last executing test programs: 26.260891459s ago: executing program 2 (id=9784): socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], "caa83d46b4056e6c40c121f0350178f30e61c0ae1a1078d97f9dff7bea388144692a722e10e16506b87b0b360bcbdb186b406644932bcc3e262e854f269e0367a59fa620229129b4ff473a00615c110fb03004eab4f24a270f92fcbfa26d417d9c671f00c97f75f86a58ec7c3dba646eb205733fcab453eab9545f09ff32817f891f07028a72cdd6cfa75e50d371c044d12557aafd9b7af140d92c9c927f549e983631ec81ffa48a135b3abe1f57db99f9e1b5cd28760ffe687c510a68"}, 0x16d) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) syz_open_pts(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r1]) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x79af, &(0x7f0000001240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) preadv2(r5, &(0x7f0000000640)=[{&(0x7f0000000540)=""/252, 0xfc}], 0x1, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.760362387s ago: executing program 1 (id=9792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000940)={@val={0x1c, 0xf8}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "d5d12c", 0x8, 0x11, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {0x0, 0x0, 0x8}}}}}, 0x3e) 25.120462085s ago: executing program 1 (id=9797): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0xa, "b9"}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 25.046975011s ago: executing program 2 (id=9798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="e71b2849857be495b7f4aaf9adb03c205fb65233b5290567dc59087797913fe30ae604a12a6db8e3f11ec8c030b956ea46673fa6404815813e2431c91d4c4a18ef2be654deca9d2f34542f328fb316b418b3328278a799e97fbc320969a4cede6115c7658d87f53856a0888899f4a0313cf185b09636e3e9d40b8e29b782451f88cc3dc08146b587012615e83e10f6b9eb8b51ab2698123d2a5601f2334fc91a7581791467dfeed02e0f33a781e0c7ff158b65f54f5a3113b5f92763efc41f6c0fa6cb8f81dcdea1ffd8377ddaa6359d", 0xd0}, {&(0x7f0000001680)="5c52fa3b9115fff29cc903e4ab69c28329fb1be19a4915e87073efbd051cb2b263ad67dfce33d34e75367177870a71c06a438dc9bcd375255c2daa8bb0866936125b99ebbf6e7d61877f4825fdc654566fa1db804ae161c38eeb6a07609b7eaa44825bbc7d68a45016c9f9dd441c8779a5d3122eeeddf9a8e8a4eea663d8d76c6324019875bce1f5f5442a14bf60dae336e6f8dd86", 0x95}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f0000000400)=""/171, 0xab}], 0x2}, 0x0) 24.923363365s ago: executing program 1 (id=9799): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x3000000}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='9', 0x1}], 0x3) 24.684898898s ago: executing program 1 (id=9803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[], 0x0, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.472446981s ago: executing program 2 (id=9805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 24.327207768s ago: executing program 1 (id=9808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000009f000040", @ANYRES32, @ANYRES16]) 24.096395305s ago: executing program 2 (id=9811): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r1, 0x5}) 24.077032781s ago: executing program 1 (id=9813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8921, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60000000001406ca6425376fe8259300fe8000000000000000000000000000bbfe80"], 0x0) 23.451369236s ago: executing program 0 (id=9818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23.011377975s ago: executing program 2 (id=9821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010"], 0x40}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.71643163s ago: executing program 0 (id=9823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000009f000040", @ANYRES32, @ANYRES16]) 22.294921956s ago: executing program 0 (id=9826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000940)={@val={0x1c, 0xf8}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "d5d12c", 0x8, 0x11, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {0x0, 0x0, 0x8}}}}}, 0x3e) 22.060250599s ago: executing program 2 (id=9828): socket(0x1d, 0x2, 0x6) r0 = socket(0x0, 0x3, 0x3a) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) readv(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100a20035000000560000022500000019000a00100000ad07fd17e5ffff080c38005100000000000a", 0x39}], 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r3 = dup(r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a0000000000000000000000100016000c000200000004000000000008000400", @ANYRES32=r5, @ANYBLOB="512c88ee76a88ed48c4f0f3c35c113c107f0efc18e610f907efb6bf2a14129b7843f4d781e77eb0a2b4c3490fb42341f489df44be810bb84dd4ad82642f776da3e5a475625dc786167ee4a0a9df48cc4eeea303f7aecfe6504e6b1118bdfdd5c"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x8004550f, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x7d, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)={@map=r1, 0xffffffffffffffff, 0x7, 0x0, 0x0, @link_fd=r3}, 0x20) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf5}, "91a42d3b33cd616c56ffc3a366c72c30f54daa471bebf39a4c8dd073acc17ab36a1f954a00f13f82d782eb036ae7ee95c753a1b74fb2b3d7166af7b54fa9d7201536cc83058aa2ffb78e6bf6b62a6cbd0df97131f8e20652c29f2a3256b7ed7b06b91a7a7d7c885289f615b6dd2243388c4753336d8bc03364679d48db783451feb2576b94b4e68194864cf89c4c00aca6e587606a54b9580f3d3b519e7cf6535ceeef3e40c79a17ee85d78738819040057256e84e36578600dbb4a9c4398bf9835cb74c51356bfce61cc605f098d7d34bb03e2113f731c33192afab0365fb19d907658295f0fd39b9c629f715cef9aaaa45f841e8"}, 0xf9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x55, 0x1b, 0x89, 0x20, 0x22b8, 0x6027, 0xc280, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0xfffffffffffffffd}, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) 21.432905783s ago: executing program 0 (id=9830): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r1, 0x5}) 20.226250726s ago: executing program 0 (id=9835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000009f000040", @ANYRES32, @ANYRES16]) 17.664166901s ago: executing program 0 (id=9839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x50}}, 0x0) 5.41016988s ago: executing program 4 (id=9876): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500090001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 4.578117615s ago: executing program 3 (id=9877): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @dev}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) unshare(0x2000400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x4b49, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000240)={0x0, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0x3}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x200, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.304530383s ago: executing program 4 (id=9878): mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.547526938s ago: executing program 3 (id=9879): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4b, &(0x7f0000000040)=0x45ce, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/123, 0x7b}], 0x1) 3.295758381s ago: executing program 3 (id=9880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 3.02492213s ago: executing program 3 (id=9881): r0 = openat$vimc2(0xffffff9c, &(0x7f00000047c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000004800)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x8, [], 0x3, 0x0, 0x4}}) 2.616097612s ago: executing program 4 (id=9882): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d000"/16, 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="a0", 0x1}, {&(0x7f00000000c0)="cb", 0x1}], 0x2}, 0x0) 2.606229922s ago: executing program 3 (id=9883): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xff2e) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) 2.168367278s ago: executing program 4 (id=9884): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb7, 0x93, 0xe3, 0x40, 0xeb1a, 0xe303, 0xfca0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa1, 0x7, 0x8a, 0x0, [], [{{0x9, 0x5, 0x82}}]}}]}}]}}, 0x0) 1.586024046s ago: executing program 3 (id=9885): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}]}}]}, 0xa4}, 0x1, 0x7a00}, 0x0) 609.065428ms ago: executing program 4 (id=9886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[], 0x0, 0x80200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 4 (id=9887): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) kernel console output (not intermixed with test programs): usb 4-1: Please update to version 0.2 or newer [ 2256.354000][ T5280] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2256.384620][ T5280] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2256.441531][ T5280] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2256.444002][T16697] usb 4-1: USB disconnect, device number 43 [ 2256.476531][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2256.507244][ T5280] usb 1-1: SerialNumber: syz [ 2256.539100][ T5280] usb-storage 1-1:1.0: USB Mass Storage device detected [ 2256.660873][T10789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2256.764509][T10789] 8021q: adding VLAN 0 to HW filter on device team0 [ 2256.798006][T31920] usb 1-1: USB disconnect, device number 50 [ 2256.815542][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.822705][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2256.881417][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.888621][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2256.915719][T26718] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2257.007377][T10987] binder: 10985:10987 ioctl d0009411 0 returned -22 [ 2257.135882][T26718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2257.173834][T26718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2257.198372][T10789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2257.205876][T26718] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2257.227238][T26718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.284773][T26718] usb 2-1: config 0 descriptor?? [ 2257.373239][T10789] veth0_vlan: entered promiscuous mode [ 2257.433891][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9275'. [ 2257.449029][T10789] veth1_vlan: entered promiscuous mode [ 2257.474898][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9275'. [ 2257.559302][T10789] veth0_macvtap: entered promiscuous mode [ 2257.600178][T10789] veth1_macvtap: entered promiscuous mode [ 2257.676936][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2257.713874][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2257.732694][T26718] cm6533_jd 0003:0D8C:0022.00A9: unknown main item tag 0x0 [ 2257.749180][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2257.770694][T26718] cm6533_jd 0003:0D8C:0022.00A9: unknown main item tag 0x0 [ 2257.780100][T26718] cm6533_jd 0003:0D8C:0022.00A9: unknown main item tag 0x0 [ 2257.788005][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2257.798009][T26718] cm6533_jd 0003:0D8C:0022.00A9: unknown main item tag 0x0 [ 2257.806801][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2257.822186][T26718] cm6533_jd 0003:0D8C:0022.00A9: unknown main item tag 0x0 [ 2257.829874][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2257.847789][T26718] cm6533_jd 0003:0D8C:0022.00A9: No inputs registered, leaving [ 2257.857162][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2257.870514][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2257.881485][T26718] cm6533_jd 0003:0D8C:0022.00A9: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 2257.894353][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2257.932797][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2257.953146][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2257.972786][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2257.983264][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.007043][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.025843][ T9] usb 2-1: USB disconnect, device number 60 [ 2258.061140][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.114013][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.133780][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.154187][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.170132][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.191538][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.216101][T10789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2258.273042][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.304360][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.326768][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.360777][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.400086][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.433755][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.443612][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.485086][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.523761][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.573928][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.603095][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.631783][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.691798][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.748563][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.823713][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.897070][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.932913][T11037] binder: 11036:11037 ioctl d0009411 0 returned -22 [ 2258.954589][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.996629][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.046890][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.098609][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.150113][T10789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2259.242342][T10789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.274105][T10789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.282960][T10789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.289802][ T5280] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2259.332126][T10789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.404958][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2259.537151][ T5280] usb 4-1: Using ep0 maxpacket: 16 [ 2259.549410][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.586245][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9289'. [ 2259.611698][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9289'. [ 2259.621186][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2259.663750][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2259.673441][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2259.683977][ T5280] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 2259.696553][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.705115][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2259.729548][ T5280] usb 4-1: config 0 descriptor?? [ 2259.760713][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.780411][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2259.795394][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.802876][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2259.825026][ T9] usb 3-1: SerialNumber: syz [ 2259.851756][ T9] usb-storage 3-1:1.0: USB Mass Storage device detected [ 2259.957075][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.993404][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2260.207402][ T5280] holtek_kbd 0003:04D9:A055.00AA: item fetching failed at offset 3/4 [ 2260.251277][ T5280] holtek_kbd 0003:04D9:A055.00AA: probe with driver holtek_kbd failed with error -22 [ 2260.330983][T16697] usb 3-1: USB disconnect, device number 46 [ 2260.628290][ T9] usb 4-1: USB disconnect, device number 44 [ 2261.011376][T11090] binder: 11089:11090 ioctl d0009411 0 returned -22 [ 2261.485818][T11107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9301'. [ 2261.569977][T11107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9301'. [ 2261.810745][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9306'. [ 2261.951123][T11123] netlink: 'syz.1.9308': attribute type 11 has an invalid length. [ 2262.006678][T11123] netem: change failed [ 2262.403883][T16697] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2262.524727][ T5277] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2262.613742][T16697] usb 3-1: Using ep0 maxpacket: 8 [ 2262.637911][T16697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2262.657345][T16697] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2262.682756][T16697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.744050][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 2262.772026][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2262.810060][T16697] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2262.830487][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2262.865706][T16697] usb 3-1: New USB device found, idVendor=21c4, idProduct=0030, bcdDevice=ea.18 [ 2262.880247][ T5277] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 2262.897655][T16697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.912736][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.931080][T16697] usb 3-1: Product: syz [ 2262.937114][T16697] usb 3-1: Manufacturer: syz [ 2262.945008][ T5277] usb 2-1: config 0 descriptor?? [ 2262.953517][T16697] usb 3-1: SerialNumber: syz [ 2262.975157][T16697] usb 3-1: config 0 descriptor?? [ 2263.123978][T11161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9317'. [ 2263.180723][T11161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9317'. [ 2263.404674][ T5277] holtek_kbd 0003:04D9:A055.00AB: item fetching failed at offset 3/4 [ 2263.454606][ T5277] holtek_kbd 0003:04D9:A055.00AB: probe with driver holtek_kbd failed with error -22 [ 2263.475124][T31860] usb 3-1: USB disconnect, device number 47 [ 2263.594322][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9320'. [ 2263.763550][T31860] usb 2-1: USB disconnect, device number 61 [ 2264.825398][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9331'. [ 2264.853769][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9331'. [ 2265.112005][ T8596] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.461529][ T8596] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.981821][ T8596] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.112771][T20066] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2266.127304][T20066] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2266.136307][T20066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2266.168055][T20066] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2266.184261][T20066] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2266.191711][T20066] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2266.273810][ T5280] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2266.360707][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2266.373018][ T8596] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.474003][ T5280] usb 4-1: Using ep0 maxpacket: 16 [ 2266.491958][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2266.525511][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2266.553839][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2266.585323][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2266.629529][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2266.644093][ T5280] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2266.653178][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2266.683724][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2266.724678][ T5280] usb 4-1: config 0 descriptor?? [ 2266.735355][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2266.763937][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.782300][ T9] usb 2-1: Product: syz [ 2266.789101][ T9] usb 2-1: Manufacturer: syz [ 2266.794276][ T9] usb 2-1: SerialNumber: syz [ 2266.804856][ T9] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 2266.811624][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 2266.818692][ T9] cdc_ncm 2-1:1.0: bind() failure [ 2267.032461][ T5277] usb 2-1: USB disconnect, device number 62 [ 2267.184488][ T5280] koneplus 0003:1E7D:2E22.00AC: unknown main item tag 0x0 [ 2267.209594][ T5280] koneplus 0003:1E7D:2E22.00AC: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 2267.227968][T11255] chnl_net:caif_netlink_parms(): no params data found [ 2267.258938][ T8596] bridge_slave_1: left allmulticast mode [ 2267.285075][ T8596] bridge_slave_1: left promiscuous mode [ 2267.290929][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 2267.359925][ T8596] bridge_slave_0: left allmulticast mode [ 2267.382416][ T5280] koneplus 0003:1E7D:2E22.00AC: couldn't init struct koneplus_device [ 2267.383687][ T8596] bridge_slave_0: left promiscuous mode [ 2267.421838][ T5280] koneplus 0003:1E7D:2E22.00AC: couldn't install mouse [ 2267.423869][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 2267.446588][ T5280] koneplus 0003:1E7D:2E22.00AC: probe with driver koneplus failed with error -5 [ 2267.590299][ T5280] usb 4-1: USB disconnect, device number 45 [ 2268.236158][T20066] Bluetooth: hci0: command tx timeout [ 2268.257805][ T5386] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2268.503810][ T5386] usb 3-1: Using ep0 maxpacket: 32 [ 2268.513243][ T5386] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2268.559001][ T5386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2268.603498][ T5386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2268.640024][ T5386] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2268.661622][ T5386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.696373][ T5386] usb 3-1: config 0 descriptor?? [ 2268.702732][T11290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2268.731774][ T5386] hub 3-1:0.0: USB hub found [ 2268.951407][ T5386] hub 3-1:0.0: 2 ports detected [ 2269.298319][ T8596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2269.319969][ T8596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2269.340289][ T8596] bond0 (unregistering): Released all slaves [ 2269.393780][T11293] vcan0: MTU too low for tipc bearer [ 2269.399126][T11293] tipc: Enabling of bearer rejected, failed to enable media [ 2269.514178][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9354'. [ 2269.825426][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2270.314100][T20066] Bluetooth: hci0: command tx timeout [ 2270.702686][ T8596] hsr_slave_0: left promiscuous mode [ 2270.767660][ T8596] hsr_slave_1: left promiscuous mode [ 2270.791932][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2270.839798][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2270.876296][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2270.896810][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2271.057789][ T5280] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 2271.110273][ T8596] veth1_macvtap: left promiscuous mode [ 2271.157469][ T8596] veth0_macvtap: left promiscuous mode [ 2271.163304][ T8596] veth1_vlan: left promiscuous mode [ 2271.199898][ T8596] veth0_vlan: left promiscuous mode [ 2271.425458][ T5386] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2271.491262][ T5280] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2271.503610][ T5277] usb 3-1: USB disconnect, device number 48 [ 2271.533198][ T5280] usb 3-1-port2: attempt power cycle [ 2271.674089][ T5386] usb 5-1: Using ep0 maxpacket: 16 [ 2271.714957][ T5386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2271.747035][ T5386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2271.783953][ T5386] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2271.803738][ T5386] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 2271.803975][T31860] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2271.821457][ T5386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.925987][ T5386] usb 5-1: config 0 descriptor?? [ 2272.034085][T31860] usb 2-1: Using ep0 maxpacket: 16 [ 2272.049830][T31860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.099976][T31860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.125151][T31860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2272.163744][T31860] usb 2-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 2272.183759][T31860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.240761][T31860] usb 2-1: config 0 descriptor?? [ 2272.347312][ T5386] wacom 0003:056A:0022.00AD: unbalanced collection at end of report description [ 2272.394160][T20066] Bluetooth: hci0: command tx timeout [ 2272.401896][ T5386] wacom 0003:056A:0022.00AD: parse failed [ 2272.433956][ T5386] wacom 0003:056A:0022.00AD: probe with driver wacom failed with error -22 [ 2272.578596][ T5386] usb 5-1: USB disconnect, device number 6 [ 2272.707157][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x2 [ 2272.768120][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2272.824068][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2272.841980][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2272.863141][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2272.881322][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2272.889529][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2272.900285][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2272.920055][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2272.930557][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2272.949072][T31860] hid-multitouch 0003:045E:9994.00AE: unknown main item tag 0x0 [ 2273.012543][T31860] hid-multitouch 0003:045E:9994.00AE: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.1-1/input0 [ 2273.094064][T31860] usb 2-1: USB disconnect, device number 63 [ 2273.709416][T11364] netlink: 'syz.1.9373': attribute type 5 has an invalid length. [ 2274.265676][ T8596] team0 (unregistering): Port device team_slave_1 removed [ 2274.423891][T31860] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2274.439781][ T8596] team0 (unregistering): Port device team_slave_0 removed [ 2274.476825][T20066] Bluetooth: hci0: command tx timeout [ 2274.645396][T31860] usb 4-1: Using ep0 maxpacket: 32 [ 2274.654580][T31860] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2274.680219][T31860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2274.691755][T31860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2274.717742][T31860] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2274.746760][T31860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2274.757018][T31860] usb 4-1: config 0 descriptor?? [ 2274.782733][T11374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2274.799971][T31860] hub 4-1:0.0: USB hub found [ 2275.067685][T31860] hub 4-1:0.0: 2 ports detected [ 2275.135095][T11354] syz.2.9368 (11354): drop_caches: 1 [ 2275.678772][ T5277] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2275.873811][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 2275.896348][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2275.937068][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2275.961053][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2275.975721][ T5277] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 2275.987587][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.009537][ T5277] usb 3-1: config 0 descriptor?? [ 2276.190591][T11255] bridge0: port 1(bridge_slave_0) entered blocking state [ 2276.204193][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 2276.213250][T11255] bridge_slave_0: entered allmulticast mode [ 2276.240133][T11255] bridge_slave_0: entered promiscuous mode [ 2276.302104][T11372] netlink: 'syz.4.9376': attribute type 11 has an invalid length. [ 2276.311450][T11372] netem: change failed [ 2276.361291][T11255] bridge0: port 2(bridge_slave_1) entered blocking state [ 2276.404688][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.411992][T11255] bridge_slave_1: entered allmulticast mode [ 2276.497326][T11255] bridge_slave_1: entered promiscuous mode [ 2276.510376][ T5277] wacom 0003:056A:0022.00AF: unbalanced collection at end of report description [ 2276.543542][ T5277] wacom 0003:056A:0022.00AF: parse failed [ 2276.587143][ T5277] wacom 0003:056A:0022.00AF: probe with driver wacom failed with error -22 [ 2276.690056][T11255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2276.768279][T11255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2276.996619][ T5277] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 2277.014317][ T5386] usb 3-1: USB disconnect, device number 53 [ 2277.032206][T11255] team0: Port device team_slave_0 added [ 2277.110806][T11255] team0: Port device team_slave_1 added [ 2277.214025][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2277.244962][T11255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2277.267179][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.351146][T11255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2277.418466][T11255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2277.434508][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 2277.440454][ T5277] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2277.457975][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.459492][T31920] usb 4-1: USB disconnect, device number 46 [ 2277.486357][ T5277] usb 4-1-port2: attempt power cycle [ 2277.506606][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2277.528832][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2277.553847][T11255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2277.564562][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2277.564597][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2277.564623][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2277.627965][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2277.645327][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.852173][T11255] hsr_slave_0: entered promiscuous mode [ 2277.906745][ T9] usb 5-1: usb_control_msg returned -32 [ 2277.920196][T11255] hsr_slave_1: entered promiscuous mode [ 2277.934246][ T9] usbtmc 5-1:16.0: can't read capabilities [ 2277.944356][T11255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2277.983730][T11255] Cannot create hsr debugfs directory [ 2278.833854][T26718] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2278.866465][T11410] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 2278.876603][T31920] usb 5-1: USB disconnect, device number 7 [ 2279.037469][T26718] usb 4-1: Using ep0 maxpacket: 32 [ 2279.066862][T26718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2279.093717][T26718] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2279.118655][T26718] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22 [ 2279.133725][T26718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.152212][T26718] usb 4-1: Product: syz [ 2279.168100][T26718] usb 4-1: Manufacturer: syz [ 2279.183059][T26718] usb 4-1: SerialNumber: syz [ 2279.225769][T26718] usb 4-1: config 0 descriptor?? [ 