last executing test programs: 47.985483303s ago: executing program 2 (id=1854): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 47.748433949s ago: executing program 2 (id=1857): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xffffffff}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) 47.472511853s ago: executing program 2 (id=1860): ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = userfaultfd(0x800) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r7, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) 47.045617933s ago: executing program 2 (id=1862): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 45.777051032s ago: executing program 2 (id=1865): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x7}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 45.650190332s ago: executing program 2 (id=1867): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 20.731509533s ago: executing program 3 (id=1936): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073110a0000000000871000000200000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x41e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xffffffffffffff56, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001e000102000000f7ffff000007000002529947895c94ddf5c783f0eeadfb9e7fbba502d7032d1be66ccf7c26eb862dd3b9bb9bc5c56fa9314f8df18f4170aa8dd10f0eb6c4641f02e636d03515fc9bb9dae53e12006f231cd0a8944eda6967124cae8d57711c038b045d105741ca6f3a92f250d3cef14a0a3b859bfb66a0827b77759f5304977e155c82acaf936f12bd6b3e606efd54cc511bb2a723be033f594bccda743c715e611ecdff0d231e366783041eb7eafa31cc3d37cee4aebefde5f43246c754", @ANYRES64, @ANYBLOB="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"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4, 0x40}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fcffffdf000000000000000085000000410000007869ced218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x6) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f0000000300), 0x4) socket$inet(0x2, 0x3, 0x6) 18.985825726s ago: executing program 0 (id=1938): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x80000000008) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xfffffffc}], 0x2, 0x10, 0x0) 18.641759319s ago: executing program 0 (id=1939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 16.632543067s ago: executing program 3 (id=1942): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/174, 0xae) 15.41673773s ago: executing program 3 (id=1944): socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a"], 0xc8}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14.664210087s ago: executing program 0 (id=1947): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="4c95f733c5d33b4e84a071925bc880bc3e8f6cbdb74077c5d16334a448fa47e198", @ANYBLOB="000826bd7000bedbdf253a00000076e1c91cadbc15527c95c83ca817cd369e03adefed0cb899149e6d6128"], 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r7, 0x1}) 10.249999514s ago: executing program 1 (id=1950): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000000)={0x2, {0xc, 0x6, 0x6, 0x101, 0x100}}) 10.041280993s ago: executing program 1 (id=1951): syz_socket_connect_nvme_tcp() 9.989511083s ago: executing program 1 (id=1952): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6c5602, 0x0) fchdir(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) process_mrelease(r0, 0x0) 8.617676152s ago: executing program 1 (id=1953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x4000000}, 0x0) 7.391076223s ago: executing program 0 (id=1955): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000006c0)={0x60, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4.430542711s ago: executing program 4 (id=1958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff1811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000ffffff73000000008500000005000000bf09edffffffffff54090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000e3c1b05ac39831f96afeffd43f2583036b33e8cf3105f81d5b6809dcc66451ddf78f839aea34f88e10dd6c391e76"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x20, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) io_submit(0x0, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) r6 = signalfd4(r5, &(0x7f0000000640)={[0x4]}, 0x8, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ecffffffd0fc00000000a00000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xa, &(0x7f0000000100)=""/10, 0x41000, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x2, 0xa1, 0x9b52}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0x6f3b23fc}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, &(0x7f0000001100), 0x0, &(0x7f0000001140)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xfffffffffffffe2f, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2a, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/38}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20060041) 4.314082239s ago: executing program 0 (id=1959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xb}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "401d0346"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 2.83689781s ago: executing program 4 (id=1960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) writev(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x4}]}, 0x68}}, 0x0) 2.765731377s ago: executing program 3 (id=1961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) 1.741409842s ago: executing program 1 (id=1962): syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) 1.623369692s ago: executing program 1 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) 1.408932268s ago: executing program 4 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0xa8}}, 0x0) 1.338637253s ago: executing program 4 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000001380)={0x4, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 545.86481ms ago: executing program 0 (id=1966): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/174, 0xae) 481.847866ms ago: executing program 3 (id=1967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x38, r1, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) 481.711967ms ago: executing program 4 (id=1968): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) 234.029759ms ago: executing program 3 (id=1969): r0 = syz_usbip_server_init(0x5) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x40102) writev(r1, &(0x7f0000000840), 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x40004) write$usbip_server(r0, &(0x7f00000001c0)=@ret_unlink={{0x4, 0xfffffff7, 0x0, 0x0, 0x9}}, 0x30) 0s ago: executing program 4 (id=1970): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x11, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, &(0x7f0000000e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3875}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x3, @string={0x3, 0x3, 'K'}}, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): am0 [ 103.695944][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.723245][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.723385][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.787292][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.788288][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.874477][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.917771][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.918585][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.985775][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.986161][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.112498][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.454060][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.463991][ T5796] veth0_vlan: entered promiscuous mode [ 104.531077][ T5796] veth1_vlan: entered promiscuous mode [ 104.567405][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.726368][ T5796] veth0_macvtap: entered promiscuous mode [ 104.771006][ T5796] veth1_macvtap: entered promiscuous mode [ 104.801860][ T5799] veth0_vlan: entered promiscuous mode [ 104.863682][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.886418][ T5799] veth1_vlan: entered promiscuous mode [ 104.894166][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.936728][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.994147][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.014253][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.021407][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.031951][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.033738][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.197157][ T5799] veth0_macvtap: entered promiscuous mode [ 105.263595][ T5803] veth0_vlan: entered promiscuous mode [ 105.279784][ T5799] veth1_macvtap: entered promiscuous mode [ 105.347984][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.348008][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.362441][ T5803] veth1_vlan: entered promiscuous mode [ 105.424240][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.474869][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.492667][ T5801] veth0_vlan: entered promiscuous mode [ 105.495202][ T5804] veth0_vlan: entered promiscuous mode [ 105.512354][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.512376][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.537608][ T4289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.546289][ T4289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.575647][ T4289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.584828][ T5801] veth1_vlan: entered promiscuous mode [ 105.587934][ T4289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.591665][ T5804] veth1_vlan: entered promiscuous mode [ 105.677110][ T5803] veth0_macvtap: entered promiscuous mode [ 105.751142][ T5803] veth1_macvtap: entered promiscuous mode [ 105.976214][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.989472][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.989493][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.001444][ T5801] veth0_macvtap: entered promiscuous mode [ 106.018240][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.025884][ T5804] veth0_macvtap: entered promiscuous mode [ 106.067327][ T5801] veth1_macvtap: entered promiscuous mode [ 106.086563][ T5804] veth1_macvtap: entered promiscuous mode [ 106.095049][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.095067][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.105073][ T1306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.117712][ T1306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.124732][ T1306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.165402][ T1306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.201488][ T5859] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.226111][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.236199][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.251245][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.311110][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.336593][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.342000][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.368948][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 106.377049][ T5859] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 106.377077][ T5859] usb 4-1: config 0 has no interface number 0 [ 106.377393][ T5859] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 106.383750][ T5859] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 106.383790][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.383810][ T5859] usb 4-1: Product: syz [ 106.383825][ T5859] usb 4-1: Manufacturer: syz [ 106.383839][ T5859] usb 4-1: SerialNumber: syz [ 106.470458][ T5859] usb 4-1: config 0 descriptor?? [ 106.480690][ T5909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.497885][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.535729][ T4289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.563246][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.588540][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.699706][ T5909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.709380][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.786271][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.795056][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.061217][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.061238][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.298253][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.298277][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.459296][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.459320][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.643342][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.643365][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.816381][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.816404][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.965655][ T5923] batman_adv: batadv0: Adding interface: dummy0 [ 107.965676][ T5923] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.965960][ T5923] batman_adv: batadv0: Interface activated: dummy0 [ 108.055723][ T5924] batadv0: mtu less than device minimum [ 108.067248][ T5924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.083670][ T5924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.092770][ T5924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.106449][ T5924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.123065][ T5924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.134000][ T5924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.143527][ T5924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.152852][ T5924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.164084][ T5924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.303701][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.303724][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.357965][ T5859] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 109.357998][ T5859] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 109.358987][ T5859] asix 4-1:0.188: probe with driver asix failed with error -71 [ 109.432501][ T5859] usb 4-1: USB disconnect, device number 2 [ 110.089496][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.238839][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 110.244158][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.244187][ T31] usb 3-1: config 1 has no interface number 1 [ 110.244272][ T31] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.244293][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 110.244338][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.260358][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.260386][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.260403][ T31] usb 3-1: Product: syz [ 110.260416][ T31] usb 3-1: Manufacturer: syz [ 110.260428][ T31] usb 3-1: SerialNumber: syz [ 