last executing test programs: 22.059977811s ago: executing program 4 (id=1510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d0000000000000000170000000800", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 21.185993813s ago: executing program 4 (id=1514): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x200200a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000040)={'bond_slave_0\x00', 0x1}) shutdown(r3, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) 19.711910219s ago: executing program 4 (id=1520): r0 = socket$inet(0x2, 0x3, 0xe7) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000540)={0x7, 'vlan0\x00', {0x7}, 0x8}) 18.498770511s ago: executing program 4 (id=1524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d000000000000000017000000080003", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 18.497245687s ago: executing program 1 (id=1525): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0xaea875f81913296}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000c40)=ANY=[@ANYBLOB="8caa9ce6aaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c5157907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649ff7f0000000000008dfa871c5185"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000440)={0x0, 0x2, 0x8001, 0x3d7}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 18.382245292s ago: executing program 3 (id=1527): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18.357737583s ago: executing program 4 (id=1528): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x0) 17.457960444s ago: executing program 1 (id=1531): gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) io_setup(0x19, &(0x7f00000009c0)) write$UHID_INPUT(r2, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0x2, 0x2, 0x0, 0x2}, 0x20) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0cc5605, &(0x7f0000000200)={0xa, @win={{0x0, 0x0, 0x31324d4e}, 0x0, 0x0, 0x0, 0x0, 0x0}}) mknod(&(0x7f0000000040)='./bus\x00', 0x8000, 0x2) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 17.270434345s ago: executing program 4 (id=1532): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafbe863cac505", 0x14}, {&(0x7f0000000000)="448b7cff030000000000008a15df", 0xe}, {&(0x7f0000000100)="36d1ce1e", 0x4}], 0x3) 17.145724514s ago: executing program 3 (id=1533): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x10000, 0x0, 0x1, 0x1, 0x1, 0x2}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee8000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x4, 0x4}, {0x6000, 0x6000, 0xf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x4, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x40, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x4, 0x0, 0xa1, 0x20}, {0x2000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.087483855s ago: executing program 0 (id=1534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040), 0x0, 0x7) r2 = dup2(r1, r0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000380)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e9, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f0000000340)=[{0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={r5, 0x0, 0x0}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="980370e55684648002000000000000000000000000000000d34b338934c88eacd8456fb610318ed042826cbb42a965f80e61e4b673e9c52ad78ec8b50f081d4ddce30a279b6ec5a35f4b42ba3446c209c23c851189814d349f7d81", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.729004795s ago: executing program 0 (id=1535): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) sendmsg$nl_route(r3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r6 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) 15.858060697s ago: executing program 0 (id=1537): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x488d4) 15.842571116s ago: executing program 3 (id=1538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.721172944s ago: executing program 0 (id=1539): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20040400) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) 15.718607328s ago: executing program 1 (id=1540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x122) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x4) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) 15.497908905s ago: executing program 1 (id=1541): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 13.75030212s ago: executing program 3 (id=1542): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 12.750645332s ago: executing program 3 (id=1543): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="50000000080211000000000000000000000000640001000006020202020252190182b1fd396d09d6291e5b5bd1d7dadd4533b56736dca927fc4cf337460800000000000000e7469b285f429f897fea47e848b0f257d0061d77fd36410b7b3f6495a93378a8b16b081998f848b3d6acd469cf00"/127], 0x2f) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x1, 0x1, [0x1]}, 0xa) r8 = syz_open_dev$rtc(&(0x7f0000000080), 0xfffffff0, 0x48000) ioctl$RTC_UIE_ON(r8, 0x7003) 12.31875659s ago: executing program 1 (id=1544): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 11.946128871s ago: executing program 2 (id=1545): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040), 0x0, 0x7) r2 = dup2(r1, r0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000380)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e9, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f0000000340)=[{0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={r5, 0x0, 0x0}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="980370e55684648002000000000000000000000000000000d34b338934c88eacd8456fb610318ed042826cbb42a965f80e61e4b673e9c52ad78ec8b50f081d4ddce30a279b6ec5a35f4b42ba3446c209c23c851189814d349f7d81", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.8711254s ago: executing program 2 (id=1546): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x1, 0xfffffffe, 0x2}) 11.801614198s ago: executing program 2 (id=1547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) sendmsg$nl_route(r3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r6 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) 1.070979466s ago: executing program 0 (id=1548): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001a1"], 0x340a) 999.825036ms ago: executing program 32 (id=1532): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafbe863cac505", 0x14}, {&(0x7f0000000000)="448b7cff030000000000008a15df", 0xe}, {&(0x7f0000000100)="36d1ce1e", 0x4}], 0x3) 894.179854ms ago: executing program 2 (id=1550): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x488d4) 884.250685ms ago: executing program 1 (id=1551): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x5, 0x96, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x602080, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0xffff0018) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030001"], 0xc041) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r7, 0x4b46, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 586.226072ms ago: executing program 2 (id=1552): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x6, 0x2, 0x2, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000b40)={{r1}, 0x0, 0x0, @unused=[0x13, 0xa, 0x0, 0x4], @devid}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0xffda, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000002600)=ANY=[], 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 561.600285ms ago: executing program 3 (id=1553): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="17f2b2de5c6b0db5d25446463f74d3740a70f6e0249ca79ea3579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070040000003d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b0080fe56fc785245e3dd4eb6fd1d435e39d84c964a20acf7d7ef519aea75b91aa77cac6acc28cafff73c92dc58cdc172494f050a1678bcfcc26a1ef64ec814ead5ca32517f28211601a4cbaf0c28ef055c0be316c81a5a87e4c019b2e1b2d2110bf8ad6436a4c5504867c9f22553508a636e4c75132091fe69df861f695475f6ba7fc99c9e1d16e33eed41506c8d8d6979cd6ffbf4d6dee28c35df88e92eae76b863ac31", 0xf8}, {&(0x7f0000000700)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42c", 0x38}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/114, 0x72}, {&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000280)=""/251, 0xfb}], 0x4}, 0x0) 347.991541ms ago: executing program 0 (id=1554): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000280)={0x3, 0x100, 0x8001, 0x1f, 0x3, 0x1, 0x8, 0xf, 0x3, 0xb953, 0x1, 0x0, 0x1, 0x2}) 0s ago: executing program 2 (id=1555): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4cf0, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x2, 0x0, 0x100d5ba, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x40005, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.0.845'. [ 256.800394][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 257.133939][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 257.233361][ T8296] netlink: 'syz.3.844': attribute type 1 has an invalid length. [ 257.302935][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.302962][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.302975][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.303002][ T5885] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.303015][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.313614][ T5885] usb 5-1: config 0 descriptor?? [ 257.878044][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 257.878090][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 257.878116][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 257.878142][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 257.878167][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 257.878192][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 257.878217][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 257.878242][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 257.878267][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 257.878291][ T5885] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 258.201119][ T5800] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1 [ 258.203101][ T5800] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 258.222125][ T5885] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 258.267853][ T5885] usb 5-1: USB disconnect, device number 2 [ 258.582081][ T8322] fido_id[8322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 259.218651][ T8334] syzkaller0: entered promiscuous mode [ 259.218679][ T8334] syzkaller0: entered allmulticast mode [ 259.837010][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 259.953308][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.861'. [ 259.986698][ T8348] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 261.206709][ T5877] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 261.381975][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.381997][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.382010][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.382036][ T5877] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.382049][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.386518][ T5877] usb 3-1: config 0 descriptor?? [ 261.940555][ T5877] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 262.094099][ T5877] usb 3-1: USB disconnect, device number 4 [ 262.184305][ T8371] fido_id[8371]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:047F:FFFF.0002/report_descriptor': No such device [ 262.361592][ T5856] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 262.543178][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 262.547421][ T5856] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 262.547451][ T5856] usb 5-1: config 16 has an invalid interface number: 3 but max is 0 [ 262.547471][ T5856] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 262.547488][ T5856] usb 5-1: config 16 has no interface number 0 [ 262.551391][ T5856] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.551423][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=199, SerialNumber=0 [ 262.551443][ T5856] usb 5-1: Product: syz [ 262.556430][ T5800] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 262.557173][ T5800] Bluetooth: hci4: Injecting HCI hardware error event [ 262.559239][ T5800] Bluetooth: hci4: hardware error 0x00 [ 262.752330][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 262.811533][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'. [ 263.067315][ T5856] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 263.229964][ T5856] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 263.231243][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.231304][ T5856] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.231329][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.232416][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.232470][ T5856] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.232494][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.233586][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.233644][ T5856] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.233667][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.234775][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.234830][ T5856] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.234846][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.236974][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.237026][ T5856] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.237044][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.284028][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.284091][ T5856] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.284116][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.306201][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.306262][ T5856] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.306287][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.308336][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.308390][ T5856] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.308428][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.311546][ T5856] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 263.311570][ T5856] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 263.311588][ T5856] usb 3-1: Product: syz [ 263.311608][ T5856] usb 3-1: Manufacturer: syz [ 263.311620][ T5856] usb 3-1: SerialNumber: syz [ 263.322974][ T5856] usb 3-1: config 0 descriptor?? [ 263.535717][ T8398] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 263.608670][ T5856] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 263.633872][ T5856] usb 3-1: USB disconnect, device number 5 [ 263.660800][ T5856] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 265.034761][ T5800] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 265.251062][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 265.259201][ T5856] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 265.305051][ T31] usb 5-1: USB disconnect, device number 3 [ 265.343558][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 265.421729][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.421759][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.421772][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.421804][ T5856] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.421820][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.426537][ T5856] usb 1-1: config 0 descriptor?? [ 265.884581][ T5856] hid_parser_main: 20 callbacks suppressed [ 265.884600][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.884621][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.884636][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.884650][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.884666][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.884681][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.884696][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.884710][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.884724][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.884738][ T5856] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 265.889697][ T5856] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 266.069263][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.069348][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.107802][ T5856] usb 1-1: USB disconnect, device number 7 [ 266.854397][ T8443] fido_id[8443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 267.291664][ T5885] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 267.528607][ T5885] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 267.528640][ T5885] usb 2-1: config 0 has no interface number 0 [ 267.528693][ T5885] usb 2-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 267.528722][ T5885] usb 2-1: config 0 interface 214 has no altsetting 0 [ 267.533238][ T5885] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 267.533269][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.533289][ T5885] usb 2-1: Product: syz [ 267.533310][ T5885] usb 2-1: Manufacturer: syz [ 267.533325][ T5885] usb 2-1: SerialNumber: syz [ 267.619619][ T5885] usb 2-1: config 0 descriptor?? [ 267.621497][ T8455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 267.961587][ T8455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 268.383979][ T8471] netlink: 'syz.4.892': attribute type 1 has an invalid length. [ 268.595294][ T5856] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 268.780607][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.780643][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.783844][ T5856] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 268.783874][ T5856] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.783894][ T5856] usb 3-1: Manufacturer: syz [ 268.930967][ T5856] usb 3-1: config 0 descriptor?? [ 269.074450][ T8480] netlink: 48 bytes leftover after parsing attributes in process `syz.4.902'. [ 269.184490][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 269.185990][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 269.186019][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 269.420451][ T5856] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 269.499702][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 269.626099][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 270.177945][ T5799] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 270.345258][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.345360][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.345383][ T5799] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.345427][ T5799] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.345451][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.456515][ T5799] usb 5-1: config 0 descriptor?? [ 270.938526][ T5856] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 270.938589][ T5856] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 271.025689][ T5799] usbhid 5-1:0.0: can't add hid device: -71 [ 271.025841][ T5799] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 271.048023][ T5856] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 271.129469][ T5856] usb 3-1: USB disconnect, device number 6 [ 271.159504][ T5799] usb 5-1: USB disconnect, device number 4 [ 271.215851][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 271.217796][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 271.600421][ T8498] fido_id[8498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 271.661733][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 271.662372][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0040: -71 [ 271.662964][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 271.663649][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 271.706961][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001e: -71 [ 271.721672][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x001a: -71 [ 271.723034][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x001c: -71 [ 271.723745][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001a: -71 [ 271.724335][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001c: -71 [ 271.725045][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 271.725620][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 271.726166][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 271.726748][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 271.727315][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 271.835559][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 271.836285][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 271.837067][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 271.837639][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 271.838270][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 271.838877][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 271.839459][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 271.840056][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 271.840798][ T5885] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 272.004526][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 272.385254][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 272.385271][ T37] audit: type=1326 audit(1761344204.268:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 272.385307][ T37] audit: type=1326 audit(1761344204.268:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 272.385332][ T37] audit: type=1326 audit(1761344204.268:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 272.385356][ T37] audit: type=1326 audit(1761344204.268:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 272.385381][ T37] audit: type=1326 audit(1761344204.268:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 272.385405][ T37] audit: type=1326 audit(1761344204.268:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 272.592776][ T5885] ax88179_178a 2-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 92:48:fc:30:af:f6 [ 272.617800][ T5885] usb 2-1: USB disconnect, device number 5 [ 272.641476][ T5885] ax88179_178a 2-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 272.810687][ T37] audit: type=1326 audit(1761344204.660:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 272.813111][ T37] audit: type=1326 audit(1761344204.679:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 273.052846][ T8519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.915'. [ 273.376897][ T5885] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 273.466355][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 273.549102][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.549125][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.549138][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.549164][ T5885] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.549177][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.554219][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 273.599602][ T5885] usb 1-1: config 0 descriptor?? [ 274.087672][ T5885] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 274.414637][ T5799] usb 1-1: USB disconnect, device number 8 [ 274.704729][ T8507] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 275.277332][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 275.353023][ T5856] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 275.517291][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.517329][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.517352][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.517398][ T5856] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.517421][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.531854][ T5856] usb 3-1: config 0 descriptor?? [ 275.545479][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 275.705890][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 275.710391][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.710425][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.710476][ T5884] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 275.710559][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.780797][ T5884] usb 2-1: config 0 descriptor?? [ 276.073753][ T5856] usbhid 3-1:0.0: can't add hid device: -71 [ 276.074082][ T5856] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.126498][ T5856] usb 3-1: USB disconnect, device number 7 [ 276.186096][ T8557] netlink: 48 bytes leftover after parsing attributes in process `syz.3.929'. [ 276.275415][ T5884] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 276.464195][ T5884] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device [ 276.464259][ T5884] koneplus 0003:1E7D:2D51.0006: couldn't install mouse [ 276.471469][ T5884] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -71 [ 276.497560][ T5884] usb 2-1: USB disconnect, device number 6 [ 276.791149][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 276.999880][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 277.395241][ T31] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 277.560964][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.560993][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.561048][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.561092][ T31] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 277.561114][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.594989][ T31] hub 5-1:1.0: bad descriptor, ignoring hub [ 277.595031][ T31] hub 5-1:1.0: probe with driver hub failed with error -5 [ 277.595982][ T31] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 277.609967][ T8600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.946'. [ 277.801897][ T5885] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 277.813914][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 277.891201][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 277.909084][ T31] usb 5-1: USB disconnect, device number 5 [ 277.971239][ T5885] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 277.971303][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.971346][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.971370][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.046039][ T5885] usbtmc 1-1:16.0: bulk endpoints not found [ 278.340198][ T8615] fuse: Bad value for 'group_id' [ 278.340220][ T8615] fuse: Bad value for 'group_id' [ 278.739518][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 278.913292][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.975481][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 280.063550][ T8643] netlink: 48 bytes leftover after parsing attributes in process `syz.3.961'. [ 280.335677][ T8649] fuse: Bad value for 'group_id' [ 280.335693][ T8649] fuse: Bad value for 'group_id' [ 280.417841][ T37] audit: type=1326 audit(1761344467.784:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8646 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 280.418311][ T37] audit: type=1326 audit(1761344467.784:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8646 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 280.419041][ T37] audit: type=1326 audit(1761344467.784:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8646 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 280.420395][ T37] audit: type=1326 audit(1761344467.784:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8646 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 280.541027][ T8652] overlayfs: failed lookup in lower (newroot/177, name='file1', err=-40): overlapping layers [ 280.541959][ T8652] overlayfs: failed lookup in lower (newroot/177, name='file1', err=-40): overlapping layers [ 280.542946][ T8652] overlayfs: failed lookup in lower (newroot/177, name='file1', err=-40): overlapping layers [ 280.789718][ T37] audit: type=1326 audit(1761344468.139:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8646 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 280.790190][ T37] audit: type=1326 audit(1761344468.139:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8646 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 281.206541][ T8661] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 281.250365][ T5799] usb 1-1: USB disconnect, device number 9 [ 281.373749][ T8667] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 281.434818][ T8670] @0Ù: renamed from bond_slave_1 (while UP) [ 281.597059][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 281.734752][ T8679] fuse: Bad value for 'group_id' [ 281.734775][ T8679] fuse: Bad value for 'group_id' [ 282.021402][ T8688] netlink: 48 bytes leftover after parsing attributes in process `syz.2.978'. [ 282.651026][ T8699] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 284.196475][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 284.396152][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 284.699754][ T5799] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 284.865435][ T5799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.865463][ T5799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 284.865518][ T5799] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.865562][ T5799] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 284.866631][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.939046][ T5799] hub 4-1:1.0: bad descriptor, ignoring hub [ 284.939074][ T5799] hub 4-1:1.0: probe with driver hub failed with error -5 [ 284.939704][ T5799] cdc_wdm 4-1:1.0: skipping garbage [ 284.939756][ T5799] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 285.047161][ T8733] netlink: 48 bytes leftover after parsing attributes in process `syz.4.993'. [ 285.267133][ T5884] usb 4-1: USB disconnect, device number 3 [ 285.362568][ T8735] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 285.540444][ T8739] Mount JFS Failure: -22 [ 285.540457][ T8739] jfs_mount failed w/return code = -22 [ 286.021578][ T5885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 286.246339][ T5885] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 