2279.255343][T26718] usbserial_generic 4-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2279.283444][T26718] usbserial_generic 4-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2279.312775][T26718] usbserial_generic 4-1:0.0: generic converter detected [ 2279.353062][T26718] usb 4-1: generic converter now attached to ttyUSB0 [ 2279.442648][T26718] usb 4-1: USB disconnect, device number 51 [ 2279.489921][T26718] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2279.522635][T26718] usbserial_generic 4-1:0.0: device disconnected [ 2280.146195][T11255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2280.181107][T11255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2280.264251][T11255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2280.308591][T11255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2280.674588][T11255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2280.764630][T11255] 8021q: adding VLAN 0 to HW filter on device team0 [ 2280.816047][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.823220][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2280.885235][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.892394][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.914372][T31851] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2281.095617][T11255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2281.104733][ T5277] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2281.114684][T31851] usb 5-1: Using ep0 maxpacket: 8 [ 2281.135260][T31851] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2281.165014][T31851] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2281.197864][T31851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2281.231487][T31851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2281.247244][T11255] veth0_vlan: entered promiscuous mode [ 2281.267958][T31851] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2281.287327][T11255] veth1_vlan: entered promiscuous mode [ 2281.305615][ T5277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2281.314684][T31851] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2281.346837][ T5277] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2281.356797][T31851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.378393][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.410289][ T5277] usb 2-1: config 0 descriptor?? [ 2281.425549][T11255] veth0_macvtap: entered promiscuous mode [ 2281.447613][ T5277] pwc: Askey VC010 type 2 USB webcam detected. [ 2281.463005][T11255] veth1_macvtap: entered promiscuous mode [ 2281.570042][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.614256][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.654774][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.666137][T31851] usb 5-1: usb_control_msg returned -32 [ 2281.667791][ T5277] pwc: send_video_command error -71 [ 2281.692217][T31851] usbtmc 5-1:16.0: can't read capabilities [ 2281.703666][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.722638][ T5277] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2281.736172][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.767395][ T5277] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2281.777502][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.777617][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.777637][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.777657][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.777672][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.777691][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.777705][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.777724][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.777739][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.777757][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.777769][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.777787][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.777801][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.777820][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.777834][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.794952][T11255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2281.924271][ T5277] usb 2-1: USB disconnect, device number 64 [ 2282.103521][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.131148][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.154471][ T5280] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2282.183373][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.212285][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.232643][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.263224][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.284563][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.309892][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.350255][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.360922][ T5280] usb 3-1: Using ep0 maxpacket: 32 [ 2282.370969][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2282.383671][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.421284][ T5280] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2282.441707][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.463169][ T5280] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22 [ 2282.469684][ T5277] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2282.500602][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.510673][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.533682][ T5280] usb 3-1: Product: syz [ 2282.537897][ T5280] usb 3-1: Manufacturer: syz [ 2282.542520][ T5280] usb 3-1: SerialNumber: syz [ 2282.553708][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.601710][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.614998][ T5280] usb 3-1: config 0 descriptor?? [ 2282.633933][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.644929][T11495] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 2282.650799][T31851] usb 5-1: USB disconnect, device number 8 [ 2282.687813][ T5280] usbserial_generic 3-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2282.695850][ T5277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2282.712457][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.726688][ T5280] usbserial_generic 3-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2282.737506][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.762167][ T5280] usbserial_generic 3-1:0.0: generic converter detected [ 2282.769375][ T5277] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2282.769664][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.813765][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.816601][ T5280] usb 3-1: generic converter now attached to ttyUSB0 [ 2282.841519][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.857544][ T5277] usb 2-1: config 0 descriptor?? [ 2282.881649][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.896113][ T5277] pwc: Askey VC010 type 2 USB webcam detected. [ 2282.936974][T11255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2282.980745][T11255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.023797][T11255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.032558][T11255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.061703][T11255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.371854][T16697] usb 3-1: USB disconnect, device number 54 [ 2283.420302][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2283.432050][T16697] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2283.466447][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2283.474406][T16697] usbserial_generic 3-1:0.0: device disconnected [ 2283.513868][ T5277] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2283.556028][ T5277] pwc: recv_control_msg error -32 req 02 val 2700 [ 2283.568035][ T5277] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2283.575965][ T3922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2283.578642][ T5277] pwc: recv_control_msg error -32 req 04 val 1000 [ 2283.593093][ T5277] pwc: recv_control_msg error -32 req 04 val 1300 [ 2283.606446][ T3922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2283.618719][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.629464][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.654315][ T5277] pwc: recv_control_msg error -32 req 04 val 1400 [ 2283.661728][ T5277] pwc: recv_control_msg error -32 req 02 val 2000 [ 2283.671732][ T5277] pwc: recv_control_msg error -32 req 02 val 2100 [ 2283.695697][ T5277] pwc: recv_control_msg error -32 req 04 val 1500 [ 2283.712442][ T5277] pwc: recv_control_msg error -32 req 02 val 2500 [ 2283.743087][ T5277] pwc: recv_control_msg error -32 req 02 val 2400 [ 2283.775242][ T5277] pwc: recv_control_msg error -32 req 02 val 2600 [ 2283.793809][T26718] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2284.015660][T26718] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2284.033326][ T5277] pwc: recv_control_msg error -71 req 02 val 2800 [ 2284.053970][T26718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.064678][ T5277] pwc: recv_control_msg error -71 req 04 val 1100 [ 2284.075691][T26718] usb 4-1: config 0 descriptor?? [ 2284.083200][ T5277] pwc: recv_control_msg error -71 req 04 val 1200 [ 2284.121147][ T5277] pwc: Registered as video71. [ 2284.149506][ T5277] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input164 [ 2284.193133][ T5277] usb 2-1: USB disconnect, device number 65 [ 2284.325974][T26718] usb 4-1: Cannot read MAC address [ 2284.363536][T26718] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2284.421158][T26718] usb 4-1: USB disconnect, device number 52 [ 2284.503885][T11532] netlink: 'syz.2.9417': attribute type 11 has an invalid length. [ 2284.888103][T11548] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9420'. [ 2285.323989][T26718] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2285.548462][T26718] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 2285.584642][T26718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.622300][T26718] usb 2-1: Product: syz [ 2285.635093][T26718] usb 2-1: Manufacturer: syz [ 2285.645235][T26718] usb 2-1: SerialNumber: syz [ 2285.661294][T26718] usb 2-1: config 0 descriptor?? [ 2285.689416][T26718] upd78f0730 2-1:0.0: upd78f0730 converter detected [ 2285.738484][T26718] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 2285.952122][ T5386] usb 2-1: USB disconnect, device number 66 [ 2285.981174][ T5386] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 2286.014513][ T5386] upd78f0730 2-1:0.0: device disconnected [ 2286.415759][T11590] geneve3: entered promiscuous mode [ 2286.421054][T11590] geneve3: entered allmulticast mode [ 2286.533937][T16697] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2286.733871][T16697] usb 5-1: Using ep0 maxpacket: 32 [ 2286.751343][T16697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2286.795396][T16697] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2286.845004][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9432'. [ 2286.846139][T16697] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22 [ 2286.911667][T16697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.933730][T16697] usb 5-1: Product: syz [ 2286.937936][T16697] usb 5-1: Manufacturer: syz [ 2286.963769][T26718] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2286.973792][ T5277] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2286.996329][T16697] usb 5-1: SerialNumber: syz [ 2287.015326][T16697] usb 5-1: config 0 descriptor?? [ 2287.047699][T16697] usbserial_generic 5-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2287.083807][T16697] usbserial_generic 5-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2287.138350][T16697] usbserial_generic 5-1:0.0: generic converter detected [ 2287.173894][T26718] usb 3-1: Using ep0 maxpacket: 16 [ 2287.179840][T16697] usb 5-1: generic converter now attached to ttyUSB0 [ 2287.203887][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 2287.232417][T26718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2287.255605][ T5277] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2287.272979][ T5277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2287.284914][T26718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2287.313873][T26718] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2287.326892][ T5277] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2287.374191][ T5277] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2287.393818][T31920] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2287.397800][T26718] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 2287.444109][ T5277] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 2287.472635][T26718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.502558][ T5277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2287.517652][T26718] usb 3-1: config 0 descriptor?? [ 2287.526908][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2287.545499][ T5277] usb 2-1: SerialNumber: syz [ 2287.578554][T11597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2287.581366][ T5386] usb 5-1: USB disconnect, device number 9 [ 2287.599024][T11597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2287.605745][T31920] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2287.644112][T31920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.646240][ T5277] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 2287.652950][ T5386] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2287.705826][T31920] usb 4-1: config 0 descriptor?? [ 2287.732485][ T5386] usbserial_generic 5-1:0.0: device disconnected [ 2287.834032][T16697] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2287.948485][ T5277] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 2287.969910][ T5277] usb 2-1: USB disconnect, device number 67 [ 2288.002397][T31920] usb 4-1: Cannot read MAC address [ 2288.030776][T26718] wacom 0003:056A:0022.00B0: unbalanced collection at end of report description [ 2288.048682][T31920] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2288.061729][T26718] wacom 0003:056A:0022.00B0: parse failed [ 2288.093898][T16697] usb 1-1: Using ep0 maxpacket: 16 [ 2288.114661][T26718] wacom 0003:056A:0022.00B0: probe with driver wacom failed with error -22 [ 2288.133847][T31920] usb 4-1: USB disconnect, device number 53 [ 2288.143029][T16697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2288.176752][T16697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2288.217820][T16697] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2288.287763][T16697] usb 1-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 2288.314378][T16697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.343904][T16697] usb 1-1: config 0 descriptor?? [ 2288.456649][T26718] usb 3-1: USB disconnect, device number 55 [ 2288.806071][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x2 [ 2288.855770][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2288.883815][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2288.897201][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2288.919838][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2288.991180][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2289.023482][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2289.075308][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2289.098924][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2289.117161][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2289.169058][T16697] hid-multitouch 