last executing test programs: 3.978333946s ago: executing program 3 (id=4091): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) mq_timedsend(0xffffffffffffffff, &(0x7f0000000400)="86d960ca4b", 0x5, 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) 2.944640104s ago: executing program 4 (id=4095): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r0, &(0x7f0000000c00)='0x4', 0x3) 2.931842974s ago: executing program 0 (id=4096): r0 = io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0x13}}, 0x14}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r5, 0x0, &(0x7f00002ce000/0x1000)=nil, 0x1000, 0x1020800}) close_range(r0, 0xffffffffffffffff, 0x0) 2.805513149s ago: executing program 4 (id=4097): syz_emit_vhci(0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x18) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0x1, 0x0, 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7d10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1120, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x10, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x6, 0x4, 0xde2, 0x0, 0x4, 0x0, 0x2000000000, 0x3, 0x0, 0x3, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x1, 0x0, 0x0, 0x0, 0xdf, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x80, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x49, 0x4a2, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x2, 0x6, 0xfffffffffffffffc, 0x6, 0xb, 0x0, 0x0, 0x0, 0x400001, 0x3, 0x1000010004, 0x3, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x9, 0xff, 0x200, 0xfffffffffffffffc, 0x80000001]}) 2.764004264s ago: executing program 3 (id=4098): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.719505016s ago: executing program 3 (id=4099): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_pts(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 2.627955648s ago: executing program 0 (id=4100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0x94}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, {[@eol, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x3, "91"}, @timestamp={0x8, 0xa, 0x4, 0x4ad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) 2.333420845s ago: executing program 1 (id=4101): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 2.332735208s ago: executing program 1 (id=4102): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, &(0x7f0000006280)=[{0x0}, {&(0x7f00000041c0)="d2cf43efec", 0x5}], 0x2) 2.310323803s ago: executing program 0 (id=4103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.224998648s ago: executing program 0 (id=4104): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 2.181444964s ago: executing program 1 (id=4105): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 2.123432581s ago: executing program 4 (id=4106): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) close(0x3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) 2.10518443s ago: executing program 0 (id=4107): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x80) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) accept4$x25(r0, 0x0, 0x0, 0x80800) 2.05359539s ago: executing program 4 (id=4108): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x5, 0x0, 0xfffffffe, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.852642204s ago: executing program 2 (id=4109): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) mq_timedsend(0xffffffffffffffff, &(0x7f0000000400)="86d960ca4b", 0x5, 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) 1.806382902s ago: executing program 3 (id=4110): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 660.539633ms ago: executing program 2 (id=4115): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 552.370873ms ago: executing program 1 (id=4116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e5", 0x7f}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a", 0x41}], 0x2, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/148, 0x94}, {&(0x7f0000000d40)=""/181, 0xb5}], 0x2}, 0xfffffff4}], 0x1, 0x2001, 0x0) 263.589549ms ago: executing program 2 (id=4117): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 234.964578ms ago: executing program 4 (id=4118): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) close(0x3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180000000100000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) 204.070956ms ago: executing program 2 (id=4119): r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 191.183096ms ago: executing program 4 (id=4120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007", 0x4}, {0x0}], 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 113.947242ms ago: executing program 2 (id=4121): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x4) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) 11.888187ms ago: executing program 3 (id=4122): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/eem.usb0\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/eem.usb0/host_addr\x00', 0x0, 0x0) 0s ago: executing program 2 (id=4123): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000005c0)={0x14, 0x0, 0x0}, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x83, 0x2}, &(0x7f0000000980)={0x20, 0x87, 0x2}, 0x0}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) kernel console output (not intermixed with test programs): arm state [ 622.371722][ T5702] legousbtower 1-1:14.57: interrupt endpoints not found [ 622.538199][ T5702] legousbtower 1-1:14.228: get version request failed: -71 [ 622.577157][ T5702] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 622.612412][ T5702] usb 1-1: USB disconnect, device number 41 [ 622.804090][T16877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=169 sclass=netlink_route_socket pid=16877 comm=syz.1.3520 [ 622.836012][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 622.855243][T16877] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.862742][T16877] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.095875][ T5723] usb write operation failed. (-71) [ 624.331036][ T5723] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 624.343456][ T5723] dvbdev: DVB: registering new adapter (Terratec H7) [ 624.350196][ T5723] usb 2-1: media controller created [ 624.355799][ T5723] usb read operation failed. (-71) [ 624.361896][ T5723] usb write operation failed. (-71) [ 624.372048][ T5723] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 624.375798][ T5702] usb 3-1: USB disconnect, device number 18 [ 624.389125][ T5723] usb 2-1: USB disconnect, device number 27 [ 624.397181][T16888] netlink: 'syz.0.3522': attribute type 1 has an invalid length. [ 624.478521][T16888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.504561][T16896] veth0_virt_wifi: entered promiscuous mode [ 624.518726][T16896] bond1: (slave veth0_virt_wifi): making interface the new active one [ 624.528424][T16896] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 624.540806][T16894] syzkaller0: entered promiscuous mode [ 624.548729][T16894] syzkaller0: entered allmulticast mode [ 624.557301][T16888] bond1: (slave veth0_virt_wifi): Releasing active interface [ 624.567677][T16894] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 626.033281][ T5723] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 626.265667][T16919] xt_TPROXY: Can be used only with -p tcp or -p udp [ 626.526073][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 626.533140][ T5723] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 626.541354][ T5723] usb 4-1: config 0 has no interface number 0 [ 626.547546][ T5723] usb 4-1: config 0 interface 184 has no altsetting 0 [ 626.556233][ T5723] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 626.565437][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.573496][ T5723] usb 4-1: Product: syz [ 626.577770][ T5723] usb 4-1: Manufacturer: syz [ 626.582408][ T5723] usb 4-1: SerialNumber: syz [ 626.587122][ T9789] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 626.596519][ T5723] usb 4-1: config 0 descriptor?? [ 626.753288][ T9789] usb 2-1: Using ep0 maxpacket: 8 [ 626.761476][ T9789] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 626.770728][ T9789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.778786][ T9789] usb 2-1: Product: syz [ 626.783019][ T9789] usb 2-1: Manufacturer: syz [ 626.787924][ T9789] usb 2-1: SerialNumber: syz [ 627.075664][ T9789] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 627.085208][ T9789] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 627.095012][ T9789] mxuport 2-1:254.0: probe with driver mxuport failed with error -71 [ 627.107844][ T9789] usb 2-1: USB disconnect, device number 28 [ 627.173145][ T9788] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 627.208638][ T5723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 627.220081][ T5723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 627.333220][ T9788] usb 1-1: Using ep0 maxpacket: 16 [ 627.339897][ T9788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.350834][ T9788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.360599][ T9788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.373413][ T9788] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 627.382491][ T9788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.392204][ T9788] usb 1-1: config 0 descriptor?? [ 627.631266][ T5723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 627.642615][ T5723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 627.652512][ T5723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 627.662128][ T5723] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 627.808316][ T9788] hid_parser_main: 17 callbacks suppressed [ 627.808340][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.821788][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.829228][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.836859][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.844087][ T5716] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 627.852500][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.859815][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.867238][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.874545][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.881788][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.889072][ T9788] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 627.902051][ T9788] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 627.913879][ T9788] microsoft 0003:045E:07DA.0016: no inputs found [ 627.920254][ T9788] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 628.018072][ T9788] usb 1-1: USB disconnect, device number 42 [ 628.093167][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 628.100821][ T5716] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 628.110145][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.118221][ T5716] usb 2-1: Product: syz [ 628.122388][ T5716] usb 2-1: Manufacturer: syz [ 628.127050][ T5716] usb 2-1: SerialNumber: syz [ 628.144074][ T5716] usb 2-1: config 0 descriptor?? [ 628.189457][T16933] xt_TPROXY: Can be used only with -p tcp or -p udp [ 628.396086][ T5716] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 628.652781][ T9788] usb 4-1: USB disconnect, device number 124 [ 628.695024][T16939] misc userio: Invalid payload size [ 628.791249][T16941] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.185015][T16940] misc userio: No port type given on /dev/userio [ 629.207377][T16927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=169 sclass=netlink_route_socket pid=16927 comm=syz.1.3535 [ 629.219810][T16940] misc userio: No port type given on /dev/userio [ 629.234529][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3535'. [ 629.665492][ T5716] usb write operation failed. (-71) [ 629.858974][ T5716] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 629.927443][ T5716] dvbdev: DVB: registering new adapter (Terratec H7) [ 629.962080][ T5716] usb 2-1: media controller created [ 629.994062][ T5716] usb read operation failed. (-71) [ 630.203810][ T5716] usb write operation failed. (-71) [ 630.242249][ T5716] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 630.281065][ T5716] usb 2-1: USB disconnect, device number 29 [ 630.443162][ T9788] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 630.606224][ T9788] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.809502][ T9788] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 630.820108][ T9788] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.832302][ T9788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.843971][T16948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 630.854543][ T9788] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 631.185982][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 632.097325][ T30] audit: type=1800 audit(1784987197.456:853): pid=16966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3546" name="bus" dev="ramfs" ino=75105 res=0 errno=0 [ 632.867400][ T9788] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 632.919549][ T9789] usb 3-1: USB disconnect, device number 19 [ 633.073415][ T9788] usb 2-1: Using ep0 maxpacket: 32 [ 633.079999][ T9788] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 633.088232][ T9788] usb 2-1: config 0 has no interface number 0 [ 633.095190][ T9788] usb 2-1: config 0 interface 184 has no altsetting 0 [ 633.103932][ T9788] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 633.112968][ T9788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.121633][ T9788] usb 2-1: Product: syz [ 633.125857][ T9788] usb 2-1: Manufacturer: syz [ 633.130454][ T9788] usb 2-1: SerialNumber: syz [ 633.136502][ T9788] usb 2-1: config 0 descriptor?? [ 633.153599][ T5702] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 633.283228][ T5716] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 633.304398][ T5702] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 633.313803][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.324612][ T5702] usb 1-1: config 0 descriptor?? [ 633.333499][ T5702] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 633.413122][ T5716] usb 4-1: device descriptor read/64, error -71 [ 633.653170][ T5716] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 633.736210][ T5702] gspca_cpia1: usb_control_msg 03, error -32 [ 633.742751][ T5702] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 633.748975][ T9788] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 633.760639][ T9788] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 633.793203][ T5716] usb 4-1: device descriptor read/64, error -71 [ 634.023985][ T5702] gspca_cpia1: usb_control_msg 01, error -32 [ 634.032052][ T5716] usb usb4-port1: attempt power cycle [ 634.037787][ T5702] gspca_cpia1: usb_control_msg 01, error -71 [ 634.044275][ T5702] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 634.054093][ T5702] usb 1-1: USB disconnect, device number 43 [ 634.162641][T16984] xt_TPROXY: Can be used only with -p tcp or -p udp [ 634.385006][ T5716] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 634.440030][ T5716] usb 4-1: device descriptor read/8, error -71 [ 634.499359][ T9788] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 634.510256][ T9788] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 634.519862][ T9788] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 634.529615][ T9788] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 634.634269][T16987] misc userio: Invalid payload size [ 634.683155][ T5716] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 634.692925][T16988] misc