last executing test programs: 14.164750291s ago: executing program 2 (id=320): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') close_range(r0, 0xffffffffffffffff, 0x0) 14.018507343s ago: executing program 2 (id=321): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) 11.769079968s ago: executing program 0 (id=328): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000d80ffff", 0x8) 9.741025629s ago: executing program 0 (id=333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) 9.425408834s ago: executing program 2 (id=335): r0 = fsopen(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) listen(r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee", 0x15}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 8.698715975s ago: executing program 0 (id=336): capset(0x0, &(0x7f00000000c0)={0x200000, 0x240001, 0x8, 0x1007, 0xfffffffd}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xc7}, 0x18, 0x0}, 0xee) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r2, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) ioctl$KVM_RUN(r2, 0xae80, 0x0) read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x2020) 8.620976966s ago: executing program 2 (id=337): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x7079, 0x1000, 0x14, 0x28b}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3af6, 0xbebb, 0x0, 0x0, 0xfffffea9) 6.029557577s ago: executing program 1 (id=342): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a001200", 0x3c, 0x0, 0x0, 0x0) 5.762529661s ago: executing program 0 (id=344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) 5.720609762s ago: executing program 1 (id=345): r0 = fsopen(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) listen(r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee", 0x15}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 4.720758697s ago: executing program 3 (id=346): mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f0000000340)={0x0, 0x100000111, 0x9, 0x1ff, 0x8, 0x200000001, 0x48cd, 0x0, 0xfff}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1813c1, 0x0) fchown(r1, 0xee01, 0x0) 4.552813259s ago: executing program 0 (id=347): mkdir(&(0x7f0000000340)='./file0\x00', 0x192) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_connect(0x0, 0x3bf, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r3, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = dup(r4) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0x40082102, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket(0xa, 0x5, 0x0) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) futex(&(0x7f0000000040)=0x2, 0x5, 0x2, 0x0, &(0x7f0000004000)=0x2, 0x8a217ffc) 3.978730848s ago: executing program 1 (id=348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1802"], 0x0, 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0) 3.956139389s ago: executing program 3 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x1e3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.093476962s ago: executing program 1 (id=350): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f0000000b80)) 2.342224644s ago: executing program 3 (id=351): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdd, 0x8}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 1.628166225s ago: executing program 3 (id=352): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000d80ffff", 0x8) 1.552885356s ago: executing program 1 (id=353): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000", 0x5a, 0x0, 0x0, 0x0) 1.475847387s ago: executing program 1 (id=354): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0) 1.039742014s ago: executing program 2 (id=355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) 967.392465ms ago: executing program 0 (id=356): socket$kcm(0x2a, 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x142, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x57, 0xac, 0x51, 0x20, 0x1608, 0x308, 0x103a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x2, 0x8, 0x4, 0x20, 0x26, [{{0x9, 0x4, 0x9c, 0xf1, 0x1, 0x9, 0x2, 0x1d, 0xaa, [], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x8, 0xff}}]}}, {{0x9, 0x4, 0xf8, 0x5, 0x7, 0x5d, 0xc2, 0x36, 0x97, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0xa7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xe}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x2, 0x6, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3}, @generic={0xb, 0x3916b9b4465e5531, "d8abead468526b88e7"}]}}, {{0x9, 0x5, 0x4488441534d210c2, 0x10, 0x400, 0x8, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xfe00}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x10, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x4, 0xa, 0xb6, [@generic={0xa6, 0x1, "7d77743bb72b0dee7a0f332a616bb1903696f7b5f1c858f85c8c7b5810cd5cae3afbdc31bb90d73fffe460f14dfe1d6c6b16db9ba390ac5adfb2eb88fc5ceb8b4f2a9430e28aa2ae28666d551817ce875b4343e580aa46bb73ce306b75c8e9c2178e063b87698afd99f1ac2575de063c607cb92df46d6da592b90e7ee10bfa1c7c1acc7f26010166b2be4f00d54f75f82d8aadadaad7ebad5352017546d2d1b2fdd66988"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xc, 0xff, 0x29}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 676.70134ms ago: executing program 3 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0xa8, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x72, 0xc, "cb2f62b67c459bc2cee920eaaa71f858006eb78d5dabe95934f8878570b318bb800306005f9139c110984120195a34170973c706b1caefc27a01dc398a311df6b98864e6902bfbd0d8043d02c5c1406869244f4c05c8d062abaf3478bb1edfd221c0e3bb95ac5fe0922a6357f171"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x0, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x7, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x14c}}, 0x0) 640.74745ms ago: executing program 3 (id=358): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0xfffffea6, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x9, "919f"}, @main=@item_012={0x1, 0x0, 0x9, "ed"}]}}, 0x0}, 0x0) 0s ago: executing program 2 (id=359): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) r8 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000380)="5e73663bf4082f7c6c9ed7f09d6dd7be5a06dfd645630500c1a303434a36bfc41f1c1eb3c4f54167ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 84.449401][ T5761] cgroup: Unknown subsys name 'net' [ 84.589706][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.341818][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.667504][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.676342][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.686010][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.694654][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.711013][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.726727][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.750251][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.757059][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.764802][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.767866][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.772914][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.788044][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.789442][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.796024][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.803222][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.809687][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.816739][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.824000][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.838381][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.839422][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.854594][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.864478][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.872949][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.880722][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.385342][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 89.498555][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 89.586666][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.594392][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.602497][ T5771] bridge_slave_0: entered allmulticast mode [ 89.609684][ T5771] bridge_slave_0: entered promiscuous mode [ 89.647485][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 89.672656][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.679877][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.687592][ T5771] bridge_slave_1: entered allmulticast mode [ 89.695271][ T5771] bridge_slave_1: entered promiscuous mode [ 89.703951][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 89.808347][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.832837][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.840227][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.847544][ T5773] bridge_slave_0: entered allmulticast mode [ 89.855218][ T5773] bridge_slave_0: entered promiscuous mode [ 89.888578][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.910529][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.917782][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.925090][ T5773] bridge_slave_1: entered allmulticast mode [ 89.932739][ T5773] bridge_slave_1: entered promiscuous mode [ 89.996324][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.003595][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.012286][ T5772] bridge_slave_0: entered allmulticast mode [ 90.019522][ T5772] bridge_slave_0: entered promiscuous mode [ 90.048950][ T5771] team0: Port device team_slave_0 added [ 90.058962][ T5771] team0: Port device team_slave_1 added [ 