0003:045E:9994.00B1: unknown main item tag 0x0 [ 2289.220518][T16697] hid-multitouch 0003:045E:9994.00B1: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.0-1/input0 [ 2289.297367][T16697] usb 1-1: USB disconnect, device number 51 [ 2289.826275][T11642] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2289.835557][T31860] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2290.058065][T31860] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 2290.098304][T31860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.135062][T11657] geneve2: entered promiscuous mode [ 2290.148898][T31860] usb 2-1: Product: syz [ 2290.163532][T31860] usb 2-1: Manufacturer: syz [ 2290.163785][T11657] geneve2: entered allmulticast mode [ 2290.194144][T31860] usb 2-1: SerialNumber: syz [ 2290.226027][T31860] usb 2-1: config 0 descriptor?? [ 2290.250512][T31860] upd78f0730 2-1:0.0: upd78f0730 converter detected [ 2290.288799][T31860] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 2290.456747][ C1] eth0: bad gso: type: 1, size: 1408 [ 2290.557017][ T5277] usb 2-1: USB disconnect, device number 68 [ 2290.601032][ T5277] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 2290.626157][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9444'. [ 2290.638213][ T5277] upd78f0730 2-1:0.0: device disconnected [ 2291.173818][T31860] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2291.231730][T11679] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2291.265104][T11679] netlink: 'syz.2.9449': attribute type 1 has an invalid length. [ 2291.285438][T11679] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2291.331525][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9451'. [ 2291.341081][T11684] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2291.361961][T11679] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2291.400681][T31860] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2291.425702][T31860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.449420][T31860] usb 5-1: config 0 descriptor?? [ 2291.455787][T11684] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 2291.462426][T11684] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2291.483775][T11689] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 2291.508316][T11684] vhci_hcd vhci_hcd.0: Device attached [ 2291.597813][T11687] vhci_hcd: connection closed [ 2291.608233][ T3922] vhci_hcd: stop threads [ 2291.622393][ T3922] vhci_hcd: release socket [ 2291.632220][ T3922] vhci_hcd: disconnect device [ 2291.705353][T16697] vhci_hcd: vhci_device speed not set [ 2291.744891][T31860] usb 5-1: Cannot read MAC address [ 2291.755903][T31860] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2291.810848][T31860] usb 5-1: USB disconnect, device number 10 [ 2291.965053][T11700] xt_policy: too many policy elements [ 2292.152002][T11705] geneve2: entered promiscuous mode [ 2292.167309][T11705] geneve2: entered allmulticast mode [ 2292.635304][T11720] netlink: 'syz.4.9460': attribute type 6 has an invalid length. [ 2292.672528][T11720] netlink: 14577 bytes leftover after parsing attributes in process `syz.4.9460'. [ 2292.753907][T31851] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2292.999521][T31851] usb 4-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 2293.015432][T11729] xt_policy: too many policy elements [ 2293.043777][T31851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2293.051867][T31851] usb 4-1: Product: syz [ 2293.087864][T31851] usb 4-1: Manufacturer: syz [ 2293.092526][T31851] usb 4-1: SerialNumber: syz [ 2293.110881][T31851] usb 4-1: config 0 descriptor?? [ 2293.157109][T31851] upd78f0730 4-1:0.0: upd78f0730 converter detected [ 2293.178325][T11734] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2293.194584][T31851] usb 4-1: upd78f0730 converter now attached to ttyUSB0 [ 2293.219120][T11734] netlink: 'syz.1.9469': attribute type 1 has an invalid length. [ 2293.248218][T11734] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2293.266602][T11734] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2293.332027][T11734] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2293.360320][T11734] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 2293.366951][T11734] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2293.375852][T11734] vhci_hcd vhci_hcd.0: Device attached [ 2293.450535][ T5386] usb 4-1: USB disconnect, device number 54 [ 2293.458721][ T5386] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 2293.480194][ T5386] upd78f0730 4-1:0.0: device disconnected [ 2293.482499][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.555967][T11736] vhci_hcd: connection closed [ 2293.556225][ T3922] vhci_hcd: stop threads [ 2293.574147][ T3922] vhci_hcd: release socket [ 2293.584025][ T3922] vhci_hcd: disconnect device [ 2293.594165][T31920] vhci_hcd: vhci_device speed not set [ 2293.764232][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.977285][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.225247][T13506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2294.238981][T13506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2294.251205][T13506] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2294.267625][T13506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2294.284010][T13506] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2294.291470][T13506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2294.387752][T11751] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2294.420848][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.634293][ T5280] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2294.882324][ T5280] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 2294.934333][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.013902][ T5280] usb 4-1: Product: syz [ 2295.024500][ T5280] usb 4-1: Manufacturer: syz [ 2295.029175][ T5280] usb 4-1: SerialNumber: syz [ 2295.072016][ T5280] usb 4-1: config 0 descriptor?? [ 2295.106825][ T5280] cypress_m8 4-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 2295.116239][ T11] bridge_slave_1: left allmulticast mode [ 2295.127719][ T11] bridge_slave_1: left promiscuous mode [ 2295.133512][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2295.145806][ T5280] nokiaca42v2 ttyUSB0: required endpoint is missing [ 2295.240332][ T11] bridge_slave_0: left allmulticast mode [ 2295.256886][ T11] bridge_slave_0: left promiscuous mode [ 2295.270837][T11773] xt_policy: too many policy elements [ 2295.271615][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2295.290731][T11767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2295.345812][T31920] usb 4-1: USB disconnect, device number 55 [ 2295.354476][T31920] cypress_m8 4-1:0.0: device disconnected [ 2295.754342][ T5280] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2295.980634][ T5280] usb 5-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 2295.999249][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.074483][ T5280] usb 5-1: Product: syz [ 2296.078730][ T5280] usb 5-1: Manufacturer: syz [ 2296.083346][ T5280] usb 5-1: SerialNumber: syz [ 2296.128875][ T5280] usb 5-1: config 0 descriptor?? [ 2296.154328][ T5280] upd78f0730 5-1:0.0: upd78f0730 converter detected [ 2296.220640][ T5280] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 2296.404619][T20066] Bluetooth: hci0: command tx timeout [ 2296.579854][ T5280] usb 5-1: USB disconnect, device number 11 [ 2296.600339][ T5280] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 2296.632491][ T5280] upd78f0730 5-1:0.0: device disconnected [ 2297.348162][T11822] xt_policy: too many policy elements [ 2297.494436][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2297.552607][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2297.587337][ T11] bond0 (unregistering): Released all slaves [ 2297.711800][T11752] chnl_net:caif_netlink_parms(): no params data found [ 2297.805631][T31919] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2297.894547][ T11] IPVS: stopping backup sync thread 11689 ... [ 2298.040264][T31919] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 2298.074473][T31919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.115005][T31919] usb 4-1: Product: syz [ 2298.133937][T31919] usb 4-1: Manufacturer: syz [ 2298.138571][T31919] usb 4-1: SerialNumber: syz [ 2298.186219][T31919] usb 4-1: config 0 descriptor?? [ 2298.214947][T31919] cypress_m8 4-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 2298.248323][T31919] nokiaca42v2 ttyUSB0: required endpoint is missing [ 2298.474677][T20066] Bluetooth: hci0: command tx timeout [ 2298.534392][T11752] bridge0: port 1(bridge_slave_0) entered blocking state [ 2298.546258][T16697] usb 4-1: USB disconnect, device number 56 [ 2298.582496][T16697] cypress_m8 4-1:0.0: device disconnected [ 2298.590738][T11752] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.610771][T11752] bridge_slave_0: entered allmulticast mode [ 2298.630728][T11752] bridge_slave_0: entered promiscuous mode [ 2298.636959][T31851] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2298.752919][T11752] bridge0: port 2(bridge_slave_1) entered blocking state [ 2298.777130][T11752] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.805158][T11752] bridge_slave_1: entered allmulticast mode [ 2298.812591][T11752] bridge_slave_1: entered promiscuous mode [ 2298.881967][T31851] usb 2-1: Using ep0 maxpacket: 32 [ 2298.907232][ T11] hsr_slave_0: left promiscuous mode [ 2298.927961][T31851] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2298.949808][ T11] hsr_slave_1: left promiscuous mode [ 2298.974976][T31851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2298.988472][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2298.993909][T31851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2299.017184][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2299.020380][T31851] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2299.043704][T31851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.055367][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2299.066030][T31851] usb 2-1: config 0 descriptor?? [ 2299.072003][T11854] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2299.093497][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2299.095121][T31851] hub 2-1:0.0: USB hub found [ 2299.215940][ T11] veth1_macvtap: left promiscuous mode [ 2299.242157][ T11] veth0_macvtap: left promiscuous mode [ 2299.248094][T16697] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2299.266898][ T11] veth1_vlan: left promiscuous mode [ 2299.272290][ T11] veth0_vlan: left promiscuous mode [ 2299.317233][T31851] hub 2-1:0.0: 2 ports detected [ 2299.471243][T16697] usb 5-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 2299.500146][T16697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.529055][T16697] usb 5-1: Product: syz [ 2299.533260][T16697] usb 5-1: Manufacturer: syz [ 2299.561204][T16697] usb 5-1: SerialNumber: syz [ 2299.591774][T16697] usb 5-1: config 0 descriptor?? [ 2299.615892][T16697] upd78f0730 5-1:0.0: upd78f0730 converter detected [ 2299.628555][T16697] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 2299.943145][T16697] usb 5-1: USB disconnect, device number 12 [ 2299.969902][T16697] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 2299.986948][T16697] upd78f0730 5-1:0.0: device disconnected [ 2300.234547][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9508'. [ 2300.574863][T20066] Bluetooth: hci0: command tx timeout [ 2300.961137][T11898] dccp_invalid_packet: P.Data Offset(253) too large [ 2301.253075][T11900] futex_wake_op: syz.4.9514 tries to shift op by -1; fix this program [ 2301.364726][T31919] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 2301.807848][T31919] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2301.816438][T31851] usb 2-1: USB disconnect, device number 69 [ 2301.822551][T31919] usb 2-1-port2: cannot reset (err = -71) [ 2301.833695][T31919] usb 2-1-port2: Cannot enable. Maybe the USB cable is bad? [ 2301.874246][T31919] usb 2-1-port2: attempt power cycle [ 2301.972902][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2302.278380][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2302.508795][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9519'. [ 2302.634414][T20066] Bluetooth: hci0: command tx timeout [ 2302.778998][T11920] dccp_invalid_packet: P.Data Offset(253) too large [ 2302.836725][T26718] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2303.048079][T26718] usb 5-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 2303.083720][T26718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.093157][T26718] usb 5-1: Product: syz [ 2303.102034][T26718] usb 5-1: Manufacturer: syz [ 2303.123995][T26718] usb 5-1: SerialNumber: syz [ 2303.164099][T26718] usb 5-1: config 0 descriptor?? [ 2303.176239][T26718] upd78f0730 5-1:0.0: upd78f0730 converter detected [ 2303.234540][T31919] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2303.248059][T26718] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 2303.463400][T31919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2303.481629][T31919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2303.498244][T31860] usb 5-1: USB disconnect, device number 13 [ 2303.502174][T31919] usb 2-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 2303.514970][T31860] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 2303.541422][T31860] upd78f0730 5-1:0.0: device disconnected [ 2303.556616][T31919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.578178][T31919] usb 2-1: config 0 descriptor?? [ 2304.329389][T11752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2304.398381][T11752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2304.731392][T11752] team0: Port device team_slave_0 added [ 2304.737889][ T29] audit: type=1326 audit(1722145038.346:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11935 comm="syz.4.9528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2304.808080][T11752] team0: Port device team_slave_1 added [ 2304.834134][ T29] audit: type=1326 audit(1722145038.346:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11935 comm="syz.4.9528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2305.011758][ T29] audit: type=1326 audit(1722145038.416:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11935 comm="syz.4.9528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2305.063332][ T29] audit: type=1326 audit(1722145038.416:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11935 comm="syz.4.9528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2305.157061][ T29] audit: type=1326 audit(1722145038.426:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11935 comm="syz.4.9528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2305.188950][T31919] usbhid 2-1:0.0: can't add hid device: -71 [ 2305.205198][T11752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2305.222531][T31919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2305.243212][T11752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2305.257236][T31919] usb 2-1: USB disconnect, device number 74 [ 2305.291778][ T29] audit: type=1326 audit(1722145038.426:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11935 