last executing test programs: 41.466279834s ago: executing program 5 (id=880): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180"], 0x30}}, 0x0) 41.159597176s ago: executing program 5 (id=883): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0xfe66}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5, 0x1}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.833574679s ago: executing program 5 (id=886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4bfa, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x26020280) clock_gettime(0x0, &(0x7f00000000c0)) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x163902, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) read$sequencer(r5, &(0x7f0000000040)=""/85, 0x8) listxattr(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) setregid(0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 38.655800605s ago: executing program 2 (id=894): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x4, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 38.198671967s ago: executing program 2 (id=896): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$admmidi(0x0, 0x20, 0x200) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) r4 = accept4$inet6(r2, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r3, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r4, r1, 0x0) 37.482977236s ago: executing program 5 (id=902): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) 16.667545377s ago: executing program 4 (id=980): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_matches\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x108000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='oom_adj\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xb, 0x2}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 16.063837058s ago: executing program 4 (id=981): syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335, @tick, 0x1, {0x2}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r1, 0x2027da, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x4d, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 15.405358692s ago: executing program 4 (id=983): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 15.224368408s ago: executing program 0 (id=984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) unshare(0x60600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2091) 12.464646431s ago: executing program 4 (id=991): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_matches\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x108000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='oom_adj\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xb, 0x2}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 12.195491017s ago: executing program 0 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, &(0x7f0000000000), 0x0, 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, r3], &(0x7f0000000680)=[{0x1, 0x4, 0x4, 0x5}], 0x10, 0xfffffff9, @void, @value}, 0x94) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) accept4$unix(r5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 10.938949485s ago: executing program 4 (id=994): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000900)="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", 0x1bf}], 0x1}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f00000006c0)=ANY=[@ANYBLOB="0deb"]) syz_usb_control_io(r0, 0x0, 0x0) 10.814804893s ago: executing program 0 (id=995): listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 10.059876444s ago: executing program 3 (id=996): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0], 0x20) 9.848956847s ago: executing program 2 (id=937): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) r1 = syz_io_uring_setup(0x6d10, &(0x7f00000002c0)={0x0, 0x800, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000180), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x701a, &(0x7f00000003c0), 0x0, &(0x7f0000000280)) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 9.703758072s ago: executing program 4 (id=999): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) set_mempolicy_home_node(&(0x7f000037b000/0x3000)=nil, 0x3000, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r1 = getpgid(0xffffffffffffffff) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10, 0x180000) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, 0x0, &(0x7f0000000340)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$key(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x35) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) 9.455038832s ago: executing program 2 (id=1000): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000280), 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000280)={0x0, 0x0}) 8.65179941s ago: executing program 3 (id=1003): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nombcache}, {@prjquota}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noquota}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfe, 0x584, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000fc0)={[{@jqfmt_vfsv1}, {@debug}, {@norecovery}, {@resgid={'resgid', 0x3d, 0xee01}}, {@norecovery}]}, 0x9, 0x60c, &(0x7f00000001c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40800) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000840)={@private1}, 0x14) quotactl$Q_QUOTAON(0xffffffff80000500, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 8.644488491s ago: executing program 2 (id=1004): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="6e93c4c3ee001a52d2417db774b48fd1103a712e5529bacf025a3f771aecc7ceef2d035c8ba6a28160", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket(0x2b, 0x2, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x408a02, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setgid(0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05f000000000000001090224000100200000090400000103000000092100000001220500090581030000000000"], 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) syz_usb_control_io(r3, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x1, r2}, 0x0) 8.29521351s ago: executing program 0 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, &(0x7f0000000000), 0x0, 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, r3], &(0x7f0000000680)=[{0x1, 0x4, 0x4, 0x5}], 0x10, 0xfffffff9, @void, @value}, 0x94) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) accept4$unix(r5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.473850906s ago: executing program 0 (id=1006): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x101000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect(r3, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x400, 0x210, 0x0, 0x108, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x71000000, {0x15b}}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8, 0x0, {0x1d000000}}, {0x28}}}}, 0x450) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="800fef", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d3030303030cd008d95647b5ab8dded433b968730303034303030302c757365", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="b89d78c7075c1114932b83467ec7b5af10c5a17d8c780a68ca8a446349b97077032526f048ec33bdfb75e57ac08f7031ad987d48ed398e6103acf377bf510e91ad358f3f0c9a4d4e5fa9a39ab09e3873ad5659768645d6732fc3ab836d9b7b19109be67c24443db2a7506aaf0d6b65d1d448e9a6d97cfb", @ANYBLOB="2cf800", @ANYRESHEX=r3, @ANYRES8=r0, @ANYRESOCT=r3]) lsetxattr$system_posix_acl(0x0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="0400010000000033ba1a01000000d7c30fe055f36798dd5fee249bf452a18fbffc0c75b847f3ac7708a9477b8e4c4b38350e24a48590d5f73fd0721ea17a29fba4f513f7aac8bed06e5a34908620536fe626e9428286c91044c58483c63f67607b8f7e4d5a5236eb7287b59c49fe7a7721483e5ccdbebe9957", @ANYRES32, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x6, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r0, 0x0, 0x10000008ebf, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000004c0), &(0x7f0000000500)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103e01, 0x0) 6.47328989s ago: executing program 3 (id=1007): syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335, @tick, 0x1, {0x2}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r1, 0x2027da, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x4d, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 5.94573694s ago: executing program 3 (id=1009): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, 0x0, 0x0) read(r2, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8001, 0x3, 0x0, 0x3}) 5.758473482s ago: executing program 5 (id=943): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180"], 0x30}}, 0x0) 5.096269135s ago: executing program 5 (id=1010): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000000c0)=0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_clone3(&(0x7f0000001280)={0x120c8400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200), 0xfffffffffffffea6, 0x0, 0x0}, 0x58) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4) accept(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000180)=0xb, 0x4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102384, 0x18ff0}], 0x1, 0x0, 0x20000) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000340)) r5 = socket$kcm(0x10, 0x2, 0x4) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000000a990606e53f0789"], 0x0}, 0x0) 4.940130743s ago: executing program 3 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 4.859955874s ago: executing program 2 (id=1012): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6a6, &(0x7f00000007c0)="$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") creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x400, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x40, &(0x7f0000000440)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.696370003s ago: executing program 0 (id=1013): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4bfa, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x26020280) clock_gettime(0x0, &(0x7f00000000c0)) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x163902, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) read$sequencer(r5, &(0x7f0000000040)=""/85, 0x8) listxattr(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setregid(0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.720874702s ago: executing program 1 (id=1016): listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) 1.821964177s ago: executing program 1 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, &(0x7f0000000000), 0x0, 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, r3], &(0x7f0000000680)=[{0x1, 0x4, 0x4, 0x5}], 0x10, 0xfffffff9, @void, @value}, 0x94) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) accept4$unix(r5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 717.993255ms ago: executing program 1 (id=1018): r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x1) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 597.353595ms ago: executing program 1 (id=1019): unshare(0xc040480) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @dev, 0x4}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, 0x20) 428.331669ms ago: executing program 1 (id=1020): syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335, @tick, 0x1, {0x2}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x2027da, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x4d, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 215.929819ms ago: executing program 1 (id=1021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/80, 0x50}], 0x1}}], 0x1, 0x102, 0x0) sendto(r0, &(0x7f00000000c0)="12", 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) kernel console output (not intermixed with test programs): s for proto=fd [ 180.291015][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.345693][ T46] usb 5-1: device descriptor read/8, error -71 [ 180.870699][ T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.961008][ T46] usb 5-1: device descriptor read/8, error -71 [ 181.081986][ T46] usb usb5-port1: unable to enumerate USB device [ 181.701082][ T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 181.880813][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 181.927507][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.957198][ T46] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 181.974331][ T46] usb 3-1: config 0 has no interface number 0 [ 182.190624][ T46] usb 3-1: config 0 interface 208 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 182.226913][ T46] usb 3-1: config 0 interface 208 altsetting 2 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 182.258573][ T46] usb 3-1: config 0 interface 208 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 182.348283][ T46] usb 3-1: config 0 interface 208 has no altsetting 0 [ 182.370452][ T46] usb 3-1: string descriptor 0 read error: -22 [ 182.380922][ T46] usb 3-1: New USB device found, idVendor=067b, idProduct=e1f1, bcdDevice=e9.fd [ 182.396941][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.451262][ T46] usb 3-1: config 0 descriptor?? [ 182.482770][ T46] pl2303 3-1:0.208: required endpoints missing [ 182.740266][ T46] usb 3-1: USB disconnect, device number 15 [ 182.854879][ T6979] netlink: 'syz.5.537': attribute type 29 has an invalid length. [ 182.868891][ T6979] netlink: 'syz.5.537': attribute type 29 has an invalid length. [ 185.240667][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.280418][ T7013] loop1: detected capacity change from 0 to 736 [ 185.400676][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 185.413310][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.425923][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.500682][ T25] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 185.545099][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.582574][ T7018] netlink: 'syz.2.550': attribute type 29 has an invalid length. [ 185.594276][ T7018] netlink: 'syz.2.550': attribute type 29 has an invalid length. [ 185.660767][ T25] usb 4-1: config 0 descriptor?? [ 185.660837][ T5289] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 185.720397][ T7019] loop1: detected capacity change from 0 to 2048 [ 185.830745][ T5289] usb 6-1: Using ep0 maxpacket: 16 [ 185.845282][ T5289] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.853463][ T5289] usb 6-1: config 0 has no interface number 0 [ 185.873719][ T7019] loop1: p1 < > p4 [ 185.880683][ T5289] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 185.888627][ T5232] usb 4-1: USB disconnect, device number 3 [ 185.889736][ T5289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.889766][ T5289] usb 6-1: Product: syz [ 185.889786][ T5289] usb 6-1: Manufacturer: syz [ 185.889807][ T5289] usb 6-1: SerialNumber: syz [ 185.911785][ T7005] loop4: detected capacity change from 0 to 32768 [ 185.966736][ T7005] XFS: ikeep mount option is deprecated. [ 185.972469][ T7019] loop1: p4 size 8388608 extends beyond EOD, truncated [ 185.990242][ T5289] usb 6-1: config 0 descriptor?? [ 186.013074][ T7019] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.024815][ T5289] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 186.034578][ T4678] loop1: p1 < > p4 [ 186.045703][ T7005] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.051822][ T4678] loop1: p4 size 8388608 extends beyond EOD, truncated [ 186.374639][ T7005] XFS (loop4): Ending clean mount [ 186.432947][ T7005] XFS (loop4): Quotacheck needed: Please wait. [ 186.513806][ T7005] XFS (loop4): Quotacheck: Done. [ 186.807284][ T29] audit: type=1804 audit(1727572505.059:12): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.544" name="/newroot/45/file0/file1" dev="loop4" ino=9286 res=1 errno=0 [ 187.023979][ T7048] 9pnet_fd: Insufficient options for proto=fd [ 188.268472][ T5289] gspca_spca1528: reg_w err -110 [ 188.274281][ T5289] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 188.388952][ T5701] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.529936][ T5295] usb 6-1: USB disconnect, device number 10 [ 188.561435][ T7057] cgroup: Unknown subsys name 'cpuset' [ 189.249144][ T7065] netlink: 'syz.0.563': attribute type 29 has an invalid length. [ 189.311899][ T7065] netlink: 'syz.0.563': attribute type 29 has an invalid length. [ 189.406244][ T7061] loop5: detected capacity change from 0 to 1024 [ 189.460343][ T7069] binder: 7068:7069 ioctl c0306201 20000080 returned -14 [ 189.500502][ T7061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.881123][ T931] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 190.080751][ T931] usb 4-1: Using ep0 maxpacket: 32 [ 190.095902][ T931] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 190.125295][ T931] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 190.148203][ T931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 190.189305][ T931] usb 4-1: config 1 has no interface number 0 [ 190.202049][ T931] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.215071][ T931] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 190.229948][ T931] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 190.241658][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.356012][ T931] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 190.487804][ T7094] loop2: detected capacity change from 0 to 736 [ 190.715633][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 190.790991][ T5241] Bluetooth: hci0: command 0x0406 tx timeout [ 190.798552][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 190.809713][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 190.949418][ T931] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 191.070842][ T5287] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 191.117310][ T7105] loop2: detected capacity change from 0 to 2048 [ 191.184245][ T931] usb 4-1: USB disconnect, device number 4 [ 191.199406][ T931] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 191.278822][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 191.304215][ T7105] loop2: p1 < > p4 [ 191.311339][ T5287] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 191.340676][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.368040][ T5287] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.405514][ T7108] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 191.408790][ T7105] loop2: p4 size 8388608 extends beyond EOD, [ 191.416190][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.470623][ T7105] truncated [ 191.474523][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.518018][ T5287] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 191.532576][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.532706][ T4678] loop2: p1 < > p4 [ 191.580659][ T5287] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.589341][ T4678] loop2: p4 size 8388608 extends beyond EOD, truncated [ 191.621297][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.661088][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.701907][ T5287] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 191.709730][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.811325][ T5287] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.926667][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.013191][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.078852][ T5287] usb 2-1: string descriptor 0 read error: -22 [ 192.095970][ T5287] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 192.133431][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.204858][ T5287] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 192.464952][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.520829][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.806499][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.128473][ T7120] netlink: 'syz.5.581': attribute type 29 has an invalid length. [ 193.203646][ T7120] netlink: 'syz.5.581': attribute type 29 has an invalid length. [ 193.756484][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.763769][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.903300][ T5287] usb 2-1: USB disconnect, device number 7 [ 195.038035][ T7151] loop5: detected capacity change from 0 to 1024 [ 195.151664][ T7151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.661975][ T5287] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 195.730164][ T7175] netlink: 'syz.0.602': attribute type 29 has an invalid length. [ 195.773216][ T7175] netlink: 'syz.0.602': attribute type 29 has an invalid length. [ 195.820735][ T5287] usb 3-1: Using ep0 maxpacket: 8 [ 195.856880][ T5287] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 195.876370][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.896918][ T5287] usb 3-1: Product: syz [ 195.907057][ T5287] usb 3-1: Manufacturer: syz [ 195.911957][ T5286] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.921452][ T5287] usb 3-1: SerialNumber: syz [ 195.938626][ T5287] usb 3-1: config 0 descriptor?? [ 195.954127][ T5287] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 196.009573][ T7182] dvmrp0: entered allmulticast mode [ 196.073644][ T5286] usb 5-1: Using ep0 maxpacket: 32 [ 196.091391][ T5232] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.115321][ T5286] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 196.131593][ T5286] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 196.151283][ T5286] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 196.177209][ T5286] usb 5-1: config 1 has no interface number 0 [ 196.210687][ T5286] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.240719][ T5286] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 196.270575][ T5232] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 196.273482][ T5286] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 196.285551][ T5232] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 196.325654][ T5232] usb 4-1: config 0 has no interface number 0 [ 196.340080][ T5232] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 196.351577][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.383436][ T5232] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 196.421006][ T5232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.431580][ T5286] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 196.451869][ T5232] usb 4-1: config 0 descriptor?? [ 196.513669][ T5232] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 196.575672][ T5287] gspca_vc032x: reg_r err -32 [ 196.580465][ T5287] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 196.975325][ T5286] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 197.204803][ T5286] usb 5-1: USB disconnect, device number 9 [ 197.218776][ T5286] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 197.308760][ T11] usb 4-1: Failed to submit usb control message: -71 [ 197.309083][ T5287] usb 4-1: USB disconnect, device number 5 [ 197.329889][ T11] usb 4-1: unable to send the bmi data to the device: -71 [ 197.370426][ T11] usb 4-1: unable to get target info from device [ 197.401535][ T11] usb 4-1: could not get target info (-71) [ 197.416098][ T11] usb 4-1: could not probe fw (-71) [ 197.620399][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.337213][ T931] usb 3-1: USB disconnect, device number 16 [ 198.401497][ T7224] dvmrp0: entered allmulticast mode [ 198.600707][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.800660][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 198.826876][ T25] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 199.140749][ T25] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 199.180956][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 199.189971][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.229081][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.238959][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 199.252162][ T25] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 199.261314][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.339128][ T7241] loop5: detected capacity change from 0 to 1024 [ 199.470804][ T5286] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 199.562082][ T7241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.651763][ T25] usb 5-1: config 0 descriptor?? [ 199.653172][ T5286] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 199.759861][ T5286] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.006524][ T25] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 200.042292][ T5286] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.055315][ T5286] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.055635][ T25] usb 5-1: USB disconnect, device number 10 [ 200.064478][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.131447][ T5286] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.147040][ T25] usblp0: removed [ 200.179464][ T5286] usb 3-1: invalid MIDI out EP 0 [ 200.352008][ T5249] udevd[5249]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.391114][ T46] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 200.398165][ T5286] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 200.560683][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 200.596835][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 200.615791][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.624195][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.657994][ T46] usb 4-1: Product: syz [ 200.662983][ T46] usb 4-1: Manufacturer: syz [ 200.667899][ T46] usb 4-1: SerialNumber: syz [ 200.712712][ T46] usb 4-1: config 0 descriptor?? [ 200.737313][ T46] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 200.805143][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 200.818545][ T25] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.836229][ T25] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 200.847930][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 200.864342][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.881433][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.921465][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.996132][ T25] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.017044][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.065958][ T5319] usb 3-1: USB disconnect, device number 17 [ 201.134160][ T25] usb 5-1: config 0 descriptor?? [ 201.352683][ T46] gspca_vc032x: reg_r err -32 [ 201.357493][ T46] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 201.370125][ T25] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.441678][ T25] usb 5-1: USB disconnect, device number 11 [ 201.512972][ T25] usblp0: removed [ 203.143962][ T5287] usb 4-1: USB disconnect, device number 6 [ 203.541402][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.249506][ T7300] netlink: 18 bytes leftover after parsing attributes in process `syz.3.642'. [ 204.261240][ T7300] netlink: 18 bytes leftover after parsing attributes in process `syz.3.642'. [ 204.730760][ T5286] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 204.930710][ T5286] usb 1-1: Using ep0 maxpacket: 32 [ 204.957466][ T5286] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 204.978688][ T5286] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 205.006598][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 205.023351][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.036690][ T5286] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 205.050022][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.070973][ T5286] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 205.086097][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.140412][ T5286] usb 1-1: config 0 descriptor?? [ 205.366454][ T5286] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 205.427168][ T5286] usb 1-1: USB disconnect, device number 12 [ 205.457389][ T5286] usblp0: removed [ 205.809892][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.651'. [ 205.829278][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 205.860315][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 205.996566][ T7322] loop3: detected capacity change from 0 to 512 [ 206.029126][ T7322] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.052891][ T7322] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 206.062709][ T5286] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 206.230920][ T5286] usb 1-1: Using ep0 maxpacket: 32 [ 206.261983][ T5286] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 206.270387][ T5286] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 206.452331][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 206.461473][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.471583][ T5286] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 206.481856][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 206.496365][ T5286] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 206.505669][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.525603][ T5286] usb 1-1: config 0 descriptor?? [ 206.790808][ T7317] loop5: detected capacity change from 0 to 40427 [ 206.860618][ T7317] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 206.867825][ T7317] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 206.934784][ T7317] F2FS-fs (loop5): invalid crc value [ 207.472956][ T7317] F2FS-fs (loop5): Found nat_bits in checkpoint [ 207.924030][ T7329] loop3: detected capacity change from 0 to 1024 [ 207.964720][ T7329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.423678][ T5286] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 208.529598][ T5286] usb 1-1: USB disconnect, device number 13 [ 208.921155][ T5286] usblp0: removed [ 209.357139][ T7317] F2FS-fs (loop5): Start checkpoint disabled! [ 209.608098][ T7351] binder: 7349:7351 ioctl c0306201 20000080 returned -14 [ 209.897996][ T7363] loop1: detected capacity change from 0 to 512 [ 210.012510][ T7363] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.033179][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 210.044901][ T7363] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 210.069772][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 