last executing test programs: 2m2.827886285s ago: executing program 2 (id=459): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x1f, r0, 0x7, 0x5) 2m2.5728203s ago: executing program 2 (id=461): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9004e, r1}) 2m2.352080184s ago: executing program 2 (id=463): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x5, 0xc, 0x1, "4186494ff56870d676454850f373af1c152db795354c0ac8a868f2dc7dcf45db", 0x34325241}) 2m2.179807358s ago: executing program 2 (id=465): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 2m1.930534502s ago: executing program 2 (id=468): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 2m1.250625425s ago: executing program 2 (id=472): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0x6, 0x0, 0x70bd2a, 0x0, [@sadb_lifetime={0x4, 0x7, 0x4, 0xfffffffffffffffa, 0x4, 0xcc49}]}, 0x30}, 0x1, 0x7}, 0x0) 2m0.936477252s ago: executing program 32 (id=472): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0x6, 0x0, 0x70bd2a, 0x0, [@sadb_lifetime={0x4, 0x7, 0x4, 0xfffffffffffffffa, 0x4, 0xcc49}]}, 0x30}, 0x1, 0x7}, 0x0) 7.310576538s ago: executing program 5 (id=1271): unshare(0x2c020400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) getsockname$packet(r1, 0x0, 0x0) 7.21964029s ago: executing program 5 (id=1273): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20024081) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0440fca87200000001090224000100000000090400000903000000"], 0x0) r3 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x10038ab, 0x400, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x8, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40004260, 0x0, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002225000000a308b54df4a30ef1a49065747b0000000028672d589b63c0673d57e7"], 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xbc}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 4.474598293s ago: executing program 5 (id=1295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4024e3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x19d1, 0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(0xffffffffffffffff, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x410480, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x60100) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x600e82) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x14) 3.707292688s ago: executing program 4 (id=1304): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x800, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 3.478869323s ago: executing program 4 (id=1306): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e22, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 3.259103037s ago: executing program 4 (id=1308): recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000af600000000020000800c0000000000000095"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 3.144378409s ago: executing program 4 (id=1309): socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 2.768162656s ago: executing program 3 (id=1311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xf800}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x80c0) 2.489087442s ago: executing program 3 (id=1312): memfd_create(&(0x7f0000000000)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\x00\x00\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049\r\x197|\x7f\x03%\x9c\x88\xf8f\xf4b\x97\xb5\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.248120116s ago: executing program 0 (id=1314): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xc6\xb4\x14\t\x00\x00\x00\x00\x00\x00\x00:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0xb6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = syz_io_uring_setup(0x462, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.022487101s ago: executing program 0 (id=1315): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="f6", 0x1}, {&(0x7f0000000180)="77933605903e8c2ca07a3941f93e0e7808a5415636805a531f02f65115f3852bfceeb2c50ad2b291511b3a9324845299236cd483ed67f2d3c83bb63cfb2a23b6dd760f9fbc523427bb5ed62a4eb465035033cea1eabe19046d21855015625d5416c7124f42749744cc0809b4aa66f0731ef07e7782f92b85c75811bd34", 0x7d}, {&(0x7f0000002000)="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", 0x1ff}], 0x3, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041) recvmmsg(r1, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000006440)=""/11, 0xb}], 0x1}, 0x1}], 0x1, 0x40004023, 0x0) 1.735213936s ago: executing program 0 (id=1316): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x800, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 1.649188888s ago: executing program 0 (id=1317): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x6, 0x6, 0x8}]}) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0x9b, &(0x7f0000000300)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f00000000c0)="7c006eca71", 0x0, 0xfffffffb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.52827725s ago: executing program 5 (id=1318): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000180)={0xfeec, 0x297201d76f70f74c, &(0x7f0000ffa000/0x4000)=nil, &(0x7f000067c000/0x2000)=nil, 0x1, 0x0, 0x0, 0x4, 0xd6, 0x0, 0x4b, 0x15}) 1.432091132s ago: executing program 3 (id=1319): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4}) 1.418431592s ago: executing program 5 (id=1320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001500010000000000000000000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) 1.144012067s ago: executing program 3 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getnetconf={0x1c, 0x52, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), 0x0, 0x0) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a00020000000000000000"], 0x94}}, 0x20008841) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740)=@v1={0x1000000, [{0x7, 0x90}]}, 0xc, 0x3) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat(r4, &(0x7f00000000c0)='./file0\x00', 0x2, 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c4) 1.143867727s ago: executing program 5 (id=1323): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x10000a47) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) 1.02289222s ago: executing program 1 (id=1324): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = dup(r0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000440)={0x18, 0x1, 0x0, {0x3a9ecee1}}, 0x18) 940.571021ms ago: executing program 3 (id=1325): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xc6\xb4\x14\t\x00\x00\x00\x00\x00\x00\x00:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0xb6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = syz_io_uring_setup(0x462, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 816.079394ms ago: executing program 1 (id=1326): socket$netlink(0x10, 0x3, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 815.949264ms ago: executing program 4 (id=1327): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x800, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 757.631875ms ago: executing program 3 (id=1328): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4024e3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x19d1, 0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(0xffffffffffffffff, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x410480, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x60100) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x600e82) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x14) 723.240566ms ago: executing program 0 (id=1329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1}, 0x4010) 657.430467ms ago: executing program 1 (id=1330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 656.844107ms ago: executing program 4 (id=1331): socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x10, 0x0, 0x160}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet(r4, &(0x7f0000005e40)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000000004c280000000007000000"], 0x10}}], 0x1, 0x40800) keyctl$revoke(0x3, r3) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2}}) 580.006009ms ago: executing program 0 (id=1332): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x3, 0xffffffff}, 0x0, &(0x7f00000003c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000007060f0080000000000000000a00000405000100070000000f363d04373a3c813b7005f73f6f7c060cfc927e33729c4d7baa0c81c7e5b54f3db555ead3f4f415cc006042de73301f106d65ca27538a93a609a133dbd0ee4f44addf864d56e8218d460802dc33bd40c160160a30efee3bf40a2fc22496d9bed41440ee525b458c17f0a489251ca7db09caaa3b018d3f991aa86cb2b481bd2e60951833a7f479c0f8b3052533d863110d1fc49dd6f1ac41c8987412c384213595b181ee2da05ad7eb6e3b48078b7bae1486beda6fa13495dfb9354069db3f34599b99694c41124828af07ea5a04b3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) 548.545509ms ago: executing program 1 (id=1333): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='hybla', 0x5) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x1b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e40)="87f28bf58324ae1d2a339c9d74d1d995431e1d25f236c4d12f7fa5aed21cbd611995585c6d457f83914055ccb2c728af3904ba51e46ca9d23cc11369bb8f041a592e59b198f16311a5bce6d47b7456a08fb6057b2bb82b5f1578865cee997360f280b4e1fbccc0496ac9f3cf93fb498630d9a404f90dbd09fcd5bc1ce2089d75607cf99a44f52271acc8c5a0c0170253132fa74aba7e582d88cce6908754bc06429f38c63433d2de8e0694d2ab5b32234b341ab42e646afbdfb74bda4af1322cfeff73cc95aa513533ceba3807b88a348ab323552926de8d1907de16211127f9", 0xe0}], 0x1}}], 0x2, 0x40) 477.722081ms ago: executing program 1 (id=1334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e156f30642d654384d4be8b9eb4add6d9603e8fe122b9d70171d6f8ea5", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20001040}, 0x8044) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x4000014) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4841}, 0x24008010) 0s ago: executing program 1 (id=1335): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) readv(r1, 0x0, 0x0) syz_usb_disconnect(r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000107d1e2e2c000000000001090224000001030000000921000000010300000000000000000000003e4c066668035b3c689fc23d0d780420427e"], 0x0) kernel console output (not intermixed with test programs): ng bearer [ 127.749118][ T5163] tipc: Enabled bearer , priority 0 [ 127.808041][ T5164] device syzkaller0 entered promiscuous mode [ 127.878350][ T5163] tipc: Resetting bearer [ 127.914241][ T5162] tipc: Resetting bearer [ 127.934058][ T5162] tipc: Disabling bearer [ 128.436777][ T5178] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.727343][ T4193] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.939850][ T5218] trusted_key: encrypted_key: insufficient parameters specified [ 130.986462][ T4193] usb 2-1: Using ep0 maxpacket: 32 [ 131.116618][ T4193] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 131.178135][ T4193] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.220047][ T4193] usb 2-1: config 0 has no interface number 0 [ 131.235935][ T4193] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.486642][ T4193] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 131.506510][ T4193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.544932][ T4193] usb 2-1: Product: syz [ 131.556062][ T4193] usb 2-1: Manufacturer: syz [ 131.597575][ T4193] usb 2-1: SerialNumber: syz [ 131.657616][ T4193] usb 2-1: config 0 descriptor?? [ 131.769700][ T4193] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 131.822960][ T4193] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 131.887488][ T5235] vivid-008: disconnect [ 131.898878][ T5232] vivid-008: reconnect [ 131.972086][ T5205] fuse: Bad value for 'group_id' [ 131.978313][ T4193] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 131.993654][ T4193] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 132.038115][ T4193] usb 2-1: USB disconnect, device number 6 [ 132.188747][ T5246] loop4: detected capacity change from 0 to 7 [ 132.215647][ T5246] Dev loop4: unable to read RDB block 7 [ 132.245958][ T5246] loop4: AHDI p1 p2 [ 132.267620][ T5246] loop4: partition table partially beyond EOD, truncated [ 132.279412][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 132.290130][ T5246] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 132.449363][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 132.462488][ T5253] capability: warning: `syz.0.332' uses deprecated v2 capabilities in a way that may be insecure [ 132.526668][ T4295] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.796640][ T4295] usb 5-1: Using ep0 maxpacket: 16 [ 132.956596][ T4295] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 132.981692][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.985759][ T4295] usb 5-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 132.988386][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.032545][ T4295] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.083456][ T4295] usb 5-1: config 1 has no interface number 1 [ 133.097092][ T4295] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.112110][ T4295] usb 5-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x2E, skipping [ 133.276513][ T4193] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.286824][ T4295] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.304078][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.331568][ T4295] usb 5-1: Product: syz [ 133.360409][ T4295] usb 5-1: Manufacturer: syz [ 133.366697][ T4295] usb 5-1: SerialNumber: syz [ 133.536536][ T4193] usb 3-1: Using ep0 maxpacket: 8 [ 133.638333][ T5248] udc-core: couldn't find an available UDC or it's busy [ 133.656617][ T4193] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.676287][ T5248] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.686471][ T4193] usb 3-1: config 0 has no interfaces? [ 133.722669][ T4193] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 133.766608][ T4193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.810203][ T4193] usb 3-1: config 0 descriptor?? [ 134.173323][ T4295] usb 5-1: USB disconnect, device number 9 [ 134.256992][ T5284] program syz.2.