90.078804][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.086195][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.093792][ T5772] bridge_slave_1: entered allmulticast mode [ 90.101012][ T5772] bridge_slave_1: entered promiscuous mode [ 90.147736][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.184167][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.192103][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.199427][ T5774] bridge_slave_0: entered allmulticast mode [ 90.206837][ T5774] bridge_slave_0: entered promiscuous mode [ 90.215186][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.222390][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.248391][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.275401][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.301146][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.314026][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.323908][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.331527][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.338775][ T5774] bridge_slave_1: entered allmulticast mode [ 90.346001][ T5774] bridge_slave_1: entered promiscuous mode [ 90.366606][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.373658][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.399685][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.441283][ T5773] team0: Port device team_slave_0 added [ 90.503420][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.515855][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.526999][ T5773] team0: Port device team_slave_1 added [ 90.549608][ T5772] team0: Port device team_slave_0 added [ 90.558712][ T5772] team0: Port device team_slave_1 added [ 90.630889][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.637983][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.664699][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.702087][ T5774] team0: Port device team_slave_0 added [ 90.714664][ T5771] hsr_slave_0: entered promiscuous mode [ 90.721436][ T5771] hsr_slave_1: entered promiscuous mode [ 90.729165][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.736582][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.762693][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.780757][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.787771][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.813782][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.826758][ T5774] team0: Port device team_slave_1 added [ 90.860398][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.867526][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.894813][ T5787] Bluetooth: hci1: command tx timeout [ 90.901175][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.914355][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.921486][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.947798][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.967252][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.974434][ T5787] Bluetooth: hci2: command tx timeout [ 90.974662][ T5787] Bluetooth: hci3: command tx timeout [ 90.974796][ T5787] Bluetooth: hci0: command tx timeout [ 90.986262][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.017990][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.109180][ T5773] hsr_slave_0: entered promiscuous mode [ 91.116106][ T5773] hsr_slave_1: entered promiscuous mode [ 91.122691][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.131246][ T5773] Cannot create hsr debugfs directory [ 91.169762][ T5772] hsr_slave_0: entered promiscuous mode [ 91.176605][ T5772] hsr_slave_1: entered promiscuous mode [ 91.183555][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.191662][ T5772] Cannot create hsr debugfs directory [ 91.258324][ T5774] hsr_slave_0: entered promiscuous mode [ 91.265323][ T5774] hsr_slave_1: entered promiscuous mode [ 91.272272][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.279870][ T5774] Cannot create hsr debugfs directory [ 91.692408][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.711444][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.723000][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.735615][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.805057][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.844905][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.857270][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.877120][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.948598][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.959302][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.993036][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.004100][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.066064][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.083715][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.096644][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.123748][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.175281][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.221773][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.255534][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.262988][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.289830][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.297055][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.334340][ T9] cfg80211: failed to load regulatory.db [ 92.354372][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.442988][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.467097][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.492021][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.499211][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.520574][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.527780][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.552657][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.601296][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.616527][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.648654][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.656029][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.705193][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.712576][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.756743][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.809078][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.816354][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.867752][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.875048][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.981289][ T5787] Bluetooth: hci1: command tx timeout [ 93.051272][ T5787] Bluetooth: hci0: command tx timeout [ 93.056852][ T5787] Bluetooth: hci3: command tx timeout [ 93.058497][ T50] Bluetooth: hci2: command tx timeout [ 93.072873][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.170554][ T5771] veth0_vlan: entered promiscuous mode [ 93.197620][ T5771] veth1_vlan: entered promiscuous mode [ 93.307773][ T5771] veth0_macvtap: entered promiscuous mode [ 93.335708][ T5771] veth1_macvtap: entered promiscuous mode [ 93.394601][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.420931][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.459031][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.474902][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484561][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.495412][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.549418][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.584650][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.644468][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.730626][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.746087][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.805560][ T5773] veth0_vlan: entered promiscuous mode [ 93.805582][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.823937][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.844856][ T5772] veth0_vlan: entered promiscuous mode [ 93.864743][ T5772] veth1_vlan: entered promiscuous mode [ 93.913753][ T5773] veth1_vlan: entered promiscuous mode [ 93.958770][ T5774] veth0_vlan: entered promiscuous mode [ 94.013978][ T5774] veth1_vlan: entered promiscuous mode [ 94.031817][ T5772] veth0_macvtap: entered promiscuous mode [ 94.059885][ T5772] veth1_macvtap: entered promiscuous mode [ 94.078273][ T5773] veth0_macvtap: entered promiscuous mode [ 94.119329][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.132870][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.146545][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.159233][ T5773] veth1_macvtap: entered promiscuous mode [ 94.186771][ T5774] veth0_macvtap: entered promiscuous mode [ 94.203184][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.217836][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.231709][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.248483][ T5774] veth1_macvtap: entered promiscuous mode [ 94.314469][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.424708][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.460879][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.470910][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.937295][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.952188][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.990338][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.001491][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.013845][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.061989][ T5780] Bluetooth: hci1: command tx timeout [ 