comm="syz.4.9528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2305.391481][T11752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2305.391886][ T29] audit: type=1326 audit(1722145038.426:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11935 comm="syz.4.9528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2305.487693][T11752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2305.499330][ T29] audit: type=1326 audit(1722145038.426:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11935 comm="syz.4.9528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2305.504139][T26718] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2305.561272][T11752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2305.601941][T11752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2305.738507][T11960] dccp_invalid_packet: P.Data Offset(253) too large [ 2305.820222][T11752] hsr_slave_0: entered promiscuous mode [ 2305.827021][T26718] usb 5-1: Using ep0 maxpacket: 8 [ 2305.847522][T26718] usb 5-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 2305.862194][T26718] usb 5-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 2305.886634][T11752] hsr_slave_1: entered promiscuous mode [ 2305.886805][T26718] usb 5-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 2305.911879][T26718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.921572][T26718] usb 5-1: Product: syz [ 2305.934629][T26718] usb 5-1: Manufacturer: syz [ 2305.940839][T11752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2305.961099][T26718] usb 5-1: SerialNumber: syz [ 2305.970861][T11752] Cannot create hsr debugfs directory [ 2306.008544][T26718] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 2306.057517][T26718] dvb-usb: bulk message failed: -22 (3/0) [ 2306.108026][T26718] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author error while loading driver (-22) [ 2306.162326][T26718] dvb_usb_dibusb_mb 5-1:167.0: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 2306.218360][T26718] usb 5-1: USB disconnect, device number 14 [ 2306.629924][ T11] bridge_slave_1: left allmulticast mode [ 2306.642964][ T11] bridge_slave_1: left promiscuous mode [ 2306.662380][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.684228][ T11] bridge_slave_0: left allmulticast mode [ 2306.690945][ T11] bridge_slave_0: left promiscuous mode [ 2306.708046][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2306.763865][T26718] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2306.978174][T26718] usb 4-1: config 0 has no interfaces? [ 2307.000656][T26718] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2307.025066][T26718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.048925][T26718] usb 4-1: Product: syz [ 2307.053219][T26718] usb 4-1: Manufacturer: syz [ 2307.070221][T26718] usb 4-1: SerialNumber: syz [ 2307.091271][T26718] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2307.107264][T26718] r8152-cfgselector 4-1: config 0 descriptor?? [ 2307.213708][ T29] audit: type=1326 audit(1722145040.826:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2307.308637][ T29] audit: type=1326 audit(1722145040.826:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2307.477249][T31851] r8152-cfgselector 4-1: USB disconnect, device number 57 [ 2308.008391][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2308.039744][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2308.069117][ T11] bond0 (unregistering): Released all slaves [ 2308.473210][T11998] dccp_invalid_packet: P.Data Offset(253) too large [ 2309.383898][T31860] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2309.580899][ T11] hsr_slave_0: left promiscuous mode [ 2309.619336][ T11] hsr_slave_1: left promiscuous mode [ 2309.659926][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2309.673834][T31860] usb 4-1: config 0 has no interfaces? [ 2309.684121][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2309.710979][T31860] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2309.724531][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2309.733417][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2309.742428][T31860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.775559][T31860] usb 4-1: Product: syz [ 2309.782243][T31860] usb 4-1: Manufacturer: syz [ 2309.812663][T31860] usb 4-1: SerialNumber: syz [ 2309.863966][T31860] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2309.870276][T31860] r8152-cfgselector 4-1: config 0 descriptor?? [ 2309.905385][ T11] veth1_macvtap: left promiscuous mode [ 2309.915337][ T11] veth0_macvtap: left promiscuous mode [ 2309.936179][ T11] veth1_vlan: left promiscuous mode [ 2309.941569][ T11] veth0_vlan: left promiscuous mode [ 2310.183442][T31919] r8152-cfgselector 4-1: USB disconnect, device number 58 [ 2311.960584][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2312.054918][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2313.813328][T11752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2313.867791][T12081] xt_limit: Overflow, try lower: 0/0 [ 2313.884543][T11752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2313.910722][T11752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2313.985144][T11752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2314.093766][T26718] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2314.331561][T26718] usb 2-1: config 0 has no interfaces? [ 2314.375046][T26718] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2314.387487][T26718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.431227][T26718] usb 2-1: Product: syz [ 2314.442063][T26718] usb 2-1: Manufacturer: syz [ 2314.464149][T26718] usb 2-1: SerialNumber: syz [ 2314.494513][T26718] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2314.513359][T26718] r8152-cfgselector 2-1: config 0 descriptor?? [ 2314.799058][ T5277] r8152-cfgselector 2-1: USB disconnect, device number 75 [ 2315.189953][T11752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2315.309615][T11752] 8021q: adding VLAN 0 to HW filter on device team0 [ 2315.406768][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.413977][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2315.496884][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.504105][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2315.785406][T12117] team0: Port device macvlan1 added [ 2315.896858][T11752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2316.027164][T12137] usb usb8: usbfs: process 12137 (syz.1.9580) did not claim interface 0 before use [ 2316.039818][T11752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2316.204190][T26718] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2316.296922][T11752] veth0_vlan: entered promiscuous mode [ 2316.395990][T20066] Bluetooth: hci5: command 0x0406 tx timeout [ 2316.424027][T26718] usb 5-1: Using ep0 maxpacket: 32 [ 2316.464778][T26718] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2316.473180][T26718] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2316.540424][T26718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2316.559023][T26718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2316.610807][T26718] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2316.631700][T26718] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2316.672506][T26718] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2316.714459][T26718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.756664][T26718] usb 5-1: config 0 descriptor?? [ 2316.977064][T26718] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2317.016204][T26718] usb 5-1: USB disconnect, device number 15 [ 2317.055071][T26718] usblp0: removed [ 2317.167281][T11752] veth1_vlan: entered promiscuous mode [ 2317.566644][T11752] veth0_macvtap: entered promiscuous mode [ 2317.574244][T26718] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2317.616797][T11752] veth1_macvtap: entered promiscuous mode [ 2317.689543][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.716925][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.727089][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.763959][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.785586][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.804012][T26718] usb 5-1: Using ep0 maxpacket: 32 [ 2317.820300][T26718] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2317.829301][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.840732][T26718] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2317.873603][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.883844][T26718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2317.900352][T26718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2317.921681][T26718] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2317.940493][T26718] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2317.963511][T26718] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2317.964444][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.972911][T26718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.019754][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.050716][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.062867][T26718] usb 5-1: config 0 descriptor?? [ 2318.070224][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.084508][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.097197][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.110528][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.134882][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.170919][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.203337][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.250882][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.298705][T26718] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2318.333028][T11752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2318.365038][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.413714][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.449531][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.465297][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.496139][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.543791][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.570089][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.601267][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.638225][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.697770][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.726834][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.761425][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.776680][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.793440][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.813220][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.833874][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.874434][T16697] usb 5-1: USB disconnect, device number 16 [ 2318.877600][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.891519][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.904502][T11752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2318.972894][T11752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2318.993489][T16697] usblp0: removed [ 2319.043531][T11752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.073751][T11752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.110412][T11752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.408259][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2319.451386][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2319.463773][T31860] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2319.560560][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2319.574529][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2319.704330][T31860] usb 4-1: Using ep0 maxpacket: 8 [ 2319.724808][T31860] usb 4-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 2319.775839][T31860] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2319.833242][T31860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2319.855850][T31860] usb 4-1: SerialNumber: syz [ 2319.901305][T31860] cdc_ether 4-1:1.0: skipping garbage [ 2319.935102][T31860] usb 4-1: bad CDC descriptors [ 2320.044196][ T5386] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2320.095892][T12201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2320.142907][T12201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2320.277526][ T5386] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2320.305079][ T5386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.344900][ T5386] usb 1-1: config 0 descriptor?? [ 2320.605271][ T5386] usb 1-1: Cannot read MAC address [ 2320.661495][ T5386] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2320.695218][ T5276] usb 4-1: USB disconnect, device number 59 [ 2320.748194][ T5386] usb 1-1: USB disconnect, device number 52 [ 2321.484549][T26718] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2321.634016][T31860] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2321.698570][T26718] usb 5-1: Using ep0 maxpacket: 32 [ 2321.735026][T26718] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2321.743416][T26718] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2321.793834][T26718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2321.821351][T26718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2321.837609][T26718] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2321.852427][T26718] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2321.877212][T31860] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2321.892570][T26718] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2321.901698][T31860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.923826][T26718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.932357][T31860] usb 1-1: config 0 descriptor?? [ 2321.946026][T31860] cp210x 1-1:0.0: cp210x converter detected [ 2321.961329][T26718] usb 5-1: config 0 descriptor?? [ 2322.224123][T26718] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2322.271288][T26718] usb 5-1: USB disconnect, device number 17 [ 2322.309611][T26718] usblp0: removed [ 2322.350205][T31860] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 2322.375971][T31860] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2322.406055][T31860] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 2322.420991][T31860] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2322.454818][T31860] usb 1-1: USB disconnect, device number 53 [ 2322.501560][T31860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2322.548902][T31860] cp210x 1-1:0.0: device disconnected [ 2322.797671][T12287] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 2322.814128][T12287] PKCS7: Only support pkcs7_signedData type [ 2322.834274][T26718] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2323.013881][T26718] usb 5-1: Using ep0 maxpacket: 32 [ 2323.059042][T26718] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2323.082321][T26718] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2323.102579][T26718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2323.123958][T26718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2323.143758][T26718] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2323.183709][T26718] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2323.239612][T26718] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2323.261098][T26718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.292549][T26718] usb 