last executing test programs: 14.672775524s ago: executing program 3 (id=3364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fff, 0xffffffffffffffff, 0x9, 0x0, 0x9}, 0x0, 0x0) 13.538818783s ago: executing program 3 (id=3366): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10.52673526s ago: executing program 2 (id=3374): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 9.271834189s ago: executing program 3 (id=3376): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=@reiserfs_6={0x18, 0x6, {0x1ff, 0x7, 0x3, 0x8, 0x6, 0x8000}}, 0x32202) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x90009427, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 8.443156448s ago: executing program 0 (id=3381): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) io_uring_setup(0x5880, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 8.119976318s ago: executing program 1 (id=3382): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000500)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.193545867s ago: executing program 2 (id=3383): ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000000)="2e000000010002", 0x7) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) readv(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="300100010000020027bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="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"/280], 0x130}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) listen(r1, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f00000000c0)=0x80000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1a}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 6.474937146s ago: executing program 3 (id=3384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="f00000001a000100feffffff00010000e0000002000000000000000000000000fc0100000000b58ebf210000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000000600000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000002200000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000"], 0xf0}}, 0x844) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x404840) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) close_range(r4, r4, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 6.420007376s ago: executing program 1 (id=3385): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 6.391130356s ago: executing program 0 (id=3386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fff, 0xffffffffffffffff, 0x9, 0x0, 0x9}, 0x0, 0x0) 6.337374166s ago: executing program 1 (id=3387): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.093332826s ago: executing program 2 (id=3388): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) getrlimit(0xf, 0x0) timer_settime(r1, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 4.695874414s ago: executing program 0 (id=3389): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'bond_slave_1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xff000000, 0x0, 'sit0\x00', 'veth1_to_hsr\x00', {}, {0xd7fffbe779abf152}, 0x8, 0x1, 0x2}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 3.402397033s ago: executing program 3 (id=3390): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x2400c8a0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000011, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000001500)={0x28, 0x4000, 0x0, @hyper}, 0x10) 2.592112863s ago: executing program 2 (id=3391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000480)="84bd", 0x2, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac010203010902"], 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) 2.527875013s ago: executing program 1 (id=3392): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=@reiserfs_6={0x18, 0x6, {0x1ff, 0x7, 0x3, 0x8, 0x6, 0x8000}}, 0x32202) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) io_uring_setup(0x5880, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 712.996111ms ago: executing program 0 (id=3395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 38.496521ms ago: executing program 1 (id=3396): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000000)="2e000000010002", 0x7) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) readv(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="300100010000020027bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="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"/280], 0x130}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) listen(r1, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f00000000c0)=0x80000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1a}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 0 (id=3397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fff, 0xffffffffffffffff, 0x9, 0x0, 0x9}, 0x0, 0x0) kernel console output (not intermixed with test programs): T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.193428][ T5818] usb 2-1: config 0 descriptor?? [ 898.249763][ T5819] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 898.412190][ T5837] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 898.612501][ T5837] usb 3-1: unable to get BOS descriptor or descriptor too short [ 898.627332][ T5837] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 898.657177][ T5837] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 898.667130][ T5837] usb 3-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 898.679651][ T5837] usb 3-1: Product: syz [ 898.683873][ T5837] usb 3-1: Manufacturer: syz [ 898.714641][ T5837] usb 3-1: SerialNumber: syz [ 898.983743][ T5837] usb 3-1: unit 4 not found! [ 899.086132][ T5837] usb 3-1: USB disconnect, device number 27 [ 899.202896][T12418] udevd[12418]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.630459][ T5818] usbhid 2-1:0.0: can't add hid device: -71 [ 899.636546][ T5818] usbhid: probe of 2-1:0.0 failed with error -71 [ 899.688365][ T5818] usb 2-1: USB disconnect, device number 75 [ 899.761084][T13800] syzkaller0: entered promiscuous mode [ 899.766646][T13800] syzkaller0: entered allmulticast mode [ 899.834460][T13800] tipc: Enabled bearer , priority 0 [ 899.839911][ T5819] usb 4-1: device not accepting address 76, error -71 [ 899.848180][T13799] tipc: Resetting bearer [ 899.896750][T13799] tipc: Disabling bearer [ 900.229704][ T5819] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 900.437499][T13812] fuse: Bad value for 'group_id' [ 900.460277][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.491986][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.526129][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 900.580991][ T5819] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 900.590844][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.603724][ T5819] usb 4-1: config 0 descriptor?? [ 901.671945][ T5819] usbhid 4-1:0.0: can't add hid device: -71 [ 901.678068][ T5819] usbhid: probe of 4-1:0.0 failed with error -71 [ 901.694276][ T5819] usb 4-1: USB disconnect, device number 77 [ 901.990341][ T5837] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 902.323014][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.487287][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.664135][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 902.679812][ T5837] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 902.689100][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.700540][ T5837] usb 2-1: config 0 descriptor?? [ 904.702111][T13831] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 904.894678][ T5837] usbhid 2-1:0.0: can't add hid device: -71 [ 904.902781][ T5837] usbhid: probe of 2-1:0.0 failed with error -71 [ 904.938403][ T5837] usb 2-1: USB disconnect, device number 76 [ 905.060556][T13838] fuse: Bad value for 'group_id' [ 909.747497][ T5837] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 910.120798][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 910.132195][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.154253][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.180348][ T5837] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 910.189458][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.231919][ T5837] usb 4-1: config 0 descriptor?? [ 910.240331][ T5837] hub 4-1:0.0: USB hub found [ 910.456616][ T5837] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 910.927290][ T5837] usbhid 4-1:0.0: can't add hid device: -71 [ 910.994279][ T5837] usbhid: probe of 4-1:0.0 failed with error -71 [ 911.410391][ T5837] usb 4-1: reset high-speed USB device number 78 using dummy_hcd [ 912.709975][ T5838] usb 4-1: USB disconnect, device number 78 [ 916.064586][T13934] loop3: detected capacity change from 0 to 512 [ 916.088404][T13934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 916.125653][T13934] EXT4-fs (loop3): 1 truncate cleaned up [ 916.171006][T13934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.130669][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.469937][ T5818] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 920.652297][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.663397][ T5818] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 920.676947][ T5818] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 920.686633][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.695671][ T5818] usb 2-1: Product: syz [ 920.700978][ T5818] usb 2-1: Manufacturer: syz [ 920.749753][ T5818] usb 2-1: SerialNumber: syz [ 920.764414][ T5818] cdc_mbim 2-1:1.0: skipping garbage [ 920.977421][T13987] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 921.223660][T13990] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 921.603995][T13987] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 921.636053][ T5818] cdc_mbim 2-1:1.0: setting tx_max = 48 [ 921.652250][ T5818] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 921.671604][ T5818] wwan wwan0: port wwan0mbim0 attached [ 921.690048][ T788] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 921.706890][ T5818] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, f2:9a:f9:58:94:35 [ 921.725515][T11749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 921.737116][T11749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 921.751533][T11749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 921.767060][T11749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 921.778373][T11749] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 921.786920][T11749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 921.876965][ T6625] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.890565][ T5779] usb 2-1: USB disconnect, device number 77 [ 921.900075][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 921.909003][ T5779] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 921.929037][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.942741][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.967556][ T788] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 921.977262][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.988417][ T788] usb 3-1: config 0 descriptor?? [ 922.028520][ T5779] wwan wwan0: port wwan0mbim0 disconnected [ 922.041745][ T788] hub 3-1:0.0: USB hub found [ 922.089227][ T6625] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.231962][ T6625] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.252883][ T788] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 922.368956][ T6625] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.661589][ T788] usbhid 3-1:0.0: can't add hid device: -71 [ 922.667687][ T788] usbhid: probe of 3-1:0.0 failed with error -71 [ 922.721272][ T788] usb 3-1: USB disconnect, device number 28 [ 922.830346][ T6625] tipc: Left network mode [ 923.094084][T14017] chnl_net:caif_netlink_parms(): no params data found [ 923.259870][ T788] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 923.460037][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 923.479388][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.537999][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.580159][ T788] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 923.599755][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.627741][ T788] usb 3-1: config 0 descriptor?? [ 923.653363][ T788] hub 3-1:0.0: USB hub found [ 923.705313][T14017] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.720195][T14017] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.742368][T14017] bridge_slave_0: entered allmulticast mode [ 923.765301][T14017] bridge_slave_0: entered promiscuous mode [ 923.788047][T14017] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.808326][T14017] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.819953][T14017] bridge_slave_1: entered allmulticast mode [ 923.828050][T14017] bridge_slave_1: entered promiscuous mode [ 923.912196][ T788] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 923.923376][ T5088] Bluetooth: hci2: command tx timeout [ 924.057326][T14017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.082969][T14017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.129462][ T788] usbhid 3-1:0.0: can't add hid device: -71 [ 924.139370][ T788] usbhid: probe of 3-1:0.0 failed with error -71 [ 924.273959][T14017] team0: Port device team_slave_0 added [ 925.042768][ T788] usb 3-1: USB disconnect, device number 29 [ 925.098164][T14017] team0: Port device team_slave_1 added [ 925.484964][T14017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.513942][T14017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.575140][T14017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.636316][T14017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.717933][ T788] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 925.735323][T14017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.809536][ T5088] Bluetooth: hci2: command tx timeout [ 926.826890][T14017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.479071][T14017] hsr_slave_0: entered promiscuous mode [ 927.503937][T14100] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2569'. [ 927.566058][T14017] hsr_slave_1: entered promiscuous mode [ 927.603673][T14017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.633881][T14017] Cannot create hsr debugfs directory [ 927.999276][ T6625] hsr_slave_0: left promiscuous mode [ 928.017567][ T6625] hsr_slave_1: left promiscuous mode [ 928.038798][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 928.069749][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.093373][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.108479][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.120103][ T6625] team0: left allmulticast mode [ 928.125030][ T6625] team_slave_0: left allmulticast mode [ 928.131419][ T6625] team_slave_1: left allmulticast mode [ 928.136968][ T6625] team0: left promiscuous mode [ 928.144853][ T6625] team_slave_0: left promiscuous mode [ 928.150664][ T6625] team_slave_1: left promiscuous mode [ 928.156244][ T6625] bridge1: left promiscuous mode [ 928.161662][ T6625] bridge2: left promiscuous mode [ 928.168538][ T6625] bridge0: port 4(team0) entered disabled state [ 928.176643][ T6625] veth1_to_hsr: left allmulticast mode [ 928.182375][ T6625] veth1_to_hsr: left promiscuous mode [ 928.188253][ T6625] bridge0: port 3(veth1_to_hsr) entered disabled state [ 928.198528][ T6625] bridge_slave_1: left allmulticast mode [ 928.204777][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.214354][ T6625] bridge_slave_0: left allmulticast mode [ 928.220354][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.254765][ T6625] veth1_macvtap: left promiscuous mode [ 928.260732][ T6625] veth0_macvtap: left promiscuous mode [ 928.266368][ T6625] veth1_vlan: left promiscuous mode [ 928.272455][ T6625] veth0_vlan: left promiscuous mode [ 928.483365][ T6625] bond1 (unregistering): (slave geneve2): Releasing active interface [ 928.664567][ T6625] bond1 (unregistering): Released all slaves [ 928.694646][ T6625] team0 (unregistering): Port device bridge2 removed [ 928.753757][ T6625] team0 (unregistering): Port device bridge1 removed [ 928.793109][T14103] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 928.845077][T11749] Bluetooth: hci2: command tx timeout [ 929.036292][ T5818] syz2: rxe_query_port: returned err = -19 [ 929.057979][ T49] smc: removing ib device syz2 [ 929.874602][T14115] fuse: Bad value for 'user_id' [ 930.190838][ T6625] team0 (unregistering): Port device team_slave_1 removed [ 930.287300][ T6625] team0 (unregistering): Port device team_slave_0 removed [ 930.353978][ T6625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.414750][ T6625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.424144][T14122] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2578'. [ 930.874782][ T6625] bond0 (unregistering): Released all slaves [ 930.921057][T11749] Bluetooth: hci2: command tx timeout [ 931.459701][ T788] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 931.645619][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 931.685297][ T788] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 931.734499][ T788] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 931.764905][ T788] usb 3-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 931.779307][ T6625] IPVS: stop unused estimator thread 0... [ 931.785216][ T788] usb 3-1: Product: syz [ 931.785238][ T788] usb 3-1: Manufacturer: syz [ 931.785255][ T788] usb 3-1: SerialNumber: syz [ 931.886734][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.893791][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.037437][ T788] usb 3-1: unit 4 not found! [ 932.146814][ T788] usb 3-1: USB disconnect, device number 31 [ 932.266320][T12418] udevd[12418]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.278588][T14017] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 932.315088][T14017] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 932.337819][T14017] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 