95.070837][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.083169][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.094471][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.105806][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.119602][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.129918][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.141058][ T5780] Bluetooth: hci2: command tx timeout [ 95.141114][ T50] Bluetooth: hci3: command tx timeout [ 95.146500][ T5780] Bluetooth: hci0: command tx timeout [ 95.160457][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.170932][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.181890][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.192322][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.203067][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.215538][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.252367][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.270347][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.290044][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.311392][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.321464][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.334372][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.348116][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.366004][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.377939][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.387334][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.398857][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.423209][ T5871] UBIFS error (pid: 5871): cannot open "", error -22 [ 95.459219][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.475864][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.477677][ T5871] overlayfs: failed to resolve './file1': -2 [ 95.485621][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499706][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.530718][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.532975][ T5871] tmpfs: Bad value for 'huge' [ 95.538621][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.710709][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.720802][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.743387][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.790373][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.892558][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.906277][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.044269][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.078193][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.630042][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.638001][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.990516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.999111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.272783][ T5780] Bluetooth: hci1: command tx timeout [ 97.272954][ T5787] Bluetooth: hci3: command tx timeout [ 97.278268][ T5780] Bluetooth: hci2: command tx timeout [ 97.284394][ T50] Bluetooth: hci0: command tx timeout [ 97.371150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.763176][ T5893] netlink: 'syz.3.9': attribute type 5 has an invalid length. [ 97.837227][ T5896] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 97.847848][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.857209][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.941199][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.948791][ T5896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.957885][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.965762][ T5896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.997560][ T5896] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.145023][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.189263][ T5818] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 98.210823][ T5828] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.420528][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 98.440514][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.441467][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.454816][ T5828] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 98.471753][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.480879][ T5828] usb 4-1: Product: syz [ 98.485664][ T5828] usb 4-1: Manufacturer: syz [ 98.491542][ T5828] usb 4-1: SerialNumber: syz [ 98.497513][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 98.526551][ T5828] usb 4-1: config 0 descriptor?? [ 98.582885][ T5828] mcba_usb 4-1:0.0: Can't find endpoints [ 98.651457][ T5818] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.672665][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.710872][ T5818] usb 3-1: config 0 has no interface number 0 [ 98.721749][ T5818] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 98.734941][ T9] usb 2-1: config 0 descriptor?? [ 98.748169][ T9] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 98.755647][ T5818] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 98.790384][ T5818] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.830212][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.858383][ T5818] usb 3-1: config 0 descriptor?? [ 98.865035][ T27] usb 4-1: USB disconnect, device number 2 [ 98.880732][ T5896] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 98.899609][ T5897] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.919622][ T5896] qnx6: wrong signature (magic) in superblock #1. [ 98.929238][ T5896] qnx6: unable to read the first superblock [ 98.973255][ T5818] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 98.989233][ T9] pwc: send_video_command error -71 [ 98.996007][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 99.008768][ T5889] block nbd1: shutting down sockets [ 99.034982][ T5896] syz.0.10 (5896) used greatest stack depth: 19880 bytes left [ 99.037382][ T9] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 99.080438][ T9] usb 2-1: USB disconnect, device number 2 [ 99.191250][ T5766] usb 3-1: USB disconnect, device number 2 [ 100.566059][ T5923] netlink: 'syz.3.19': attribute type 27 has an invalid length. [ 101.302344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 101.416631][ T5926] use of bytesused == 0 is deprecated and will be removed in the future, [ 101.425564][ T5926] use the actual size instead. [ 101.585544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.620644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.939619][ T5918] futex_wake_op: syz.2.18 tries to shift op by 535; fix this program [ 102.412040][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.419963][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.943857][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.008602][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.675255][ T5923] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.685147][ T5923] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.694662][ T5923] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.704227][ T5923] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.947316][ T5927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.20'. [ 104.980325][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.980704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.987780][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.237504][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 105.252926][ T5787] CPU: 1 PID: 5787 Comm: kworker/u5:7 Not tainted 6.6.95-syzkaller #0 [ 105.261176][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.271296][ T5787] Workqueue: hci3 hci_rx_work [ 105.276078][ T5787] Call Trace: [ 105.279413][ T5787] [ 105.282395][ T5787] dump_stack_lvl+0x16c/0x230 [ 105.287136][ T5787] ? show_regs_print_info+0x20/0x20 [ 105.292397][ T5787] ? load_image+0x3b0/0x3b0 [ 105.296983][ T5787] sysfs_create_dir_ns+0x256/0x280 [ 105.302146][ T5787] ? hci_rx_work+0x43a/0xd80 [ 105.306791][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 105.311521][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 105.316775][ T5787] kobject_add_internal+0x6b8/0xc70 [ 105.322042][ T5787] kobject_add+0x156/0x220 [ 105.326529][ T5787] ? __rwlock_init+0x150/0x150 [ 105.331359][ T5787] ? kobject_init+0x1e0/0x1e0 [ 105.336087][ T5787] ? _raw_spin_unlock+0x28/0x40 [ 105.341005][ T5787] ? get_device_parent+0x366/0x390 [ 105.346173][ T5787] device_add+0x408/0xc20 [ 105.350559][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 105.355563][ T5787] le_conn_complete_evt+0xc37/0x1220 [ 105.360899][ T5787] ? hci_event_packet+0x4a7/0x1210 [ 105.366075][ T5787] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 105.372398][ T5787] ? __copy_skb_header+0xa7/0x550 [ 105.377483][ T5787] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 105.383173][ T5787] ? skb_pull_data+0xfb/0x200 [ 105.387906][ T5787] hci_le_conn_complete_evt+0x187/0x440 [ 105.393518][ T5787] ? hci_remote_host_features_evt+0x160/0x160 [ 105.399640][ T5787] hci_event_packet+0x795/0x1210 [ 105.404727][ T5787] ? bis_list+0x290/0x290 [ 105.409118][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 105.414367][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 105.419717][ T5787] hci_rx_work+0x43a/0xd80 [ 105.424216][ T5787] ? process_scheduled_works+0x957/0x15b0 [ 105.429999][ T5787] process_scheduled_works+0xa45/0x15b0 [ 105.435634][ T5787] ? assign_work+0x400/0x400 [ 105.440286][ T5787] ? assign_work+0x39e/0x400 [ 105.444938][ T5787] worker_thread+0xa55/0xfc0 [ 105.449611][ T5787] kthread+0x2fa/0x390 [ 105.453718][ T5787] ? pr_cont_work+0x560/0x560 [ 105.458444][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 105.463258][ T5787] ret_from_fork+0x48/0x80 [ 105.467718][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 105.472356][ T5787] ret_from_fork_asm+0x11/0x20 [ 105.477185][ T5787] [ 105.481831][ T5787] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 105.497259][ T5787] Bluetooth: hci3: failed to register connection device [ 106.510565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.519239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.381681][ T5970] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 107.381681][ T5970] program syz.2.29 not setting count and/or reply_len properly [ 108.192268][ T28] audit: type=1326 audit(1751244437.858:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effc7f8e929 code=0x0 [ 108.287107][ T5975] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.550216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 110.061122][ T5987] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 110.086876][ T5987] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 110.128516][ T5987] team0: Device ipvlan1 failed to register rx_handler [ 110.184835][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 110.220238][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.420360][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 110.429124][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.437735][ T5818] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.440208][ T23] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 110.459476][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.492516][ T23] usb 1-1: config 0 descriptor?? [ 110.620161][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 110.632132][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.643228][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.653790][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 110.666858][ T5818] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 110.676328][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.694302][ T5818] usb 3-1: config 0 descriptor?? [ 110.955718][ T23] hid-u2fzero 0003:20A0:4287.0001: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.0-1/input0 [ 110.988536][ T23] hid-u2fzero 0003:20A0:4287.0001: NitroKey U2F LED initialised [ 111.134397][ T5818] logitech 0003:046D:C293.0002: nested delimiters [ 111.153339][ T23] hid-u2fzero 0003:20A0:4287.0001: hid_hw_output_report failed: -71 [ 111.171032][ T5818] logitech 0003:046D:C293.0002: item 0 4 2 10 parsing failed [ 111.189059][ T23] hid-u2fzero 0003:20A0:4287.0001: NitroKey U2F RNG initialised [ 111.197917][ T5818] logitech 0003:046D:C293.0002: parse failed [ 111.224570][ T5818] logitech: probe of 0003:046D:C293.0002 failed with error -22 [ 111.249476][ T23] usb 1-1: USB disconnect, device number 2 [ 111.977183][ T5828] usb 3-1: USB disconnect, device number 3 [ 113.427113][ T6030] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.650265][ T5818] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.841340][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 113.854031][ T5818] usb 2-1: config 8 has an invalid interface number: 156 but max is 1 [ 113.864963][ T5818] usb 2-1: config 8 has an invalid interface number: 248 but max is 1 [ 113.877866][ T5818] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 113.889277][ T5818] usb 2-1: config 8 has no interface number 0 [ 113.895832][ T5818] usb 2-1: config 8 has no interface number 1 [ 113.908452][ T5818] usb 2-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 113.920223][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.920252][ T5818] usb 2-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 113.943582][ T5818] usb 2-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 113.955937][ T5818] usb 2-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 113.971849][ T5818] usb 2-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 113.984533][ T5818] usb 2-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 113.995803][ T5818] usb 2-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 114.006560][ T5818] usb 2-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 114.018639][ T5818] usb 2-1: config 8 interface 156 has no altsetting 0 [ 114.026217][ T5818] usb 2-1: config 8 interface 248 has no altsetting 0 [ 114.037444][ T5818] usb 2-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 114.071527][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.091805][ T5818] usb 2-1: Product: syz [ 114.096038][ T5818] usb 2-1: Manufacturer: syz [ 114.100211][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 114.110740][ T5818] usb 2-1: SerialNumber: syz [ 114.157481][ T23] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 114.180206][ T23] usb 4-1: config 0 has no interface number 0 [ 114.186780][ T23] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.247023][ T23] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 114.268862][ T23] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 114.292836][ T23] usb 4-1: Product: syz [ 114.317191][ T23] usb 4-1: SerialNumber: syz [ 114.401397][ T23] usb 4-1: config 0 descriptor?? [ 114.593508][ T23] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 115.021566][ T5818] hub 2-1:8.156: Invalid hub with more than one config or interface [ 115.029779][ T5818] hub: probe of 2-1:8.156 failed with error -22 [ 115.335047][ T5818] io_ti 2-1:8.156: required endpoints missing [ 115.344890][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.347926][ T5818] io_ti 2-1:8.248: required endpoints missing [ 115.367649][ T5818] usb 2-1: USB disconnect, device number 3 [ 115.400639][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.710398][ T6054] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.363527][ T6067] fuse: Unknown parameter 'grou00000000000000000000' [ 117.790355][ T5828] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.814267][ T968] usb 4-1: USB disconnect, device number 3 [ 118.040540][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 118.107936][ T5828] usb 2-1: config 8 has an invalid interface number: 156 but max is 1 [ 118.196480][ T5828] usb 2-1: config 8 has an invalid interface number: 248 but max is 1 [ 118.274066][ T5828] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 118.369804][ T5828] usb 2-1: config 8 has no interface number 0 [ 118.432899][ T5828] usb 2-1: config 8 has no interface number 1 [ 118.499118][ T5828] usb 2-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 118.611235][ T5828] usb 2-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 118.722147][ T5828] usb 2-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 118.821882][ T5828] usb 2-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 118.867547][ T5828] usb 2-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 118.910390][ T5828] usb 2-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 118.949227][ T5828] usb 2-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 118.968285][ T5828] usb 2-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 118.988154][ T5828] usb 2-1: config 8 interface 156 has no altsetting 0 [ 118.996768][ T5828] usb 2-1: config 8 interface 248 has no altsetting 0 [ 119.012934][ T5828] usb 2-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 119.052976][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.065669][ T5828] usb 2-1: Product: syz [ 119.076647][ T5828] usb 2-1: Manufacturer: syz [ 119.085960][ T5828] usb 2-1: SerialNumber: syz [ 119.220387][ T968] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.300444][ T5828] hub 2-1:8.156: Invalid hub with more than one config or interface [ 119.314603][ T5828] hub: probe of 2-1:8.156 failed with error -22 [ 119.321741][ T5828] io_ti 2-1:8.156: required endpoints missing [ 119.334512][ T5828] io_ti 2-1:8.248: required endpoints missing [ 119.347403][ T5828] usb 2-1: USB disconnect, device number 4 [ 119.400602][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 119.409526][ T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.421534][ T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.431369][ T968] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 119.444446][ T968] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 119.453703][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.464358][ T968] usb 1-1: config 0 descriptor?? [ 119.883586][ T968] logitech 0003:046D:C293.0003: nested delimiters [ 119.914164][ T968] logitech 0003:046D:C293.0003: item 0 4 2 10 parsing failed [ 119.925754][ T968] logitech 0003:046D:C293.0003: parse failed [ 119.933088][ T968] logitech: probe of 0003:046D:C293.0003 failed with error -22 [ 120.617026][ T5835] usb 1-1: USB disconnect, device number 3 [ 120.669627][ T6085] program syz.2.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.787473][ T6093] program syz.2.