286.246370][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.307056][ T5885] usb 3-1: config 0 descriptor?? [ 286.358694][ T5885] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 286.755388][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.756862][ T5885] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 286.756956][ T5885] usb 3-1: media controller created [ 286.898273][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.955752][ T5885] gp8psk_fe: Frontend attached [ 286.956113][ T5885] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 286.971488][ T5885] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 287.109437][ T5885] gp8psk: usb in 138 operation failed. [ 287.109458][ T5885] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 287.109471][ T5885] gp8psk: found Genpix USB device pID = 203 (hex) [ 287.164639][ T5856] usb 3-1: USB disconnect, device number 8 [ 287.468993][ T8756] tipc: Enabling of bearer rejected, failed to enable media [ 287.493222][ T8758] syzkaller0: entered promiscuous mode [ 287.493253][ T8758] syzkaller0: entered allmulticast mode [ 287.716850][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 287.764613][ T5856] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 287.913371][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 288.045066][ T8786] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1008'. [ 288.089251][ T8787] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 288.236915][ T5800] Bluetooth: hci3: connection err: -111 [ 288.307815][ T8787] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 289.138191][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 289.167430][ T8827] fuse: Unknown parameter 'user_i00000000000000000000' [ 289.281546][ T8833] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1030'. [ 289.301466][ T31] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 289.301494][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.307782][ T31] usb 5-1: config 0 descriptor?? [ 289.347035][ T31] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 289.584435][ T8838] syzkaller1: entered promiscuous mode [ 289.584465][ T8838] syzkaller1: entered allmulticast mode [ 289.768698][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.770127][ T31] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 289.770188][ T31] usb 5-1: media controller created [ 289.852754][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.900198][ T31] gp8psk_fe: Frontend attached [ 289.900257][ T31] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 289.901293][ T31] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 290.071508][ T8840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1032'. [ 290.127564][ T31] gp8psk: usb in 138 operation failed. [ 290.127586][ T31] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 290.127598][ T31] gp8psk: found Genpix USB device pID = 203 (hex) [ 290.142505][ T31] usb 5-1: USB disconnect, device number 6 [ 290.422276][ T31] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 290.466645][ T5799] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 290.523346][ T8836] syz.2.1031 (8836) used greatest stack depth: 16560 bytes left [ 290.629624][ T5799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.629687][ T5799] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.629711][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.683771][ T5799] usb 2-1: config 0 descriptor?? [ 290.705463][ T5799] pwc: Askey VC010 type 2 USB webcam detected. [ 291.146154][ T5799] pwc: recv_control_msg error -32 req 02 val 2b00 [ 291.156385][ T5799] pwc: recv_control_msg error -32 req 02 val 2700 [ 291.161131][ T8860] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1041'. [ 291.186167][ T5799] pwc: recv_control_msg error -32 req 02 val 2c00 [ 291.191845][ T5799] pwc: recv_control_msg error -32 req 04 val 1000 [ 291.192809][ T5799] pwc: recv_control_msg error -32 req 04 val 1300 [ 291.212123][ T5799] pwc: recv_control_msg error -32 req 04 val 1400 [ 291.213170][ T5799] pwc: recv_control_msg error -32 req 02 val 2000 [ 291.214923][ T5799] pwc: recv_control_msg error -32 req 02 val 2100 [ 291.215659][ T5799] pwc: recv_control_msg error -32 req 04 val 1500 [ 291.223781][ T5799] pwc: recv_control_msg error -32 req 02 val 2500 [ 291.328734][ T8865] fuse: Unknown parameter 'user_i00000000000000000000' [ 291.440816][ T5799] pwc: recv_control_msg error -71 req 02 val 2600 [ 291.441391][ T5799] pwc: recv_control_msg error -71 req 02 val 2900 [ 291.441926][ T5799] pwc: recv_control_msg error -71 req 02 val 2800 [ 291.442628][ T5799] pwc: recv_control_msg error -71 req 04 val 1100 [ 291.443110][ T5799] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.488018][ T5799] pwc: Registered as video103. [ 291.499134][ T5799] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 291.549835][ T5799] usb 2-1: USB disconnect, device number 7 [ 291.727265][ T8872] kvm: pic: non byte read [ 291.727541][ T8872] kvm: pic: non byte read [ 291.727967][ T8872] kvm: pic: non byte read [ 291.728216][ T8872] kvm: pic: non byte read [ 291.728485][ T8872] kvm: pic: non byte read [ 291.728740][ T8872] kvm: pic: non byte read [ 291.728986][ T8872] kvm: pic: non byte read [ 291.729233][ T8872] kvm: pic: non byte read [ 291.729479][ T8872] kvm: pic: non byte read [ 291.729733][ T8872] kvm: pic: non byte read [ 291.841668][ T8876] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1046'. [ 292.315779][ T8885] fuse: Unknown parameter 'use00000000000000000000' [ 292.420816][ T8887] evm: overlay not supported [ 292.675980][ T8895] fuse: Unknown parameter 'user_i00000000000000000000' [ 293.032464][ T8900] kvm: pic: level sensitive irq not supported [ 293.064665][ T8905] fuse: Unknown parameter 'grou00000000000000000000' [ 293.293727][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.478063][ T8913] fuse: Unknown parameter 'use00000000000000000000' [ 293.537387][ T8916] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1064'. [ 293.557489][ T8919] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0) [ 293.828186][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.997128][ T8927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.002539][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.660893][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.923939][ T8931] fuse: Unknown parameter 'grou00000000000000000000' [ 294.940686][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.448465][ T5799] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 295.618894][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.618930][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.618956][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.618976][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.619021][ T5799] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.619042][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.692754][ T5799] usb 1-1: config 0 descriptor?? [ 296.113675][ T8953] fuse: Unknown parameter 'use00000000000000000000' [ 296.170654][ T5799] hid_parser_main: 12 callbacks suppressed [ 296.170682][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.170721][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.170746][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.170772][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.170797][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.170823][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.170848][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.170874][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.170899][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.170924][ T5799] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 296.360838][ T5799] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 296.406330][ T37] audit: type=1326 audit(1761344482.734:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.407422][ T37] audit: type=1326 audit(1761344482.734:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.407475][ T37] audit: type=1326 audit(1761344482.734:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.418325][ T37] audit: type=1326 audit(1761344482.734:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.418379][ T37] audit: type=1326 audit(1761344482.744:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.428729][ T37] audit: type=1326 audit(1761344482.744:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.441898][ T37] audit: type=1326 audit(1761344482.762:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.441949][ T37] audit: type=1326 audit(1761344482.762:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.442357][ T37] audit: type=1326 audit(1761344482.762:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.446850][ T37] audit: type=1326 audit(1761344482.772:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 296.478953][ T5856] usb 1-1: USB disconnect, device number 10 [ 296.679864][ T8960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1079'. [ 296.852189][ T8959] fido_id[8959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 297.124020][ T5800] Bluetooth: hci1: Malformed LE Event: 0x0d [ 298.545728][ T8982] fuse: Unknown parameter 'user_i00000000000000000000' [ 298.941626][ T8965] syz.2.1081 (8965): drop_caches: 2 [ 299.255938][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 299.419380][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.419417][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.423340][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 299.423371][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 299.423390][ T9] usb 1-1: Manufacturer: syz [ 299.482640][ T9] usb 1-1: config 0 descriptor?? [ 299.544660][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 299.705226][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 299.710604][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.710637][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.710677][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 299.710701][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.733599][ T31] usb 5-1: config 0 descriptor?? [ 299.964069][ T9] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 300.194989][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 300.195199][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 300.240112][ T31] usb 5-1: USB disconnect, device number 7 [ 300.582113][ T5799] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 300.749437][ T5799] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 300.749532][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.813944][ T5799] usb 3-1: config 0 descriptor?? [ 300.869382][ T5799] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 300.949848][ T9021] fuse: Bad value for 'fd' [ 301.376487][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.378165][ T5799] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 301.378295][ T5799] usb 3-1: media controller created [ 301.531965][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.730935][ T9] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 301.730997][ T9] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 301.734528][ T9] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 301.766782][ T9] usb 1-1: USB disconnect, device number 11 [ 301.785124][ T5799] gp8psk_fe: Frontend attached [ 301.785179][ T5799] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 301.785578][ T5799] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 302.136133][ T5799] gp8psk: usb in 138 operation failed. [ 302.136148][ T5799] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 302.136160][ T5799] gp8psk: found Genpix USB device pID = 203 (hex) [ 302.174134][ T5799] usb 3-1: USB disconnect, device number 9 [ 302.222337][ T9039] fido_id[9039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 302.477197][ T5799] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 302.975780][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 302.975803][ T37] audit: type=1326 audit(1761344488.877:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 302.980866][ T37] audit: type=1326 audit(1761344488.877:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 302.984307][ T37] audit: type=1326 audit(1761344488.887:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 302.984938][ T37] audit: type=1326 audit(1761344488.887:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 302.994090][ T37] audit: type=1326 audit(1761344488.896:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 302.994140][ T37] audit: type=1326 audit(1761344488.896:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 302.994181][ T37] audit: type=1326 audit(1761344488.896:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 302.994221][ T37] audit: type=1326 audit(1761344488.896:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 302.994989][ T37] audit: type=1326 audit(1761344488.896:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 302.996060][ T37] audit: type=1326 audit(1761344488.896:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 303.374665][ T9057] fuse: Bad value for 'fd' [ 303.441402][ T5799] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 303.605628][ T5799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.605705][ T5799] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 303.605721][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.610932][ T5799] usb 2-1: config 0 descriptor?? [ 303.663897][ T5799] pwc: Askey VC010 type 2 USB webcam detected. [ 304.126240][ T5799] pwc: recv_control_msg error -32 req 02 val 2b00 [ 304.127443][ T5799] pwc: recv_control_msg error -32 req 02 val 2700 [ 304.128375][ T5799] pwc: recv_control_msg error -32 req 02 val 2c00 [ 304.129454][ T5799] pwc: recv_control_msg error -32 req 04 val 1000 [ 304.134592][ T5799] pwc: recv_control_msg error -32 req 04 val 1300 [ 304.135864][ T5799] pwc: recv_control_msg error -32 req 04 val 1400 [ 304.136719][ T5799] pwc: recv_control_msg error -32 req 02 val 2000 [ 304.137572][ T5799] pwc: recv_control_msg error -32 req 02 val 2100 [ 304.138426][ T5799] pwc: recv_control_msg error -32 req 04 val 1500 [ 304.139268][ T5799] pwc: recv_control_msg error -32 req 02 val 2500 [ 304.342153][ T9069] netlink: 'syz.2.1122': attribute type 58 has an invalid length. [ 304.364276][ T5799] pwc: recv_control_msg error -71 req 02 val 2600 [ 304.364741][ T5799] pwc: recv_control_msg error -71 req 02 val 2900 [ 304.365156][ T5799] pwc: recv_control_msg error -71 req 02 val 2800 [ 304.366586][ T5799] pwc: recv_control_msg error -71 req 04 val 1100 [ 304.366977][ T5799] pwc: recv_control_msg error -71 req 04 val 1200 [ 304.386844][ T5799] pwc: Registered as video103. [ 304.405152][ T5799] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 304.525914][ T5799] usb 2-1: USB disconnect, device number 8 [ 305.717747][ T9090] netlink: del zone limit has 4 unknown bytes [ 305.792518][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 