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.475883][ T26] audit: type=1326 audit(1758993809.267:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b12a5bec9 code=0x7ffc0000 [ 134.612062][ T26] audit: type=1326 audit(1758993809.297:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b12a5bec9 code=0x7ffc0000 [ 136.082367][ T5310] device batadv1 entered promiscuous mode [ 136.172606][ T5310] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 136.655185][ T13] usb 3-1: USB disconnect, device number 5 [ 137.244742][ T5322] mmap: syz.2.352 (5322) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 137.936506][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.196602][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 138.536866][ T23] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 138.564454][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.605404][ T23] usb 1-1: Product: syz [ 138.625811][ T23] usb 1-1: Manufacturer: syz [ 138.646209][ T23] usb 1-1: SerialNumber: syz [ 138.680213][ T23] usb 1-1: config 0 descriptor?? [ 138.704696][ T5335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.355'. [ 138.759086][ T23] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 139.406653][ T23] gspca_stk1135: reg_w 0x3 err -71 [ 139.417877][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 139.452279][ T23] gspca_stk1135: Sensor write failed [ 139.471689][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 139.497502][ T23] gspca_stk1135: Sensor write failed [ 139.513398][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 139.546528][ T23] gspca_stk1135: Sensor read failed [ 139.554910][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 139.582149][ T23] gspca_stk1135: Sensor read failed [ 139.601839][ T23] gspca_stk1135: Detected sensor type unknown (0x0) [ 139.626497][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 139.644788][ T23] gspca_stk1135: Sensor read failed [ 139.658370][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 139.674626][ T23] gspca_stk1135: Sensor read failed [ 139.688867][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 139.697170][ T5357] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 139.697170][ T5357] The task syz.1.363 (5357) triggered the difference, watch for misbehavior. [ 139.718767][ T23] gspca_stk1135: Sensor write failed [ 139.750450][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 139.792350][ T23] gspca_stk1135: Sensor write failed [ 139.817102][ T23] stk1135: probe of 1-1:0.0 failed with error -71 [ 139.888420][ T23] usb 1-1: USB disconnect, device number 6 [ 140.447233][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 142.606576][ T4263] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.816531][ T4263] usb 2-1: device descriptor read/64, error -71 [ 142.904185][ T5442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.394'. [ 143.012721][ T5443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.394'. [ 143.106766][ T4263] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.319008][ T4263] usb 2-1: device descriptor read/64, error -71 [ 143.436706][ T4263] usb usb2-port1: attempt power cycle [ 143.849256][ T4263] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.966727][ T4263] usb 2-1: device descriptor read/8, error -71 [ 144.246852][ T4263] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.346651][ T4263] usb 2-1: device descriptor read/8, error -71 [ 144.479298][ T4263] usb usb2-port1: unable to enumerate USB device [ 145.775033][ T5495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.948830][ T5503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.069832][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.108374][ T5524] IPv6: Can't replace route, no match found [ 148.067747][ T5539] device syzkaller1 entered promiscuous mode [ 148.189914][ T5544] tipc: Enabling of bearer rejected, failed to enable media [ 148.483524][ T26] audit: type=1326 audit(1758993823.277:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5547 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 148.507281][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.635561][ T26] audit: type=1326 audit(1758993823.317:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5547 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 148.658202][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.779606][ T26] audit: type=1326 audit(1758993823.357:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5547 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 148.922586][ T26] audit: type=1326 audit(1758993823.357:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5547 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 149.366594][ T4239] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.746490][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.936728][ T4239] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 149.965382][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.996624][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 150.005692][ T4239] usb 4-1: Product: syz [ 150.023090][ T4239] usb 4-1: Manufacturer: syz [ 150.033315][ T4239] usb 4-1: SerialNumber: syz [ 150.097332][ T4239] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.276919][ T21] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 150.292286][ T21] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 150.322736][ T21] usb 3-1: Product: syz [ 150.336718][ T21] usb 3-1: Manufacturer: syz [ 150.341814][ T21] usb 3-1: SerialNumber: syz [ 150.397225][ T21] usb 3-1: config 0 descriptor?? [ 150.448840][ T21] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 150.681240][ T26] audit: type=1326 audit(1758993825.477:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.4.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 150.703894][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.736749][ T4239] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.792870][ T26] audit: type=1326 audit(1758993825.517:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.4.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 150.820653][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.955988][ T26] audit: type=1326 audit(1758993825.517:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.4.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 150.984274][ T26] audit: type=1326 audit(1758993825.517:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.4.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 151.008302][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.027132][ T26] audit: type=1326 audit(1758993825.517:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.4.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 151.116325][ T26] audit: type=1326 audit(1758993825.527:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.4.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 151.146114][ T5557] udc-core: couldn't find an available UDC or it's busy [ 151.164381][ T5557] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 151.176625][ T21] gspca_zc3xx: reg_r err -110 [ 151.182529][ T21] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 151.196703][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 151.268275][ T4193] usb 3-1: USB disconnect, device number 6 [ 151.355725][ T5588] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.448'. [ 151.466617][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 151.583334][ T7] usb 4-1: USB disconnect, device number 5 [ 151.607362][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.650882][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.669398][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.680981][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.711004][ T13] usb 2-1: config 0 descriptor?? [ 151.757533][ T13] hub 2-1:0.0: USB hub found [ 151.936447][ T4239] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 151.944352][ T4239] ath9k_htc: Failed to initialize the device [ 151.966822][ T13] hub 2-1:0.0: 1 port detected [ 151.971935][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 151.989422][ T5601] netlink: zone id is out of range [ 152.078721][ T5606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'. [ 152.165605][ T5607] fuse: Bad value for 'fd' [ 152.556500][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.616854][ T4255] hub 2-1:0.0: activate --> -90 [ 152.816736][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 152.856632][ T4255] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 152.906674][ T4255] usb 2-1: Failed to suspend device, error -71 [ 152.918363][ T4193] usb 2-1: USB disconnect, device number 11 [ 153.106865][ T7] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 153.128796][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.164579][ T7] usb 4-1: Product: syz [ 153.174064][ T7] usb 4-1: Manufacturer: syz [ 153.189655][ T7] usb 4-1: SerialNumber: syz [ 153.211037][ T7] usb 4-1: config 0 descriptor?? [ 153.274467][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 153.487861][ T5642] netlink: 56 bytes leftover after parsing attributes in process `syz.0.466'. [ 153.525684][ T5642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 153.539572][ T5642] netlink: 31 bytes leftover after parsing attributes in process `syz.0.466'. [ 153.557680][ T5642] netlink: 'syz.0.466': attribute type 2 has an invalid length. [ 153.582447][ T5642] netlink: 31 bytes leftover after parsing attributes in process `syz.0.466'. [ 153.816580][ T7] gspca_sonixj: reg_w1 err -110 [ 153.822021][ T7] sonixj: probe of 4-1:0.0 failed with error -110 [ 154.076605][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.241861][ T4364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.336556][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 154.382935][ T4364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.440816][ T4193] usb 4-1: USB disconnect, device number 6 [ 154.474267][ T4364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.486771][ T21] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.506573][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.521262][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 154.540985][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.573468][ T21] usb 1-1: config 0 descriptor?? [ 154.583130][ T4364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.640598][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 155.851968][ T5660] chnl_net:caif_netlink_parms(): no params data found [ 156.236636][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.250971][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.285995][ T5660] device bridge_slave_0 entered promiscuous mode [ 156.325439][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.343319][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.374386][ T5660] device bridge_slave_1 entered promiscuous mode [ 156.546805][ T3545] bcm5974 1-1:0.0: could not read from device [ 156.606529][ T3545] bcm5974 1-1:0.0: could not read from device [ 156.624284][ T21] usb 1-1: USB disconnect, device number 7 [ 156.649485][ T5660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.718305][ T5660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.967245][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 156.985500][ T5660] team0: Port device team_slave_0 added [ 157.046272][ T5722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.492'. [ 157.074091][ T5725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.492'. [ 157.161553][ T5660] team0: Port device team_slave_1 added [ 157.206698][ T4239] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 157.229716][ T4364] device hsr_slave_0 left promiscuous mode [ 157.285203][ T4364] device hsr_slave_1 left promiscuous mode [ 157.381613][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.424748][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.459597][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.467596][ T4239] usb 2-1: Using ep0 maxpacket: 32 [ 157.479701][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.491949][ T4364] device bridge_slave_1 left promiscuous mode [ 157.503353][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.534814][ T4364] device bridge_slave_0 left promiscuous mode [ 157.550090][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.592911][ T4364] device veth1_macvtap left promiscuous mode [ 157.603637][ T4364] device veth0_macvtap left promiscuous mode [ 157.623930][ T4364] device veth1_vlan left promiscuous mode [ 157.639970][ T4364] device veth0_vlan left promiscuous mode [ 157.670267][ T4295] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.766911][ T4239] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 157.870141][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.929882][ T4239] usb 2-1: Product: syz [ 157.934139][ T4239] usb 2-1: Manufacturer: syz [ 157.946507][ T4295] usb 1-1: Using ep0 maxpacket: 32 [ 157.986791][ T4239] usb 2-1: SerialNumber: syz [ 158.035170][ T4239] usb 2-1: config 0 descriptor?? [ 158.075514][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 158.108795][ T4239] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 158.118090][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.136451][ T4295] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 158.306645][ T4295] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 158.342600][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.357140][ T4295] usb 1-1: Product: syz [ 158.362114][ T4295] usb 1-1: Manufacturer: syz [ 158.377830][ T4295] usb 1-1: SerialNumber: syz [ 158.399141][ T4295] usb 1-1: config 0 descriptor?? [ 158.642588][ T4295] usb 1-1: USB disconnect, device number 8 [ 158.687142][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 158.702248][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 158.718742][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.766557][ T4239] gspca_stk1135: reg_w 0x3 err -71 [ 158.781913][ T4239] gspca_stk1135: serial bus timeout: status=0x00 [ 158.817442][ T4239] gspca_stk1135: Sensor write failed [ 158.824466][ T4239] gspca_stk1135: serial bus timeout: status=0x00 [ 158.831876][ T4239] gspca_stk1135: Sensor write failed [ 158.836955][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.838042][ T4239] gspca_stk1135: serial bus timeout: status=0x00 [ 158.854181][ T4239] gspca_stk1135: Sensor read failed [ 158.860857][ T4239] gspca_stk1135: serial bus timeout: status=0x00 [ 158.868054][ T4239] gspca_stk1135: Sensor read failed [ 158.888207][ T4239] gspca_stk1135: Detected sensor type unknown (0x0) [ 158.895661][ T4239] gspca_stk1135: serial bus timeout: status=0x00 [ 158.905429][ T4239] gspca_stk1135: Sensor read failed [ 158.916271][ T4239] gspca_stk1135: serial bus timeout: status=0x00 [ 158.934849][ T4239] gspca_stk1135: Sensor read failed [ 158.946912][ T4239] gspca_stk1135: serial bus timeout: status=0x00 [ 158.953389][ T4239] gspca_stk1135: Sensor write failed [ 158.966868][ T4239] gspca_stk1135: serial bus timeout: status=0x00 [ 158.973400][ T4239] gspca_stk1135: Sensor write failed [ 158.986226][ T4239] stk1135: probe of 2-1:0.0 failed with error -71 [ 159.031794][ T4239] usb 2-1: USB disconnect, device number 12 [ 159.046563][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 159.093697][ T4364] bond0 (unregistering): Released all slaves [ 159.240845][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.251781][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.261607][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.325078][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.339518][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.476262][ T5660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.495370][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.504134][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.547670][ T5660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.708290][ T5660] device hsr_slave_0 entered promiscuous mode [ 159.723128][ T5660] device hsr_slave_1 entered promiscuous mode [ 160.126672][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 160.142421][ T5660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.209121][ T5660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.240274][ T5660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.270338][ T5660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.412351][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 160.436005][ T5795] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.445989][ T5795] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.455110][ T5795] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.464315][ T5795] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.506626][ T13] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 160.532827][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.586329][ T13] usb 5-1: config 0 descriptor?? [ 160.628632][ T13] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 160.806160][ T5660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.867410][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.875391][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.944170][ T5660] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.995805][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.034204][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.043601][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.050912][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.061360][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.126554][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 161.179098][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.199966][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.267155][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.274824][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.282941][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.286616][ T13] gspca_sunplus: reg_w_riv err -71 [ 161.295287][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.307958][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.318133][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.329207][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.345265][ T13] sunplus: probe of 5-1:0.0 failed with error -71 [ 161.368695][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.389608][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.407019][ T13] usb 5-1: USB disconnect, device number 10 [ 161.452555][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.462288][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.478774][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.507226][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.529256][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.137798][ T5660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.192075][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.212266][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.998365][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.034315][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.110723][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.148261][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.206459][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 163.226180][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.280478][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.399925][ T5660] device veth0_vlan entered promiscuous mode [ 163.656558][ T5660] device veth1_vlan entered promiscuous mode [ 163.797183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.844418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.890537][ T5660] device veth0_macvtap entered promiscuous mode [ 163.933978][ T5660] device veth1_macvtap entered promiscuous mode [ 164.011217][ T5660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.066584][ T5660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.119770][ T5660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.159201][ T5660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.182415][ T5660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.201990][ T5660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.214372][ T5660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.234871][ T5660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.280145][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.355737][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.388048][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.514973][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.692680][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.723250][ T5660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.745249][ T5660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.803567][ T5660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.830382][ T5660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.851751][ T5660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.869169][ T5660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.889742][ T5660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.913046][ T5660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.953378][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.985180][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.011229][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.073435][ T5660] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.308939][ T5660] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.326283][ T5660] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.340732][ T5660] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.406722][ T4255] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.572904][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.635310][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.678570][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.696921][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.744074][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.789952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.826872][ T4255] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.868941][ T4255] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 165.931260][ T4255] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.956685][ T4255] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 166.012583][ T4255] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 166.206620][ T4255] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.296515][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.462628][ T4255] usb 1-1: Product: syz [ 166.532742][ T4255] usb 1-1: Manufacturer: syz [ 166.597663][ T4255] cdc_wdm 1-1:1.0: skipping garbage [ 166.673805][ T4255] cdc_wdm 1-1:1.0: skipping garbage [ 166.793674][ T4255] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 166.820706][ T4255] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.006614][ T4255] usb 1-1: USB disconnect, device number 9 [ 168.572728][ T6024] ODEBUG: Out of memory. ODEBUG disabled [ 168.616455][ T4193] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.976682][ T4193] usb 4-1: config index 0 descriptor too short (expected 30768, got 18) [ 168.996468][ T4193] usb 4-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 169.069546][ T4193] usb 4-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 169.093084][ T4193] usb 4-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 169.103539][ T4193] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 169.123977][ T4193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.556579][ T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.618371][ T4193] usb 4-1: string descriptor 0 read error: -71 [ 169.637979][ T4193] usb 4-1: USB disconnect, device number 7 [ 169.806533][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 169.927234][ T21] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 169.976564][ T21] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.156796][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 170.198434][ T21] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 170.230360][ T21] usb 1-1: Product: syz [ 170.235230][ T21] usb 1-1: Manufacturer: syz [ 170.258601][ T6069] sctp: [Deprecated]: syz.3.579 (pid 6069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.258601][ T6069] Use struct sctp_sack_info instead [ 170.317650][ T21] hub 1-1:4.0: bad descriptor, ignoring hub [ 170.336735][ T21] hub: probe of 1-1:4.0 failed with error -5 [ 170.365215][ T21] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 171.277942][ T6118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.596'. [ 171.304767][ T6118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.596'. [ 173.006624][ T1108] usb 1-1: USB disconnect, device number 10 [ 173.396533][ T21] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.656445][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 173.776547][ T21] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.789129][ T21] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.836426][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.936834][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 173.946785][ T21] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 173.955301][ T21] usb 2-1: Product: syz [ 173.960188][ T21] usb 2-1: Manufacturer: syz [ 174.022593][ T21] hub 2-1:4.0: USB hub found [ 174.226876][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.241805][ T21] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 174.272506][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.289239][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.316684][ T1108] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 174.325926][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.347676][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.365886][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.378452][ T6195] device bridge_slave_0 left promiscuous mode [ 174.383726][ T1108] usb 6-1: config 0 descriptor?? [ 174.432614][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.449026][ T1108] usbhid 6-1:0.0: can't add hid device: -22 [ 174.465760][ T1108] usbhid: probe of 6-1:0.0 failed with error -22 [ 174.565877][ T6195] device bridge_slave_1 left promiscuous mode [ 174.568227][ T4239] usb 2-1: USB disconnect, device number 13 [ 174.596174][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.633658][ T6195] bond0: (slave bond_slave_0): Releasing backup interface [ 174.655427][ T4239] usb 6-1: USB disconnect, device number 2 [ 174.708055][ T6195] bond0: (slave bond_slave_1): Releasing backup interface [ 174.785490][ T6195] team0: Port device team_slave_0 removed [ 174.855922][ T6195] team0: Port device team_slave_1 removed [ 174.869070][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.884210][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.974633][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.012956][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.136639][ T6224] device syzkaller1 entered promiscuous mode [ 175.738071][ T6239] device syzkaller0 entered promiscuous mode [ 177.170258][ T6288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.652'. [ 178.165196][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'. [ 178.686575][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 179.096524][ T4255] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.116586][ T21] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.159663][ T21] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.178510][ T21] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.188696][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.236734][ T6305] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 179.406507][ T4255] usb 4-1: Using ep0 maxpacket: 32 [ 179.760745][ T4255] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 179.795267][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.833902][ T4255] usb 4-1: Product: syz [ 179.855434][ T4255] usb 4-1: Manufacturer: syz [ 179.872295][ T4255] usb 4-1: SerialNumber: syz [ 179.940432][ T4255] usb 4-1: config 0 descriptor?? [ 180.038802][ T4255] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 180.466518][ T4255] gspca_stk1135: reg_w 0x0 err -71 [ 180.474207][ T4255] gspca_stk1135: serial bus timeout: status=0x00 [ 180.522488][ T4255] gspca_stk1135: Sensor write failed [ 180.561990][ T4255] gspca_stk1135: serial bus timeout: status=0x00 [ 180.609569][ T4255] gspca_stk1135: Sensor write failed [ 180.615327][ T4255] gspca_stk1135: serial bus timeout: status=0x00 [ 180.672589][ T4255] gspca_stk1135: Sensor read failed [ 180.684643][ T4255] gspca_stk1135: serial bus timeout: status=0x00 [ 180.730269][ T4255] gspca_stk1135: Sensor read failed [ 180.743967][ T6338] netlink: 'syz.4.667': attribute type 10 has an invalid length. [ 180.770088][ T4255] gspca_stk1135: Detected sensor type unknown (0x0) [ 180.793769][ T4255] gspca_stk1135: serial bus timeout: status=0x00 [ 180.814192][ T4255] gspca_stk1135: Sensor read failed [ 180.834723][ T4255] gspca_stk1135: serial bus timeout: status=0x00 [ 180.850297][ T4193] usb 6-1: USB disconnect, device number 3 [ 180.865511][ T4255] gspca_stk1135: Sensor read failed [ 180.893792][ T4255] gspca_stk1135: serial bus timeout: status=0x00 [ 180.929680][ T4255] gspca_stk1135: Sensor write failed [ 180.950071][ T4255] gspca_stk1135: serial bus timeout: status=0x00 [ 180.999615][ T4255] gspca_stk1135: Sensor write failed [ 181.024843][ T4255] stk1135: probe of 4-1:0.0 failed with error -71 [ 181.082996][ T4255] usb 4-1: USB disconnect, device number 8 [ 181.142333][ T6338] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 185.546489][ T4193] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 185.572047][ T6471] MPTCP: kernel_bind error, err=-22 [ 185.826602][ T4193] usb 1-1: Using ep0 maxpacket: 32 [ 185.856754][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.997073][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.053894][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.120947][ T4193] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 186.146451][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 186.170861][ T4193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.231221][ T4193] usb 1-1: config 0 descriptor?? [ 186.296679][ T21] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 186.305353][ T21] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 186.318224][ T4193] hub 1-1:0.0: USB hub found [ 186.384325][ T21] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 