110.388872][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.497158][ T5961] binder: 5960:5961 unknown command 0 [ 110.497182][ T5961] binder: 5960:5961 ioctl c0306201 200000000080 returned -22 [ 110.543306][ T9] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 110.543336][ T9] usb 4-1: config 0 has no interface number 0 [ 110.543388][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.543409][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.591637][ T9] usb 4-1: config 0 descriptor?? [ 110.596153][ T9] cp210x 4-1:0.74: cp210x converter detected [ 110.860189][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.102252][ T31] usb 3-1: USB disconnect, device number 2 [ 111.120020][ T9] cp210x 4-1:0.74: failed to get vendor val 0x000e size 3: -32 [ 111.326684][ T9] cp210x 4-1:0.74: GPIO initialisation failed: -19 [ 111.421069][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 111.447053][ T5975] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET) [ 111.568590][ T991] usb 4-1: USB disconnect, device number 3 [ 111.578024][ T5974] kvm: apic: phys broadcast and lowest prio [ 111.617864][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.691423][ T991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.694059][ T991] cp210x 4-1:0.74: device disconnected [ 112.539926][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.700398][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 112.703499][ T5872] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.703533][ T5872] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.703556][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 112.703592][ T5872] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 112.703615][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.716276][ T5872] usb 3-1: config 0 descriptor?? [ 112.802641][ T5996] nbd: must specify at least one socket [ 112.805360][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.165439][ T5859] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.264811][ T6003] overlayfs: failed to resolve './file0': -2 [ 113.295472][ T5872] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 113.295511][ T5872] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 113.295534][ T5872] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 113.295557][ T5872] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 113.295578][ T5872] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 113.309056][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 113.325982][ T5872] ntrig 0003:1B96:0004.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0 [ 113.372062][ T5859] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 113.372092][ T5859] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 113.372114][ T5859] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 113.372134][ T5859] usb 2-1: config 1 has no interface number 0 [ 113.372186][ T5859] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.372212][ T5859] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 113.372255][ T5859] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 113.372278][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.506544][ T5859] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 113.577002][ T5872] usb 3-1: USB disconnect, device number 3 [ 113.773516][ T5859] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 114.032336][ T6007] fido_id[6007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 114.512176][ T5872] usb 2-1: USB disconnect, device number 2 [ 114.553121][ T5872] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 114.949214][ T5952] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.076080][ T6028] kvm: apic: phys broadcast and lowest prio [ 115.142924][ T5952] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 115.142956][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.142983][ T5952] usb 3-1: Product: syz [ 115.142996][ T5952] usb 3-1: Manufacturer: syz [ 115.143010][ T5952] usb 3-1: SerialNumber: syz [ 115.196106][ T5952] usb 3-1: config 0 descriptor?? [ 115.487077][ T5952] hso 3-1:0.0: Failed to find BULK IN ep [ 115.620249][ T5952] usb-storage 3-1:0.0: USB Mass Storage device detected [ 115.880371][ T5952] usb 3-1: USB disconnect, device number 4 [ 116.312801][ T37] audit: type=1326 audit(1764056214.946:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495b9df749 code=0x7ffc0000 [ 116.313595][ T37] audit: type=1326 audit(1764056214.946:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495b9df749 code=0x7ffc0000 [ 116.315473][ T37] audit: type=1326 audit(1764056214.946:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f495b9df749 code=0x7ffc0000 [ 116.315973][ T37] audit: type=1326 audit(1764056214.946:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495b9df749 code=0x7ffc0000 [ 116.316142][ T37] audit: type=1326 audit(1764056214.946:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495b9df749 code=0x7ffc0000 [ 116.316578][ T37] audit: type=1326 audit(1764056214.946:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f495b9df749 code=0x7ffc0000 [ 116.317013][ T6050] netlink: 'syz.2.49': attribute type 4 has an invalid length. [ 116.317124][ T6050] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.49'. [ 116.370274][ T5952] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.470166][ T37] audit: type=1326 audit(1764056214.946:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495b9df749 code=0x7ffc0000 [ 116.519101][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 116.528911][ T5952] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 116.528938][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.567419][ T5952] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 116.626144][ T6052] Bluetooth: MGMT ver 1.23 [ 116.739104][ T6054] ======================================================= [ 116.739104][ T6054] WARNING: The mand mount option has been deprecated and [ 116.739104][ T6054] and is ignored by this kernel. Remove the mand [ 116.739104][ T6054] option from the mount to silence this warning. [ 116.739104][ T6054] ======================================================= [ 117.185369][ T6058] binder: 6057:6058 ioctl c0306201 200000000180 returned -14 [ 117.455561][ T6062] kvm: apic: phys broadcast and lowest prio [ 117.621949][ T6069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.802496][ T5952] gspca_nw80x: reg_w err -71 [ 117.802612][ T5952] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 117.811187][ T5952] usb 4-1: USB disconnect, device number 4 [ 118.118792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.148777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.488838][ T5859] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.598278][ T6083] netlink: 'syz.4.63': attribute type 10 has an invalid length. [ 118.655556][ T5859] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 118.655588][ T5859] usb 2-1: config 0 has no interface number 0 [ 118.655639][ T5859] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 118.655665][ T5859] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.663741][ T5859] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 118.663772][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.663790][ T5859] usb 2-1: Product: syz [ 118.663802][ T5859] usb 2-1: Manufacturer: syz [ 118.663816][ T5859] usb 2-1: SerialNumber: syz [ 118.740605][ T5859] usb 2-1: config 0 descriptor?? [ 118.752784][ T6079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.773647][ T5859] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 118.779450][ T6083] team0: Port device netdevsim0 added [ 118.821603][ T5859] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 119.212767][ T5952] usb 2-1: USB disconnect, device number 3 [ 119.291710][ T5952] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 119.292926][ T5952] cyberjack 2-1:0.69: device disconnected [ 119.460176][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 119.852286][ T6098] binder: 6097:6098 ioctl c0306201 200000000180 returned -14 [ 119.984496][ T6104] program syz.4.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.009686][ T6102] kvm: apic: phys broadcast and lowest prio [ 120.429955][ T6111] UHID_CREATE from different security context by process 44 (syz.4.73), this is not allowed. [ 121.228767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.328784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.330044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.331202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.351072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.388776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.389385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.399315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.847952][ T6133] binder: 6130:6133 ioctl c0306201 200000000180 returned -14 [ 122.833134][ T5952] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.980311][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 122.983182][ T5952] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 122.983213][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.014836][ T5952] usb 1-1: config 0 descriptor?? [ 123.500674][ T5952] kone 0003:1E7D:2CED.0002: item fetching failed at offset 2/5 [ 123.501576][ T5952] kone 0003:1E7D:2CED.0002: parse failed [ 123.501656][ T5952] kone 0003:1E7D:2CED.0002: probe with driver kone failed with error -22 [ 123.566040][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 123.790585][ T5952] usb 1-1: USB disconnect, device number 2 [ 124.209913][ T6185] binder: 6184:6185 ioctl c0306201 200000000180 returned -14 [ 124.672886][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 124.839112][ T6195] netlink: 44 bytes leftover after parsing attributes in process `syz.1.112'. [ 125.088893][ T5955] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.241666][ T5955] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 125.241686][ T5955] usb 5-1: config 0 has no interface number 0 [ 125.241717][ T5955] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.241730][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.264910][ T5955] usb 5-1: config 0 descriptor?? [ 125.272239][ T5955] cp210x 5-1:0.74: cp210x converter detected [ 125.476155][ T6205] binder: 6204:6205 ioctl c0306201 200000000680 returned -14 [ 125.793426][ T5955] cp210x 5-1:0.74: failed to get vendor val 0x000e size 3: -32 [ 126.007931][ T5955] cp210x 5-1:0.74: failed to get vendor val 0x370c size 15: -71 [ 126.007962][ T5955] cp210x 5-1:0.74: GPIO initialisation failed: -71 [ 126.070647][ T5955] usb 5-1: cp210x converter now attached to ttyUSB0 [ 126.101836][ T5955] usb 5-1: USB disconnect, device number 2 [ 126.131428][ T5955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.132327][ T5955] cp210x 5-1:0.74: device disconnected [ 126.657267][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.658923][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.717125][ T6235] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 126.808885][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 126.812342][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.812368][ T10] usb 3-1: config 0 has no interface number 0 [ 126.817307][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 126.817346][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.817367][ T10] usb 3-1: Product: syz [ 126.817381][ T10] usb 3-1: Manufacturer: syz [ 126.817396][ T10] usb 3-1: SerialNumber: syz [ 126.885958][ T10] usb 3-1: config 0 descriptor?? [ 126.917497][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 126.917527][ T10] usb 3-1: selecting invalid altsetting 1 [ 126.917543][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 126.953221][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.955024][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 126.955118][ T10] usb 3-1: media controller created [ 127.091370][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.204737][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 127.298977][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 127.299042][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 127.302111][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 127.307209][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 127.307234][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 127.307381][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 127.607385][ T10] usb 3-1: USB disconnect, device number 5 [ 128.158941][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.314391][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 128.317770][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.317796][ T10] usb 2-1: config 0 has no interfaces? [ 128.326174][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 128.326201][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.326220][ T10] usb 2-1: Product: syz [ 128.326232][ T10] usb 2-1: Manufacturer: syz [ 128.326245][ T10] usb 2-1: SerialNumber: syz [ 128.356319][ T6279] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.379129][ T10] usb 2-1: config 0 descriptor?? [ 128.678953][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 128.788842][ T5881] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.947454][ T5881] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 128.947483][ T5881] usb 5-1: config 0 has no interface number 0 [ 128.947539][ T5881] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 128.947564][ T5881] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.960807][ T5881] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 128.960837][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.960855][ T5881] usb 5-1: Product: syz [ 128.960875][ T5881] usb 5-1: Manufacturer: syz [ 128.960888][ T5881] usb 5-1: SerialNumber: syz [ 128.983355][ T5881] usb 5-1: config 0 descriptor?? [ 128.984536][ T6283] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 128.988086][ T5881] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 129.052546][ T5881] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 129.245801][ T5952] usb 5-1: USB disconnect, device number 3 [ 129.282391][ T5952] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 129.283429][ T5952] cyberjack 5-1:0.69: device disconnected [ 130.178876][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.328989][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 130.393226][ T31] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 130.393260][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.393280][ T31] usb 5-1: Product: syz [ 130.393294][ T31] usb 5-1: Manufacturer: syz [ 130.393309][ T31] usb 5-1: SerialNumber: syz [ 130.473399][ T31] usb 5-1: config 0 descriptor?? [ 130.571956][ T6335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'. [ 130.735918][ T31] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.899798][ T10] usb 2-1: USB disconnect, device number 4 [ 131.589214][ T5952] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.688889][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.772184][ T5952] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 131.772214][ T5952] usb 3-1: config 0 has no interface number 0 [ 131.772337][ T5952] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 131.772364][ T5952] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.840688][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 131.845110][ T5952] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 131.845142][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.845161][ T5952] usb 3-1: Product: syz [ 131.845568][ T5952] usb 3-1: Manufacturer: syz [ 131.845583][ T5952] usb 3-1: SerialNumber: syz [ 131.892253][ T5952] usb 3-1: config 0 descriptor?? [ 131.896257][ T6344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.910757][ T5952] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 131.939458][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.939488][ T10] usb 1-1: config 0 has no interface number 0 [ 131.955091][ T5952] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 131.988574][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 131.988606][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.008530][ T6359] binder: 6356:6359 unknown command 0 [ 132.008551][ T6359] binder: 6356:6359 ioctl c0306201 200000000080 returned -22 [ 132.022326][ T10] usb 1-1: Product: syz [ 132.022348][ T10] usb 1-1: Manufacturer: syz [ 132.022363][ T10] usb 1-1: SerialNumber: syz [ 132.055317][ T10] usb 1-1: config 0 descriptor?? [ 132.080541][ T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 132.080569][ T10] usb 1-1: selecting invalid altsetting 1 [ 132.080583][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 132.112328][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.112857][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 132.112926][ T10] usb 1-1: media controller created [ 132.193380][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.261196][ T31] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 132.291832][ T5952] usb 3-1: USB disconnect, device number 6 [ 132.344339][ T31] usb 5-1: USB disconnect, device number 4 [ 132.355355][ T10] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 132.355419][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 132.355961][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 132.470573][ T5952] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 132.487091][ T5952] cyberjack 3-1:0.69: device disconnected [ 132.613556][ T10] usb 1-1: USB disconnect, device number 3 [ 133.011382][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.011489][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.055321][ T6381] bridge0: entered allmulticast mode [ 133.071843][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 133.071961][ T6381] bridge_slave_1: left allmulticast mode [ 133.071986][ T6381] bridge_slave_1: left promiscuous mode [ 133.073732][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.216624][ T6381] bridge_slave_0: left allmulticast mode [ 133.216656][ T6381] bridge_slave_0: left promiscuous mode [ 133.217417][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.342795][ T6388] binder: 6387:6388 unknown command 0 [ 133.342818][ T6388] binder: 6387:6388 ioctl c0306201 200000000080 returned -22 [ 133.448940][ T6381] bridge0 (unregistering): left allmulticast mode [ 133.739087][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 134.538832][ T5859] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.588821][ T5881] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.718474][ T5859] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 134.718504][ T5859] usb 2-1: config 0 has no interface number 0 [ 134.718557][ T5859] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.718579][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.748818][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 134.760408][ T5881] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 134.760436][ T5881] usb 5-1: config 0 has no interface number 0 [ 134.760507][ T5881] usb 5-1: config 0 interface 184 has no altsetting 0 [ 134.768501][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 134.768532][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.768552][ T5881] usb 5-1: Product: syz [ 134.768567][ T5881] usb 5-1: Manufacturer: syz [ 134.768581][ T5881] usb 5-1: SerialNumber: syz [ 134.833881][ T5859] usb 2-1: config 0 descriptor?? [ 134.855104][ T5881] usb 5-1: config 0 descriptor?? [ 134.864112][ T6428] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 134.878869][ T5859] cp210x 2-1:0.74: cp210x converter detected [ 134.887572][ T5881] smsc75xx v1.0.0 [ 135.069220][ T6428] team0: Port device netdevsim0 added [ 135.285541][ T5859] cp210x 2-1:0.74: failed to get vendor val 0x000e size 3: -121 [ 135.381974][ T6436] Zero length message leads to an empty skb [ 135.685535][ T6441] binder: 6439:6441 unknown command 0 [ 135.685632][ T6441] binder: 6439:6441 ioctl c0306201 200000000080 returned -22 [ 135.702352][ T5859] cp210x 2-1:0.74: failed to get vendor val 0x370c size 15: -71 [ 135.702382][ T5859] cp210x 2-1:0.74: GPIO initialisation failed: -71 [ 135.731400][ T6441] binder_alloc: 6439: binder_alloc_buf, no vma [ 135.762482][ T5859] usb 2-1: cp210x converter now attached to ttyUSB0 [ 135.788225][ T5859] usb 2-1: USB disconnect, device number 5 [ 135.824923][ T5859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.837172][ T5859] cp210x 2-1:0.74: device disconnected [ 135.894354][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 135.894387][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 135.895138][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 135.895164][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 135.895183][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 135.895201][ T5881] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 135.895555][ T5881] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 135.994752][ T5881] usb 5-1: USB disconnect, device number 5 [ 136.288987][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.402634][ T6458] binder: 6456:6458 ioctl c0306201 200000000180 returned -14 [ 136.459425][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 136.481834][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.481871][ T10] usb 3-1: config 0 has no interface number 0 [ 136.485367][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 136.485394][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.485413][ T10] usb 3-1: Product: syz [ 136.485427][ T10] usb 3-1: Manufacturer: syz [ 136.485441][ T10] usb 3-1: SerialNumber: syz [ 136.543721][ T10] usb 3-1: config 0 descriptor?? [ 136.562610][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 136.562640][ T10] usb 3-1: selecting invalid altsetting 1 [ 136.562656][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 136.607626][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 136.608091][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 136.608147][ T10] usb 3-1: media controller created [ 136.663787][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.771025][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 136.771088][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 136.773044][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 136.787416][ T6469] binder: 6468:6469 unknown command 0 [ 136.787436][ T6469] binder: 6468:6469 ioctl c0306201 200000000080 returned -22 [ 136.789586][ T6469] binder_alloc: 6468: binder_alloc_buf, no vma [ 136.958029][ T10] usb 3-1: USB disconnect, device number 7 [ 138.479113][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.638937][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 138.662780][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 138.662813][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.662833][ T9] usb 1-1: Product: syz [ 138.662848][ T9] usb 1-1: Manufacturer: syz [ 138.662862][ T9] usb 1-1: SerialNumber: syz [ 138.732398][ T9] usb 1-1: config 0 descriptor?? [ 138.969042][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.200973][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 140.228862][ T9] usb 1-1: USB disconnect, device number 4 [ 140.248771][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 140.412135][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 140.414491][ T10] usb 2-1: config 1 has an invalid interface number: 74 but max is 0 [ 140.414517][ T10] usb 2-1: config 1 has no interface number 0 [ 140.414579][ T10] usb 2-1: config 1 interface 74 has no altsetting 0 [ 140.468858][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=22.be [ 140.468893][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.468912][ T10] usb 2-1: Product: syz [ 140.468926][ T10] usb 2-1: Manufacturer: syz [ 140.468940][ T10] usb 2-1: SerialNumber: syz [ 140.707858][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.708989][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.745525][ T10] usb 2-1: unknown interface protocol 0x55, assuming v1 [ 140.745551][ T10] usb 2-1: cannot find UAC_HEADER [ 140.811565][ T10] snd-usb-audio 2-1:1.74: probe with driver snd-usb-audio failed with error -22 [ 140.815222][ T10] usb 2-1: USB disconnect, device number 6 [ 141.047569][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.118839][ T5859] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.274715][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 141.278528][ T5859] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 141.278558][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.373627][ T5859] usb 3-1: config 0 descriptor?? [ 141.394442][ T5859] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 142.269344][ T5952] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.421763][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 142.427258][ T5952] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 142.427286][ T5952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.427324][ T5952] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.427343][ T5952] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.493412][ T5952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.493445][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.493466][ T5952] usb 2-1: Product: syz [ 142.493479][ T5952] usb 2-1: Manufacturer: syz [ 142.493493][ T5952] usb 2-1: SerialNumber: syz [ 142.588235][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 143.135334][ T5952] usb 2-1: 0:2 : does not exist [ 143.327493][ T5859] gspca_vc032x: reg_r err -71 [ 143.327515][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327526][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327536][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327544][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327553][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327562][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327570][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327578][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327587][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327596][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327605][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327614][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327623][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327632][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327641][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327650][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327658][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327667][ T5859] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.327676][ T5859] gspca_vc032x: Unknown sensor... [ 143.327813][ T5859] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 143.483304][ T5859] usb 3-1: USB disconnect, device number 8 [ 144.778923][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.011389][ T5798] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 145.011543][ T5798] Bluetooth: hci2: Injecting HCI hardware error event [ 145.016191][ T61] Bluetooth: hci2: hardware error 0x00 [ 145.018900][ T31] usb 3-1: device descriptor read/64, error -71 [ 145.081499][ T5872] usb 2-1: USB disconnect, device number 7 [ 145.328887][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.468866][ T31] usb 3-1: device descriptor read/64, error -71 [ 145.585291][ T31] usb usb3-port1: attempt power cycle [ 145.709047][ T5872] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.871759][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 145.871822][ T5872] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 145.871846][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.890570][ T5872] usb 2-1: config 0 descriptor?? [ 145.938864][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.959774][ T31] usb 3-1: device descriptor read/8, error -71 [ 146.201685][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 146.222670][ T31] usb 3-1: device descriptor read/8, error -71 [ 146.331653][ T31] usb usb3-port1: unable to enumerate USB device [ 146.536733][ T5872] usb 2-1: language id specifier not provided by device, defaulting to English [ 147.602768][ T5872] letsketch 0003:6161:4D15.0003: Device info: 㡵 [ 147.804605][ T61] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 147.888660][ T5872] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 147.888917][ T5872] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -71 [ 147.946579][ T5872] usb 2-1: USB disconnect, device number 8 [ 148.998901][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 149.129080][ T10] usb 3-1: device descriptor read/64, error -71 [ 150.461813][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 150.683882][ T10] usb 3-1: device descriptor read/64, error -71 [ 150.789390][ T10] usb usb3-port1: attempt power cycle [ 152.250458][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 152.286494][ T10] usb 3-1: device descriptor read/8, error -71 [ 152.529142][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 152.551753][ T10] usb 3-1: device descriptor read/8, error -71 [ 152.659389][ T10] usb usb3-port1: unable to enumerate USB device [ 152.842150][ T5859] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.009736][ T5859] usb 1-1: device descriptor read/64, error -71 [ 153.248960][ T5859] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 153.378859][ T5859] usb 1-1: device descriptor read/64, error -71 [ 153.489786][ T5859] usb usb1-port1: attempt power cycle [ 153.538933][ T5872] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.564354][ T6705] kthread_run failed with err -4 [ 153.688905][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 153.693980][ T5872] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 153.697917][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 153.697947][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.697967][ T5872] usb 5-1: Product: syz [ 153.697981][ T5872] usb 5-1: Manufacturer: syz [ 153.697996][ T5872] usb 5-1: SerialNumber: syz [ 153.716191][ T5872] usb 5-1: config 0 descriptor?? [ 153.838844][ T5859] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.866431][ T5859] usb 1-1: device descriptor read/8, error -71 [ 154.108844][ T5859] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 154.139831][ T5859] usb 1-1: device descriptor read/8, error -71 [ 154.259423][ T5859] usb usb1-port1: unable to enumerate USB device [ 154.376682][ T6747] kvm: apic: phys broadcast and lowest prio [ 154.899818][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 155.241762][ T6778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.357'. [ 156.295231][ T994] usb 5-1: USB disconnect, device number 6 [ 156.830761][ T5859] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.931308][ T994] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.111094][ T5859] usb 5-1: device descriptor read/64, error -71 [ 158.249864][ T61] Bluetooth: hci3: connection err: -111 [ 158.250251][ T61] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 158.251404][ T61] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 158.287360][ T994] usb 1-1: config 0 has an invalid interface number: 72 but max is 2 [ 158.287389][ T994] usb 1-1: config 0 has an invalid interface number: 98 but max is 2 [ 158.287410][ T994] usb 1-1: config 0 has no interface number 1 [ 158.287425][ T994] usb 1-1: config 0 has no interface number 2 [ 158.287511][ T994] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.287532][ T994] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.312306][ T994] usb 1-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 158.312337][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.312356][ T994] usb 1-1: Product: syz [ 158.312370][ T994] usb 1-1: Manufacturer: syz [ 158.312382][ T994] usb 1-1: SerialNumber: syz [ 158.383028][ T994] usb 1-1: config 0 descriptor?? [ 158.403297][ T994] s2255 1-1:0.72: Could not find bulk-in endpoint [ 158.403412][ T994] Sensoray 2255 driver load failed: 0xfffffff4 [ 158.403445][ T994] s2255 1-1:0.72: probe with driver s2255 failed with error -12 [ 158.428836][ T5859] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.446997][ T994] s2255 1-1:0.98: Could not find bulk-in endpoint [ 158.447106][ T994] Sensoray 2255 driver load failed: 0xfffffff4 [ 158.447141][ T994] s2255 1-1:0.98: probe with driver s2255 failed with error -12 [ 158.484747][ T994] s2255 1-1:0.0: Could not find bulk-in endpoint [ 158.484949][ T994] Sensoray 2255 driver load failed: 0xfffffff4 [ 158.484985][ T994] s2255 1-1:0.0: probe with driver s2255 failed with error -12 [ 158.579044][ T5859] usb 5-1: device descriptor read/64, error -71 [ 158.607013][ T6831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.381'. [ 158.625494][ T6811] tipc: Started in network mode [ 158.625518][ T6811] tipc: Node identity 4, cluster identity 4711 [ 158.625531][ T6811] tipc: Node number set to 4 [ 158.692997][ T5859] usb usb5-port1: attempt power cycle [ 159.031189][ T5859] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.049894][ T5859] usb 5-1: device descriptor read/8, error -71 [ 159.288873][ T5859] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.316602][ T5859] usb 5-1: device descriptor read/8, error -71 [ 159.431953][ T5859] usb usb5-port1: unable to enumerate USB device [ 159.790107][ T6864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.393'. [ 159.863027][ T5872] usb 1-1: USB disconnect, device number 9 [ 160.291904][ T61] Bluetooth: hci4: connection err: -111 [ 160.292037][ T61] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 162.021661][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.088880][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.335516][ T61] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 162.335820][ T61] Bluetooth: hci3: Injecting HCI hardware error event [ 162.338123][ T61] Bluetooth: hci3: hardware error 0x00 [ 162.954322][ T37] audit: type=1326 audit(1764056261.326:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18da1cf749 code=0x7ffc0000 [ 162.954925][ T37] audit: type=1326 audit(1764056261.336:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18da1cf749 code=0x7ffc0000 [ 162.955239][ T37] audit: type=1326 audit(1764056261.346:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f18da1cf749 code=0x7ffc0000 [ 163.245767][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.271546][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 163.277103][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 163.277132][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.321760][ T10] usb 5-1: config 0 descriptor?? [ 163.800103][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 163.800208][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 163.809204][ T10] usb 5-1: USB disconnect, device number 11 [ 163.858910][ T5872] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.042230][ T5872] usb 1-1: config 0 has an invalid interface number: 72 but max is 2 [ 164.042261][ T5872] usb 1-1: config 0 has an invalid interface number: 98 but max is 2 [ 164.042281][ T5872] usb 1-1: config 0 has no interface number 1 [ 164.042297][ T5872] usb 1-1: config 0 has no interface number 2 [ 164.042414][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.042434][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.119169][ T5872] usb 1-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 164.119202][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.119221][ T5872] usb 1-1: Product: syz [ 164.119235][ T5872] usb 1-1: Manufacturer: syz [ 164.119249][ T5872] usb 1-1: SerialNumber: syz [ 164.126138][ T5872] usb 1-1: config 0 descriptor?? [ 164.185892][ T5872] s2255 1-1:0.72: Could not find bulk-in endpoint [ 164.186004][ T5872] Sensoray 2255 driver load failed: 0xfffffff4 [ 164.186038][ T5872] s2255 1-1:0.72: probe with driver s2255 failed with error -12 [ 164.265351][ T5872] s2255 1-1:0.98: Could not find bulk-in endpoint [ 164.265439][ T5872] Sensoray 2255 driver load failed: 0xfffffff4 [ 164.265464][ T5872] s2255 1-1:0.98: probe with driver s2255 failed with error -12 [ 164.295084][ T5872] s2255 1-1:0.0: Could not find bulk-in endpoint [ 164.295197][ T5872] Sensoray 2255 driver load failed: 0xfffffff4 [ 164.295229][ T5872] s2255 1-1:0.0: probe with driver s2255 failed with error -12 [ 164.361668][ T5798] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 164.361813][ T5798] Bluetooth: hci4: Injecting HCI hardware error event [ 164.362335][ T5798] Bluetooth: hci4: hardware error 0x00 [ 164.811685][ T6919] binder: BINDER_SET_CONTEXT_MGR already set [ 164.811702][ T6919] binder: 6918:6919 ioctl 4018620d 200000000040 returned -16 [ 164.938934][ T5927] usb 1-1: USB disconnect, device number 10 [ 165.467323][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.475363][ T61] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 166.508788][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.598969][ T5798] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 166.786417][ T6952] binder: BINDER_SET_CONTEXT_MGR already set [ 166.786434][ T6952] binder: 6951:6952 ioctl 4018620d 200000000040 returned -16 [ 167.538845][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 167.598876][ T5927] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.709483][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 167.709530][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.709551][ T10] usb 1-1: Product: syz [ 167.709565][ T10] usb 1-1: Manufacturer: syz [ 167.709579][ T10] usb 1-1: SerialNumber: syz [ 167.771413][ T5927] usb 2-1: config 0 has an invalid interface number: 72 but max is 2 [ 167.771442][ T5927] usb 2-1: config 0 has an invalid interface number: 98 but max is 2 [ 167.771463][ T5927] usb 2-1: config 0 has no interface number 1 [ 167.771479][ T5927] usb 2-1: config 0 has no interface number 2 [ 167.771576][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.771597][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.777308][ T5927] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 167.777337][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.777357][ T5927] usb 2-1: Product: syz [ 167.777370][ T5927] usb 2-1: Manufacturer: syz [ 167.777384][ T5927] usb 2-1: SerialNumber: syz [ 167.880998][ T5927] usb 2-1: config 0 descriptor?? [ 167.907299][ T5927] s2255 2-1:0.72: Could not find bulk-in endpoint [ 167.907479][ T5927] Sensoray 2255 driver load failed: 0xfffffff4 [ 167.907531][ T5927] s2255 2-1:0.72: probe with driver s2255 failed with error -12 [ 167.939753][ T5927] s2255 2-1:0.98: Could not find bulk-in endpoint [ 167.939932][ T5927] Sensoray 2255 driver load failed: 0xfffffff4 [ 167.939967][ T5927] s2255 2-1:0.98: probe with driver s2255 failed with error -12 [ 167.982290][ T5927] s2255 2-1:0.0: Could not find bulk-in endpoint [ 167.982644][ T5927] Sensoray 2255 driver load failed: 0xfffffff4 [ 167.982916][ T5927] s2255 2-1:0.0: probe with driver s2255 failed with error -12 [ 168.200516][ T10] net_ratelimit: 10 callbacks suppressed [ 168.200544][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 168.200629][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 168.587097][ T6990] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 169.077293][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.192621][ T6972] tipc: Started in network mode [ 169.192645][ T6972] tipc: Node identity 4, cluster identity 4711 [ 169.192658][ T6972] tipc: Node number set to 4 [ 169.214320][ T5872] usb 2-1: USB disconnect, device number 9 [ 169.229639][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.524086][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 169.524152][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 169.573031][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 169.632919][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 169.673066][ T10] usb 1-1: USB disconnect, device number 11 [ 169.860905][ T5872] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 170.022272][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 170.025735][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.030635][ T5872] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.030661][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.030678][ T5872] usb 5-1: Product: syz [ 170.030690][ T5872] usb 5-1: Manufacturer: syz [ 170.030703][ T5872] usb 5-1: SerialNumber: syz [ 170.045303][ T5872] usb 5-1: config 0 descriptor?? [ 170.772833][ T5872] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 170.938820][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 170.944684][ T5872] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.944712][ T5872] usb 1-1: config 0 has no interface number 0 [ 170.948189][ T5872] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 170.948218][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.948237][ T5872] usb 1-1: Product: syz [ 170.948251][ T5872] usb 1-1: Manufacturer: syz [ 170.948264][ T5872] usb 1-1: SerialNumber: syz [ 170.962762][ T5872] usb 1-1: config 0 descriptor?? [ 171.112729][ T5872] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 171.112760][ T5872] usb 1-1: selecting invalid altsetting 1 [ 171.112778][ T5872] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 171.125442][ T5872] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.125846][ T5872] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 171.125895][ T5872] usb 1-1: media controller created [ 171.397770][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.365526][ T7024] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 172.389662][ T5872] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 172.389727][ T5872] zl10353_read_register: readreg error (reg=127, ret==-71) [ 172.390278][ T5872] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 172.822267][ T5872] usb 1-1: USB disconnect, device number 12 [ 172.991614][ T5927] usb 5-1: USB disconnect, device number 12 [ 174.054060][ T7090] bridge0: entered promiscuous mode [ 174.445603][ T5911] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 174.620382][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 174.627638][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 174.627661][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.664848][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.664868][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.664879][ T5911] usb 5-1: Product: syz [ 174.664887][ T5911] usb 5-1: Manufacturer: syz [ 174.664894][ T5911] usb 5-1: SerialNumber: syz [ 174.895349][ T5911] usb 5-1: config 0 descriptor?? [ 174.912908][ T5911] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 177.204759][ T10] usb 5-1: USB disconnect, device number 13 [ 178.898387][ T7196] ip6erspan0: entered allmulticast mode [ 179.393612][ T7209] bridge1: entered promiscuous mode [ 179.945122][ T7225] sg_read: process 194 (syz.4.539) changed security contexts after opening file descriptor, this is not allowed. [ 180.227418][ T7227] wg2: entered promiscuous mode [ 180.227444][ T7227] wg2: entered allmulticast mode [ 180.548886][ T5927] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 180.719203][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 180.727596][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.727631][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 180.794023][ T5927] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.794056][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.794076][ T5927] usb 5-1: Product: syz [ 180.794090][ T5927] usb 5-1: Manufacturer: syz [ 180.794103][ T5927] usb 5-1: SerialNumber: syz [ 180.898654][ T5927] usb 5-1: config 0 descriptor?? [ 181.047682][ T5927] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 183.398800][ T5911] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 183.465040][ T5927] usb 5-1: USB disconnect, device number 14 [ 183.594986][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 183.595041][ T5911] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 183.595063][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.604031][ T5911] usb 2-1: config 0 descriptor?? [ 184.035078][ T5911] usbhid 2-1:0.0: can't add hid device: -71 [ 184.035219][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 184.038599][ T5911] usb 2-1: USB disconnect, device number 10 [ 185.169001][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 185.304349][ T7335] sch_tbf: peakrate 7 is lower than or equals to rate 15942523117129420729 ! [ 185.554459][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 185.908894][ T31] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 185.908925][ T31] usb 2-1: config 0 has no interface number 0 [ 185.908985][ T31] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 185.958954][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 185.958988][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.959008][ T31] usb 