last executing test programs: 6.53820779s ago: executing program 0 (id=2155): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="009d0e609c62517a68813f6b578e2fd2b349823558145159a317949dcbd54be4c36b6f14857fbb1963983b808b676663bb5e55330899648c7f63eb159926f6b541adc762bfd60e00247eda5373d9d7c8084d4bc2aab5abcea10f3526dac0abdf5e6ff7d4bec8b703be45c710eadcc7d384775276a3ce3e043e0fa4b684f56e8a4a5c628e25393cf7883c90532fe96490a3cf734421991574c1bd33ae90f20fddb872101a0de2e9689df0fe1295d3946fdd6a9c91", @ANYRESHEX, @ANYRES16, @ANYRES64], 0x0, 0x483, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="00020000", @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x3c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0xf0, 0xf0, 0xffffffff, 0x2d0, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'pimreg1\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id, @icmp_id}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@private0, @private2, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 5.266803104s ago: executing program 0 (id=2161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) r3 = io_uring_setup(0x6b4a, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x18, 0x20000040, r4) 5.198301805s ago: executing program 1 (id=2162): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)=""/142, 0x8e) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RREADDIR(r3, &(0x7f0000000180)={0x68, 0x29, 0x2, {0x3, [{{0x4, 0x0, 0x7}, 0x8, 0x12, 0x7, './file1'}, {{0x8, 0x0, 0x4}, 0x9, 0x0, 0x7, './file1'}, {{0x1, 0x3, 0x2}, 0xcd, 0x2, 0x7, './file1'}]}}, 0x68) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) 4.189285069s ago: executing program 0 (id=2166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="0b000000010000", 0x7) chdir(&(0x7f0000000180)='./bus\x00') 4.101343743s ago: executing program 1 (id=2167): r0 = socket(0x2, 0x3, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) 4.032726623s ago: executing program 4 (id=2168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) 3.973346422s ago: executing program 4 (id=2169): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) pipe2(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8, 0x2}, [@l2cap_conf_req={{0x4, 0x0, 0x4}}]}}, 0x11) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffff000}], 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = fcntl$dupfd(r0, 0x0, r3) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x74, 0x93, 0x1d, 0x40, 0xc45, 0x614a, 0xe6af, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x80, 0xf4}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000d, 0x80010, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000140)={0x281}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000000c0)) waitid$P_PIDFD(0x3, r5, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) syz_usb_connect(0x0, 0x2d, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4c081) 3.774220173s ago: executing program 1 (id=2170): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000001) socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000480)="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", 0x1ae}, {&(0x7f0000001480)="d1", 0x1}], 0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000), &(0x7f00000018c0)=0x1c) ioctl$int_in(r1, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x0}) r4 = dup(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x109, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xf9, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xe000, 0xa7, 0x1, {0x22, 0x193}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x66, 0x5, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x9, 0x1d}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x7, 0x80, 0x0, 0x0, 0x6}, 0x43, &(0x7f00000000c0)={0x5, 0xf, 0x43, 0x6, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x81, 0xf0f, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x3, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6ecc9b1307cf6b67df2b80e8f2b1a489"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0xff, 0x170}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x7, 0xfff9}]}, 0x9, [{0x0, 0x0}, {0x40, &(0x7f0000000180)=@string={0x40, 0x3, "3b78f97553044b0a56d03737175a38a111e87f0930642f630553108b01a2af8fe921ea4a598820984c51bdada0e5fdd5920a0e37a6b7af64c3b9d577596e"}}, {0x64, &(0x7f0000001800)=@string={0x64, 0x3, "92940000000000800000000000cd5051f8e00bdcb55d167ed00f9a6db4e8e003c31b709b5024348a54155c92f42f6ebb39481de825ff48299e4190fd2390cbad78dc98836309068cac29044f7301363f860cc8871f0d4d70b6b3e219e013a2f4439a"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x402}}, {0xb1, &(0x7f0000001900)=@string={0xb1, 0x3, "b45ff3158a9496842098721fcabb352e3b4cfd988246c699ed505f6fb5611b4b242e20c41a12944216d95748833625b23003f38a2656e42616fe0169da98fce0687f5167b4da43d36f095fc9f4bc51a1a54394f90689f62988b5d00d10c00bbe3e50994896568bf214727ed3be3e395ab3c63179f701fde7ce5229a49acb4176a2a42d5d5070a3bd4fc124969b02646413809ab98e8c44257500ad201fe6219b34c95200"/175}}, {0x68, &(0x7f0000000300)=@string={0x68, 0x3, "0ed9ed3e8b07f4502f5481f0403c3c6743c8602f3d6625941dbd7b572e258ed1788a72c4afa21240beb66d41e89070d2967cd3d2810ff4587b7ceaee625e898d7f23397ff1382f820d26900a8aa1055749a1bea6fdde666db4734535cb5735570e0890e6a8c8"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x0, 0x0}, {0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r4}) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c83031002d0001000b0204004c0000000503150004000300020001020a0409040106090000009c07030308"], 0x36) 3.150344348s ago: executing program 0 (id=2171): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8001, 0x0) write$sequencer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="81013f000000002005"], 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) dup2(r3, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.778297868s ago: executing program 3 (id=2174): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="cd", 0xfffffdef}], 0x1}}], 0x1, 0x0) 1.777422318s ago: executing program 0 (id=2175): syz_usb_connect(0x0, 0x32, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7b, 0x89, 0x55, 0x40, 0x93a, 0x2476, 0xd5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x0, "d6e190ab8d90"}]}]}}]}}]}}, 0x0) 1.748341653s ago: executing program 1 (id=2176): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000182000000005000000000000000100000400000000010000000000000000000000005f306000"], 0x0, 0x35}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001040), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000001080)={r3}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x0, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r5 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r5, 0x107, 0x11, 0x0, 0x209fffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$kcm(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000003c0)="eefb2a680bb921b3677f28fff21e8f15c47a28965c50538f1cf424ce0385b38d629a6155d76e2daeed2673df1b645d3c590a29b5eb117b86e4c44620d6f7e4e79f817c63ab63f4a1d78e94a67610dfb1e6892dc0fba67e6d1a6eae35", 0x5c}, {&(0x7f0000000cc0)="53b94e9ece85b63ee29d3f603a20a0d8f9580d732c063f7f5bbada4f816b670677d079878689605e5de0d443d0ee2d3b965a10565585b1b7b9d0cbff355b1a7f05a22303991ea75033e5299e364183c9e1028fd4b3862940681064725f5366d266cd48926c6ebacb60b0a2b4afb154a9bc4d81510e026fbfcd4e91d82e2e264d3c0e03e58bf74815e39aae26aee085ae5414b5089247e86aeab3df5c90324bbc7159d3a4f40d4d32517a838f73bcac99120a21b8c703a536161eb11fc8128ce34fce71eef40d", 0xc6}, {&(0x7f0000000440)="fae6049a0a26cdedb12c9be1ce214da4bf211e38ca60fe10f472657db24b85b627c0e894d2acc59c7fde952661549439dae934122c0a29f4e4ac1b8c6fa9540e0e597d39254559e2c32afdf6fe2a2967f7c1b895e0eb1978bfc3d19b4a188810755f214877a3048c09a8774b3ec3a08e565b75f3a02c089b45de04038252c19a686ac329ead3ead81eb6fdac", 0x8c}, {&(0x7f0000000c00)="a38f239e98ed3670a8a42348e2770f1ee0fadf9a409d1f9c8c5adb768c9d97bc465916a271dca4768ea5a9607bfe7327ddeb78f63ab8e7ac761a1ad623d94baf84cd9f2d0aa97251401200b3b55556945028b2", 0x53}, {&(0x7f0000000dc0)="5e7d3d537d79b0def9ce5526fec1bf701be491d6aab2aeb49f4f18845b34a31432fee6806443df4af357e9cdbdfbf83f350d140da7a3606e63f741ec7d50fcbeb46fc8ffa18769a03ff4c8ac5872acec2f08b397aa47a0df8207fbb903e82631bb1fed6e0d4377dcc3397103322781bed8d2bb7c2580d4642cd9178e6aa0d4f93e277382e879bcadc69f6cd4bb7ff83f5b8aa30e", 0x94}, {&(0x7f0000000240)="ae3365771dea02ec037fdeef25729fffa900bfdc09169f0018b027a426bc85826255", 0x22}, {&(0x7f0000000e80)="f05dbe38c630c9b518504e22f66bd8ba496005a8a4976c06e26200edfbf59c1b9de6919e183bd19ffbffe52db52df8a9eaae525537ed4e991db3f5ca2a7f94ad6bd56e8e735354cfe6b33adf96bfa4b59b11a15e67c54a86e5e9e86aa95a7ef7dbad731319d8321227b8b41d746d9eaa5c8963c9616e0ce965f03a2860d6f198f36bdb7eed8922ca1639eb49d94eab20480e83487a26c89ba39694b6d2906e4c3ccc2e58854113d550714a45169926add8cbfbb2140aed5f5c0151a71d50335808cd32a78bc584e718074ef5b2d09939aca26b34f84f1ce5e8662b08327cc62dbc4f", 0xe2}], 0x7}, 0x44080) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0xb, 0x1d8, 0x2a8, 0x2a8, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@private1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @local, [], [], 'pim6reg1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 1.689100112s ago: executing program 1 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = io_uring_setup(0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x18, 0x20000040, r4) 1.37680744s ago: executing program 2 (id=2179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) 1.344877724s ago: executing program 2 (id=2180): r0 = socket(0x2, 0x3, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) 1.313709929s ago: executing program 2 (id=2181): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030000000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350076657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 1.251475089s ago: executing program 2 (id=2182): socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000340)="a4", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) unshare(0x400) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.248562799s ago: executing program 4 (id=2183): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000bc0), 0x20000000}, 0x20) 1.187923639s ago: executing program 4 (id=2184): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r3], 0x40}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x234, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r11, 0x8941, &(0x7f0000000240)=@generic={0x1, 0x0, 0x2}) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x13, 0xa, 0x880, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x61, 0x8, "cc2a8d2935892a5396a5ec88577bea3c6d65b69dea014c50f78e93587010f2bbe3d43d9cb6fc2c07a6aa88300eefd22b78b22fbe0f74d855a7a56d6f58df3388e242f1ec68833b3bc62f89f1cc520b8832ff591bd5ae9f84657df7d322"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) 1.133413807s ago: executing program 4 (id=2185): 1.062362008s ago: executing program 4 (id=2186): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x64}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x90) fchdir(0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40}, [{0x3, 0x0, 0x0, 0x0, 0x0, 0x800}]}, 0x78) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x7fff}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000400)={0x3ff, 0xd4c, 0x0, 0x9, 0xff, 0xfff, 0x5, 0x8, r2}, 0x0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='io.stat\x00', 0x26e1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r3, &(0x7f0000000080)=0x101, 0x12) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) io_setup(0x80, &(0x7f0000000440)=0x0) io_submit(r4, 0x2, &(0x7f0000000240)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100001040000007a2501a72e70141ce950f7e5000000000000000000fff9d489cfb0b30e92a6b2a8e7359778152fc3ba039c90c66b039698728342e2783089566d1e6e01e8506ef932a475afa7149cc65e4e6a8ab9035602bceae187cde2fe80e5222f9b19fb8f19a77eac02e16bccf0baa898bea22496feca495b4f9a2887f079a7", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005000000000004000600"], 0x40}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x10, 0x1405, 0xa35}, 0x10}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 914.601771ms ago: executing program 3 (id=2187): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) 862.996368ms ago: executing program 3 (id=2188): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 742.841597ms ago: executing program 1 (id=2189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r6 = mq_open(&(0x7f0000000000)='^\x00', 0x80, 0x40, &(0x7f0000000040)={0x4, 0x5, 0x100000000, 0x20}) mq_getsetattr(r6, &(0x7f0000000100)={0x0, 0x7fff}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802cc7d57eba000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000"], 0x8c}}, 0x40) syz_open_dev$vim2m(0x0, 0x0, 0x2) r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000200)=0xa0000) 721.23135ms ago: executing program 3 (id=2190): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000001900)=""/4096) 626.392805ms ago: executing program 3 (id=2191): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@rand_addr, 0x800}, {@broadcast, 0x52b1}]}, @noop, @end, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000e40)="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", 0x216, 0x0, 0x0, 0x0) 290.529766ms ago: executing program 2 (id=2192): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f00000069c0)=[{0x0}, {&(0x7f00000000c0)=""/13, 0x40}], 0x2) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1fff, 0x0) r2 = io_uring_setup(0x3e76, &(0x7f0000000000)) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) dup2(r3, r2) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000002140)=""/244, 0xf4}], 0x1000000000000299) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r5 = syz_open_pts(r4, 0x801) sched_setscheduler(0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) write$UHID_INPUT(r6, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x6c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x4, {0x0, 0x0, 0x0, "f2"}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x6c}}, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(r7, &(0x7f00000003c0)='./file0\x00', r7, &(0x7f0000000280)='./file0/file0\x00', 0x0) 129.199231ms ago: executing program 2 (id=2193): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsopen(&(0x7f0000000040)='proc\x00', 0x0) r2 = syz_io_uring_setup(0x210b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 99.323325ms ago: executing program 3 (id=2194): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200123"], 0x0}) 0s ago: executing program 0 (id=2195): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) r0 = inotify_init() readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1) kernel console output (not intermixed with test programs): couldn't find an available UDC or it's busy [ 363.951473][ T2963] usb 2-1: config 0 has no interface number 1 [ 363.965283][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.965640][ T2963] usb 2-1: config 0 has no interface number 2 [ 363.980015][ T2963] usb 2-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 363.989652][ T2963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.998040][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.010928][ T2963] usb 2-1: config 0 descriptor?? [ 364.017042][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.032804][ T7] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 364.040880][ T14] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 364.050104][ T7] hid-generic 0003:0158:0100.0010: unexpected long global item [ 364.050866][ T2963] hub 2-1:0.239: bad descriptor, ignoring hub [ 364.057804][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.059843][ T14] usb 4-1: config 0 descriptor?? [ 364.077926][ T2963] hub: probe of 2-1:0.239 failed with error -5 [ 364.084254][ T7] hid-generic: probe of 0003:0158:0100.0010 failed with error -22 [ 364.231442][ T2963] usb 1-1: USB disconnect, device number 42 [ 364.269695][ T7] usb 3-1: USB disconnect, device number 54 [ 364.418303][ T3600] usb 2-1: USB disconnect, device number 45 [ 364.768397][ T14] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 364.898006][ T14] cp2112 0003:10C4:EA90.0011: Part Number: 0xE5 Device Version: 0x26 [ 365.328187][ T14] cp2112 0003:10C4:EA90.0011: error