305.971393][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.971423][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.996665][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 305.996688][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.996699][ T10] usb 2-1: Product: syz [ 305.996707][ T10] usb 2-1: Manufacturer: syz [ 305.996715][ T10] usb 2-1: SerialNumber: syz [ 306.001683][ T10] usb 2-1: config 0 descriptor?? [ 306.117926][ T9105] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 306.143627][ T31] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 306.271418][ T9080] comedi comedi3: pcmda12: a I/O base address must be specified [ 306.321085][ T31] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 306.321107][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.321119][ T31] usb 5-1: Product: syz [ 306.321127][ T31] usb 5-1: Manufacturer: syz [ 306.321135][ T31] usb 5-1: SerialNumber: syz [ 306.361724][ T31] usb 5-1: config 0 descriptor?? [ 306.590565][ T31] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 307.192114][ T5799] usb 2-1: USB disconnect, device number 9 [ 307.340130][ T5800] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 307.630215][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 307.764160][ T9129] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 307.824934][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.824968][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.824987][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 307.824999][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.825033][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.825057][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.832492][ T10] usb 4-1: config 0 descriptor?? [ 308.137964][ T31] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 308.161994][ T31] usb 5-1: USB disconnect, device number 8 [ 308.387719][ T10] hid_parser_main: 12 callbacks suppressed [ 308.387756][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.387791][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.387816][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.387842][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.387867][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.387891][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.387915][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.387939][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.387964][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.387988][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.436515][ T9134] kvm: pic: level sensitive irq not supported [ 308.436590][ T9134] picdev_read: 7 callbacks suppressed [ 308.436605][ T9134] kvm: pic: non byte read [ 308.479331][ T10] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 308.595921][ T10] usb 4-1: USB disconnect, device number 4 [ 308.710594][ T9141] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1151'. [ 308.714565][ T9139] fido_id[9139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 308.779298][ T9143] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1151'. [ 308.974790][ T37] kauditd_printk_skb: 60 callbacks suppressed [ 308.974811][ T37] audit: type=1326 audit(1761344494.487:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 308.975297][ T37] audit: type=1326 audit(1761344494.487:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 308.975457][ T37] audit: type=1326 audit(1761344494.487:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 308.975662][ T37] audit: type=1326 audit(1761344494.487:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 308.976052][ T37] audit: type=1326 audit(1761344494.487:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 308.976209][ T37] audit: type=1326 audit(1761344494.487:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 308.986803][ T37] audit: type=1326 audit(1761344494.497:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 308.986857][ T37] audit: type=1326 audit(1761344494.497:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 308.987529][ T37] audit: type=1326 audit(1761344494.497:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 308.988163][ T37] audit: type=1326 audit(1761344494.497:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0feefc9 code=0x7ffc0000 [ 309.111635][ T5800] Bluetooth: hci2: unexpected event for opcode 0x0038 [ 309.576841][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 309.621273][ T9165] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 309.651704][ T5799] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 309.762183][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.762213][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.768713][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 309.768744][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.768763][ T10] usb 5-1: Product: syz [ 309.768902][ T10] usb 5-1: Manufacturer: syz [ 309.768918][ T10] usb 5-1: SerialNumber: syz [ 309.826453][ T10] usb 5-1: config 0 descriptor?? [ 309.840418][ T5799] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 309.840451][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.950830][ T5799] usb 3-1: config 0 descriptor?? [ 310.093232][ T9149] comedi comedi3: pcmda12: a I/O base address must be specified [ 310.826214][ T10] usb 5-1: USB disconnect, device number 9 [ 310.902583][ T5800] Bluetooth: hci1: unexpected event for opcode 0x0038 [ 311.662425][ T5800] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 311.662742][ T5800] Bluetooth: hci3: Injecting HCI hardware error event [ 311.665848][ T5800] Bluetooth: hci3: hardware error 0x00 [ 311.801746][ T9200] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 312.314693][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 312.415523][ T5799] pegasus 3-1:0.0: setup Pegasus II specific registers [ 312.617680][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 312.678298][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.678354][ T10] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 312.678377][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.716316][ T5805] Bluetooth: hci3: unexpected event for opcode 0x0038 [ 312.736459][ T10] usb 4-1: config 0 descriptor?? [ 312.785726][ T5885] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 312.959220][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.959252][ T5885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.000136][ T9205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.029051][ T5885] usb 5-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 313.029086][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.029531][ T5885] usb 5-1: Product: syz [ 313.029549][ T5885] usb 5-1: Manufacturer: syz [ 313.029564][ T5885] usb 5-1: SerialNumber: syz [ 313.030877][ T9205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.086635][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 313.086926][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 313.173419][ T10] usb 4-1: USB disconnect, device number 5 [ 313.194900][ T5885] usb 5-1: config 0 descriptor?? [ 313.451779][ T9209] comedi comedi3: pcmda12: a I/O base address must be specified [ 313.501952][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 313.662432][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 313.665845][ T31] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 313.665876][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.704553][ T31] usb 2-1: config 0 descriptor?? [ 313.754732][ T31] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 313.887271][ T5800] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 314.061265][ T5885] usb 5-1: USB disconnect, device number 10 [ 314.393451][ T5799] pegasus 3-1:0.0: can't locate MII phy, using default [ 314.458734][ T5799] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 0a:95:e9:29:c6:82 [ 314.462058][ T5799] usb 3-1: USB disconnect, device number 10 [ 314.797364][ T31] gspca_vc032x: reg_w err -71 [ 314.797386][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797398][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797405][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797413][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797422][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797430][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797450][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797459][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797467][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797476][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797485][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797493][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797503][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797512][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797521][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797529][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797536][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797544][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.797552][ T31] gspca_vc032x: Unknown sensor... [ 314.797655][ T31] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 314.902387][ T31] usb 2-1: USB disconnect, device number 10 [ 315.004511][ T9225] syzkaller0: entered promiscuous mode [ 315.004541][ T9225] syzkaller0: entered allmulticast mode [ 315.415328][ T9238] netlink: 'syz.0.1181': attribute type 1 has an invalid length. [ 315.627116][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 315.627139][ T37] audit: type=1326 audit(1761344500.686:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9239 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c2cefc9 code=0x7ffc0000 [ 315.627188][ T37] audit: type=1326 audit(1761344500.686:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9239 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa45c2cefc9 code=0x7ffc0000 [ 315.627231][ T37] audit: type=1326 audit(1761344500.686:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9239 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c2cefc9 code=0x7ffc0000 [ 315.627273][ T37] audit: type=1326 audit(1761344500.686:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9239 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa45c2cefc9 code=0x7ffc0000 [ 315.692697][ T37] audit: type=1326 audit(1761344500.761:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9239 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c2cefc9 code=0x7ffc0000 [ 315.692999][ T37] audit: type=1326 audit(1761344500.761:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9239 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c2cefc9 code=0x7ffc0000 [ 316.489209][ T9263] overlayfs: failed to resolve './file0': -2 [ 316.603548][ T43] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 316.769916][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.769945][ T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.774575][ T5885] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 316.810709][ T43] usb 3-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 316.810731][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.810742][ T43] usb 3-1: Product: syz [ 316.810751][ T43] usb 3-1: Manufacturer: syz [ 316.810759][ T43] usb 3-1: SerialNumber: syz [ 316.821860][ T43] usb 3-1: config 0 descriptor?? [ 316.891776][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.977983][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 316.984984][ T5885] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 316.985017][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.988640][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 317.034993][ T5885] usb 5-1: config 0 descriptor?? [ 317.047484][ T5885] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 317.145223][ T9257] comedi comedi3: pcmda12: a I/O base address must be specified [ 317.181571][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 317.202876][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.202975][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.210418][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 317.210527][ T10] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 317.210549][ T10] usb 1-1: Manufacturer: syz [ 317.269554][ T10] usb 1-1: config 0 descriptor?? [ 317.775932][ T10] hid_parser_main: 5 callbacks suppressed [ 317.775960][ T10] ft260 0003:0403:6030.000A: unknown main item tag 0x7 [ 317.876279][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 318.019232][ T5856] usb 3-1: USB disconnect, device number 11 [ 318.035879][ T10] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 318.049924][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.049960][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.049987][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.050010][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.050055][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.050078][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.072383][ T31] usb 4-1: config 0 descriptor?? [ 318.155100][ T5885] gspca_vc032x: reg_w err -71 [ 318.155118][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155130][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155139][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155149][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155224][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155235][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155244][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155253][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155262][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155271][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155279][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155288][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155297][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155305][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155315][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155393][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155404][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155413][ T5885] gspca_vc032x: I2c Bus Busy Wait 00 [ 318.155423][ T5885] gspca_vc032x: Unknown sensor... [ 318.155609][ T5885] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 318.293337][ T10] ft260 0003:0403:6030.000A: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 318.295262][ T5885] usb 5-1: USB disconnect, device number 11 [ 318.416849][ T9296] overlayfs: failed to resolve './file0': -2 [ 318.466300][ T10] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup [ 318.468923][ T10] ft260 0003:0403:6030.000A: i2c bus error: 0x1e [ 318.646742][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 318.646882][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 318.651508][ T31] usb 4-1: USB disconnect, device number 6 [ 318.700668][ T10] ft260 