10-1:1.1: bind() failure [ 625.675473][ T9] usb 10-1: USB disconnect, device number 6 [ 628.579793][ T5095] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 631.061906][ T5095] Bluetooth: hci6: unexpected subevent 0x12 length: 11 > 5 [ 631.819283][ T9990] input: syz0 as /devices/virtual/input/input12 [ 632.298930][ T8596] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 632.550870][ T8596] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.562429][ T8596] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.572670][ T8596] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 632.582164][ T8596] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.859397][ T8596] usb 8-1: config 0 descriptor?? [ 632.937244][ T8596] hub 8-1:0.0: USB hub found [ 633.163421][ T8596] hub 8-1:0.0: 2 ports detected [ 633.384073][ T8596] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 633.390910][ T8596] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 634.379157][ T8596] usbhid 8-1:0.0: can't add hid device: -71 [ 634.385695][ T8596] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 634.440391][ T8596] usb 8-1: USB disconnect, device number 14 [ 636.759526][ T5095] Bluetooth: hci6: unexpected subevent 0x12 length: 11 > 5 [ 638.956653][T10039] input: syz0 as /devices/virtual/input/input13 [ 639.484642][ T2963] nci: nci_rsp_packet: unknown rsp opcode 0x15 [ 641.928735][ T8596] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 642.111683][ T8596] usb 10-1: device descriptor read/64, error -71 [ 642.384202][ T8596] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 642.608671][ T8596] usb 10-1: device descriptor read/64, error -71 [ 642.719847][ T8596] usb usb10-port1: attempt power cycle [ 642.839127][ T5855] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 642.909112][T10095] input: syz0 as /devices/virtual/input/input14 [ 643.031079][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 643.067089][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 643.079184][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 643.093324][ T8596] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 643.124520][ T5855] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 643.134134][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.142619][ T5855] usb 5-1: Product: syz [ 643.146984][ T5855] usb 5-1: Manufacturer: syz [ 643.155604][ T5855] usb 5-1: SerialNumber: syz [ 643.164964][ T8596] usb 10-1: device descriptor read/8, error -71 [ 643.180376][ T5855] usb 5-1: config 0 descriptor?? [ 643.201351][ T5855] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 643.211169][ T5855] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 643.408564][ T8596] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 643.430982][ T8596] usb 10-1: device descriptor read/8, error -71 [ 643.540059][ T8596] usb usb10-port1: unable to enumerate USB device [ 643.819890][ T5855] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 643.832285][ T5855] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 644.246472][ T5855] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 644.253894][ T5855] em28xx 5-1:0.0: No AC97 audio processor [ 647.638541][ T9] usb 5-1: USB disconnect, device number 35 [ 647.655494][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 647.709422][ T9] em28xx 5-1:0.0: Freeing device [ 648.016018][T10139] input: syz0 as /devices/virtual/input/input15 [ 648.017100][T10130] kvm: kvm [10127]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6570000007f [ 649.308611][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 649.478746][ T9] usb 1-1: device descriptor read/64, error -71 [ 649.709469][ T8629] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 649.738957][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 649.889008][ T9] usb 1-1: device descriptor read/64, error -71 [ 649.926703][T10176] kvm: kvm [10175]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6570000007f [ 649.936685][ T8629] usb 5-1: Using ep0 maxpacket: 16 [ 649.959355][ T8629] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 649.971287][ T8629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 650.041208][ T9] usb usb1-port1: attempt power cycle [ 650.056038][ T8629] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 650.065577][ T8629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.074054][ T8629] usb 5-1: Product: syz [ 650.078488][ T8629] usb 5-1: Manufacturer: syz [ 650.083267][ T8629] usb 5-1: SerialNumber: syz [ 650.093336][ T8629] usb 5-1: config 0 descriptor?? [ 650.110161][ T8629] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 650.127376][ T8629] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 650.429000][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 650.457938][ T9] usb 1-1: device descriptor read/8, error -71 [ 650.722598][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 650.746139][ T8629] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 650.756776][ T8629] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 650.791317][ T9] usb 1-1: device descriptor read/8, error -71 [ 650.899716][ T9] usb usb1-port1: unable to enumerate USB device [ 651.175249][ T8629] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 651.182716][ T8629] em28xx 