setting SMBus config [ 365.341665][ T14] cp2112: probe of 0003:10C4:EA90.0011 failed with error -71 [ 365.368786][ T14] usb 4-1: USB disconnect, device number 45 [ 365.925283][ T3600] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 366.186061][ T3600] usb 2-1: Using ep0 maxpacket: 16 [ 366.318442][ T3600] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.347871][ T3600] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.393952][ T3600] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.436594][ T3600] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.453785][ T3600] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 366.466710][ T3600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.678212][ T3600] usb 2-1: config 0 descriptor?? [ 367.677574][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.798868][ T3600] usbhid 2-1:0.0: can't add hid device: -71 [ 367.805316][ T3600] usbhid: probe of 2-1:0.0 failed with error -71 [ 367.834577][ T3600] usb 2-1: USB disconnect, device number 46 [ 367.900135][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.026523][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.160473][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.697464][ T3559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.717426][ T3559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.728810][ T3559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.787814][ T3600] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 368.809202][ T3559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.819255][ T3559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 368.826858][ T3559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.048332][ T3600] usb 2-1: Using ep0 maxpacket: 16 [ 369.168291][ T3600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.182798][ T3600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.193085][ T3600] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 369.202458][ T3600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.235364][ T8501] chnl_net:caif_netlink_parms(): no params data found [ 369.249909][ T3600] usb 2-1: config 0 descriptor?? [ 369.419282][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.426635][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.983882][ T8501] device bridge_slave_0 entered promiscuous mode [ 370.109125][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.116945][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.131289][ T3600] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 370.167468][ T8501] device bridge_slave_1 entered promiscuous mode [ 370.282289][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.296604][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.338014][ T3600] cp2112 0003:10C4:EA90.0012: Part Number: 0xE5 Device Version: 0x26 [ 370.417347][ T8501] team0: Port device team_slave_0 added [ 370.558850][ T3600] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 370.643854][ T3600] cp2112: probe of 0003:10C4:EA90.0012 failed with error -71 [ 370.719207][ T3600] usb 2-1: USB disconnect, device number 47 [ 370.758823][ T2963] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 370.846052][ T8501] team0: Port device team_slave_1 added [ 371.108355][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.115361][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.199439][ T2963] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 371.217612][ T3559] Bluetooth: hci4: command tx timeout [ 371.227090][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.241398][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.248727][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.251675][ T2963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.274864][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.347525][ T2963] usb 4-1: config 0 descriptor?? [ 371.419897][ T2963] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 371.817852][ T2963] gspca_sonixj: reg_r err -32 [ 371.822667][ T2963] sonixj: probe of 4-1:0.0 failed with error -32 [ 371.849932][ T8501] device hsr_slave_0 entered promiscuous mode [ 371.883685][ T8501] device hsr_slave_1 entered promiscuous mode [ 371.897990][ T8501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.905620][ T8501] Cannot create hsr debugfs directory [ 371.960742][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.992467][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.193320][ T11] device hsr_slave_0 left promiscuous mode [ 372.201556][ T3599] usb 4-1: USB disconnect, device number 46 [ 372.216497][ T11] device hsr_slave_1 left promiscuous mode [ 372.225099][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.233077][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.242114][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.250008][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.267555][ T11] device bridge_slave_1 left promiscuous mode [ 372.297981][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.329657][ T11] device bridge_slave_0 left promiscuous mode [ 372.336030][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.438721][ T11] device veth1_macvtap left promiscuous mode [ 372.455130][ T11] device veth0_macvtap left promiscuous mode [ 372.465376][ T11] device veth1_vlan left promiscuous mode [ 372.475481][ T11] device veth0_vlan left promiscuous mode [ 372.688037][ T7343] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 372.858029][ T22] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 372.927800][ T7343] usb 3-1: Using ep0 maxpacket: 16 [ 373.226326][ T7343] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 373.236009][ T22] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 373.246677][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.256806][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.273568][ T7343] usb 3-1: Product: syz [ 373.281096][ T22] usb 1-1: config 0 descriptor?? [ 373.288651][ T3559] Bluetooth: hci4: command tx timeout [ 373.298141][ T7343] usb 3-1: Manufacturer: syz [ 373.316959][ T7343] usb 3-1: SerialNumber: syz [ 373.324358][ T22] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 373.334195][ T7343] usb 3-1: config 0 descriptor?? [ 373.380127][ T7343] go7007: probe of 3-1:0.0 failed with error -12 [ 373.582530][ T3597] usb 3-1: USB disconnect, device number 55 [ 373.757945][ T11] team0 (unregistering): Port device team_slave_1 removed [ 373.822663][ T11] team0 (unregistering): Port device team_slave_0 removed [ 373.885577][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.945464][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.416752][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.435045][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.456570][ T3604] usb 1-1: USB disconnect, device number 43 [ 374.776242][ T11] bond0 (unregistering): Released all slaves [ 375.226863][ T8591] ubi: mtd0 is already attached to ubi0 [ 375.359740][ T3559] Bluetooth: hci4: command tx timeout [ 375.497885][ T8596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1535'. [ 375.691994][ T8501] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 375.699202][ T3599] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 375.742834][ T8501] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 375.768474][ T8501] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 375.790188][ T8501] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 375.810510][ T3604] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 376.013731][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.046319][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.063724][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.085996][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.097870][ T3604] usb 3-1: Using ep0 maxpacket: 16 [ 376.111889][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.132087][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.145843][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.153041][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.184312][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.195567][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.213521][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.227227][ T3599] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 376.238006][ T3604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 376.244716][ T3599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.266502][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.273692][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.277787][ T3604] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 376.297249][ T3599] usb 4-1: Product: syz [ 376.302698][ T3599] usb 4-1: Manufacturer: syz [ 376.314570][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.321061][ T3604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.334954][ T3599] usb 4-1: SerialNumber: syz [ 376.346696][ T3599] usb 4-1: config 0 descriptor?? [ 376.365999][ T3604] usb 3-1: config 0 descriptor?? [ 376.380681][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.399497][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.410881][ T3599] gspca_main: pac207-2.14.0 probing 093a:2476 [ 376.429676][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.451714][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.465563][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.500727][ T8501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.527939][ T3599] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 376.547860][ T8501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.581090][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.598496][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.617463][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.640704][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.658803][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.672704][ T22] usb 4-1: USB disconnect, device number 47 [ 376.697429][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.859502][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.888223][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.920338][ T3604] hid (null): unknown global tag 0x83 [ 376.936104][ T3604] hid (null): unknown global tag 0xc [ 376.959197][ T3604] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 376.987141][ T3604] hid-generic 0003:0158:0100.0013: unexpected long global item [ 377.018141][ T3604] hid-generic: probe of 0003:0158:0100.0013 failed with error -22 [ 377.130071][ T3604] usb 3-1: USB disconnect, device number 56 [ 377.298195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.305942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.346428][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.438171][ T3559] Bluetooth: hci4: command tx timeout [ 377.547861][ T3597] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 377.928476][ T3597] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 377.958248][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.989537][ T3597] usb 4-1: config 0 descriptor?? [ 378.243556][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.268087][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.289350][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.309579][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.339649][ T3604] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 378.368275][ T3597] usb 4-1: string descriptor 0 read error: -71 [ 378.388077][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.392280][ T3597] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 378.398115][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.435182][ T3597] gs_usb: probe of 4-1:0.0 failed with error -71 [ 378.438834][ T8501] device veth0_vlan entered promiscuous mode [ 378.468324][ T3597] usb 4-1: USB disconnect, device number 48 [ 378.469043][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.568238][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.575053][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.681116][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.719788][ T8501] device veth1_vlan entered promiscuous mode [ 378.799765][ T3604] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 378.830484][ T3604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.955186][ T3604] usb 1-1: config 0 descriptor?? [ 379.067396][ T3604] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 379.583323][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.600749][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.629556][ T8501] device veth0_macvtap entered promiscuous mode [ 379.659970][ T8501] device veth1_macvtap entered promiscuous mode [ 379.717389][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.740631][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.766687][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.788518][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.811572][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.823936][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.834285][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.846209][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.856384][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.870124][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.882544][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.893563][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.932019][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.954952][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.968495][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.984839][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.001857][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.022418][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.050555][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.077534][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.101595][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.114127][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.125850][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.142112][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.150738][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.171074][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.185963][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.211606][ T22] usb 1-1: USB disconnect, device number 44 [ 380.218225][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.228887][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.238987][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.253492][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.265500][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.274600][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.284579][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.293219][ T3604] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 380.321772][ T8501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.341225][ T8501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.352565][ T8501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.365105][ T8501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.582001][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.598096][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.630941][ T7343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.657022][ T3662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.673915][ T3662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.692901][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.739265][ T3604] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 380.757802][ T3604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.778403][ T3604] usb 3-1: config 0 descriptor?? [ 380.820043][ T3604] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 380.929322][ T8674] ubi: mtd0 is already attached to ubi0 [ 381.248050][ T3604] gspca_sonixj: reg_r err -32 [ 381.252846][ T3604] sonixj: probe of 3-1:0.0 failed with error -32 [ 381.259783][ T3595] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 381.273467][ T8652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.316292][ T8652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.389855][ T7] usb 3-1: USB disconnect, device