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.797549][ T6093] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 120.804493][ T6099] process 'syz.3.71' launched './file2' with NULL argv: empty string added [ 120.969695][ T6109] fuse: Unknown parameter 'grou00000000000000000000' [ 122.749481][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 122.837265][ T6127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.76'. [ 123.638196][ T6136] fuse: Unknown parameter 'grou00000000000000000000' [ 123.640632][ T5818] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.701485][ T6134] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 123.746243][ T6134] netlink: 'syz.0.81': attribute type 10 has an invalid length. [ 123.772043][ T6134] team0: Device ipvlan1 failed to register rx_handler [ 123.840213][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 123.935974][ T5818] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 124.020980][ T5818] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 124.060352][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.094520][ T5818] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 124.166434][ T5818] usb 3-1: config 8 has no interface number 0 [ 124.205106][ T5818] usb 3-1: config 8 has no interface number 1 [ 124.234939][ T5818] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 124.250263][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 124.258916][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.276667][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.287404][ T5818] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 124.309807][ T6142] program syz.1.83 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.325377][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.325932][ T5818] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 124.345676][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 124.345738][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.440190][ T6143] program syz.1.83 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.469567][ T23] usb 4-1: config 0 descriptor?? [ 124.604479][ T6143] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 124.620376][ T5818] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 124.635571][ T5818] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 124.648455][ T5818] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 124.677321][ T5818] usb 3-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 124.692407][ T5818] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 124.710310][ T5818] usb 3-1: config 8 interface 156 has no altsetting 0 [ 124.717284][ T5818] usb 3-1: config 8 interface 248 has no altsetting 0 [ 124.731579][ T5818] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 124.781288][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.803711][ T5818] usb 3-1: Product: syz [ 124.807958][ T5818] usb 3-1: Manufacturer: syz [ 124.829705][ T5818] usb 3-1: SerialNumber: syz [ 124.920663][ T6152] sp0: Synchronizing with TNC [ 124.938635][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 124.950838][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 124.969398][ T23] usb 4-1: USB disconnect, device number 4 [ 125.055015][ T5818] hub 3-1:8.156: Invalid hub with more than one config or interface [ 125.066250][ T5818] hub: probe of 3-1:8.156 failed with error -22 [ 125.074236][ T5818] io_ti 3-1:8.156: required endpoints missing [ 125.100567][ T5818] io_ti 3-1:8.248: required endpoints missing [ 125.120659][ T5818] usb 3-1: USB disconnect, device number 4 [ 125.147497][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 126.225123][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 127.496308][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 127.643662][ T6176] fuse: Unknown parameter 'group_i00000000000000000000' [ 127.767960][ T6168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.91'. [ 128.352550][ T6191] program syz.0.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.645318][ T6192] program syz.0.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.704602][ T6192] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 129.520197][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.704487][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.718128][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.729206][ T23] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 129.741654][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.773027][ T23] usb 4-1: config 0 descriptor?? [ 130.009592][ T6203] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 130.037049][ T6203] netlink: 'syz.2.99': attribute type 10 has an invalid length. [ 130.065591][ T6203] team0: Device ipvlan1 failed to register rx_handler [ 130.320921][ T23] samsung 0003:0419:0600.0004: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 130.470192][ T5818] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.796988][ T5835] usb 4-1: USB disconnect, device number 5 [ 130.875551][ T6209] fido_id[6209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 130.939910][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 130.950355][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 130.958038][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.998573][ T5818] usb 1-1: config 0 has no interfaces? [ 131.026262][ T5818] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 131.045362][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.066705][ T5818] usb 1-1: Product: syz [ 131.071348][ T5818] usb 1-1: Manufacturer: syz [ 131.076003][ T5818] usb 1-1: SerialNumber: syz [ 131.088145][ T5818] usb 1-1: config 0 descriptor?? [ 131.185272][ T6217] fuse: Unknown parameter 'group_i00000000000000000000' [ 131.645238][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 131.828928][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.105'. [ 133.161971][ T23] usb 1-1: USB disconnect, device number 4 [ 133.313132][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.319523][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.500365][ T5866] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.760178][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 133.767833][ T5866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.834764][ T5866] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 133.888819][ T6252] fuse: Unknown parameter 'group_i00000000000000000000' [ 133.897324][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.642346][ T5866] usb 2-1: config 0 descriptor?? [ 134.999411][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.535485][ T5866] hid-u2fzero 0003:20A0:4287.0005: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.1-1/input0 [ 135.560273][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.574512][ T5866] hid-u2fzero 0003:20A0:4287.0005: NitroKey U2F LED initialised [ 135.589747][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.618445][ T5866] hid-u2fzero 0003:20A0:4287.0005: hid_hw_output_report failed: -71 [ 135.634973][ T23] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 135.650773][ T5866] hid-u2fzero 0003:20A0:4287.0005: NitroKey U2F RNG initialised [ 135.662924][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.715028][ T23] usb 3-1: config 0 descriptor?? [ 135.729553][ T5866] usb 2-1: USB disconnect, device number 5 [ 135.912897][ T6263] fido_id[6263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 136.298576][ T23] samsung 0003:0419:0600.0006: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 136.570295][ T5818] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.716634][ T5849] usb 3-1: USB disconnect, device number 5 [ 136.812019][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 136.843654][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.872698][ T5818] usb 2-1: config 0 has no interfaces? [ 136.884366][ T5818] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 136.914439][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.925077][ T5818] usb 2-1: Product: syz [ 136.938705][ T5818] usb 2-1: Manufacturer: syz [ 136.944927][ T5818] usb 2-1: SerialNumber: syz [ 136.982933][ T5818] usb 2-1: config 0 descriptor?? [ 138.686886][ T6291] fuse: Unknown parameter 'group_id00000000000000000000' [ 139.516309][ T23] usb 2-1: USB disconnect, device number 6 [ 140.083015][ T5866] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.370299][ T968] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.395978][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 140.403371][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.411541][ T5866] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 140.421215][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.432068][ T5866] usb 1-1: config 0 descriptor?? [ 140.719077][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.775188][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.824774][ T968] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 141.077848][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.209514][ T5866] usbhid 1-1:0.0: can't add hid device: -71 [ 141.216228][ T5866] usbhid: probe of 1-1:0.0 failed with error -71 [ 141.238096][ T5866] usb 1-1: USB disconnect, device number 5 [ 141.239249][ T968] usb 3-1: config 0 descriptor?? [ 141.446574][ T6325] fuse: Unknown parameter 'group_id00000000000000000000' [ 141.742669][ T968] usbhid 3-1:0.0: can't add hid device: -71 [ 141.748754][ T968] usbhid: probe of 3-1:0.0 failed with error -71 [ 141.919413][ T968] usb 3-1: USB disconnect, device number 6 [ 146.121523][ T6359] fuse: Unknown parameter 'group_id00000000000000000000' [ 146.990724][ T5828] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.218523][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.229758][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.244011][ T5828] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 147.256970][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.303588][ T5828] usb 4-1: config 0 descriptor?? [ 147.453206][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 147.540689][ T6378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.150'. [ 147.794014][ T5828] usbhid 4-1:0.0: can't add hid device: -71 [ 147.802481][ T5828] usbhid: probe of 4-1:0.0 failed with error -71 [ 147.818911][ T5828] usb 4-1: USB disconnect, device number 6 [ 150.002989][ T5828] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.310634][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 150.407973][ T5828] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 150.418612][ T5828] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 150.431242][ T5828] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 150.450584][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.458641][ T5828] usb 1-1: Product: syz [ 150.463347][ T5828] usb 1-1: Manufacturer: syz [ 150.467987][ T5828] usb 1-1: SerialNumber: syz [ 150.624982][ T6405] fuse: Bad value for 'user_id' [ 151.462422][ T5828] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.463509][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 151.651599][ T6419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.167'. [ 151.660995][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 151.716447][ T5828] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 151.759662][ T5828] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 151.792522][ T5828] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 151.820226][ T5828] usb 3-1: config 8 has no interface number 0 [ 151.826384][ T5828] usb 3-1: config 8 has no interface number 1 [ 151.837551][ T5828] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 151.872562][ T5828] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 151.902843][ T5828] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 151.941118][ T5828] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 151.986735][ T5828] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 152.038640][ T5828] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 152.050390][ T5828] usb 3-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 152.066815][ T5828] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 152.083539][ T5828] usb 3-1: config 8 interface 156 has no altsetting 0 [ 152.092489][ T5828] usb 3-1: config 8 interface 248 has no altsetting 0 [ 152.111143][ T5828] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 152.120865][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.129174][ T5828] usb 3-1: Product: syz [ 152.136568][ T5828] usb 3-1: Manufacturer: syz [ 152.142862][ T5828] usb 3-1: SerialNumber: syz [ 152.393857][ T5828] hub 3-1:8.156: Invalid hub with more than one config or interface [ 152.417392][ T5828] hub: probe of 3-1:8.156 failed with error -22 [ 152.442490][ T5828] io_ti 3-1:8.156: required endpoints missing [ 152.461066][ T5828] io_ti 3-1:8.248: required endpoints missing [ 152.476471][ T5828] usb 3-1: USB disconnect, device number 7 [ 152.732167][ T5828] usb 1-1: USB disconnect, device number 6 [ 155.100194][ T968] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.122335][ T6449] fuse: Bad value for 'user_id' [ 155.310824][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 155.377728][ T968] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.413108][ T968] usb 3-1: config 179 has no interface number 0 [ 155.420007][ T968] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 155.450995][ T968] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 155.786571][ T968] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.803425][ T6459] netlink: 40 bytes leftover after parsing attributes in process `syz.3.177'. [ 155.983786][ T968] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 156.020169][ T968] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 156.083659][ T968] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 156.110183][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.166189][ T6444] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.071943][ T5828] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.274966][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.285813][ T5828] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 158.302568][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.437595][ T5828] usb 2-1: config 0 descriptor?? [ 158.674700][ T5828] rndis_wlan: probe of 2-1:0.0 failed with error -22 [ 158.686857][ T23] usb 3-1: USB disconnect, device number 8 [ 158.688736][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 158.695629][ T5828] rndis_host: probe of 2-1:0.0 failed with error -22 [ 158.701154][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 158.715384][ T5828] usb 2-1: USB disconnect, device number 7 [ 160.610069][ C0] sched: RT throttling activated [ 160.682441][ T6480] fuse: Bad value for 'user_id' [ 162.852066][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 162.890579][ T6496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.188'. [ 165.210379][ T5818] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.480531][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 165.497448][ T5818] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 165.506449][ T6527] fuse: Bad value for 'fd' [ 165.514276][ T5818] usb 4-1: config 179 has no interface number 0 [ 165.521524][ T5818] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 165.541998][ T5818] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 165.554108][ T5818] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.568858][ T5818] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 165.580912][ T5818] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 165.606328][ T5818] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 165.616526][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.654314][ T6518] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.794540][ T23] usb 4-1: USB disconnect, device number 7 [ 167.794557][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 167.808864][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 168.813892][ T6547] syz.2.201: attempt to access beyond end of device [ 168.813892][ T6547] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 168.826885][ T6547] qnx6: unable to read the first superblock [ 168.835480][ T6547] syz.2.201: attempt to access beyond end of device [ 168.835480][ T6547] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 168.848304][ T6547] qnx6: unable to read the first superblock [ 168.854443][ T6547] qnx6: unable to read the first superblock [ 172.601145][ T6560] fuse: Bad value for 'fd' [ 173.614319][ T6573] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 173.614319][ T6573] program syz.3.208 not setting count and/or reply_len properly [ 174.340935][ T28] audit: type=1326 audit(1751244503.828:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.3.208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b8fd8e929 code=0x0 [ 175.092349][ T6591] autofs4:pid:6591:autofs_fill_super: called with bogus options [ 177.353126][ T6602] fuse: Bad value for 'fd' [ 179.460964][ T6618] autofs4:pid:6618:autofs_fill_super: called with bogus options [ 180.000976][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.920992][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 181.954702][ T27] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 181.965682][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.977209][ T27] usb 2-1: Product: syz [ 181.983804][ T27] usb 2-1: Manufacturer: syz [ 181.988557][ T27] usb 2-1: SerialNumber: syz [ 182.016835][ T27] usb 2-1: config 0 descriptor?? [ 182.286530][ T27] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 184.623440][ T27] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110 [ 185.680192][ T5866] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 185.711596][ T27] usb 2-1: USB disconnect, device number 8 [ 185.900294][ T5866] usb 4-1: device descriptor read/all, error -71 [ 187.130787][ T5866] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.332094][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 187.480455][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.487418][ T5866] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 187.496718][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.524093][ T5866] usb 4-1: config 0 descriptor?? [ 189.631431][ T5866] usbhid 4-1:0.0: can't add hid device: -71 [ 189.645421][ T5866] usbhid: probe of 4-1:0.0 failed with error -71 [ 189.660628][ T5866] usb 4-1: USB disconnect, device number 9 [ 189.759922][ T6676] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 189.767869][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.776641][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.784468][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.606330][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.613692][ T6676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.621320][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.628541][ T6676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.648922][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 193.615087][ T27] usb 2-1: device descriptor read/all, error -71 [ 193.623341][ T6676] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 193.762766][ T6684] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 193.762766][ T6684] program syz.1.243 not setting count and/or reply_len properly [ 194.738539][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.746631][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.700306][ T5849] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 197.891652][ T5849] usb 1-1: Using ep0 maxpacket: 8 [ 197.981212][ T5849] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.142384][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.372969][ T5849] usb 1-1: Product: syz [ 198.407149][ T5849] usb 1-1: Manufacturer: syz [ 198.455171][ T5849] usb 1-1: SerialNumber: syz [ 198.501332][ T5849] usb 1-1: config 0 descriptor?? [ 198.549843][ T6712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.255'. [ 198.714509][ T5849] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 199.144829][ T6729] Zero length message leads to an empty skb [ 200.844373][ T5849] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 