186.404676][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.421275][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.445407][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 186.475989][ T21] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 186.526636][ T4193] hub 1-1:0.0: 1 port detected [ 186.548546][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.657110][ T21] usb 4-1: config 0 descriptor?? [ 186.957071][ T21] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 187.022855][ T21] usb 4-1: USB disconnect, device number 9 [ 187.057164][ T21] usblp0: removed [ 187.166583][ T4193] hub 1-1:0.0: activate --> -90 [ 187.233985][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 187.392894][ T4295] usb 1-1: USB disconnect, device number 11 [ 187.406566][ T4193] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 187.546470][ T21] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 187.666439][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.846505][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 187.946532][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 187.966633][ T21] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 187.975122][ T21] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 188.081234][ T7] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 188.090639][ T7] usb 2-1: config 0 has no interface number 0 [ 188.110549][ T21] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 188.266552][ T7] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 188.300919][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.320964][ T7] usb 2-1: Product: syz [ 188.325470][ T7] usb 2-1: Manufacturer: syz [ 188.330884][ T4255] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.351110][ T7] usb 2-1: SerialNumber: syz [ 188.366584][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.388414][ T7] usb 2-1: config 0 descriptor?? [ 188.454348][ T7] as10x_usb: device has been detected [ 188.473983][ T7] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 188.534020][ T7] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 188.581894][ T7] as10x_usb: error during firmware upload part1 [ 188.596474][ T4255] usb 1-1: Using ep0 maxpacket: 16 [ 188.605404][ T7] Registered device PCTV Systems picoStick (74e) [ 188.736684][ T4255] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 188.773971][ T4255] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.801587][ T4255] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.862288][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.906590][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.996820][ T4255] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.014769][ T21] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 189.022955][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.063668][ T4255] usb 1-1: Product: syz [ 189.066448][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.086485][ T4255] usb 1-1: Manufacturer: syz [ 189.109490][ T4255] usb 1-1: SerialNumber: syz [ 189.233011][ T21] usb 4-1: config 0 descriptor?? [ 189.247818][ T4295] usb 2-1: USB disconnect, device number 14 [ 189.263023][ T21] usb 4-1: can't set config #0, error -71 [ 189.286279][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.718'. [ 189.319467][ T4295] Unregistered device PCTV Systems picoStick (74e) [ 189.330590][ T4295] as10x_usb: device has been disconnected [ 189.344423][ T21] usb 4-1: USB disconnect, device number 10 [ 189.597683][ T4255] usb 1-1: 0:2 : does not exist [ 190.096568][ T4295] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.366517][ T4295] usb 2-1: Using ep0 maxpacket: 32 [ 190.486674][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.522520][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.603903][ T4295] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.644748][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.675910][ T4295] usb 2-1: config 0 descriptor?? [ 190.725164][ T4255] usb 1-1: USB disconnect, device number 12 [ 190.727967][ T4295] hub 2-1:0.0: USB hub found [ 190.946552][ T4295] hub 2-1:0.0: 1 port detected [ 191.473660][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 191.586501][ T4193] hub 2-1:0.0: activate --> -90 [ 191.706554][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 191.776761][ T4295] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.792218][ T1108] usb 2-1: USB disconnect, device number 15 [ 191.806566][ T4193] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 191.976449][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 192.016741][ T4295] usb 4-1: Using ep0 maxpacket: 8 [ 192.096640][ T21] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.143404][ T21] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.154613][ T4295] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 192.174791][ T4295] usb 4-1: config 0 has no interface number 0 [ 192.181722][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.195515][ T21] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 192.226481][ T4255] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 192.247115][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.309443][ T21] usb 5-1: config 0 descriptor?? [ 192.346710][ T4295] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 192.384366][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.433165][ T4295] usb 4-1: Product: syz [ 192.441202][ T4295] usb 4-1: Manufacturer: syz [ 192.446066][ T4295] usb 4-1: SerialNumber: syz [ 192.462064][ T4295] usb 4-1: config 0 descriptor?? [ 192.513724][ T4295] as10x_usb: device has been detected [ 192.546989][ T4295] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 192.622242][ T4295] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 192.659701][ T4295] as10x_usb: error during firmware upload part1 [ 192.703524][ T4295] Registered device PCTV Systems picoStick (74e) [ 192.726878][ T4295] usb 4-1: USB disconnect, device number 11 [ 192.791258][ T21] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 192.846583][ T4255] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 192.874187][ T4295] Unregistered device PCTV Systems picoStick (74e) [ 192.875714][ T4295] as10x_usb: device has been disconnected [ 192.896185][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.957832][ T4255] usb 1-1: Product: syz [ 192.984185][ T4255] usb 1-1: Manufacturer: syz [ 193.003400][ T4255] usb 1-1: SerialNumber: syz [ 193.054228][ T4255] usb 1-1: config 0 descriptor?? [ 193.113872][ T1108] usb 5-1: USB disconnect, device number 11 [ 193.160448][ T6634] fido_id[6634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 193.396537][ T4255] usb 1-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 193.447420][ T4255] usb 1-1: Firmware version (0.0) predates our first public release. [ 193.471299][ T4255] usb 1-1: Please update to version 0.2 or newer [ 193.569574][ T4255] usb 1-1: atusb_probe: initialization failed, error = -71 [ 193.569885][ T4255] atusb: probe of 1-1:0.0 failed with error -71 [ 193.626614][ T4255] usb 1-1: USB disconnect, device number 13 [ 193.856623][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 194.116460][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 194.236720][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.271479][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.331219][ T21] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.368835][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.412978][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.420265][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.423865][ T21] usb 6-1: config 0 descriptor?? [ 194.517683][ T21] hub 6-1:0.0: USB hub found [ 194.736511][ T21] hub 6-1:0.0: 1 port detected [ 195.386587][ T21] hub 6-1:0.0: activate --> -90 [ 195.436541][ T4239] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 195.599769][ T4255] usb 6-1: USB disconnect, device number 4 [ 195.608121][ T21] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 195.673616][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 195.686486][ T4239] usb 1-1: Using ep0 maxpacket: 32 [ 195.806779][ T4239] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 195.821263][ T4239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.832420][ T4239] usb 1-1: config 0 descriptor?? [ 195.846915][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 195.880045][ T4239] gspca_main: sunplus-2.14.0 probing 041e:400b [ 195.976684][ T1108] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 196.106688][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 196.276506][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 196.282947][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.316631][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.339711][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.356913][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.398071][ T13] usb 5-1: config 0 descriptor?? [ 196.406724][ T4239] gspca_sunplus: reg_w_riv err -110 [ 196.412914][ T4239] sunplus: probe of 1-1:0.0 failed with error -110 [ 196.446713][ T1108] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 196.457487][ T13] hub 5-1:0.0: USB hub found [ 196.464487][ T1108] usb 4-1: config 0 has no interface number 0 [ 196.486492][ T4239] Bluetooth: hci0: command 0x0406 tx timeout [ 196.548990][ T4239] Bluetooth: hci1: command 0x0406 tx timeout [ 196.595689][ T4239] Bluetooth: hci2: command 0x0406 tx timeout [ 196.648063][ T1108] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 196.667211][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.676573][ T13] hub 5-1:0.0: 1 port detected [ 196.690628][ T4239] Bluetooth: hci3: command 0x0406 tx timeout [ 196.695878][ T1108] usb 4-1: Product: syz [ 196.695902][ T1108] usb 4-1: Manufacturer: syz [ 196.731984][ T1108] usb 4-1: SerialNumber: syz [ 196.763503][ T1108] usb 4-1: config 0 descriptor?? [ 196.832142][ T1108] as10x_usb: device has been detected [ 196.851721][ T1108] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 196.907987][ T1108] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 196.935868][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.959749][ T1108] as10x_usb: error during firmware upload part1 [ 196.967845][ T1108] Registered device PCTV Systems picoStick (74e) [ 197.036029][ T1108] usb 4-1: USB disconnect, device number 12 [ 197.081540][ T1108] Unregistered device PCTV Systems picoStick (74e) [ 197.097778][ T1108] as10x_usb: device has been disconnected [ 197.336569][ T13] hub 5-1:0.0: activate --> -90 [ 197.544468][ T1108] usb 5-1: USB disconnect, device number 12 [ 197.556510][ T13] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 198.420437][ T6720] loop6: detected capacity change from 0 to 7 [ 198.456580][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 198.486434][ T6720] Dev loop6: unable to read RDB block 7 [ 198.496994][ T6720] loop6: AHDI p3 [ 198.509919][ T6720] loop6: partition table partially beyond EOD, truncated [ 198.656453][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 198.716459][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 198.836755][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.898978][ T1108] usb 1-1: USB disconnect, device number 14 [ 198.925037][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.967150][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 198.979686][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.000864][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.057702][ T21] usb 4-1: config 0 descriptor?? [ 199.109478][ T21] hub 4-1:0.0: USB hub found [ 199.346523][ T21] hub 4-1:0.0: 1 port detected [ 199.431375][ T1108] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 199.726427][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 199.846665][ T1108] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 199.876768][ T1108] usb 1-1: config 0 has no interface number 0 [ 200.016784][ T21] hub 4-1:0.0: activate --> -90 [ 200.040606][ T1108] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 200.061094][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.091417][ T1108] usb 1-1: Product: syz [ 200.096264][ T1108] usb 1-1: Manufacturer: syz [ 200.132043][ T1108] usb 1-1: SerialNumber: syz [ 200.158665][ T1108] usb 1-1: config 0 descriptor?? [ 200.215152][ T1108] as10x_usb: device has been detected [ 200.231615][ T1108] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 200.246617][ T21] usb 4-1: USB disconnect, device number 13 [ 200.258414][ T4239] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 200.291483][ T1108] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 200.335685][ T1108] as10x_usb: error during firmware upload part1 [ 200.354086][ T1108] Registered device PCTV Systems picoStick (74e) [ 200.418029][ T4255] usb 1-1: USB disconnect, device number 15 [ 200.477453][ T4255] Unregistered device PCTV Systems picoStick (74e) [ 200.504295][ T4255] as10x_usb: device has been disconnected [ 200.526543][ T1108] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 200.936569][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.067341][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.132108][ T1108] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 201.178339][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.210612][ T1108] usb 6-1: config 0 descriptor?? [ 201.497636][ T4255] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 201.597969][ T6772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 202.046678][ T1108] hid-led: probe of 0003:0FC5:B080.0003 failed with error -71 [ 202.099408][ T1108] usb 6-1: USB disconnect, device number 5 [ 202.212288][ T21] hid-generic 0000:0003:0001.0004: unknown main item tag 0x0 [ 202.266564][ T21] hid-generic 0000:0003:0001.0004: unknown main item tag 0x0 [ 202.322896][ T21] hid-generic 0000:0003:0001.0004: hidraw0: HID v0.03 Device [syz0] on syz1 [ 202.366496][ T4255] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 202.428502][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.480820][ T4255] usb 2-1: Product: syz [ 202.500782][ T4255] usb 2-1: Manufacturer: syz [ 202.542804][ T4255] usb 2-1: SerialNumber: syz [ 202.583620][ T6778] fido_id[6778]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.648317][ T4255] usb 2-1: config 0 descriptor?? [ 202.976474][ T4255] usb 2-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 202.984925][ T4255] usb 2-1: Firmware version (0.0) predates our first public release. [ 203.103666][ T4255] usb 2-1: Please update to version 0.2 or newer [ 203.176577][ T4255] usb 2-1: atusb_probe: initialization failed, error = -71 [ 203.184436][ T4255] atusb: probe of 2-1:0.0 failed with error -71 [ 203.270158][ T4255] usb 2-1: USB disconnect, device number 16 [ 203.774195][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 203.783725][ T4193] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 203.846473][ T13] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 204.056418][ T4193] usb 4-1: Using ep0 maxpacket: 32 [ 204.106799][ T7] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 204.176618][ T4193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.246462][ T4193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.296629][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.316599][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 204.316640][ T4193] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.356106][ T4193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.366534][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 204.391502][ T13] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 204.397535][ T4193] usb 4-1: config 0 descriptor?? [ 204.416457][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.443699][ T13] usb 5-1: config 0 descriptor?? [ 204.479382][ T4193] hub 4-1:0.0: USB hub found [ 204.486589][ T7] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 204.495267][ T7] usb 1-1: config 0 has no interface number 0 [ 204.508411][ T13] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 204.517013][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 204.548430][ T13] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 204.588002][ T13] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 204.595797][ T13] usb 5-1: media controller created [ 204.614191][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.635209][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 204.643258][ T13] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 204.704027][ T6798] dibusb: i2c wr: len=61 is too big! [ 204.704027][ T6798] [ 204.706642][ T4193] hub 4-1:0.0: 1 port detected [ 204.715274][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 204.729490][ T7] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 204.755767][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.781840][ T13] dvb-usb: schedule remote query interval to 150 msecs. [ 204.798716][ T7] usb 1-1: Product: syz [ 204.803123][ T7] usb 1-1: Manufacturer: syz [ 204.809221][ T13] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 204.817545][ T7] usb 1-1: SerialNumber: syz [ 204.829087][ T13] usb 5-1: USB disconnect, device number 13 [ 204.860751][ T7] usb 1-1: config 0 descriptor?? [ 204.912312][ T7] as10x_usb: device has been detected [ 204.942309][ T7] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 204.952822][ T13] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 205.000728][ T7] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 205.016949][ T7] as10x_usb: error during firmware upload part1 [ 205.023823][ T7] Registered device PCTV Systems picoStick (74e) [ 205.112078][ T4295] usb 1-1: USB disconnect, device number 16 [ 205.187976][ T4295] Unregistered device PCTV Systems picoStick (74e) [ 205.192369][ T4295] as10x_usb: device has been disconnected [ 205.366628][ T21] hub 4-1:0.0: activate --> -90 [ 205.577619][ T13] usb 4-1: USB disconnect, device number 14 [ 205.586443][ T21] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 206.652206][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 206.735233][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.817'. [ 206.747367][ T4193] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 207.026454][ T4193] usb 4-1: Using ep0 maxpacket: 32 [ 207.056452][ T4295] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 207.306568][ T4193] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 207.316480][ T4295] usb 1-1: Using ep0 maxpacket: 8 [ 207.330757][ T4193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.376817][ T4193] usb 4-1: Product: syz [ 207.416567][ T4193] usb 4-1: Manufacturer: syz [ 207.421410][ T4193] usb 4-1: SerialNumber: syz [ 207.436596][ T4295] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 207.453759][ T4295] usb 1-1: config 0 has no interface number 0 [ 207.480194][ T4193] usb 4-1: config 0 descriptor?? [ 207.497794][ T6868] binder: BINDER_SET_CONTEXT_MGR already set [ 207.526272][ T6868] binder: 6867:6868 ioctl 4018620d 2000000002c0 returned -16 [ 207.656590][ T4295] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 207.673969][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.703059][ T4295] usb 1-1: Product: syz [ 207.723161][ T4295] usb 1-1: Manufacturer: syz [ 207.737534][ T4295] usb 1-1: SerialNumber: syz [ 207.772202][ T4295] usb 1-1: config 0 descriptor?? [ 207.779257][ T4193] snd-usb-audio: probe of 4-1:0.0 failed with error -71 [ 207.814670][ T4193] usb 4-1: USB disconnect, device number 15 [ 207.865102][ T4295] as10x_usb: device has been detected [ 207.882212][ T4295] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 207.948516][ T4295] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 207.997817][ T4295] as10x_usb: error during firmware upload part1 [ 208.025365][ T4295] Registered device PCTV Systems picoStick (74e) [ 208.062472][ T4295] usb 1-1: USB disconnect, device number 17 [ 208.097981][ T4295] Unregistered device PCTV Systems picoStick (74e) [ 208.104253][ T4295] as10x_usb: device has been disconnected [ 208.426519][ T4193] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 208.499573][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 208.499589][ T26] audit: type=1326 audit(1758993883.297:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dee8dec9 code=0x7ffc0000 [ 208.567591][ T26] audit: type=1326 audit(1758993883.297:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f12dee8dec9 code=0x7ffc0000 [ 208.608317][ T26] audit: type=1326 audit(1758993883.297:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dee8dec9 code=0x7ffc0000 [ 208.645350][ T26] audit: type=1326 audit(1758993883.297:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f12dee8dec9 code=0x7ffc0000 [ 208.681755][ T26] audit: type=1326 audit(1758993883.337:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.3.838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12dee8dec9 code=0x0 [ 208.746522][ T4193] usb 5-1: Using ep0 maxpacket: 32 [ 208.893453][ T4193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.936980][ T4193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.970688][ T4193] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 208.996130][ T4193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.024724][ T4193] usb 5-1: config 0 descriptor?? [ 209.087655][ T4193] hub 5-1:0.0: USB hub found [ 209.309869][ T4193] hub 5-1:0.0: 1 port detected [ 209.956476][ T4295] hub 5-1:0.0: activate --> -90 [ 210.194482][ T26] audit: type=1326 audit(1758993884.987:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6dfb5ec9 code=0x7ffc0000 [ 210.218923][ T4263] usb 5-1: USB disconnect, device number 14 [ 210.227748][ T4193] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 210.365481][ T26] audit: type=1326 audit(1758993884.987:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0b6dfb5ec9 code=0x7ffc0000 [ 210.497734][ T26] audit: type=1326 audit(1758993884.987:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6dfb5ec9 code=0x7ffc0000 [ 210.597584][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 210.687134][ T26] audit: type=1326 audit(1758993884.987:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0b6dfb5ec9 code=0x7ffc0000 [ 210.859484][ T26] audit: type=1326 audit(1758993884.987:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6dfb5ec9 code=0x7ffc0000 [ 210.926560][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 211.196458][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 211.366864][ T13] usb 6-1: config 0 has an invalid interface number: 130 but max is 0 [ 211.406406][ T13] usb 6-1: config 0 has no interface number 0 [ 211.607298][ T13] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 211.667172][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.707749][ T13] usb 6-1: Product: syz [ 211.712527][ T13] usb 6-1: Manufacturer: syz [ 211.766524][ T13] usb 6-1: SerialNumber: syz [ 211.826556][ T13] usb 6-1: config 0 descriptor?? [ 211.883623][ T13] as10x_usb: device has been detected [ 211.924424][ T13] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 212.027897][ T13] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 212.099937][ T13] as10x_usb: error during firmware upload part1 [ 212.156801][ T13] Registered device PCTV Systems picoStick (74e) [ 212.191084][ T13] usb 6-1: USB disconnect, device number 6 [ 212.309481][ T13] Unregistered device PCTV Systems picoStick (74e) [ 212.329416][ T13] as10x_usb: device has been disconnected [ 213.544029][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 213.544047][ T26] audit: type=1326 audit(1758993888.337:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.0.866" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcec13c9ec9 code=0x0 [ 213.758077][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 213.886424][ T4263] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 214.066634][ T21] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 214.166785][ T4263] usb 5-1: Using ep0 maxpacket: 32 [ 214.286636][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.311883][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.312460][ T7022] program syz.1.873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.332902][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 214.373771][ T4263] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.413519][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.441942][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.873'. [ 214.444410][ T4263] usb 5-1: config 0 descriptor?? [ 214.456774][ T21] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 214.466098][ T21] usb 4-1: config 0 has no interface number 0 [ 214.507939][ T4263] hub 5-1:0.0: USB hub found [ 214.637044][ T21] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 214.656432][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.665738][ T21] usb 4-1: Product: syz [ 214.677789][ T21] usb 4-1: Manufacturer: syz [ 214.685737][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.876'. [ 214.685828][ T21] usb 4-1: SerialNumber: syz [ 214.704163][ T21] usb 4-1: config 0 descriptor?? [ 214.716703][ T4263] hub 5-1:0.0: 1 port detected [ 214.779127][ T21] as10x_usb: device has been detected [ 214.818033][ T21] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 214.897405][ T21] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 214.937088][ T21] as10x_usb: error during firmware upload part1 [ 214.955820][ T21] Registered device PCTV Systems picoStick (74e) [ 214.958398][ T21] usb 4-1: USB disconnect, device number 16 [ 215.010477][ T21] Unregistered device PCTV Systems picoStick (74e) [ 215.015560][ T21] as10x_usb: device has been disconnected [ 215.158376][ T13] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 215.376797][ T7] hub 5-1:0.0: activate --> -90 [ 215.426404][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 215.556611][ T13] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 215.609060][ T13] usb 1-1: config 0 has no interface number 0 [ 215.665142][ T13] usb 1-1: too many endpoints for config 0 interface 28 altsetting 130: 55, using maximum allowed: 30 [ 215.698311][ T13] usb 1-1: config 0 interface 28 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 215.732419][ T13] usb 1-1: config 0 interface 28 has no altsetting 0 [ 215.776600][ T7] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 215.789516][ T4263] usb 5-1: USB disconnect, device number 15 [ 215.795710][ T4255] usb 5-1: Failed to suspend device, error -19 [ 215.926490][ T13] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 215.938448][ T21] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 215.954877][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.964837][ T13] usb 1-1: Product: syz [ 215.969902][ T13] usb 1-1: Manufacturer: syz [ 215.985620][ T13] usb 1-1: SerialNumber: syz [ 216.005533][ T13] usb 1-1: config 0 descriptor?? [ 216.068201][ T13] pcwd_usb: The device isn't a Human Interface Device [ 216.273344][ T4263] usb 1-1: USB disconnect, device number 18 [ 216.326542][ T21] usb 4-1: config 0 has no interfaces? [ 216.486771][ T21] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 216.517128][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.553407][ T21] usb 4-1: Product: syz [ 216.561736][ T21] usb 4-1: Manufacturer: syz [ 216.570189][ T21] usb 4-1: SerialNumber: syz [ 216.583567][ T21] usb 4-1: config 0 descriptor?? [ 216.834818][ T4263] usb 4-1: USB disconnect, device number 17 [ 216.850610][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 216.890563][ T7072] netlink: 'syz.1.893': attribute type 46 has an invalid length. [ 217.176536][ T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 217.276531][ T4255] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 217.320950][ T7090] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 217.470725][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 217.543603][ T7096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.905'. [ 217.553697][ T4255] usb 6-1: Using ep0 maxpacket: 32 [ 217.560762][ T7096] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073072017407) [ 217.572595][ T7096] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 217.596707][ T13] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 217.606584][ T13] usb 5-1: config 0 has no interface number 0 [ 217.686845][ T4255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.704699][ T4255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.716458][ T4255] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 217.727418][ T21] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 217.739304][ T4255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.765888][ T4255] usb 6-1: config 0 descriptor?? [ 217.786512][ T13] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 217.801904][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.826046][ T13] usb 5-1: Product: syz [ 217.832092][ T4255] hub 6-1:0.0: USB hub found [ 217.855163][ T13] usb 5-1: Manufacturer: syz [ 217.870954][ T13] usb 5-1: SerialNumber: syz [ 217.891648][ T13] usb 5-1: config 0 descriptor?? [ 217.946953][ T13] as10x_usb: device has been detected [ 217.954191][ T13] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 217.976568][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 217.985115][ T13] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 218.007028][ T13] as10x_usb: error during firmware upload part1 [ 218.014160][ T13] Registered device PCTV Systems picoStick (74e) [ 218.046507][ T4255] hub 6-1:0.0: 1 port detected [ 218.096538][ T21] usb 4-1: config 162 has an invalid interface number: 253 but max is 0 [ 218.142309][ T21] usb 4-1: config 162 has no interface number 0 [ 218.142791][ T13] usb 5-1: USB disconnect, device number 16 [ 218.156956][ T21] usb 4-1: config 162 interface 253 has no altsetting 0 [ 218.221497][ T13] Unregistered device PCTV Systems picoStick (74e) [ 218.229953][ T13] as10x_usb: device has been disconnected [ 218.338886][ T21] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 