2-1: Product: syz [ 185.959022][ T31] usb 2-1: Manufacturer: syz [ 185.959037][ T31] usb 2-1: SerialNumber: syz [ 186.041725][ T31] usb 2-1: config 0 descriptor?? [ 186.043212][ T7326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.251450][ T7326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.487332][ T7338] bridge2: entered promiscuous mode [ 188.719402][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 188.719728][ T31] asix 2-1:0.188: probe with driver asix failed with error -71 [ 188.769392][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 188.797362][ T31] usb 2-1: USB disconnect, device number 11 [ 189.572429][ T7385] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.434852][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.625'. [ 192.409313][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 192.558784][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 192.561692][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.561716][ T31] usb 5-1: config 0 has no interfaces? [ 192.594599][ T31] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.594630][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.594650][ T31] usb 5-1: Product: syz [ 192.594665][ T31] usb 5-1: Manufacturer: syz [ 192.594680][ T31] usb 5-1: SerialNumber: syz [ 192.748999][ T31] usb 5-1: config 0 descriptor?? [ 193.620069][ T7465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.118796][ T5927] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.249138][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 194.289181][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 194.294653][ T5927] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.294686][ T5927] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.294709][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 194.294747][ T5927] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 194.294771][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.309547][ T5927] usb 1-1: config 0 descriptor?? [ 194.411510][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.411537][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 194.411591][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.415126][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.415155][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.415174][ T31] usb 2-1: Product: syz [ 194.415188][ T31] usb 2-1: Manufacturer: syz [ 194.415202][ T31] usb 2-1: SerialNumber: syz [ 194.446934][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.447756][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.524294][ T31] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 194.524351][ T31] cdc_ncm 2-1:1.0: bind() failure [ 194.812498][ T5927] usbhid 1-1:0.0: can't add hid device: -71 [ 194.812634][ T5927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.827295][ T5927] usb 1-1: USB disconnect, device number 13 [ 195.171465][ T5911] usb 5-1: USB disconnect, device number 15 [ 195.558854][ T5911] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 195.642022][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 195.732195][ T5911] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 195.732228][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.732356][ T5911] usb 5-1: Product: syz [ 195.732372][ T5911] usb 5-1: Manufacturer: syz [ 195.732386][ T5911] usb 5-1: SerialNumber: syz [ 195.784790][ T5911] usb 5-1: config 0 descriptor?? [ 196.013978][ T5911] hso 5-1:0.0: Failed to find BULK IN ep [ 196.040776][ T5911] usb-storage 5-1:0.0: USB Mass Storage device detected [ 196.131208][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 196.289889][ T5911] usb 5-1: USB disconnect, device number 16 [ 196.966800][ T7581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.050566][ T5911] usb 2-1: USB disconnect, device number 12 [ 199.679629][ T5911] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 199.686537][ T5952] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.846043][ T5952] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 199.846074][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.846093][ T5952] usb 2-1: config 0 has no interface number 0 [ 199.846149][ T5952] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 199.846173][ T5952] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.854699][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.854724][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 199.854797][ T5911] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.861595][ T5911] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.861622][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.861640][ T5911] usb 5-1: Product: syz [ 199.861653][ T5911] usb 5-1: Manufacturer: syz [ 199.861665][ T5911] usb 5-1: SerialNumber: syz [ 199.902803][ T5911] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 199.902850][ T5911] cdc_ncm 5-1:1.0: bind() failure [ 199.986102][ T5952] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 199.986132][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.986152][ T5952] usb 2-1: Product: syz [ 199.986167][ T5952] usb 2-1: Manufacturer: syz [ 199.986181][ T5952] usb 2-1: SerialNumber: syz [ 200.054341][ T5952] usb 2-1: config 0 descriptor?? [ 200.057803][ T7640] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 200.074340][ T5952] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 200.076461][ T5952] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 200.103964][ T5952] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 200.286493][ T5859] usb 2-1: USB disconnect, device number 13 [ 200.309896][ T5859] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 200.310867][ T5859] cyberjack 2-1:0.69: device disconnected [ 200.488850][ T5952] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 200.638797][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 200.641697][ T5952] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 200.641727][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.685385][ T5952] usb 1-1: config 0 descriptor?? [ 201.307488][ T5952] usbhid 1-1:0.0: can't add hid device: -71 [ 201.307623][ T5952] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 201.339556][ T5952] usb 1-1: USB disconnect, device number 14 [ 201.515492][ T7704] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.710369][ T31] usb 5-1: USB disconnect, device number 17 [ 203.418918][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 203.571524][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 203.574496][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 203.574540][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.594044][ T10] usb 5-1: config 0 descriptor?? [ 203.760016][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 204.323901][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 204.323991][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 204.339193][ T10] usb 5-1: USB disconnect, device number 18 [ 205.396225][ T7805] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.028821][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 206.188572][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 206.188635][ T10] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 206.188764][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.203861][ T10] usb 1-1: config 0 descriptor?? [ 206.701342][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 206.701495][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 206.749036][ T10] usb 1-1: USB disconnect, device number 15 [ 207.038806][ T44] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 207.190495][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 207.192849][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.195655][ T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.195793][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.195815][ T44] usb 2-1: Product: syz [ 207.195830][ T44] usb 2-1: Manufacturer: syz [ 207.195844][ T44] usb 2-1: SerialNumber: syz [ 207.288923][ T44] usb 2-1: config 0 descriptor?? [ 210.022558][ T7910] tty tty21: ldisc open failed (-12), clearing slot 20 [ 211.342420][ T31] usb 2-1: USB disconnect, device number 14 [ 211.579875][ T7911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.802211][ T7926] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 211.834786][ T7926] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 212.570273][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 213.568912][ T31] usb 2-1: device descriptor read/64, error -71 [ 213.859028][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 214.008912][ T31] usb 2-1: device descriptor read/64, error -71 [ 214.229907][ T31] usb usb2-port1: attempt power cycle [ 214.605096][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 214.652351][ T31] usb 2-1: device descriptor read/8, error -71 [ 214.923428][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 214.943970][ T31] usb 2-1: device descriptor read/8, error -71 [ 215.050182][ T31] usb usb2-port1: unable to enumerate USB device [ 215.126573][ T7973] binder: 7972:7973 unknown command 0 [ 215.126597][ T7973] binder: 7972:7973 ioctl c0306201 200000000080 returned -22 [ 215.975693][ T991] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 216.176627][ T991] usb 2-1: Using ep0 maxpacket: 32 [ 216.183507][ T991] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 216.183536][ T991] usb 2-1: config 0 has no interface number 0 [ 216.183699][ T991] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 216.196580][ T991] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 216.196613][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.196632][ T991] usb 2-1: Product: syz [ 216.196646][ T991] usb 2-1: Manufacturer: syz [ 216.196660][ T991] usb 2-1: SerialNumber: syz [ 216.259309][ T991] usb 2-1: config 0 descriptor?? [ 216.260243][ T7988] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.519952][ T7988] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.999814][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 217.013558][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 218.555106][ T991] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 218.555139][ T991] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 218.555457][ T991] asix 2-1:0.188: probe with driver asix failed with error -71 [ 218.649811][ T991] usb 2-1: USB disconnect, device number 19 [ 218.820258][ T8022] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 222.898791][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 223.058793][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 223.063836][ T31] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 223.063865][ T31] usb 2-1: config 0 has no interface number 0 [ 223.063920][ T31] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 223.067430][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 223.067460][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.067481][ T31] usb 2-1: Product: syz [ 223.067495][ T31] usb 2-1: Manufacturer: syz [ 223.067509][ T31] usb 2-1: SerialNumber: syz [ 223.143929][ T31] usb 2-1: config 0 descriptor?? [ 223.145141][ T8086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 223.426226][ T8086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 223.546248][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 224.288082][ T8152] binder: 8151:8152 ioctl 4018620d 0 returned -22 [ 224.289943][ T8152] binder: 8151:8152 unknown command 0 [ 224.289964][ T8152] binder: 8151:8152 ioctl c0306201 200000000080 returned -22 [ 226.815124][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 226.815155][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 226.815463][ T31] asix 2-1:0.188: probe with driver asix failed with error -71 [ 226.861610][ T31] usb 2-1: USB disconnect, device number 20 [ 227.918884][ T991] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 228.359548][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 228.871723][ T991] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.871756][ T991] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.871780][ T991] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.871804][ T991] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.871850][ T991] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.871872][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.222979][ T991] usb 1-1: GET_CAPABILITIES returned 0 [ 229.223033][ T991] usbtmc 1-1:16.0: can't read capabilities [ 230.512655][ T5927] usb 1-1: USB disconnect, device number 16 [ 238.160207][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.598969][ T5859] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 238.656921][ T8366] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1046'. [ 238.776371][ T5859] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 238.776408][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.776430][ T5859] usb 2-1: Product: syz [ 238.776445][ T5859] usb 2-1: Manufacturer: syz [ 238.776461][ T5859] usb 2-1: SerialNumber: syz [ 238.811037][ T5859] usb 2-1: config 0 descriptor?? [ 239.043165][ T5859] hso 2-1:0.0: Failed to find BULK IN ep [ 239.059926][ T5859] usb-storage 2-1:0.0: USB Mass Storage device detected [ 240.467168][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.539115][ T5859] usb 2-1: USB disconnect, device number 21 [ 241.246028][ T8432] overlayfs: overlapping lowerdir path [ 241.920922][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.990930][ T8437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.648448][ T8516] overlayfs: overlapping lowerdir path [ 251.182255][ T8602] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 251.182307][ T8602] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 251.182328][ T8602] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 251.193875][ T8602] syz.1.1127 (8602) used greatest stack depth: 14800 bytes left [ 251.212102][ T37] audit: type=1326 audit(1764056349.196:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9be62f749 code=0x7ffc0000 [ 251.212175][ T37] audit: type=1326 audit(1764056349.206:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9be62f749 code=0x7ffc0000 [ 251.212220][ T37] audit: type=1326 audit(1764056349.206:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9be62f749 code=0x7ffc0000 [ 251.212266][ T37] audit: type=1326 audit(1764056349.216:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9be62f749 code=0x7ffc0000 [ 251.212313][ T37] audit: type=1326 audit(1764056349.216:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9be62f749 code=0x7ffc0000 [ 251.212358][ T37] audit: type=1326 audit(1764056349.226:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa9be62f749 code=0x7ffc0000 [ 256.746243][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.746342][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.488796][ T5859] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 257.658969][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 