number 57 [ 381.658181][ T3595] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 381.678468][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.706135][ T3595] usb 5-1: config 0 descriptor?? [ 381.961031][ T8676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.978167][ T8676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.038849][ T3595] usb 5-1: string descriptor 0 read error: -71 [ 382.067927][ T3595] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 382.076146][ T3595] gs_usb: probe of 5-1:0.0 failed with error -71 [ 382.100010][ T3595] usb 5-1: USB disconnect, device number 51 [ 382.318005][ T7343] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 382.501357][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1569'. [ 382.547853][ T3604] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 382.678129][ T7343] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 382.687290][ T7343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.711787][ T7343] usb 3-1: config 0 descriptor?? [ 382.771093][ T7343] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 383.008286][ T7] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 383.156823][ T3604] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 383.179398][ T3604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.187659][ T3604] usb 1-1: Product: syz [ 383.212154][ T3604] usb 1-1: Manufacturer: syz [ 383.216786][ T3604] usb 1-1: SerialNumber: syz [ 383.221881][ T26] audit: type=1804 audit(1719577518.222:202): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1575" name="/root/syzkaller.7obyjK/6/bus/cgroup.controllers" dev="overlay" ino=1997 res=1 errno=0 [ 383.258527][ T3604] usb 1-1: config 0 descriptor?? [ 383.287803][ T26] audit: type=1800 audit(1719577518.222:203): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1575" name="cgroup.controllers" dev="overlay" ino=1997 res=0 errno=0 [ 383.318984][ T3604] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 383.326327][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 383.537431][ T3604] usb 1-1: USB disconnect, device number 45 [ 383.645733][ T7] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 383.656710][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.680710][ T7] usb 4-1: Product: syz [ 383.684935][ T7] usb 4-1: Manufacturer: syz [ 383.695515][ T7] usb 4-1: SerialNumber: syz [ 383.705208][ T7] usb 4-1: config 0 descriptor?? [ 383.713892][ T3564] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 383.750258][ T7] go7007: probe of 4-1:0.0 failed with error -12 [ 383.861822][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.886579][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.906627][ T7] usb 3-1: USB disconnect, device number 58 [ 383.971383][ T3604] usb 4-1: USB disconnect, device number 49 [ 384.037789][ T7343] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 384.413536][ T7343] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 384.422984][ T7343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.433082][ T7343] usb 5-1: config 0 descriptor?? [ 384.481282][ T7343] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 384.518034][ T22] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 384.541374][ T8748] loop2: detected capacity change from 0 to 128 [ 384.566614][ T8748] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 384.593486][ T8748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.008130][ T7343] gspca_sonixj: reg_r err -32 [ 385.027195][ T7343] sonixj: probe of 5-1:0.0 failed with error -32 [ 385.048190][ T22] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 385.106586][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.141793][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.279539][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.292278][ T22] usb 1-1: config 0 descriptor?? [ 385.629601][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.658414][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.689641][ T7343] usb 5-1: USB disconnect, device number 52 [ 385.748148][ T22] usb 1-1: string descriptor 0 read error: -71 [ 385.780140][ T22] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 385.786982][ T22] gs_usb: probe of 1-1:0.0 failed with error -71 [ 385.832211][ T22] usb 1-1: USB disconnect, device number 46 [ 386.254133][ T3595] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 386.803555][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1597'. [ 386.828154][ T3595] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 386.850857][ T3595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.866243][ T3595] usb 2-1: Product: syz [ 386.873974][ T3595] usb 2-1: Manufacturer: syz [ 386.887811][ T3595] usb 2-1: SerialNumber: syz [ 386.906502][ T3595] usb 2-1: config 0 descriptor?? [ 386.974793][ T3595] ums_eneub6250 2-1:0.0: USB Mass Storage device detected [ 387.006868][ T8791] loop0: detected capacity change from 0 to 128 [ 387.045375][ T8791] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 387.101270][ T8791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.217161][ T3598] usb 2-1: USB disconnect, device number 48 [ 388.388682][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'. [ 388.808431][ T3604] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 389.201879][ T3604] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 389.403528][ T3604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.425702][ T3604] usb 1-1: config 0 descriptor?? [ 389.704885][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.810395][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.877923][ T8831] loop1: detected capacity change from 0 to 128 [ 390.036249][ T8831] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 390.120154][ T8831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.451375][ T3604] usb 1-1: string descriptor 0 read error: -71 [ 390.478249][ T3604] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 390.485097][ T3604] gs_usb: probe of 1-1:0.0 failed with error -71 [ 390.524087][ T3604] usb 1-1: USB disconnect, device number 47 [ 390.679289][ T3564] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 392.727814][ T3564] Bluetooth: hci4: command tx timeout [ 392.832313][ T8886] loop2: detected capacity change from 0 to 128 [ 392.901464][ T8886] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 392.917794][ T7] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 392.961257][ T8886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.167913][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 394.177071][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.264700][ T7] usb 1-1: config 0 descriptor?? [ 394.330010][ T7] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 394.836941][ T26] audit: type=1800 audit(1719577529.832:204): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1634" name="bus" dev="overlay" ino=1971 res=0 errno=0 [ 395.180369][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.318640][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.455177][ T7] gspca_sonixj: reg_r err -32 [ 395.460072][ T7] sonixj: probe of 1-1:0.0 failed with error -32 [ 395.469462][ T7] usb 1-1: USB disconnect, device number 48 [ 395.998249][ T8908] loop3: detected capacity change from 0 to 32768 [ 396.028895][ T7343] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 396.060840][ T8908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1636 (8908) [ 396.115032][ T8908] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.137966][ T8908] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 396.157278][ T8908] BTRFS info (device loop3): using free space tree [ 396.248024][ T7343] usb 3-1: device descriptor read/64, error -71 [ 396.648393][ T7343] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 396.918008][ T7343] usb 3-1: device descriptor read/64, error -71 [ 397.044327][ T7343] usb usb3-port1: attempt power cycle [ 397.266744][ T8908] BTRFS info (device loop3): enabling ssd optimizations [ 397.577880][ T7343] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 397.708121][ T7343] usb 3-1: device descriptor read/8, error -71 [ 397.978059][ T7343] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 398.068040][ T7343] usb 3-1: device descriptor read/8, error -71 [ 398.213303][ T7343] usb usb3-port1: unable to enumerate USB device [ 398.225626][ T8967] usb usb9: usbfs: process 8967 (syz.0.1650) did not claim interface 0 before use [ 398.345800][ T4981] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.548247][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1658'. [ 400.777789][ T8978] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 400.807944][ T3599] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 401.007902][ T3599] usb 3-1: device descriptor read/64, error -71 [ 401.278573][ T3599] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 401.338005][ T8978] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 401.357453][ T8978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.407850][ T8978] usb 2-1: Product: syz [ 401.414168][ T8978] usb 2-1: Manufacturer: syz [ 401.426053][ T8978] usb 2-1: SerialNumber: syz [ 401.436233][ T8978] usb 2-1: config 0 descriptor?? [ 401.479620][ T8978] gspca_main: pac207-2.14.0 probing 093a:2476 [ 401.487897][ T3599] usb 3-1: device descriptor read/64, error -71 [ 401.618038][ T8978] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 401.631666][ T8978] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 401.638095][ T3599] usb usb3-port1: attempt power cycle [ 401.653804][ T8978] usb 2-1: No valid video chain found. [ 401.684755][ T7343] usb 2-1: USB disconnect, device number 49 [ 402.168003][ T3599] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 402.398852][ T3599] usb 3-1: device descriptor read/8, error -71 [ 402.747827][ T3599] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 402.958194][ T3599] usb 3-1: device descriptor read/8, error -71 [ 403.077967][ T3599] usb usb3-port1: unable to enumerate USB device [ 403.206665][ T9071] loop1: detected capacity change from 0 to 128 [ 403.216325][ T9071] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 403.235013][ T9071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.307791][ T3604] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 403.337918][ T8979] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 404.338081][ T8979] usb 5-1: device descriptor read/64, error -71 [ 404.558098][ T3604] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 404.577653][ T3604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.599851][ T3604] usb 1-1: config 0 descriptor?? [ 404.608122][ T8979] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 404.651432][ T3604] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 404.705974][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1695'. [ 404.797854][ T8979] usb 5-1: device descriptor read/64, error -71 [ 404.948103][ T8979] usb usb5-port1: attempt power cycle [ 406.057859][ T8979] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 406.075008][ T9062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.137848][ T8979] usb 5-1: device descriptor read/8, error -71 [ 406.142003][ T9062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.251855][ T7343] usb 1-1: USB disconnect, device number 49 [ 406.358306][ T9121] loop1: detected capacity change from 0 to 128 [ 406.540009][ T9121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 406.552719][ T9121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.864517][ T9130] hpfs: Bad magic ... probably not HPFS [ 408.477908][ T27] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 408.502650][ T26] audit: type=1800 audit(1719577543.502:205): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1712" name="bus" dev="overlay" ino=1997 res=0 errno=0 [ 408.867767][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 408.895050][ T3564] Bluetooth: hci4: unexpected event 0x09 length: 10 > 3 [ 408.957840][ T3564] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 409.008042][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 409.118674][ T3564] Bluetooth: hci4: unexpected event 0x42 length: 6 > 3 [ 409.137816][ T27] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 409.253078][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.340474][ T27] usb 2-1: config 0 descriptor?? [ 409.641689][ T9140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1710'. [ 410.246743][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.406435][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.566085][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.682099][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.942120][ T27] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 410.949662][ T27] hid-generic 0003:0158:0100.0014: unexpected long global item [ 410.968228][ T27] hid-generic: probe of 0003:0158:0100.0014 failed with error -22 [ 410.986867][ T27] usb 2-1: USB disconnect, device number 50 [ 411.055858][ T9180] hpfs: Bad magic ... probably not HPFS [ 411.759436][ T9176] loop0: detected capacity change from 0 to 128 [ 411.800973][ T9176] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 411.813589][ T9176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.107883][ T8979] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 413.127835][ T3564] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 413.144497][ T3564] Bluetooth: hci4: Injecting HCI hardware error event [ 413.153276][ T3559] Bluetooth: hci4: hardware error 0x00 [ 413.175597][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1727'. [ 413.318024][ T3598] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 413.377785][ T8979] usb 4-1: Using ep0 maxpacket: 32 [ 413.508911][ T8979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 413.518091][ T27] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 413.697956][ T8979] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 413.721782][ T8979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.757143][ T8979] usb 4-1: Product: syz [ 413.761597][ T8979] usb 4-1: Manufacturer: syz [ 413.778740][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 413.797912][ T8979] usb 4-1: SerialNumber: syz [ 413.838732][ T8979] usb 4-1: config 0 descriptor?? [ 413.852638][ T3598] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 413.864967][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.898803][ T27] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 413.917798][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 413.920159][ T8979] pvrusb2: Hardware description: Terratec Grabster AV400 [ 413.946643][ T3598] usb 3-1: Product: syz [ 413.951221][ T3598] usb 3-1: Manufacturer: syz [ 413.957287][ T27] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 413.976270][ T3598] usb 3-1: SerialNumber: syz [ 413.977817][ T8979] pvrusb2: ********** [ 413.982379][ T27] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 413.985206][ T8979] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 413.999474][ T3598] usb 3-1: config 0 descriptor?? [ 414.024315][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 414.049074][ T8979] pvrusb2: Important functionality might not be entirely working. [ 414.058636][ T3598] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 414.096476][ T8979] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 414.157382][ T8979] pvrusb2: ********** [ 414.178029][ T1989] pvrusb2: Invalid write control endpoint [ 414.191651][ T8979] usb 4-1: USB disconnect, device number 50 [ 414.209624][ T27] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 414.266850][ T27] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 414.267296][ T1989] pvrusb2: Invalid write control endpoint [ 414.293536][ T1989] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 414.323568][ T1989] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 414.328105][ T27] usb 1-1: Product: syz [ 414.357799][ T27] usb 1-1: Manufacturer: syz [ 414.362434][ T1989] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 414.362484][ T1989] pvrusb2: Device being rendered inoperable [ 414.362577][ T1989] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 414.421780][ T1989] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 414.430602][ T1989] pvrusb2: Attached