5-1: config 0 descriptor?? [ 2323.544797][T12308] netlink: 18 bytes leftover after parsing attributes in process `syz.2.9628'. [ 2323.574518][T26718] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2323.619588][T12308] bridge0: entered promiscuous mode [ 2323.696702][T12311] ALSA: seq fatal error: cannot create timer (-22) [ 2323.732799][T12308] bridge0: left promiscuous mode [ 2324.114380][T31919] usb 5-1: USB disconnect, device number 18 [ 2324.131959][T31919] usblp0: removed [ 2324.437824][T12327] netlink: 'syz.3.9637': attribute type 10 has an invalid length. [ 2324.470723][T12327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9637'. [ 2324.506890][T12327] veth0_vlan: entered allmulticast mode [ 2324.517534][T12327] bridge0: port 3(veth0_vlan) entered blocking state [ 2324.538725][T12327] bridge0: port 3(veth0_vlan) entered disabled state [ 2324.555743][T31860] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2324.568058][T12327] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2324.769973][T31860] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2324.811483][T31860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.833390][T31860] usb 1-1: config 0 descriptor?? [ 2324.847282][T31860] cp210x 1-1:0.0: cp210x converter detected [ 2325.123804][ T5277] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2325.305786][T31860] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 2325.349718][T31860] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2325.358148][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 2325.386442][T31860] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 2325.396663][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2325.421799][T31860] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2325.434602][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2325.467565][T31860] usb 1-1: USB disconnect, device number 54 [ 2325.473721][ T5277] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2325.504217][T31860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2325.526824][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2325.564391][T31860] cp210x 1-1:0.0: device disconnected [ 2325.572814][ T5277] usb 4-1: config 0 descriptor?? [ 2326.281081][T12351] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 2326.307746][T12351] PKCS7: Only support pkcs7_signedData type [ 2326.499104][T16697] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2326.522890][ T5277] usbhid 4-1:0.0: can't add hid device: -71 [ 2326.534620][ T5277] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2326.560911][ T5277] usb 4-1: USB disconnect, device number 60 [ 2326.635169][T20066] Bluetooth: hci4: command 0x0406 tx timeout [ 2326.735314][T16697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2326.794398][T16697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2326.858194][T16697] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 2326.883852][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2326.932134][T16697] usb 3-1: config 0 descriptor?? [ 2327.471643][T16697] asus 0003:0B05:17E0.00B2: unknown main item tag 0x0 [ 2327.483785][T16697] asus 0003:0B05:17E0.00B2: item fetching failed at offset 5/7 [ 2327.494677][T16697] asus 0003:0B05:17E0.00B2: Asus hid parse failed: -22 [ 2327.515613][T16697] asus 0003:0B05:17E0.00B2: probe with driver asus failed with error -22 [ 2327.534730][T31919] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2327.689852][ T5386] usb 3-1: USB disconnect, device number 56 [ 2327.703823][ T5277] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2327.794235][T31919] usb 5-1: Using ep0 maxpacket: 32 [ 2327.802209][T31919] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2327.810786][T31919] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2327.821029][T31919] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2327.831418][T31919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2327.841665][T31919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2327.854119][T31919] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2327.867221][T31919] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2327.876642][T31919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2327.893328][T31919] usb 5-1: config 0 descriptor?? [ 2327.916834][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 2327.947743][ T5277] usb 1-1: New USB device found, idVendor=04ca, idProduct=5f6b, bcdDevice=39.0e [ 2327.987260][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.047314][ T5277] usb 1-1: config 0 descriptor?? [ 2328.180330][T31919] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2328.231926][T31919] usb 5-1: USB disconnect, device number 19 [ 2328.276052][T31919] usblp0: removed [ 2328.813837][T16697] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2328.870955][T12388] netlink: 'syz.3.9659': attribute type 10 has an invalid length. [ 2329.023803][T16697] usb 5-1: Using ep0 maxpacket: 32 [ 2329.047044][T16697] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2329.080629][T16697] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2329.109936][T16697] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2329.139150][T16697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2329.167077][T16697] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2329.186309][T16697] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2329.211116][T16697] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2329.239586][T16697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.272301][T16697] usb 5-1: config 0 descriptor?? [ 2329.288930][T12397] batadv0: entered promiscuous mode [ 2329.400511][T12397] batadv0: left promiscuous mode [ 2329.557356][T16697] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2329.984991][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2330.003700][ T5280] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2330.077646][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2330.137323][T16697] usb 5-1: USB disconnect, device number 20 [ 2330.166956][T16697] usblp0: removed [ 2330.244449][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2330.272587][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2330.326671][ T5280] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 2330.346976][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.375470][ T5280] usb 3-1: config 0 descriptor?? [ 2330.404058][T12419] netlink: 'syz.3.9672': attribute type 10 has an invalid length. [ 2330.862694][ T5280] asus 0003:0B05:17E0.00B3: unknown main item tag 0x0 [ 2330.904097][ T5280] asus 0003:0B05:17E0.00B3: item fetching failed at offset 5/7 [ 2330.939894][ T5280] asus 0003:0B05:17E0.00B3: Asus hid parse failed: -22 [ 2330.964851][ T5280] asus 0003:0B05:17E0.00B3: probe with driver asus failed with error -22 [ 2331.114119][T31851] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2331.227278][T31860] usb 3-1: USB disconnect, device number 57 [ 2331.354059][T31851] usb 2-1: Using ep0 maxpacket: 32 [ 2331.387498][T31851] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=a6.59 [ 2331.399729][T31851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.412214][T31851] usb 2-1: Product: syz [ 2331.427112][T31851] usb 2-1: Manufacturer: syz [ 2331.440601][T31851] usb 2-1: SerialNumber: syz [ 2331.458654][T31851] usb 2-1: config 0 descriptor?? [ 2331.510737][T31851] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2331.654465][T12442] batadv0: entered promiscuous mode [ 2331.673101][T12442] batadv0: left promiscuous mode [ 2331.736182][T31851] gspca_topro: reg_w err -71 [ 2331.773787][T31851] gspca_topro: Sensor soi763a [ 2331.785639][T31851] usb 2-1: USB disconnect, device number 76 [ 2331.971970][T12447] vivid-003: disconnect [ 2331.997911][T12446] vivid-003: reconnect [ 2332.823856][T31851] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2332.985496][T12479] batadv0: entered promiscuous mode [ 2333.015517][T12479] batadv0: left promiscuous mode [ 2333.033804][T31851] usb 4-1: Using ep0 maxpacket: 8 [ 2333.046435][T31851] usb 4-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 2333.072276][T31851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.095666][T31851] usb 4-1: Product: syz [ 2333.099974][T31851] usb 4-1: Manufacturer: syz [ 2333.114967][T31851] usb 4-1: SerialNumber: syz [ 2333.134086][T31851] usb 4-1: config 0 descriptor?? [ 2333.154434][T31851] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2333.174332][T31851] usb-storage 4-1:0.0: Quirks match for vid 0781 pid 0001: 1 [ 2333.210336][T31851] usb-storage 4-1:0.0: This device (0781,0001,0200 S 06 P a4) has an unneeded SubClass entry in unusual_devs.h (kernel 6.10.0-syzkaller-12881-g6342649c33d2) [ 2333.210336][T31851] Please send a copy of this message to and [ 2333.475400][T31851] usb 4-1: USB disconnect, device number 61 [ 2333.597278][T12499] netlink: 'syz.0.9700': attribute type 19 has an invalid length. [ 2333.751178][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9702'. [ 2333.809436][T13506] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2334.093817][T26718] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2334.129017][T31851] IPVS: starting estimator thread 0... [ 2334.244327][T12515] IPVS: using max 19 ests per chain, 45600 per kthread [ 2334.364587][T26718] usb 3-1: Using ep0 maxpacket: 32 [ 2334.384652][T26718] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2334.417480][T26718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.458031][T26718] usb 3-1: Product: syz [ 2334.481148][T26718] usb 3-1: Manufacturer: syz [ 2334.500233][T26718] usb 3-1: SerialNumber: syz [ 2334.511575][T12525] batadv0: entered promiscuous mode [ 2334.527638][T26718] usb 3-1: config 0 descriptor?? [ 2334.541765][T26718] cdc_ether 3-1:0.0: probe with driver cdc_ether failed with error -22 [ 2334.560150][T26718] usb 3-1: unsupported MDLM descriptors [ 2334.572741][T12525] batadv0: left promiscuous mode [ 2334.789919][T16697] usb 3-1: USB disconnect, device number 58 [ 2335.174579][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9714'. [ 2335.242004][T12540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9717'. [ 2335.706239][T16697] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2335.772026][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9723'. [ 2335.795123][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9723'. [ 2335.804717][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9723'. [ 2335.935324][T16697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2335.962906][T16697] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2335.999940][T16697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2336.013165][T16697] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2336.030494][T16697] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2336.040999][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.053904][T31851] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2336.072393][T16697] usb 2-1: config 0 descriptor?? [ 2336.302221][T16697] hdpvr 2-1:0.0: firmware version 0x0 dated [ 2336.311443][T31851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2336.329307][T16697] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 2336.357748][T31851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2336.391196][T31851] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2336.416570][T31851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.463532][T31851] usb 3-1: config 0 descriptor?? [ 2336.503077][T16697] hdpvr 2-1:0.0: device init failed [ 2336.527863][T16697] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 2336.564058][T16697] usb 2-1: USB disconnect, device number 77 [ 2336.746338][T31860] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2336.874758][T13506] Bluetooth: hci1: command 0x0406 tx timeout [ 2336.942488][T31851] wacom 0003:056A:00D0.00B4: unknown main item tag 0x0 [ 2336.944153][T31860] usb 5-1: Using ep0 maxpacket: 8 [ 2336.983441][T31860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2336.991441][T31851] wacom 0003:056A:00D0.00B4: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 2337.000346][T31860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2337.029120][T31860] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2337.048580][T12581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9731'. [ 2337.083222][T31860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2337.084480][T31851] wacom 0003:056A:00D0.00B4: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 2337.135046][T31860] usb 5-1: config 0 descriptor?? [ 2337.194177][T31851] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.00B4/input/input165 [ 2337.468166][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9733'. [ 2337.484109][T31851] usb 3-1: USB disconnect, device number 59 [ 2337.912491][T31860] usbhid 5-1:0.0: can't add hid device: -71 [ 2337.931318][T31860] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2337.958402][T31860] usb 5-1: USB disconnect, device number 21 [ 2337.973933][T31919] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2338.243764][T31919] usb 4-1: Using ep0 maxpacket: 16 [ 2338.275386][T31919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2338.301329][T31919] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2338.311018][T31919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.324066][T31919] usb 4-1: Product: syz [ 2338.328265][T31919] usb 4-1: Manufacturer: syz [ 2338.346583][T31919] usb 4-1: SerialNumber: syz [ 2338.358898][T31919] usb 4-1: config 0 descriptor?? [ 2338.554633][T31919] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2338.564170][T31919] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2339.017276][T20066] Bluetooth: hci2: link tx timeout [ 2339.022927][T20066] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2339.360881][T31919] em28xx 4-1:0.0: chip ID is em28174 [ 2339.662774][T31919] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2339.691667][T31919] em28xx 4-1:0.0: board has no eeprom [ 2339.783850][T31919] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2339.803887][T31919] em28xx 4-1:0.0: dvb set to bulk mode. [ 2339.816858][ T5280] em28xx 4-1:0.0: Binding DVB extension [ 2339.856835][T31919] usb 4-1: USB disconnect, device number 62 [ 2339.874183][T31919] em28xx 4-1:0.0: Disconnecting em28xx [ 2340.011110][ T5280] em28xx 4-1:0.0: Registering input extension [ 2340.033818][T31851] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2340.054141][ T5386] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2340.133916][ T5280] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 2340.145784][ T5280] Registered IR keymap rc-empty [ 2340.151243][ T5280] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2340.190862][ T5280] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input168 [ 2340.229285][ T5280] em28xx 4-1:0.0: Input extension successfully initialized [ 2340.249987][T31851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2340.268678][T31851] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2340.278741][ T5386] usb 2-1: Using ep0 maxpacket: 8 [ 2340.285918][T31919] em28xx 4-1:0.0: Closing input extension [ 2340.305307][ T5386] usb 2-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 2340.318636][T31851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2340.333674][ T5386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.368068][ T5386] usb 2-1: Product: syz [ 2340.374743][T31851] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2340.396875][T31919] em28xx 4-1:0.0: Freeing device [ 2340.403061][ T5386] usb 2-1: Manufacturer: syz [ 2340.413178][ T5386] usb 2-1: SerialNumber: syz [ 2340.423404][T31851] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2340.463421][T31851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.472513][ T5386] usb 2-1: config 0 descriptor?? [ 2340.499499][ T5386] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2340.510313][T31851] usb 5-1: config 0 descriptor?? [ 2340.535405][ T5386] usb-storage 2-1:0.0: Quirks match for vid 0781 pid 0001: 1 [ 2340.575984][ T5386] usb-storage 2-1:0.0: This device (0781,0001,0200 S 06 P a4) has an unneeded SubClass entry in unusual_devs.h (kernel 6.10.0-syzkaller-12881-g6342649c33d2) [ 2340.575984][ T5386] Please send a copy of this message to and [ 2340.733576][ T5386] usb 2-1: USB disconnect, device number 78 [ 2340.770466][T31851] hdpvr 5-1:0.0: firmware version 0x0 dated [ 2340.803853][T31851] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 2340.974574][T31851] hdpvr 5-1:0.0: device init failed [ 2341.019460][T31851] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 2341.074180][T31851] usb 5-1: USB disconnect, device number 22 [ 2341.117113][T20066] Bluetooth: hci2: command 0x0406 tx timeout [ 2341.168951][T12656] netlink: 'syz.3.9750': attribute type 1 has an invalid length. [ 2341.588191][T13506] Bluetooth: hci0: link tx timeout [ 2341.594511][T13506] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 2341.891545][T13506] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 2342.205749][T12680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9759'. [ 2342.514391][T31851] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2342.695783][T12699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2342.723913][T12699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2342.733749][ T5280] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2342.743739][T31851] usb 4-1: Using ep0 maxpacket: 16 [ 2342.750323][T31851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2342.772778][T31851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2342.794013][T31851] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 2342.825877][T31851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2342.871668][T31851] usb 4-1: config 0 descriptor?? [ 2342.924316][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 2342.941156][ T5280] usb 3-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 2342.966874][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.993740][ T5280] usb 3-1: Product: syz [ 2343.000066][ T5280] usb 3-1: Manufacturer: syz [ 2343.015956][ T5280] usb 3-1: SerialNumber: syz [ 2343.055922][ T5280] usb 3-1: config 0 descriptor?? [ 2343.091448][ T5280] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2343.140764][ T5280] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0001: 1 [ 2343.177338][ T5280] usb-storage 3-1:0.0: This device (0781,0001,0200 S 06 P a4) has an unneeded SubClass entry in unusual_devs.h (kernel 6.10.0-syzkaller-12881-g6342649c33d2) [ 2343.177338][ T5280] Please send a copy of this message to and [ 2343.359028][T31851] hid-rmi 0003:17EF:6085.00B5: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 2343.489907][T12716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9774'. [ 2343.563564][ T5280] usb 3-1: USB disconnect, device number 60 [ 2343.641876][T31919] usb 4-1: USB disconnect, device number 63 [ 2343.685704][T13506] Bluetooth: hci0: command 0x0406 tx timeout [ 2343.761889][T31851] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2343.983866][T31851] usb 5-1: Using ep0 maxpacket: 8 [ 2344.005250][T31851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2344.034206][T31851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2344.073755][T31851] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2344.113839][T31851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.146624][T31851] usb 5-1: config 0 descriptor?? [ 2344.778248][T31851] usbhid 5-1:0.0: can't add hid device: -71 [ 2344.802595][T31851] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2344.862543][T31851] usb 5-1: USB disconnect, device number 23 [ 2345.038801][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.045484][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.576459][T12767] loop7: detected capacity change from 0 to 16384 [ 2345.804975][ T40] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 2345.854557][T12774] input: syz0 as /devices/virtual/input/input169 [ 2346.223159][T12781] netlink: 'syz.0.9796': attribute type 4 has an invalid length. [ 2346.276349][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9795'. [ 2346.316472][T12781] netlink: 'syz.0.9796': attribute type 4 has an invalid length. [ 2346.326830][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9795'. [ 2346.336232][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9795'. [ 2348.371630][T13506] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2348.381665][T13506] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2348.401501][T13506] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2348.416642][T13506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2348.447726][T13506] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2348.458924][T13506] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2348.810880][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2349.170530][T12868] kvm: pic: non byte read [ 2349.421121][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2349.902133][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2350.138174][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2350.364404][T16697] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2350.564012][T13506] Bluetooth: hci5: command tx timeout [ 2350.607199][T16697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2350.633974][T16697] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2350.644865][T16697] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2350.662008][T16697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2350.676433][T16697] usb 4-1: SerialNumber: syz [ 2350.807525][T20066] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2350.836598][T20066] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2350.854722][T20066] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2350.870416][T20066] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2350.895128][T20066] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2350.904415][T20066] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2350.908013][T12850] chnl_net:caif_netlink_parms(): no params data found [ 2351.084229][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9831'. [ 2351.254280][T16697] usb 4-1: 0:2 : does not exist [ 2351.376353][T16697] usb 4-1: USB disconnect, device number 64 [ 2351.557750][ T11] bridge_slave_1: left allmulticast mode [ 2351.563448][ T11] bridge_slave_1: left promiscuous mode [ 2351.589912][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2351.634916][ T11] bridge_slave_0: left allmulticast mode [ 2351.663601][ T11] bridge_slave_0: left promiscuous mode [ 2351.676227][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2351.772606][ T9651] udevd[9651]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2352.101876][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9837'. [ 2352.141126][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9837'. [ 2352.634426][T20066] Bluetooth: hci5: command tx timeout [ 2353.033965][T20066] Bluetooth: hci4: command tx timeout [ 2353.145313][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2353.216795][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2353.267244][ T11] bond0 (unregistering): Released all slaves [ 2353.558840][T31919] usb 1-1: USB disconnect, device number 55 [ 2353.831148][T12850] bridge0: port 1(bridge_slave_0) entered blocking state [ 2353.903466][T12850] bridge0: port 1(bridge_slave_0) entered disabled state [ 2353.924644][T12850] bridge_slave_0: entered allmulticast mode [ 2353.931385][T12850] bridge_slave_0: entered promiscuous mode [ 2353.991334][T12850] bridge0: port 2(bridge_slave_1) entered blocking state [ 2354.010497][T12850] bridge0: port 2(bridge_slave_1) entered disabled state [ 2354.024119][T12850] bridge_slave_1: entered allmulticast mode [ 2354.068438][T12850] bridge_slave_1: entered promiscuous mode [ 2354.665846][T12850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2354.715134][T20066] Bluetooth: hci5: command tx timeout [ 2354.754912][T12850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2355.094517][T13506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2355.113921][T13506] Bluetooth: hci4: command tx timeout [ 2355.173869][T13506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2355.186095][T13506] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2355.204484][T13506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2355.212118][T13506] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2355.219511][T13506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2355.251852][ T11] hsr_slave_0: left promiscuous mode [ 2355.307617][T20066] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3 [ 2355.333356][ T11] hsr_slave_1: left promiscuous mode [ 2355.456891][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2355.473760][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2355.492544][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2355.523045][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2355.628917][ T11] veth1_macvtap: left promiscuous mode [ 2355.645918][ T11] veth0_macvtap: left promiscuous mode [ 2355.664439][ T11] veth1_vlan: left promiscuous mode [ 2355.669916][ T11] veth0_vlan: left promiscuous mode [ 2356.800603][T20066] Bluetooth: hci5: command tx timeout [ 2356.849576][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2356.948527][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2357.193951][T20066] Bluetooth: hci4: command tx timeout [ 2357.286199][T20066] Bluetooth: hci0: command tx timeout [ 2358.247977][T12850] team0: Port device team_slave_0 added [ 2358.257262][T12850] team0: Port device team_slave_1 added [ 2358.619871][T12850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2358.647810][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.738570][T12850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2358.774751][T12850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2358.802883][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2358.868694][T12850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2359.078481][T12850] hsr_slave_0: entered promiscuous mode [ 2359.115089][T12850] hsr_slave_1: entered promiscuous mode [ 2359.143861][T12850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2359.151506][T12850] Cannot create hsr debugfs directory [ 2359.276335][T20066] Bluetooth: hci4: command tx timeout [ 2359.365047][T20066] Bluetooth: hci0: command tx timeout [ 2359.774217][ T5277] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2359.983770][ T5277] usb 5-1: Using ep0 maxpacket: 32 [ 2359.993364][ T5277] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2360.019001][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.044946][ T5277] usb 5-1: config 0 descriptor?? [ 2360.058878][T12896] chnl_net:caif_netlink_parms(): no params data found [ 2360.066987][ T5277] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2360.597590][T12952] chnl_net:caif_netlink_parms(): no params data found [ 2360.740091][T31851] usb 5-1: USB disconnect, device number 24 [ 2361.376467][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2361.434935][T20066] Bluetooth: hci0: command tx timeout [ 2361.484122][T12896] bridge0: port 1(bridge_slave_0) entered blocking state [ 2361.512164][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 2361.549893][T12896] bridge_slave_0: entered allmulticast mode [ 2361.585590][T12896] bridge_slave_0: entered promiscuous mode [ 2361.597886][T12896] bridge0: port 2(bridge_slave_1) entered blocking state [ 2361.635111][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.647308][T12896] bridge_slave_1: entered allmulticast mode [ 2361.667471][T12896] bridge_slave_1: entered promiscuous mode [ 2361.884775][T20066] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3 [ 2362.076449][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.278682][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9865'. [ 2362.636287][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.727002][T12896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2363.450150][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.522115][T12896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2363.531784][T20066] Bluetooth: hci0: command tx timeout [ 2363.577823][T13036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2363.634866][T12952] bridge0: port 1(bridge_slave_0) entered blocking state [ 2363.654334][T12952] bridge0: port 1(bridge_slave_0) entered disabled state [ 2363.694129][T12952] bridge_slave_0: entered allmulticast mode [ 2363.713896][T12952] bridge_slave_0: entered promiscuous mode [ 2363.731380][T12952] bridge0: port 2(bridge_slave_1) entered blocking state [ 2363.760029][T12952] bridge0: port 2(bridge_slave_1) entered disabled state [ 2363.780406][T12952] bridge_slave_1: entered allmulticast mode [ 2363.824877][T12952] bridge_slave_1: entered promiscuous mode [ 2364.228952][T12896] team0: Port device team_slave_0 added [ 2364.250515][T12952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2364.287426][T12952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2364.381094][T12896] team0: Port device team_slave_1 added [ 2364.542652][T12952] team0: Port device team_slave_0 added [ 2364.734174][T12896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2364.756447][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2364.808335][T12896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2364.848130][T12952] team0: Port device team_slave_1 added [ 2365.110484][T12896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2365.122920][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2365.292724][T12896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2365.524915][T13062] netlink: 'syz.4.9872': attribute type 12 has an invalid length. [ 2365.628256][T12952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2365.638544][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2365.665672][T12952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2365.733909][T12952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2365.762176][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2365.762454][T13071] loop7: detected capacity change from 0 to 16384 [ 2365.840232][T13072] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 2365.873668][T12952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2366.061930][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.114446][T13072] I/O error, dev loop7, sector 2816 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 2366.126806][T13072] Buffer I/O error on dev loop7, logical block 352, lost async page write [ 2366.135817][T13072] Buffer I/O error on dev loop7, logical block 353, lost async page write [ 2366.144942][T13072] Buffer I/O