210.290779][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 210.850872][ T7379] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.670'. [ 210.860091][ T7379] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.670'. [ 212.317813][ T5228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.153438][ T7420] netlink: 'syz.0.685': attribute type 29 has an invalid length. [ 214.190361][ T7420] netlink: 'syz.0.685': attribute type 29 has an invalid length. [ 214.378440][ T7424] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.687'. [ 214.398085][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 214.426209][ T7424] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.687'. [ 214.610733][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 214.753471][ T25] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 214.767073][ T25] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 214.778450][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 214.794546][ T25] usb 5-1: config 1 has no interface number 0 [ 214.804893][ T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.819746][ T25] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 214.839867][ T25] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 214.849400][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.715895][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 215.755463][ T7443] loop3: detected capacity change from 0 to 512 [ 215.811352][ T7443] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.879221][ T7443] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 216.308502][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 217.090383][ T5286] usb 5-1: USB disconnect, device number 12 [ 217.172514][ T5286] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 217.523933][ T5287] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 217.600004][ T7467] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.706'. [ 217.616513][ T7467] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.706'. [ 217.680998][ T5287] usb 6-1: Using ep0 maxpacket: 32 [ 217.699086][ T5287] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 217.709826][ T5287] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 217.759400][ T5287] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 217.800089][ T5287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.849241][ T5287] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 217.942838][ T5287] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 217.991704][ T5287] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 218.010616][ T5287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.100821][ T5287] usb 6-1: config 0 descriptor?? [ 218.447485][ T7479] syz.4.709: attempt to access beyond end of device [ 218.447485][ T7479] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 218.553844][ T7479] syz.4.709: attempt to access beyond end of device [ 218.553844][ T7479] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 218.567838][ T7479] Mount JFS Failure: -5 [ 218.574939][ T7479] jfs_mount failed w/return code = -5 [ 218.606707][ T5287] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 218.736877][ T5319] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 218.744818][ T5287] usb 6-1: USB disconnect, device number 11 [ 218.753568][ T5287] usblp0: removed [ 218.807134][ T7484] loop2: detected capacity change from 0 to 1024 [ 219.854556][ T7484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.890787][ T5287] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 220.981408][ T5287] usb 6-1: Using ep0 maxpacket: 32 [ 221.007283][ T5287] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 221.016299][ T5287] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 221.034836][ T5287] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 221.053853][ T5287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.239614][ T5287] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 221.356796][ T5287] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.420671][ T5319] usb 2-1: Using ep0 maxpacket: 32 [ 221.426656][ T5319] usb 2-1: device descriptor read/all, error -71 [ 221.545871][ T5287] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 221.598618][ T5287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.624122][ T5286] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 221.653061][ T5287] usb 6-1: config 0 descriptor?? [ 221.661312][ T5287] usb 6-1: can't set config #0, error -71 [ 221.679924][ T5287] usb 6-1: USB disconnect, device number 12 [ 221.755474][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.800922][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 221.816194][ T5286] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 221.828788][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.862729][ T5286] usb 4-1: Product: syz [ 221.893702][ T5286] usb 4-1: Manufacturer: syz [ 221.910280][ T5286] usb 4-1: SerialNumber: syz [ 221.925173][ T5286] usb 4-1: config 0 descriptor?? [ 221.966624][ T5286] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 221.987231][ T7516] binder: 7514:7516 ioctl c0306201 20000080 returned -14 [ 222.168280][ T5286] gspca_vc032x: reg_r err -32 [ 222.194809][ T5286] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 224.484192][ T5286] usb 4-1: USB disconnect, device number 7 [ 225.072782][ T7562] netlink: 'syz.3.736': attribute type 29 has an invalid length. [ 225.113354][ T7562] netlink: 'syz.3.736': attribute type 29 has an invalid length. [ 226.445037][ T7576] binder: 7575:7576 ioctl c0306201 20000080 returned -14 [ 226.510148][ T7576] binder_alloc: 7575: binder_alloc_buf, no vma [ 226.553353][ T5239] Bluetooth: hci6: command 0x0406 tx timeout [ 227.171079][ T7582] loop1: detected capacity change from 0 to 1024 [ 227.269714][ T7598] loop2: detected capacity change from 0 to 256 [ 227.316013][ T7598] FAT-fs (loop2): Directory bread(block 64) failed [ 227.360332][ T7598] FAT-fs (loop2): Directory bread(block 65) failed [ 227.385637][ T7598] FAT-fs (loop2): Directory bread(block 66) failed [ 227.414352][ T7598] FAT-fs (loop2): Directory bread(block 67) failed [ 227.441085][ T7598] FAT-fs (loop2): Directory bread(block 68) failed [ 227.473945][ T5286] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 227.516546][ T7598] FAT-fs (loop2): Directory bread(block 69) failed [ 227.528909][ T7598] FAT-fs (loop2): Directory bread(block 70) failed [ 227.540639][ T7598] FAT-fs (loop2): Directory bread(block 71) failed [ 227.547287][ T7598] FAT-fs (loop2): Directory bread(block 72) failed [ 227.559681][ T7582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.570647][ T7598] FAT-fs (loop2): Directory bread(block 73) failed [ 227.660722][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 227.685248][ T5286] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 227.724665][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.752752][ T5286] usb 4-1: Product: syz [ 227.761053][ T5286] usb 4-1: Manufacturer: syz [ 227.814543][ T5286] usb 4-1: SerialNumber: syz [ 227.851674][ T5286] usb 4-1: config 0 descriptor?? [ 227.873867][ T5286] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 228.070904][ T5286] gspca_vc032x: reg_r err -32 [ 228.088602][ T5286] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 228.380004][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.388563][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.401312][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.412039][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.420812][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.428937][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.049643][ T7610] chnl_net:caif_netlink_parms(): no params data found [ 229.150760][ T5286] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 229.261268][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.268499][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.276862][ T7610] bridge_slave_0: entered allmulticast mode [ 229.284467][ T7610] bridge_slave_0: entered promiscuous mode [ 229.303846][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.320099][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.330925][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 229.347831][ T7610] bridge_slave_1: entered allmulticast mode [ 229.357626][ T5286] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 229.391189][ T7610] bridge_slave_1: entered promiscuous mode [ 229.399772][ T5286] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 229.443688][ T5225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.477136][ T5286] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 229.489413][ T5286] usb 3-1: config 1 has no interface number 0 [ 229.495729][ T5286] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.507063][ T5286] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 229.523425][ T5286] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 229.534041][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.633402][ T5286] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 229.755451][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.769859][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.888271][ T7610] team0: Port device team_slave_0 added [ 229.912341][ T7610] team0: Port device team_slave_1 added [ 229.921407][ T7635] binder: 7634:7635 ioctl c0306201 20000080 returned -14 [ 229.939608][ T7635] binder_alloc: 7634: binder_alloc_buf, no vma [ 229.963239][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.979211][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.062499][ T7610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.091873][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.109173][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.214764][ T7610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.337164][ T5287] usb 4-1: USB disconnect, device number 8 [ 230.503802][ T7610] hsr_slave_0: entered promiscuous mode [ 230.538503][ T7610] hsr_slave_1: entered promiscuous mode [ 230.550758][ T5244] Bluetooth: hci5: command tx timeout [ 230.575311][ T7610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.600322][ T7610] Cannot create hsr debugfs directory [ 230.985872][ T7610] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.182365][ T7610] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.359960][ T7610] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.567170][ T7610] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.901375][ T5286] snd_usb_pod 3-1:1.1: set_interface failed [ 231.939822][ T5286] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 231.999618][ T7610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.007815][ T5286] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 232.071516][ T5286] usb 3-1: USB disconnect, device number 18 [ 232.116250][ T7650] loop2: detected capacity change from 0 to 256 [ 232.141056][ T7610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.225249][ T7610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.260318][ T7650] FAT-fs (loop2): Directory bread(block 64) failed [ 232.280438][ T7610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.303890][ T7650] FAT-fs (loop2): Directory bread(block 65) failed [ 232.335355][ T7650] FAT-fs (loop2): Directory bread(block 66) failed [ 232.373945][ T7650] FAT-fs (loop2): Directory bread(block 67) failed [ 232.416676][ T7650] FAT-fs (loop2): Directory bread(block 68) failed [ 232.426825][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.434910][ T7610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.442320][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.449592][ T7610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.504939][ T7650] FAT-fs (loop2): Directory bread(block 69) failed [ 232.550834][ T7650] FAT-fs (loop2): Directory bread(block 70) failed [ 232.557385][ T7650] FAT-fs (loop2): Directory bread(block 71) failed [ 232.631722][ T5244] Bluetooth: hci5: command tx timeout [ 232.637353][ T7650] FAT-fs (loop2): Directory bread(block 72) failed [ 232.716787][ T7650] FAT-fs (loop2): Directory bread(block 73) failed [ 232.946788][ T7661] binder: 7660:7661 ioctl c0306201 20000080 returned -14 [ 232.968203][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.018003][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 233.088113][ T7661] binder: 7660:7661 ioctl 4018620d 20000040 returned -16 [ 233.145248][ T7610] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.509562][ T7670] syz.1.770: attempt to access beyond end of device [ 233.509562][ T7670] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 233.523651][ T7670] syz.1.770: attempt to access beyond end of device [ 233.523651][ T7670] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 233.536540][ T7670] Mount JFS Failure: -5 [ 233.540763][ T7670] jfs_mount failed w/return code = -5 [ 233.606141][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.614914][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.625888][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.634830][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.642653][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.649955][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.461491][ T7672] chnl_net:caif_netlink_parms(): no params data found [ 235.451136][ T7476] sched: DL replenish lagged too much [ 235.460966][ T5244] Bluetooth: hci5: command tx timeout [ 236.508143][ T5244] Bluetooth: hci0: command tx timeout [ 236.514951][ T5289] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 236.730697][ T5289] usb 4-1: Using ep0 maxpacket: 8 [ 236.737901][ T5289] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 236.746948][ T5289] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 236.794679][ T5289] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.841257][ T5289] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.869428][ T5289] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 236.913887][ T5289] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 236.930914][ T5289] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 236.962807][ T5289] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.028773][ T5289] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.113247][ T5289] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.176025][ T5289] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 237.187577][ T5289] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 237.247946][ T5289] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.419132][ T5289] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.533316][ T5244] Bluetooth: hci5: command tx timeout [ 237.705542][ T7704] binder: 7703:7704 ioctl c0306201 20000080 returned -14 [ 237.730673][ T5289] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.885377][ T5289] usb 4-1: string descriptor 0 read error: -71 [ 237.900703][ T5289] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.950749][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.985963][ T5289] usb 4-1: can't set config #168, error -71 [ 238.025034][ T5289] usb 4-1: USB disconnect, device number 9 [ 238.235038][ T7712] netlink: 'syz.1.785': attribute type 29 has an invalid length. [ 238.281323][ T5365] bridge_slave_1: left allmulticast mode [ 238.287031][ T5365] bridge_slave_1: left promiscuous mode [ 238.309444][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.350501][ T5365] bridge_slave_0: left allmulticast mode [ 238.360713][ T5365] bridge_slave_0: left promiscuous mode [ 238.368132][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.458873][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.482426][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.512606][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.543407][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.551237][ T5241] Bluetooth: hci0: command tx timeout [ 238.565921][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 238.577409][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.885277][ T5365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.936165][ T5365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.953883][ T5365] bond0 (unregistering): Released all slaves [ 239.975315][ T7714] netlink: 'syz.1.785': attribute type 29 has an invalid length. [ 240.120919][ T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 240.345786][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 240.355716][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.372544][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 240.380279][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 240.381524][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.413786][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.422224][ T7672] bridge_slave_0: entered allmulticast mode [ 240.430591][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.452829][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 240.461988][ T7672] bridge_slave_0: entered promiscuous mode [ 240.474049][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 240.490702][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 240.495956][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.522810][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.530277][ T7672] bridge_slave_1: entered allmulticast mode [ 240.533866][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.552486][ T7672] bridge_slave_1: entered promiscuous mode [ 240.569223][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.599138][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 240.632508][ T5239] Bluetooth: hci0: command tx timeout [ 240.632517][ T5244] Bluetooth: hci6: command tx timeout [ 240.645808][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 240.653434][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 240.664913][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.676753][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.690261][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 240.705130][ T25] usb 3-1: string descriptor 0 read error: -22 [ 240.721412][ T25] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 240.730494][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.766752][ T25] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 240.845562][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.929044][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.044525][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.058690][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.089041][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.433060][ T5365] hsr_slave_0: left promiscuous mode [ 241.447775][ T5365] hsr_slave_1: left promiscuous mode [ 241.467523][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.485854][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.500440][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.527105][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.606978][ T5365] veth1_macvtap: left promiscuous mode [ 241.634398][ T5365] veth0_macvtap: left promiscuous mode [ 241.640588][ T5365] veth1_vlan: left promiscuous mode [ 241.647671][ T5365] veth0_vlan: left promiscuous mode [ 242.761276][ T5239] Bluetooth: hci6: command tx timeout [ 242.802982][ T5244] Bluetooth: hci0: command tx timeout [ 243.509447][ T5232] usb 3-1: USB disconnect, device number 19 [ 244.056097][ T5365] team0 (unregistering): Port device team_slave_1 removed [ 244.146533][ T5365] team0 (unregistering): Port device team_slave_0 removed [ 244.327290][ T7783] loop3: detected capacity change from 0 to 2048 [ 244.454141][ T7783] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 244.516141][ T7783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.883703][ T5239] Bluetooth: hci6: command tx timeout [ 244.890813][ T5287] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 244.944677][ T7672] team0: Port device team_slave_0 added [ 244.956436][ T7672] team0: Port device team_slave_1 added [ 244.966950][ T7773] netlink: 'syz.1.802': attribute type 29 has an invalid length. [ 245.067139][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.075305][ T5287] usb 3-1: Using ep0 maxpacket: 32 [ 245.088298][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.125428][ T5287] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 245.137252][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.158464][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 245.170041][ T7672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.192872][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 245.224373][ T5287] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 245.234781][ T5287] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 245.261808][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.268808][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.295147][ T5287] usb 3-1: Product: syz [ 245.320871][ T5287] usb 3-1: Manufacturer: syz [ 245.325540][ T5287] usb 3-1: SerialNumber: syz [ 245.342481][ T5287] usb 3-1: config 0 descriptor?? [ 245.348393][ T7785] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.372536][ T5287] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 245.390748][ T7672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.415067][ T5287] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 245.576386][ T5287] usb 3-1: USB disconnect, device number 20 [ 245.600766][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 245.612472][ T5287] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 245.681379][ T7672] hsr_slave_0: entered promiscuous mode [ 245.702976][ T7672] hsr_slave_1: entered promiscuous mode [ 245.711525][ T7672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.719126][ T7672] Cannot create hsr debugfs directory [ 245.763431][ T7720] chnl_net:caif_netlink_parms(): no params data found [ 246.003256][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.016051][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.024015][ T7720] bridge_slave_0: entered allmulticast mode [ 246.032543][ T7720] bridge_slave_0: entered promiscuous mode [ 246.090804][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.098557][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.106563][ T7720] bridge_slave_1: entered allmulticast mode [ 246.114595][ T7720] bridge_slave_1: entered promiscuous mode [ 246.286798][ T7720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.300478][ T7610] veth0_vlan: entered promiscuous mode [ 246.383191][ T5365] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.467562][ T7720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.578541][ T5365] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.616773][ T7720] team0: Port device team_slave_0 added [ 246.658374][ T7610] veth1_vlan: entered promiscuous mode [ 246.715506][ T5365] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.741335][ T7720] team0: Port device team_slave_1 added [ 246.842953][ T7672] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.932085][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.951347][ T5239] Bluetooth: hci6: command tx timeout [ 246.960731][ T25] usb 2-1: no configurations [ 246.982386][ T25] usb 2-1: can't read configurations, error -22 [ 247.237178][ T5365] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.843586][ T7672] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.945378][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.952818][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.979482][ T7720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.993284][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.000247][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.026484][ T7720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.130116][ T7672] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.159211][ T7720] hsr_slave_0: entered promiscuous mode [ 248.170152][ T7720] hsr_slave_1: entered promiscuous mode [ 248.188703][ T7720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.196443][ T7720] Cannot create hsr debugfs directory [ 248.206711][ T5295] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 248.262747][ T7672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.301009][ T7822] netlink: 'syz.1.816': attribute type 29 has an invalid length. [ 248.314632][ T7610] veth0_macvtap: entered promiscuous mode [ 248.340842][ T7823] netlink: 'syz.1.816': attribute type 29 has an invalid length. [ 248.355196][ T7610] veth1_macvtap: entered promiscuous mode [ 248.361264][ T5295] usb 3-1: Using ep0 maxpacket: 8 [ 248.368293][ T5295] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 248.377111][ T5295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 248.413942][ T5295] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.439568][ T5295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.451267][ T5295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.465717][ T5295] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 248.474896][ T5295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 248.494811][ T5295] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.555678][ T5365] bridge_slave_1: left allmulticast mode [ 248.571229][ T5295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.584052][ T5365] bridge_slave_1: left promiscuous mode [ 248.589812][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.608831][ T5295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.630271][ T5365] bridge_slave_0: left allmulticast mode [ 248.640729][ T5365] bridge_slave_0: left promiscuous mode [ 248.646462][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.666709][ T5295] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 248.693570][ T5365] bridge_slave_1: left allmulticast mode [ 248.699404][ T5365] bridge_slave_1: left promiscuous mode [ 248.699429][ T5295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 248.711336][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.725918][ T5295] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.739535][ T5365] bridge_slave_0: left allmulticast mode [ 248.745841][ T5365] bridge_slave_0: left promiscuous mode [ 248.750998][ T5295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.753952][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.771637][ T5295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.809423][ T5295] usb 3-1: string descriptor 0 read error: -22 [ 248.819906][ T5295] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 248.838601][ T5295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.866986][ T5295] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 249.031986][ T5287] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 249.081490][ T7832] loop3: detected capacity change from 0 to 1024 [ 249.133144][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.154481][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.200771][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 249.207894][ T5287] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 249.218263][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.247514][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 249.259157][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.284828][ T5287] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 249.296257][ T5287] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 249.314426][ T5287] usb 2-1: Product: syz [ 249.326694][ T5287] usb 2-1: Manufacturer: syz [ 249.332364][ T5287] usb 2-1: SerialNumber: syz [ 249.360188][ T5287] usb 2-1: config 0 descriptor?? [ 249.377905][ T7829] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 249.387689][ T5287] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 249.427798][ T5287] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 249.596903][ T5287] usb 2-1: USB disconnect, device number 12 [ 249.642704][ T5287] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 249.861217][ T5365] dvmrp0 (unregistering): left allmulticast mode [ 250.363740][ T5365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.400175][ T5365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.438056][ T5365] bond0 (unregistering): Released all slaves [ 250.763809][ T5365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.820678][ T5365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.898880][ T5365] bond0 (unregistering): Released all slaves [ 250.911874][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.933366][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.944841][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.015855][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.027055][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.039403][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.050829][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.061881][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.072148][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.090299][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.113464][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.149952][ T5287] usb 3-1: USB disconnect, device number 21 [ 251.381640][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.417801][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.439710][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.461274][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.478829][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.499179][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.533535][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.571966][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.590454][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.604048][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.625334][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.914329][ T7610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.966872][ T7610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.993724][ T7610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.013125][ T7610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.051347][ T7672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.075820][ T7672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.227804][ T7672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.286111][ T7672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.403106][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 253.601070][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 253.620238][ T25] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 253.632484][ T25] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 253.651854][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 253.662479][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.672460][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.682271][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 253.695442][ T25] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 253.704775][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.723930][ T25] usb 2-1: config 0 descriptor?? [ 253.869759][ T5365] hsr_slave_0: left promiscuous mode [ 253.887106][ T5365] hsr_slave_1: left promiscuous mode [ 253.905462][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.922261][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.940691][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.957874][ T25] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 253.958786][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.977048][ T25] usb 2-1: USB disconnect, device number 13 [ 254.032844][ T25] usblp0: removed [ 254.046344][ T5365] hsr_slave_0: left promiscuous mode [ 254.059886][ T5365] hsr_slave_1: left promiscuous mode [ 254.087161][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.104083][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.114254][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.121843][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.157391][ T5365] veth1_macvtap: left promiscuous mode [ 254.163210][ T5365] veth0_macvtap: left promiscuous mode [ 254.168857][ T5365] veth1_vlan: left promiscuous mode [ 254.192505][ T5365] veth0_vlan: left promiscuous mode [ 254.199659][ T5365] veth1_macvtap: left promiscuous mode [ 254.213960][ T5365] veth0_macvtap: left promiscuous mode [ 254.243130][ T5365] veth1_vlan: left promiscuous mode [ 254.268842][ T5365] veth0_vlan: left promiscuous mode [ 254.510771][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 254.660668][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 254.678313][ T25] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 254.705474][ T25] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 254.744829][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 254.766194][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.789537][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.805624][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 254.835343][ T25] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 254.849204][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.881596][ T25] usb 2-1: config 0 descriptor?? [ 254.960891][ T5286] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 255.128600][ T25] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 255.146597][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 255.154133][ T5286] usb 3-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 255.180963][ T25] usb 2-1: USB disconnect, device number 14 [ 255.193126][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.194758][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 255.212712][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.226858][ T25] usblp0: removed [ 255.275128][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 217, changing to 11 [ 255.305688][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 25581, setting to 1024 [ 255.335860][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.357097][ T5286] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 255.366832][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 255.377021][ T5286] usb 3-1: Product: syz [ 255.381583][ T5286] usb 3-1: Manufacturer: syz [ 255.386183][ T5286] usb 3-1: SerialNumber: syz [ 255.401898][ T5286] usb 3-1: config 0 descriptor?? [ 255.616985][ T5286] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 255.651172][ T5286] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 255.764100][ T5365] team0 (unregistering): Port device team_slave_1 removed [ 255.827162][ T5286] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 255.848500][ T5365] team0 (unregistering): Port device team_slave_0 removed [ 255.856219][ T5286] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 255.894052][ T5286] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 255.917576][ T5286] usb 3-1: USB disconnect, device number 22 [ 256.059789][ T7894] loop1: detected capacity change from 0 to 1024 [ 258.228828][ T5365] team0 (unregistering): Port device team_slave_1 removed [ 258.323587][ T5365] team0 (unregistering): Port device team_slave_0 removed [ 259.131421][ T5319] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 259.315385][ T5319] usb 2-1: Using ep0 maxpacket: 32 [ 259.331378][ T5319] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 259.345290][ T5319] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 259.366234][ T5319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 259.387438][ T5319] usb 2-1: config 1 has no interface number 0 [ 259.412613][ T5319] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.432582][ T5319] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 259.456200][ T5319] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 259.509399][ T5319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.573861][ T5319] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 259.640831][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.689683][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.860116][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.868157][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.899468][ T7672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.918023][ T7672] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.933444][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.940630][ T7771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.962748][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.969904][ T7771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.016294][ T7720] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 260.085030][ T7720] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.126366][ T5319] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 260.204628][ T7720] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.274070][ T7720] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.311736][ T7937] fuse: Unknown parameter 'user_id00000000000000000000' [ 260.376768][ T7935] loop4: detected capacity change from 0 to 736 [ 260.440969][ T5232] usb 2-1: USB disconnect, device number 15 [ 260.460394][ T5232] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 260.604262][ T7943] loop3: detected capacity change from 0 to 1024 [ 260.858522][ T7720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.889088][ T7720] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.964316][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.971547][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.164734][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.172021][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.314397][ T7957] netlink: 'syz.1.854': attribute type 29 has an invalid length. [ 261.515871][ T7720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.726639][ T7957] netlink: 'syz.1.854': attribute type 29 has an invalid length. [ 261.867516][ T7968] loop4: detected capacity change from 0 to 2048 [ 261.932089][ T7968] loop4: p1 < > p4 [ 261.949856][ T7968] loop4: p4 size 8388608 extends beyond EOD, truncated [ 261.990765][ T7968] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 262.241595][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.509410][ T7672] veth0_vlan: entered promiscuous mode [ 262.536971][ T7720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.615405][ T7672] veth1_vlan: entered promiscuous mode [ 262.832365][ T7672] veth0_macvtap: entered promiscuous mode [ 262.872765][ T7672] veth1_macvtap: entered promiscuous mode [ 262.941731][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.958666][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.968700][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.979299][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.989590][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.000459][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.011155][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.022556][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.035681][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.045088][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.055853][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.066172][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.076988][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.087218][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.098283][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.108555][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.121639][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.137735][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.152073][ T7672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.162779][ T7672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.171692][ T7672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.180790][ T7672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.640750][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.648718][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.811526][ T7720] veth0_vlan: entered promiscuous mode [ 263.885591][ T7720] veth1_vlan: entered promiscuous mode [ 263.950351][ T7771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.987166][ T7771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.095013][ T7720] veth0_macvtap: entered promiscuous mode [ 264.129717][ T7720] veth1_macvtap: entered promiscuous mode [ 264.217114][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.250757][ T5295] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 264.268619][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.298068][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.429782][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.440171][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.451711][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.461681][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.472430][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.473763][ T5295] usb 2-1: Using ep0 maxpacket: 16 [ 264.482314][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.482340][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.484159][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.518262][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.528994][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.539074][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.550118][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.560857][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.561796][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.571365][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.571395][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.602653][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.612576][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.623053][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.634943][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.678615][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.693950][ T8010] netlink: 'syz.0.763': attribute type 3 has an invalid length. [ 264.698824][ T5295] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 264.722774][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.799510][ T5295] usb 2-1: config 0 descriptor?? [ 264.803326][ T7720] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.813697][ T7720] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.822485][ T7720] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.832528][ T7720] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.934156][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 264.944654][ T8014] fuse: Unknown parameter 'user_id00000000000000000000' [ 265.058243][ T5295] usb 2-1: string descriptor 0 read error: -71 [ 265.077528][ T5295] usbhid 2-1:0.0: can't add hid device: -71 [ 265.086880][ T5295] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 265.177689][ T5295] usb 2-1: USB disconnect, device number 16 [ 265.369870][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.389430][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.410692][ T5287] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 265.565821][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.584619][ T5287] usb 3-1: Using ep0 maxpacket: 8 [ 265.595194][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.606318][ T5287] usb 3-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 265.666221][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 265.706277][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 217, changing to 11 [ 265.744785][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 25581, setting to 1024 [ 265.799815][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.884146][ T5287] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 265.939852][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 265.965994][ T5287] usb 3-1: Product: syz [ 265.982081][ T5287] usb 3-1: Manufacturer: syz [ 266.000691][ T5287] usb 3-1: SerialNumber: syz [ 266.017264][ T5287] usb 3-1: config 0 descriptor?? [ 266.193781][ T8031] fuse: Bad value for 'fd' [ 266.234622][ T5287] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 266.241964][ T5287] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 266.435213][ T5287] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 266.443801][ T5287] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 266.468616][ T5287] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 266.510138][ T5287] usb 3-1: USB disconnect, device number 23 [ 267.340805][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 268.795574][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 268.803377][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.818719][ T25] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 268.827984][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.836076][ T25] usb 3-1: Product: syz [ 268.840251][ T25] usb 3-1: Manufacturer: syz [ 268.844991][ T25] usb 3-1: SerialNumber: syz [ 268.866662][ T25] usb 3-1: config 0 descriptor?? [ 269.010848][ T25] usb 3-1: no audio or video endpoints found [ 269.120449][ T25] usb 3-1: USB disconnect, device number 24 [ 269.619170][ T8068] loop4: detected capacity change from 0 to 1024 [ 269.793221][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.5.883'. [ 269.812868][ T8070] netlink: 924 bytes leftover after parsing attributes in process `syz.3.882'. [ 269.918746][ T5286] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 270.486192][ T5286] usb 2-1: device descriptor read/64, error -71 [ 271.890683][ T5319] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 272.032835][ T5286] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 272.360711][ T5319] usb 6-1: Using ep0 maxpacket: 32 [ 272.511026][ T5319] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 272.562832][ T5319] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 272.570701][ T5286] usb 2-1: device descriptor read/64, error -71 [ 272.654596][ T5319] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 272.680915][ T5286] usb usb2-port1: attempt power cycle [ 272.685144][ T5319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.728008][ T5319] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.846824][ T5319] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.860200][ T5319] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 272.869455][ T5319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.072911][ T5319] usb 6-1: config 0 descriptor?? [ 273.139940][ T8117] loop3: detected capacity change from 0 to 2048 [ 273.230811][ T8117] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 273.248276][ T8117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.276104][ T5319] usb 6-1: can't set config #0, error -71 [ 273.291975][ T5319] usb 6-1: USB disconnect, device number 13 [ 273.642904][ T5287] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 273.844742][ T5287] usb 1-1: Using ep0 maxpacket: 32 [ 273.872198][ T8128] netlink: 56 bytes leftover after parsing attributes in process `syz.4.900'. [ 273.942830][ T5287] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 273.951583][ T5287] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 273.957912][ T8133] fuse: Bad value for 'fd' [ 273.960189][ T5287] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 273.974977][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.984967][ T5287] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.994966][ T5287] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 274.008238][ T5287] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 274.017410][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.028120][ T5287] usb 1-1: config 0 descriptor?? [ 274.241048][ T5287] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 274.275547][ T8139] netlink: 256 bytes leftover after parsing attributes in process `syz.3.906'. [ 274.301148][ T5287] usb 1-1: USB disconnect, device number 14 [ 274.334797][ T5287] usblp0: removed [ 274.370102][ T8139] openvswitch: netlink: EtherType 0 is less than min 600 [ 274.780696][ T5287] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 274.950808][ T5287] usb 1-1: Using ep0 maxpacket: 32 [ 274.963604][ T5287] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 274.986015][ T5287] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 275.020854][ T5287] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 275.046835][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 275.071795][ T5287] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 275.093376][ T5287] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 275.120229][ T5287] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 275.130257][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.141418][ T5287] usb 1-1: config 0 descriptor?? [ 275.361505][ T5287] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 275.610388][ T5287] usb 1-1: USB disconnect, device number 15 [ 275.629103][ T5287] usblp0: removed [ 275.822571][ T5295] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 276.000992][ T5295] usb 4-1: Using ep0 maxpacket: 8 [ 276.012376][ T5295] usb 4-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 276.038413][ T5295] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 276.077384][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 217, changing to 11 [ 276.119385][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 25581, setting to 1024 [ 276.170494][ T5295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 276.209355][ T5287] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 276.240971][ T5295] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 276.257021][ T5295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 276.280512][ T5295] usb 4-1: Product: syz [ 276.284848][ T5295] usb 4-1: Manufacturer: syz [ 276.305400][ T5295] usb 4-1: SerialNumber: syz [ 276.327272][ T5295] usb 4-1: config 0 descriptor?? [ 276.370784][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 276.392276][ T5287] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 276.423256][ T5287] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 276.472122][ T5287] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 276.514033][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 276.555869][ T5295] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 276.582173][ T5287] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 276.603092][ T5295] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 276.636296][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.693519][ T5287] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 276.739234][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.758766][ T5295] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 276.777287][ T5295] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 276.787040][ T8165] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.916'. [ 276.799714][ T5287] usb 2-1: config 0 descriptor?? [ 276.820001][ T5295] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 276.866355][ T5295] usb 4-1: USB disconnect, device number 10 [ 276.996278][ T8167] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.917'. [ 277.009509][ T8167] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.917'. [ 277.023405][ T5287] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 277.059601][ T5287] usb 2-1: USB disconnect, device number 20 [ 277.069753][ T5287] usblp0: removed [ 277.330023][ T8171] fuse: Bad value for 'fd' [ 277.530894][ T5287] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 277.823141][ T5289] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 277.850772][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 277.863951][ T5287] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 277.908137][ T5287] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 277.992965][ T5289] usb 5-1: Using ep0 maxpacket: 32 [ 278.029958][ T5289] usb 5-1: config index 0 descriptor too short (expected 249, got 27) [ 278.087269][ T5287] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 278.117708][ T5289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.610334][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 278.992880][ T5289] usb 5-1: config 0 has no interfaces? [ 278.998407][ T5289] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 279.010485][ T5287] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 279.020259][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.033396][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.042471][ T5287] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 279.051858][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.121953][ T5289] usb 5-1: config 0 descriptor?? [ 279.127640][ T5287] usb 2-1: config 0 descriptor?? [ 279.357095][ T5287] usb 2-1: can't set config #0, error -71 [ 279.419370][ T5287] usb 2-1: USB disconnect, device number 21 [ 279.810737][ T5287] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 279.991210][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 280.007125][ T5287] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.029779][ T5287] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.069214][ T5287] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.104925][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.149951][ T5287] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.189591][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.249554][ T5287] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.288200][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.339111][ T5287] usb 2-1: config 0 descriptor?? [ 280.486961][ T5288] usb 5-1: USB disconnect, device number 13 [ 280.573774][ T5287] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 280.619482][ T8198] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.929'. [ 280.654300][ T5287] usb 2-1: USB disconnect, device number 22 [ 280.689556][ T5287] usblp0: removed [ 281.100768][ T5287] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 281.280722][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 281.307914][ T5287] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.346905][ T5287] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.390372][ T5287] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.445652][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.484826][ T5287] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.511703][ T8205] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.931'. [ 281.540626][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.571106][ T8205] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.931'. [ 281.601263][ T5287] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.610318][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.674374][ T5287] usb 2-1: config 0 descriptor?? [ 282.124381][ T5287] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.353958][ T5287] usb 2-1: USB disconnect, device number 23 [ 282.363836][ T5287] usblp0: removed [ 282.558686][ T8215] fuse: Unknown parameter '0x0000000000000004' [ 282.995875][ T8218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 283.256566][ T5239] Bluetooth: hci3: ISO packet for unknown connection handle 200 [ 283.330700][ T5287] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 283.458759][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.472298][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.481302][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.489280][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.497536][ T5287] usb 4-1: Using ep0 maxpacket: 32 [ 283.510246][ T5287] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 283.519640][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.530491][ T5287] usb 4-1: config 0 descriptor?? [ 283.539749][ T5287] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 283.715151][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.754572][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.772031][ T5241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.795462][ T5236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.815052][ T5236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 284.366810][ T5287] gspca_nw80x: reg_r err -110 [ 284.380770][ T5287] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 284.391904][ T5236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 284.410875][ T5236] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 284.424601][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.478114][ T8246] binder: 8245:8246 ioctl c0306201 20000080 returned -14 [ 284.486663][ T5289] usb 4-1: USB disconnect, device number 11 [ 284.538314][ T5319] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 284.756284][ T8252] fuse: Unknown parameter '0x0000000000000004' [ 284.842915][ T8232] chnl_net:caif_netlink_parms(): no params data found [ 284.986311][ T8257] netlink: 'syz.0.949': attribute type 29 has an invalid length. [ 285.005533][ T8259] netlink: 'syz.0.949': attribute type 29 has an invalid length. [ 285.063662][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.083155][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.119310][ T8232] bridge_slave_0: entered allmulticast mode [ 285.152491][ T8232] bridge_slave_0: entered promiscuous mode [ 285.187707][ T8239] chnl_net:caif_netlink_parms(): no params data found [ 285.230721][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.267360][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.288808][ T8232] bridge_slave_1: entered allmulticast mode [ 285.307602][ T8232] bridge_slave_1: entered promiscuous mode [ 285.426962][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.465320][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.489187][ T8271] netlink: 256 bytes leftover after parsing attributes in process `syz.0.952'. [ 285.520869][ T5287] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 285.680347][ T5319] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.681302][ T5287] usb 4-1: Using ep0 maxpacket: 8 [ 285.689047][ T5319] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 285.704397][ T5319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.713471][ T5319] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 285.724538][ T5319] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 285.735798][ T5232] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 285.745024][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.756554][ T5287] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 285.772577][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.793869][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.812451][ T5287] usb 4-1: Product: syz [ 285.816686][ T5287] usb 4-1: Manufacturer: syz [ 285.838181][ T8239] bridge_slave_0: entered allmulticast mode [ 285.850620][ T5287] usb 4-1: SerialNumber: syz [ 285.857020][ T8239] bridge_slave_0: entered promiscuous mode [ 285.876900][ T5287] usb 4-1: config 0 descriptor?? [ 285.906164][ T5287] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 285.942868][ T5319] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.952457][ T5319] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.957292][ T8232] team0: Port device team_slave_0 added [ 285.960439][ T5319] usb 2-1: Product: syz [ 285.960463][ T5319] usb 2-1: Manufacturer: syz [ 285.997235][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.004594][ T5236] Bluetooth: hci4: command tx timeout [ 286.014800][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.027181][ T8239] bridge_slave_1: entered allmulticast mode [ 286.037975][ T8239] bridge_slave_1: entered promiscuous mode [ 286.052240][ T8232] team0: Port device team_slave_1 added [ 286.097201][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.122015][ T5287] gspca_vc032x: reg_r err -32 [ 286.129029][ T5287] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 286.144532][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.170524][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.185764][ T5289] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 286.207924][ T8232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.266549][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.284096][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.319544][ T8232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.355610][ T5289] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 286.374285][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.391174][ T5289] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.418446][ T5289] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.459278][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.470900][ T5236] Bluetooth: hci7: command tx timeout [ 286.479786][ T5289] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.505697][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.524246][ T8232] hsr_slave_0: entered promiscuous mode [ 286.550038][ T5289] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.576679][ T8232] hsr_slave_1: entered promiscuous mode [ 286.583268][ T5289] usb 1-1: invalid MIDI out EP 0 [ 286.599801][ T8232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.658648][ T8232] Cannot create hsr debugfs directory [ 286.715884][ T5289] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 286.757669][ T5247] udevd[5247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.792706][ T8239] team0: Port device team_slave_0 added [ 286.836855][ T8239] team0: Port device team_slave_1 added [ 286.915818][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.928629][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.954523][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.972243][ T8239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.998489][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.015017][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.048474][ T8239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.160043][ T8239] hsr_slave_0: entered promiscuous mode [ 287.166548][ T8239] hsr_slave_1: entered promiscuous mode [ 287.186399][ T8239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.200658][ T8239] Cannot create hsr debugfs directory [ 287.246896][ T8232] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.278249][ T5289] usb 1-1: USB disconnect, device number 16 [ 287.420404][ T8232] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.568758][ T8232] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.784641][ T8232] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.905001][ T5319] cdc_wdm 2-1:1.0: skipping garbage [ 287.910271][ T5319] cdc_wdm 2-1:1.0: skipping garbage [ 287.929491][ T5319] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 287.935551][ T5319] cdc_wdm 2-1:1.0: Unknown control protocol [ 287.949585][ T5319] usb 2-1: USB disconnect, device number 24 [ 288.070844][ T5236] Bluetooth: hci4: command tx timeout [ 288.161366][ T8290] binder: 8289:8290 ioctl c0306201 20000080 returned -14 [ 288.551212][ T5236] Bluetooth: hci7: command tx timeout [ 288.856660][ T8303] netlink: 256 bytes leftover after parsing attributes in process `syz.4.963'. [ 289.195691][ T8297] loop1: detected capacity change from 0 to 1024 [ 289.203595][ T5289] usb 4-1: USB disconnect, device number 12 [ 289.958507][ T8232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.013511][ T8232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.127114][ T8239] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.150705][ T5236] Bluetooth: hci4: command tx timeout [ 290.189909][ T8297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.289950][ T8232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.521798][ T8232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.972073][ T5236] Bluetooth: hci7: command tx timeout [ 291.121556][ T8325] binder: 8323:8325 ioctl c0306201 20000080 returned -14 [ 291.535369][ T8239] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.526745][ T5236] Bluetooth: hci4: command tx timeout [ 293.079502][ T5236] Bluetooth: hci7: command tx timeout [ 293.756572][ T8239] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.016912][ T5225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.184623][ T8239] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.317057][ T8232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.424939][ T8232] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.488822][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.496014][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.742513][ T8239] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 294.790938][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.798103][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.844382][ T8239] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 294.889621][ T8232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.937151][ T8232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.972021][ T8239] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 294.983843][ T8239] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.161042][ T8357] binder: 8354:8357 ioctl c0306201 20000080 returned -14 [ 295.339406][ T8239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.527592][ T8239] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.689090][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.696261][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.799744][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.806936][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.834912][ T5286] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 296.022266][ T5286] usb 5-1: Using ep0 maxpacket: 32 [ 296.044228][ T8232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.067016][ T5286] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 296.085698][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.108212][ T8239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.127163][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 296.181863][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.206192][ T8375] fuse: Unknown parameter '0x0000000000000004' [ 296.272846][ T5286] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 296.317330][ T5286] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 296.371714][ T8232] veth0_vlan: entered promiscuous mode [ 296.377654][ T5286] usb 5-1: Product: syz [ 296.394179][ T5286] usb 5-1: Manufacturer: syz [ 296.450404][ T5286] usb 5-1: SerialNumber: syz [ 296.463309][ T8232] veth1_vlan: entered promiscuous mode [ 296.483320][ T5286] usb 5-1: config 0 descriptor?? [ 296.491220][ T8364] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 296.534848][ T5286] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 296.612109][ T5286] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 296.622983][ T8232] veth0_macvtap: entered promiscuous mode [ 296.664959][ T8232] veth1_macvtap: entered promiscuous mode [ 296.724319][ T5286] usb 5-1: USB disconnect, device number 15 [ 296.738834][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.769336][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.788694][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.810023][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.840314][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.852942][ T5286] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 296.899648][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.941429][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.967418][ T8381] loop1: detected capacity change from 0 to 1024 [ 296.994283][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.041213][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.080917][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.134130][ T8381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.139330][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.250727][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.470320][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.951057][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.001472][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.184309][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.216998][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.231513][ T5287] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 298.256985][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.283679][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.300412][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.352530][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.368840][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.380473][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.415589][ T5287] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 298.430692][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.454883][ T5287] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.471698][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.488004][ T5287] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.508230][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.518798][ T5287] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.530871][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.591568][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.664588][ T5225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.701797][ T5287] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.709168][ T5287] usb 4-1: invalid MIDI out EP 0 [ 298.786803][ T8232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.804406][ T8232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.813406][ T8232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.822534][ T8232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.819751][ T5287] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 300.387969][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.393396][ T8414] binder: 8413:8414 ioctl c0306201 20000080 returned -14 [ 300.404788][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.422492][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.430454][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.565503][ T8239] veth0_vlan: entered promiscuous mode [ 300.583676][ T8239] veth1_vlan: entered promiscuous mode [ 300.651059][ T5288] usb 4-1: USB disconnect, device number 13 [ 300.828126][ T8239] veth0_macvtap: entered promiscuous mode [ 300.890091][ T8239] veth1_macvtap: entered promiscuous mode [ 300.935309][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.017627][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.068338][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.112186][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.155846][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.179269][ T8425] fuse: Unknown parameter '0x0000000000000004' [ 301.206715][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.295017][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.329171][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.342938][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.354419][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.428358][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.570721][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.589457][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.615487][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.655629][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.749003][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.784156][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.799890][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.872904][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.882974][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.893550][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.906851][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.917798][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.928143][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.939068][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.948950][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.959459][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.969380][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.979912][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.991686][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.042586][ T8239] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.051790][ T8239] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.060508][ T8239] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.069534][ T8239] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.273430][ T8436] loop3: detected capacity change from 0 to 1024 [ 302.384811][ T8436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.364327][ T5228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.395222][ T5286] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 304.735267][ T8453] binder: 8452:8453 ioctl c0306201 20000080 returned -14 [ 304.751150][ T5286] usb 3-1: Using ep0 maxpacket: 16 [ 304.758782][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.772329][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.831123][ T5286] usb 3-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 304.867838][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.910056][ T5286] usb 3-1: config 0 descriptor?? [ 304.917583][ T7771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.925961][ T5290] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 304.934118][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.942863][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.959180][ T7771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.970976][ T5288] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 305.104276][ T5290] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 305.115261][ T5290] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.126717][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 305.142367][ T5288] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 305.160735][ T5288] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 305.172138][ T5290] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.185198][ T5286] usb 3-1: string descriptor 0 read error: -71 [ 305.206040][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.226784][ T5290] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.236355][ T5286] usbhid 3-1:0.0: can't add hid device: -71 [ 305.244601][ T5286] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 305.252698][ T5288] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 305.269268][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.279684][ T5288] usb 2-1: config 1 has no interface number 0 [ 305.287833][ T5286] usb 3-1: USB disconnect, device number 25 [ 305.298787][ T5288] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 305.325106][ T5290] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.337743][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.346264][ T5290] usb 1-1: invalid MIDI out EP 0 [ 305.408311][ T5288] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 305.477587][ T5290] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 305.594417][ T5288] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 305.618195][ T5288] snd_usb_pod 2-1:1.1: invalid control EP [ 305.634103][ T5288] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 305.657360][ T5288] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 305.689797][ T5288] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 305.797632][ T5295] usb 2-1: USB disconnect, device number 25 [ 305.983424][ T5288] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 306.026771][ T5295] usb 1-1: USB disconnect, device number 17 [ 306.074138][ T8466] loop2: detected capacity change from 0 to 1024 [ 306.160724][ T5288] usb 6-1: Using ep0 maxpacket: 16 [ 306.188171][ T5288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.208542][ T5288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.219903][ T5288] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.247972][ T5288] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 306.271966][ T5288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.300029][ T5288] usb 6-1: config 0 descriptor?? [ 306.590858][ T5290] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 306.770834][ T5290] usb 1-1: Using ep0 maxpacket: 32 [ 306.792627][ T5290] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 306.869077][ T5290] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 306.913005][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 306.933709][ T5290] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 306.966702][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 306.980652][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.017740][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.035588][ T5290] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 307.056740][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.095252][ T5290] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 307.108692][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.150858][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.178680][ T5290] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 307.196181][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.231019][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.239284][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.272056][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.287577][ T5290] usb 1-1: config 0 descriptor?? [ 307.319141][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.356923][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.384889][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.415035][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.439661][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.482136][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.523250][ T5290] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 307.544332][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.583948][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.609395][ T5290] usb 1-1: USB disconnect, device number 18 [ 307.628055][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.649242][ T5290] usblp0: removed [ 307.667451][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.717439][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.745613][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.780175][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.811801][ T5288] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 307.846534][ T5288] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 307.902121][ T5288] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 307.950239][ T5288] microsoft 0003:045E:07DA.0001: no inputs found [ 307.979459][ T5288] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 308.101728][ T5290] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 308.290697][ T5290] usb 1-1: Using ep0 maxpacket: 32 [ 308.313287][ T5290] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 308.339308][ T5290] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 308.380416][ T5290] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 308.424677][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.465036][ T5290] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 308.515314][ T5290] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 308.572133][ T5290] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 308.600717][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.621319][ T5290] usb 1-1: config 0 descriptor?? [ 308.869254][ T5290] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 309.497785][ T5295] usb 1-1: USB disconnect, device number 19 [ 309.599329][ T5295] usblp0: removed [ 310.454487][ T8503] binder: 8502:8503 ioctl c0306201 20000080 returned -14 [ 310.873121][ T8469] ================================================================== [ 310.881207][ T8469] BUG: KASAN: double-free in kref_put+0x4ab/0x7c0 [ 310.887615][ T8469] Free of addr ffff8880273fedc0 by task syz.0.1013/8469 [ 310.894535][ T8469] [ 310.896846][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.0.1013 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 310.907162][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 310.917212][ T8469] Call Trace: [ 310.920480][ T8469] [ 310.923404][ T8469] dump_stack_lvl+0x241/0x360 [ 310.928176][ T8469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.933376][ T8469] ? __pfx__printk+0x10/0x10 [ 310.937985][ T8469] ? _printk+0xd5/0x120 [ 310.942143][ T8469] ? __virt_addr_valid+0x183/0x530 [ 310.947249][ T8469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.952875][ T8469] print_report+0x169/0x550 [ 310.957377][ T8469] ? __virt_addr_valid+0x183/0x530 [ 310.962480][ T8469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.968109][ T8469] ? __virt_addr_valid+0x45f/0x530 [ 310.973215][ T8469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.978837][ T8469] ? __phys_addr+0xba/0x170 [ 310.983335][ T8469] ? kref_put+0x4ab/0x7c0 [ 310.987652][ T8469] kasan_report_invalid_free+0x11a/0x140 [ 310.993283][ T8469] ? kref_put+0x4ab/0x7c0 [ 310.997601][ T8469] ? kref_put+0x4ab/0x7c0 [ 311.001917][ T8469] check_slab_allocation+0xc6/0x110 [ 311.007112][ T8469] ? kref_put+0x4ab/0x7c0 [ 311.011621][ T8469] kfree+0x151/0x440 [ 311.015511][ T8469] ? kref_put+0x4ab/0x7c0 [ 311.019827][ T8469] kref_put+0x4ab/0x7c0 [ 311.023974][ T8469] raw_release+0x135/0x1e0 [ 311.028404][ T8469] ? __pfx_raw_release+0x10/0x10 [ 311.033340][ T8469] __fput+0x241/0x880 [ 311.037323][ T8469] task_work_run+0x251/0x310 [ 311.041909][ T8469] ? __pfx_task_work_run+0x10/0x10 [ 311.047014][ T8469] ? syscall_exit_to_user_mode+0xa3/0x370 [ 311.052734][ T8469] syscall_exit_to_user_mode+0x168/0x370 [ 311.058371][ T8469] do_syscall_64+0x100/0x230 [ 311.062952][ T8469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.068575][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.074469][ T8469] RIP: 0033:0x7fa77857dff9 [ 311.078880][ T8469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.098481][ T8469] RSP: 002b:00007ffde37baae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 311.106911][ T8469] RAX: 0000000000000000 RBX: 00007fa778737a80 RCX: 00007fa77857dff9 [ 311.114873][ T8469] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 311.122835][ T8469] RBP: 00007fa778737a80 R08: 00007fa778722000 R09: 00007ffde37baddf [ 311.130796][ T8469] R10: 00000000003f7b58 R11: 0000000000000246 R12: 000000000004c2d8 [ 311.138754][ T8469] R13: 00007ffde37babf0 R14: 0000000000000032 R15: ffffffffffffffff [ 311.146725][ T8469] [ 311.149728][ T8469] [ 311.152035][ T8469] Allocated by task 8471: [ 311.156360][ T8469] kasan_save_track+0x3f/0x80 [ 311.161029][ T8469] __kasan_kmalloc+0x98/0xb0 [ 311.165609][ T8469] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 311.172022][ T8469] memdup_user+0x2b/0xc0 [ 311.176251][ T8469] raw_ioctl+0xd0c/0x3cd0 [ 311.180584][ T8469] __se_sys_ioctl+0xfb/0x170 [ 311.185173][ T8469] do_syscall_64+0xf3/0x230 [ 311.189662][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.195552][ T8469] [ 311.197859][ T8469] Freed by task 8470: [ 311.201819][ T8469] kasan_save_track+0x3f/0x80 [ 311.206484][ T8469] kasan_save_free_info+0x40/0x50 [ 311.211504][ T8469] __kasan_slab_free+0x59/0x70 [ 311.216256][ T8469] kfree+0x1a0/0x440 [ 311.220142][ T8469] kref_put+0x4ab/0x7c0 [ 311.224290][ T8469] raw_release+0x135/0x1e0 [ 311.228705][ T8469] __fput+0x241/0x880 [ 311.232683][ T8469] __x64_sys_close+0x7f/0x110 [ 311.237353][ T8469] do_syscall_64+0xf3/0x230 [ 311.241845][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.247742][ T8469] [ 311.250050][ T8469] The buggy address belongs to the object at ffff8880273fedc0 [ 311.250050][ T8469] which belongs to the cache kmalloc-16 of size 16 [ 311.263917][ T8469] The buggy address is located 0 bytes inside of [ 311.263917][ T8469] 16-byte region [ffff8880273fedc0, ffff8880273fedd0) [ 311.276929][ T8469] [ 311.279250][ T8469] The buggy address belongs to the physical page: [ 311.285641][ T8469] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880273feee0 pfn:0x273fe [ 311.295695][ T8469] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 311.303744][ T8469] page_type: f5(slab) [ 311.307711][ T8469] raw: 00fff00000000200 ffff88801ac41640 ffffea00009ccdd0 ffffea0000c21350 [ 311.316283][ T8469] raw: ffff8880273feee0 000000000080007f 00000001f5000000 0000000000000000 [ 311.324962][ T8469] page dumped because: kasan: bad access detected [ 311.331360][ T8469] page_owner tracks the page as allocated [ 311.337141][ T8469] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5222, tgid 5222 (syz-executor), ts 133796881929, free_ts 133752065822 [ 311.356841][ T8469] post_alloc_hook+0x1f3/0x230 [ 311.361609][ T8469] get_page_from_freelist+0x3045/0x3190 [ 311.367233][ T8469] __alloc_pages_noprof+0x256/0x6c0 [ 311.372424][ T8469] alloc_slab_page+0x59/0x120 [ 311.377103][ T8469] allocate_slab+0x5a/0x2f0 [ 311.381596][ T8469] ___slab_alloc+0xcd1/0x14b0 [ 311.386275][ T8469] __slab_alloc+0x58/0xa0 [ 311.390603][ T8469] __kmalloc_node_noprof+0x286/0x440 [ 311.395883][ T8469] __kvmalloc_node_noprof+0x72/0x190 [ 311.401158][ T8469] xt_replace_table+0x1a2/0x780 [ 311.406008][ T8469] __do_replace+0x1ae/0xa40 [ 311.410494][ T8469] do_ipt_set_ctl+0xf02/0x1250 [ 311.415268][ T8469] nf_setsockopt+0x297/0x2c0 [ 311.419942][ T8469] do_sock_setsockopt+0x3b1/0x720 [ 311.424971][ T8469] __sys_setsockopt+0x1a2/0x250 [ 311.429809][ T8469] __x64_sys_setsockopt+0xb5/0xd0 [ 311.434824][ T8469] page last free pid 6174 tgid 6172 stack trace: [ 311.441134][ T8469] free_unref_folios+0xf12/0x18d0 [ 311.446146][ T8469] folios_put_refs+0x76c/0x860 [ 311.450900][ T8469] free_pages_and_swap_cache+0x5c8/0x690 [ 311.456522][ T8469] tlb_flush_mmu+0x3a3/0x680 [ 311.461103][ T8469] tlb_finish_mmu+0xd4/0x200 [ 311.465680][ T8469] exit_mmap+0x496/0xc40 [ 311.469905][ T8469] __mmput+0x115/0x390 [ 311.473974][ T8469] exit_mm+0x220/0x310 [ 311.478029][ T8469] do_exit+0x9b2/0x28e0 [ 311.482172][ T8469] do_group_exit+0x207/0x2c0 [ 311.486748][ T8469] get_signal+0x16a3/0x1740 [ 311.491244][ T8469] arch_do_signal_or_restart+0x96/0x860 [ 311.496785][ T8469] syscall_exit_to_user_mode+0xc9/0x370 [ 311.502330][ T8469] do_syscall_64+0x100/0x230 [ 311.506906][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.512805][ T8469] [ 311.515114][ T8469] Memory state around the buggy address: [ 311.520734][ T8469] ffff8880273fec80: 00 00 fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 311.528797][ T8469] ffff8880273fed00: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 05 fc fc [ 311.536847][ T8469] >ffff8880273fed80: fa fb fc fc fa fb fc fc fa fb fc fc 00 03 fc fc [ 311.544895][ T8469] ^ [ 311.551035][ T8469] ffff8880273fee00: 00 00 fc fc 00 05 fc fc 00 00 fc fc 00 00 fc fc [ 311.559082][ T8469] ffff8880273fee80: fa fb fc fc 00 00 fc fc 00 03 fc fc fa fb fc fc [ 311.567128][ T8469] ================================================================== [ 311.575191][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.654602][ T5295] usb 6-1: USB disconnect, device number 14 [ 311.749185][ T8469] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 311.756430][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.0.1013 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 311.766772][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 311.776821][ T8469] Call Trace: [ 311.780094][ T8469] [ 311.783012][ T8469] dump_stack_lvl+0x241/0x360 [ 311.787685][ T8469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.792876][ T8469] ? __pfx__printk+0x10/0x10 [ 311.797467][ T8469] ? preempt_schedule+0xe1/0xf0 [ 311.802322][ T8469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.807951][ T8469] ? vscnprintf+0x5d/0x90 [ 311.812282][ T8469] panic+0x349/0x880 [ 311.816181][ T8469] ? check_panic_on_warn+0x21/0xb0 [ 311.821286][ T8469] ? __pfx_panic+0x10/0x10 [ 311.825699][ T8469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.831328][ T8469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.836955][ T8469] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 311.842939][ T8469] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 311.849267][ T8469] ? print_report+0x502/0x550 [ 311.853943][ T8469] check_panic_on_warn+0x86/0xb0 [ 311.858877][ T8469] ? kref_put+0x4ab/0x7c0 [ 311.863200][ T8469] end_report+0x77/0x160 [ 311.867436][ T8469] kasan_report_invalid_free+0x12a/0x140 [ 311.873063][ T8469] ? kref_put+0x4ab/0x7c0 [ 311.877387][ T8469] ? kref_put+0x4ab/0x7c0 [ 311.881705][ T8469] check_slab_allocation+0xc6/0x110 [ 311.886899][ T8469] ? kref_put+0x4ab/0x7c0 [ 311.891233][ T8469] kfree+0x151/0x440 [ 311.895154][ T8469] ? kref_put+0x4ab/0x7c0 [ 311.899501][ T8469] kref_put+0x4ab/0x7c0 [ 311.903665][ T8469] raw_release+0x135/0x1e0 [ 311.908084][ T8469] ? __pfx_raw_release+0x10/0x10 [ 311.913022][ T8469] __fput+0x241/0x880 [ 311.917008][ T8469] task_work_run+0x251/0x310 [ 311.921601][ T8469] ? __pfx_task_work_run+0x10/0x10 [ 311.926711][ T8469] ? syscall_exit_to_user_mode+0xa3/0x370 [ 311.932438][ T8469] syscall_exit_to_user_mode+0x168/0x370 [ 311.938071][ T8469] do_syscall_64+0x100/0x230 [ 311.942677][ T8469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.948386][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.954329][ T8469] RIP: 0033:0x7fa77857dff9 [ 311.958759][ T8469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.978381][ T8469] RSP: 002b:00007ffde37baae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 311.986794][ T8469] RAX: 0000000000000000 RBX: 00007fa778737a80 RCX: 00007fa77857dff9 [ 311.994759][ T8469] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 312.002722][ T8469] RBP: 00007fa778737a80 R08: 00007fa778722000 R09: 00007ffde37baddf [ 312.010685][ T8469] R10: 00000000003f7b58 R11: 0000000000000246 R12: 000000000004c2d8 [ 312.018643][ T8469] R13: 00007ffde37babf0 R14: 0000000000000032 R15: ffffffffffffffff [ 312.026614][ T8469] [ 312.029762][ T8469] Kernel Offset: disabled [ 312.034074][ T8469] Rebooting in 86400 seconds..