218.368791][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.399474][ T21] usb 4-1: Product: syz [ 218.416560][ T21] usb 4-1: Manufacturer: syz [ 218.432567][ T21] usb 4-1: SerialNumber: syz [ 218.676586][ T4255] hub 6-1:0.0: activate --> -90 [ 218.728934][ T21] go7007: probe of 4-1:162.253 failed with error -12 [ 218.766994][ T21] usb 4-1: USB disconnect, device number 18 [ 218.800135][ T7115] tipc: Started in network mode [ 218.813258][ T7115] tipc: Node identity 8e784d1c62f7, cluster identity 4711 [ 218.822099][ T7115] tipc: Enabled bearer , priority 0 [ 218.842162][ T7115] device syzkaller0 entered promiscuous mode [ 218.890707][ T7115] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 218.907365][ T4239] usb 6-1: USB disconnect, device number 7 [ 218.933038][ T4255] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 218.939847][ T7115] tipc: Resetting bearer [ 218.954583][ T7114] tipc: Resetting bearer [ 218.992212][ T7114] tipc: Disabling bearer [ 219.323501][ T7129] netlink: 32 bytes leftover after parsing attributes in process `syz.4.917'. [ 219.587906][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 219.723100][ T26] audit: type=1326 audit(1758993894.517:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 219.792625][ T26] audit: type=1326 audit(1758993894.517:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 219.833343][ T7] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 219.851767][ T7] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 219.861781][ T7] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 219.896883][ T4239] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 219.904338][ T26] audit: type=1326 audit(1758993894.517:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 219.930508][ T7] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 220.011780][ T26] audit: type=1326 audit(1758993894.517:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 220.142701][ T26] audit: type=1326 audit(1758993894.517:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15335ebec9 code=0x7ffc0000 [ 220.162043][ T7156] fido_id[7156]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.230572][ T4239] usb 2-1: Using ep0 maxpacket: 8 [ 220.236272][ T26] audit: type=1326 audit(1758993894.787:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.5.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c13d5eec9 code=0x7ffc0000 [ 220.341437][ T26] audit: type=1326 audit(1758993894.787:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.5.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c13d5eec9 code=0x7ffc0000 [ 220.347131][ T4239] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 220.433789][ T4239] usb 2-1: config 0 has no interface number 0 [ 220.476480][ T13] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 220.646859][ T4239] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 220.655998][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.694216][ T4239] usb 2-1: Product: syz [ 220.711769][ T4239] usb 2-1: Manufacturer: syz [ 220.726765][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 220.742277][ T4239] usb 2-1: SerialNumber: syz [ 220.777202][ T4239] usb 2-1: config 0 descriptor?? [ 220.842727][ T4239] as10x_usb: device has been detected [ 220.846725][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.871086][ T4239] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 220.891279][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.935067][ T13] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.961692][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.977943][ T4239] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 220.992298][ T13] usb 6-1: config 0 descriptor?? [ 221.012026][ T4239] as10x_usb: error during firmware upload part1 [ 221.058949][ T13] hub 6-1:0.0: USB hub found [ 221.076874][ T4239] Registered device PCTV Systems picoStick (74e) [ 221.116772][ T4239] usb 2-1: USB disconnect, device number 17 [ 221.174422][ T4239] Unregistered device PCTV Systems picoStick (74e) [ 221.176396][ T4239] as10x_usb: device has been disconnected [ 221.276745][ T13] hub 6-1:0.0: 1 port detected [ 221.916529][ T7] hub 6-1:0.0: activate --> -90 [ 221.946454][ T4239] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 222.006012][ T7191] netlink: 'syz.0.940': attribute type 3 has an invalid length. [ 222.128670][ T4255] usb 6-1: USB disconnect, device number 8 [ 222.136497][ T13] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 222.495861][ T7206] netlink: 51 bytes leftover after parsing attributes in process `syz.4.946'. [ 222.516499][ T4239] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 222.567140][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.613132][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 222.636500][ T4239] usb 2-1: Product: syz [ 222.692846][ T4239] usb 2-1: Manufacturer: syz [ 222.726598][ T4239] usb 2-1: SerialNumber: syz [ 222.976443][ T13] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 223.006595][ T4255] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 223.217073][ T4193] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 223.267569][ T4255] usb 5-1: Using ep0 maxpacket: 8 [ 223.346733][ T13] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 223.376677][ T13] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 223.396582][ T4255] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 223.426617][ T13] usb 6-1: config 220 has no interface number 2 [ 223.437547][ T4255] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.448817][ T13] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 223.466421][ T4193] usb 4-1: Using ep0 maxpacket: 32 [ 223.466423][ T4255] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.466453][ T4255] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.503501][ T13] usb 6-1: config 220 interface 0 has no altsetting 0 [ 223.506589][ T4239] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 223.511557][ T13] usb 6-1: config 220 interface 76 has no altsetting 0 [ 223.537787][ T4255] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.554562][ T13] usb 6-1: config 220 interface 1 has no altsetting 0 [ 223.563455][ T4255] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.574762][ T4239] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 223.582473][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.600187][ T4193] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.620557][ T4239] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 223.636683][ T4193] usb 4-1: config 0 has no interface number 0 [ 223.650964][ T4239] lan78xx: probe of 2-1:1.0 failed with error -32 [ 223.756697][ T13] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 223.776588][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.794407][ T13] usb 6-1: Product: syz [ 223.801697][ T4193] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 223.810677][ T13] usb 6-1: Manufacturer: syz [ 223.816960][ T13] usb 6-1: SerialNumber: syz [ 223.828179][ T4193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.866453][ T4193] usb 4-1: Product: syz [ 223.866915][ T4255] usb 5-1: GET_CAPABILITIES returned 0 [ 223.876496][ T4193] usb 4-1: Manufacturer: syz [ 223.876520][ T4193] usb 4-1: SerialNumber: syz [ 223.888648][ T4193] usb 4-1: config 0 descriptor?? [ 223.911126][ T4255] usbtmc 5-1:16.0: can't read capabilities [ 223.929260][ T4193] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 223.962493][ T4193] usb 4-1: selecting invalid altsetting 1 [ 223.974805][ T4193] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 223.997809][ T4193] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.018754][ T4193] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 224.036414][ T4193] usb 4-1: media controller created [ 224.064026][ T4193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.191139][ T4239] usb 5-1: USB disconnect, device number 17 [ 224.206741][ T7212] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 224.237867][ T13] usb 6-1: selecting invalid altsetting 0 [ 224.266650][ T13] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 224.273495][ T13] usb 6-1: No valid video chain found. [ 224.357682][ T13] usb 6-1: selecting invalid altsetting 0 [ 224.374001][ T13] usbtest: probe of 6-1:220.1 failed with error -22 [ 224.396664][ T13] usb 6-1: USB disconnect, device number 9 [ 224.680590][ T4255] usb 2-1: USB disconnect, device number 18 [ 225.226564][ T4193] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 225.246651][ T4193] zl10353_read_register: readreg error (reg=127, ret==-110) [ 225.267014][ T4239] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 225.302837][ T7219] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 225.336534][ T4193] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 225.408965][ T4193] usb 4-1: USB disconnect, device number 19 [ 225.516495][ T4239] usb 6-1: Using ep0 maxpacket: 32 [ 225.636746][ T4239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.661779][ T4239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.703230][ T26] audit: type=1326 audit(1758993900.497:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.4.963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15335ebec9 code=0x0 [ 225.742230][ T4239] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.781898][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 225.791724][ T4239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.864691][ T4239] usb 6-1: config 0 descriptor?? [ 225.958817][ T4239] hub 6-1:0.0: USB hub found [ 226.036456][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 226.105644][ T7267] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 226.121320][ T7267] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 226.176607][ T4239] hub 6-1:0.0: 1 port detected [ 226.184565][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 226.205373][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.396668][ T7] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 226.417458][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.430975][ T7] usb 2-1: Product: syz [ 226.435243][ T7] usb 2-1: Manufacturer: syz [ 226.463738][ T7] usb 2-1: SerialNumber: syz [ 226.495206][ T7] usb 2-1: config 0 descriptor?? [ 226.559572][ T7] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 226.836507][ T4239] hub 6-1:0.0: activate --> -90 [ 227.044835][ T4255] usb 6-1: USB disconnect, device number 10 [ 227.057849][ T4239] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 227.294317][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 227.596669][ T21] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 227.956585][ T21] usb 4-1: config index 0 descriptor too short (expected 65297, got 77) [ 228.004109][ T21] usb 4-1: config 0 has too many interfaces: 252, using maximum allowed: 32 [ 228.043878][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.120279][ T21] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 252 [ 228.336600][ T21] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 228.357729][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.394422][ T21] usb 4-1: Product: syz [ 228.400021][ T21] usb 4-1: Manufacturer: syz [ 228.412103][ T21] usb 4-1: SerialNumber: syz [ 228.448220][ T21] usb 4-1: config 0 descriptor?? [ 228.456492][ T4193] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 228.696552][ T7] snd_usb_toneport 2-1:0.0: set_interface failed [ 228.717031][ T4193] usb 6-1: Using ep0 maxpacket: 16 [ 228.747017][ T7] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 228.786667][ T7] snd_usb_toneport: probe of 2-1:0.0 failed with error -71 [ 228.793963][ T26] audit: type=1400 audit(1758993903.587:112): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7292 comm="syz.3.979" [ 228.846655][ T4193] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 228.872478][ T7] usb 2-1: USB disconnect, device number 19 [ 229.046825][ T4193] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 229.071981][ T4193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.102969][ T4193] usb 6-1: Product: syz [ 229.133557][ T4193] usb 6-1: Manufacturer: syz [ 229.154525][ T4193] usb 6-1: SerialNumber: syz [ 229.196233][ T4193] usb 6-1: config 0 descriptor?? [ 229.500669][ T4193] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 229.526555][ T4193] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 229.565468][ T4193] usb 6-1: USB disconnect, device number 11 [ 229.718215][ T4255] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 229.996495][ T4255] usb 2-1: Using ep0 maxpacket: 32 [ 230.116996][ T4255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.164820][ T4255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.207347][ T4255] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.256785][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.363650][ T4255] usb 2-1: config 0 descriptor?? [ 230.386801][ T26] audit: type=1326 audit(1758993905.187:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 230.477618][ T4255] hub 2-1:0.0: USB hub found [ 230.512192][ T26] audit: type=1326 audit(1758993905.187:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 230.541514][ T26] audit: type=1326 audit(1758993905.187:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 230.565583][ T26] audit: type=1326 audit(1758993905.187:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 230.598810][ T26] audit: type=1326 audit(1758993905.187:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 230.682297][ T26] audit: type=1326 audit(1758993905.187:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 230.696600][ T4255] hub 2-1:0.0: 1 port detected [ 230.730976][ T26] audit: type=1326 audit(1758993905.187:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 230.786080][ T26] audit: type=1326 audit(1758993905.187:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 230.901825][ T26] audit: type=1326 audit(1758993905.187:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 231.013717][ T26] audit: type=1326 audit(1758993905.187:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 231.085462][ T26] audit: type=1326 audit(1758993905.187:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 231.117995][ T26] audit: type=1326 audit(1758993905.187:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 231.119214][ T7364] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1007'. [ 231.150972][ T26] audit: type=1326 audit(1758993905.187:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 231.201611][ T26] audit: type=1326 audit(1758993905.187:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 231.253735][ T26] audit: type=1326 audit(1758993905.187:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 231.293685][ T26] audit: type=1326 audit(1758993905.187:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec1365f79 code=0x7ffc0000 [ 231.294054][ T21] usb 4-1: USB disconnect, device number 20 [ 231.396521][ T7] hub 2-1:0.0: activate --> -90 [ 231.435673][ T7364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.516231][ T7364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.585227][ T7364] bond0 (unregistering): Released all slaves [ 231.625898][ T7] usb 2-1: USB disconnect, device number 20 [ 231.632546][ T4255] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 231.853800][ T7385] loop2: detected capacity change from 0 to 7 [ 231.877838][ T4614] Dev loop2: unable to read RDB block 7 [ 231.915884][ T4614] loop2: unable to read partition table [ 231.943679][ T4614] loop2: partition table beyond EOD, truncated [ 232.007539][ T7385] Dev loop2: unable to read RDB block 7 [ 232.015492][ T7385] loop2: unable to read partition table [ 232.032582][ T7385] loop2: partition table beyond EOD, truncated [ 232.050825][ T7385] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.080192][ T21] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.326807][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 232.349877][ T7391] tipc: Failed to obtain node identity [ 232.366631][ T7391] tipc: Enabling of bearer rejected, failed to enable media [ 232.456678][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.487220][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.676553][ T21] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 232.694224][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.714887][ T21] usb 5-1: Product: syz [ 232.719556][ T21] usb 5-1: Manufacturer: syz [ 232.734082][ T21] usb 5-1: SerialNumber: syz [ 232.776276][ T21] usb 5-1: config 0 descriptor?? [ 232.839132][ T21] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 233.057602][ T21] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 233.070652][ T21] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 233.092929][ T21] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 233.262073][ T21] usb 5-1: USB disconnect, device number 18 [ 234.176536][ T4239] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 234.446593][ T4239] usb 5-1: Using ep0 maxpacket: 32 [ 234.567390][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.584488][ T21] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 234.630889][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.674879][ T4239] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.714951][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.762760][ T4239] usb 5-1: config 0 descriptor?? [ 234.817313][ T4239] hub 5-1:0.0: USB hub found [ 234.986607][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.006430][ T21] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.036500][ T4239] hub 5-1:0.0: 1 port detected [ 235.044321][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.111143][ T21] usb 2-1: config 0 descriptor?? [ 235.181726][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 235.616592][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 235.666641][ T4239] hub 5-1:0.0: activate --> -90 [ 235.671669][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 235.736654][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 235.796570][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 235.866577][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 235.897286][ T4295] usb 5-1: USB disconnect, device number 19 [ 235.916646][ T4239] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 235.936774][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 235.996488][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 236.056670][ T21] pwc: recv_control_msg error -32 req 02 val 2100 [ 236.080102][ T7458] Cannot find add_set index 1 as target [ 236.116607][ T21] pwc: recv_control_msg error -32 req 04 val 1500 [ 236.167719][ T21] pwc: recv_control_msg error -32 req 02 val 2500 [ 236.446488][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 236.476618][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 236.499249][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.506608][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 236.521938][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.545490][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.556506][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 236.570054][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.576795][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 236.589097][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.600922][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.613564][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.623321][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.639466][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.644153][ T21] pwc: Registered as video103. [ 236.654866][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 236.663264][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 236.722681][ T21] usb 2-1: USB disconnect, device number 21 [ 237.776416][ T4263] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 238.066404][ T4263] usb 5-1: Using ep0 maxpacket: 32 [ 238.236489][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.277314][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.337820][ T4263] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.388731][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.438859][ T4263] usb 5-1: config 0 descriptor?? [ 238.487644][ T4263] hub 5-1:0.0: USB hub found [ 238.696572][ T4263] hub 5-1:0.0: 1 port detected [ 239.346671][ T4263] hub 5-1:0.0: activate --> -90 [ 239.581188][ T7] usb 5-1: USB disconnect, device number 20 [ 239.592875][ T4263] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 239.983261][ T7548] device syzkaller1 entered promiscuous mode [ 242.156513][ T4255] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 242.456486][ T4255] usb 5-1: Using ep0 maxpacket: 32 [ 242.616509][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.643636][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.729164][ T4255] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.785754][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.892438][ T4255] usb 5-1: config 0 descriptor?? [ 242.963765][ T4255] hub 5-1:0.0: USB hub found [ 243.084691][ T7606] program syz.3.1093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.166477][ T4255] hub 5-1:0.0: 1 port detected [ 243.796508][ T4263] hub 5-1:0.0: activate --> -90 [ 244.014502][ T7] usb 5-1: USB disconnect, device number 21 [ 244.021618][ T4263] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 244.036457][ T7627] usb usb8: usbfs: process 7627 (syz.3.1102) did not claim interface 0 before use [ 244.446665][ T7] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 244.474801][ T4295] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 244.846659][ T7] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.900105][ T7] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 244.955689][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.000208][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 245.016576][ T4295] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 245.032128][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.092150][ T4295] usb 2-1: Product: syz [ 245.099412][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 245.111852][ T4295] usb 2-1: Manufacturer: syz [ 245.123662][ T4295] usb 2-1: SerialNumber: syz [ 245.187198][ T4295] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 245.366591][ T7] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.411770][ T7] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.523648][ T7] usb 4-1: Product: syz [ 245.553167][ T7] usb 4-1: Manufacturer: syz [ 245.637350][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 245.656415][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 245.706917][ T7] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 245.740235][ T7] cdc_wdm 4-1:1.0: Unknown control protocol [ 245.797308][ T4295] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 246.041086][ T7670] device netdevsim0 entered promiscuous mode [ 246.406785][ T21] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 246.490349][ T7] usb 4-1: USB disconnect, device number 21 [ 246.532400][ T4193] usb 2-1: USB disconnect, device number 22 [ 246.656422][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 246.776628][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.795902][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.824166][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 246.844685][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.886501][ T4295] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 246.893689][ T4295] ath9k_htc: Failed to initialize the device [ 246.907560][ T21] usb 5-1: config 0 descriptor?? [ 246.937524][ T4193] usb 2-1: ath9k_htc: USB layer deinitialized [ 246.947714][ T21] hub 5-1:0.0: USB hub found [ 247.166490][ T21] hub 5-1:0.0: 1 port detected [ 247.818078][ T21] hub 5-1:0.0: activate --> -90 [ 248.028149][ T4263] usb 5-1: USB disconnect, device number 22 [ 248.047352][ T21] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 248.351148][ T7734] program syz.5.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.434243][ T7738] delete_channel: no stack [ 249.466696][ T7756] tipc: Enabled bearer , priority 0 [ 249.507306][ T7756] device syzkaller0 entered promiscuous mode [ 249.584236][ T7756] tipc: Resetting bearer [ 249.635099][ T7755] tipc: Resetting bearer [ 249.693128][ T7755] tipc: Disabling bearer [ 250.486505][ T4295] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 250.736512][ T4295] usb 2-1: Using ep0 maxpacket: 32 [ 250.856634][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.886962][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.953484][ T4295] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.970989][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.995111][ T4295] usb 2-1: config 0 descriptor?? [ 251.047403][ T4295] hub 2-1:0.0: USB hub found [ 251.256523][ T4295] hub 2-1:0.0: 1 port detected [ 251.263779][ T21] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 251.716616][ T21] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.741005][ T21] usb 1-1: config 0 has no interface number 0 [ 251.917025][ T4295] hub 2-1:0.0: activate --> -90 [ 251.936612][ T21] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 252.002339][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.016164][ T21] usb 1-1: Product: syz [ 252.027085][ T21] usb 1-1: Manufacturer: syz [ 252.035832][ T21] usb 1-1: SerialNumber: syz [ 252.059768][ T21] usb 1-1: config 0 descriptor?? [ 252.140548][ T4239] usb 2-1: USB disconnect, device number 23 [ 252.147151][ T4295] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 252.316545][ T21] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 252.356823][ T21] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 252.393840][ T21] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 252.426434][ T21] usb 1-1: media controller created [ 252.527158][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.101345][ T7815] ptrace attach of "./syz-executor exec"[4182] was attempted by "./syz-executor exec"[7815] [ 253.112568][ T7815] dns_resolver: Unsupported server list version (0) [ 253.124338][ T7815] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 253.571028][ T7830] tipc: Started in network mode [ 253.596746][ T7830] tipc: Node identity , cluster identity 4711 [ 253.621433][ T7830] tipc: Failed to obtain node identity [ 253.642479][ T7830] tipc: Enabling of bearer rejected, failed to enable media [ 253.676497][ T21] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 254.176844][ T21] usb 1-1: USB disconnect, device number 19 [ 254.849225][ T21] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 254.866936][ T4263] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 255.128720][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 255.256638][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.286775][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.300119][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.311506][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.339238][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.371805][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.415454][ T21] usb 1-1: config 0 descriptor?? [ 255.470568][ T21] hub 1-1:0.0: USB hub found [ 255.554726][ T4263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.686876][ T21] hub 1-1:0.0: 1 port detected [ 255.795801][ T4263] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.859731][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.867667][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.893652][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.011246][ T4263] usb 5-1: config 0 descriptor?? [ 256.326736][ T21] hub 1-1:0.0: activate --> -90 [ 256.522521][ T4263] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 256.537448][ T4239] usb 1-1: USB disconnect, device number 20 [ 256.556461][ T21] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 256.565412][ T4263] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 256.665437][ T4263] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 258.290743][ T7893] __nla_validate_parse: 45 callbacks suppressed [ 258.290763][ T7893] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1198'. [ 258.682318][ T7901] device syzkaller0 entered promiscuous mode [ 258.692691][ T7] usb 5-1: USB disconnect, device number 23 [ 258.806467][ T13] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 259.076405][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 259.206704][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.228610][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.276436][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.356642][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.463869][ T13] usb 4-1: config 0 descriptor?? [ 259.516525][ T7908] device netdevsim0 entered promiscuous mode [ 259.548342][ T13] hub 4-1:0.0: USB hub found [ 259.769092][ T13] hub 4-1:0.0: 1 port detected [ 260.446496][ T13] hub 4-1:0.0: activate --> -90 [ 260.468296][ T7927] program syz.5.1210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.682027][ T7] usb 4-1: USB disconnect, device number 22 [ 260.688515][ T13] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 261.068052][ T7936] input: syz1 as /devices/virtual/input/input12 [ 261.656561][ T4239] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 262.046503][ T4239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.076470][ T4239] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.150292][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.160586][ T26] kauditd_printk_skb: 943 callbacks suppressed [ 262.160607][ T26] audit: type=1326 audit(1758993936.960:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.1.1227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b6dfb5ec9 