userio: No port type given on /dev/userio [ 634.702628][T16988] misc userio: Invalid payload size [ 634.708992][ T5716] usb 4-1: device descriptor read/8, error -71 [ 634.836863][ T5716] usb usb4-port1: unable to enumerate USB device [ 635.274793][T14284] usb 2-1: USB disconnect, device number 30 [ 636.954071][T17013] xt_TPROXY: Can be used only with -p tcp or -p udp [ 637.393576][T17009] xt_CT: No such helper "snmp_trap" [ 637.883173][T14284] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 638.063557][T14284] usb 2-1: Using ep0 maxpacket: 32 [ 638.183676][T14284] usb 2-1: unable to get BOS descriptor or descriptor too short [ 638.296499][T14284] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 638.389131][T14284] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 638.416660][T14284] usb 2-1: config 14 has no interface number 0 [ 638.428329][T14284] usb 2-1: config 14 has no interface number 1 [ 638.442479][T14284] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 638.462581][T14284] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 638.482610][T14284] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 638.495366][T14284] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 638.507791][T14284] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 638.519329][T14284] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.533338][T14284] usb 2-1: config 14 interface 57 has no altsetting 0 [ 638.540273][T14284] usb 2-1: config 14 interface 228 has no altsetting 0 [ 638.560138][T14284] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 638.571870][T14284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.580505][T14284] usb 2-1: Product: syz [ 638.597259][T14284] usb 2-1: Manufacturer: syz [ 638.602030][T14284] usb 2-1: SerialNumber: syz [ 638.888209][T17041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.913995][T17041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.969828][T17041] veth0_virt_wifi: left promiscuous mode [ 639.028994][T14284] legousbtower 2-1:14.57: interrupt endpoints not found [ 639.076999][ T141] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.102227][ T141] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.135241][ T141] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.156976][ T141] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.499819][T17058] xt_TPROXY: Can be used only with -p tcp or -p udp [ 639.820078][T14284] legousbtower 2-1:14.228: get version request failed: -32 [ 639.848037][T14284] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 640.460131][T17082] xt_TPROXY: Can be used only with -p tcp or -p udp [ 641.039520][T17087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.057428][T17087] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.070265][T17087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.170667][T17087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.181130][T17087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.205769][T17087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 641.216902][T17087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.229875][T14284] usb 2-1: USB disconnect, device number 31 [ 641.231437][T17087] veth1_vlan: left promiscuous mode [ 641.250008][T17087] veth0_vlan: left promiscuous mode [ 641.259744][T17087] veth0_vlan: entered promiscuous mode [ 641.299228][T17087] veth1_vlan: entered promiscuous mode [ 641.334383][T17087] veth1_macvtap: left promiscuous mode [ 641.367612][T17087] veth0_macvtap: left promiscuous mode [ 641.384298][T17087] veth0_macvtap: entered promiscuous mode [ 641.410302][T17087] veth1_macvtap: entered promiscuous mode [ 641.457907][T17087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 641.495480][T17087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 641.506870][T17087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.515318][T17087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 641.530599][T17087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.550029][T17074] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.557233][T17074] bridge0: port 1(bridge_slave_0) entered listening state [ 641.572566][T17074] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.579796][T17074] bridge0: port 2(bridge_slave_1) entered listening state [ 641.623230][T17068] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.642793][T17068] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.799512][T17068] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.812893][T17068] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.404386][ T30] audit: type=1400 audit(1784987208.766:854): avc: denied { connect } for pid=17127 comm="syz.0.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 643.595542][T17140] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.602710][T17140] bridge0: port 2(bridge_slave_1) entered listening state [ 643.610072][T17140] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.617235][T17140] bridge0: port 1(bridge_slave_0) entered listening state [ 643.883158][ T9788] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 644.034744][ T9788] usb 3-1: Using ep0 maxpacket: 8 [ 644.039423][ T9788] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 644.039442][ T9788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.039454][ T9788] usb 3-1: Product: syz [ 644.039463][ T9788] usb 3-1: Manufacturer: syz [ 644.039472][ T9788] usb 3-1: SerialNumber: syz [ 644.041434][ T9788] usb 3-1: config 0 descriptor?? [ 644.202550][T17156] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3598'. [ 644.247389][ T9788] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 644.570283][ T5723] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 644.714547][ T5723] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 644.742879][ T9788] usb write operation failed. (-71) [ 644.752271][ T9788] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 644.768006][ T9788] dvbdev: DVB: registering new adapter (Terratec H7) [ 644.777338][ T9788] usb 3-1: media controller created [ 644.826277][ T5723] usb 2-1: config 0 has no interface number 0 [ 644.841315][ T9788] usb read operation failed. (-71) [ 644.846716][ T5723] usb 2-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 644.865672][ T9788] usb write operation failed. (-71) [ 644.887100][ T5723] usb 2-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 644.900990][ T9788] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 644.916195][ T9788] usb 3-1: USB disconnect, device number 20 [ 644.924294][ T5723] usb 2-1: config 0 interface 153 has no altsetting 0 [ 644.949963][ T5723] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 644.962013][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.978412][ T5723] usb 2-1: Product: syz [ 644.983404][ T5723] usb 2-1: Manufacturer: syz [ 644.988026][ T5723] usb 2-1: SerialNumber: syz [ 645.005228][ T5723] usb 2-1: config 0 descriptor?? [ 645.646215][ T5723] hub 2-1:0.153: bad descriptor, ignoring hub [ 645.653337][ T5723] hub 2-1:0.153: probe with driver hub failed with error -5 [ 645.664091][ T5723] sierra 2-1:0.153: Sierra USB modem converter detected [ 645.704324][ T5723] usb 2-1: USB disconnect, device number 32 [ 645.711012][ T5723] sierra 2-1:0.153: device disconnected [ 645.723155][ T5716] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 645.843167][ T9788] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 645.933186][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 645.940116][ T5716] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 645.948595][ T5716] usb 4-1: config 0 has no interface number 0 [ 645.954825][ T5716] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 645.965353][ T5716] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 645.978564][ T5716] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 645.988272][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.995827][ T9788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.998400][ T5716] usb 4-1: Product: syz [ 646.012709][ T9788] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 646.014031][ T5716] usb 4-1: Manufacturer: syz [ 646.024975][ T9788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.028245][ T5716] usb 4-1: SerialNumber: syz [ 646.042180][ T9788] usb 3-1: config 0 descriptor?? [ 646.043578][ T5716] usb 4-1: config 0 descriptor?? [ 646.057849][ T9788] pwc: Askey VC010 type 2 USB webcam detected. [ 646.063194][T17181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 646.071608][T17181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 646.289182][T17181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 646.296541][T17181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 646.537983][ T5716] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 646.597027][ T9788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 646.604227][ T9788] pwc: recv_control_msg error -32 req 02 val 2700 [ 646.611441][ T9788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 646.618499][ T9788] pwc: recv_control_msg error -32 req 04 val 1000 [ 646.625530][ T9788] pwc: recv_control_msg error -32 req 04 val 1300 [ 646.632770][ T9788] pwc: recv_control_msg error -32 req 04 val 1400 [ 646.639775][ T9788] pwc: recv_control_msg error -32 req 02 val 2000 [ 646.646791][ T9788] pwc: recv_control_msg error -32 req 02 val 2100 [ 646.653763][ T9788] pwc: recv_control_msg error -32 req 04 val 1500 [ 646.660717][ T9788] pwc: recv_control_msg error -32 req 02 val 2500 [ 646.667716][ T9788] pwc: recv_control_msg error -32 req 02 val 2400 [ 646.875537][ T9788] pwc: recv_control_msg error -71 req 02 val 2900 [ 646.889527][ T9788] pwc: recv_control_msg error -71 req 02 val 2800 [ 646.896907][ T9788] pwc: recv_control_msg error -71 req 04 val 1100 [ 646.903911][ T9788] pwc: recv_control_msg error -71 req 04 val 1200 [ 646.933940][ T9788] pwc: Registered as video103. [ 646.940570][ T9788] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input82 [ 646.955657][ T9788] usb 3-1: USB disconnect, device number 21 [ 647.403203][T14284] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 647.560182][T14284] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 647.569407][T14284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.631710][T14284] usb 2-1: config 0 descriptor?? [ 647.708761][T14284] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 647.873451][ T5716] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 647.909687][ T5716] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 647.922521][ T5716] asix 4-1:0.34: probe with driver asix failed with error -71 [ 647.961080][ T5716] usb 4-1: USB disconnect, device number 3 [ 648.102932][T14284] gspca_cpia1: usb_control_msg 03, error -32 [ 648.117227][T14284] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 648.318461][T14284] gspca_cpia1: usb_control_msg 01, error -32 [ 648.330940][T14284] gspca_cpia1: usb_control_msg 01, error -71 [ 648.337292][T14284] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 648.350116][T14284] usb 2-1: USB disconnect, device number 33 [ 648.675261][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 648.689263][T17235] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3626'. [ 650.026833][T17256] xt_CT: No such helper "snmp_trap" [ 650.364272][T17274] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3634'. [ 650.490198][T17277] syzkaller0: entered promiscuous mode [ 650.496272][T17277] syzkaller0: entered allmulticast mode [ 650.504673][T17277] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 650.727976][ T9789] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 650.735646][ T9788] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 650.903136][ T9789] usb 1-1: Using ep0 maxpacket: 16 [ 650.908353][ T9788] usb 2-1: Using ep0 maxpacket: 16 [ 650.915073][ T9788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.926169][ T9789] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 650.934316][ T9788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.945249][ T9789] usb 1-1: config 0 has no interface number 0 [ 650.951350][ T9789] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 651.002822][ T9788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 651.012640][ T9789] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 651.022595][ T9788] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 651.032455][ T30] audit: type=1400 audit(1784987216.406:855): avc: denied { ioctl } for pid=17286 comm="syz.2.3643" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 651.057737][ T9788] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.074267][ T9789] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 651.083768][ T9788] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 651.093173][ T9789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.101205][ T9788] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 651.109760][ T9789] usb 1-1: Product: syz [ 651.114302][ T9788] usb 2-1: Manufacturer: syz [ 651.118937][ T9789] usb 1-1: Manufacturer: syz [ 651.126094][ T9788] usb 2-1: config 0 descriptor?? [ 651.131108][ T9789] usb 1-1: SerialNumber: syz [ 651.138800][ T9789] usb 1-1: config 0 descriptor?? [ 651.144928][T17269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 651.152302][T17269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 651.381597][T17269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 651.389973][T17269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 651.712316][ T9789] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 651.773225][ T9788] rc_core: IR keymap rc-hauppauge not found [ 651.781321][ T9788] Registered IR keymap rc-empty [ 651.789758][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 651.813318][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 651.834260][ T9788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 651.847077][ T9788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input83 [ 651.861266][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 651.893222][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 651.933368][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 651.953173][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.023727][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.054130][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.074052][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.113313][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.133212][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.163729][ T9788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.205632][ T9788] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 652.215351][ T9788] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 652.227455][ T9788] usb 2-1: USB disconnect, device number 34 [ 652.413247][ T5702] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 652.443155][ T9786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 652.563178][ T5702] usb 3-1: Using ep0 maxpacket: 8 [ 652.571643][ T5702] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 652.580826][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.588930][ T5702] usb 3-1: Product: syz [ 652.593182][ T5702] usb 3-1: Manufacturer: syz [ 652.597783][ T5702] usb 3-1: SerialNumber: syz [ 652.604353][ T5702] usb 3-1: config 0 descriptor?? [ 652.624468][ T9786] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 652.632911][ T9786] usb 4-1: config 0 has no interface number 0 [ 652.639823][ T9786] usb 4-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 652.651204][ T9786] usb 