932.373850][T14017] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 932.489507][T14137] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 932.545299][T14017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.585166][T14017] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.604424][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.612771][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.625267][T14152] fuse: Bad value for 'fd' [ 932.647216][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.654459][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.609765][ T788] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 933.853810][ T788] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 933.886583][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 933.907515][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 933.923459][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 933.925270][T14017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.939209][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 933.963484][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 933.981512][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 933.994390][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.046047][T14017] veth0_vlan: entered promiscuous mode [ 934.057373][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.069689][ T5838] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 934.094140][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 934.105848][T14017] veth1_vlan: entered promiscuous mode [ 934.116169][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.146004][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.163676][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 934.181221][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.198008][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.215438][T14017] veth0_macvtap: entered promiscuous mode [ 934.230185][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 934.234260][T14184] syzkaller0: entered promiscuous mode [ 934.238102][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.251942][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.259181][T14184] syzkaller0: entered allmulticast mode [ 934.262987][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 934.277430][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.281857][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.298593][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.312912][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.314262][T14017] veth1_macvtap: entered promiscuous mode [ 934.324002][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 934.341926][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 934.343265][ T5838] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 934.358231][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.367392][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.399647][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.410126][ T5838] usb 3-1: config 0 descriptor?? [ 934.418079][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 934.432005][ T788] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 934.456840][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.467607][ T788] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 934.476045][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.481786][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.499817][ T788] usb 2-1: Product: syz [ 934.503233][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.504019][ T788] usb 2-1: Manufacturer: syz [ 934.504037][ T788] usb 2-1: SerialNumber: syz [ 934.531355][ T788] usb 2-1: config 0 descriptor?? [ 934.549527][ T788] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 934.575442][T14017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.644063][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.673324][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.689702][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.706394][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.726823][T14017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.785915][T14017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.805648][T14168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.818475][T14017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.831024][T14168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.832342][T14017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.861256][T14017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.106040][ T5838] usbhid 3-1:0.0: can't add hid device: -71 [ 935.120615][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.136310][ T5838] usbhid: probe of 3-1:0.0 failed with error -71 [ 935.151868][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.185738][ T5838] usb 3-1: USB disconnect, device number 32 [ 935.293499][ T6625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.319512][ T6625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.376646][T14203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.415961][T14203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.470666][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 935.471015][ T9871] usb 2-1: USB disconnect, device number 78 [ 935.544080][T14191] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 935.544943][ T9871] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 936.434803][ T9871] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 936.664117][ T9871] usb 2-1: Using ep0 maxpacket: 16 [ 936.717281][ T9871] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 936.752458][ T9871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.801653][ T9871] usb 2-1: Product: syz [ 936.829707][ T9871] usb 2-1: Manufacturer: syz [ 936.835285][ T9871] usb 2-1: SerialNumber: syz [ 937.171635][ T9871] usb 2-1: can't set config #1, error -71 [ 937.194374][ T9871] usb 2-1: USB disconnect, device number 79 [ 