code=0x0 [ 262.225753][ T4239] usb 4-1: config 0 descriptor?? [ 262.277998][ T4239] pwc: Askey VC010 type 2 USB webcam detected. [ 262.476391][ T21] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 262.486955][ T7977] netlink: set zone limit has 8 unknown bytes [ 262.716510][ T4239] pwc: recv_control_msg error -32 req 02 val 2b00 [ 262.746540][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 262.766647][ T4239] pwc: recv_control_msg error -32 req 02 val 2700 [ 262.816447][ T4239] pwc: recv_control_msg error -32 req 02 val 2c00 [ 262.860153][ T7984] netlink: 'syz.5.1234': attribute type 10 has an invalid length. [ 262.866771][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.880737][ T4239] pwc: recv_control_msg error -32 req 04 val 1000 [ 262.924543][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.930800][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.936686][ T4239] pwc: recv_control_msg error -32 req 04 val 1300 [ 262.947047][ T7984] syz.5.1234 (7984) used greatest stack depth: 20320 bytes left [ 262.974695][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.988197][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 263.006583][ T4239] pwc: recv_control_msg error -32 req 04 val 1400 [ 263.021098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.041664][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.066463][ T4239] pwc: recv_control_msg error -32 req 02 val 2000 [ 263.112167][ T21] usb 1-1: config 0 descriptor?? [ 263.128994][ T4239] pwc: recv_control_msg error -32 req 02 val 2100 [ 263.157648][ T21] hub 1-1:0.0: USB hub found [ 263.176448][ T4239] pwc: recv_control_msg error -32 req 04 val 1500 [ 263.216387][ T4239] pwc: recv_control_msg error -32 req 02 val 2500 [ 263.276435][ T4239] pwc: recv_control_msg error -32 req 02 val 2400 [ 263.376503][ T21] hub 1-1:0.0: 1 port detected [ 263.533347][ T7996] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 263.536557][ T4239] pwc: recv_control_msg error -71 req 02 val 2900 [ 263.576470][ T4239] pwc: recv_control_msg error -71 req 02 val 2800 [ 263.590278][ T7996] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 263.604672][ T4239] pwc: recv_control_msg error -71 req 04 val 1100 [ 263.605874][ T7996] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 263.646622][ T4239] pwc: recv_control_msg error -71 req 04 val 1200 [ 263.656242][ T4239] pwc: Registered as video103. [ 263.664874][ T7998] device gretap1 entered promiscuous mode [ 263.686038][ T4239] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 263.727298][ T7998] bond1: (slave gretap1): making interface the new active one [ 263.738323][ T7998] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 263.764359][ T7999] device macvlan2 entered promiscuous mode [ 263.777863][ T4239] usb 4-1: USB disconnect, device number 23 [ 263.800007][ T7999] device bond1 entered promiscuous mode [ 263.840812][ T7999] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 263.866106][ T7999] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 263.888220][ T7999] device bond1 left promiscuous mode [ 264.026439][ T21] hub 1-1:0.0: activate --> -90 [ 264.183626][ T8010] input: syz1 as /devices/virtual/input/input14 [ 264.238811][ T7] usb 1-1: USB disconnect, device number 21 [ 264.246531][ T21] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 265.432168][ T8051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1257'. [ 266.518118][ T8062] loop2: detected capacity change from 0 to 7 [ 266.533467][ T4614] Dev loop2: unable to read RDB block 7 [ 266.545248][ T4614] loop2: unable to read partition table [ 266.563523][ T4614] loop2: partition table beyond EOD, truncated [ 266.699907][ T8062] Dev loop2: unable to read RDB block 7 [ 266.771780][ T8062] loop2: unable to read partition table [ 266.785180][ T8062] loop2: partition table beyond EOD, truncated [ 266.802424][ T8062] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 267.866475][ T23] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 267.946069][ T8081] netlink: 'syz.3.1268': attribute type 4 has an invalid length. [ 268.127933][ T8089] device syzkaller1 entered promiscuous mode [ 268.187943][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 268.326626][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.349108][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.384522][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.424890][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.513789][ T23] usb 5-1: config 0 descriptor?? [ 268.577262][ T23] hub 5-1:0.0: USB hub found [ 268.686445][ T4263] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 268.786638][ T23] hub 5-1:0.0: 1 port detected [ 268.956401][ T4263] usb 6-1: Using ep0 maxpacket: 16 [ 269.076493][ T4263] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.103000][ T4263] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 269.163801][ T4263] usb 6-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 269.203365][ T4263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.217688][ T4263] usb 6-1: config 0 descriptor?? [ 269.258424][ T4263] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 269.436537][ T23] hub 5-1:0.0: activate --> -90 [ 269.448542][ T8111] netlink: 'syz.3.1279': attribute type 12 has an invalid length. [ 269.486453][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 269.505767][ T8111] netlink: 'syz.3.1279': attribute type 29 has an invalid length. [ 269.513762][ T8111] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1279'. [ 269.575009][ T8111] netlink: 'syz.3.1279': attribute type 2 has an invalid length. [ 269.612158][ T8111] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1279'. [ 269.643294][ T13] usb 5-1: USB disconnect, device number 24 [ 269.656473][ T23] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 269.736384][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 269.856617][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.903373][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.989785][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.038893][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.106428][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.141136][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.456430][ T7] usb 1-1: GET_CAPABILITIES returned 0 [ 270.462495][ T7] usbtmc 1-1:16.0: can't read capabilities [ 270.956657][ T4263] usb 6-1: USB disconnect, device number 12 [ 271.456362][ T4263] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 271.531185][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'. [ 271.716437][ T4263] usb 6-1: Using ep0 maxpacket: 32 [ 271.886733][ T4263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.919325][ T4263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.991190][ T4263] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 272.012540][ T4263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.035798][ T4263] usb 6-1: config 0 descriptor?? [ 272.097788][ T4263] hub 6-1:0.0: USB hub found [ 272.316441][ T4263] hub 6-1:0.0: 1 port detected [ 272.396416][ T13] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 272.636510][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 272.766572][ T13] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 272.815381][ T13] usb 2-1: config 0 has no interface number 0 [ 272.906937][ T13] usb 2-1: config 0 interface 136 has no altsetting 0 [ 272.933190][ T21] usb 1-1: USB disconnect, device number 22 [ 273.066738][ T4263] hub 6-1:0.0: activate --> -90 [ 273.206618][ T13] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0103, bcdDevice=ec.54 [ 273.238312][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.286339][ T13] usb 2-1: Product: syz [ 273.301114][ T13] usb 2-1: Manufacturer: syz [ 273.305890][ T13] usb 2-1: SerialNumber: syz [ 273.341005][ T13] usb 2-1: config 0 descriptor?? [ 273.376094][ T4239] usb 6-1: USB disconnect, device number 13 [ 273.386934][ T4263] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 273.408028][ T13] ftdi_sio 2-1:0.136: FTDI USB Serial Device converter detected [ 273.455674][ T13] usb 2-1: Detected FT-X [ 273.848350][ T26] audit: type=1326 audit(1758993948.650:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.1317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcec13c9ec9 code=0x0 [ 274.147798][ T8213] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1320'. [ 274.216475][ T13] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 274.246435][ T13] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 274.316475][ T13] ftdi_sio 2-1:0.136: GPIO initialisation failed: -71 [ 274.364131][ T13] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 274.442863][ T13] usb 2-1: USB disconnect, device number 24 [ 274.519611][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 274.562220][ T13] ftdi_sio 2-1:0.136: device disconnected [ 275.026369][ T21] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 275.300515][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 275.426499][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.458226][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.506088][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.543024][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.602806][ T21] usb 4-1: config 0 descriptor?? [ 275.748341][ T21] hub 4-1:0.0: USB hub found [ 275.856389][ T4239] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 275.956542][ T21] hub 4-1:0.0: 1 port detected [ 276.246732][ T4239] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 276.267516][ T4239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 276.329078][ T4191] ------------[ cut here ]------------ [ 276.335274][ T4191] WARNING: CPU: 0 PID: 4191 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 276.349462][ T4191] Modules linked in: [ 276.353522][ T4191] CPU: 0 PID: 4191 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 276.361487][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.371854][ T4191] Workqueue: hci4 hci_conn_timeout [ 276.377178][ T4191] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 276.382903][ T4191] Code: 69 8d e8 64 ac f0 f8 48 8b 35 45 0b 9e 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e6 7f 81 f8 e8 31 44 ac f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 276.404062][ T4191] RSP: 0018:ffffc9000341fc08 EFLAGS: 00010293 [ 276.410531][ T4191] RAX: ffffffff88cb86ef RBX: ffff88801f8fa138 RCX: ffff888027781dc0 [ 276.418688][ T4191] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 276.427071][ T4191] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed1003f1f403 [ 276.435709][ T4191] R10: ffffed1003f1f403 R11: 1ffff11003f1f402 R12: dffffc0000000000 [ 276.443987][ T4191] R13: dffffc0000000000 R14: ffff88801f8fa000 R15: ffff88801f8fa010 [ 276.452467][ T4191] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 276.462488][ T4191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.469404][ T4191] CR2: 0000200000404030 CR3: 000000001eb74000 CR4: 00000000003506f0 [ 276.478394][ T4191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.487239][ T4191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.496448][ T4191] Call Trace: [ 276.500223][ T4191] [ 276.503312][ T4191] process_one_work+0x863/0x1000 [ 276.508926][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 276.515508][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 276.521737][ T4191] ? _raw_spin_lock_irq+0xab/0xe0 [ 276.527785][ T4191] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 276.534363][ T4191] ? wq_worker_running+0x97/0x170 [ 276.540743][ T4191] worker_thread+0xaa8/0x12a0 [ 276.545503][ T4191] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 276.552430][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 276.558338][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 276.564552][ T4191] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 276.571007][ T4191] kthread+0x436/0x520 [ 276.577045][ T4191] ? rcu_lock_release+0x20/0x20 [ 276.582410][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 276.587658][ T4191] ret_from_fork+0x1f/0x30 [ 276.592450][ T4191] [ 276.595986][ T4191] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.603976][ T4191] CPU: 0 PID: 4191 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 276.611543][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.621734][ T4191] Workqueue: hci4 hci_conn_timeout [ 276.627060][ T4191] Call Trace: [ 276.630354][ T4191] [ 276.633446][ T4191] dump_stack_lvl+0x168/0x230 [ 276.638175][ T4191] ? show_regs_print_info+0x20/0x20 [ 276.643505][ T4191] ? load_image+0x3b0/0x3b0 [ 276.648052][ T4191] panic+0x2c9/0x7f0 [ 276.652074][ T4191] ? bpf_jit_dump+0xd0/0xd0 [ 276.656594][ T4191] ? ret_from_fork+0x1f/0x30 [ 276.661335][ T4191] ? hci_conn_timeout+0x24f/0x450 [ 276.666476][ T4191] __warn+0x248/0x2b0 [ 276.670868][ T4191] ? hci_conn_timeout+0x24f/0x450 [ 276.676004][ T4191] report_bug+0x1b7/0x2e0 [ 276.680398][ T4191] handle_bug+0x3a/0x70 [ 276.684588][ T4191] exc_invalid_op+0x16/0x40 [ 276.689195][ T4191] asm_exc_invalid_op+0x16/0x20 [ 276.694191][ T4191] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 276.700127][ T4191] Code: 69 8d e8 64 ac f0 f8 48 8b 35 45 0b 9e 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e6 7f 81 f8 e8 31 44 ac f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 276.720283][ T4191] RSP: 0018:ffffc9000341fc08 EFLAGS: 00010293 [ 276.727115][ T4191] RAX: ffffffff88cb86ef RBX: ffff88801f8fa138 RCX: ffff888027781dc0 [ 276.736061][ T4191] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 276.744436][ T4191] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed1003f1f403 [ 276.752533][ T4191] R10: ffffed1003f1f403 R11: 1ffff11003f1f402 R12: dffffc0000000000 [ 276.762245][ T4191] R13: dffffc0000000000 R14: ffff88801f8fa000 R15: ffff88801f8fa010 [ 276.771297][ T4191] ? hci_conn_timeout+0x24f/0x450 [ 276.776918][ T4191] ? hci_conn_timeout+0x24f/0x450 [ 276.782177][ T4191] process_one_work+0x863/0x1000 [ 276.787176][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 276.793115][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 276.799175][ T4191] ? _raw_spin_lock_irq+0xab/0xe0 [ 276.805163][ T4191] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 276.811407][ T4191] ? wq_worker_running+0x97/0x170 [ 276.817098][ T4191] worker_thread+0xaa8/0x12a0 [ 276.822525][ T4191] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 276.829073][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 276.835223][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 276.840774][ T4191] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 276.847996][ T4191] kthread+0x436/0x520 [ 276.852429][ T4191] ? rcu_lock_release+0x20/0x20 [ 276.857522][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 276.862622][ T4191] ret_from_fork+0x1f/0x30 [ 276.867071][ T4191] [ 276.870481][ T4191] Kernel Offset: disabled [ 276.875414][ T4191] Rebooting in 86400 seconds..