4-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 652.664784][ T9786] usb 4-1: config 0 interface 153 has no altsetting 0 [ 652.673506][ T9786] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 652.682814][ T9786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.691079][ T9786] usb 4-1: Product: syz [ 652.695387][ T9786] usb 4-1: Manufacturer: syz [ 652.700016][ T9786] usb 4-1: SerialNumber: syz [ 652.706903][ T9786] usb 4-1: config 0 descriptor?? [ 652.722718][ T9789] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 652.733770][ T9789] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 652.747264][ T9789] asix 1-1:0.34: probe with driver asix failed with error -71 [ 652.759201][ T9789] usb 1-1: USB disconnect, device number 44 [ 652.813815][ T5702] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 653.065483][ T9786] hub 4-1:0.153: bad descriptor, ignoring hub [ 653.071721][ T9786] hub 4-1:0.153: probe with driver hub failed with error -5 [ 653.080044][ T9786] sierra 4-1:0.153: Sierra USB modem converter detected [ 653.104070][ T9786] usb 4-1: USB disconnect, device number 4 [ 653.110566][ T9786] sierra 4-1:0.153: device disconnected [ 653.274479][ T5702] usb write operation failed. (-71) [ 653.282951][ T5702] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 653.294196][ T5702] dvbdev: DVB: registering new adapter (Terratec H7) [ 653.300910][ T5702] usb 3-1: media controller created [ 653.307631][ T5702] usb read operation failed. (-71) [ 653.313001][ T5702] usb write operation failed. (-71) [ 653.322320][ T5702] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 653.334185][ T5702] usb 3-1: USB disconnect, device number 22 [ 653.513371][ T5723] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 653.673100][ T5723] usb 1-1: Using ep0 maxpacket: 32 [ 653.733673][ T5723] usb 1-1: unable to get BOS descriptor or descriptor too short [ 653.747455][ T5723] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 653.756915][ T5723] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 653.769081][ T5723] usb 1-1: config 14 has no interface number 0 [ 654.257349][ T5723] usb 1-1: config 14 has no interface number 1 [ 654.263762][ T5723] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 654.274751][ T5723] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 654.286844][ T5723] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 654.316158][ T5723] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 654.343178][ T5723] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 654.367434][ T5723] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.411954][ T5723] usb 1-1: config 14 interface 57 has no altsetting 0 [ 654.429562][ T5723] usb 1-1: config 14 interface 228 has no altsetting 0 [ 654.449227][ T5723] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 654.531039][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.545224][ T5723] usb 1-1: Product: syz [ 654.549490][ T5723] usb 1-1: Manufacturer: syz [ 654.554453][ T5723] usb 1-1: SerialNumber: syz [ 654.811944][T17349] syzkaller0: entered promiscuous mode [ 654.826946][T17349] syzkaller0: entered allmulticast mode [ 654.838382][T17349] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 654.893293][ T9789] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 654.986322][ T5723] legousbtower 1-1:14.57: interrupt endpoints not found [ 655.098316][ T9789] usb 4-1: Using ep0 maxpacket: 16 [ 655.112293][ T9789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.140945][ T9789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 655.152254][ T9789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 655.162329][ T9789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 655.173310][ T9789] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.192485][ T9789] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 655.204142][ T9789] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 655.212313][ T9789] usb 4-1: Manufacturer: syz [ 655.219914][ T9789] usb 4-1: config 0 descriptor?? [ 655.396664][ T5623] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 655.407905][ T5723] legousbtower 1-1:14.228: get version request failed: -32 [ 655.448384][ T5723] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -32 [ 655.946285][ T9789] rc_core: IR keymap rc-hauppauge not found [ 655.953487][ T9789] Registered IR keymap rc-empty [ 655.958489][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.984472][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.105137][ T9789] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 656.119439][ T9789] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input84 [ 656.138679][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.313415][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.375258][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.443807][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.513576][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.583897][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.613179][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.653463][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.673174][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.703183][ T9789] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.749210][ T9789] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 656.765424][ T9789] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 656.787951][ T9789] usb 4-1: USB disconnect, device number 5 [ 657.013911][T17397] Invalid ELF header magic: != ELF [ 657.079539][T17399] xt_TPROXY: Can be used only with -p tcp or -p udp [ 657.279298][ T5702] usb 1-1: USB disconnect, device number 45 [ 657.615696][ T5623] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 657.751008][ T30] audit: type=1400 audit(1784987223.126:856): avc: denied { setopt } for pid=17410 comm="syz.1.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 657.774848][ T30] audit: type=1400 audit(1784987223.126:857): avc: denied { write } for pid=17410 comm="syz.1.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 657.863136][ T9789] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 657.995110][T17424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.005848][T17424] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.033247][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 658.049172][ T9789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 658.050409][T17424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.062963][ T9789] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 658.080742][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.527933][ T9789] usb 3-1: config 0 descriptor?? [ 658.558240][T17424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.568298][T17424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.583857][T17424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 658.595903][T17424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.629484][T17424] veth1_vlan: left promiscuous mode [ 658.646383][T17424] veth0_vlan: left promiscuous mode [ 658.653151][ T9786] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 658.674782][T17424] veth0_vlan: entered promiscuous mode [ 658.685104][T17424] veth1_vlan: entered promiscuous mode [ 658.723425][T17424] veth1_macvtap: left promiscuous mode [ 658.739576][ T9789] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 658.823135][ T9786] usb 2-1: Using ep0 maxpacket: 32 [ 658.831397][ T9786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 658.840150][T17424] veth0_macvtap: left promiscuous mode [ 658.855073][ T9786] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 658.867311][ T5623] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 658.882875][T17424] veth0_macvtap: entered promiscuous mode [ 658.888960][ T9786] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 658.899293][ T9786] usb 2-1: config 14 has no interface number 0 [ 658.906500][T17424] veth1_macvtap: entered promiscuous mode [ 658.915067][ T9786] usb 2-1: config 14 has no interface number 1 [ 658.925785][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.933007][ T9786] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 658.944110][ T9786] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 658.956032][ T9786] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 658.968081][ T9786] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 658.979652][ T9786] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 658.990835][ T9786] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.034551][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.051346][ T9786] usb 2-1: config 14 interface 57 has no altsetting 0 [ 659.062506][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 659.070583][ T9786] usb 2-1: config 14 interface 228 has no altsetting 0 [ 659.080250][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.089276][ T9786] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 659.104106][ T9788] usb 3-1: USB disconnect, device number 23 [ 659.110112][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 659.127753][ T9786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.138354][T17424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 659.146838][ T9786] usb 2-1: Product: syz [ 659.161141][ T9786] usb 2-1: Manufacturer: syz [ 659.166208][T17424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 659.177713][T17424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 659.182142][ T9786] usb 2-1: SerialNumber: syz [ 659.185564][T17424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 659.208059][T17070] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.215264][T17070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.225296][T17070] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.232448][T17070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.361967][T17447] xt_TPROXY: Can be used only with -p tcp or -p udp [ 659.628905][T17064] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.646276][T17064] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.674031][ T9786] legousbtower 2-1:14.57: interrupt endpoints not found [ 659.685761][T17064] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.703428][T17064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.840996][ T9787] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 659.873815][ T9787] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 659.893374][ T9787] usb 5-1: USB disconnect, device number 7 [ 660.570792][ T9786] legousbtower 2-1:14.228: get version request failed: -32 [ 660.588899][ T9786] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 660.753343][ T9787] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 660.776434][T17467] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3701'. [ 660.804831][T17466] netlink: 'syz.2.3702': attribute type 1 has an invalid length. [ 660.932990][ T9787] usb 5-1: device descriptor read/64, error -71 [ 661.120039][T17466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.203216][ T5623] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 661.211930][T17469] bond1: (slave veth3): Enslaving as an active interface with a down link [ 661.293117][ T9787] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 661.513847][ T9787] usb 5-1: device descriptor read/64, error -71 [ 661.703084][ T9787] usb usb5-port1: attempt power cycle [ 661.742560][ T9786] usb 2-1: USB disconnect, device number 35 [ 661.749725][ T30] audit: type=1400 audit(1784987227.116:858): avc: denied { write } for pid=17479 comm="syz.2.3706" name="/" dev="ocfs2_dlmfs" ino=77173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.795233][T17480] o2cb: This node has not been configured. [ 661.828639][T17480] o2cb: Cluster check failed. Fix errors before retrying. [ 661.842154][ T30] audit: type=1400 audit(1784987227.156:859): avc: denied { add_name } for pid=17479 comm="syz.2.3706" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.868767][T17480] (syz.2.3706,17480,0):user_dlm_register:674 ERROR: status = -22 [ 661.868978][ T30] audit: type=1400 audit(1784987227.156:860): avc: denied { create } for pid=17479 comm="syz.2.3706" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 661.879644][T17480] (syz.2.3706,17480,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 661.897461][ T30] audit: type=1400 audit(1784987227.156:861): avc: denied { associate } for pid=17479 comm="syz.2.3706" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 662.430731][T17489] xt_TPROXY: Can be used only with -p tcp or -p udp [ 662.883141][ T9787] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 663.076784][T17494] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.084135][T17494] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.113108][ T9787] usb 5-1: device not accepting address 10, error -71 [ 663.158533][T17494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.171669][T17494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.318226][ T141] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.331313][ T141] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.351512][ T141] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.361117][ T141] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.690228][T17511] netlink: 'syz.0.3716': attribute type 1 has an invalid length. [ 663.753163][ T9787] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 663.763918][T17511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.787656][T17513] bond2: (slave veth3): Enslaving as an active interface with a down link [ 663.788270][ T9787] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 663.880319][ T9787] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 663.890838][ T9787] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 663.900375][ T9787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.912580][T17507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 663.927270][ T9787] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 664.216559][T17528] xt_TPROXY: Can be used only with -p tcp or -p udp [ 664.593368][ T9788] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 664.793104][ T9788] usb 2-1: Using ep0 maxpacket: 32 [ 665.341646][ T9788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 665.421029][ T9788] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 665.505788][ T9788] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 665.606677][ T9788] usb 2-1: config 14 has no interface number 0 [ 665.680451][ T9788] usb 2-1: config 14 has no interface number 1 [ 665.751352][ T9788] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 665.847056][ T9788] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 665.960650][ T9788] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 666.059564][ T9788] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 666.133431][ T9788] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 666.173268][ T9787] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 666.226336][ T9788] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.329120][ T9788] usb 2-1: config 14 interface 57 has no altsetting 0 [ 666.377989][ T9788] usb 2-1: config 14 interface 228 has no altsetting 0 [ 666.403275][ T9787] usb 3-1: device descriptor read/64, error -71 [ 666.434303][ T9788] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 666.455720][ T9788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.466549][ T9786] usb 5-1: USB disconnect, device number 11 [ 666.498373][ T9788] usb 2-1: Product: syz [ 666.521798][ T9788] usb 2-1: Manufacturer: syz [ 666.550350][ T9788] usb 