5-1:0.0: No AC97 audio processor [ 652.868629][ T5855] usb 5-1: USB disconnect, device number 36 [ 652.880513][ T5855] em28xx 5-1:0.0: Disconnecting em28xx [ 652.990730][ T5855] em28xx 5-1:0.0: Freeing device [ 653.874361][T10215] kvm: kvm [10214]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6570000007f [ 654.793649][ T5855] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 654.806168][ T9817] Bluetooth: hci6: unexpected subevent 0x12 length: 11 > 5 [ 654.973791][ T5855] usb 1-1: device descriptor read/64, error -71 [ 655.036315][ T8596] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 655.218851][ T8596] usb 8-1: Using ep0 maxpacket: 16 [ 655.228603][ T5855] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 655.276766][ T8596] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 655.289009][ T8596] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 655.329405][ T8596] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 655.343276][ T8596] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.352975][ T8596] usb 8-1: Product: syz [ 655.357394][ T8596] usb 8-1: Manufacturer: syz [ 655.362239][ T8596] usb 8-1: SerialNumber: syz [ 655.401003][ T8596] usb 8-1: config 0 descriptor?? [ 655.417328][ T8596] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 655.427265][ T8596] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 655.448778][ T5855] usb 1-1: device descriptor read/64, error -71 [ 655.560461][ T5855] usb usb1-port1: attempt power cycle [ 656.392830][ T8596] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 656.400449][ T5855] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 656.671173][T10247] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1406'. [ 656.993167][ T5855] usb 1-1: device descriptor read/8, error -71 [ 657.008984][ T8596] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 657.249346][ T5855] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 657.311170][ T5855] usb 1-1: device descriptor read/8, error -71 [ 657.440073][ T5855] usb usb1-port1: unable to enumerate USB device [ 657.482848][ T8596] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 657.495973][ T8596] em28xx 8-1:0.0: No AC97 audio processor [ 658.800189][ T8596] usb 8-1: USB disconnect, device number 15 [ 658.807905][ T8596] em28xx 8-1:0.0: Disconnecting em28xx [ 658.865352][ T8596] em28xx 8-1:0.0: Freeing device [ 660.051342][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 660.057939][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.430261][T10284] fuse: Bad value for 'fd' [ 661.912510][ T8596] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 662.081024][ T8596] usb 9-1: Using ep0 maxpacket: 16 [ 662.132178][ T8596] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 662.144608][ T8596] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 662.199948][ T8596] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 662.209411][ T8596] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.217627][ T8596] usb 9-1: Product: syz [ 662.222163][ T8596] usb 9-1: Manufacturer: syz [ 662.226944][ T8596] usb 9-1: SerialNumber: syz [ 662.267422][ T8596] usb 9-1: config 0 descriptor?? [ 662.294832][ T8596] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 662.310096][ T8596] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 662.920764][ T8596] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 662.950509][ T8596] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 663.051573][T10314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1434'. [ 663.364890][ T8596] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 663.372368][ T8596] em28xx 9-1:0.0: No AC97 audio processor [ 664.488083][T10344] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1446'. [ 664.488724][ T8629] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 664.668582][ T8629] usb 10-1: Using ep0 maxpacket: 8 [ 664.692356][ T8629] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 664.746534][ T8629] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 664.762245][ T8629] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.772609][ T8629] usb 10-1: Product: syz [ 664.782213][ T8629] usb 10-1: Manufacturer: syz [ 664.787104][ T8629] usb 10-1: SerialNumber: syz [ 664.802120][ T8596] usb 9-1: USB disconnect, device number 15 [ 664.809937][ T8596] em28xx 9-1:0.0: Disconnecting em28xx [ 664.879193][ T8596] em28xx 9-1:0.0: Freeing device [ 664.883294][ T8629] usb 10-1: config 0 descriptor?? [ 664.932001][ T8629] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 664.945290][ T8629] usb 10-1: setting power ON [ 664.950208][ T8629] dvb-usb: bulk message failed: -22 (2/0) [ 665.029030][ T8629] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 665.071348][ T8629] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 665.080554][ T8629] usb 10-1: media controller created [ 665.103107][T10340] dvb-usb: bulk message failed: -22 (3/0) [ 665.109257][T10340] cxusb: i2c wr: len=80 is too big! [ 665.109257][T10340] [ 665.195331][ T8629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 665.433941][ T8629] usb 10-1: selecting invalid altsetting 6 [ 665.440875][ T8629] usb 10-1: digital interface selection failed (-22) [ 665.447733][ T8629] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 