0003:0403:6030.000A: failed to reset I2C controller: -71 [ 318.767443][ T10] usb 1-1: USB disconnect, device number 12 [ 318.971161][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1215'. [ 319.160781][ T9308] fuse: Bad value for 'fd' [ 319.223750][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 319.405749][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 319.408462][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.408494][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.408518][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 319.408562][ T9] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 319.408586][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.574430][ T9] usb 5-1: config 0 descriptor?? [ 319.680441][ T9321] overlayfs: failed to resolve './file0': -2 [ 319.865982][ T5885] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 319.926547][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.949464][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.048115][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 320.082694][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.082800][ T5885] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 320.115669][ T5885] usb 4-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 320.115704][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.115723][ T5885] usb 4-1: Product: syz [ 320.115985][ T5885] usb 4-1: Manufacturer: syz [ 320.116002][ T5885] usb 4-1: SerialNumber: syz [ 320.189917][ T5885] usb 4-1: config 0 descriptor?? [ 320.196330][ T9] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 320.196371][ T9] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 320.196409][ T9] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 320.196435][ T9] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 320.196459][ T9] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 320.278866][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 320.278899][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.278920][ T10] usb 2-1: Product: syz [ 320.278935][ T10] usb 2-1: Manufacturer: syz [ 320.278950][ T10] usb 2-1: SerialNumber: syz [ 320.336557][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 320.389239][ T9306] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1215'. [ 320.556847][ T9316] comedi comedi3: pcmda12: a I/O base address must be specified [ 320.811030][ T9] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 320.811743][ T9] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 320.911617][ T5885] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 320.935765][ T5885] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 320.957902][ T5885] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 320.965328][ T5885] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 320.966446][ T9] usb 5-1: USB disconnect, device number 12 [ 321.209695][ T9340] fuse: Unknown parameter '0x0000000000000004' [ 321.220983][ T5885] usb 4-1: USB disconnect, device number 7 [ 322.129060][ T9358] overlayfs: failed to resolve './file0': -2 [ 322.140080][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 322.418469][ T9366] fuse: Unknown parameter '0x0000000000000004' [ 323.277360][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 323.441352][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 323.442768][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 323.442814][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 323.511183][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 323.527263][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.527283][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.532582][ T31] usb 4-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 323.532603][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.532615][ T31] usb 4-1: Product: syz [ 323.532623][ T31] usb 4-1: Manufacturer: syz [ 323.532631][ T31] usb 4-1: SerialNumber: syz [ 323.557457][ T31] usb 4-1: config 0 descriptor?? [ 323.596070][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 323.619170][ T10] usb 2-1: USB disconnect, device number 11 [ 323.651743][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 323.705143][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 323.814332][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.814362][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.814425][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.814454][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 323.814468][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.865546][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 323.873682][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 323.873727][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 323.874780][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 323.874797][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 323.874809][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 323.874847][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 323.902299][ T43] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 323.902328][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.906147][ T9375] comedi comedi3: pcmda12: a I/O base address must be specified [ 323.918573][ T43] usb 3-1: config 0 descriptor?? [ 323.952681][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 324.186938][ T31] usb 1-1: USB disconnect, device number 13 [ 324.562024][ T9] usb 4-1: USB disconnect, device number 8 [ 325.023253][ T43] gspca_vc032x: reg_w err -71 [ 325.023275][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023287][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023296][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023304][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023312][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023320][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023328][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023336][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023344][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023351][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023357][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023364][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023371][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023379][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023388][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023397][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023406][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023414][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023432][ T43] gspca_vc032x: Unknown sensor... [ 325.023522][ T43] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 325.034470][ T43] usb 3-1: USB disconnect, device number 12 [ 325.229591][ T9394] fuse: Bad value for 'fd' [ 325.293087][ T9397] overlayfs: failed to resolve './file0': -2 [ 325.314924][ T9400] fuse: Unknown parameter '0x0000000000000004' [ 326.037881][ T31] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 326.224316][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.224454][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.224661][ T31] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 326.224691][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 64 [ 326.224739][ T31] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 326.224763][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.250474][ T43] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 326.359447][ T9414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.382968][ T31] hub 3-1:1.0: bad descriptor, ignoring hub [ 326.383017][ T31] hub 3-1:1.0: probe with driver hub failed with error -5 [ 326.388359][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 326.388390][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 326.388536][ T31] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 326.806437][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.806611][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.864072][ T43] usb 2-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 326.864106][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.864124][ T43] usb 2-1: Product: syz [ 326.864139][ T43] usb 2-1: Manufacturer: syz [ 326.864153][ T43] usb 2-1: SerialNumber: syz [ 326.867717][ T43] usb 2-1: config 0 descriptor?? [ 326.882481][ T31] usb 3-1: USB disconnect, device number 13 [ 327.180071][ T9420] comedi comedi3: pcmda12: a I/O base address must be specified [ 327.198601][ T9427] overlayfs: failed to resolve './file0': -2 [ 327.375328][ T9429] fuse: Unknown parameter '0x0000000000000004' [ 327.862493][ T10] usb 2-1: USB disconnect, device number 12 [ 328.430959][ T9445] lec:lec_atm_close: lec0: Shut down! [ 328.980986][ T9474] netlink: 'syz.1.1277': attribute type 10 has an invalid length. [ 329.291254][ T9474] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.341026][ T9484] tipc: Enabling of bearer rejected, failed to enable media [ 329.358902][ T9478] syzkaller0: entered promiscuous mode [ 329.358932][ T9478] syzkaller0: entered allmulticast mode [ 329.885925][ T5863] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 330.104864][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.104894][ T5863] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.108555][ T5863] usb 2-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 330.108595][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.108616][ T5863] usb 2-1: Product: syz [ 330.108631][ T5863] usb 2-1: Manufacturer: syz [ 330.108646][ T5863] usb 2-1: SerialNumber: syz [ 330.156528][ T5863] usb 2-1: config 0 descriptor?? [ 330.404279][ T9490] comedi comedi3: pcmda12: a I/O base address must be specified [ 330.624811][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 330.795998][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 330.798139][ T43] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 330.798191][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 330.798236][ T43] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 330.798264][ T43] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 330.798291][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 330.804288][ T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 330.804324][ T43] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 330.804345][ T43] usb 3-1: Product: syz [ 330.804357][ T43] usb 3-1: Manufacturer: syz [ 330.804370][ T43] usb 3-1: SerialNumber: syz [ 330.923911][ T43] usb 3-1: config 0 descriptor?? [ 330.945936][ T43] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 330.948954][ T43] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 331.007989][ T10] usb 2-1: USB disconnect, device number 13 [ 331.081199][ T9519] loop2: detected capacity change from 0 to 7 [ 331.116855][ T9519] Dev loop2: unable to read RDB block 7 [ 331.116903][ T9519] loop2: unable to read partition table [ 331.117170][ T9519] loop2: partition table beyond EOD, truncated [ 331.117253][ T9] lec:lec_start_xmit: lec0:No lecd attached [ 331.158180][ T9519] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 331.223153][ T9521] fuse: Invalid rootmode [ 331.543559][ T37] audit: type=1326 audit(1761344515.581:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.544134][ T37] audit: type=1326 audit(1761344515.581:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.544229][ T37] audit: type=1326 audit(1761344515.581:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.590791][ T37] audit: type=1326 audit(1761344515.637:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.591831][ T37] audit: type=1326 audit(1761344515.637:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.601798][ T37] audit: type=1326 audit(1761344515.646:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.608507][ T37] audit: type=1326 audit(1761344515.646:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.612537][ T37] audit: type=1326 audit(1761344515.656:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.616405][ T37] audit: type=1326 audit(1761344515.656:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.625977][ T37] audit: type=1326 audit(1761344515.656:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3defdefc9 code=0x7ffc0000 [ 331.672864][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 331.791152][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.792161][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.918857][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 331.925198][ T43] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 331.925230][ T43] usb 2-1: config 0 has no interface number 0 [ 331.925285][ T43] usb 2-1: config 0 interface 250 has no altsetting 0 [ 331.967661][ T43] usb 2-1: New USB device found, idVendor=093a, idProduct=262c, bcdDevice=ae.31 [ 331.967694][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.967715][ T43] usb 2-1: Product: syz [ 331.967728][ T43] usb 2-1: Manufacturer: syz [ 331.967743][ T43] usb 2-1: SerialNumber: syz [ 332.013781][ T43] usb 2-1: config 0 descriptor?? [ 332.034879][ T43] gspca_main: gspca_pac7302-2.14.0 probing 093a:262c [ 332.954278][ T43] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 332.955173][ T43] gspca_pac7302 2-1:0.250: probe with driver gspca_pac7302 failed with error -71 [ 332.998277][ T43] usb 2-1: USB disconnect, device number 14 [ 333.558437][ T43] usb 3-1: USB disconnect, device number 14 [ 333.558444][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 333.598763][ T43] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 333.888295][ T9560] loop2: detected capacity change from 0 to 7 [ 333.936211][ T7285] Dev loop2: unable to read RDB block 7 [ 333.936572][ T7285] loop2: unable to read partition table [ 333.938725][ T7285] loop2: partition table beyond EOD, truncated [ 334.104690][ T9565] fuse: Invalid rootmode [ 334.139006][ T9560] Dev loop2: unable to read RDB block 7 [ 334.139059][ T9560] loop2: unable to read partition table [ 334.139366][ T9560] loop2: partition table beyond EOD, truncated [ 334.139435][ T9560] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 335.448489][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 335.587660][ T10] usb 3-1: device descriptor read/64, error -71 [ 336.614324][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 336.785301][ T10] usb 3-1: device descriptor read/64, error -71 [ 336.907698][ T10] usb usb3-port1: attempt power cycle [ 337.248133][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 337.248795][ C0] lec:lec_tx_timeout: lec0 [ 337.249339][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 337.382087][ T9599] bond0: entered promiscuous mode [ 337.382114][ T9599] bond_slave_0: entered promiscuous mode [ 337.382409][ T9599] bond_slave_1: entered promiscuous mode [ 337.382812][ T9599] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 337.427032][ T5799] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 