2-1: SerialNumber: syz [ 666.673784][ T9787] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 666.682788][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.690307][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.830264][T17541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.853139][ T9787] usb 3-1: device descriptor read/64, error -71 [ 666.854545][T17541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.963943][ T9787] usb usb3-port1: attempt power cycle [ 666.997731][ T9788] legousbtower 2-1:14.57: interrupt endpoints not found [ 667.018535][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.047905][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.082464][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.093201][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.300000][T17553] netlink: 'syz.0.3728': attribute type 1 has an invalid length. [ 667.333216][ T9787] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 667.425650][T17553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 667.435179][ T9788] legousbtower 2-1:14.228: get version request failed: -121 [ 667.472326][ T9788] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121 [ 667.487875][ T9787] usb 3-1: device descriptor read/8, error -71 [ 667.539350][T17556] bond3: (slave veth5): Enslaving as an active interface with a down link [ 667.813311][ T9787] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 667.845512][ T9787] usb 3-1: device descriptor read/8, error -71 [ 667.954836][ T9787] usb usb3-port1: unable to enumerate USB device [ 668.633176][ T9787] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 668.643274][ T5805] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 668.743340][T14290] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 668.825205][ T9787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.826369][ T5805] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 668.835585][ T9787] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 668.855778][ T9787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.864450][ T5805] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 668.867098][ T9787] usb 5-1: config 0 descriptor?? [ 668.880922][ T5805] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 668.891282][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.899550][T14290] usb 1-1: Using ep0 maxpacket: 8 [ 668.911602][ T9787] pwc: Askey VC010 type 2 USB webcam detected. [ 668.978222][ T9788] usb 2-1: USB disconnect, device number 36 [ 669.034447][T17576] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 669.046098][T14290] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 669.060821][T14290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.061924][T17585] tmpfs: Bad value for 'mpol' [ 669.069821][ T5805] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 669.080943][T14290] usb 1-1: Product: syz [ 669.097955][T14290] usb 1-1: Manufacturer: syz [ 669.123683][T14290] usb 1-1: SerialNumber: syz [ 669.320934][T14290] usb 1-1: config 0 descriptor?? [ 669.916968][T14290] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 670.036251][ T9787] pwc: recv_control_msg error -32 req 02 val 2b00 [ 670.043885][ T9787] pwc: recv_control_msg error -32 req 02 val 2700 [ 670.071150][ T9787] pwc: recv_control_msg error -32 req 02 val 2c00 [ 670.081175][ T9787] pwc: recv_control_msg error -32 req 04 val 1000 [ 670.118559][ T9787] pwc: recv_control_msg error -32 req 04 val 1300 [ 670.419855][ T9787] pwc: recv_control_msg error -32 req 04 val 1400 [ 670.428042][ T9787] pwc: recv_control_msg error -32 req 02 val 2000 [ 670.455109][ T9787] pwc: recv_control_msg error -32 req 02 val 2100 [ 670.462805][ T9787] pwc: recv_control_msg error -32 req 04 val 1500 [ 670.470834][ T9787] pwc: recv_control_msg error -32 req 02 val 2500 [ 670.478494][ T9787] pwc: recv_control_msg error -32 req 02 val 2400 [ 670.498209][ T9787] pwc: recv_control_msg error -71 req 02 val 2600 [ 670.511842][T17591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=169 sclass=netlink_route_socket pid=17591 comm=syz.0.3736 [ 670.535381][ T9787] pwc: recv_control_msg error -71 req 02 val 2900 [ 670.554466][ T9787] pwc: recv_control_msg error -71 req 02 val 2800 [ 670.569435][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'. [ 670.577242][ T9787] pwc: recv_control_msg error -71 req 04 val 1100 [ 670.589821][ T5805] usb 4-1: USB disconnect, device number 6 [ 670.605766][ T9787] pwc: recv_control_msg error -71 req 04 val 1200 [ 670.646480][ T9787] pwc: Registered as video103. [ 670.662850][ T9787] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input85 [ 670.722072][ T9787] usb 5-1: USB disconnect, device number 12 [ 670.751763][T14290] usb write operation failed. (-71) [ 670.778223][T14290] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 670.824783][T14290] dvbdev: DVB: registering new adapter (Terratec H7) [ 670.846894][T14290] usb 1-1: media controller created [ 670.859042][T14290] usb read operation failed. (-71) [ 670.872047][T14290] usb write operation failed. (-71) [ 670.896056][T14290] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 671.011415][T14290] usb 1-1: USB disconnect, device number 46 [ 671.112991][T17607] xt_TPROXY: Can be used only with -p tcp or -p udp [ 672.163167][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 672.216793][ T30] audit: type=1400 audit(1784987237.596:862): avc: denied { append } for pid=17619 comm="syz.2.3748" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 673.849296][T17652] overlay: ./file0 is not a directory [ 673.903120][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 673.910380][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 674.242184][ T5723] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 674.412432][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 674.431563][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 674.481573][ T5723] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 674.531365][ T5723] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 674.590605][ T5723] usb 2-1: config 14 has no interface number 0 [ 674.615089][ T5723] usb 2-1: config 14 has no interface number 1 [ 674.627335][ T5723] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 674.642367][ T5723] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 674.679364][ T5723] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 674.692176][ T5723] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 674.705577][ T5723] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 674.723345][ T5723] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.766967][ T5723] usb 2-1: config 14 interface 57 has no altsetting 0 [ 674.786171][ T5723] usb 2-1: config 14 interface 228 has no altsetting 0 [ 674.849170][ T5723] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 674.989207][T17667] xt_TPROXY: Can be used only with -p tcp or -p udp [ 675.302840][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.311039][ T5723] usb 2-1: Product: syz [ 675.315295][ T5723] usb 2-1: Manufacturer: syz [ 675.324338][ T5723] usb 2-1: SerialNumber: syz [ 675.399887][T17656] veth0_virt_wifi: left promiscuous mode [ 676.070405][ T5723] legousbtower 2-1:14.57: interrupt endpoints not found [ 676.309897][ T5723] legousbtower 2-1:14.228: get version request failed: -121 [ 676.318290][ T5723] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121 [ 676.335618][T17684] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3765'. [ 677.080588][ T5723] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 677.243443][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 677.255539][ T5723] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 677.272312][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.304855][ T5723] usb 5-1: Product: syz [ 677.331809][ T5723] usb 5-1: Manufacturer: syz [ 677.381694][ T5723] usb 5-1: SerialNumber: syz [ 677.484692][ T5723] usb 5-1: config 0 descriptor?? [ 677.510184][ T5723] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 678.408496][ T806] usb 2-1: USB disconnect, device number 37 [ 678.789129][T17716] xt_TPROXY: Can be used only with -p tcp or -p udp [ 679.217516][ T5723] gspca_topro: reg_w err -110 [ 679.253251][ T5723] gspca_topro: Sensor soi763a [ 680.315593][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.322138][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.992469][T14290] usb 5-1: USB disconnect, device number 13 [ 682.581956][T17752] netlink: 'syz.1.3783': attribute type 1 has an invalid length. [ 683.510374][T17752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 683.681892][T17758] bond1: (slave veth3): Enslaving as an active interface with a down link [ 684.210743][T17774] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 684.231231][T17774] syzkaller0: entered promiscuous mode [ 684.246955][T17774] syzkaller0: entered allmulticast mode [ 684.261102][T17778] fuse: Bad value for 'fd' [ 684.486366][T17786] tipc: Started in network mode [ 684.496411][T17786] tipc: Node identity 8298dbc00921, cluster identity 4711 [ 684.509919][T17786] tipc: Enabled bearer , priority 0 [ 684.547691][T17793] syzkaller0: entered promiscuous mode [ 684.565719][T17793] syzkaller0: entered allmulticast mode [ 684.588843][T17786] tipc: Resetting bearer [ 684.606759][T17783] tipc: Resetting bearer [ 685.084913][ T5723] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 685.204034][T17783] tipc: Disabling bearer [ 685.263211][ T5723] usb 3-1: Using ep0 maxpacket: 8 [ 685.314023][ T5723] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 685.373424][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.420435][ T5723] usb 3-1: Product: syz [ 685.450879][T17802] netlink: 'syz.0.3798': attribute type 1 has an invalid length. [ 685.462061][ T5723] usb 3-1: Manufacturer: syz [ 685.479761][ T5723] usb 3-1: SerialNumber: syz [ 685.499530][ T5723] usb 3-1: config 0 descriptor?? [ 685.655190][T17802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 686.232532][ T5723] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 686.281369][T17804] bond4: (slave veth7): Enslaving as an active interface with a down link [ 686.290289][T17809] veth0_virt_wifi: entered promiscuous mode [ 686.298967][T17809] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 686.465531][T17782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=169 sclass=netlink_route_socket pid=17782 comm=syz.2.3791 [ 686.469292][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'. [ 686.504826][T17823] fuse: Bad value for 'fd' [ 686.594264][ T5723] usb write operation failed. (-71) [ 686.636603][ T5723] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 686.636805][ T5723] dvbdev: DVB: registering new adapter (Terratec H7) [ 686.636827][ T5723] usb 3-1: media controller created [ 686.637294][ T5723] usb read operation failed. (-71) [ 686.647818][ T5723] usb write operation failed. (-71) [ 686.649467][ T5723] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 686.655077][ T5723] usb 3-1: USB disconnect, device number 28 [ 687.144213][T17838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.243462][T17852] netlink: 'syz.2.3812': attribute type 1 has an invalid length. [ 688.433887][T17852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.529381][T17857] bond2: (slave veth5): Enslaving as an active interface with a down link [ 688.571759][T17852] veth0_virt_wifi: entered promiscuous mode [ 688.583959][T17852] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 688.858900][T17871] fuse: Bad value for 'fd' [ 689.813239][ T806] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 689.913318][ T5723] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 690.034427][ T806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.044867][ T806] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 690.054050][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.066603][ T806] usb 1-1: config 0 descriptor?? [ 690.565003][ T806] pwc: Askey VC010 type 2 USB webcam detected. [ 690.985509][ T806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 691.002963][ T806] pwc: recv_control_msg error -32 req 02 val 2700 [ 691.014472][ T806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 691.032126][ T806] pwc: recv_control_msg error -32 req 04 val 1000 [ 691.043137][ T5723] usb 3-1: Using ep0 maxpacket: 8 [ 691.043756][ T806] pwc: recv_control_msg error -32 req 04 val 1300 [ 691.049484][ T5723] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.064464][ T5723] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 691.073731][ T806] pwc: recv_control_msg error -32 req 04 val 1400 [ 691.074290][ T5723] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 691.084816][ T806] pwc: recv_control_msg error -32 req 02 val 2000 [ 691.090555][ T5723] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.121987][ T806] pwc: recv_control_msg error -32 req 02 val 2100 [ 691.132476][ T806] pwc: recv_control_msg error -32 req 04 val 1500 [ 691.150555][ T806] pwc: recv_control_msg error -32 req 02 val 2500 [ 691.334227][T14290] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 691.359885][ T806] pwc: recv_control_msg error -71 req 02 val 2600 [ 691.371229][ T806] pwc: recv_control_msg error -71 req 02 val 2900 [ 691.380305][ T806] pwc: recv_control_msg error -71 req 02 val 2800 [ 691.384122][ T5723] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.387607][ T806] pwc: recv_control_msg error -71 req 04 val 1100 [ 691.452163][T17892] overlay: ./file0 is not a directory [ 691.880370][ T806] pwc: recv_control_msg error -71 req 04 val 1200 [ 691.896298][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.923096][T14290] usb 2-1: device descriptor read/64, error -71 [ 691.931408][ T806] pwc: Registered as video103. [ 691.947985][ T5723] usb 3-1: can't set config #16, error -71 [ 691.949048][ T806] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input86 [ 691.965170][T17895] netlink: 'syz.2.3824': attribute type 1 has an invalid length. [ 691.992544][ T5723] usb 3-1: USB disconnect, device number 29 [ 692.122939][ T806] usb 1-1: USB disconnect, device number 47 [ 692.233218][T14290] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 692.302098][T17906] xt_TPROXY: Can be used only with -p tcp or -p udp [ 692.391118][T14290] usb 2-1: device descriptor read/64, error -71 [ 692.487102][T17895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 692.564874][T14290] usb usb2-port1: attempt power cycle [ 692.602723][T17900] bond3: (slave veth7): Enslaving as an active interface with a down link [ 692.617864][T17904] bond2: (slave veth0_virt_wifi): Releasing active interface [ 692.628792][T17904] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 692.923251][T14287] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 693.022281][T14290] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 693.603779][T14290] usb 2-1: device descriptor read/8, error -71 [ 693.733477][T14287] usb 3-1: Using ep0 maxpacket: 16 [ 693.745836][T14287] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 693.747331][T17925] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3833'. [ 693.755167][T14287] usb 3-1: config 0 has no interface number 0 [ 693.769808][T14287] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 693.784731][T14287] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 693.798001][T14287] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 693.807638][T14287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.815928][T14287] usb 3-1: Product: syz [ 693.820217][T14287] usb 3-1: Manufacturer: syz [ 693.825305][T14287] usb 3-1: SerialNumber: syz [ 693.833297][T14287] usb 3-1: config 0 descriptor?? [ 693.839145][T17911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.846532][T14290] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 693.854683][T17911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.873782][T14290] usb 2-1: device descriptor read/8, error -71 [ 693.883869][ T5723] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 693.983435][T14290] usb usb2-port1: unable to enumerate USB device [ 694.054085][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 694.062234][T17938] netlink: 'syz.3.3837': attribute type 1 has an invalid length. [ 694.075155][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.087426][ T5723] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 694.114527][ T5723] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 694.130717][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.147181][T17911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 694.155600][T17938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 694.165584][ T5723] usb 5-1: Product: syz [ 694.166015][T17911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 694.173802][ T5723] usb 5-1: Manufacturer: syz [ 694.186127][ T5723] usb 5-1: SerialNumber: syz [ 694.194090][ T5723] usb 5-1: config 0 descriptor?? [ 694.270516][T17944] overlay: ./file0 is not a directory [ 694.416378][T14287] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 694.599678][T17941] bond2: (slave veth3): Enslaving as an active interface with a down link [ 694.613187][T17938] veth0_virt_wifi: entered promiscuous mode [ 694.645321][T17938] bond2: (slave veth0_virt_wifi): making interface the new active one [ 694.662187][T17938] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 694.980892][T17956] xt_TPROXY: Can be used only with -p tcp or -p udp [ 695.825300][T17958] netlink: 'syz.3.3841': attribute type 12 has an invalid length. [ 696.409386][T14287] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 696.436435][T14287] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 696.484548][T14287] asix 3-1:0.34: probe with driver asix failed with error -71 [ 696.602588][T14287] usb 3-1: USB disconnect, device number 30 [ 696.703644][T17971] xt_TPROXY: Can be used only with -p tcp or -p udp [ 697.265346][T17965] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3844'. [ 697.389074][T17975] vivid-003: disconnect [ 697.402185][T17974] vivid-003: reconnect [ 697.655942][T17984] netlink: 'syz.1.3849': attribute type 1 has an invalid length. [ 697.816907][T17984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 698.047719][T17986] bond2: (slave veth5): Enslaving as an active interface with a down link [ 698.081717][T17994] xt_CT: No such helper "snmp_trap" [ 698.091766][T17991] veth0_virt_wifi: entered promiscuous mode [ 698.125436][T17991] bond2: (slave veth0_virt_wifi): making interface the new active one [ 698.144754][T17991] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 698.394418][ T5723] usb 5-1: USB disconnect, device number 14 [ 698.496546][T18005] overlay: ./file0 is not a directory [ 699.260900][ T30] audit: type=1400 audit(1784987264.636:863): avc: denied { watch_reads } for pid=18020 comm="syz.1.3858" path="/118" dev="tmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 699.293368][ T9788] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 699.483151][ T9788] usb 1-1: Using ep0 maxpacket: 16 [ 699.495349][ T9788] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 699.511070][ T9788] usb 1-1: config 0 has no interface number 0 [ 699.523786][ T9788] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 699.544258][ T9788] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 699.566865][ T9788] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 699.576462][ T9788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.584849][ T9788] usb 1-1: Product: syz [ 699.589129][ T9788] usb 1-1: Manufacturer: syz [ 699.594179][ T9788] usb 1-1: SerialNumber: syz [ 699.601838][ T9788] usb 1-1: config 0 descriptor?? [ 699.613148][T18012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 699.624029][T18012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 699.844131][T18012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 699.859784][T18012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 700.086540][ T9788] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 700.313244][ T806] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 700.332919][T18044] xt_CT: No such helper "snmp_trap" [ 700.383525][T14287] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 700.443161][ T806] usb 5-1: device descriptor read/64, error -71 [ 700.533127][T14287] usb 4-1: Using ep0 maxpacket: 32 [ 700.540131][T14287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.551462][T14287] usb 4-1: config 0 has no interfaces? [ 700.559532][T14287] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 700.568824][T14287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.576983][T14287] usb 4-1: Product: syz [ 700.581276][T14287] usb 4-1: Manufacturer: syz [ 700.585978][T14287] usb 4-1: SerialNumber: syz [ 700.592511][T14287] usb 4-1: config 0 descriptor?? [ 700.683111][ T806] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 700.806393][T18036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.815007][ T806] usb 5-1: device descriptor read/64, error -71 [ 700.821719][T18036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.933413][ T806] usb usb5-port1: attempt power cycle [ 701.108415][ T9788] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 701.120562][ T9788] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 701.127221][T18051] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 701.131597][ T9788] asix 1-1:0.34: probe with driver asix failed with error -71 [ 701.149133][T18051] syzkaller0: entered promiscuous mode [ 701.151280][ T9788] usb 1-1: USB disconnect, device number 48 [ 701.156455][T18051] syzkaller0: entered allmulticast mode [ 701.293137][ T806] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 701.313511][ T806] usb 5-1: device descriptor read/8, error -71 [ 701.493476][T14290] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 701.553167][ T806] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 701.573524][ T806] usb 5-1: device descriptor read/8, error -71 [ 701.645348][T14290] usb 2-1: config 0 has no interfaces? [ 701.653128][T14290] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 701.662545][T14290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.684296][ T806] usb usb5-port1: unable to enumerate USB device [ 701.690760][T14290] usb 2-1: Product: syz [ 701.729810][T14290] usb 2-1: Manufacturer: syz [ 701.734878][T14290] usb 2-1: SerialNumber: syz [ 701.759645][T14290] usb 2-1: config 0 descriptor?? [ 701.888604][T18069] binder: BINDER_SET_CONTEXT_MGR already set [ 701.894933][T18069] binder: 18068:18069 ioctl 4018620d 200000004a80 returned -16 [ 702.035377][ T9788] usb 2-1: USB disconnect, device number 42 [ 702.876582][T18094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.283806][T18104] veth0_virt_wifi: left promiscuous mode [ 703.318081][ T9788] usb 4-1: USB disconnect, device number 7 [ 703.333943][T18107] binder: BINDER_SET_CONTEXT_MGR already set [ 703.342154][T18107] binder: 18106:18107 ioctl 4018620d 200000004a80 returned -16 [ 703.431224][T18110] xt_TPROXY: Can be used only with -p tcp or -p udp [ 703.983126][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.990385][ C1] bridge0: topology change detected, propagating [ 703.996951][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.004199][ C1] bridge0: topology change detected, propagating [ 704.968572][T14290] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 705.131597][T18139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.514019][T14290] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 705.522861][T14290] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 705.534719][T14290] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 705.545249][T14290] usb 4-1: config 150 has no interface number 0 [ 705.549762][T18145] binder: BINDER_SET_CONTEXT_MGR already set [ 705.551597][T14290] usb 4-1: config 150 interface 204 has no altsetting 0 [ 705.566811][T14290] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 705.580785][T18145] binder: 18140:18145 ioctl 4018620d 200000004a80 returned -16 [ 705.588869][T14290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.600941][T14290] usb 4-1: Product: syz [ 705.731612][T14290] usb 4-1: Manufacturer: syz [ 705.737080][T14290] usb 4-1: SerialNumber: syz [ 705.815308][ T5798] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 705.953660][ T9788] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 705.973162][ T5798] usb 2-1: Using ep0 maxpacket: 32 [ 705.996143][ T5798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.007772][ T5798] usb 2-1: config 0 has no interfaces? [ 706.022135][ T5798] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 706.035652][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.047367][ T5798] usb 2-1: Product: syz [ 706.051691][ T5798] usb 2-1: Manufacturer: syz [ 706.060264][ T5798] usb 2-1: SerialNumber: syz [ 706.104537][ T5798] usb 2-1: config 0 descriptor?? [ 706.145838][ T9788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.156883][ T9788] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 706.166803][ T9788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.178306][ T9788] usb 1-1: config 0 descriptor?? [ 706.187125][ T9788] pwc: Askey VC010 type 2 USB webcam detected. [ 706.337526][T14290] usb 4-1: USB disconnect, device number 8 [ 706.347685][T18144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.358374][T18144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.597229][ T9788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 706.626316][ T9788] pwc: recv_control_msg error -32 req 02 val 2700 [ 706.659765][ T9788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 706.706703][ T9788] pwc: recv_control_msg error -32 req 04 val 1000 [ 706.739322][ T9788] pwc: recv_control_msg error -32 req 04 val 1300 [ 706.784593][ T9788] pwc: recv_control_msg error -32 req 04 val 1400 [ 706.821816][ T9788] pwc: recv_control_msg error -32 req 02 val 2000 [ 706.840478][ T9788] pwc: recv_control_msg error -32 req 02 val 2100 [ 706.886703][ T9788] pwc: recv_control_msg error -32 req 04 val 1500 [ 706.965531][ T9788] pwc: recv_control_msg error -32 req 02 val 2500 [ 707.222897][ T9788] pwc: recv_control_msg error -71 req 02 val 2600 [ 707.312769][ T9788] pwc: recv_control_msg error -71 req 02 val 2900 [ 707.387720][ T9788] pwc: recv_control_msg error -71 req 02 val 2800 [ 707.439159][ T9788] pwc: recv_control_msg error -71 req 04 val 1100 [ 707.453962][ T9788] pwc: recv_control_msg error -71 req 04 val 1200 [ 707.476858][ T9788] pwc: Registered as video103. [ 707.500910][ T9788] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input87 [ 707.690742][ T9788] usb 1-1: USB disconnect, device number 49 [ 708.787300][ T9788] usb 2-1: USB disconnect, device number 43 [ 709.278704][T18207] tipc: Started in network mode [ 709.283879][T18207] tipc: Node identity 266c3d150394, cluster identity 4711 [ 709.291212][T18207] tipc: Enabled bearer , priority 0 [ 709.300002][T18207] syzkaller0: entered promiscuous mode [ 709.305823][T18207] syzkaller0: entered allmulticast mode [ 709.323201][T18207] tipc: Resetting bearer [ 709.331848][T18206] tipc: Resetting bearer [ 709.366033][T18206] tipc: Disabling bearer [ 709.466686][T18213] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 709.480643][T18213] vivid-002: disconnect [ 709.538479][T18212] vivid-002: reconnect [ 709.603432][ T9788] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 709.604959][ T30] audit: type=1400 audit(1784987274.986:864): avc: denied { read write } for pid=18217 comm="syz.2.3923" name="usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 709.641587][ T30] audit: type=1400 audit(1784987275.026:865): avc: denied { open } for pid=18217 comm="syz.2.3923" path="/dev/usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 709.643107][ T5798] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 709.824182][ T9788] usb 2-1: Using ep0 maxpacket: 32 [ 710.386978][ T9788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 710.549146][ T9788] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 710.557591][ T9788] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 710.566216][ T9788] usb 2-1: config 14 has no interface number 0 [ 710.572438][ T9788] usb 2-1: config 14 has no interface number 1 [ 710.578973][ T9788] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 710.589933][ T9788] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 710.606213][ T9788] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 710.618249][ T9788] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 710.629917][ T9788] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 710.641173][ T9788] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.656228][ T9788] usb 2-1: config 14 interface 57 has no altsetting 0 [ 710.663101][ T9788] usb 2-1: config 14 interface 228 has no altsetting 0 [ 710.675708][ T9788] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 710.685146][ T9788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.693320][ T5798] usb 1-1: Using ep0 maxpacket: 32 [ 710.698492][ T9788] usb 2-1: Product: syz [ 710.702771][ T9788] usb 2-1: Manufacturer: syz [ 710.707763][ T9788] usb 2-1: SerialNumber: syz [ 710.713770][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 710.723757][ T5798] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 710.732080][ T5798] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 710.740492][ T5798] usb 1-1: config 14 has no interface number 0 [ 710.746820][ T5798] usb 1-1: config 14 has no interface number 1 [ 710.753093][ T5798] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 710.764154][ T5798] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 710.780756][ T5798] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 710.794103][ T5798] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 710.831963][ T5798] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 710.843799][ T5798] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.857429][ T5798] usb 1-1: config 14 interface 57 has no altsetting 0 [ 710.864883][ T5798] usb 1-1: config 14 interface 228 has no altsetting 0 [ 710.878692][ T5798] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 710.915132][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.931976][T18240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.012609][ T5798] usb 1-1: Product: syz [ 711.056820][ T5798] usb 1-1: Manufacturer: syz [ 711.070782][ T5798] usb 1-1: SerialNumber: syz [ 711.245387][ T9788] legousbtower 2-1:14.57: interrupt endpoints not found [ 711.586618][ T5798] legousbtower 1-1:14.57: interrupt endpoints not found [ 711.645288][ T9788] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 711.665103][ T9788] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 711.900020][T18254] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 711.932894][T18254] vivid-002: disconnect [ 711.944256][T18253] vivid-002: reconnect [ 711.994992][ T5798] legousbtower 1-1:14.228: get version request failed: -121 [ 712.002405][ T5798] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 712.209264][T18263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3937'. [ 