sub-driver cx25840 [ 414.440562][ T1989] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 414.457768][ T1989] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 414.472155][ T27] usb 1-1: SerialNumber: syz [ 414.548382][ T27] usb 1-1: config 0 descriptor?? [ 414.569549][ T7343] usb 3-1: USB disconnect, device number 67 [ 414.612797][ T27] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 414.657532][ T27] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 415.035170][ T3604] usb 1-1: USB disconnect, device number 50 [ 415.057382][ T3604] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 415.214552][ T3559] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 415.247915][ T3598] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 415.612878][ T9227] hpfs: Bad magic ... probably not HPFS [ 416.314353][ T9233] loop4: detected capacity change from 0 to 128 [ 416.419367][ T9233] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 416.452963][ T9233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.788637][ T3598] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 416.891153][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.112948][ T3598] usb 3-1: config 0 descriptor?? [ 417.456402][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.548215][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.697957][ T3598] usb 3-1: string descriptor 0 read error: -71 [ 417.718045][ T3598] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 417.724895][ T3598] gs_usb: probe of 3-1:0.0 failed with error -71 [ 417.750624][ T3598] usb 3-1: USB disconnect, device number 68 [ 418.207853][ T27] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 418.748028][ T27] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 418.767469][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.788300][ T27] usb 5-1: Product: syz [ 418.792526][ T27] usb 5-1: Manufacturer: syz [ 418.809699][ T27] usb 5-1: SerialNumber: syz [ 418.829701][ T27] usb 5-1: config 0 descriptor?? [ 418.858897][ T9274] loop2: detected capacity change from 0 to 128 [ 418.868917][ T27] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 418.889988][ T9274] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 418.913996][ T9274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.789211][ T27] usb 5-1: USB disconnect, device number 57 [ 419.847781][ T7343] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 420.268259][ T7343] usb 2-1: config 0 has an invalid interface number: 239 but max is 1 [ 420.302552][ T7343] usb 2-1: config 0 has no interface number 1 [ 420.449634][ T7343] usb 2-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 420.462685][ T7343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.473744][ T7343] usb 2-1: config 0 descriptor?? [ 420.518402][ T7343] hub 2-1:0.239: bad descriptor, ignoring hub [ 420.524552][ T7343] hub: probe of 2-1:0.239 failed with error -5 [ 421.629594][ T8978] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 421.648647][ T8979] usb 2-1: USB disconnect, device number 51 [ 421.978042][ T8978] usb 4-1: Using ep0 maxpacket: 32 [ 422.127952][ T8978] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 422.146471][ T8978] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 422.172876][ T8978] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 422.228037][ T8978] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 422.267722][ T8978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.427991][ T8978] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 422.447490][ T8978] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 422.477825][ T8978] usb 4-1: Product: syz [ 422.482149][ T8978] usb 4-1: Manufacturer: syz [ 422.486790][ T8978] usb 4-1: SerialNumber: syz [ 422.515679][ T8978] usb 4-1: config 0 descriptor?? [ 422.559251][ T8978] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 422.589176][ T8978] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 422.828426][ T8979] usb 4-1: USB disconnect, device number 51 [ 422.856723][ T8979] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 423.867830][ T8979] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 424.258144][ T8979] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 424.277756][ T8979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.298918][ T8979] usb 5-1: config 0 descriptor?? [ 424.373236][ T8979] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 424.607795][ T7343] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 425.127987][ T7343] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 425.157632][ T7343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.166621][ T7343] usb 4-1: Product: syz [ 425.181122][ T7343] usb 4-1: Manufacturer: syz [ 425.185788][ T7343] usb 4-1: SerialNumber: syz [ 425.209562][ T7343] usb 4-1: config 0 descriptor?? [ 425.233774][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.252836][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.288833][ T7343] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 425.355886][ T8979] gspca_sonixj: reg_r err -71 [ 425.360870][ T8979] sonixj: probe of 5-1:0.0 failed with error -71 [ 425.391455][ T8979] usb 5-1: USB disconnect, device number 58 [ 425.495098][ T7343] usb 4-1: USB disconnect, device number 52 [ 427.541035][ T26] audit: type=1800 audit(1719577562.002:206): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1772" name="bus" dev="overlay" ino=1999 res=0 errno=0 [ 428.585574][ T8978] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 428.790972][ T9372] loop0: detected capacity change from 0 to 128 [ 428.821170][ T9372] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 428.854481][ T9372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.665147][ T8978] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 430.676100][ T8978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.700184][ T8978] usb 2-1: config 0 descriptor?? [ 430.958039][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.007496][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.089348][ T8978] usb 2-1: string descriptor 0 read error: -71 [ 431.118000][ T8978] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 431.127886][ T8978] gs_usb: probe of 2-1:0.0 failed with error -71 [ 431.852550][ T8978] usb 2-1: USB disconnect, device number 52 [ 433.377777][ T3598] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 433.639813][ T9425] loop4: detected capacity change from 0 to 1024 [ 433.715847][ T9425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 433.747845][ T3598] usb 4-1: config 0 has an invalid interface number: 239 but max is 2 [ 433.756120][ T3598] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 433.823485][ T3598] usb 4-1: config 0 has no interface number 1 [ 433.834912][ T3598] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 433.876032][ T3598] usb 4-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 433.903637][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.930700][ T3598] usb 4-1: config 0 descriptor?? [ 433.957863][ T8978] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 433.985504][ T3598] hub 4-1:0.239: bad descriptor, ignoring hub [ 433.994502][ T3598] hub: probe of 4-1:0.239 failed with error -5 [ 434.024693][ T3598] usb 4-1: unknown number of interfaces: 2 [ 434.070514][ T8501] EXT4-fs (loop4): unmounting filesystem. [ 434.298042][ T3604] usb 4-1: USB disconnect, device number 53 [ 434.368179][ T8978] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 434.404093][ T8978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.427636][ T8978] usb 3-1: config 0 descriptor?? [ 434.500497][ T8978] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 435.626347][ T9427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.678011][ T9427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.706837][ T8978] usb 3-1: USB disconnect, device number 69 [ 435.731761][ T9458] loop0: detected capacity change from 0 to 512 [ 435.760989][ T9458] EXT4-fs (loop0): orphan cleanup on readonly fs [ 435.769078][ T9458] EXT4-fs error (device loop0): ext4_quota_enable:6968: comm syz.0.1813: inode #65535: comm syz.0.1813: iget: illegal inode # [ 435.795229][ T9461] loop4: detected capacity change from 0 to 128 [ 435.895952][ T9458] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz.0.1813: Bad quota inode: 65535, type: 2 [ 435.907800][ T9461] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 435.959853][ T9458] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-117, ino=65535). Please run e2fsck to fix. [ 435.984113][ T9461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.989493][ T9458] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 436.008067][ T9458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 436.122277][ T7500] EXT4-fs (loop0): unmounting filesystem. [ 436.933662][ T9473] loop2: detected capacity change from 0 to 2048 [ 437.001426][ T9481] loop3: detected capacity change from 0 to 256 [ 437.168422][ T9473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 437.674658][ T9489] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 18245645996089712108 in block_group 0 [ 437.763925][ T9489] EXT4-fs (loop2): Remounting filesystem read-only [ 437.837451][ T3550] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 437.857888][ T8978] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 438.035510][ T3550] EXT4-fs (loop2): unmounting filesystem. [ 438.123870][ T8978] usb 5-1: Using ep0 maxpacket: 32 [ 438.265561][ T8978] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 438.284366][ T8978] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 438.307751][ T8978] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 438.332337][ T8978] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 438.376603][ T8978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 438.528016][ T3598] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 438.578018][ T8978] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 438.596953][ T8978] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 438.615842][ T8978] usb 5-1: Product: syz [ 438.620242][ T8978] usb 5-1: Manufacturer: syz [ 438.624864][ T8978] usb 5-1: SerialNumber: syz [ 438.660900][ T8978] usb 5-1: config 0 descriptor?? [ 438.709903][ T8978] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 438.737971][ T8978] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 438.903026][ T3598] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 438.917002][ T8978] usb 5-1: USB disconnect, device number 59 [ 438.925823][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.934882][ T8978] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 438.945700][ T3564] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.947844][ T27] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 438.961468][ T3564] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.972599][ T3564] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.982517][ T3564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.992221][ T3564] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 438.999608][ T3564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.001714][ T3598] usb 1-1: config 0 descriptor?? [ 439.080009][ T3598] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 439.167888][ T27] usb 4-1: device descriptor read/64, error -71 [ 439.236397][ T9524] loop1: detected capacity change from 0 to 2048 [ 439.305200][ T9524] loop1: p3 < > p4 < > [ 439.309742][ T9524] loop1: partition table partially beyond EOD, truncated [ 439.326611][ T9524] loop1: p3 start 4284289 is beyond EOD, truncated [ 439.390131][ T9518] chnl_net:caif_netlink_parms(): no params data found [ 439.438089][ T27] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 439.637886][ T27] usb 4-1: device descriptor read/64, error -71 [ 439.646535][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.677751][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.686283][ T9518] device bridge_slave_0 entered promiscuous mode [ 439.700419][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.727440][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.755647][ T9518] device bridge_slave_1 entered promiscuous mode [ 439.777187][ T27] usb usb4-port1: attempt power cycle [ 439.856089][ T9518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.902445][ T9518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.004160][ T9518] team0: Port device team_slave_0 added [ 440.020319][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.026701][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.082951][ T9518] team0: Port device team_slave_1 added [ 440.187876][ T27] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 440.199652][ T9506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.217072][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.234138][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.237102][ T9506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.298032][ T27] usb 4-1: device descriptor read/8, error -71 [ 440.314608][ T9518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.358107][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.360505][ T8977] usb 1-1: USB disconnect, device number 51 [ 440.365080][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.447840][ T9518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.557497][ T9518] device hsr_slave_0 entered promiscuous mode [ 440.574186][ T27] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 440.603309][ T9518] device hsr_slave_1 entered promiscuous mode [ 440.621075][ T9518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.646371][ T9518] Cannot create hsr debugfs directory [ 440.677934][ T27] usb 4-1: device descriptor read/8, error -71 [ 440.798952][ T27] usb usb4-port1: unable to enumerate USB device [ 441.039127][ T3559] Bluetooth: hci2: command tx timeout [ 441.081180][ T9518] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.319223][ T9518] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.387772][ T27] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 441.450608][ T9518] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.461452][ T8978] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 441.587401][ T9518] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.768272][ T27] usb 1-1: config 0 has an invalid interface number: 239 but max is 2 [ 441.787127][ T27] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 441.804418][ T27] usb 1-1: config 0 has no interface number 1 [ 441.811966][ T27] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 441.845652][ T9559] loop3: detected capacity change from 0 to 512 [ 441.858162][ T8978] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 441.862618][ T27] usb 1-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 441.877065][ T8978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.896795][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.898938][ T8978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 441.924193][ T8978] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.936728][ T27] usb 1-1: config 0 descriptor?? [ 441.973865][ T9559] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1851: Invalid inode bitmap blk 4 in block_group 0 [ 441.988386][ T27] hub 1-1:0.239: bad descriptor, ignoring hub [ 441.997023][ T27] hub: probe of 1-1:0.239 failed with error -5 [ 442.058711][ T9559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 442.077182][ T27] usb 1-1: unknown number of interfaces: 2 [ 442.106729][ T9518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.117869][ T8978] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.132669][ T8978] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.141222][ T8978] usb 2-1: Product: syz [ 442.145430][ T8978] usb 2-1: Manufacturer: syz [ 442.201110][ T8978] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 442.208776][ T9555] syz.3.1851 (pid 9555) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 442.307829][ T9518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.347439][ T8979] usb 1-1: USB disconnect, device number 52 [ 442.379946][ T9518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.482493][ T9518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.501578][ T4981] EXT4-fs (loop3): unmounting filesystem. [ 