200.855994][ T5849] usb 1-1: USB disconnect, device number 7 [ 201.930194][ T5821] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 202.120418][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 202.160393][ T5821] usb 3-1: config 8 has an invalid interface number: 156 but max is 1 [ 202.168769][ T5821] usb 3-1: config 8 has an invalid interface number: 248 but max is 1 [ 202.177123][ T5821] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 202.186231][ T5821] usb 3-1: config 8 has no interface number 0 [ 202.197358][ T5821] usb 3-1: config 8 has no interface number 1 [ 202.205512][ T5821] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 202.217119][ T5821] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 202.249604][ T5821] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 202.309808][ T5821] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 202.388761][ T5821] usb 3-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 202.403712][ T5821] usb 3-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 202.430217][ T5821] usb 3-1: config 8 interface 248 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 202.458615][ T5821] usb 3-1: config 8 interface 156 has no altsetting 0 [ 202.470591][ T5821] usb 3-1: config 8 interface 248 has no altsetting 0 [ 202.492848][ T5821] usb 3-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 202.502250][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.510605][ T5821] usb 3-1: Product: syz [ 202.514967][ T5821] usb 3-1: Manufacturer: syz [ 202.519724][ T5821] usb 3-1: SerialNumber: syz [ 202.979824][ T5821] hub 3-1:8.156: Invalid hub with more than one config or interface [ 202.994232][ T5821] hub: probe of 3-1:8.156 failed with error -22 [ 203.001565][ T5821] io_ti 3-1:8.156: required endpoints missing [ 203.049934][ T5821] io_ti 3-1:8.248: required endpoints missing [ 203.103154][ T6759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.267'. [ 203.189945][ T5821] usb 3-1: USB disconnect, device number 9 [ 205.070423][ T5849] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 205.090615][ T5835] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.260190][ T5849] usb 2-1: Using ep0 maxpacket: 8 [ 205.378226][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.399243][ T5849] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 205.574068][ T5835] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 205.656476][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.708285][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.716801][ T5849] usb 2-1: Product: syz [ 205.808092][ T5849] usb 2-1: Manufacturer: syz [ 205.876778][ T5849] usb 2-1: SerialNumber: syz [ 205.882399][ T5835] usb 3-1: config 0 descriptor?? [ 205.900266][ T5835] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 205.926044][ T5849] usb 2-1: config 0 descriptor?? [ 206.211498][ T5835] pwc: send_video_command error -71 [ 206.218762][ T5849] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 206.237588][ T5835] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 206.271086][ T5835] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 206.483835][ T5835] usb 3-1: USB disconnect, device number 10 [ 207.290495][ T5821] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.727640][ T5849] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 207.870890][ T5849] usb 2-1: USB disconnect, device number 11 [ 208.290132][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 208.301513][ T5821] usb 4-1: config 8 has an invalid interface number: 156 but max is 1 [ 208.309767][ T5821] usb 4-1: config 8 has an invalid interface number: 248 but max is 1 [ 208.322796][ T5821] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 208.342782][ T5821] usb 4-1: config 8 has no interface number 0 [ 208.349039][ T5821] usb 4-1: config 8 has no interface number 1 [ 208.358950][ T5821] usb 4-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 208.411573][ T5821] usb 4-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 208.455370][ T5821] usb 4-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 208.470206][ T5821] usb 4-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 208.485751][ T5821] usb 4-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 208.500513][ T6799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.282'. [ 208.501454][ T5821] usb 4-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 208.528144][ T5821] usb 4-1: config 8 interface 156 has no altsetting 0 [ 208.535891][ T5821] usb 4-1: config 8 interface 248 has no altsetting 0 [ 208.602319][ T5821] usb 4-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 208.612987][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.621254][ T5821] usb 4-1: Product: syz [ 208.627764][ T5821] usb 4-1: Manufacturer: syz [ 208.645686][ T5821] usb 4-1: SerialNumber: syz [ 209.811010][ T5821] hub 4-1:8.156: Invalid hub with more than one config or interface [ 209.819088][ T5821] hub: probe of 4-1:8.156 failed with error -22 [ 209.831690][ T5821] io_ti 4-1:8.156: required endpoints missing [ 209.845804][ T5821] io_ti 4-1:8.248: required endpoints missing [ 209.866857][ T5821] usb 4-1: USB disconnect, device number 10 [ 211.787002][ T5821] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.170451][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 212.177015][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 212.185419][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 212.883773][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.895001][ T5821] usb 1-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 212.904380][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.968538][ T5821] usb 1-1: config 0 descriptor?? [ 213.037135][ T5821] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 213.239915][ T5821] pwc: send_video_command error -71 [ 213.257442][ T5821] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 213.269460][ T5821] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 213.290385][ T5821] usb 1-1: USB disconnect, device number 8 [ 214.020751][ T5828] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 214.290223][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 214.329225][ T5828] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.340348][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.349021][ T5828] usb 3-1: Product: syz [ 214.353585][ T5828] usb 3-1: Manufacturer: syz [ 214.358473][ T5828] usb 3-1: SerialNumber: syz [ 214.387205][ T5828] usb 3-1: config 0 descriptor?? [ 214.397553][ T5849] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 214.433901][ T6854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.298'. [ 214.658338][ T5828] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.761898][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.818162][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 214.899498][ T5849] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 214.977714][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.000576][ T5849] usb 4-1: config 0 descriptor?? [ 215.239865][ T5849] usbhid 4-1:0.0: can't add hid device: -71 [ 215.248906][ T5849] usbhid: probe of 4-1:0.0 failed with error -71 [ 215.262807][ T5849] usb 4-1: USB disconnect, device number 11 [ 216.627162][ T5828] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 216.653073][ T5828] usb 3-1: USB disconnect, device number 11 [ 218.251119][ T6891] futex_wake_op: syz.0.309 tries to shift op by 535; fix this program [ 218.579315][ T6905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.311'. [ 220.980231][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 221.450720][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 221.478336][ T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 221.487655][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.592048][ T27] usb 3-1: Product: syz [ 221.596293][ T27] usb 3-1: Manufacturer: syz [ 221.601314][ T27] usb 3-1: SerialNumber: syz [ 221.634222][ T27] usb 3-1: config 0 descriptor?? [ 221.902072][ T27] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.410196][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 222.740245][ T6949] futex_wake_op: syz.1.326 tries to shift op by 535; fix this program [ 223.425283][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 223.443195][ T27] usb 3-1: USB disconnect, device number 12 [ 223.822489][ T6961] Sensor A: ================= START STATUS ================= [ 223.830173][ T6961] Sensor A: Test Pattern: 75% Colorbar [ 223.836085][ T6961] Sensor A: Show Information: All [ 223.841220][ T6961] Sensor A: Vertical Flip: false [ 223.846416][ T6961] Sensor A: Horizontal Flip: false [ 223.852752][ T6961] Sensor A: Brightness: 128 [ 223.857313][ T6961] Sensor A: Contrast: 128 [ 223.861732][ T6961] Sensor A: Hue: 0 [ 223.865495][ T6961] Sensor A: Saturation: 128 [ 223.870093][ T6961] Sensor A: ================== END STATUS ================== [ 230.514253][ T7015] futex_wake_op: syz.0.347 tries to shift op by 535; fix this program [ 233.220473][ T5835] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 233.380560][ T5835] usb 2-1: device descriptor read/64, error -71 [ 233.660180][ T5835] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 233.706546][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.357'. [ 233.790732][ T968] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 233.820137][ T5835] usb 2-1: device descriptor read/64, error -71 [ 233.952699][ T5835] usb usb2-port1: attempt power cycle [ 233.980191][ T968] usb 1-1: Using ep0 maxpacket: 32 [ 233.987419][ T968] usb 1-1: config 8 has an invalid interface number: 156 but max is 1 [ 