712.224270][T18264] usb 2-1: LEGO USB Tower reset control request failed [ 712.245203][ T5798] usb 2-1: USB disconnect, device number 44 [ 712.263901][ T5798] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 712.321443][T18263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.340119][T18263] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.361817][T18263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.435845][T18263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.452278][T18263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.472634][T18263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 712.500561][T18263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 712.532385][T18263] veth1_vlan: left promiscuous mode [ 712.553256][T18263] veth0_vlan: left promiscuous mode [ 712.566198][T18263] veth0_vlan: entered promiscuous mode [ 712.583751][T18263] veth1_vlan: entered promiscuous mode [ 712.603849][T18263] veth1_macvtap: left promiscuous mode [ 712.616088][T18263] veth0_macvtap: left promiscuous mode [ 712.628880][T18263] veth0_macvtap: entered promiscuous mode [ 712.641923][T18263] veth1_macvtap: entered promiscuous mode [ 712.666520][T18263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.683918][T18263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.705614][T18263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.728397][T18263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.786382][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.793524][T15780] bridge0: port 1(bridge_slave_0) entered listening state [ 712.829283][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.836406][T15780] bridge0: port 2(bridge_slave_1) entered listening state [ 712.960048][T12142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.373541][T12142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.939646][T12142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.978806][T12142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.996193][ T9788] usb 1-1: USB disconnect, device number 50 [ 714.055878][T17067] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 714.150990][T18277] netlink: 'syz.0.3941': attribute type 1 has an invalid length. [ 714.191464][T17067] bond2: (slave veth5): making interface the new active one [ 714.260532][T17067] bond2: active interface up! [ 714.420121][T18277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 714.606422][T18278] bond5: (slave veth9): Enslaving as an active interface with a down link [ 714.681950][T18285] 9pnet_fd: Insufficient options for proto=fd [ 714.689080][T18285] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 715.038276][ T30] audit: type=1400 audit(1784987280.056:866): avc: denied { ioctl } for pid=18282 comm="syz.2.3942" path="socket:[80803]" dev="sockfs" ino=80803 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 715.083146][T14287] IPVS: starting estimator thread 0... [ 715.099221][T18280] veth0_virt_wifi: entered promiscuous mode [ 715.147677][T18280] bond4: (slave veth0_virt_wifi): Releasing active interface [ 715.190848][T18280] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 715.206637][T18286] IPVS: using max 45 ests per chain, 108000 per kthread [ 715.237332][T12142] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 715.260256][T12142] bond1: (slave veth3): making interface the new active one [ 715.325061][T12142] bond1: active interface up! [ 715.339710][T17076] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 715.519410][T17076] bond3: (slave veth0_virt_wifi): link status definitely up, 10000 Mbps full duplex [ 715.529485][T17076] bond3: (slave veth7): making interface the new active one [ 715.541492][T17076] bond3: active interface up! [ 715.573296][ T806] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 715.633788][T18301] overlayfs: failed to resolve './file0': -2 [ 715.764126][ T806] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 715.865411][ T806] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 715.952643][ T806] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 715.996915][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.032160][T18290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 716.046018][T18300] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3946'. [ 716.081462][ T806] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 717.461096][T18313] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 718.252704][T14290] usb 2-1: USB disconnect, device number 45 [ 718.302132][T18317] xt_CT: No such helper "snmp_trap" [ 718.464696][ T30] audit: type=1400 audit(1784987283.836:867): avc: denied { write } for pid=18328 comm="syz.2.3958" name="uncompressed" dev="configfs" ino=65580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 718.506920][ T30] audit: type=1400 audit(1784987283.846:868): avc: denied { write } for pid=18328 comm="syz.2.3958" name="u" dev="configfs" ino=80853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 718.530228][ T30] audit: type=1400 audit(1784987283.846:869): avc: denied { read } for pid=18328 comm="syz.2.3958" name="dwFrameInterval" dev="configfs" ino=80855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 718.565764][ T30] audit: type=1400 audit(1784987283.846:870): avc: denied { open } for pid=18328 comm="syz.2.3958" path="/169/config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval" dev="configfs" ino=80855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 718.655362][ T806] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 718.667040][ T30] audit: type=1800 audit(1784987283.846:871): pid=18329 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3958" name="dwFrameInterval" dev="configfs" ino=80855 res=0 errno=0 [ 718.845777][ T806] usb 4-1: Using ep0 maxpacket: 8 [ 718.865139][T18346] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3959'. [ 718.903487][ T806] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 718.918221][T14290] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 718.926878][ T806] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 718.985208][ T806] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 719.043072][ T806] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.080865][ T806] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 719.107378][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.124222][T14290] usb 2-1: Using ep0 maxpacket: 16 [ 719.149712][T14290] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.172851][T14290] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.193366][T14290] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 719.203870][T14290] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 719.226077][T14290] usb 2-1: Manufacturer: syz [ 719.246129][T14290] usb 2-1: config 0 descriptor?? [ 719.349439][ T806] usb 4-1: usb_control_msg returned -71 [ 719.355929][ T806] usbtmc 4-1:16.0: can't read capabilities [ 719.416649][ T806] usb 4-1: USB disconnect, device number 9 [ 719.927845][T18360] overlayfs: failed to resolve './file0': -2 [ 720.658451][T18368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.203096][ T806] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 721.423688][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 721.436148][ T806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.465692][T18377] xt_CT: No such helper "snmp_trap" [ 721.557467][ T806] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 721.586456][ T9787] usb 2-1: USB disconnect, device number 46 [ 721.615267][ T806] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 721.641839][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.697702][ T806] usb 3-1: Product: syz [ 721.710848][ T806] usb 3-1: Manufacturer: syz [ 721.749006][ T806] usb 3-1: SerialNumber: syz [ 721.786137][ T806] usb 3-1: config 0 descriptor?? [ 723.232801][T18405] overlay: ./file0 is not a directory [ 723.271416][ T30] audit: type=1400 audit(1784987288.646:872): avc: denied { write } for pid=18406 comm="syz.3.3976" name="functions" dev="configfs" ino=65557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 723.307772][ T9788] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 723.459586][ T30] audit: type=1400 audit(1784987288.826:873): avc: denied { write } for pid=18406 comm="syz.3.3976" name="color_matching" dev="configfs" ino=81175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 723.513132][ T9788] usb 2-1: Using ep0 maxpacket: 8 [ 723.527786][ T9788] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.540239][ T30] audit: type=1400 audit(1784987288.896:874): avc: denied { write } for pid=18406 comm="syz.3.3976" name="color_matching" dev="configfs" ino=81175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 723.575400][ T9788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 723.606643][ T9788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 723.642846][ T30] audit: type=1400 audit(1784987288.946:875): avc: denied { write } for pid=18406 comm="syz.3.3976" name="bColorPrimaries" dev="configfs" ino=81182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 723.670054][ T9788] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.700090][ T9788] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.717936][ T30] audit: type=1800 audit(1784987288.946:876): pid=18409 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3976" name="bColorPrimaries" dev="configfs" ino=81182 res=0 errno=0 [ 723.741815][ T9788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.980356][ T9788] usb 2-1: usb_control_msg returned -71 [ 723.996390][ T9788] usbtmc 2-1:16.0: can't read capabilities [ 724.016563][ T9788] usb 2-1: USB disconnect, device number 47 [ 724.145041][ T30] audit: type=1400 audit(1784987289.506:877): avc: denied { bind } for pid=18413 comm="syz.0.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 724.165201][ T30] audit: type=1400 audit(1784987289.516:878): avc: denied { connect } for pid=18413 comm="syz.0.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 724.348626][T18420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.196150][T14292] usb 3-1: USB disconnect, device number 31 [ 725.264470][ T9787] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 725.365091][ T9788] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 725.431831][ T9787] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 725.441058][ T9787] usb 5-1: config 0 has no interface number 0 [ 725.453273][ T9787] usb 5-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 725.470549][ T9787] usb 5-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 725.489006][ T9787] usb 5-1: config 0 interface 153 has no altsetting 0 [ 725.506281][ T9787] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 725.516287][ T9787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.528546][ T9787] usb 5-1: Product: syz [ 725.532868][ T9787] usb 5-1: Manufacturer: syz [ 725.539793][ T9787] usb 5-1: SerialNumber: syz [ 725.545305][ T9788] usb 2-1: Using ep0 maxpacket: 8 [ 725.564534][ T9788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 725.592634][ T9788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.616564][ T9787] usb 5-1: config 0 descriptor?? [ 725.653477][ T806] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 725.658564][ T9788] usb 2-1: Product: syz [ 725.665529][ T9788] usb 2-1: Manufacturer: syz [ 725.670201][ T9788] usb 2-1: SerialNumber: syz [ 725.677151][ T9788] usb 2-1: config 0 descriptor?? [ 725.803067][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 725.809715][ T806] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 725.818703][ T806] usb 4-1: config 0 has no interface number 0 [ 725.826729][ T806] usb 4-1: config 0 interface 184 has no altsetting 0 [ 725.835664][ T806] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 725.845109][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.853219][ T806] usb 4-1: Product: syz [ 725.857405][ T806] usb 4-1: Manufacturer: syz [ 725.861996][ T806] usb 4-1: SerialNumber: syz [ 725.869028][ T806] usb 4-1: config 0 descriptor?? [ 725.889785][ T9788] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 726.464207][T18424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=169 sclass=netlink_route_socket pid=18424 comm=syz.1.3981 [ 726.565466][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3981'. [ 726.576216][T18439] tipc: Started in network mode [ 726.598859][T18439] tipc: Node identity 4a8127a6ba79, cluster identity 4711 [ 726.633500][T18439] tipc: Enabled bearer , priority 0 [ 726.641944][T18439] syzkaller0: entered promiscuous mode [ 726.646194][ T806] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 726.647560][T18439] syzkaller0: entered allmulticast mode [ 726.671859][ T806] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 726.680432][T18439] tipc: Resetting bearer [ 726.691008][T18438] tipc: Resetting bearer [ 726.726820][ T9788] usb write operation failed. (-71) [ 726.739168][ T9788] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 726.750225][ T9788] dvbdev: DVB: registering new adapter (Terratec H7) [ 726.750232][T18438] tipc: Disabling bearer [ 726.750271][ T9788] usb 2-1: media controller created [ 726.789616][ T9788] usb read operation failed. (-71) [ 726.796318][ T9788] usb write operation failed. (-71) [ 726.816071][ T9788] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 726.834395][ T9788] usb 2-1: USB disconnect, device number 48 [ 726.889362][ T9787] hub 5-1:0.153: bad descriptor, ignoring hub [ 726.912589][ T9787] hub 5-1:0.153: probe with driver hub failed with error -5 [ 726.931293][ T9787] sierra 5-1:0.153: Sierra USB modem converter detected [ 726.977165][ T9787] usb 5-1: USB disconnect, device number 19 [ 727.007143][ T9787] sierra 5-1:0.153: device disconnected [ 727.283549][ T5723] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 727.298164][ T806] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 727.309752][ T806] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 727.374435][T18457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.482102][ T5723] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 727.505854][ T5723] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 727.527301][ T5723] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 727.547069][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.570088][T18451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 727.588640][ T806] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 727.603115][ T9787] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 727.617103][ T5723] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 727.667165][ T806] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 727.783333][ T9787] usb 2-1: Using ep0 maxpacket: 8 [ 727.790008][ T9787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 727.800155][ T9787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 727.816042][ T9787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 727.828411][ T9787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.851902][ T9787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 727.862186][ T9787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.987503][ T806] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 728.153070][ T806] usb 5-1: Using ep0 maxpacket: 32 [ 728.166044][ T806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.177039][ T806] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 728.193838][ T806] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 728.205607][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.215077][ T806] usb 5-1: Product: syz [ 728.219473][ T806] usb 5-1: Manufacturer: syz [ 728.225961][ T806] usb 5-1: SerialNumber: syz [ 728.250093][ T806] usb 5-1: config 0 descriptor?? [ 728.280316][ T9787] usb 2-1: usb_control_msg returned -71 [ 728.632472][ T806] usb 4-1: USB disconnect, device number 10 [ 729.469556][ T9787] usbtmc 2-1:16.0: can't read capabilities [ 729.873334][T14292] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 729.964333][ T9787] usb 2-1: USB disconnect, device number 49 [ 729.971361][ T806] usb 1-1: USB disconnect, device number 51 [ 730.026929][T18480] tipc: Enabled bearer , priority 0 [ 730.057906][T18480] syzkaller0: entered promiscuous mode [ 730.082759][T18480] syzkaller0: entered allmulticast mode [ 730.114558][T14292] usb 4-1: Using ep0 maxpacket: 32 [ 730.137081][T18480] tipc: Resetting bearer [ 730.156492][T18479] tipc: Resetting bearer [ 730.162795][T14292] usb 4-1: unable to get BOS descriptor or descriptor too short [ 730.186172][T14292] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 730.203166][T14292] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 730.214935][T18479] tipc: Disabling bearer [ 730.220680][T14292] usb 4-1: config 14 has no interface number 0 [ 730.234185][T14292] usb 4-1: config 14 has no interface number 1 [ 730.253462][T14292] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 730.275792][T14292] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 730.303222][T14292] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 730.318872][T14292] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 730.330989][T14292] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 730.356108][T14292] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.371563][T14292] usb 4-1: config 14 interface 57 has no altsetting 0 [ 730.378446][T14292] usb 4-1: config 14 interface 228 has no altsetting 0 [ 730.392169][T14292] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 730.413874][T14292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.428619][T14292] usb 4-1: Product: syz [ 730.433145][T14292] usb 4-1: Manufacturer: syz [ 730.437898][T14292] usb 4-1: SerialNumber: syz [ 730.889126][T14292] legousbtower 4-1:14.57: interrupt endpoints not found [ 731.122616][ T806] usb 5-1: USB disconnect, device number 20 [ 731.222374][ T30] audit: type=1800 audit(1784987296.596:879): pid=18495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4004" name="dwFrameInterval" dev="configfs" ino=82224 res=0 errno=0 [ 731.295072][T14292] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 731.408565][T18501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.475385][T14292] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 731.844250][T18504] usb 4-1: LEGO USB Tower reset control request failed [ 731.933202][ T9787] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 732.093068][ T9787] usb 1-1: Using ep0 maxpacket: 32 [ 732.099571][ T9787] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 732.107988][ T9787] usb 1-1: config 0 has no interface number 0 [ 732.114155][ T9787] usb 1-1: config 0 interface 184 has no altsetting 0 [ 732.122615][ T9787] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 732.131905][ T9787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.140047][ T9787] usb 1-1: Product: syz [ 732.144644][ T9787] usb 1-1: Manufacturer: syz [ 732.149254][ T9787] usb 1-1: SerialNumber: syz [ 732.156242][ T9787] usb 1-1: config 0 descriptor?? [ 732.861916][ T9787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 732.935025][ T9787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 732.986638][T18474] usb 4-1: LEGO USB Tower reset control request failed [ 733.312001][ T9788] usb 4-1: USB disconnect, device number 11 [ 733.344300][ T9788] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 733.485442][ T30] audit: type=1800 audit(1784987298.866:880): pid=18528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4016" name="dwFrameInterval" dev="configfs" ino=81405 res=0 errno=0 [ 733.543117][T14287] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 733.573264][T14292] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 733.633722][ T9787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 733.644703][ T9787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 733.654287][ T9787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 733.664064][ T9787] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 733.695685][T14287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.706772][T14287] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 733.716213][T14287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.724927][T14292] usb 5-1: Using ep0 maxpacket: 32 [ 733.733762][T14292] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.745028][T18532] Invalid ELF header magic: != ELF [ 733.757620][T14287] usb 2-1: config 0 descriptor?? [ 733.762842][T14292] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 733.775081][T14287] pwc: Askey VC010 type 2 USB webcam detected. [ 733.784080][T14292] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 733.795210][T14292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.804971][T14292] usb 5-1: Product: syz [ 733.809316][T14292] usb 5-1: Manufacturer: syz [ 733.819219][T14292] usb 5-1: SerialNumber: syz [ 733.836900][T14292] usb 5-1: config 0 descriptor?? [ 734.176975][T14287] pwc: recv_control_msg error -32 req 02 val 2b00 [ 734.184279][T14287] pwc: recv_control_msg error -32 req 02 val 2700 [ 734.192014][T14287] pwc: recv_control_msg error -32 req 02 val 2c00 [ 734.200040][T14287] pwc: recv_control_msg error -32 req 04 val 1000 [ 734.207559][T14287] pwc: recv_control_msg error -32 req 04 val 1300 [ 734.215281][T14287] pwc: recv_control_msg error -32 req 04 val 1400 [ 734.222575][T14287] pwc: recv_control_msg error -32 req 02 val 2000 [ 734.230970][T14287] pwc: recv_control_msg error -32 req 02 val 2100 [ 734.253424][T14287] pwc: recv_control_msg error -32 req 04 val 1500 [ 734.260782][T14287] pwc: recv_control_msg error -32 req 02 val 2500 [ 734.288911][T18536] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4018'. [ 734.298110][T18536] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4018'. [ 734.468975][T14287] pwc: recv_control_msg error -71 req 02 val 2600 [ 734.490366][T14287] pwc: recv_control_msg error -71 req 02 val 2900 [ 734.502323][T14287] pwc: recv_control_msg error -71 req 02 val 2800 [ 734.517610][T14287] pwc: recv_control_msg error -71 req 04 val 1100 [ 734.529833][T14287] pwc: recv_control_msg error -71 req 04 val 1200 [ 734.551506][T14287] pwc: Registered as video103. [ 734.570949][T14287] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input88 [ 734.616778][T14287] usb 2-1: USB disconnect, device number 50 [ 734.689760][T14292] usb 1-1: USB disconnect, device number 52 [ 736.400437][T14287] usb 5-1: USB disconnect, device number 21 [ 736.462676][T18573] tipc: Enabled bearer , priority 0 [ 736.484375][T18573] syzkaller0: entered promiscuous mode [ 736.500110][T18573] syzkaller0: entered allmulticast mode [ 736.518190][T18573] tipc: Resetting bearer [ 736.534488][T18571] tipc: Resetting bearer [ 736.571685][T18571] tipc: Disabling bearer [ 736.718960][T18584] Invalid ELF header magic: != ELF [ 737.010483][ T30] audit: type=1400 audit(1784987302.386:881): avc: denied { unmount } for pid=15719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 737.083879][ T806] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 737.976697][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 738.075696][ T806] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 738.085412][ T806] usb 3-1: config 0 has no interface number 0 [ 738.092116][ T806] usb 3-1: config 0 interface 184 has no altsetting 0 [ 738.103157][ T806] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 738.112303][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.126599][ T806] usb 3-1: Product: syz [ 738.132124][ T806] usb 3-1: Manufacturer: syz [ 738.138093][ T806] usb 3-1: SerialNumber: syz [ 738.145324][ T806] usb 3-1: config 0 descriptor?? [ 738.373217][ T9787] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 738.583820][ T9787] usb 4-1: Using ep0 maxpacket: 16 [ 738.590263][ T9787] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 738.598427][ T9787] usb 4-1: config 0 has no interface number 0 [ 738.604626][ T9787] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 738.614676][ T9787] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 738.679644][T18614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.757468][ T806] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 738.782347][ T806] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 738.863814][ T9787] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 738.927920][ T9787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.936043][ T9787] usb 4-1: Product: syz [ 738.940235][ T9787] usb 4-1: Manufacturer: syz [ 738.947321][ T9787] usb 4-1: SerialNumber: syz [ 738.954297][ T9787] usb 4-1: config 0 descriptor?? [ 738.960019][T18606] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 738.967491][T18606] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 739.178076][T18606] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 739.186335][T18606] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 739.397400][ T9787] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 739.408032][ T9787] asix 4-1:0.34: probe with driver asix failed with error -61 [ 739.416541][ T806] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 739.432078][ T806] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 739.442181][ T806] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 739.452729][ T806] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 739.648301][T18579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.827347][ T806] IPVS: starting estimator thread 0... [ 739.827927][T18634] IPVS: sed: FWM 3 0x00000003 - no destination available [ 739.933099][T18635] IPVS: using max 78 ests per chain, 187200 per kthread [ 740.456090][ T806] usb 3-1: USB disconnect, device number 32 [ 740.663643][T18649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.863338][ T5723] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 741.079834][ T5723] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 741.104008][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.138117][ T5723] usb 5-1: Product: syz [ 741.159948][ T5723] usb 5-1: Manufacturer: syz [ 741.176148][ T5723] usb 5-1: SerialNumber: syz [ 741.188682][ T9787] usb 4-1: USB disconnect, device number 12 [ 741.209279][ T5723] usb 5-1: config 0 descriptor?? [ 741.315993][T18673] comedi comedi0: 8255: I/O base address not correctly aligned [ 741.411841][T18673] bridge1: entered promiscuous mode [ 741.417315][T18673] bridge1: entered allmulticast mode [ 741.444698][T18673] team0: Port device bridge1 added [ 741.485524][T14287] IPVS: starting estimator thread 0... [ 741.623299][T18675] IPVS: using max 43 ests per chain, 103200 per kthread [ 741.796250][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.982275][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.119596][ T30] audit: type=1400 audit(1784987307.116:882): avc: denied { open } for pid=18676 comm="syz.3.4065" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 742.172984][ T5723] usb 5-1: selecting invalid altsetting 1 [ 742.181295][ T5723] technisat-usb2: could not set alternate setting to 0 [ 742.417428][ T5723] technisat-usb2: firmware version: 0.0 [ 742.449099][ T5723] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 742.976883][ T5723] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 743.023528][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 743.030725][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 743.323509][ T5723] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 743.336523][ T5723] usb 5-1: USB disconnect, device number 22 [ 743.813281][T14292] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 744.000328][T14292] usb 3-1: config 255 has an invalid interface number: 133 but max is 0 [ 744.009580][T14292] usb 3-1: config 255 has no interface number 0 [ 744.016313][T14292] usb 3-1: config 255 interface 133 has no altsetting 0 [ 744.031378][T14292] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=d7.fb [ 744.043438][T14292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.043530][T18666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.051873][T14292] usb 3-1: Product: syz [ 744.070746][T14292] usb 3-1: Manufacturer: syz [ 744.077054][T14292] usb 3-1: SerialNumber: syz [ 744.488778][T14292] s2255 3-1:255.133: Could not find bulk-in endpoint [ 744.495885][T14292] Sensoray 2255 driver load failed: 0xfffffff4 [ 744.502079][T14292] s2255 3-1:255.133: probe with driver s2255 failed with error -12 [ 744.511135][T14292] usbhid 3-1:255.133: couldn't find an input interrupt endpoint [ 744.524483][T14292] usb 3-1: USB disconnect, device number 33 [ 744.529408][T18715] netlink: 'syz.0.4078': attribute type 1 has an invalid length. [ 744.603651][T18716] overlay: ./file0 is not a directory [ 744.999062][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'. [ 745.025176][T18715] 8021q: adding VLAN 0 to HW filter on device bond6 [ 745.049153][T18718] bond6: (slave veth11): Enslaving as an active interface with a down link [ 745.061565][T18719] bond5: (slave veth0_virt_wifi): Releasing active interface [ 745.073440][T18719] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 745.596578][T18730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.334103][ T5723] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 746.413284][T14292] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 746.663201][T14292] usb 3-1: Using ep0 maxpacket: 32 [ 746.701416][T14292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 746.713178][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 746.725244][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 746.727537][T14292] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 746.752963][T14292] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 746.764070][T14292] usb 3-1: config 14 has no interface number 0 [ 746.770321][T14292] usb 3-1: config 14 has no interface number 1 [ 746.776669][T14292] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 746.787607][T14292] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 746.799641][T14292] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 746.844620][ T5723] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 746.854619][ T5723] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 746.867029][ T5723] usb 2-1: config 14 has no interface number 0 [ 746.873537][ T5723] usb 2-1: config 14 has no interface number 1 [ 746.881824][ T5723] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 746.897546][T14292] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 746.904998][ T5723] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 746.909785][T14292] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 746.935396][T14292] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.935427][T14292] usb 3-1: config 14 interface 57 has no altsetting 0 [ 746.935445][T14292] usb 3-1: config 14 interface 228 has no altsetting 0 [ 746.937118][T14292] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 746.937142][T14292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.937160][T14292] usb 3-1: Product: syz [ 746.937174][T14292] usb 3-1: Manufacturer: syz [ 746.937187][T14292] usb 3-1: SerialNumber: syz [ 746.944001][ T5723] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 746.944036][ T5723] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 746.944064][ T5723] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 746.944089][ T5723] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.944117][ T5723] usb 2-1: config 14 interface 57 has no altsetting 0 [ 746.944135][ T5723] usb 2-1: config 14 interface 228 has no altsetting 0 [ 746.946781][ T5723] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 746.946811][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.946831][ T5723] usb 2-1: Product: syz [ 746.946845][ T5723] usb 2-1: Manufacturer: syz [ 746.946859][ T5723] usb 2-1: SerialNumber: syz [ 747.014061][T18756] netlink: 'syz.3.4089': attribute type 1 has an invalid length. [ 747.127865][T18754] bond2: (slave veth0_virt_wifi): Releasing active interface [ 747.165317][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 747.364402][T14292] legousbtower 3-1:14.57: interrupt endpoints not found [ 747.655335][ T5723] legousbtower 2-1:14.57: interrupt endpoints not found [ 747.881363][T14292] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 748.009927][T14292] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 748.136627][ T5723] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 748.171195][ T5723] legousbtower 2-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 748.411333][T18778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.562325][T18784] usb 3-1: LEGO USB Tower reset control request failed [ 748.647254][ T806] usb 3-1: USB disconnect, device number 34 [ 748.658672][ T806] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 748.763792][T14292] usb 2-1: USB disconnect, device number 51 [ 748.776326][T14292] legousbtower 2-1:14.228: LEGO USB Tower #-159 now disconnected [ 749.223273][ T30] audit: type=1400 audit(1784987314.586:883): avc: denied { listen } for pid=18812 comm="syz.0.4107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 749.269818][ T30] audit: type=1400 audit(1784987314.586:884): avc: denied { accept } for pid=18812 comm="syz.0.4107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 750.366497][T18833] netlink: 'syz.1.4114': attribute type 11 has an invalid length. [ 750.378423][T18833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4114'. [ 750.463334][T14292] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 750.633095][T14292] usb 1-1: Using ep0 maxpacket: 32 [ 750.640452][T14292] usb 1-1: unable to get BOS descriptor or descriptor too short [ 750.650672][T17069] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 750.651103][T14292] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 750.680342][T14292] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 750.694242][T17069] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 750.697556][T14292] usb 1-1: config 14 has no interface number 0 [ 750.710304][T14292] usb 1-1: config 14 has no interface number 1 [ 750.716843][T14292] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 750.728921][T14292] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 750.740950][T14292] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 750.752543][T14292] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 750.767199][T14292] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 750.780870][T14292] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.785882][T17069] bond1: (slave veth3): making interface the new active one [ 750.795312][T14292] usb 1-1: config 14 interface 57 has no altsetting 0 [ 750.808432][T14292] usb 1-1: config 14 interface 228 has no altsetting 0 [ 750.820497][T14292] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 750.829708][T14292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.837802][T14292] usb 1-1: Product: syz [ 750.842052][T14292] usb 1-1: Manufacturer: syz [ 750.850140][T14292] usb 1-1: SerialNumber: syz [ 750.858644][T17069] bond1: active interface up! [ 751.049014][ T30] audit: type=1400 audit(1784987316.436:885): avc: denied { mount } for pid=18848 comm="syz.2.4121" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 751.100464][T14292] legousbtower 1-1:14.57: interrupt endpoints not found [ 751.127648][T14292] legousbtower 1-1:14.228: get version request failed: -71 [ 751.143364][T14292] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 751.172332][ T30] audit: type=1400 audit(1784987316.546:886): avc: denied { unmount } for pid=15495 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 751.181164][T14292] usb 1-1: USB disconnect, device number 53 [ 751.305545][T18826] ================================================================== [ 751.313831][T18826] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 751.320792][T18826] Read of size 1 at addr ffff88802c5cd440 by task syz.0.4111/18826 [ 751.328690][T18826] [ 751.331021][T18826] CPU: 0 UID: 0 PID: 18826 Comm: syz.0.4111 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.331050][T18826] Tainted: [L]=SOFTLOCKUP [ 751.331057][T18826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 751.331070][T18826] Call Trace: [ 751.331078][T18826] [ 751.331087][T18826] dump_stack_lvl+0x100/0x190 [ 751.331116][T18826] print_report+0x13d/0x4b0 [ 751.331143][T18826] ? __virt_addr_valid+0x239/0x430 [ 751.331169][T18826] ? string+0x471/0x4d0 [ 751.331198][T18826] kasan_report+0xdf/0x1c0 [ 751.331223][T18826] ? string+0x471/0x4d0 [ 751.331255][T18826] string+0x471/0x4d0 [ 751.331286][T18826] ? __pfx_string+0x10/0x10 [ 751.331318][T18826] vsnprintf+0x422/0x1300 [ 751.331341][T18826] ? __pfx_vsnprintf+0x10/0x10 [ 751.331360][T18826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 751.331381][T18826] ? is_bpf_text_address+0x94/0x1a0 [ 751.331406][T18826] ? kernel_text_address+0x8d/0x100 [ 751.331434][T18826] snprintf+0xc7/0x100 [ 751.331453][T18826] ? __pfx_snprintf+0x10/0x10 [ 751.331475][T18826] ? stack_trace_save+0x8e/0xc0 [ 751.331496][T18826] dev_vprintk_emit+0x375/0x3e0 [ 751.331521][T18826] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 751.331546][T18826] ? __x64_sys_ioctl+0x18e/0x210 [ 751.331573][T18826] ? do_syscall_64+0x115/0x870 [ 751.331593][T18826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.331615][T18826] dev_printk_emit+0xd2/0x10d [ 751.331638][T18826] ? __pfx_dev_printk_emit+0x10/0x10 [ 751.331667][T18826] __dev_printk+0xcb/0x100 [ 751.331691][T18826] _dev_err+0xef/0x127 [ 751.331713][T18826] ? __pfx__dev_err+0x10/0x10 [ 751.331737][T18826] ? dummy_queue+0x3ca/0xb90 [ 751.331765][T18826] ? find_held_lock+0x2b/0x80 [ 751.331794][T18826] ? raw_process_ep0_io+0x314/0x9c0 [ 751.331818][T18826] raw_process_ep0_io.cold+0x65/0x7f [ 751.331845][T18826] raw_ioctl+0x1369/0x2b80 [ 751.331872][T18826] ? __pfx_raw_ioctl+0x10/0x10 [ 751.331896][T18826] ? selinux_file_ioctl+0xb6/0x290 [ 751.331923][T18826] ? __pfx_raw_ioctl+0x10/0x10 [ 751.331948][T18826] __x64_sys_ioctl+0x18e/0x210 [ 751.331973][T18826] do_syscall_64+0x115/0x870 [ 751.331991][T18826] ? clear_bhb_loop+0x40/0x90 [ 751.332013][T18826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.332032][T18826] RIP: 0033:0x7fcac599db2b [ 751.332048][T18826] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 751.332065][T18826] RSP: 002b:00007fcac683af50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.332083][T18826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcac599db2b [ 751.332094][T18826] RDX: 00007fcac683afd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 751.332105][T18826] RBP: 00007fcac683afd0 R08: 0000000000000002 R09: 0000000000000409 [ 751.332116][T18826] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcac683afd8 [ 751.332127][T18826] R13: 00002000000011c0 R14: 00007fcac5c25fa0 R15: 00007ffc38c0ce58 [ 751.332145][T18826] [ 751.332151][T18826] [ 751.622401][T18826] Allocated by task 1: [ 751.626467][T18826] kasan_save_stack+0x30/0x50 [ 751.631134][T18826] kasan_save_track+0x14/0x30 [ 751.635792][T18826] __kasan_kmalloc+0xaa/0xb0 [ 751.640365][T18826] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 751.646781][T18826] kvasprintf+0xbc/0x150 [ 751.651017][T18826] kvasprintf_const+0x66/0x1a0 [ 751.655766][T18826] kobject_set_name_vargs+0x5a/0x140 [ 751.661041][T18826] dev_set_name+0xc7/0x100 [ 751.665446][T18826] usb_add_gadget+0x520/0x920 [ 751.670127][T18826] usb_add_gadget_udc+0x26/0x70 [ 751.674956][T18826] dummy_udc_probe+0x69e/0x960 [ 751.679709][T18826] platform_probe+0x106/0x1d0 [ 751.684381][T18826] really_probe+0x241/0xa60 [ 751.688881][T18826] __driver_probe_device+0x20e/0x450 [ 751.694162][T18826] driver_probe_device+0x4a/0x140 [ 751.699167][T18826] __device_attach_driver+0x1df/0x320 [ 751.704535][T18826] bus_for_each_drv+0x159/0x1e0 [ 751.709364][T18826] __device_attach+0x1e4/0x4d0 [ 751.714109][T18826] device_initial_probe+0xaf/0xd0 [ 751.719131][T18826] bus_probe_device+0x64/0x160 [ 751.723875][T18826] device_add+0x121d/0x1970 [ 751.728373][T18826] platform_device_add+0x35a/0x800 [ 751.733470][T18826] dummy_hcd_init+0x803/0xc00 [ 751.738132][T18826] do_one_initcall+0x11d/0x700 [ 751.742883][T18826] kernel_init_freeable+0x6ea/0x7b0 [ 751.748081][T18826] kernel_init+0x1f/0x1e0 [ 751.752395][T18826] ret_from_fork+0x72b/0xd50 [ 751.756971][T18826] ret_from_fork_asm+0x1a/0x30 [ 751.761722][T18826] [ 751.764026][T18826] Freed by task 18849: [ 751.768078][T18826] kasan_save_stack+0x30/0x50 [ 751.772996][T18826] kasan_save_track+0x14/0x30 [ 751.777656][T18826] kasan_save_free_info+0x3b/0x70 [ 751.782677][T18826] __kasan_slab_free+0x5f/0x80 [ 751.787426][T18826] kfree+0x22b/0x6c0 [ 751.791307][T18826] kfree_const+0x5a/0x70 [ 751.795528][T18826] kobject_put+0x218/0x640 [ 751.799930][T18826] put_device+0x1f/0x30 [ 751.804070][T18826] platform_remove+0x5f/0x80 [ 751.808645][T18826] device_remove+0xcb/0x180 [ 751.813129][T18826] device_release_driver_internal+0x44e/0x620 [ 751.819178][T18826] unbind_store+0xf8/0x110 [ 751.823578][T18826] drv_attr_store+0x74/0xb0 [ 751.828087][T18826] sysfs_kf_write+0xf2/0x150 [ 751.832675][T18826] kernfs_fop_write_iter+0x3e0/0x5f0 [ 751.837952][T18826] vfs_write+0x6ac/0x1050 [ 751.842266][T18826] ksys_write+0x12a/0x250 [ 751.846581][T18826] do_syscall_64+0x115/0x870 [ 751.851155][T18826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.857029][T18826] [ 751.859334][T18826] The buggy address belongs to the object at ffff88802c5cd440 [ 751.859334][T18826] which belongs to the cache kmalloc-16 of size 16 [ 751.873189][T18826] The buggy address is located 0 bytes inside of [ 751.873189][T18826] freed 16-byte region [ffff88802c5cd440, ffff88802c5cd450) [ 751.886700][T18826] [ 751.889003][T18826] The buggy address belongs to the physical page: [ 751.895392][T18826] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c5cd [ 751.904133][T18826] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 751.911221][T18826] page_type: f5(slab) [ 751.915197][T18826] raw: 00fff00000000000 ffff88813fe22640 dead000000000100 dead000000000122 [ 751.923762][T18826] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 751.932320][T18826] page dumped because: kasan: bad access detected [ 751.938705][T18826] page_owner tracks the page as allocated [ 751.944396][T18826] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 26, tgid 26 (kdevtmpfs), ts 9777113351, free_ts 0 [ 751.963584][T18826] register_dummy_stack+0x74/0xb0 [ 751.968597][T18826] init_page_owner+0x42/0xa10 [ 751.973259][T18826] page_ext_init+0x71d/0x780 [ 751.977849][T18826] mm_core_init+0x229/0x270 [ 751.982346][T18826] page_owner free stack trace missing [ 751.987695][T18826] [ 751.990010][T18826] Memory state around the buggy address: [ 751.995617][T18826] ffff88802c5cd300: 00 01 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 752.003673][T18826] ffff88802c5cd380: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 752.011788][T18826] >ffff88802c5cd400: 00 01 fc fc 00 01 fc fc fa fb fc fc 00 05 fc fc [ 752.019848][T18826] ^ [ 752.025994][T18826] ffff88802c5cd480: 00 01 fc fc 00 00 fc fc 00 07 fc fc 00 01 fc fc [ 752.034034][T18826] ffff88802c5cd500: 00 01 fc fc 00 01 fc fc 00 00 fc fc 00 01 fc fc [ 752.042073][T18826] ================================================================== [ 752.084202][T18826] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 752.091440][T18826] CPU: 1 UID: 0 PID: 18826 Comm: syz.0.4111 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.102392][T18826] Tainted: [L]=SOFTLOCKUP [ 752.106710][T18826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 752.116747][T18826] Call Trace: [ 752.120007][T18826] [ 752.122922][T18826] dump_stack_lvl+0x100/0x190 [ 752.127607][T18826] vpanic+0x552/0x970 [ 752.131658][T18826] ? __pfx_vpanic+0x10/0x10 [ 752.136157][T18826] ? rcu_is_watching+0x12/0xc0 [ 752.140925][T18826] ? string+0x471/0x4d0 [ 752.145074][T18826] panic+0xd1/0xe0 [ 752.148782][T18826] ? __pfx_panic+0x10/0x10 [ 752.153178][T18826] ? string+0x471/0x4d0 [ 752.157322][T18826] ? preempt_schedule_common+0x42/0xc0 [ 752.162764][T18826] check_panic_on_warn.cold+0x19/0x34 [ 752.168116][T18826] end_report.part.0+0x3a/0x90 [ 752.172885][T18826] kasan_report.cold+0xe/0x18 [ 752.177555][T18826] ? string+0x471/0x4d0 [ 752.181700][T18826] string+0x471/0x4d0 [ 752.185671][T18826] ? __pfx_string+0x10/0x10 [ 752.190165][T18826] vsnprintf+0x422/0x1300 [ 752.194478][T18826] ? __pfx_vsnprintf+0x10/0x10 [ 752.199221][T18826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 752.205357][T18826] ? is_bpf_text_address+0x94/0x1a0 [ 752.210554][T18826] ? kernel_text_address+0x8d/0x100 [ 752.215739][T18826] snprintf+0xc7/0x100 [ 752.219791][T18826] ? __pfx_snprintf+0x10/0x10 [ 752.224451][T18826] ? stack_trace_save+0x8e/0xc0 [ 752.229285][T18826] dev_vprintk_emit+0x375/0x3e0 [ 752.234120][T18826] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 752.239477][T18826] ? __x64_sys_ioctl+0x18e/0x210 [ 752.244417][T18826] ? do_syscall_64+0x115/0x870 [ 752.249164][T18826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.255213][T18826] dev_printk_emit+0xd2/0x10d [ 752.259874][T18826] ? __pfx_dev_printk_emit+0x10/0x10 [ 752.265146][T18826] __dev_printk+0xcb/0x100 [ 752.269549][T18826] _dev_err+0xef/0x127 [ 752.273601][T18826] ? __pfx__dev_err+0x10/0x10 [ 752.278263][T18826] ? dummy_queue+0x3ca/0xb90 [ 752.282840][T18826] ? find_held_lock+0x2b/0x80 [ 752.287517][T18826] ? raw_process_ep0_io+0x314/0x9c0 [ 752.292717][T18826] raw_process_ep0_io.cold+0x65/0x7f [ 752.297990][T18826] raw_ioctl+0x1369/0x2b80 [ 752.302396][T18826] ? __pfx_raw_ioctl+0x10/0x10 [ 752.307145][T18826] ? selinux_file_ioctl+0xb6/0x290 [ 752.312258][T18826] ? __pfx_raw_ioctl+0x10/0x10 [ 752.317010][T18826] __x64_sys_ioctl+0x18e/0x210 [ 752.321777][T18826] do_syscall_64+0x115/0x870 [ 752.326352][T18826] ? clear_bhb_loop+0x40/0x90 [ 752.331012][T18826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.336886][T18826] RIP: 0033:0x7fcac599db2b [ 752.341283][T18826] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 752.360874][T18826] RSP: 002b:00007fcac683af50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.369709][T18826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcac599db2b [ 752.377665][T18826] RDX: 00007fcac683afd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 752.385617][T18826] RBP: 00007fcac683afd0 R08: 0000000000000002 R09: 0000000000000409 [ 752.393569][T18826] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcac683afd8 [ 752.401533][T18826] R13: 00002000000011c0 R14: 00007fcac5c25fa0 R15: 00007ffc38c0ce58 [ 752.409490][T18826] [ 752.412704][T18826] Kernel Offset: disabled [ 752.417012][T18826] Rebooting in 86400 seconds..