257.662893][ T5859] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 257.662962][ T5859] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.662985][ T5859] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.663008][ T5859] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 257.663053][ T5859] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.663076][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.798881][ T5859] usbtmc 1-1:16.0: bulk endpoints not found [ 258.322845][ T8689] netlink: 'syz.0.1153': attribute type 10 has an invalid length. [ 258.322872][ T8689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1153'. [ 258.323487][ T8689] team0: entered promiscuous mode [ 258.323508][ T8689] team_slave_0: entered promiscuous mode [ 258.323777][ T8689] team_slave_1: entered promiscuous mode [ 258.324105][ T8689] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 258.324734][ T8689] team0: entered allmulticast mode [ 258.324749][ T8689] team_slave_0: entered allmulticast mode [ 258.324767][ T8689] team_slave_1: entered allmulticast mode [ 258.324787][ T8689] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 258.325837][ T8689] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 261.899656][ T5927] usb 1-1: USB disconnect, device number 17 [ 263.518979][ T8754] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 269.108845][ T5927] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 269.263819][ T5927] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 269.263841][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.263852][ T5927] usb 1-1: Product: syz [ 269.263859][ T5927] usb 1-1: Manufacturer: syz [ 269.263867][ T5927] usb 1-1: SerialNumber: syz [ 269.271963][ T5927] usb 1-1: config 0 descriptor?? [ 269.501248][ T5927] hso 1-1:0.0: Failed to find BULK IN ep [ 269.522322][ T5927] usb-storage 1-1:0.0: USB Mass Storage device detected [ 269.809278][ T5927] usb 1-1: USB disconnect, device number 18 [ 270.093423][ T8862] bridge1: entered promiscuous mode [ 274.339051][ T8906] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 281.690230][ T44] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 281.861967][ T44] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.862002][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.896967][ T44] usb 5-1: config 0 descriptor?? [ 281.907861][ T44] cp210x 5-1:0.0: cp210x converter detected [ 282.337645][ T44] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 282.599771][ T44] usb 5-1: cp210x converter now attached to ttyUSB0 [ 282.753541][ T44] usb 5-1: USB disconnect, device number 19 [ 282.830818][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 283.294411][ T44] cp210x 5-1:0.0: device disconnected [ 283.319284][ T5927] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 283.513188][ T5927] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 283.513220][ T5927] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 283.513240][ T5927] usb 2-1: config 0 has no interface number 1 [ 283.513334][ T5927] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.513388][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 283.519577][ T5927] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 283.519607][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.519625][ T5927] usb 2-1: Product: syz [ 283.519637][ T5927] usb 2-1: Manufacturer: syz [ 283.519650][ T5927] usb 2-1: SerialNumber: syz [ 283.556105][ T5927] usb 2-1: config 0 descriptor?? [ 283.564542][ T5927] usb-storage 2-1:0.127: USB Mass Storage device detected [ 283.609115][ T5927] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 283.804117][ T5927] usb-storage 2-1:0.0: USB Mass Storage device detected [ 283.852169][ T5927] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 284.406585][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.654617][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.781451][ T5927] usb 2-1: USB disconnect, device number 22 [ 285.120171][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.389382][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.748020][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 285.765970][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.083057][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.911665][ T9072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.388831][ T991] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 290.539264][ T991] usb 1-1: Using ep0 maxpacket: 32 [ 290.541838][ T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.541871][ T991] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.541917][ T991] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 290.541941][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.602878][ T991] usb 1-1: config 0 descriptor?? [ 290.894501][ T991] usb 1-1: USB disconnect, device number 19 [ 291.418839][ T991] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 291.578775][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 291.596012][ T991] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.596040][ T991] usb 5-1: config 0 has no interface number 0 [ 291.631052][ T991] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 291.631085][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.631106][ T991] usb 5-1: Product: syz [ 291.631119][ T991] usb 5-1: Manufacturer: syz [ 291.631133][ T991] usb 5-1: SerialNumber: syz [ 291.637762][ T991] usb 5-1: config 0 descriptor?? [ 291.884681][ T991] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 291.884710][ T991] usb 5-1: selecting invalid altsetting 1 [ 291.884734][ T991] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 292.894091][ T991] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 292.894603][ T991] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 292.894663][ T991] usb 5-1: media controller created [ 292.909246][ T9142] bridge2: entered promiscuous mode [ 292.988300][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.059417][ T991] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 293.059495][ T991] zl10353_read_register: readreg error (reg=127, ret==-71) [ 293.062890][ T991] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 293.177797][ T991] usb 5-1: USB disconnect, device number 20 [ 295.761614][ T5859] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 296.748751][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 296.750751][ T5859] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.750768][ T5859] usb 5-1: config 0 has no interface number 0 [ 296.752750][ T5859] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 296.752765][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.752776][ T5859] usb 5-1: Product: syz [ 296.752784][ T5859] usb 5-1: Manufacturer: syz [ 296.752792][ T5859] usb 5-1: SerialNumber: syz [ 296.756856][ T5859] usb 5-1: config 0 descriptor?? [ 296.785553][ T5859] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 296.785580][ T5859] usb 5-1: selecting invalid altsetting 1 [ 296.785594][ T5859] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 296.819903][ T5859] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.820335][ T5859] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 296.820383][ T5859] usb 5-1: media controller created [ 296.914091][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.303265][ T5859] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 297.303303][ T5859] zl10353_read_register: readreg error (reg=127, ret==-71) [ 297.303725][ T5859] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 297.523672][ T5859] usb 5-1: USB disconnect, device number 21 [ 299.388345][ T9228] Driver unsupported XDP return value 0 on prog (id 89) dev N/A, expect packet loss! [ 301.240104][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1397'. [ 301.240136][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1397'. [ 301.848798][ T5927] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 302.014823][ T5927] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.015315][ T5927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.019623][ T5927] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.019651][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.019669][ T5927] usb 1-1: Product: syz [ 302.019681][ T5927] usb 1-1: Manufacturer: syz [ 302.019694][ T5927] usb 1-1: SerialNumber: syz [ 302.636002][ T5927] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 302.636240][ T5927] cdc_ncm 1-1:1.0: bind() failure [ 302.641928][ T5927] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 302.641958][ T5927] cdc_ncm 1-1:1.1: bind() failure [ 303.028867][ T991] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 303.191842][ T991] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 303.191898][ T991] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 303.191922][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.218133][ T991] usb 2-1: config 0 descriptor?? [ 303.268776][ T5911] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 303.418743][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 303.438310][ T5911] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 303.438341][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.438359][ T5911] usb 5-1: config 0 has no interface number 0 [ 303.470535][ T5911] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 303.470567][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.470587][ T5911] usb 5-1: Product: syz [ 303.470600][ T5911] usb 5-1: Manufacturer: syz [ 303.470660][ T5911] usb 5-1: SerialNumber: syz [ 303.515394][ T5911] usb 5-1: config 0 descriptor?? [ 303.529833][ T5911] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 304.036996][ T991] letsketch 0003:6161:4D15.0004: Device info: 繋 [ 304.276891][ T991] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 304.276987][ T991] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71 [ 304.338553][ T991] usb 2-1: USB disconnect, device number 23 [ 304.593427][ T5859] usb 1-1: USB disconnect, device number 20 [ 304.923854][ T9356] openvswitch: netlink: Flow key attr not present in new flow. [ 305.088773][ T5859] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 305.258786][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 305.264921][ T5859] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.264971][ T5859] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 305.264995][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.314837][ T5859] usb 1-1: config 0 descriptor?? [ 305.559694][ T31] usb 5-1: USB disconnect, device number 22 [ 306.878791][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 307.051785][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 307.051842][ T31] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 307.051865][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.075065][ T31] usb 2-1: config 0 descriptor?? [ 307.220948][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.254406][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.255739][ T9416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.256398][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.305523][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.319153][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.723079][ T31] usb 2-1: language id specifier not provided by device, defaulting to English [ 307.926031][ T31] letsketch 0003:6161:4D15.0005: Device info: 繋 [ 308.161992][ T31] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 308.162473][ T31] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -71 [ 308.174824][ T31] usb 2-1: USB disconnect, device number 24 [ 308.514235][ T8468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.849137][ T991] usb 1-1: USB disconnect, device number 21 [ 308.897098][ T8468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.385703][ T8468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.487295][ T5798] Bluetooth: hci0: command tx timeout [ 309.538954][ T5911] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 309.692504][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 309.706975][ T5911] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.707011][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.707036][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.707059][ T5911] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.707102][ T5911] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.707125][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.072158][ T9472] netlink: 'syz.0.1497': attribute type 10 has an invalid length. [ 310.072183][ T9472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1497'. [ 310.078754][ T5911] usb 1-1: usb_control_msg returned -32 [ 310.078809][ T5911] usbtmc 1-1:16.0: can't read capabilities [ 310.346236][ T8468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.645562][ T9472] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 310.678969][ T44] usb 1-1: USB disconnect, device number 22 [ 311.131006][ T9419] chnl_net:caif_netlink_parms(): no params data found [ 311.555779][ T9512] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 311.558808][ T5798] Bluetooth: hci0: command tx timeout [ 312.072120][ T9512] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 312.517704][ T8468] bridge_slave_1: left allmulticast mode [ 312.517889][ T8468] bridge_slave_1: left promiscuous mode [ 312.538228][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.653602][ T8468] bridge_slave_0: left allmulticast mode [ 312.653630][ T8468] bridge_slave_0: left promiscuous mode [ 312.653803][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.547207][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.662811][ T9551] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 313.839027][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.841657][ T5798] Bluetooth: hci0: command tx timeout [ 314.255334][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.466742][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.044763][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.838961][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 315.878795][ T5798] Bluetooth: hci0: command tx timeout [ 315.991434][ T31] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 315.991466][ T31] usb 2-1: config 0 has no interface number 0 [ 315.991503][ T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.991517][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.996433][ T31] usb 2-1: config 0 descriptor?? [ 316.042218][ T31] cp210x 2-1:0.74: cp210x converter detected [ 316.066403][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.245376][ T31] cp210x 2-1:0.74: failed to get vendor val 0x370b size 1: -121 [ 316.245414][ T31] cp210x 2-1:0.74: querying part number failed [ 316.271705][ T31] usb 2-1: cp210x converter now attached to ttyUSB0 [ 316.430310][ T8468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.479825][ T8468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.521221][ T8468] bond0 (unregistering): Released all slaves [ 316.581089][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.581261][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.581513][ T9419] bridge_slave_0: entered allmulticast mode [ 316.584972][ T9419] bridge_slave_0: entered promiscuous mode [ 316.707389][ T9535] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1516'. [ 316.729745][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.729902][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.730152][ T9419] bridge_slave_1: entered allmulticast mode [ 316.771633][ T9419] bridge_slave_1: entered promiscuous mode [ 316.959463][ T9633] netlink: 'syz.4.1560': attribute type 13 has an invalid length. [ 317.862588][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.862778][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.981655][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.192575][ T5927] usb 2-1: USB disconnect, device number 25 [ 319.214393][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 319.216640][ T5927] cp210x 2-1:0.74: device disconnected [ 321.338044][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.727526][ T9690] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 322.540228][ T9725] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.270583][ T9706] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1591'. [ 323.602050][ T9419] team0: Port device team_slave_0 added [ 323.628409][ T9419] team0: Port device team_slave_1 added [ 323.760209][ T5952] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 323.922928][ T9764] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 324.367679][ T5952] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 324.367716][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.367738][ T5952] usb 1-1: Product: syz [ 324.367754][ T5952] usb 1-1: Manufacturer: syz [ 324.367768][ T5952] usb 1-1: SerialNumber: syz [ 324.432171][ T5952] usb 1-1: config 0 descriptor?? [ 324.580049][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.580074][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.580103][ T9419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.645466][ T5952] hso 1-1:0.0: Failed to find BULK IN ep [ 324.662075][ T5952] usb-storage 1-1:0.0: USB Mass Storage device detected [ 324.832271][ T8468] hsr_slave_0: left promiscuous mode [ 324.855379][ T5952] usb 1-1: USB disconnect, device number 23 [ 324.890627][ T8468] hsr_slave_1: left promiscuous mode [ 324.893513][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.893678][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.951731][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.951766][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.155372][ T8468] veth1_macvtap: left promiscuous mode [ 325.157421][ T8468] veth0_macvtap: left promiscuous mode [ 327.299422][ T5952] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 327.451161][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 327.493485][ T5952] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 327.493516][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.493535][ T5952] usb 2-1: config 0 has no interface number 0 [ 327.547227][ T5952] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 327.547250][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.547261][ T5952] usb 2-1: Product: syz [ 327.547269][ T5952] usb 2-1: Manufacturer: syz [ 327.547277][ T5952] usb 2-1: SerialNumber: syz [ 327.597066][ T5952] usb 2-1: config 0 descriptor?? [ 327.636549][ T5952] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 329.903795][ T8468] team0 (unregistering): Port device team_slave_1 removed [ 332.411827][ T5927] usb 2-1: USB disconnect, device number 26 [ 332.821470][ T8468] team0 (unregistering): Port device team_slave_0 removed [ 333.753486][ T9945] Bluetooth: MGMT ver 1.23 [ 334.526031][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.810784][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.558488][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.613148][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.252000][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.252024][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.252051][ T9419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.265801][ T9775] syzkaller1: entered promiscuous mode [ 336.265834][ T9775] syzkaller1: entered allmulticast mode [ 336.298842][ T9965] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1709'. [ 336.442236][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.265538][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.606982][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.830176][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.058271][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.528389][ T9419] hsr_slave_0: entered promiscuous mode [ 338.560729][ T9419] hsr_slave_1: entered promiscuous mode [ 340.935807][T10114] netlink: 'syz.1.1768': attribute type 12 has an invalid length. [ 340.935823][T10114] netlink: 'syz.1.1768': attribute type 29 has an invalid length. [ 340.935830][T10114] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1768'. [ 340.935846][T10114] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1768'. [ 341.461875][T10118] syzkaller0: entered promiscuous mode [ 341.461904][T10118] syzkaller0: entered allmulticast mode [ 342.436568][T10098] vlan0: entered allmulticast mode [ 342.436593][T10098] geneve0: entered allmulticast mode [ 342.437020][T10098] bridge0: port 1(vlan0) entered blocking state [ 342.437256][T10098] bridge0: port 1(vlan0) entered disabled state [ 342.454549][T10098] vlan0: entered promiscuous mode [ 342.454570][T10098] geneve0: entered promiscuous mode [ 343.008886][ T5927] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 343.158848][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 343.162111][ T5927] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 343.162142][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.168413][ T5927] usb 2-1: config 0 descriptor?? [ 343.218959][ T5927] gspca_main: sunplus-2.14.0 probing 041e:400b [ 344.512949][ T5927] gspca_sunplus: reg_w_riv err -110 [ 344.513068][ T5927] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 344.771486][ T994] usb 2-1: USB disconnect, device number 27 [ 345.721105][T10211] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 346.855282][ T9419] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.155704][ T9419] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.289254][ T9419] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.423890][ T9419] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.890733][ T44] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 348.016313][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.044811][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 348.044866][ T44] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 348.044890][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.087915][ T44] usb 2-1: config 0 descriptor?? [ 348.222709][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.281774][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.287733][ T8472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.373458][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.499812][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.734800][ T44] usb 2-1: language id specifier not provided by device, defaulting to English [ 348.954322][ T44] letsketch 0003:6161:4D15.0006: Device info: 㡵 [ 349.325334][ T44] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 349.325389][ T44] letsketch 0003:6161:4D15.0006: probe with driver letsketch failed with error -71 [ 349.333264][ T44] usb 2-1: USB disconnect, device number 28 [ 350.601702][ T994] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 350.919061][ T994] usb 1-1: Using ep0 maxpacket: 16 [ 350.952214][ T994] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 350.952239][ T994] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.952250][ T994] usb 1-1: config 0 has no interface number 0 [ 350.959770][ T994] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 350.959798][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.959815][ T994] usb 1-1: Product: syz [ 350.959827][ T994] usb 1-1: Manufacturer: syz [ 350.959840][ T994] usb 1-1: SerialNumber: syz [ 350.965829][ T994] usb 1-1: config 0 descriptor?? [ 350.982223][ T994] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 352.393295][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.622677][ T9419] veth0_vlan: entered promiscuous mode [ 352.637898][ T9419] veth1_vlan: entered promiscuous mode [ 353.546203][ T9419] veth0_macvtap: entered promiscuous mode [ 353.661163][ T9419] veth1_macvtap: entered promiscuous mode [ 353.786201][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.905983][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.949728][ T8472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.953673][ T8472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.954409][ T8472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.955001][ T8472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.059994][ T5911] usb 1-1: USB disconnect, device number 24 [ 354.602966][T10336] netlink: 'syz.1.1837': attribute type 1 has an invalid length. [ 354.873721][T10336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.580386][T10375] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 356.868477][T10375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.057903][T10390] vlan2: entered allmulticast mode [ 357.057928][T10390] geneve0: entered allmulticast mode [ 357.058321][T10390] bridge0: port 3(vlan2) entered blocking state [ 357.062166][T10390] bridge0: port 3(vlan2) entered disabled state [ 357.088886][T10390] vlan2: entered promiscuous mode [ 357.088908][T10390] geneve0: entered promiscuous mode [ 357.094462][ T8461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.094486][ T8461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.493651][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.493674][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.523489][T10388] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.070591][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 359.218742][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 359.224000][ T31] usb 1-1: config 0 has no interfaces? [ 359.254885][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 359.254918][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.254939][ T31] usb 1-1: Product: syz [ 359.254953][ T31] usb 1-1: Manufacturer: syz [ 359.254968][ T31] usb 1-1: SerialNumber: syz [ 359.385374][ T31] usb 1-1: config 0 descriptor?? [ 359.922685][ T5927] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 360.079291][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 360.083807][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.083836][ T5927] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.093636][ T5927] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 360.093666][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.093684][ T5927] usb 5-1: Product: syz [ 360.093696][ T5927] usb 5-1: Manufacturer: syz [ 360.093709][ T5927] usb 5-1: SerialNumber: syz [ 360.125548][ T5927] usb 5-1: config 0 descriptor?? [ 360.820318][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.010180][ T8001] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.033026][ T8001] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.034641][ T8001] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.036083][ T8001] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.037035][ T8001] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.831252][ T44] usb 1-1: USB disconnect, device number 25 [ 362.076828][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 362.441005][ T8001] Bluetooth: hci0: command 0x0c1a tx timeout [ 362.445295][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 363.175455][ T5798] Bluetooth: hci1: command tx timeout [ 363.199962][ T991] usb 5-1: USB disconnect, device number 23 [ 363.346217][ T8468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.654952][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.882507][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.240632][ T8001] Bluetooth: hci1: command tx timeout [ 365.477728][ T8468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.933514][ T8468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.237821][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.289031][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.430813][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.525627][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.628155][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.686027][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.161293][ T8001] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.161364][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 367.339723][ T8001] Bluetooth: hci1: command tx timeout [ 367.339811][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.389778][ T8468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.340851][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.573055][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.133722][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.484256][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.496441][ T8001] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.496485][ T61] Bluetooth: hci1: command tx timeout [ 369.496521][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 369.655510][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.907458][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.181479][T10457] chnl_net:caif_netlink_parms(): no params data found [ 370.330851][ T8468] bridge_slave_1: left allmulticast mode [ 370.330884][ T8468] bridge_slave_1: left promiscuous mode [ 370.331306][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.460694][ T8468] bridge_slave_0: left allmulticast mode [ 370.460730][ T8468] bridge_slave_0: left promiscuous mode [ 370.509616][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.258782][ T5927] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 371.441327][ T5927] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 371.441362][ T5927] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.444700][ T5927] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 371.444731][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.444750][ T5927] usb 4-1: Product: syz [ 371.444764][ T5927] usb 4-1: Manufacturer: syz [ 371.444778][ T5927] usb 4-1: SerialNumber: syz [ 371.545603][T10600] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.560710][ T5927] usblp0: Disabling reads from problematic bidirectional printer [ 371.929379][ T5927] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 372.165753][ T44] usb 4-1: USB