941.574756][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 941.586124][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 941.673116][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 941.687334][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 941.700562][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 941.707989][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 942.596275][T14263] chnl_net:caif_netlink_parms(): no params data found [ 943.034893][T14263] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.035068][T14263] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.035224][T14263] bridge_slave_0: entered allmulticast mode [ 943.037369][T14263] bridge_slave_0: entered promiscuous mode [ 943.043171][T14263] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.043352][T14263] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.043505][T14263] bridge_slave_1: entered allmulticast mode [ 943.045013][T14263] bridge_slave_1: entered promiscuous mode [ 943.076847][T14263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.082012][T14263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.139292][T14263] team0: Port device team_slave_0 added [ 944.063782][ T5088] Bluetooth: hci4: command tx timeout [ 944.066032][T14263] team0: Port device team_slave_1 added [ 945.140072][T14263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.140085][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.140100][T14263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.141444][T14263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.141454][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.141468][T14263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.317615][T14263] hsr_slave_0: entered promiscuous mode [ 945.348317][T14263] hsr_slave_1: entered promiscuous mode [ 945.360839][T14263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.360953][T14263] Cannot create hsr debugfs directory [ 945.943630][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.119692][ T5088] Bluetooth: hci4: command tx timeout [ 946.183610][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.389874][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.958289][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.438415][T14317] fuse: Bad value for 'fd' [ 947.875436][ T49] tipc: Left network mode [ 948.200335][ T5088] Bluetooth: hci4: command tx timeout [ 949.580480][T14349] fuse: Bad value for 'fd' [ 950.094870][T14355] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 951.323849][ T5088] Bluetooth: hci4: command tx timeout [ 953.959763][ T5838] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 954.331593][ T5838] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 954.348261][ T5838] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 954.352246][T14263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 954.401928][ T5838] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 954.441794][T14388] syz.2.2637: attempt to access beyond end of device [ 954.441794][T14388] loop2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 954.454906][T14388] F2FS-fs (loop2): Unable to read 1th superblock [ 954.462016][T14388] syz.2.2637: attempt to access beyond end of device [ 954.462016][T14388] loop2: rw=0, sector=8, nr_sectors = 8 limit=0 [ 954.475073][T14388] F2FS-fs (loop2): Unable to read 2th superblock [ 954.526016][ T5838] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 955.125092][ T5838] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 955.139680][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 955.160106][ T5838] usb 4-1: Product: syz [ 955.164355][ T5838] usb 4-1: Manufacturer: syz [ 955.182837][T14375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 955.213673][ T5838] cdc_wdm 4-1:1.0: skipping garbage [ 955.223297][T14263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 955.233935][ T5838] cdc_wdm 4-1:1.0: skipping garbage [ 955.239226][ T5838] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 955.297642][T14263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 955.322704][T14263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 955.449111][ T5838] usb 4-1: USB disconnect, device number 79 [ 955.698937][ T49] hsr_slave_0: left promiscuous mode [ 955.708636][ T49] hsr_slave_1: left promiscuous mode [ 955.723374][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.734866][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.746370][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.758384][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.775165][ T49] veth1_to_hsr: left allmulticast mode [ 955.784400][ T49] veth1_to_hsr: left promiscuous mode [ 955.805934][ T49] bridge0: port 3(veth1_to_hsr) entered disabled state [ 955.835153][ T49] bridge_slave_1: left allmulticast mode [ 955.849891][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.868939][ T49] bridge_slave_0: left allmulticast mode [ 955.875898][ T49] bridge_slave_0: left promiscuous mode [ 955.888792][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.964759][ T49] veth1_macvtap: left promiscuous mode [ 955.971967][ T49] veth0_macvtap: left promiscuous mode [ 955.990226][ T49] veth1_vlan: left promiscuous mode [ 955.998819][ T49] veth0_vlan: left promiscuous mode [ 957.977087][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.036705][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.448569][ T49] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 958.457470][ T49] bond0 (unregistering): Released all slaves [ 958.569032][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2639'. [ 958.712292][T14263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.796497][T14263] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.851288][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.858498][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.903373][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.910672][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.970810][T14428] fuse: Bad value for 'user_id' [ 959.083132][T14263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 960.838580][T14442] syzkaller0: entered promiscuous mode [ 960.890212][T14442] syzkaller0: entered allmulticast mode [ 961.255920][T14263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.527941][T14263] veth0_vlan: entered promiscuous mode [ 961.545276][T14263] veth1_vlan: entered promiscuous mode [ 961.647704][T14263] veth0_macvtap: entered promiscuous mode [ 961.704107][T14452] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 961.741001][T14263] veth1_macvtap: entered promiscuous mode [ 961.762006][T14263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.772755][T14263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.791687][T14455] fuse: Bad value for 'fd' [ 961.986296][T14263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.098426][T14263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.264130][T14263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.393279][T14263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.439325][T14263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.486814][T14263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.537593][T14263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.598224][T14263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.634206][T14263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.645629][T14263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.662219][T14263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.674575][T14263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.684652][T14461] fuse: Bad value for 'fd' [ 962.869742][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.877632][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.936569][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.952986][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.999479][T14463] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2654'. [ 963.218060][ T5888] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 963.811305][ T5888] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 964.277569][T14473] loop3: detected capacity change from 0 to 512 [ 964.329263][T14473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 964.414813][T14473] EXT4-fs (loop3): 1 truncate cleaned up [ 964.451542][T14473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.434036][T14017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.633062][T14489] fuse: Bad value for 'fd' [ 965.781828][T11749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 965.794287][T11749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 965.815487][T11749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 965.825452][T11749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 965.834177][T11749] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 965.841912][T11749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 967.064450][T14493] chnl_net:caif_netlink_parms(): no params data found [ 967.181968][T14511] syzkaller0: entered promiscuous mode [ 967.194672][T14511] syzkaller0: entered allmulticast mode [ 967.897259][T11749] Bluetooth: hci0: command tx timeout [ 967.978209][T14518] fuse: Bad value for 'rootmode' [ 967.997284][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'. [ 968.041415][T14499] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.085124][T14499] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 968.112120][T14493] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.138827][T14493] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.147169][T14493] bridge_slave_0: entered allmulticast mode [ 968.162242][T14493] bridge_slave_0: entered promiscuous mode [ 968.194020][T14493] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.201797][T14493] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.210391][T14493] bridge_slave_1: entered allmulticast mode [ 968.211894][T14522] fuse: Bad value for 'fd' [ 968.217795][T14493] bridge_slave_1: entered promiscuous mode [ 968.259753][ T789] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 968.298286][T14493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.323657][T14493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.339867][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 968.387309][T14493] team0: Port device team_slave_0 added [ 968.398286][T14493] team0: Port device team_slave_1 added [ 968.455196][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 968.464902][T14493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.472334][T14493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.498737][T14493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.500366][ T9] usb 3-1: device descriptor read/64, error -71 [ 968.517342][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 968.528143][ T789] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 968.542861][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.557400][ T789] usb 2-1: Product: syz [ 968.682750][T14493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.690003][ T789] usb 2-1: Manufacturer: syz [ 968.694737][ T789] usb 2-1: SerialNumber: syz [ 968.708777][T14493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.778556][ T789] usb 2-1: config 0 descriptor?? [ 968.807344][T14493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.840719][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 969.070269][ T9] usb 3-1: device descriptor read/64, error -71 [ 969.215697][ T9] usb usb3-port1: attempt power cycle [ 969.561513][ T789] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 969.570645][T14493] hsr_slave_0: entered promiscuous mode [ 969.572191][ T789] dvb-usb: bulk message failed: -22 (2/0) [ 969.588832][T14493] hsr_slave_1: entered promiscuous mode [ 969.598089][ T789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 969.615032][ T789] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 