442.634831][ T9575] loop4: detected capacity change from 0 to 16 [ 442.682988][ T9575] erofs: (device loop4): mounted with root inode @ nid 36. [ 442.831588][ T7343] usb 2-1: USB disconnect, device number 53 [ 442.886722][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.918020][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 442.933974][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.087305][ T9518] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.095549][ T9587] syz.0.1861[9587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.095674][ T9587] syz.0.1861[9587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.113210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 443.128526][ T3559] Bluetooth: hci2: command tx timeout [ 443.196200][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.224794][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.232148][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.246369][ T26] audit: type=1326 audit(1719577578.242:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.299517][ T26] audit: type=1326 audit(1719577578.242:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.350094][ T26] audit: type=1326 audit(1719577578.242:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.399995][ T26] audit: type=1326 audit(1719577578.242:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.463389][ T26] audit: type=1326 audit(1719577578.242:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.479774][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.505990][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.528008][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.548664][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.550364][ T26] audit: type=1326 audit(1719577578.252:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.555817][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.641639][ T26] audit: type=1326 audit(1719577578.252:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.693901][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 443.714272][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 443.716814][ T26] audit: type=1326 audit(1719577578.252:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.739149][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 443.785365][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 443.807744][ T26] audit: type=1326 audit(1719577578.252:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.866258][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 443.867805][ T26] audit: type=1326 audit(1719577578.252:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.3.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1083775b29 code=0x7ffc0000 [ 443.878956][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 443.946935][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 443.966326][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 443.975228][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.983557][ T7343] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 444.007451][ T9518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.028999][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 444.040121][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 444.050190][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.167974][ T27] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 444.259333][ T7343] usb 4-1: Using ep0 maxpacket: 8 [ 444.402228][ T46] device hsr_slave_0 left promiscuous mode [ 444.418121][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 444.438864][ T46] device hsr_slave_1 left promiscuous mode [ 444.461227][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.479585][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.499642][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.502402][ T9608] loop1: detected capacity change from 0 to 16 [ 444.519408][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.538143][ T7343] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 444.547333][ T7343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.555934][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 444.568747][ T9608] erofs: (device loop1): mounted with root inode @ nid 36. [ 444.577589][ T27] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 444.586874][ T7343] usb 4-1: Product: syz [ 444.597024][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.598620][ T46] device bridge_slave_1 left promiscuous mode [ 444.605345][ T7343] usb 4-1: Manufacturer: syz [ 444.628004][ T27] usb 5-1: config 0 descriptor?? [ 444.634280][ T7343] usb 4-1: SerialNumber: syz [ 444.648337][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.649823][ T7343] usb 4-1: config 0 descriptor?? [ 444.663364][ T46] device bridge_slave_0 left promiscuous mode [ 444.682504][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.709756][ T7343] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 444.765226][ T46] device veth1_macvtap left promiscuous mode [ 444.771561][ T46] device veth0_macvtap left promiscuous mode [ 444.779989][ T46] device veth1_vlan left promiscuous mode [ 444.786079][ T46] device veth0_vlan left promiscuous mode [ 444.873898][ T9598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1866'. [ 444.914035][ T2964] usb 4-1: USB disconnect, device number 58 [ 445.047919][ T8978] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 445.208163][ T3559] Bluetooth: hci2: command tx timeout [ 445.216281][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.237954][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.250169][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.267643][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.297206][ T27] hid (null): invalid report_size 2675 [ 445.305542][ T27] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 445.315287][ T27] hid-generic 0003:0158:0100.0015: unexpected long global item [ 445.323359][ T27] hid-generic: probe of 0003:0158:0100.0015 failed with error -22 [ 445.418183][ T8978] usb 2-1: config 0 has an invalid interface number: 81 but max is 1 [ 445.429779][ T8978] usb 2-1: config 0 has no interface number 1 [ 445.443950][ T8978] usb 2-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 445.460957][ T8978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.482662][ T8978] usb 2-1: config 0 descriptor?? [ 445.501965][ T8979] usb 5-1: USB disconnect, device number 60 [ 445.522096][ T46] team0 (unregistering): Port device team_slave_1 removed [ 445.539509][ T8978] usb 2-1: unknown number of interfaces: 2 [ 445.630727][ T46] team0 (unregistering): Port device team_slave_0 removed [ 445.706118][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.761208][ T27] usb 2-1: USB disconnect, device number 54 [ 445.784106][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.150758][ T9626] loop4: detected capacity change from 0 to 256 [ 446.656783][ T46] bond0 (unregistering): Released all slaves [ 446.791500][ T9518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.840149][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.849768][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.897319][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.935622][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.019213][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.028597][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.052411][ T9518] device veth0_vlan entered promiscuous mode [ 447.070386][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.086038][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.150959][ T9518] device veth1_vlan entered promiscuous mode [ 447.241164][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 447.250747][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 447.269105][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 447.278284][ T3559] Bluetooth: hci2: command tx timeout [ 447.285402][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.305462][ T9518] device veth0_macvtap entered promiscuous mode [ 447.326653][ T9518] device veth1_macvtap entered promiscuous mode [ 447.409056][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.421493][ T27] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 447.430123][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.457730][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.477744][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.496390][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.515438][ T7343] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 447.533586][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.547164][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.568623][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.578918][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.590763][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.600926][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.611554][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.623720][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.633461][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.642805][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 447.652135][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 447.661614][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.687921][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 447.696044][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.720059][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.739509][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.758469][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.776294][ T7343] usb 1-1: Using ep0 maxpacket: 16 [ 447.783498][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.803531][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.816273][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.835451][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.846421][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.860473][ T27] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 447.878051][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.888884][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 447.899587][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.909517][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.918339][ T7343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 447.937917][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.958789][ T27] usb 2-1: config 0 descriptor?? [ 447.964080][ T7343] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 447.973407][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.983794][ T7343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.993748][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.007917][ T7343] usb 1-1: config 0 descriptor?? [ 448.018642][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.029025][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.071186][ T9518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.080872][ T9518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.101714][ T9518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.122181][ T9518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.254887][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1885'. [ 448.344791][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.385788][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.440182][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 448.478869][ T9134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.493608][ T9134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.527517][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 448.659409][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.678315][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.697997][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.716498][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.749727][ T7343] hid (null): invalid report_size 2675 [ 448.760751][ T7343] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 448.799163][ T7343] hid-generic 0003:0158:0100.0016: unexpected long global item [ 448.820065][ T7343] hid-generic: probe of 0003:0158:0100.0016 failed with error -22 [ 448.952865][ T7343] usb 1-1: USB disconnect, device number 53 [ 449.971938][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 449.971957][ T26] audit: type=1326 audit(1719577584.972:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.0.1891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8e3175b29 code=0x0 [ 450.165830][ T8978] usb 2-1: USB disconnect, device number 55 [ 450.708338][ T26] audit: type=1800 audit(1719577585.652:225): pid=9686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1896" name="bus" dev="overlay" ino=2003 res=0 errno=0 [ 451.274212][ T3604] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 451.678118][ T3604] usb 3-1: config 0 has an invalid interface number: 81 but max is 1 [ 451.705406][ T3604] usb 3-1: config 0 has no interface number 1 [ 451.717860][ T3604] usb 3-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 451.747411][ T3604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.797369][ T3604] usb 3-1: config 0 descriptor?? [ 451.849431][ T3604] usb 3-1: unknown number of interfaces: 2 [ 452.052944][ T3604] usb 3-1: USB disconnect, device number 70 [ 452.417935][ T2964] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 452.532638][ T9689] loop0: detected capacity change from 0 to 40427 [ 452.547737][ T9689] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 452.572754][ T9689] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 452.618593][ T9689] F2FS-fs (loop0): invalid crc value [ 452.656399][ T9689] F2FS-fs (loop0): Found nat_bits in checkpoint [ 452.658101][ T2964] usb 4-1: Using ep0 maxpacket: 16 [ 452.794055][ T2964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 452.825751][ T2964] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 452.844152][ T9689] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 452.844178][ T2964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.861634][ T9689] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 452.871113][ T2964] usb 4-1: config 0 descriptor?? [ 453.047971][ T22] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 453.111712][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1900'. [ 453.149134][ T26] audit: type=1326 audit(1719577588.152:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.4.1908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bf2175b29 code=0x0 [ 453.301636][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 453.380930][ T9726] syz.0.1898: attempt to access beyond end of device [ 453.380930][ T9726] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 453.423749][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.445952][ T22] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.456390][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 453.474725][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.480552][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.492075][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.501209][ T22] usb 2-1: config 0 descriptor?? [ 453.502187][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.524443][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.549650][ T2964] hid (null): invalid report_size 2675 [ 453.561743][ T2964] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 453.605576][ T2964] hid-generic 0003:0158:0100.0017: unexpected long global item [ 453.614026][ T2964] hid-generic: probe of 0003:0158:0100.0017 failed with error -22 [ 453.754797][ T8980] usb 4-1: USB disconnect, device number 59 [ 453.989239][ T56] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 454.005107][ T56] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 454.881176][ T9758] loop4: detected capacity change from 0 to 128 [ 454.905504][ T9758] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 454.945792][ T9758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.041756][ T3559] Bluetooth: hci2: unexpected event 0x09 length: 10 > 3 [ 455.043313][ T3559] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 455.162261][ T2964] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 455.228359][ T3559] Bluetooth: hci2: unexpected event 