337.571157][ T9606] fuse: Unknown parameter '00000000000000000000' [ 337.587823][ T5799] usb 4-1: Using ep0 maxpacket: 32 [ 337.591364][ T5799] usb 4-1: config 0 has an invalid interface number: 250 but max is 0 [ 337.591392][ T5799] usb 4-1: config 0 has no interface number 0 [ 337.591448][ T5799] usb 4-1: config 0 interface 250 has no altsetting 0 [ 337.626245][ T5799] usb 4-1: New USB device found, idVendor=093a, idProduct=262c, bcdDevice=ae.31 [ 337.626277][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.626297][ T5799] usb 4-1: Product: syz [ 337.626312][ T5799] usb 4-1: Manufacturer: syz [ 337.626326][ T5799] usb 4-1: SerialNumber: syz [ 337.667455][ T5799] usb 4-1: config 0 descriptor?? [ 337.685431][ T5799] gspca_main: gspca_pac7302-2.14.0 probing 093a:262c [ 337.960283][ T9616] fuse: Bad value for 'fd' [ 337.972152][ T5885] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 338.154162][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 338.158423][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.158479][ T5885] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 338.158504][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.224688][ T5885] usb 5-1: config 0 descriptor?? [ 338.449127][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.450321][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.508434][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 338.508826][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 338.545078][ T5885] usb 5-1: USB disconnect, device number 13 [ 338.566256][ T5799] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 338.566379][ T5799] gspca_pac7302 4-1:0.250: probe with driver gspca_pac7302 failed with error -71 [ 338.602668][ T5799] usb 4-1: USB disconnect, device number 9 [ 338.614732][ T43] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 338.979408][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.979437][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.982991][ T43] usb 2-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 338.983024][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.983045][ T43] usb 2-1: Product: syz [ 338.983059][ T43] usb 2-1: Manufacturer: syz [ 338.983073][ T43] usb 2-1: SerialNumber: syz [ 338.991868][ T43] usb 2-1: config 0 descriptor?? [ 340.130033][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.214652][ T9637] overlayfs: failed to resolve './file1': -2 [ 340.548965][ T9622] comedi comedi3: pcmda12: a I/O base address must be specified [ 341.102624][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 341.123456][ T43] usb 2-1: USB disconnect, device number 15 [ 341.885330][ T9681] overlayfs: missing 'lowerdir' [ 341.927165][ T5885] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 342.087517][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 342.089847][ T5885] usb 4-1: config 0 has an invalid interface number: 250 but max is 0 [ 342.089865][ T5885] usb 4-1: config 0 has no interface number 0 [ 342.089896][ T5885] usb 4-1: config 0 interface 250 has no altsetting 0 [ 342.092202][ T5885] usb 4-1: New USB device found, idVendor=093a, idProduct=262c, bcdDevice=ae.31 [ 342.092220][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.092231][ T5885] usb 4-1: Product: syz [ 342.092239][ T5885] usb 4-1: Manufacturer: syz [ 342.092247][ T5885] usb 4-1: SerialNumber: syz [ 342.165851][ T5885] usb 4-1: config 0 descriptor?? [ 342.189149][ T5885] gspca_main: gspca_pac7302-2.14.0 probing 093a:262c [ 342.372658][ T9693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1345'. [ 342.504511][ T5863] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 342.685036][ T9697] tipc: Enabling of bearer rejected, failed to enable media [ 342.687498][ T9697] syzkaller0: entered promiscuous mode [ 342.687595][ T9697] syzkaller0: entered allmulticast mode [ 342.704629][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.704658][ T5863] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.755770][ T5863] usb 3-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 342.755805][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.755826][ T5863] usb 3-1: Product: syz [ 342.755840][ T5863] usb 3-1: Manufacturer: syz [ 342.755853][ T5863] usb 3-1: SerialNumber: syz [ 342.774443][ T5863] usb 3-1: config 0 descriptor?? [ 343.033121][ T9688] comedi comedi3: pcmda12: a I/O base address must be specified [ 343.075248][ T5885] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 343.075357][ T5885] gspca_pac7302 4-1:0.250: probe with driver gspca_pac7302 failed with error -71 [ 343.100630][ T5885] usb 4-1: USB disconnect, device number 10 [ 343.111598][ T9704] random: crng reseeded on system resumption [ 343.402279][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 343.402315][ C0] lec:lec_tx_timeout: lec0 [ 343.402573][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 343.468754][ T5799] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 343.672044][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.672081][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.673595][ T5799] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 343.673624][ T5799] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 343.673644][ T5799] usb 1-1: Manufacturer: syz [ 343.815261][ T43] usb 3-1: USB disconnect, device number 18 [ 343.930784][ T5799] usb 1-1: config 0 descriptor?? [ 343.974144][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.433534][ T5799] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 344.433573][ T5799] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 344.433599][ T5799] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 344.433625][ T5799] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 344.433649][ T5799] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 344.433673][ T5799] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 344.433698][ T5799] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 344.499564][ T5799] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 345.320474][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.555825][ T5799] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 345.555863][ T5799] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 345.579436][ T5799] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -32 [ 346.433332][ T5799] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 346.695420][ T5799] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 346.695453][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.700088][ T5799] usb 2-1: config 0 descriptor?? [ 346.709719][ T5885] usb 1-1: USB disconnect, device number 14 [ 346.865906][ T5799] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 346.920061][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 347.080782][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 347.083789][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.083842][ T31] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 347.083866][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.142741][ T31] usb 4-1: config 0 descriptor?? [ 347.245946][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 347.247083][ T5799] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 347.247151][ T5799] usb 2-1: media controller created [ 347.403494][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 347.403642][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 347.441972][ T31] usb 4-1: USB disconnect, device number 11 [ 347.570502][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.689489][ T5799] gp8psk_fe: Frontend attached [ 347.690549][ T5799] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 347.690784][ T5799] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 348.099150][ T5799] gp8psk: usb in 138 operation failed. [ 348.099170][ T5799] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 348.099181][ T5799] gp8psk: found Genpix USB device pID = 203 (hex) [ 348.170575][ T5863] usb 2-1: USB disconnect, device number 16 [ 348.252379][ T9773] overlayfs: failed to resolve './file0': -2 [ 348.420513][ T5863] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 348.578904][ T9779] tipc: Enabling of bearer rejected, failed to enable media [ 348.587747][ T9779] syzkaller0: entered promiscuous mode [ 348.587776][ T9779] syzkaller0: entered allmulticast mode [ 348.757685][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 348.757721][ C0] lec:lec_tx_timeout: lec0 [ 348.757848][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 348.974745][ T5799] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 349.121165][ T5799] usb 4-1: device descriptor read/64, error -71 [ 349.409816][ T5799] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 349.548754][ T5799] usb 4-1: device descriptor read/64, error -71 [ 349.595759][ T9812] overlayfs: failed to resolve './file0': -2 [ 349.667062][ T5799] usb usb4-port1: attempt power cycle [ 349.747332][ T9819] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1389'. [ 349.994105][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.051332][ T5799] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 350.064381][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 350.163720][ T9827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.172738][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.820519][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.237439][ T5799] usb 4-1: device descriptor read/8, error -71 [ 351.237680][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 351.240952][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.240985][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.242691][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 351.242718][ T31] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 351.242739][ T31] usb 3-1: Manufacturer: syz [ 351.316728][ T31] usb 3-1: config 0 descriptor?? [ 351.334750][ T5885] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 351.494261][ T5799] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 351.494479][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 351.497873][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.497900][ T5885] usb 1-1: config 0 has no interface number 0 [ 351.497950][ T5885] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 351.497972][ T5885] usb 1-1: config 0 interface 1 has no altsetting 0 [ 351.503594][ T5885] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 351.503641][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.503667][ T5885] usb 1-1: Product: syz [ 351.503682][ T5885] usb 1-1: Manufacturer: syz [ 351.503697][ T5885] usb 1-1: SerialNumber: syz [ 351.526057][ T5885] usb 1-1: config 0 descriptor?? [ 351.529426][ T5799] usb 4-1: device descriptor read/8, error -71 [ 351.657308][ T5799] usb usb4-port1: unable to enumerate USB device [ 351.778141][ T31] ft260 0003:0403:6030.000D: unknown main item tag 0x7 [ 351.844483][ T5885] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 351.862725][ T5885] cx231xx 1-1:0.1: Failed to read PCB config [ 351.862815][ T5885] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 351.883768][ T5885] usb 1-1: USB disconnect, device number 15 [ 351.985218][ T31] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 352.200666][ T31] ft260 0003:0403:6030.000D: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 352.456608][ T5885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 352.631822][ T31] ft260 0003:0403:6030.000D: failed to retrieve status: -71 [ 352.632406][ T31] ft260 0003:0403:6030.000D: failed to reset I2C controller: -71 [ 352.647431][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 352.650338][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.650371][ T5885] usb 1-1: config 0 has no interface number 0 [ 352.650416][ T5885] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 352.650436][ T5885] usb 1-1: config 0 interface 1 has no altsetting 0 [ 352.657978][ T5885] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 352.658005][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.658023][ T5885] usb 1-1: Product: syz [ 352.658035][ T5885] usb 1-1: Manufacturer: syz [ 352.658048][ T5885] usb 1-1: SerialNumber: syz [ 352.674035][ T5885] usb 1-1: config 0 descriptor?? [ 352.766946][ T31] usb 3-1: USB disconnect, device number 19 [ 352.952195][ T5885] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 352.957331][ T5885] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 353.078240][ T5885] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 353.084171][ T5885] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 353.090545][ T5885] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 353.095075][ T5885] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 353.095977][ T5885] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 353.095997][ T5885] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 353.352130][ T5885] i2c i2c-2: Added multiplexed i2c bus 4 [ 353.374438][ T5885] i2c i2c-2: Added multiplexed i2c bus 5 [ 353.376014][ T5885] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 353.376038][ T5885] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 353.466769][ T5885] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 353.489694][ T5885] usb 1-1: USB disconnect, device number 16 [ 353.706011][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.878615][ T9872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.884650][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.400739][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.538271][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5400 ms [ 354.538308][ C0] lec:lec_tx_timeout: lec0 [ 354.539540][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 354.772631][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.914865][ T5863] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 355.075233][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 355.082036][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.082064][ T5863] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.082101][ T5863] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 355.082122][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.133849][ T5863] usb 2-1: config 0 descriptor?? [ 355.239319][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 355.374644][ T10] usb 5-1: device descriptor read/64, error -71 [ 355.518713][ T9895] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1412'. [ 355.639088][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 355.770200][ T10] usb 5-1: device descriptor read/64, error -71 [ 355.898813][ T10] usb usb5-port1: attempt power cycle [ 356.283609][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 356.308688][ T10] usb 5-1: device descriptor read/8, error -71 [ 356.435300][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.596405][ T9916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.602300][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.162617][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.603020][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 357.620227][ T10] usb 5-1: device descriptor read/8, error -71 [ 357.621919][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.739759][ T10] usb usb5-port1: unable to enumerate USB device [ 358.066911][ T31] usb 2-1: USB disconnect, device number 17 [ 358.119713][ T9920] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1420'. [ 358.162605][ T9926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1423'. [ 358.299569][ T9932] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 358.381188][ T9935] @0Ù: renamed from bond_slave_1 (while UP) [ 359.265508][ T5863] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 359.425796][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 359.428435][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.428463][ T5863] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.428503][ T5863] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 359.428525][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.470719][ T5863] usb 3-1: config 0 descriptor?? [ 359.630800][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 359.644829][ T9965] syzkaller0: entered promiscuous mode [ 359.644855][ T9965] syzkaller0: entered allmulticast mode [ 359.746696][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.768154][ T10] usb 1-1: device descriptor read/64, error -71 [ 360.035141][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 360.035277][ T5863] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 360.184881][ T10] usb 1-1: device descriptor read/64, error -71 [ 360.205041][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.205062][ T5863] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.230549][ T5863] usb 2-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice=1f.c4 [ 360.230571][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.230583][ T5863] usb 2-1: Product: syz [ 360.230592][ T5863] usb 2-1: Manufacturer: syz [ 360.230600][ T5863] usb 2-1: SerialNumber: syz [ 360.234098][ T5863] usb 2-1: config 0 descriptor?? [ 360.302989][ T10] usb usb1-port1: attempt power cycle [ 360.505382][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 360.505419][ C0] lec:lec_tx_timeout: lec0 [ 360.507585][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 360.665883][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 360.688174][ T10] usb 1-1: device descriptor read/8, error -71 [ 360.943707][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 360.966048][ T10] usb 1-1: device descriptor read/8, error -71 [ 361.084120][ T10] usb usb1-port1: unable to enumerate USB device [ 361.120839][ T10] usb 2-1: USB disconnect, device number 18 [ 362.151662][ T5863] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 362.226649][ T5884] usb 3-1: USB disconnect, device number 20 [ 362.478947][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.496347][ T5863] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 362.496415][ T5863] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 362.496440][ T5863] usb 2-1: config 0 interface 0 has no altsetting 0 [ 362.499191][ T5863] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 362.499215][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 362.499227][ T5863] usb 2-1: Product: syz [ 362.499235][ T5863] usb 2-1: Manufacturer: syz [ 362.499242][ T5863] usb 2-1: SerialNumber: syz [ 362.504032][ T5863] usb 2-1: config 0 descriptor?? [ 362.523414][ T5863] hub 2-1:0.0: bad descriptor, ignoring hub [ 362.523463][ T5863] hub 2-1:0.0: probe with driver hub failed with error -5 [ 362.647990][T10010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.654041][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.296381][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.518095][ T5863] usb 2-1: selecting invalid altsetting 0 [ 363.776898][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.834845][ T5863] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 364.896492][T10005] delete_channel: no stack [ 364.936361][T10042] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 364.998526][T10044] @0Ù: renamed from bond_slave_1 (while UP) [ 365.017032][ T5856] usb 2-1: USB disconnect, device number 19 [ 365.026143][ T5863] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 365.026172][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.051703][ T5863] usb 1-1: config 0 descriptor?? [ 365.099791][ T5863] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 365.519262][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 365.520502][ T5863] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 365.520568][ T5863] usb 1-1: media controller created [ 365.559888][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.582989][ T5799] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 365.606739][ T5863] gp8psk_fe: Frontend attached [ 365.606801][ T5863] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 365.608998][ T5863] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 365.744033][ T5863] gp8psk: usb in 138 operation failed. [ 365.744052][ T5863] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 365.744064][ T5863] gp8psk: found Genpix USB device pID = 203 (hex) [ 365.786600][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 365.786637][ T5799] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 365.786662][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 365.792367][ T5799] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 365.792400][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.792420][ T5799] usb 5-1: Product: syz [ 365.792434][ T5799] usb 5-1: Manufacturer: syz [ 365.792446][ T5799] usb 5-1: SerialNumber: syz [ 365.802430][ T5863] usb 1-1: USB disconnect, device number 21 [ 365.860899][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 365.860932][ C0] lec:lec_tx_timeout: lec0 [ 365.861030][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 365.904354][ T5799] usb 5-1: config 0 descriptor?? [ 365.907650][T10047] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 365.908169][T10047] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 365.911031][ T5799] usb 5-1: ucan: probing device on interface #0 [ 366.071668][ T5863] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 366.135847][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 366.135875][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 366.135904][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.135918][ T5800] Workqueue: hci1 hci_rx_work [ 366.135944][ T5800] Call Trace: [ 366.135953][ T5800] [ 366.135963][ T5800] dump_stack_lvl+0x189/0x250 [ 366.136002][ T5800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.136031][ T5800] ? __pfx__printk+0x10/0x10 [ 366.136064][ T5800] ? kernfs_path_from_node+0x2c/0x280 [ 366.136088][ T5800] ? kernfs_path_from_node+0x243/0x280 [ 366.136109][ T5800] ? kernfs_path_from_node+0x2c/0x280 [ 366.136135][ T5800] sysfs_create_dir_ns+0x259/0x280 [ 366.136157][ T5800] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 366.136179][ T5800] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 366.136226][ T5800] ? rt_spin_unlock+0x161/0x200 [ 366.136253][ T5800] kobject_add_internal+0x5a5/0xb50 [ 366.136299][ T5800] kobject_add+0x155/0x220 [ 366.136335][ T5800] ? __pfx_kobject_add+0x10/0x10 [ 366.136371][ T5800] ? get_device_parent+0x370/0x3a0 [ 366.136403][ T5800] device_add+0x408/0xb50 [ 366.136436][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 366.136469][ T5800] le_conn_complete_evt+0xf39/0x1500 [ 366.136511][ T5800] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 366.136538][ T5800] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 366.136564][ T5800] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.136596][ T5800] ? skb_pull_data+0xfb/0x200 [ 366.136626][ T5800] hci_le_conn_complete_evt+0x187/0x450 [ 366.136659][ T5800] hci_event_packet+0x78f/0x1200 [ 366.136687][ T5800] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 366.136715][ T5800] ? __pfx_hci_event_packet+0x10/0x10 [ 366.136749][ T5800] ? hci_send_to_monitor+0xe2/0x570 [ 366.136783][ T5800] hci_rx_work+0x46a/0xe80 [ 366.136816][ T5800] ? process_scheduled_works+0x9ef/0x17b0 [ 366.136840][ T5800] process_scheduled_works+0xae1/0x17b0 [ 366.136900][ T5800] ? __pfx_process_scheduled_works+0x10/0x10 [ 366.136949][ T5800] worker_thread+0x8a0/0xda0 [ 366.137007][ T5800] kthread+0x711/0x8a0 [ 366.137043][ T5800] ? __pfx_worker_thread+0x10/0x10 [ 366.137067][ T5800] ? __pfx_kthread+0x10/0x10 [ 366.137094][ T5800] ? rt_spin_unlock+0x150/0x200 [ 366.137120][ T5800] ? rt_spin_unlock+0x161/0x200 [ 366.137137][ T5800] ? __pfx_kthread+0x10/0x10 [ 366.137167][ T5800] ret_from_fork+0x4bc/0x870 [ 366.137195][ T5800] ? __pfx_ret_from_fork+0x10/0x10 [ 366.137238][ T5800] ? __switch_to_asm+0x39/0x70 [ 366.137258][ T5800] ? __switch_to_asm+0x33/0x70 [ 366.137273][ T5800] ? __pfx_kthread+0x10/0x10 [ 366.137297][ T5800] ret_from_fork_asm+0x1a/0x30 [ 366.137338][ T5800] [ 366.137429][ T5800] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 366.137472][ T5800] Bluetooth: hci1: failed to register connection device [ 366.259802][ T5799] usb 5-1: ucan: could not read protocol version, ret=-71 [ 366.259829][ T5799] usb 5-1: ucan: probe failed; try to update the device firmware [ 366.363318][ T5856] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 366.489812][ T5799] usb 5-1: USB disconnect, device number 18 [ 366.505398][ T5856] usb 3-1: device descriptor read/64, error -71 [ 366.758811][ T5856] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 366.897908][ T5856] usb 3-1: device descriptor read/64, error -71 [ 367.018335][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 367.046098][ T5856] usb usb3-port1: attempt power cycle [ 367.544634][ T5856] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 367.706404][ T5856] usb 3-1: device descriptor read/8, error -71 [ 367.871170][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 367.877476][ T10] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 367.877508][ T10] usb 2-1: config 0 has no interface number 0 [ 367.877567][ T10] usb 2-1: config 0 interface 250 has no altsetting 0 [ 367.910282][ T10] usb 2-1: New USB device found, idVendor=093a, idProduct=262c, bcdDevice=ae.31 [ 367.910315][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.910337][ T10] usb 2-1: Product: syz [ 367.910351][ T10] usb 2-1: Manufacturer: syz [ 367.910365][ T10] usb 2-1: SerialNumber: syz [ 367.955575][ T10] usb 2-1: config 0 descriptor?? [ 367.966812][ T5856] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 367.970620][ T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:262c [ 367.990179][ T5856] usb 3-1: device descriptor read/8, error -71 [ 368.005990][T10082] netlink: 'syz.3.1478': attribute type 8 has an invalid length. [ 368.106166][ T5856] usb usb3-port1: unable to enumerate USB device [ 368.589476][T10097] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1486'. [ 368.619070][ T5799] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 368.782291][ T5799] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 368.782743][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.815410][ T5799] usb 5-1: config 0 descriptor?? [ 368.833850][ T5799] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 368.870641][ T10] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 369.089169][ T31] usb 2-1: USB disconnect, device number 20 [ 369.268487][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 369.269480][ T5799] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 369.269539][ T5799] usb 5-1: media controller created [ 369.361496][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.447360][ T5799] gp8psk_fe: Frontend attached [ 369.447446][ T5799] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 369.447811][ T5799] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 369.698448][ T5799] gp8psk: usb in 138 operation failed. [ 369.698466][ T5799] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 369.698479][ T5799] gp8psk: found Genpix USB device pID = 203 (hex) [ 369.765011][ T5856] usb 5-1: USB disconnect, device number 19 [ 369.943234][ T5856] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 370.480950][T10129] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1497'. [ 370.604603][T10133] random: crng reseeded on system resumption [ 371.216312][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 371.216350][ C0] lec:lec_tx_timeout: lec0 [ 371.216547][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 371.598768][T10157] Mount JFS Failure: -22 [ 371.598870][T10157] jfs_mount failed w/return code = -22 [ 371.861001][ T5805] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 372.204130][T10164] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1510'. [ 372.222385][T10166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1511'. [ 372.904782][T10169] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1513'. [ 373.978278][T10178] netlink: 'syz.2.1517': attribute type 8 has an invalid length. [ 374.370374][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 375.119854][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 375.413738][T10199] usb usb8: usbfs: process 10199 (syz.3.1522) did not claim interface 0 before use [ 375.533271][T10203] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1524'. [ 375.679487][T10211] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1527'. [ 375.684009][T10207] syzkaller0: entered promiscuous mode [ 375.684056][T10207] syzkaller0: entered allmulticast mode [ 375.710758][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'. [ 375.791658][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 375.823454][T10217] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1527'. [ 375.966305][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.966342][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.966365][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.966518][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.966545][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.971460][ T10] usb 3-1: config 0 descriptor?? [ 376.506123][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.506297][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.506324][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.506349][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.506374][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.506398][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.506423][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.506448][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.506473][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.506592][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 376.571707][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 376.571740][ C0] lec:lec_tx_timeout: lec0 [ 