error on dev loop7, logical block 354, lost async page write [ 2366.156454][T13072] Buffer I/O error on dev loop7, logical block 355, lost async page write [ 2366.167031][T13072] Buffer I/O error on dev loop7, logical block 356, lost async page write [ 2366.175966][T13072] Buffer I/O error on dev loop7, logical block 357, lost async page write [ 2366.185006][T13072] Buffer I/O error on dev loop7, logical block 358, lost async page write [ 2366.193571][T13072] Buffer I/O error on dev loop7, logical block 359, lost async page write [ 2366.208037][T13072] Buffer I/O error on dev loop7, logical block 360, lost async page write [ 2366.229385][T13072] Buffer I/O error on dev loop7, logical block 361, lost async page write [ 2366.398187][T12896] hsr_slave_0: entered promiscuous mode [ 2366.433156][T12896] hsr_slave_1: entered promiscuous mode [ 2366.455028][T12896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2366.484559][T12896] Cannot create hsr debugfs directory [ 2366.683930][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.713081][T12850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2366.775126][T12850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2366.916923][T12952] hsr_slave_0: entered promiscuous mode [ 2366.984324][T12952] hsr_slave_1: entered promiscuous mode [ 2367.014078][T12952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2367.039256][T12952] Cannot create hsr debugfs directory [ 2367.166581][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2367.226187][T12850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2367.252061][T12850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2367.289865][T13077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2367.471641][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.735728][ T11] bridge_slave_1: left allmulticast mode [ 2368.753821][ T11] bridge_slave_1: left promiscuous mode [ 2368.759532][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2368.825848][ T11] bridge_slave_0: left allmulticast mode [ 2368.843707][ T11] bridge_slave_0: left promiscuous mode [ 2368.849564][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2368.895674][ T11] bridge_slave_1: left allmulticast mode [ 2368.927889][ T11] bridge_slave_1: left promiscuous mode [ 2368.952947][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2369.001335][ T11] bridge_slave_0: left allmulticast mode [ 2369.027404][ T11] bridge_slave_0: left promiscuous mode [ 2369.056442][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2369.434409][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2369.642852][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2369.706413][ T9] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 2369.734526][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.742570][ T9] usb 5-1: Product: syz [ 2369.772267][ T9] usb 5-1: Manufacturer: syz [ 2369.786467][ T9] usb 5-1: SerialNumber: syz [ 2369.814294][ T9] usb 5-1: config 0 descriptor?? [ 2369.831720][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 2369.856135][ T9] em28xx 5-1:0.0: Video interface 0 found: [ 2370.124232][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2370.263825][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2370.279326][ T9] em28xx 5-1:0.0: board has no eeprom [ 2370.363836][ T9] em28xx 5-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 2370.375540][ T9] em28xx 5-1:0.0: analog set to bulk mode. [ 2370.388775][T31851] em28xx 5-1:0.0: Registering V4L2 extension [ 2370.433122][ T9] usb 5-1: USB disconnect, device number 25 [ 2370.565365][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 2370.796240][T31851] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 2370.939311][T31851] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 2371.116482][T31851] DVB: Unable to find symbol xc2028_attach() [ 2371.143883][T31851] tuner: 1-0061: Tuner has no way to set tv freq [ 2371.171334][T31851] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 2371.192899][T31851] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 2371.214181][T31851] em28xx 5-1:0.0: No AC97 audio processor [ 2371.220222][T31851] tuner: 1-0061: Tuner has no way to set tv freq [ 2371.338816][T31851] em28xx 5-1:0.0: Registered radio device as radio32 [ 2371.374159][T31851] usb 5-1: Decoder not found [ 2371.383803][T31851] em28xx 5-1:0.0: failed to create media graph [ 2371.435815][T31851] em28xx 5-1:0.0: V4L2 device radio32 deregistered [ 2371.467423][T31851] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 2371.621991][T31851] em28xx 5-1:0.0: Registering input extension [ 2371.628852][ T9] em28xx 5-1:0.0: Closing input extension [ 2371.639878][ T9] ================================================================== [ 2371.647961][ T9] BUG: KASAN: slab-use-after-free in media_device_unregister+0x154/0x470 [ 2371.656387][ T9] Read of size 8 at addr ffff888058df4210 by task kworker/0:1/9 [ 2371.664000][ T9] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2371.666316][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 2371.676466][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2371.686530][ T9] Workqueue: usb_hub_wq hub_event [ 2371.691554][ T9] Call Trace: [ 2371.694830][ T9] [ 2371.697768][ T9] dump_stack_lvl+0x241/0x360 [ 2371.702434][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2371.707619][ T9] ? __pfx__printk+0x10/0x10 [ 2371.712194][ T9] ? _printk+0xd5/0x120 [ 2371.716336][ T9] ? __virt_addr_valid+0x183/0x530 [ 2371.721438][ T9] ? __virt_addr_valid+0x183/0x530 [ 2371.726536][ T9] print_report+0x169/0x550 [ 2371.731040][ T9] ? __virt_addr_valid+0x183/0x530 [ 2371.736154][ T9] ? __virt_addr_valid+0x183/0x530 [ 2371.741258][ T9] ? __virt_addr_valid+0x45f/0x530 [ 2371.746370][ T9] ? __phys_addr+0xba/0x170 [ 2371.750858][ T9] ? media_device_unregister+0x154/0x470 [ 2371.756477][ T9] kasan_report+0x143/0x180 [ 2371.760972][ T9] ? media_device_unregister+0x154/0x470 [ 2371.766592][ T9] media_device_unregister+0x154/0x470 [ 2371.772042][ T9] em28xx_release_resources+0xa7/0x230 [ 2371.777506][ T9] em28xx_usb_disconnect+0x1cc/0x530 [ 2371.782785][ T9] usb_unbind_interface+0x25e/0x940 [ 2371.787976][ T9] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 2371.793692][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2371.799410][ T9] device_release_driver_internal+0x503/0x7c0 [ 2371.805471][ T9] bus_remove_device+0x34f/0x420 [ 2371.810398][ T9] device_del+0x57a/0x9b0 [ 2371.814715][ T9] ? kfree+0x149/0x360 [ 2371.818766][ T9] ? __pfx_device_del+0x10/0x10 [ 2371.823601][ T9] ? kobject_put+0x44a/0x480 [ 2371.828187][ T9] usb_disable_device+0x3bf/0x850 [ 2371.833201][ T9] usb_disconnect+0x340/0x950 [ 2371.837870][ T9] hub_event+0x1eb9/0x5150 [ 2371.842279][ T9] ? debug_object_deactivate+0x2d5/0x390 [ 2371.847924][ T9] ? __pfx_hub_event+0x10/0x10 [ 2371.852699][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 2371.857710][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2371.863767][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2371.870088][ T9] ? process_scheduled_works+0x945/0x1830 [ 2371.875793][ T9] process_scheduled_works+0xa2c/0x1830 [ 2371.881333][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 2371.887303][ T9] ? assign_work+0x364/0x3d0 [ 2371.891879][ T9] worker_thread+0x86d/0xd40 [ 2371.896461][ T9] ? __kthread_parkme+0x169/0x1d0 [ 2371.901474][ T9] ? __pfx_worker_thread+0x10/0x10 [ 2371.906570][ T9] kthread+0x2f0/0x390 [ 2371.910621][ T9] ? __pfx_worker_thread+0x10/0x10 [ 2371.915716][ T9] ? __pfx_kthread+0x10/0x10 [ 2371.920289][ T9] ret_from_fork+0x4b/0x80 [ 2371.924693][ T9] ? __pfx_kthread+0x10/0x10 [ 2371.929264][ T9] ret_from_fork_asm+0x1a/0x30 [ 2371.934018][ T9] [ 2371.937018][ T9] [ 2371.939322][ T9] Allocated by task 31851: [ 2371.943722][ T9] kasan_save_track+0x3f/0x80 [ 2371.948406][ T9] __kasan_kmalloc+0x98/0xb0 [ 2371.952986][ T9] __kmalloc_cache_noprof+0x19c/0x2c0 [ 2371.958341][ T9] em28xx_v4l2_init+0xfd/0x2f40 [ 2371.963177][ T9] em28xx_init_extension+0x120/0x1c0 [ 2371.968447][ T9] process_scheduled_works+0xa2c/0x1830 [ 2371.974167][ T9] worker_thread+0x86d/0xd40 [ 2371.978748][ T9] kthread+0x2f0/0x390 [ 2371.982796][ T9] ret_from_fork+0x4b/0x80 [ 2371.987198][ T9] ret_from_fork_asm+0x1a/0x30 [ 2371.991951][ T9] [ 2371.994258][ T9] Freed by task 31851: [ 2371.998314][ T9] kasan_save_track+0x3f/0x80 [ 2372.002988][ T9] kasan_save_free_info+0x40/0x50 [ 2372.007993][ T9] poison_slab_object+0xe0/0x150 [ 2372.012916][ T9] __kasan_slab_free+0x37/0x60 [ 2372.017663][ T9] kfree+0x149/0x360 [ 2372.021536][ T9] em28xx_v4l2_init+0x16d7/0x2f40 [ 2372.026553][ T9] em28xx_init_extension+0x120/0x1c0 [ 2372.031836][ T9] process_scheduled_works+0xa2c/0x1830 [ 2372.037373][ T9] worker_thread+0x86d/0xd40 [ 2372.041952][ T9] kthread+0x2f0/0x390 [ 2372.046010][ T9] ret_from_fork+0x4b/0x80 [ 2372.050416][ T9] ret_from_fork_asm+0x1a/0x30 [ 2372.055174][ T9] [ 2372.057485][ T9] The buggy address belongs to the object at ffff888058df4000 [ 2372.057485][ T9] which belongs to the cache kmalloc-8k of size 8192 [ 2372.071526][ T9] The buggy address is located 528 bytes inside of [ 2372.071526][ T9] freed 8192-byte region [ffff888058df4000, ffff888058df6000) [ 2372.085396][ T9] [ 2372.087712][ T9] The buggy address belongs to the physical page: [ 2372.094137][ T9] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58df0 [ 2372.102904][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2372.111393][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2372.119524][ T9] page_type: 0xfdffffff(slab) [ 2372.124181][ T9] raw: 00fff00000000040 ffff888015842280 dead000000000122 0000000000000000 [ 2372.132746][ T9] raw: 0000000000000000 0000000080020002 00000001fdffffff 0000000000000000 [ 2372.141403][ T9] head: 00fff00000000040 ffff888015842280 dead000000000122 0000000000000000 [ 2372.150065][ T9] head: 0000000000000000 0000000080020002 00000001fdffffff 0000000000000000 [ 2372.158715][ T9] head: 00fff00000000003 ffffea0001637c01 ffffffffffffffff 0000000000000000 [ 2372.167378][ T9] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 2372.176030][ T9] page dumped because: kasan: bad access detected [ 2372.182433][ T9] page_owner tracks the page as allocated [ 2372.188127][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3922, tgid 3922 (kworker/u8:8), ts 2368883364470, free_ts 2368880799693 [ 2372.209133][ T9] post_alloc_hook+0x1f3/0x230 [ 2372.213887][ T9] get_page_from_freelist+0x2e4c/0x2f10 [ 2372.219414][ T9] __alloc_pages_noprof+0x256/0x6c0 [ 2372.224608][ T9] alloc_slab_page+0x5f/0x120 [ 2372.229273][ T9] allocate_slab+0x5a/0x2f0 [ 2372.233766][ T9] ___slab_alloc+0xcd1/0x14b0 [ 2372.238445][ T9] __slab_alloc+0x58/0xa0 [ 2372.242763][ T9] __kmalloc_noprof+0x25a/0x400 [ 2372.247600][ T9] n_hdlc_tty_receive+0x1ce/0x4e0 [ 2372.252610][ T9] tty_ldisc_receive_buf+0x11f/0x170 [ 2372.257886][ T9] tty_port_default_receive_buf+0x6d/0xa0 [ 2372.263587][ T9] flush_to_ldisc+0x328/0x860 [ 2372.268247][ T9] process_scheduled_works+0xa2c/0x1830 [ 2372.273771][ T9] worker_thread+0x86d/0xd40 [ 2372.278337][ T9] kthread+0x2f0/0x390 [ 2372.282380][ T9] ret_from_fork+0x4b/0x80 [ 2372.286776][ T9] page last free pid 13102 tgid 13102 stack trace: [ 2372.293253][ T9] free_unref_page+0xd22/0xea0 [ 2372.298006][ T9] __put_partials+0xeb/0x130 [ 2372.302584][ T9] put_cpu_partial+0x17c/0x250 [ 2372.307327][ T9] __slab_free+0x2ea/0x3d0 [ 2372.311721][ T9] qlist_free_all+0x9e/0x140 [ 2372.316289][ T9] kasan_quarantine_reduce+0x14f/0x170 [ 2372.321725][ T9] __kasan_slab_alloc+0x23/0x80 [ 2372.326553][ T9] kmem_cache_alloc_noprof+0x135/0x2a0 [ 2372.331988][ T9] __anon_vma_prepare+0xc4/0x4a0 [ 2372.336900][ T9] handle_pte_fault+0x5788/0x6eb0 [ 2372.341898][ T9] handle_mm_fault+0x1029/0x1980 [ 2372.346816][ T9] exc_page_fault+0x459/0x8c0 [ 2372.351480][ T9] asm_exc_page_fault+0x26/0x30 [ 2372.356321][ T9] [ 2372.358636][ T9] Memory state around the buggy address: [ 2372.364289][ T9] ffff888058df4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2372.372353][ T9] ffff888058df4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2372.380399][ T9] >ffff888058df4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2372.388437][ T9] ^ [ 2372.393002][ T9] ffff888058df4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2372.401048][ T9] ffff888058df4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2372.409095][ T9] ================================================================== [ 2372.628456][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2372.635688][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 2372.645850][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2372.655921][ T9] Workqueue: usb_hub_wq hub_event [ 2372.660966][ T9] Call Trace: [ 2372.664249][ T9] [ 2372.667194][ T9] dump_stack_lvl+0x241/0x360 [ 2372.671880][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2372.677094][ T9] ? __pfx__printk+0x10/0x10 [ 2372.681694][ T9] ? preempt_schedule+0xe1/0xf0 [ 2372.686554][ T9] ? vscnprintf+0x5d/0x90 [ 2372.690893][ T9] panic+0x349/0x860 [ 2372.694794][ T9] ? check_panic_on_warn+0x21/0xb0 [ 2372.699911][ T9] ? __pfx_panic+0x10/0x10 [ 2372.704337][ T9] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 2372.710323][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2372.716640][ T9] ? print_report+0x502/0x550 [ 2372.721308][ T9] check_panic_on_warn+0x86/0xb0 [ 2372.726233][ T9] ? media_device_unregister+0x154/0x470 [ 2372.731853][ T9] end_report+0x77/0x160 [ 2372.736092][ T9] kasan_report+0x154/0x180 [ 2372.740592][ T9] ? media_device_unregister+0x154/0x470 [ 2372.746217][ T9] media_device_unregister+0x154/0x470 [ 2372.752035][ T9] em28xx_release_resources+0xa7/0x230 [ 2372.757493][ T9] em28xx_usb_disconnect+0x1cc/0x530 [ 2372.762773][ T9] usb_unbind_interface+0x25e/0x940 [ 2372.767965][ T9] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 2372.773675][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2372.779381][ T9] device_release_driver_internal+0x503/0x7c0 [ 2372.785447][ T9] bus_remove_device+0x34f/0x420 [ 2372.790380][ T9] device_del+0x57a/0x9b0 [ 2372.795052][ T9] ? kfree+0x149/0x360 [ 2372.799110][ T9] ? __pfx_device_del+0x10/0x10 [ 2372.803953][ T9] ? kobject_put+0x44a/0x480 [ 2372.808541][ T9] usb_disable_device+0x3bf/0x850 [ 2372.813569][ T9] usb_disconnect+0x340/0x950 [ 2372.818245][ T9] hub_event+0x1eb9/0x5150 [ 2372.822666][ T9] ? debug_object_deactivate+0x2d5/0x390 [ 2372.828825][ T9] ? __pfx_hub_event+0x10/0x10 [ 2372.833574][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 2372.838594][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2372.844570][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2372.850890][ T9] ? process_scheduled_works+0x945/0x1830 [ 2372.856600][ T9] process_scheduled_works+0xa2c/0x1830 [ 2372.862144][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 2372.868114][ T9] ? assign_work+0x364/0x3d0 [ 2372.872695][ T9] worker_thread+0x86d/0xd40 [ 2372.877285][ T9] ? __kthread_parkme+0x169/0x1d0 [ 2372.882309][ T9] ? __pfx_worker_thread+0x10/0x10 [ 2372.887411][ T9] kthread+0x2f0/0x390 [ 2372.891466][ T9] ? __pfx_worker_thread+0x10/0x10 [ 2372.896579][ T9] ? __pfx_kthread+0x10/0x10 [ 2372.901162][ T9] ret_from_fork+0x4b/0x80 [ 2372.905576][ T9] ? __pfx_kthread+0x10/0x10 [ 2372.910173][ T9] ret_from_fork_asm+0x1a/0x30 [ 2372.914947][ T9] [ 2372.918163][ T9] Kernel Offset: disabled [ 2372.922472][ T9] Rebooting in 86400 seconds..