disconnect, device number 5 [ 372.182220][ T44] usblp0: removed [ 372.384875][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.549167][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.130457][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 373.651301][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 373.653979][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.869787][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.919085][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.992010][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.102600][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.246051][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.525489][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.619753][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.725604][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.777856][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1917'. [ 374.777980][T10628] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.812155][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.980242][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.168719][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.202911][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.325128][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.402460][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.676198][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.785959][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.851512][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.931526][T10640] netlink: 'syz.3.1921': attribute type 13 has an invalid length. [ 377.799401][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.814234][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 378.159763][ T8468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.219498][ T8468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.281725][ T8468] bond0 (unregistering): Released all slaves [ 378.558932][ T991] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 378.589386][T10660] comedi comedi0: Minor 3 could not be opened [ 379.017119][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.020223][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.166145][ T5911] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 379.340339][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 379.343585][ T991] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.343615][ T991] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.343638][ T991] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.343662][ T991] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.343707][ T991] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.343732][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.438745][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 379.696662][ T991] usb 1-1: GET_CAPABILITIES returned 0 [ 379.696716][ T991] usbtmc 1-1:16.0: can't read capabilities [ 379.997032][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 381.654946][ T5927] usb 1-1: USB disconnect, device number 26 [ 383.959557][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 383.959633][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 384.519365][ T5911] usb 5-1: device descriptor read/all, error -110 [ 384.671810][ T5911] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 384.722028][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 385.710970][ T5911] usb 5-1: device descriptor read/64, error -32 [ 385.727715][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 385.837627][ T5911] usb usb5-port1: attempt power cycle [ 386.178749][ T5911] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 386.361650][T10691] veth3: entered promiscuous mode [ 386.388831][ T5911] usb 5-1: device not accepting address 26, error -71 [ 386.627053][T10457] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.627319][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.650468][T10457] bridge_slave_0: entered allmulticast mode [ 386.664412][T10457] bridge_slave_0: entered promiscuous mode [ 386.823932][T10457] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.824356][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.824714][T10457] bridge_slave_1: entered allmulticast mode [ 386.878320][T10457] bridge_slave_1: entered promiscuous mode [ 388.462521][T10717] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 389.581369][ T8468] hsr_slave_0: left promiscuous mode [ 389.625053][ T8468] hsr_slave_1: left promiscuous mode [ 389.647713][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.647744][ T8468] batadv0: mtu less than device minimum [ 389.698125][ T8468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.723595][ T8468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.784465][ T8468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.929586][ T8468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.978909][ T8468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.022943][ T8468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.054032][ T8468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.126608][ T8468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.149596][ T8468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.818308][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.863183][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.538442][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.626829][ T8468] batman_adv: batadv0: Interface deactivated: dummy0 [ 391.626854][ T8468] batman_adv: batadv0: Removing interface: dummy0 [ 392.131522][ T8468] veth1_macvtap: left promiscuous mode [ 392.131653][ T8468] veth0_macvtap: left promiscuous mode [ 393.723597][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.369698][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.574811][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.619607][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.540216][ T991] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 397.688785][ T991] usb 1-1: Using ep0 maxpacket: 16 [ 397.711526][ T991] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.715571][ T991] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 397.715601][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.715620][ T991] usb 1-1: Product: syz [ 397.715634][ T991] usb 1-1: Manufacturer: syz [ 397.715645][ T991] usb 1-1: SerialNumber: syz [ 397.719905][ T991] usb 1-1: config 0 descriptor?? [ 398.239606][ T8468] team0 (unregistering): Port device team_slave_1 removed [ 398.533097][ T8468] team0 (unregistering): Port device team_slave_0 removed [ 400.333725][ T31] usb 1-1: USB disconnect, device number 27 [ 401.039273][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.170834][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.354603][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.424684][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.504179][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.717742][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.221190][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.273368][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.377305][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.837625][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.258626][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.389247][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.488835][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.749725][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.828815][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.878401][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.923957][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.649746][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.660911][T10828] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 404.660941][T10828] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 404.702683][T10457] team0: Port device team_slave_0 added [ 404.745014][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.750214][T10828] vhci_hcd vhci_hcd.0: Device attached [ 404.863982][T10835] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 404.883111][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.286164][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.304152][T10829] vhci_hcd: connection closed [ 405.310585][ T1298] vhci_hcd: stop threads [ 405.311633][ T1298] vhci_hcd: release socket [ 405.382469][T10457] team0: Port device team_slave_1 added [ 405.650909][ T31] usb 40-1: SetAddress Request (2) to port 0 [ 405.650956][ T31] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 405.650970][ T31] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 31, name: kworker/1:0 [ 405.650987][ T31] preempt_count: 0, expected: 0 [ 405.650996][ T31] RCU nest depth: 0, expected: 0 [ 405.651006][ T31] 6 locks held by kworker/1:0/31: [ 405.651018][ T31] #0: ffff888019793538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 405.651079][ T31] #1: ffffc90000a5fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 405.651129][ T31] #2: ffff8881473b0188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 405.651178][ T31] #3: ffff8881473b45b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 405.651226][ T31] #4: ffff888027938f58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 405.651273][ T31] #5: ffff88802809a268 (&mbus->lock#2){+.+.}-{3:3}, at: mon_complete+0x5c/0x200 [ 405.651328][ T31] irq event stamp: 505330 [ 405.651336][ T31] hardirqs last enabled at (505329): [] _raw_spin_unlock_irqrestore+0x85/0x110 [ 405.651370][ T31] hardirqs last disabled at (505330): [] vhci_urb_enqueue+0xb5f/0xee0 [ 405.651401][ T31] softirqs last enabled at (504146): [] __local_bh_enable_ip+0x1b3/0x2e0 [ 405.651431][ T31] softirqs last disabled at (504140): [] wg_packet_decrypt_worker+0xcd/0xce0 [ 405.651469][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 405.651492][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.651505][ T31] Workqueue: usb_hub_wq hub_event [ 405.651534][ T31] Call Trace: [ 405.651543][ T31] [ 405.651553][ T31] dump_stack_lvl+0x189/0x250 [ 405.651584][ T31] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 405.651607][ T31] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 405.651634][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.651667][ T31] ? rtlock_slowlock_locked+0xd8/0x4010 [ 405.651699][ T31] ? print_lock_name+0xde/0x100 [ 405.651733][ T31] __might_resched+0x44b/0x5d0 [ 405.651767][ T31] ? __pfx___might_resched+0x10/0x10 [ 405.651791][ T31] ? mon_complete+0x5c/0x200 [ 405.651818][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 405.651864][ T31] rt_spin_lock+0xc7/0x3e0 [ 405.651892][ T31] ? __pfx_rt_spin_lock+0x10/0x10 [ 405.651926][ T31] ? rt_mutex_slowunlock+0x493/0x8a0 [ 405.651964][ T31] mon_complete+0x5c/0x200 [ 405.651995][ T31] __usb_hcd_giveback_urb+0x254/0x5e0 [ 405.652032][ T31] vhci_urb_enqueue+0xb82/0xee0 [ 405.652078][ T31] ? __pfx_vhci_urb_enqueue+0x10/0x10 [ 405.652106][ T31] ? rt_spin_unlock+0x150/0x200 [ 405.652131][ T31] ? usb_hcd_map_urb_for_dma+0x3c1/0xd80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 405.652160][ T31] ? rt_spin_unlock+0x161/0x200 [ 405.652188][ T31] usb_hcd_submit_urb+0x320/0x1a80 [ 405.652233][ T31] usb_start_wait_urb+0x114/0x4c0 [ 405.652265][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 405.652320][ T31] usb_control_msg+0x232/0x3e0 [ 405.652351][ T31] hub_port_init+0xe24/0x2800 [ 405.652406][ T31] hub_event+0x2532/0x4a20 [ 405.652430][ T31] ? __pfx_bpf_trace_run4+0x10/0x10 [ 405.652531][ T31] ? __pfx_hub_event+0x10/0x10 [ 405.652554][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 405.652588][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 405.652616][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 405.652641][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 405.652669][ T31] process_scheduled_works+0xae1/0x17b0 [ 405.652737][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 405.652789][ T31] worker_thread+0x8a0/0xda0 [ 405.652853][ T31] kthread+0x711/0x8a0 [ 405.652889][ T31] ? __pfx_worker_thread+0x10/0x10 [ 405.652914][ T31] ? __pfx_kthread+0x10/0x10 [ 405.652947][ T31] ? rt_spin_unlock+0x150/0x200 [ 405.652977][ T31] ? rt_spin_unlock+0x161/0x200 [ 405.652999][ T31] ? __pfx_kthread+0x10/0x10 [ 405.653031][ T31] ret_from_fork+0x4bc/0x870 [ 405.653061][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 405.653097][ T31] ? __switch_to_asm+0x39/0x70 [ 405.653116][ T31] ? __switch_to_asm+0x33/0x70 [ 405.653135][ T31] ? __pfx_kthread+0x10/0x10 [ 405.653167][ T31] ret_from_fork_asm+0x1a/0x30 [ 405.653214][ T31] [ 405.653295][ T31] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 405.715169][ T1298] vhci_hcd: disconnect device [ 405.718787][ T991] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 405.995219][ T991] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 405.995277][ T991] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 405.995301][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.101731][ T991] usb 5-1: config 0 descriptor?? [ 408.928767][ T991] usbhid 5-1:0.0: can't add hid device: -71 [ 408.928905][ T991] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 409.036356][ T991] usb 5-1: USB disconnect, device number 28 [ 410.305472][ T8468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.607082][ T8468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.679050][ T31] usb 40-1: device descriptor read/8, error -110 [ 410.884837][ T8468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.074523][ T31] usb usb40-port1: attempt power cycle [ 411.144995][ T8468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.540660][ T8468] bridge_slave_1: left allmulticast mode [ 411.540683][ T8468] bridge_slave_1: left promiscuous mode [ 411.540910][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.630884][ T31] usb usb40-port1: unable to enumerate USB device [ 411.645630][ T8468] bridge_slave_0: left allmulticast mode [ 411.645663][ T8468] bridge_slave_0: left promiscuous mode [ 411.645971][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.609812][ T8468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.669416][ T8468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.722980][ T8468] bond0 (unregistering): Released all slaves [ 415.079476][ T8468] hsr_slave_0: left promiscuous mode [ 415.098805][ T8468] hsr_slave_1: left promiscuous mode [ 415.100628][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.100648][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.151798][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.151831][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.216847][ T8468] veth1_macvtap: left promiscuous mode [ 415.216923][ T8468] veth0_macvtap: left promiscuous mode [ 415.217091][ T8468] veth1_vlan: left promiscuous mode [ 415.217448][ T8468] veth0_vlan: left promiscuous mode