0x42 length: 6 > 3 [ 455.548484][ T2964] usb 4-1: config 0 has an invalid interface number: 81 but max is 1 [ 455.621748][ T2964] usb 4-1: config 0 has no interface number 1 [ 455.653802][ T2964] usb 4-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 455.735970][ T2964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.825792][ T2964] usb 4-1: config 0 descriptor?? [ 455.890591][ T7343] usb 2-1: USB disconnect, device number 56 [ 455.906160][ T2964] usb 4-1: unknown number of interfaces: 2 [ 455.973780][ T26] audit: type=1326 audit(1719577590.972:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.0.1921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8e3175b29 code=0x0 [ 456.128164][ T8978] usb 4-1: USB disconnect, device number 60 [ 456.467741][ T8980] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 456.608585][ T9768] loop1: detected capacity change from 0 to 40427 [ 456.616426][ T9768] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 456.624340][ T9768] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 456.634654][ T9768] F2FS-fs (loop1): invalid crc value [ 456.663514][ T9768] F2FS-fs (loop1): Found nat_bits in checkpoint [ 456.797248][ T9768] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 456.814319][ T9768] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 457.208111][ T8980] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 457.926912][ T8980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.935806][ T8980] usb 5-1: Product: syz [ 457.941051][ T8980] usb 5-1: Manufacturer: syz [ 457.945701][ T8980] usb 5-1: SerialNumber: syz [ 457.954272][ T8980] usb 5-1: config 0 descriptor?? [ 458.090350][ T8980] gspca_main: pac207-2.14.0 probing 093a:2476 [ 458.152905][ T9797] syz.1.1922: attempt to access beyond end of device [ 458.152905][ T9797] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 458.229255][ T8980] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 458.256041][ T8980] usb 5-1: Found UVC 0.00 device syz (093a:2476) [ 458.276397][ T8980] usb 5-1: No valid video chain found. [ 458.294750][ T8980] usb 5-1: USB disconnect, device number 61 [ 458.477958][ T7343] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 458.638978][ T26] audit: type=1800 audit(1719577593.642:228): pid=9812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1934" name="file0" dev="sda1" ino=1999 res=0 errno=0 [ 458.737900][ T7343] usb 1-1: Using ep0 maxpacket: 16 [ 458.783292][ T9134] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 458.794360][ T9134] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 458.858224][ T7343] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.888120][ T7343] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 458.908706][ T7343] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 458.926184][ T7343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.936375][ T9818] loop4: detected capacity change from 0 to 256 [ 458.946471][ T7343] usb 1-1: config 0 descriptor?? [ 459.217958][ T27] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 459.288004][ T3559] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 459.297151][ T3559] Bluetooth: hci2: Injecting HCI hardware error event [ 459.306933][ T3564] Bluetooth: hci2: hardware error 0x00 [ 459.476760][ T26] audit: type=1800 audit(1719577594.472:229): pid=9816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1934" name="/" dev="fuse" ino=1 res=0 errno=0 [ 459.588950][ T27] usb 3-1: config 0 has an invalid interface number: 81 but max is 2 [ 459.597297][ T27] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 459.617858][ T27] usb 3-1: config 0 has no interface number 1 [ 459.626403][ T27] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 459.644036][ T27] usb 3-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 459.655204][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.676429][ T27] usb 3-1: config 0 descriptor?? [ 459.720364][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 459.727882][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 459.756905][ T27] usb 3-1: unknown number of interfaces: 2 [ 459.974907][ T9831] loop1: detected capacity change from 0 to 40427 [ 460.009485][ T9831] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 460.024850][ T9831] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 460.036548][ T26] audit: type=1800 audit(1719577595.032:230): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1943" name="bus" dev="sda1" ino=1999 res=0 errno=0 [ 460.058439][ T7343] usb 3-1: USB disconnect, device number 71 [ 460.069163][ T9831] F2FS-fs (loop1): Found nat_bits in checkpoint [ 460.126401][ T9831] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 460.168683][ T9831] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 460.175968][ T9831] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 460.587926][ T26] audit: type=1107 audit(1719577595.542:231): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='iө3xSm? :|2f n>c' [ 461.238695][ T8978] usb 1-1: USB disconnect, device number 54 [ 461.373879][ T3564] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 461.807842][ T8978] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 461.953373][ T9867] loop4: detected capacity change from 0 to 128 [ 461.962116][ T9867] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 461.974913][ T9867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 463.087758][ T8978] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 463.097059][ T8978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.168724][ T8978] usb 1-1: config 0 descriptor?? [ 463.209901][ T8978] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 463.360742][ T9884] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1953'. [ 463.417239][ T9855] loop2: detected capacity change from 0 to 40427 [ 463.444170][ T9855] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 463.464440][ T9855] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 463.496583][ T9855] F2FS-fs (loop2): invalid crc value [ 463.537049][ T9855] F2FS-fs (loop2): Found nat_bits in checkpoint [ 463.640515][ T22] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 463.654564][ T9855] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 463.672031][ T9855] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 463.922079][ T8980] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 464.024817][ T22] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 464.053108][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.067774][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.089436][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.107302][ T22] usb 4-1: config 0 descriptor?? [ 464.134114][ T9895] syz.2.1946: attempt to access beyond end of device [ 464.134114][ T9895] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 464.177801][ T8978] gspca_sonixj: reg_r err -71 [ 464.182591][ T8978] sonixj: probe of 1-1:0.0 failed with error -71 [ 464.199079][ T8978] usb 1-1: USB disconnect, device number 55 [ 464.328029][ T8980] usb 5-1: config 0 has an invalid interface number: 81 but max is 2 [ 464.336182][ T8980] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 464.350031][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.365508][ T8980] usb 5-1: config 0 has no interface number 1 [ 464.382589][ T8980] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 464.390696][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.407940][ T8980] usb 5-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 464.447918][ T22] usb 4-1: string descriptor 0 read error: -71 [ 464.451330][ T8980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.487826][ T22] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 464.494014][ T8980] usb 5-1: config 0 descriptor?? [ 464.497903][ T22] gs_usb: probe of 4-1:0.0 failed with error -71 [ 464.526858][ T9899] 9pnet_fd: Insufficient options for proto=fd [ 464.527591][ T22] usb 4-1: USB disconnect, device number 61 [ 464.554240][ T8980] hub 5-1:0.0: bad descriptor, ignoring hub [ 464.570592][ T8980] hub: probe of 5-1:0.0 failed with error -5 [ 464.597130][ T8980] usb 5-1: unknown number of interfaces: 2 [ 464.884519][ T22] usb 5-1: USB disconnect, device number 62 [ 465.336193][ T56] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 465.360032][ T56] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 465.512250][ T9918] loop4: detected capacity change from 0 to 128 [ 465.553360][ T9918] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 465.588643][ T9918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.648413][ T9931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1966'. [ 466.773000][ T9937] 9pnet_fd: Insufficient options for proto=fd [ 466.925372][ T8978] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 466.998065][ T8980] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 467.237776][ T8979] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 467.247887][ T8980] usb 5-1: Using ep0 maxpacket: 16 [ 467.378230][ T8980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 467.397118][ T8980] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 467.418397][ T8980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.438251][ T8980] usb 5-1: config 0 descriptor?? [ 467.458811][ T8978] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 467.467967][ T8978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.476001][ T8978] usb 3-1: Product: syz [ 467.482850][ T8978] usb 3-1: Manufacturer: syz [ 467.487589][ T8978] usb 3-1: SerialNumber: syz [ 467.494506][ T8978] usb 3-1: config 0 descriptor?? [ 467.539766][ T8978] gspca_main: pac207-2.14.0 probing 093a:2476 [ 467.618700][ T8979] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 467.628469][ T8979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.638936][ T8979] usb 1-1: config 0 descriptor?? [ 467.647863][ T3604] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 467.668032][ T8978] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 467.676430][ T8978] usb 3-1: Found UVC 0.00 device syz (093a:2476) [ 467.684620][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1969'. [ 467.685355][ T8979] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 467.752821][ T8978] usb 3-1: No valid video chain found. [ 468.566561][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.572909][ T8978] usb 3-1: USB disconnect, device number 72 [ 468.596450][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.619542][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.637543][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.672004][ T8980] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 468.680085][ T8980] hid-generic 0003:0158:0100.0018: unexpected long global item [ 468.689524][ T8980] hid-generic: probe of 0003:0158:0100.0018 failed with error -22 [ 468.808003][ T3604] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 468.824043][ T3604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.838593][ T3604] usb 4-1: config 0 descriptor?? [ 468.885156][ T8980] usb 5-1: USB disconnect, device number 63 [ 468.933966][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.944090][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.018009][ T8978] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 469.037921][ T8979] gspca_sonixj: reg_r err -71 [ 469.042706][ T8979] sonixj: probe of 1-1:0.0 failed with error -71 [ 469.059375][ T8979] usb 1-1: USB disconnect, device number 56 [ 469.079305][ T9944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.088316][ T9944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.147975][ T3604] usb 4-1: string descriptor 0 read error: -71 [ 469.178156][ T3604] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 469.185235][ T3604] gs_usb: probe of 4-1:0.0 failed with error -71 [ 469.193767][ T3604] usb 4-1: USB disconnect, device number 62 [ 469.387868][ T8978] usb 3-1: config 0 has an invalid interface number: 81 but max is 2 [ 469.396200][ T8978] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 469.405950][ T8978] usb 3-1: config 0 has no interface number 1 [ 469.412251][ T8978] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 469.421934][ T8978] usb 3-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 469.431411][ T8978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.443876][ T8978] usb 3-1: config 0 descriptor?? [ 469.481275][ T9971] loop4: detected capacity change from 0 to 128 [ 469.489466][ T9971] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 469.498644][ T8978] hub 3-1:0.0: bad descriptor, ignoring hub [ 469.506663][ T8978] hub: probe of 3-1:0.0 failed with error -5 [ 469.512748][ T9971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.525239][ T8978] usb 3-1: unknown number of interfaces: 2 [ 470.187868][ T22] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 470.252629][ T9981] 9pnet_fd: Insufficient options for proto=fd [ 470.705282][ T8981] usb 3-1: USB disconnect, device number 73 [ 470.748223][ T22] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 470.776825][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.807946][ T22] usb 4-1: Product: syz [ 470.812181][ T22] usb 4-1: Manufacturer: syz [ 470.854515][ T22] usb 4-1: SerialNumber: syz [ 470.910612][ T22] usb 4-1: config 0 descriptor?? [ 470.956608][ T22] gspca_main: pac207-2.14.0 probing 093a:2476 [ 471.093513][ T22] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 471.112800][ T22] usb 4-1: Found UVC 0.00 device syz (093a:2476) [ 471.136017][ T22] usb 4-1: No valid video chain found. [ 471.159606][ T22] usb 4-1: USB disconnect, device number 63 [ 471.288166][ T8981] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 471.588020][ T8981] usb 2-1: Using ep0 maxpacket: 16 [ 471.748410][ T8981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 471.832333][ T8981] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 471.872862][ T8981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.919458][ T8981] usb 2-1: config 0 descriptor?? [ 471.967789][ T27] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 472.177104][ T9995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1992'. [ 472.408508][ T27] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 472.417911][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.428484][ T27] usb 1-1: config 0 descriptor?? [ 472.533223][ T9995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.543749][ T9995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.553525][ T9995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.562385][ T9995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.581207][ T8981] hid-generic 0003:0158:0100.0019: unknown main item tag 0x1 [ 472.589185][ T8981] hid-generic 0003:0158:0100.0019: unexpected long global item [ 472.597203][ T8981] hid-generic: probe of 0003:0158:0100.0019 failed with error -22 [ 472.669798][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.685836][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.727962][ T27] usb 1-1: string descriptor 0 read error: -71 [ 472.748200][ T27] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 472.756588][ T27] gs_usb: probe of 1-1:0.0 failed with error -71 [ 472.773991][ T27] usb 1-1: USB disconnect, device number 57 [ 472.794508][ T7343] usb 2-1: USB disconnect, device number 57 [ 474.548837][T10088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2023'. [ 474.714496][T10095] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 476.233437][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2036'. [ 476.350843][ T22] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 476.718036][ T22] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 476.727177][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.737143][ T22] usb 3-1: config 0 descriptor?? [ 476.738179][ T8978] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 476.779245][ T22] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 477.157834][ T8978] usb 4-1: Using ep0 maxpacket: 32 [ 477.339868][ T8978] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 477.465418][ T8978] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 477.617594][ T8978] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 477.790298][ T8978] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 477.886679][ T8978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.973209][T10160] loop0: detected capacity change from 0 to 128 [ 477.995107][T10160] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 478.013569][T10160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 478.198387][T10163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2048'. [ 478.232265][ T8978] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 478.242601][ T8978] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 478.251156][ T8978] usb 4-1: Product: syz [ 478.255849][ T8978] usb 4-1: Manufacturer: syz [ 478.260565][ T8978] usb 4-1: SerialNumber: syz [ 478.267090][ T8978] usb 4-1: config 0 descriptor?? [ 478.314789][ T8978] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 478.472194][ T8978] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 478.558828][T10121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.571019][T10121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.597435][ T8978] usb 3-1: USB disconnect, device number 74 [ 478.741577][ T8979] usb 4-1: USB disconnect, device number 64 [ 478.767194][ T8979] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 479.368009][ T22] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 479.777772][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 479.803268][T10196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2060'. [ 479.898341][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.924721][ T22] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 480.016741][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 480.093747][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 480.132653][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.216288][ T22] usb 2-1: config 0 descriptor?? [ 480.294805][ T22] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 480.758877][T10204] loop0: detected capacity change from 0 to 128 [ 480.768534][T10204] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 480.783069][T10204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.908047][ T8978] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 481.241528][ T8978] usb 4-1: Using ep0 maxpacket: 16 [ 481.678655][ T8978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 481.772594][ T8978] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 481.899856][ T8978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.953717][ T8978] usb 4-1: config 0 descriptor?? [ 482.150836][ T3599] usb 2-1: USB disconnect, device number 58 [ 482.211647][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2062'. [ 482.669141][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.687807][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.942081][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.005396][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.067737][ T8978] hid (null): unknown global tag 0xff [ 483.104230][ T8978] hid-generic 0003:0158:0100.001A: unknown main item tag 0x1 [ 483.113399][ T8978] hid-generic 0003:0158:0100.001A: unexpected long global item [ 483.138669][ T8978] hid-generic: probe of 0003:0158:0100.001A failed with error -22 [ 483.357815][ T3599] usb 4-1: USB disconnect, device number 65 [ 483.777764][ T8978] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 483.783145][ T27] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 483.967908][ T8978] usb 3-1: device descriptor read/64, error -71 [ 484.038017][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 484.158882][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.176798][ T27] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 484.191129][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 484.197921][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 484.207306][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.218814][ T27] usb 2-1: config 0 descriptor?? [ 484.260712][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 484.327781][ T8978] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 484.537753][ T8978] usb 3-1: device descriptor read/64, error -71 [ 484.660609][ T8978] usb usb3-port1: attempt power cycle [ 485.097883][ T8978] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 485.309340][ T8978] usb 3-1: device descriptor read/8, error -71 [ 485.608546][ T8978] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 485.738035][ T8978] usb 3-1: device descriptor read/8, error -71 [ 485.857969][ T8978] usb usb3-port1: unable to enumerate USB device [ 486.297938][ T27] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 486.307774][ T8978] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 486.407830][ T8981] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 486.525271][ T22] usb 2-1: USB disconnect, device number 59 [ 486.537791][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 486.567761][ T8978] usb 4-1: Using ep0 maxpacket: 32 [ 486.668666][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 486.680206][ T27] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 486.689391][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.698057][ T8978] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 486.699768][ T27] usb 1-1: config 0 descriptor?? [ 486.714019][ T8978] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 486.726425][ T8978] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 486.737868][ T8978] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 486.751898][ T8978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 486.788007][ T8981] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 486.797165][ T8981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.809921][ T8981] usb 5-1: config 0 descriptor?? [ 486.860477][ T8981] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 486.937954][ T8978] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 486.947319][ T8978] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 486.951915][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2098'. [ 486.955925][ T8978] usb 4-1: Product: syz [ 486.969365][ T8978] usb 4-1: Manufacturer: syz [ 486.974226][ T8978] usb 4-1: SerialNumber: syz [ 486.984626][ T8978] usb 4-1: config 0 descriptor?? [ 487.039522][ T8978] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 487.066711][ T8978] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 487.260417][ T22] usb 4-1: USB disconnect, device number 66 [ 487.269846][ T22] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 487.291554][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.300396][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.310151][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.319732][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.349855][ T27] hid (null): unknown global tag 0xff [ 487.357871][ T27] hid-generic 0003:0158:0100.001B: unknown main item tag 0x1 [ 487.366049][ T27] hid-generic 0003:0158:0100.001B: unexpected long global item [ 487.374189][ T27] hid-generic: probe of 0003:0158:0100.001B failed with error -22 [ 487.552221][ T8978] usb 1-1: USB disconnect, device number 58 [ 487.736834][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.776479][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.868856][ T8981] gspca_sonixj: reg_r err -71 [ 487.873906][ T8981] sonixj: probe of 5-1:0.0 failed with error -71 [ 487.988975][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2108'. [ 488.620457][ T8981] usb 5-1: USB disconnect, device number 64 [ 488.653638][T10339] loop3: detected capacity change from 0 to 128 [ 488.678397][T10339] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 488.747252][T10339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.307770][ T8980] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 490.557882][ T8980] usb 2-1: Using ep0 maxpacket: 16 [ 490.688107][ T8980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.707082][ T8980] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 490.728278][ T8980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 490.735697][ T8980] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 490.752724][ T8980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.764998][ T8980] usb 2-1: config 0 descriptor?? [ 490.797843][ T8981] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 490.819728][ T8980] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 490.959763][ T8979] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 491.038795][ T3599] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 491.237989][ T8981] usb 3-1: Using ep0 maxpacket: 32 [ 491.413887][ T8981] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 491.495639][ T8979] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 491.512067][ T8981] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 491.536618][ T8979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.591654][ T8981] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 491.607423][ T8979] usb 1-1: config 0 descriptor?? [ 491.658574][ T8981] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 491.683699][ T8979] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 491.746261][ T8981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 491.948151][ T3599] usb 5-1: Using ep0 maxpacket: 16 [ 491.979058][ T8981] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 491.995954][ T8981] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 492.009787][ T8981] usb 3-1: Product: syz [ 492.014244][ T8981] usb 3-1: Manufacturer: syz [ 492.027490][ T8981] usb 3-1: SerialNumber: syz [ 492.057557][ T8981] usb 3-1: config 0 descriptor?? [ 492.081378][ T8978] usb 2-1: USB disconnect, device number 60 [ 492.129696][ T8981] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 492.148026][ T3599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 492.153128][ T8981] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 492.171541][ T3599] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 492.187075][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.208871][ T3599] usb 5-1: config 0 descriptor?? [ 492.343021][ T22] usb 3-1: USB disconnect, device number 79 [ 492.356186][ T22] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 492.378917][T10399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2130'. [ 492.450909][T10377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2122'. [ 492.546838][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.564774][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.572827][ T8981] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 492.648015][ T8979] gspca_sonixj: reg_r err -71 [ 492.652867][ T8979] sonixj: probe of 1-1:0.0 failed with error -71 [ 492.660934][ T8979] usb 1-1: USB disconnect, device number 59 [ 492.751368][T10377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.760210][T10377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.769053][T10377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.777604][T10377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.789355][ T3599] hid (null): unknown global tag 0xff [ 492.797250][ T3599] hid-generic 0003:0158:0100.001C: unknown main item tag 0x1 [ 492.805274][ T3599] hid-generic 0003:0158:0100.001C: unexpected long global item [ 492.813524][ T3599] hid-generic: probe of 0003:0158:0100.001C failed with error -22 [ 492.990302][ T22] usb 5-1: USB disconnect, device number 65 [ 493.204549][ T8981] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 493.227861][ T8981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.240028][ T8981] usb 4-1: Product: syz [ 493.244379][ T8981] usb 4-1: Manufacturer: syz [ 493.435207][ T8981] usb 4-1: SerialNumber: syz [ 493.442215][ T8981] usb 4-1: config 0 descriptor?? [ 493.489749][ T8981] gspca_main: pac207-2.14.0 probing 093a:2476 [ 493.617886][ T8981] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 493.692950][ T27] usb 4-1: USB disconnect, device number 67 [ 493.837835][ T22] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 493.907858][ T3599] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 494.168747][T10421] loop2: detected capacity change from 0 to 128 [ 494.187853][T10421] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 494.198325][ T3599] usb 5-1: Using ep0 maxpacket: 16 [ 494.206167][T10421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.400345][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2141'. [ 494.406158][ T22] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 494.419293][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.435983][ T22] usb 2-1: config 0 descriptor?? [ 494.478286][ T3599] usb 5-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 494.501649][ T22] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 494.524159][ T3599] usb 5-1: config 0 interface 0 has no altsetting 0 [ 494.623246][ T3599] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 494.666304][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.805580][ T3599] usb 5-1: config 0 descriptor?? [ 495.331173][ T3599] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 495.462116][T10440] 9pnet_fd: Insufficient options for proto=fd [ 495.577772][ T3598] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 495.680830][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.689593][ T3599] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 495.697558][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.708927][ T8981] usb 2-1: USB disconnect, device number 61 [ 495.817781][ T3598] usb 4-1: Using ep0 maxpacket: 32 [ 495.937982][ T3598] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 495.946752][ T3598] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 495.963274][ T3598] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 495.975021][ T3598] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 495.988795][ T3598] usb 4-1: config 0 interface 0 has no altsetting 0 [ 496.068112][ T3599] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 496.077475][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.087583][ T3599] usb 3-1: config 0 descriptor?? [ 496.132409][ T3599] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 496.147891][ T3598] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 496.157340][ T3598] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 496.166266][ T3598] usb 4-1: Product: syz [ 496.170627][ T3598] usb 4-1: Manufacturer: syz [ 496.175264][ T3598] usb 4-1: SerialNumber: syz [ 496.181925][ T3598] usb 4-1: config 0 descriptor?? [ 496.218866][ T3598] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 496.230591][ T3598] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 496.429685][ T27] usb 4-1: USB disconnect, device number 68 [ 496.444820][ T27] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 496.624391][ T3598] usb 5-1: USB disconnect, device number 66 [ 496.687827][ T8981] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 496.983815][T10437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.995529][T10437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.047890][ T8981] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 497.057268][ T8981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.057836][ T3599] gspca_sonixj: reg_r err -71 [ 497.071425][ T3599] sonixj: probe of 3-1:0.0 failed with error -71 [ 497.078358][ T8981] usb 2-1: config 0 descriptor?? [ 497.079246][ T3598] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 497.092516][ T3599] usb 3-1: USB disconnect, device number 80 [ 497.329275][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.346439][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.397358][T10460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2153'. [ 497.409115][ T8981] usb 2-1: string descriptor 0 read error: -71 [ 497.437825][ T8981] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 497.444682][ T8981] gs_usb: probe of 2-1:0.0 failed with error -71 [ 497.468782][ T8981] usb 2-1: USB disconnect, device number 62 [ 497.497187][T10463] loop0: detected capacity change from 0 to 128 [ 497.516375][T10463] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 497.540178][T10463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.641424][T10470] 9pnet_fd: Insufficient options for proto=fd [ 497.798010][ T3598] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 497.807465][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.815663][ T3598] usb 5-1: Product: syz [ 497.820730][ T3598] usb 5-1: Manufacturer: syz [ 497.825565][ T3598] usb 5-1: SerialNumber: syz [ 497.961522][ T3598] usb 5-1: config 0 descriptor?? [ 498.129122][ T3598] gspca_main: pac207-2.14.0 probing 093a:2476 [ 498.217992][ T3599] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 498.359767][ T3598] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 498.511086][ T3598] usb 5-1: USB disconnect, device number 67 [ 498.618077][ T3599] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 498.653780][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.695799][ T3599] usb 4-1: config 0 descriptor?? [ 498.769937][ T3599] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 499.276378][ T26] audit: type=1800 audit(1719577634.272:232): pid=10489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2162" name="bus" dev="overlay" ino=1996 res=0 errno=0 [ 499.898145][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2165'. [ 500.057838][ T8979] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 500.245446][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.269562][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.282044][ T27] usb 4-1: USB disconnect, device number 69 [ 500.328076][ T8979] usb 3-1: Using ep0 maxpacket: 32 [ 500.377781][ T3599] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 500.450061][ T8979] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 500.458735][ T8979] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 500.470116][ T8979] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 500.481489][ T8979] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 500.495233][ T8979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 500.557995][ T8981] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 500.681147][ T8979] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 500.690816][ T8979] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 500.699337][ T8979] usb 3-1: Product: syz [ 500.703618][ T8979] usb 3-1: Manufacturer: syz [ 500.710040][ T8979] usb 3-1: SerialNumber: syz [ 500.716370][ T8979] usb 3-1: config 0 descriptor?? [ 500.738019][ T3599] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 500.747323][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.771055][ T3599] usb 5-1: config 0 descriptor?? [ 500.779360][ T8979] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 500.805701][ T8979] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 500.819812][ T3599] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 500.893133][T10509] loop3: detected capacity change from 0 to 128 [ 500.902633][T10509] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 500.925975][T10509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.948292][ T8981] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 500.967842][ T8981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.013379][ T8981] usb 2-1: config 0 descriptor?? [ 501.045412][ T8979] usb 3-1: USB disconnect, device number 81 [ 501.054176][ T8979] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 501.408482][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.525919][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.991694][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.991694][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.991838][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.013099][ T8981] usb 2-1: string descriptor 0 read error: -71 [ 502.029805][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.122628][ T8981] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 502.130223][ T8981] gs_usb: probe of 2-1:0.0 failed with error -71 [ 502.138028][ T3599] gspca_sonixj: reg_r err -71 [ 502.140146][ T8981] usb 2-1: USB disconnect, device number 63 [ 502.143173][ T3599] sonixj: probe of 5-1:0.0 failed with error -71 [ 502.177077][ T3599] usb 5-1: USB disconnect, device number 68 [ 502.241230][T10518] 9pnet_fd: Insufficient options for proto=fd [ 502.537980][ T8979] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 502.584642][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 503.036149][T10546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2186'. [ 503.147913][ T8979] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 503.162346][ T8979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.171133][ T8979] usb 1-1: Product: syz [ 503.175332][ T8979] usb 1-1: Manufacturer: syz [ 503.180199][ T8979] usb 1-1: SerialNumber: syz [ 503.186868][ T8979] usb 1-1: config 0 descriptor?? [ 503.259996][ T8979] gspca_main: pac207-2.14.0 probing 093a:2476 [ 503.387742][ T3599] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 503.467900][ T8979] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 503.485622][ T8979] usb 1-1: USB disconnect, device number 60 [ 503.687792][ T3599] usb 5-1: Using ep0 maxpacket: 16 [ 503.809050][ T3599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 503.820798][ T3599] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 503.830255][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.847738][ T3599] usb 5-1: config 0 descriptor?? [ 609.957602][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 609.964301][ C1] rcu: 1-...!: (1 GPs behind) idle=7984/1/0x4000000000000000 softirq=39351/39352 fqs=119 [ 609.975523][ C1] (t=10500 jiffies g=59621 q=85 ncpus=2) [ 609.981259][ C1] rcu: rcu_preempt kthread starved for 10261 jiffies! g59621 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 609.992486][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 610.002477][ C1] rcu: RCU grace-period kthread stack dump: [ 610.008369][ C1] task:rcu_preempt state:R running task stack:26712 pid:16 ppid:2 flags:0x00004000 [ 610.019333][ C1] Call Trace: [ 610.022614][ C1] [ 610.025638][ C1] __schedule+0x142d/0x4550 [ 610.030207][ C1] ? _raw_spin_unlock+0x40/0x40 [ 610.035169][ C1] ? __sched_text_start+0x8/0x8 [ 610.040027][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 610.045562][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 610.051571][ C1] ? _raw_spin_unlock+0x40/0x40 [ 610.056454][ C1] schedule+0xbf/0x180 [ 610.060539][ C1] schedule_timeout+0x1b9/0x300 [ 610.065391][ C1] ? console_conditional_schedule+0x40/0x40 [ 610.071289][ C1] ? update_process_times+0x1b0/0x1b0 [ 610.076674][ C1] ? prepare_to_swait_event+0x329/0x350 [ 610.082238][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 610.087102][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 610.093265][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 610.098466][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 610.103231][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 610.109131][ C1] ? finish_swait+0xcf/0x1e0 [ 610.113754][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 610.118525][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 610.123902][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 610.129815][ C1] ? __kthread_parkme+0x168/0x1c0 [ 610.134880][ C1] kthread+0x28d/0x320 [ 610.138947][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 610.144064][ C1] ? kthread_blkcg+0xd0/0xd0 [ 610.148659][ C1] ret_from_fork+0x1f/0x30 [ 610.153089][ C1] [ 610.156105][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 610.162425][ C1] Sending NMI from CPU 1 to CPUs 0: [ 610.167662][ C0] NMI backtrace for cpu 0 [ 610.167676][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.96-syzkaller #0 [ 610.167694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 610.167705][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x80 [ 610.167743][ C0] Code: 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 c3 0f 1f 00 <4c> 8b 04 24 65 48 8b 0d 84 d7 77 7e 65 8b 05 85 d7 77 7e a9 00 01 [ 610.167759][ C0] RSP: 0018:ffffc90000007ca8 EFLAGS: 00000046 [ 610.167775][ C0] RAX: 0000000080010001 RBX: 0000008e0e94f880 RCX: ffffffff8cebd800 [ 610.167789][ C0] RDX: 0000000080010001 RSI: 0000008e0f2d8f00 RDI: 0000000000000000 [ 610.167801][ C0] RBP: 0000008e0f2d8f00 R08: ffffffff81798f9d R09: fffffbfff239b26d [ 610.167814][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000989680 [ 610.167826][ C0] R13: ffff8880b982add8 R14: ffff8880b982ade0 R15: 1ffff110173055bc [ 610.167840][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 610.167855][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.167868][ C0] CR2: 00007fdad582b6c0 CR3: 00000000759d0000 CR4: 00000000003506f0 [ 610.167883][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 610.167894][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 610.167905][ C0] Call Trace: [ 610.167912][ C0] [ 610.167919][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 610.167949][ C0] ? read_lock_is_recursive+0x10/0x10 [ 610.167979][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 610.168007][ C0] ? nmi_handle+0x25/0x440 [ 610.168067][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 610.168094][ C0] ? nmi_handle+0x12e/0x440 [ 610.168120][ C0] ? nmi_handle+0x25/0x440 [ 610.168146][ C0] ? __sanitizer_cov_trace_const_cmp4+0x80/0x80 [ 610.168169][ C0] ? default_do_nmi+0x62/0x150 [ 610.168187][ C0] ? exc_nmi+0xa8/0x100 [ 610.168203][ C0] ? end_repeat_nmi+0x16/0x31 [ 610.168232][ C0] ? hrtimer_forward+0x12d/0x2c0 [ 610.168254][ C0] ? __sanitizer_cov_trace_const_cmp4+0x80/0x80 [ 610.168279][ C0] ? __sanitizer_cov_trace_const_cmp4+0x80/0x80 [ 610.168304][ C0] ? __sanitizer_cov_trace_const_cmp4+0x80/0x80 [ 610.168327][ C0] [ 610.168332][ C0] [ 610.168337][ C0] hrtimer_forward+0x192/0x2c0 [ 610.168363][ C0] tick_sched_timer+0x3cb/0x550 [ 610.168382][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 610.168398][ C0] __hrtimer_run_queues+0x5a7/0xe50 [ 610.168429][ C0] ? hrtimer_interrupt+0x980/0x980 [ 610.168451][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 610.168480][ C0] hrtimer_interrupt+0x392/0x980 [ 610.168513][ C0] __sysvec_apic_timer_interrupt+0x156/0x580 [ 610.168538][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 610.168558][ C0] [ 610.168563][ C0] [ 610.168569][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 610.168595][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 610.168617][ C0] Code: 44 f5 f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 64 03 fc f6 0f 1f 44 00 00 e8 ba 40 f5 f6 0f 00 2d 03 14 b2 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 2b c2 4c f7 [ 610.168631][ C0] RSP: 0018:ffffffff8ce07b20 EFLAGS: 000002d3 [ 610.168646][ C0] RAX: ffffffff8a955316 RBX: 0000000000000000 RCX: ffffffff8cebd800 [ 610.168658][ C0] RDX: 0000000000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d4760 [ 610.168670][ C0] RBP: ffffffff8ce07bb0 R08: ffffffff8a9552f8 R09: fffffbfff19d7b01 [ 610.168683][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff19c0f64 [ 610.168695][ C0] R13: ffff888013b44804 R14: ffffffff8ce07b40 R15: dffffc0000000000 [ 610.168712][ C0] ? acpi_idle_do_entry+0xe8/0x340 [ 610.168733][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 610.168757][ C0] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 610.168777][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 610.168804][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 610.168830][ C0] acpi_idle_enter+0x352/0x4f0 [ 610.168853][ C0] cpuidle_enter_state+0x516/0xf80 [ 610.168884][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 610.168909][ C0] ? tick_nohz_idle_stop_tick+0x238/0xad0 [ 610.168952][ C0] cpuidle_enter+0x59/0x90 [ 610.168976][ C0] do_idle+0x3ce/0x680 [ 610.169008][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 610.169042][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 610.169068][ C0] ? memcpy_orig+0xd1/0x10f [ 610.169091][ C0] ? schedule_idle+0x57/0x90 [ 610.169120][ C0] ? rest_init+0x31/0x300 [ 610.169141][ C0] cpu_startup_entry+0x3d/0x60 [ 610.169167][ C0] rest_init+0x2da/0x300 [ 610.169188][ C0] ? time_init+0x33/0x33 [ 610.169216][ C0] arch_call_rest_init+0xa/0xa [ 610.169237][ C0] start_kernel+0x496/0x53f [ 610.169257][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 610.169296][ C0] [ 610.169674][ C1] CPU: 1 PID: 10571 Comm: syz.0.2195 Not tainted 6.1.96-syzkaller #0 [ 610.648307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 610.658798][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 610.664628][ C1] Code: f1 bc f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0e 30 d5 f6 48 89 df e8 76 6d d6 f6 e8 c1 f9 fb f6 fb bf 01 00 00 00 e6 05 c9 f6 65 8b 05 87 12 6d 75 85 c0 74 02 5b c3 e8 34 36 6b [ 610.684425][ C1] RSP: 0018:ffffc9000e7dfb30 EFLAGS: 00000286 [ 610.690507][ C1] RAX: 9ef02ff79a255100 RBX: ffff888027f565c0 RCX: ffffffff91c94103 [ 610.698486][ C1] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001 [ 610.706461][ C1] RBP: ffffc9000e7dfc70 R08: dffffc0000000000 R09: ffffed1004feacb9 [ 610.714495][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11004fead4b [ 610.722493][ C1] R13: 000000001c000004 R14: 0000000000000021 R15: ffff888027f56a58 [ 610.730580][ C1] FS: 00007fc8e3ff26c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 610.739603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.746292][ C1] CR2: 0000001b2e711ff8 CR3: 0000000061ce6000 CR4: 00000000003506e0 [ 610.754307][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 610.762390][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 610.770395][ C1] Call Trace: [ 610.773683][ C1] [ 610.776550][ C1] ? rcu_dump_cpu_stacks+0x296/0x4f0 [ 610.781855][ C1] ? print_cpu_stall+0x346/0x5f0 [ 610.786898][ C1] ? rcu_sched_clock_irq+0x997/0x1200 [ 610.792376][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 610.797244][ C1] ? hrtimer_run_queues+0x163/0x450 [ 610.802442][ C1] ? acct_account_cputime+0x194/0x270 [ 610.807847][ C1] ? update_process_times+0x147/0x1b0 [ 610.813220][ C1] ? tick_sched_timer+0x386/0x550 [ 610.818245][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 610.823787][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 610.829466][ C1] ? hrtimer_interrupt+0x980/0x980 [ 610.834595][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 610.840771][ C1] ? hrtimer_interrupt+0x392/0x980 [ 610.845999][ C1] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 610.852181][ C1] ? sysvec_apic_timer_interrupt+0x8c/0xb0 [ 610.858013][ C1] [ 610.860964][ C1] [ 610.863896][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 610.870182][ C1] ? _raw_spin_unlock_irq+0x25/0x40 [ 610.875662][ C1] get_signal+0x154b/0x17d0 [ 610.880209][ C1] ? ptrace_notify+0x370/0x370 [ 610.884990][ C1] arch_do_signal_or_restart+0xb0/0x1a10 [ 610.890743][ C1] ? __might_fault+0xa1/0x110 [ 610.895448][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 610.900578][ C1] ? do_sigaltstack+0x3f3/0x610 [ 610.905464][ C1] ? get_sigframe_size+0x10/0x10 [ 610.910510][ C1] ? restore_altstack+0x107/0x150 [ 610.915540][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 610.921561][ C1] ? exit_to_user_mode_loop+0x39/0x100 [ 610.927052][ C1] exit_to_user_mode_loop+0x6a/0x100 [ 610.932362][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 610.937926][ C1] syscall_exit_to_user_mode+0x60/0x270 [ 610.943719][ C1] do_syscall_64+0x47/0xb0 [ 610.948169][ C1] ? clear_bhb_loop+0x45/0xa0 [ 610.952990][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.958913][ C1] RIP: 0033:0x7fc8e3175b27 [ 610.963360][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 610.983431][ C1] RSP: 002b:00007fc8e3ff2048 EFLAGS: 00000246 [ 610.989506][ C1] RAX: 0000000000000013 RBX: 00007fc8e3303fa0 RCX: 00007fc8e3175b29 [ 610.997624][ C1] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003 [ 611.005655][ C1] RBP: 00007fc8e31f6756 R08: 0000000000000000 R09: 0000000000000000 [ 611.013634][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.021607][ C1] R13: 000000000000000b R14: 00007fc8e3303fa0 R15: 00007fff7a62b318 [ 611.029592][ C1] [ 611.032654][ C1] sched: RT throttling activated [ 611.037661][ C1] hrtimer: interrupt took 1080096389 ns [ 611.405327][ T3598] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 611.458836][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 611.467696][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=60016 sent=0 n=-1 (errno 104: Connection reset by peer) [ 611.817143][ T3665] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.911959][ T3665] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0