665.503564][ T8629] usb 10-1: setting power OFF [ 665.508615][ T8629] dvb-usb: bulk message failed: -22 (2/0) [ 665.514700][ T8629] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 665.524667][ T8629] (NULL device *): no alternate interface [ 665.959635][ T8629] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 666.039874][ T8629] usb 10-1: USB disconnect, device number 11 [ 666.202382][T10370] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1457'. [ 666.638760][ T8596] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 666.718834][ T5855] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 666.811466][ T8596] usb 1-1: Using ep0 maxpacket: 16 [ 666.836583][ T8596] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 666.848708][ T8596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 666.877031][ T8596] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 666.886951][ T8596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.895427][ T8596] usb 1-1: Product: syz [ 666.900066][ T8596] usb 1-1: Manufacturer: syz [ 666.909510][ T8596] usb 1-1: SerialNumber: syz [ 666.921638][ T5855] usb 8-1: device descriptor read/64, error -71 [ 666.945105][ T8596] usb 1-1: config 0 descriptor?? [ 666.962111][ T8596] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 666.971833][ T8596] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 667.198720][ T5855] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 667.359349][ T5855] usb 8-1: device descriptor read/64, error -71 [ 667.476535][ T5855] usb usb8-port1: attempt power cycle [ 667.631199][ T8596] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 667.648732][ T1896] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 667.669167][ T8596] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 667.832464][ T5855] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 667.841402][ T1896] usb 5-1: Using ep0 maxpacket: 8 [ 667.855072][ T1896] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 667.884518][ T5855] usb 8-1: device descriptor read/8, error -71 [ 667.892471][ T1896] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 667.902078][ T1896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.910359][ T1896] usb 5-1: Product: syz [ 667.914681][ T1896] usb 5-1: Manufacturer: syz [ 667.919614][ T1896] usb 5-1: SerialNumber: syz [ 667.949938][ T1896] usb 5-1: config 0 descriptor?? [ 667.980439][ T1896] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 667.988989][ T1896] usb 5-1: setting power ON [ 667.993795][ T1896] dvb-usb: bulk message failed: -22 (2/0) [ 668.061177][ T1896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 668.084232][ T8596] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 668.091581][ T8596] em28xx 1-1:0.0: No AC97 audio processor [ 668.110516][ T1896] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 668.119773][ T1896] usb 5-1: media controller created [ 668.184603][ T1896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 668.194771][ T5855] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 668.278613][ T5855] usb 8-1: device descriptor read/8, error -71 [ 668.287159][ T1896] usb 5-1: selecting invalid altsetting 6 [ 668.293446][ T1896] usb 5-1: digital interface selection failed (-22) [ 668.300356][ T1896] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 668.316433][ T1896] usb 5-1: setting power OFF [ 668.321516][ T1896] dvb-usb: bulk message failed: -22 (2/0) [ 668.327404][ T1896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 668.337085][ T1896] (NULL device *): no alternate interface [ 668.409119][ T5855] usb usb8-port1: unable to enumerate USB device [ 668.552923][ T1896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 668.579497][ T1896] usb 5-1: USB disconnect, device number 37 [ 669.480687][ T8629] usb 1-1: USB disconnect, device number 59 [ 669.491896][ T8629] em28xx 1-1:0.0: Disconnecting em28xx [ 669.510033][ T8629] em28xx 1-1:0.0: Freeing device [ 670.474176][ T9817] Bluetooth: hci1: unexpected subevent 0x12 length: 11 > 5 [ 670.654133][ T6562] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.945484][ T6562] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.281249][ T6562] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.307175][ T8629] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 671.509641][ T8629] usb 5-1: Using ep0 maxpacket: 8 [ 671.586112][ T8629] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 671.661523][ T6562] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.189455][ T1896] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 672.403791][ T6562] bridge_slave_0: left allmulticast mode [ 672.410364][ T6562] bridge_slave_0: left promiscuous mode [ 672.417126][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.515350][ T5855] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 672.527138][ T1896] usb 10-1: Using ep0 maxpacket: 16 [ 672.578535][ T1896] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 672.591044][ T1896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 672.631453][ T8629] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 672.646389][ T8629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.656580][ T8629] usb 5-1: Product: syz [ 672.661079][ T8629] usb 5-1: Manufacturer: syz [ 672.665958][ T8629] usb 5-1: SerialNumber: syz [ 672.675749][ T8629] usb 5-1: config 0 descriptor?? [ 672.687666][ T1896] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 672.691544][ T8629] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 672.698661][ T1896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.705532][ T8629] usb 5-1: setting power ON [ 672.713591][ T1896] usb 10-1: Product: syz [ 672.713694][ T1896] usb 10-1: Manufacturer: syz [ 672.713785][ T1896] usb 10-1: SerialNumber: syz [ 672.732595][ T8629] dvb-usb: bulk message failed: -22 (2/0) [ 672.774640][ T5855] usb 9-1: device descriptor read/64, error -71 [ 672.791626][ T1896] usb 10-1: config 0 descriptor?? [ 672.911818][ T1896] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 672.921981][ T1896] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 673.089826][ T5855] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 673.379269][ T5855] usb 9-1: device descriptor read/64, error -71 [ 673.491716][ T5855] usb usb9-port1: attempt power cycle [ 673.689807][ T8629] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 673.690847][ T1896] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 673.701274][ T8629] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 673.715316][ T8629] usb 5-1: media controller created [ 673.788036][ T8629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 673.819956][ T1896] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 673.965919][ T1896] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 673.979218][ T1896] em28xx 10-1:0.0: No AC97 audio processor [ 674.008685][ T5855] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 674.087889][ T5855] usb 9-1: device descriptor read/8, error -71 [ 674.140744][ T8629] usb 5-1: selecting invalid altsetting 6 [ 674.146700][ T8629] usb 5-1: digital interface selection failed (-22) [ 674.154753][ T8629] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 674.165577][ T6562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.220241][ T8629] usb 5-1: setting power OFF [ 674.225039][ T8629] dvb-usb: bulk message failed: -22 (2/0) [ 674.231092][ T8629] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 674.240659][ T8629] (NULL device *): no alternate interface [ 674.282313][ T6562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.371193][ T6562] bond0 (unregistering): Released all slaves [ 674.393761][ T5855] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 674.450062][ T5855] usb 9-1: device descriptor read/8, error -71 [ 674.466187][ T8629] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 674.525199][ T6562] tipc: Left network mode [ 674.526770][ T8629] usb 5-1: USB disconnect, device number 38 [ 674.561360][ T5855] usb usb9-port1: unable to enumerate USB device [ 674.647257][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 674.853612][ T6562] hsr_slave_0: left promiscuous mode [ 674.863235][ T6562] hsr_slave_1: left promiscuous mode [ 674.875219][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.886203][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.920474][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.928167][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.948004][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.958671][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.983659][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 674.993446][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 675.007518][ T9] usb 1-1: SerialNumber: syz [ 675.030726][ T6562] veth1_macvtap: left promiscuous mode [ 675.036542][ T6562] veth0_macvtap: left promiscuous mode [ 675.042576][ T6562] veth1_vlan: left promiscuous mode [ 675.048075][ T6562] veth0_vlan: left promiscuous mode [ 675.090291][ T5855] usb 10-1: USB disconnect, device number 12 [ 675.100547][ T5855] em28xx 10-1:0.0: Disconnecting em28xx [ 675.182371][ T5855] em28xx 10-1:0.0: Freeing device [ 675.327539][ T9] usb 1-1: 0:2 : does not exist [ 675.463405][ T9] usb 1-1: USB disconnect, device number 60 [ 675.484722][ T9817] Bluetooth: hci6: unexpected subevent 0x12 length: 11 > 5 [ 675.902360][ T5855] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 676.108794][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 676.128593][ T5849] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 676.149280][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.161419][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.171601][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 676.184818][ T5855] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 676.194399][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.238839][ T5855] usb 5-1: config 0 descriptor?? [ 676.500109][ T5849] usb 10-1: Using ep0 maxpacket: 16 [ 676.537173][ T6562] team0 (unregistering): Port device team_slave_1 removed [ 676.644741][ T5849] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.655422][ T5849] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 676.669257][ T5849] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 676.678772][ T5849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.711083][ T6562] team0 (unregistering): Port device team_slave_0 removed [ 676.966631][ T5855] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 