376.572002][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 376.640132][ T10] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 376.755097][T10225] Mount JFS Failure: -22 [ 376.755249][T10225] jfs_mount failed w/return code = -22 [ 376.853173][ T10] usb 3-1: USB disconnect, device number 25 [ 377.133737][T10227] fido_id[10227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 377.134332][T10230] tipc: Enabled bearer , priority 0 [ 377.432050][T10230] syzkaller0: entered promiscuous mode [ 377.432124][T10230] syzkaller0: entered allmulticast mode [ 377.467432][T10230] tipc: Resetting bearer [ 378.020321][ T5997] tipc: Resetting bearer [ 378.122399][T10228] tipc: Resetting bearer [ 378.275511][ T10] tipc: Node number set to 2127649197 [ 378.477304][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 378.648398][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.648435][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.648458][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.648514][ T5885] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.648554][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.675205][ T5885] usb 4-1: config 0 descriptor?? [ 378.870034][ T5856] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 379.053852][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.053888][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.053910][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.053947][ T5856] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.053961][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.060279][ T5856] usb 2-1: config 0 descriptor?? [ 379.178789][ T5885] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 379.483449][ T5863] usb 4-1: USB disconnect, device number 16 [ 379.592708][ T5856] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 380.259670][ T5800] Bluetooth: hci5: command 0x1003 tx timeout [ 380.264873][ T5805] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 381.916592][ T5799] usb 2-1: USB disconnect, device number 21 [ 381.937801][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 381.937835][ C0] lec:lec_tx_timeout: lec0 [ 381.938009][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 382.146386][T10264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.554601][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6190 ms [ 388.554637][ C0] lec:lec_tx_timeout: lec0 [ 388.554883][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.733229][T10228] tipc: Disabling bearer [ 392.939763][T10269] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1544'. [ 392.943325][T10272] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1544'. [ 393.617845][T10296] netlink: 'syz.2.1552': attribute type 4 has an invalid length. [ 393.962929][ T5794] ==========[ 393.962929][ T5794] ================================================================== [ 393.962948][ T5794] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 393.962981][ T5794] Read of size 8 at addr ffff888039e3c778 by task syz-executor/5794 [ 393.962999][ T5794] [ 393.963011][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 393.963034][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.963046][ T5794] Call Trace: [ 393.963060][ T5794] [ 393.963069][ T5794] dump_stack_lvl+0x189/0x250 [ 393.963100][ T5794] ? __kasan_check_byte+0x12/0x40 [ 393.963131][ T5794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.963152][ T5794] ? lock_release+0x4b/0x3e0 [ 393.963180][ T5794] ? __virt_addr_valid+0x4a5/0x5c0 [ 393.963211][ T5794] print_report+0xca/0x240 [ 393.963239][ T5794] ? __list_del_entry_valid_or_report+0x92/0x190 [ 393.963263][ T5794] kasan_report+0x118/0x150 [ 393.963296][ T5794] ? __list_del_entry_valid_or_report+0x92/0x190 [ 393.963321][ T5794] __list_del_entry_valid_or_report+0x92/0x190 [ 393.963345][ T5794] bt_accept_unlink+0x39/0x240 [ 393.963378][ T5794] l2cap_sock_teardown_cb+0x17e/0x460 [ 393.963408][ T5794] l2cap_chan_del+0xb5/0x5e0 [ 393.963424][ T5794] ? l2cap_conn_del+0x37c/0x680 [ 393.963450][ T5794] l2cap_conn_del+0x388/0x680 [ 393.963485][ T5794] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 393.963513][ T5794] hci_conn_hash_flush+0x10d/0x230 [ 393.963544][ T5794] hci_dev_close_sync+0xaef/0x1330 [ 393.963574][ T5794] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 393.963601][ T5794] ? hci_unregister_dev+0x212/0x510 [ 393.963624][ T5794] hci_unregister_dev+0x21a/0x510 [ 393.963647][ T5794] vhci_release+0x155/0x1b0 [ 393.963668][ T5794] ? __pfx_vhci_release+0x10/0x10 [ 393.963688][ T5794] __fput+0x45b/0xa80 [ 393.963713][ T5794] task_work_run+0x1d4/0x260 [ 393.963736][ T5794] ? __pfx_task_work_run+0x10/0x10 [ 393.963755][ T5794] ? do_exit+0x6b0/0x2300 [ 393.963784][ T5794] ? do_exit+0x6b0/0x2300 [ 393.963814][ T5794] do_exit+0x6b5/0x2300 [ 393.963843][ T5794] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.963875][ T5794] ? __pfx_do_exit+0x10/0x10 [ 393.963902][ T5794] ? rt_mutex_slowunlock+0x493/0x8a0 [ 393.963922][ T5794] ? rt_spin_lock+0x1c1/0x3e0 [ 393.963947][ T5794] do_group_exit+0x21c/0x2d0 [ 393.963966][ T5794] ? rt_spin_unlock+0x161/0x200 [ 393.963987][ T5794] get_signal+0x125d/0x1310 [ 393.964020][ T5794] arch_do_signal_or_restart+0xa0/0x790 [ 393.964043][ T5794] ? __pfx___x64_sys_wait4+0x10/0x10 [ 393.964063][ T5794] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 393.964092][ T5794] ? exit_to_user_mode_loop+0x40/0x130 [ 393.964118][ T5794] exit_to_user_mode_loop+0x72/0x130 [ 393.964145][ T5794] do_syscall_64+0x2bd/0xfa0 [ 393.964169][ T5794] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.964193][ T5794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.964214][ T5794] ? clear_bhb_loop+0x60/0xb0 [ 393.964236][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.964256][ T5794] RIP: 0033:0x7fa3defd5117 [ 393.964273][ T5794] Code: Unable to access opcode bytes at 0x7fa3defd50ed. [ 393.964284][ T5794] RSP: 002b:00007ffe70d565b0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 393.964308][ T5794] RAX: fffffffffffffe00 RBX: 000000000000030a RCX: 00007fa3defd5117 [ 393.964323][ T5794] RDX: 0000000040000000 RSI: 00007ffe70d5661c RDI: 00000000ffffffff [ 393.964338][ T5794] RBP: 00007ffe70d5661c R08: 0000000000000000 R09: 0000000000000000 [ 393.964360][ T5794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000125 [ 393.964373][ T5794] R13: 0000555567c5f590 R14: 0000000000057e26 R15: 00007ffe70d56670 [ 393.964396][ T5794] [ 393.964404][ T5794] [ 393.964409][ T5794] Allocated by task 5153: [ 393.964419][ T5794] kasan_save_track+0x3e/0x80 [ 393.964443][ T5794] __kasan_kmalloc+0x93/0xb0 [ 393.964466][ T5794] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 393.964488][ T5794] syslog_print+0xd2/0x590 [ 393.964516][ T5794] do_syslog+0x544/0x760 [ 393.964547][ T5794] __x64_sys_syslog+0x7c/0x90 [ 393.964573][ T5794] do_syscall_64+0xfa/0xfa0 [ 393.964593][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.964610][ T5794] [ 393.964614][ T5794] Freed by task 5153: [ 393.964623][ T5794] kasan_save_track+0x3e/0x80 [ 393.964643][ T5794] __kasan_save_free_info+0x46/0x50 [ 393.964661][ T5794] __kasan_slab_free+0x5c/0x80 [ 393.964684][ T5794] kfree+0x197/0x950 [ 393.964703][ T5794] syslog_print+0x515/0x590 [ 393.964729][ T5794] do_syslog+0x544/0x760 [ 393.964762][ T5794] __x64_sys_syslog+0x7c/0x90 [ 393.964795][ T5794] do_syscall_64+0xfa/0xfa0 [ 393.964817][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.964834][ T5794] [ 393.964839][ T5794] The buggy address belongs to the object at ffff888039e3c000 [ 393.964839][ T5794] which belongs to the cache kmalloc-2k of size 2048 [ 393.964863][ T5794] The buggy address is located 1912 bytes inside of [ 393.964863][ T5794] freed 2048-byte region [ffff888039e3c000, ffff888039e3c800) [ 393.964884][ T5794] [ 393.964889][ T5794] The buggy address belongs to the physical page: [ 393.964900][ T5794] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39e38 [ 393.964918][ T5794] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 393.964935][ T5794] flags: 0x80000000000040(head|node=0|zone=1) [ 393.964951][ T5794] page_type: f5(slab) [ 393.964970][ T5794] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 393.964987][ T5794] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 393.965005][ T5794] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 393.965022][ T5794] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 393.965039][ T5794] head: 0080000000000003 ffffea0000e78e01 00000000ffffffff 00000000ffffffff [ 393.965054][ T5794] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 393.965063][ T5794] page dumped because: kasan: bad access detected [ 393.965072][ T5794] page_owner tracks the page as allocated [ 393.965080][ T5794] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5796, tgid 5796 (syz-executor), ts 105259185409, free_ts 105125838476 [ 393.965114][ T5794] post_alloc_hook+0x240/0x2a0 [ 393.965137][ T5794] get_page_from_freelist+0x28c0/0x2960 [ 393.965162][ T5794] __alloc_frozen_pages_noprof+0x181/0x370 [ 393.965186][ T5794] alloc_pages_mpol+0xd1/0x380 [ 393.965210][ T5794] allocate_slab+0x96/0x3a0 [ 393.965229][ T5794] ___slab_alloc+0xb12/0x13f0 [ 393.965245][ T5794] __slab_alloc+0xc6/0x1f0 [ 393.965260][ T5794] __kmalloc_node_track_caller_noprof+0x2a8/0x7e0 [ 393.965285][ T5794] kmalloc_reserve+0x136/0x290 [ 393.965303][ T5794] pskb_expand_head+0x18e/0x1150 [ 393.965333][ T5794] netlink_trim+0x1d5/0x2e0 [ 393.965367][ T5794] netlink_broadcast_filtered+0xd6/0x1000 [ 393.965394][ T5794] nlmsg_notify+0xf0/0x1a0 [ 393.965410][ T5794] rtnetlink_event+0x224/0x270 [ 393.965437][ T5794] notifier_call_chain+0x1b6/0x3e0 [ 393.965460][ T5794] netif_change_name+0x5e5/0x990 [ 393.965494][ T5794] page last free pid 5793 tgid 5793 stack trace: [ 393.965506][ T5794] __free_frozen_pages+0xfb6/0x1140 [ 393.965530][ T5794] __slab_free+0x2c6/0x370 [ 393.965548][ T5794] qlist_free_all+0x97/0x140 [ 393.965569][ T5794] kasan_quarantine_reduce+0x148/0x160 [ 393.965591][ T5794] __kasan_slab_alloc+0x22/0x80 [ 393.965614][ T5794] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 393.965637][ T5794] __alloc_skb+0x112/0x2d0 [ 393.965653][ T5794] netlink_sendmsg+0x5c6/0xb30 [ 393.965670][ T5794] __sock_sendmsg+0x21c/0x270 [ 393.965694][ T5794] __sys_sendto+0x3c7/0x520 [ 393.965709][ T5794] __x64_sys_sendto+0xde/0x100 [ 393.965724][ T5794] do_syscall_64+0xfa/0xfa0 [ 393.965744][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.965761][ T5794] [ 393.965767][ T5794] Memory state around the buggy address: [ 393.965777][ T5794] ffff888039e3c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 393.965789][ T5794] ffff888039e3c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 393.965802][ T5794] >ffff888039e3c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 393.965811][ T5794] ^ [ 393.965822][ T5794] ffff888039e3c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 393.965834][ T5794] ffff888039e3c800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 393.965844][ T5794] ================================================================== [ 393.970608][ T5794] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 393.970630][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 393.970651][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.970662][ T5794] Call Trace: [ 393.970670][ T5794] [ 393.970677][ T5794] dump_stack_lvl+0x99/0x250 [ 393.970707][ T5794] ? __asan_memcpy+0x40/0x70 [ 393.970728][ T5794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.970752][ T5794] ? __pfx__printk+0x10/0x10 [ 393.970778][ T5794] vpanic+0x237/0x6d0 [ 393.970795][ T5794] ? __pfx_vpanic+0x10/0x10 [ 393.970810][ T5794] ? preempt_schedule+0xae/0xc0 [ 393.970829][ T5794] ? __pfx_preempt_schedule+0x10/0x10 [ 393.970852][ T5794] panic+0xb9/0xc0 [ 393.970868][ T5794] ? __pfx_panic+0x10/0x10 [ 393.970894][ T5794] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 393.970920][ T5794] ? __list_del_entry_valid_or_report+0x92/0x190 [ 393.970941][ T5794] check_panic_on_warn+0x89/0xb0 [ 393.970959][ T5794] ? __list_del_entry_valid_or_report+0x92/0x190 [ 393.970980][ T5794] end_report+0x78/0x160 [ 393.971006][ T5794] kasan_report+0x129/0x150 [ 393.971032][ T5794] ? __list_del_entry_valid_or_report+0x92/0x190 [ 393.971056][ T5794] __list_del_entry_valid_or_report+0x92/0x190 [ 393.971079][ T5794] bt_accept_unlink+0x39/0x240 [ 393.971100][ T5794] l2cap_sock_teardown_cb+0x17e/0x460 [ 393.971128][ T5794] l2cap_chan_del+0xb5/0x5e0 [ 393.971143][ T5794] ? l2cap_conn_del+0x37c/0x680 [ 393.971166][ T5794] l2cap_conn_del+0x388/0x680 [ 393.971190][ T5794] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 393.971214][ T5794] hci_conn_hash_flush+0x10d/0x230 [ 393.971240][ T5794] hci_dev_close_sync+0xaef/0x1330 [ 393.971265][ T5794] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 393.971288][ T5794] ? hci_unregister_dev+0x212/0x510 [ 393.971307][ T5794] hci_unregister_dev+0x21a/0x510 [ 393.971327][ T5794] vhci_release+0x155/0x1b0 [ 393.971345][ T5794] ? __pfx_vhci_release+0x10/0x10 [ 393.971371][ T5794] __fput+0x45b/0xa80 [ 393.971393][ T5794] task_work_run+0x1d4/0x260 [ 393.971412][ T5794] ? __pfx_task_work_run+0x10/0x10 [ 393.971428][ T5794] ? do_exit+0x6b0/0x2300 [ 393.971460][ T5794] ? do_exit+0x6b0/0x2300 [ 393.971492][ T5794] do_exit+0x6b5/0x2300 [ 393.971515][ T5794] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.971548][ T5794] ? __pfx_do_exit+0x10/0x10 [ 393.971576][ T5794] ? rt_mutex_slowunlock+0x493/0x8a0 [ 393.971594][ T5794] ? rt_spin_lock+0x1c1/0x3e0 [ 393.971616][ T5794] do_group_exit+0x21c/0x2d0 [ 393.971632][ T5794] ? rt_spin_unlock+0x161/0x200 [ 393.971650][ T5794] get_signal+0x125d/0x1310 [ 393.971679][ T5794] arch_do_signal_or_restart+0xa0/0x790 [ 393.971712][ T5794] ? __pfx___x64_sys_wait4+0x10/0x10 [ 393.971729][ T5794] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 393.971756][ T5794] ? exit_to_user_mode_loop+0x40/0x130 [ 393.971783][ T5794] exit_to_user_mode_loop+0x72/0x130 [ 393.971807][ T5794] do_syscall_64+0x2bd/0xfa0 [ 393.971830][ T5794] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.971865][ T5794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.971884][ T5794] ? clear_bhb_loop+0x60/0xb0 [ 393.971904][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.971927][ T5794] RIP: 0033:0x7fa3defd5117 [ 393.971943][ T5794] Code: Unable to access opcode bytes at 0x7fa3defd50ed. [ 393.971952][ T5794] RSP: 002b:00007ffe70d565b0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 393.971972][ T5794] RAX: fffffffffffffe00 RBX: 000000000000030a RCX: 00007fa3defd5117 [ 393.971986][ T5794] RDX: 0000000040000000 RSI: 00007ffe70d5661c RDI: 00000000ffffffff [ 393.971998][ T5794] RBP: 00007ffe70d5661c R08: 0000000000000000 R09: 0000000000000000 [ 393.972009][ T5794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000125 [ 393.972020][ T5794] R13: 0000555567c5f590 R14: 0000000000057e26 R15: 00007ffe70d56670 [ 393.972041][ T5794] [ 393.972461][ T5794] Kernel Offset: disabled