233.996958][ T968] usb 1-1: config 8 has an invalid interface number: 248 but max is 1 [ 234.005317][ T968] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 234.014435][ T968] usb 1-1: config 8 has no interface number 0 [ 234.020977][ T968] usb 1-1: config 8 has no interface number 1 [ 234.027221][ T968] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x6 has an invalid bInterval 167, changing to 7 [ 234.038509][ T968] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 234.049445][ T968] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 234.060361][ T5766] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 234.068207][ T968] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 234.080326][ T968] usb 1-1: config 8 interface 248 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 234.092595][ T968] usb 1-1: config 8 interface 248 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 234.103637][ T968] usb 1-1: config 8 interface 156 has no altsetting 0 [ 234.110684][ T968] usb 1-1: config 8 interface 248 has no altsetting 0 [ 234.120266][ T968] usb 1-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=10.3a [ 234.129450][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.137887][ T968] usb 1-1: Product: syz [ 234.142271][ T968] usb 1-1: Manufacturer: syz [ 234.146981][ T968] usb 1-1: SerialNumber: syz [ 234.250305][ T5766] usb 4-1: Using ep0 maxpacket: 8 [ 234.257796][ T5766] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.271798][ T5766] usb 4-1: config 0 interface 0 has no altsetting 0 [ 234.379664][ T5766] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 234.389952][ T968] hub 1-1:8.156: Invalid hub with more than one config or interface [ 234.399507][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.408107][ T968] hub: probe of 1-1:8.156 failed with error -22 [ 234.427148][ T5766] usb 4-1: config 0 descriptor?? [ 234.433167][ T968] io_ti 1-1:8.156: required endpoints missing [ 234.440140][ T5835] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 234.468700][ T968] io_ti 1-1:8.248: required endpoints missing [ 234.490572][ T968] usb 1-1: USB disconnect, device number 9 [ 234.505911][ T5835] usb 2-1: device descriptor read/8, error -71 [ 234.780281][ T5835] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 234.832303][ T5835] usb 2-1: device descriptor read/8, error -71 [ 234.900351][ T5766] hid-u2fzero 0003:20A0:4287.0007: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 234.928261][ T5766] hid-u2fzero 0003:20A0:4287.0007: NitroKey U2F LED initialised [ 234.950315][ T5766] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 234.962115][ T5766] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 234.970585][ T5766] CPU: 0 PID: 5766 Comm: kworker/0:3 Not tainted 6.6.95-syzkaller #0 [ 234.978695][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.988790][ T5766] Workqueue: usb_hub_wq hub_event [ 234.993893][ T5766] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 234.999569][ T5766] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 235.019219][ T5766] RSP: 0018:ffffc90004646780 EFLAGS: 00010202 [ 235.025332][ T5766] RAX: 0000000000000015 RBX: ffff888019e8d030 RCX: dffffc0000000000 [ 235.033347][ T5766] RDX: 0000000000000000 RSI: ffffc900046468a0 RDI: ffff888076fb6168 [ 235.041593][ T5766] RBP: ffffc90004646998 R08: 0000000000000000 R09: 0000000000000000 [ 235.049620][ T5766] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888019e8d300 [ 235.057725][ T5766] R13: 1ffff920008c8cf8 R14: ffff888019e8d418 R15: 00000000000000a8 [ 235.065739][ T5766] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 235.074708][ T5766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.081335][ T5766] CR2: 000055786888b024 CR3: 000000002fc09000 CR4: 00000000003506f0 [ 235.089354][ T5766] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.097366][ T5766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.105389][ T5766] Call Trace: [ 235.105401][ T5766] [ 235.105414][ T5766] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 235.117328][ T5766] ? add_early_randomness+0x1e/0x1a0 [ 235.122655][ T5766] ? mutex_unlock+0x10/0x10 [ 235.127241][ T5766] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 235.132828][ T5766] add_early_randomness+0x7a/0x1a0 [ 235.137980][ T5766] hwrng_register+0x3db/0x4a0 [ 235.142704][ T5766] devm_hwrng_register+0x47/0xb0 [ 235.147691][ T5766] u2fzero_probe+0x348/0x460 [ 235.152322][ T5766] hid_device_probe+0x293/0x5b0 [ 235.157219][ T5766] ? hid_uevent+0x350/0x350 [ 235.161758][ T5766] really_probe+0x25b/0xb40 [ 235.166301][ T5766] ? pm_runtime_barrier+0x14b/0x1c0 [ 235.171517][ T5766] __driver_probe_device+0x18c/0x330 [ 235.176838][ T5766] driver_probe_device+0x4f/0x420 [ 235.181879][ T5766] __device_attach_driver+0x2ca/0x520 [ 235.187267][ T5766] bus_for_each_drv+0x24b/0x2d0 [ 235.192133][ T5766] ? coredump_store+0x90/0x90 [ 235.196822][ T5766] ? bus_find_device+0x320/0x320 [ 235.201810][ T5766] __device_attach+0x2b5/0x400 [ 235.206598][ T5766] ? device_attach+0x20/0x20 [ 235.211229][ T5766] ? do_raw_spin_unlock+0x121/0x230 [ 235.216449][ T5766] bus_probe_device+0x180/0x260 [ 235.221338][ T5766] device_add+0x85b/0xc20 [ 235.225693][ T5766] hid_add_device+0x38d/0x530 [ 235.230394][ T5766] usbhid_probe+0xe02/0x1220 [ 235.235039][ T5766] usb_probe_interface+0x5a4/0xb00 [ 235.240170][ T5766] ? usb_register_driver+0x3d0/0x3d0 [ 235.245468][ T5766] really_probe+0x25b/0xb40 [ 235.250000][ T5766] ? pm_runtime_barrier+0x14b/0x1c0 [ 235.255221][ T5766] __driver_probe_device+0x18c/0x330 [ 235.260532][ T5766] driver_probe_device+0x4f/0x420 [ 235.265588][ T5766] __device_attach_driver+0x2ca/0x520 [ 235.270984][ T5766] bus_for_each_drv+0x24b/0x2d0 [ 235.275857][ T5766] ? coredump_store+0x90/0x90 [ 235.280671][ T5766] ? bus_find_device+0x320/0x320 [ 235.285634][ T5766] __device_attach+0x2b5/0x400 [ 235.290418][ T5766] ? device_attach+0x20/0x20 [ 235.295021][ T5766] ? __kmem_cache_free+0xba/0x1f0 [ 235.300062][ T5766] ? do_raw_spin_unlock+0x121/0x230 [ 235.305276][ T5766] bus_probe_device+0x180/0x260 [ 235.310145][ T5766] device_add+0x85b/0xc20 [ 235.314496][ T5766] usb_set_configuration+0x1a79/0x20c0 [ 235.319989][ T5766] usb_generic_driver_probe+0x8d/0x150 [ 235.325472][ T5766] usb_probe_device+0x13d/0x280 [ 235.330332][ T5766] ? usb_register_device_driver+0x230/0x230 [ 235.336233][ T5766] really_probe+0x25b/0xb40 [ 235.340762][ T5766] ? pm_runtime_barrier+0x14b/0x1c0 [ 235.345984][ T5766] __driver_probe_device+0x18c/0x330 [ 235.351295][ T5766] driver_probe_device+0x4f/0x420 [ 235.356427][ T5766] __device_attach_driver+0x2ca/0x520 [ 235.361820][ T5766] bus_for_each_drv+0x24b/0x2d0 [ 235.366695][ T5766] ? coredump_store+0x90/0x90 [ 235.371385][ T5766] ? bus_find_device+0x320/0x320 [ 235.376355][ T5766] __device_attach+0x2b5/0x400 [ 235.381156][ T5766] ? device_attach+0x20/0x20 [ 235.385776][ T5766] ? __kmem_cache_free+0xba/0x1f0 [ 235.390822][ T5766] ? do_raw_spin_unlock+0x121/0x230 [ 235.396046][ T5766] bus_probe_device+0x180/0x260 [ 235.400920][ T5766] device_add+0x85b/0xc20 [ 235.405260][ T5766] usb_new_device+0xa31/0x1630 [ 235.410050][ T5766] ? usb_disconnect+0x8a0/0x8a0 [ 235.414923][ T5766] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.420147][ T5766] ? lockdep_hardirqs_on+0x98/0x150 [ 235.425360][ T5766] hub_event+0x2957/0x49c0 [ 235.429816][ T5766] ? led_work+0x720/0x720 [ 235.434163][ T5766] ? read_lock_is_recursive+0x20/0x20 [ 235.439549][ T5766] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.444769][ T5766] ? process_scheduled_works+0x957/0x15b0 [ 235.450503][ T5766] ? process_scheduled_works+0x957/0x15b0 [ 235.456233][ T5766] process_scheduled_works+0xa45/0x15b0 [ 235.461806][ T5766] ? assign_work+0x400/0x400 [ 235.466416][ T5766] ? assign_work+0x39e/0x400 [ 235.471020][ T5766] worker_thread+0xa55/0xfc0 [ 235.475625][ T5766] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 235.481541][ T5766] ? _raw_spin_unlock+0x40/0x40 [ 235.486405][ T5766] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 235.492326][ T5766] kthread+0x2fa/0x390 [ 235.496404][ T5766] ? pr_cont_work+0x560/0x560 [ 235.501097][ T5766] ? kthread_blkcg+0xd0/0xd0 [ 235.505698][ T5766] ret_from_fork+0x48/0x80 [ 235.510133][ T5766] ? kthread_blkcg+0xd0/0xd0 [ 235.514734][ T5766] ret_from_fork_asm+0x11/0x20 [ 235.519608][ T5766] [ 235.522644][ T5766] Modules linked in: [ 235.575109][ T5835] usb usb2-port1: unable to enumerate USB device [ 235.593338][ T5766] ---[ end trace 0000000000000000 ]--- [ 235.598860][ T5766] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 235.604926][ T5766] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 235.661205][ T5766] RSP: 0018:ffffc90004646780 EFLAGS: 00010202 [ 235.667322][ T5766] RAX: 0000000000000015 RBX: ffff888019e8d030 RCX: dffffc0000000000 [ 235.680175][ T5766] RDX: 0000000000000000 RSI: ffffc900046468a0 RDI: ffff888076fb6168 [ 235.689858][ T5766] RBP: ffffc90004646998 R08: 0000000000000000 R09: 0000000000000000 [ 235.701595][ T5766] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888019e8d300 [ 235.712854][ T5766] R13: 1ffff920008c8cf8 R14: ffff888019e8d418 R15: 00000000000000a8 [ 235.721141][ T5766] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 235.734782][ T5766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.741711][ T5766] CR2: 00007fc10c990e9c CR3: 000000002d1be000 CR4: 00000000003506f0 [ 235.749729][ T5766] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.759882][ T5766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.768152][ T5766] Kernel panic - not syncing: Fatal exception [ 235.774488][ T5766] Kernel Offset: disabled [ 235.778818][ T5766] Rebooting in 86400 seconds..