677.003716][ T5855] microsoft 0003:045E:07DA.000D: unsupported Resolution Multiplier 0 [ 677.054871][ T5849] usb 10-1: config 0 descriptor?? [ 677.075212][ T5855] microsoft 0003:045E:07DA.000D: implement() called with n (152) > 32! (kworker/1:5) [ 677.110334][ T5849] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 677.391241][T10491] fuse: Unknown parameter 'user_i00000000000000000000' [ 677.737411][ T5855] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 677.749758][ T5855] microsoft 0003:045E:07DA.000D: no inputs found [ 677.756280][ T5855] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 677.833670][ T5855] usb 5-1: USB disconnect, device number 39 [ 678.128599][ T5849] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 678.189272][ T5880] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 678.257170][ T9817] Bluetooth: hci1: unexpected subevent 0x12 length: 11 > 5 [ 678.328819][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 678.339453][ T5880] usb 9-1: device descriptor read/64, error -71 [ 678.369975][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 678.383983][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 678.444427][ T5849] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 678.454046][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.462548][ T5849] usb 1-1: Product: syz [ 678.466894][ T5849] usb 1-1: Manufacturer: syz [ 678.472390][ T5849] usb 1-1: SerialNumber: syz [ 678.516994][ T5849] usb 1-1: config 0 descriptor?? [ 678.534461][ T5849] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 678.544345][ T5849] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 678.597058][ T5880] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 678.748606][ T5880] usb 9-1: device descriptor read/64, error -71 [ 678.859304][ T5880] usb usb9-port1: attempt power cycle [ 678.869708][ T1896] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 679.044691][ T1896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.055458][ T1896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.070455][ T1896] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 679.079955][ T1896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 679.088416][ T1896] usb 5-1: SerialNumber: syz [ 679.147150][ T5849] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 679.157045][ T5849] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 679.178918][ T5849] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 679.186205][ T5849] em28xx 1-1:0.0: No AC97 audio processor [ 679.208668][ T5880] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 679.249308][ T5880] usb 9-1: device descriptor read/8, error -71 [ 679.265261][ T9] usb 10-1: USB disconnect, device number 13 [ 679.326637][ T1896] usb 5-1: 0:2 : does not exist [ 679.355619][ T1896] usb 5-1: USB disconnect, device number 40 [ 679.488581][ T5880] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 679.516444][ T5880] usb 9-1: device descriptor read/8, error -71 [ 679.633204][ T5880] usb usb9-port1: unable to enumerate USB device [ 679.864210][T10524] fuse: Unknown parameter 'user_i00000000000000000000' [ 680.271647][ T9817] Bluetooth: hci1: unexpected subevent 0x12 length: 11 > 5 [ 680.441943][ T5880] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 680.477761][T10537] input: syz0 as /devices/virtual/input/input16 [ 680.613981][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.652111][ T5880] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 680.661992][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.670381][ T5880] usb 5-1: Product: syz [ 680.674729][ T5880] usb 5-1: Manufacturer: syz [ 680.679750][ T5880] usb 5-1: SerialNumber: syz [ 680.695697][ T5880] usb 5-1: config 0 descriptor?? [ 680.710864][ T5880] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 680.930421][ T5849] usb 1-1: USB disconnect, device number 61 [ 680.940280][ T5849] em28xx 1-1:0.0: Disconnecting em28xx [ 680.958905][ T1896] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 680.981311][ T5849] em28xx 1-1:0.0: Freeing device [ 681.152522][ T1896] usb 10-1: Using ep0 maxpacket: 16 [ 681.180827][ T1896] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.191799][ T1896] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 681.205271][ T1896] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 681.214803][ T1896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.253247][ T1896] usb 10-1: config 0 descriptor?? [ 681.271635][ T1896] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 681.333483][ T5880] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 681.341037][ T5880] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 681.391289][ T5880] usb 5-1: USB disconnect, device number 41 [ 681.779879][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 681.971988][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.982714][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.029506][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 682.039132][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 682.050363][ T9] usb 1-1: SerialNumber: syz [ 682.082127][ T9817] Bluetooth: hci1: unexpected subevent 0x12 length: 11 > 5 [ 682.394226][ T9] usb 1-1: 0:2 : does not exist [ 682.454185][ T9] usb 1-1: USB disconnect, device number 62 [ 682.664531][ T1896] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 682.848504][ T1896] usb 8-1: Using ep0 maxpacket: 16 [ 682.876676][ T1896] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 682.891007][ T1896] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 682.917036][ T1896] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 682.926554][ T1896] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.934985][ T1896] usb 8-1: Product: syz [ 682.939592][ T1896] usb 8-1: Manufacturer: syz [ 682.944359][ T1896] usb 8-1: SerialNumber: syz [ 682.969598][ T1896] usb 8-1: config 0 descriptor?? [ 682.969912][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 682.991302][ T1896] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 683.001050][ T1896] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 683.158989][ T9] usb 5-1: device descriptor read/64, error -71 [ 683.205570][T10571] loop6: detected capacity change from 0 to 7 [ 683.215022][T10571] Dev loop6: unable to read RDB block 7 [ 683.221220][T10571] loop6: unable to read partition table [ 683.229274][T10571] loop6: partition table beyond EOD, truncated [ 683.235826][T10571] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 683.398987][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 683.538616][ T9] usb 5-1: device descriptor read/64, error -71 [ 683.607771][ T1896] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 683.618075][ T1896] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 683.633653][ T1896] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 683.641590][ T1896] em28xx 8-1:0.0: No AC97 audio processor [ 683.652857][ T9] usb usb5-port1: attempt power cycle [ 683.823695][ T5880] usb 10-1: USB disconnect, device number 14 [ 684.031640][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 684.080382][ T9] usb 5-1: device descriptor read/8, error -71 [ 684.319496][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 684.362631][ T9] usb 5-1: device descriptor read/8, error -71 [ 684.402039][T10587] ======================================================= [ 684.402039][T10587] WARNING: The mand mount option has been deprecated and [ 684.402039][T10587] and is ignored by this kernel. Remove the mand [ 684.402039][T10587] option from the mount to silence this warning. [ 684.402039][T10587] ======================================================= [ 684.450755][ T5880] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 684.480459][ T9] usb usb5-port1: unable to enumerate USB device [ 684.628912][ T5880] usb 9-1: Using ep0 maxpacket: 32 [ 684.666408][ T5880] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 684.676397][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.819359][ T5880] usb 9-1: config 0 descriptor?? [ 685.574953][ T5880] kye 0003:0458:5016.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 685.587063][ T5880] kye 0003:0458:5016.000E: item fetching failed at offset 4/5 [ 685.698016][ T5880] kye 0003:0458:5016.000E: parse failed [ 685.714974][ T5880] kye 0003:0458:5016.000E: probe with driver kye failed with error -22 [ 685.733105][ T5880] usb 9-1: USB disconnect, device number 24 [ 685.743492][ T1896] usb 8-1: USB disconnect, device number 20 [ 685.753585][ T1896] em28xx 8-1:0.0: Disconnecting em28xx [ 685.873593][ T1896] em28xx 8-1:0.0: Freeing device [ 687.700074][ T5095] Bluetooth: hci6: command 0x0406 tx timeout [ 688.669422][ T1896] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 688.967937][T10601] loop6: detected capacity change from 0 to 7 [ 688.992255][T10601] Dev loop6: unable to read RDB block 7 [ 688.999076][T10601] loop6: unable to read partition table [ 689.053926][T10601] loop6: partition table beyond EOD, truncated [ 689.061084][T10601] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 689.067662][ T1896] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.081402][ T1896] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.120700][ T1896] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 689.132464][ T1896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 689.141768][ T1896] usb 10-1: SerialNumber: syz [ 689.419964][ T1896] usb 10-1: 0:2 : does not exist [ 689.425276][ T1896] usb 10-1: unit 5 not found! [ 689.497221][ T1896] usb 10-1: USB disconnect, device number 15 [ 689.801634][ T5849] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 689.968657][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 689.999244][ T5849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.010277][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 690.023765][ T5849] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 690.033314][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.107857][ T5849] usb 1-1: config 0 descriptor?? [ 690.128896][ T5849] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 690.300705][ T5880] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 691.172793][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 691.221684][ T5880] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 691.233557][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 691.265094][ T5880] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 691.274745][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.288146][ T5880] usb 8-1: Product: syz [ 691.294425][ T5880] usb 8-1: Manufacturer: syz [ 691.299296][ T5880] usb 8-1: SerialNumber: syz [ 691.311954][ T5880] usb 8-1: config 0 descriptor?? [ 691.329162][ T5880] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 691.338764][ T5880] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 692.774345][ T5849] usb 1-1: USB disconnect, device number 63 [ 693.420995][ T5880] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 693.437899][ T5880] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 694.241824][ T5880] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 695.215721][ T5880] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 695.236780][ T5880] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 695.302751][ T5880] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 695.352600][ T5880] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 695.412655][ T5880] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 695.528884][ T5880] usb 8-1: USB disconnect, device number 21 [ 696.099098][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 696.328780][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 696.356085][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.370146][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 696.383625][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 696.393132][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.416561][ T9] usb 9-1: config 0 descriptor?? [ 696.434828][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 697.149227][ T9] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 697.332414][ T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 697.340485][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 697.351665][ T9] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.363868][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 697.375634][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 697.462412][ T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 697.470391][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 697.481638][ T9] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.494065][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 697.505862][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 697.587167][ T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 697.595199][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 697.606455][ T9] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.618635][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 697.635302][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 697.745027][ T9] usb 10-1: string descriptor 0 read error: -22 [ 697.752267][ T9] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 697.761986][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.789031][ T9] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 699.187781][ T5849] usb 9-1: USB disconnect, device number 25 [ 699.905041][T10692] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1582'. [ 700.621603][ T1896] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 700.790967][ T9] usb 10-1: USB disconnect, device number 16 [ 701.538673][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1586'. [ 701.678507][ T1896] usb 5-1: Using ep0 maxpacket: 16 [ 701.693857][ T1896] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 701.706877][ T1896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 701.748539][ T1896] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 701.757828][ T1896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.766265][ T1896] usb 5-1: Product: syz [ 701.770684][ T1896] usb 5-1: Manufacturer: syz [ 701.775467][ T1896] usb 5-1: SerialNumber: syz [ 701.799197][ T1896] usb 5-1: config 0 descriptor?? [ 701.818163][ T1896] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 701.836290][ T1896] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 702.255928][ T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 702.409116][ T9] usb 10-1: device descriptor read/64, error -71 [ 702.429740][ T1896] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 702.452234][ T1896] em28xx 5-1:0.0: Config register raw data: 0x00 [ 702.588572][ T5880] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 702.664661][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 702.768561][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 702.801165][ T5880] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.811926][ T5880] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 702.825495][ T5880] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 702.836696][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.872921][ T9] usb 10-1: device descriptor read/64, error -71 [ 702.989831][ T9] usb usb10-port1: attempt power cycle [ 702.999695][ T5880] usb 8-1: config 0 descriptor?? [ 703.032641][ T5880] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 703.650642][ T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 703.696896][ T9] usb 10-1: device descriptor read/8, error -71 [ 703.836608][ T1896] usb 5-1: USB disconnect, device number 46 [ 703.844392][ T1896] em28xx 5-1:0.0: Disconnecting em28xx [ 703.859362][ T1896] em28xx 5-1:0.0: Freeing device [ 703.949218][ T9] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 704.001723][ T9] usb 10-1: device descriptor read/8, error -71 [ 704.110760][ T9] usb usb10-port1: unable to enumerate USB device [ 704.274437][ T1896] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 704.494106][ T1896] usb 5-1: Using ep0 maxpacket: 32 [ 704.538519][ T1896] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 704.547964][ T1896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.567334][ T1896] usb 5-1: config 0 descriptor?? [ 705.236406][ T1896] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 705.249115][ T1896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 705.262266][ T1896] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 705.269731][ T1896] usb 5-1: media controller created [ 705.312645][ T1896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 705.454128][T10726] ===================================================== [ 705.461878][T10726] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x23e7/0x2f60 [ 705.469758][T10726] __i2c_smbus_xfer+0x23e7/0x2f60 [ 705.475110][T10726] i2c_smbus_xfer+0x31d/0x4d0 [ 705.480454][T10726] i2cdev_ioctl_smbus+0x4a1/0x660 [ 705.485732][T10726] i2cdev_ioctl+0xa14/0xf40 [ 705.490854][T10726] __se_sys_ioctl+0x23c/0x400 [ 705.495716][T10726] __x64_sys_ioctl+0x97/0xe0 [ 705.501368][T10726] x64_sys_call+0x1cbc/0x3e30 [ 705.506322][T10726] do_syscall_64+0xd9/0xfa0 [ 705.517050][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.525009][T10726] [ 705.527439][T10726] Local variable msgbuf1.i created at: [ 705.533595][T10726] __i2c_smbus_xfer+0x86a/0x2f60 [ 705.539077][T10726] i2c_smbus_xfer+0x31d/0x4d0 [ 705.543978][T10726] [ 705.546455][T10726] CPU: 0 UID: 0 PID: 10726 Comm: syz.4.1595 Not tainted syzkaller #0 PREEMPT(none) [ 705.559122][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 705.569762][T10726] ===================================================== [ 705.576838][T10726] Disabling lock debugging due to kernel taint [ 705.583416][T10726] Kernel panic - not syncing: kmsan.panic set ... [ 705.589984][T10726] CPU: 0 UID: 0 PID: 10726 Comm: syz.4.1595 Tainted: G B syzkaller #0 PREEMPT(none) [ 705.601134][T10726] Tainted: [B]=BAD_PAGE [ 705.605372][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 705.615641][T10726] Call Trace: [ 705.619021][T10726] [ 705.622047][T10726] __dump_stack+0x26/0x30 [ 705.626556][T10726] dump_stack_lvl+0x53/0x270 [ 705.631329][T10726] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 705.637306][T10726] dump_stack+0x1e/0x25 [ 705.641614][T10726] vpanic+0x435/0xd30 [ 705.645776][T10726] panic+0x15d/0x160 [ 705.649863][T10726] kmsan_report+0x31c/0x320 [ 705.654507][T10726] ? __msan_warning+0x1b/0x30 [ 705.659465][T10726] ? __i2c_smbus_xfer+0x23e7/0x2f60 [ 705.664814][T10726] ? i2c_smbus_xfer+0x31d/0x4d0 [ 705.669805][T10726] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 705.675147][T10726] ? i2cdev_ioctl+0xa14/0xf40 [ 705.680011][T10726] ? __se_sys_ioctl+0x23c/0x400 [ 705.685026][T10726] ? __x64_sys_ioctl+0x97/0xe0 [ 705.689961][T10726] ? x64_sys_call+0x1cbc/0x3e30 [ 705.694972][T10726] ? do_syscall_64+0xd9/0xfa0 [ 705.699842][T10726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.706049][T10726] ? az6027_i2c_xfer+0x2bdf/0x2c40 [ 705.711357][T10726] ? kmsan_get_metadata+0xfb/0x160 [ 705.716607][T10726] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 705.723135][T10726] ? kmsan_get_metadata+0xfb/0x160 [ 705.728398][T10726] ? kmsan_get_metadata+0xfb/0x160 [ 705.733647][T10726] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 705.739612][T10726] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 705.744895][T10726] __msan_warning+0x1b/0x30 [ 705.749510][T10726] __i2c_smbus_xfer+0x23e7/0x2f60 [ 705.754706][T10726] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 705.760988][T10726] ? rt_mutex_lock+0x3e/0x70 [ 705.765694][T10726] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 705.771558][T10726] i2c_smbus_xfer+0x31d/0x4d0 [ 705.776431][T10726] i2cdev_ioctl_smbus+0x4a1/0x660 [ 705.781598][T10726] i2cdev_ioctl+0xa14/0xf40 [ 705.786281][T10726] ? __pfx_kmsan_get_shadow_origin_ptr+0x7/0x10 [ 705.792689][T10726] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 705.797957][T10726] __se_sys_ioctl+0x23c/0x400 [ 705.802807][T10726] __x64_sys_ioctl+0x97/0xe0 [ 705.807557][T10726] x64_sys_call+0x1cbc/0x3e30 [ 705.812571][T10726] do_syscall_64+0xd9/0xfa0 [ 705.817239][T10726] ? clear_bhb_loop+0x40/0x90 [ 705.822062][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.828103][T10726] RIP: 0033:0x7f488b58eec9 [ 705.832622][T10726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.852374][T10726] RSP: 002b:00007f488c4c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.860925][T10726] RAX: ffffffffffffffda RBX: 00007f488b7e5fa0 RCX: 00007f488b58eec9 [ 705.869008][T10726] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000004 [ 705.877072][T10726] RBP: 00007f488b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 705.885139][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.893205][T10726] R13: 00007f488b7e6038 R14: 00007f488b7e5fa0 R15: 00007ffecbcf68b8 [ 705.901315][T10726] [ 705.904751][T10726] Kernel Offset: disabled [ 705.909124][T10726] Rebooting in 86400 seconds..