969.624237][T14493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.633908][T14493] Cannot create hsr debugfs directory [ 969.644083][ T789] usb 2-1: media controller created [ 969.661345][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 969.682444][ T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 969.710391][ T9] usb 3-1: device descriptor read/8, error -71 [ 969.751310][ T789] usb 2-1: selecting invalid altsetting 0 [ 969.757120][ T789] cxusb: set interface failed [ 969.788698][ T789] dvb-usb: bulk message failed: -22 (1/0) [ 969.912942][ T789] DVB: Unable to find symbol mt352_attach() [ 969.921942][ T789] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 969.960480][T11749] Bluetooth: hci0: command tx timeout [ 970.019512][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 970.031640][T14493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.053010][ T9] usb 3-1: device descriptor read/8, error -71 [ 970.060176][ T789] rc_core: IR keymap rc-dvico-portable not found [ 970.071434][ T789] Registered IR keymap rc-empty [ 970.077595][ T789] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 970.093740][ T789] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input17 [ 970.106559][ T789] dvb-usb: schedule remote query interval to 100 msecs. [ 970.114933][ T789] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 970.129191][ T789] usb 2-1: USB disconnect, device number 80 [ 970.178603][ T9] usb usb3-port1: unable to enumerate USB device [ 970.207725][T14493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.242737][ T789] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 970.306024][T14493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.392533][T14493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.582006][T14493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 970.597045][T14493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 970.603499][T14541] fuse: Unknown parameter 'use00000000000000000000' [ 970.604155][ T789] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 970.623068][T14493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 970.642476][T14493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 970.766800][T14493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.809655][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 970.909048][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 970.994279][ T789] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 0.40 [ 971.047597][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.128077][ T789] usb 2-1: Product: syz [ 971.168951][ T789] usb 2-1: Manufacturer: syz [ 971.221048][ T789] usb 2-1: SerialNumber: syz [ 971.717042][T14493] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.732828][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.740065][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.795794][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.803079][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.945922][ T789] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 971.969330][ T789] usb 2-1: MIDIStreaming interface descriptor not found [ 972.027163][ T789] usb 2-1: USB disconnect, device number 81 [ 972.040729][T11749] Bluetooth: hci0: command tx timeout [ 972.067593][T14553] fuse: Invalid rootmode [ 972.089895][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 972.149503][T11273] udevd[11273]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.292339][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.299163][T14493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.318851][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.329203][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 972.343239][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 972.353110][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.371779][T14493] veth0_vlan: entered promiscuous mode [ 972.380872][ T9] usb 3-1: config 0 descriptor?? [ 972.396459][T14493] veth1_vlan: entered promiscuous mode [ 972.459062][T14493] veth0_macvtap: entered promiscuous mode [ 972.471827][T14493] veth1_macvtap: entered promiscuous mode [ 972.494069][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.504926][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.517832][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.528883][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.539004][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.555446][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.567194][T14493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.587472][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.598791][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.609379][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.620557][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.630475][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.643979][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.656989][T14493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.697166][T14493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.718319][T14493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.727191][T14493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.736046][T14493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.806885][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 972.833673][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 972.868216][ T9] usb 3-1: USB disconnect, device number 37 [ 972.963974][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.990435][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.058010][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.066777][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.383220][T14569] fuse: Unknown parameter 'use00000000000000000000' [ 973.458187][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2681'. [ 973.476129][T14559] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.491255][T14559] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 973.700417][ T788] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 974.091601][ T789] libceph: connect (1)[c::]:6789 error -101 [ 974.139714][T11749] Bluetooth: hci0: command tx timeout [ 974.259103][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 974.456726][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 974.531028][ T788] usb 3-1: device descriptor read/64, error -71 [ 974.548894][T14576] ceph: No mds server is up or the cluster is laggy [ 976.244207][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 976.321921][ T788] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 976.865667][ T9] usb 2-1: device descriptor read/all, error -71 [ 976.920222][T14589] fuse: Invalid rootmode [ 979.191205][T14615] ubi16: attaching mtd0 [ 979.640258][T14615] ubi16: scanning is finished [ 979.648700][T14615] ubi16: empty MTD device detected [ 979.751924][ T5779] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 979.829987][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 979.856555][T14615] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 979.864401][T14615] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 979.872220][T14615] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 979.896388][T14615] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 979.904578][T14615] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 979.911848][T14615] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 979.922833][T14615] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 112131943 [ 979.960735][ T5779] usb 4-1: device descriptor read/64, error -71 [ 979.967377][T14615] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 979.989241][T14618] ubi16: background thread "ubi_bgt16d" started, PID 14618 [ 980.043428][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.070432][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 980.099631][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 980.129182][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.152176][ T9] usb 3-1: config 0 descriptor?? [ 980.249666][ T5779] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 980.459610][ T5779] usb 4-1: device descriptor read/64, error -71 [ 980.640176][ T5779] usb usb4-port1: attempt power cycle [ 980.778118][T14625] fuse: Unknown parameter 'grou00000000000000000000' [ 981.100447][ T5779] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 981.117927][T14630] fuse: Invalid rootmode [ 981.140485][ T5779] usb 4-1: device descriptor read/8, error -71 [ 981.327507][T14638] fuse: Invalid rootmode [ 981.429781][ T5779] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 981.460377][ T5779] usb 4-1: device descriptor read/8, error -71 [ 981.595021][ T5779] usb usb4-port1: unable to enumerate USB device [ 982.494584][ T5837] usb 3-1: USB disconnect, device number 40 [ 983.109797][ T9871] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 983.118780][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 983.269762][ T9871] usb 4-1: device descriptor read/64, error -32 [ 983.576536][ T9871] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 983.605364][T14656] Bluetooth: MGMT ver 1.22 [ 983.830385][ T9871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.884467][ T9871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.898282][ T9871] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 983.909717][ T9871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.945854][ T9871] usb 4-1: config 0 descriptor?? [ 984.485282][T14664] binder: 14663:14664 ioctl 4018620d 0 returned -22 [ 984.521824][T14664] binder: 14663:14664 ioctl c0306201 200000000240 returned -11 [ 984.574210][ T9871] waltop 0003:172F:0501.0008: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0 [ 984.741754][T14668] fuse: Unknown parameter '00000000000000000000' [ 984.795897][ T9871] usb 4-1: USB disconnect, device number 85 [ 986.623113][T14690] binder: 14689:14690 ioctl c0306201 0 returned -14 [ 986.651470][T14690] binder: 14689:14690 ioctl c0306201 200000000240 returned -11 [ 991.088275][T14713] fuse: Unknown parameter '00000000000000000000' [ 991.260004][T14720] binder: 14719:14720 ioctl c0306201 0 returned -14 [ 991.275117][T14720] binder: 14719:14720 ioctl c0306201 200000000240 returned -11 [ 993.325138][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 993.327801][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.340663][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.351468][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 994.068314][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 994.078936][T14724] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.099923][T14724] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 994.470604][T14750] binder: 14749:14750 ioctl c0306201 0 returned -14 [ 994.490539][T14750] binder: 14749:14750 ioctl c0306201 200000000240 returned -11 [ 999.630706][T14776] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2755'. [ 999.864229][T14786] binder: 14784:14786 ioctl c0306201 200000000240 returned -11 [ 999.972233][ T789] libceph: connect (1)[c::]:6789 error -101 [ 999.978355][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 999.998688][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1000.015350][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1000.282226][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1000.288363][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1000.825982][T14791] ceph: No mds server is up or the cluster is laggy [ 1001.921203][T14810] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2766'. [ 1002.096287][T14812] fuse: Bad value for 'rootmode' [ 1002.258902][T14816] binder: 14815:14816 ioctl c0306201 200000000240 returned -11 [ 1002.705526][ T5779] libceph: connect (1)[c::]:6789 error -101 [ 1002.721754][ T5779] libceph: mon0 (1)[c::]:6789 connect error [ 1002.898612][T14833] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2776'. [ 1002.953641][T14836] fuse: Unknown parameter 'use00000000000000000000' [ 1002.990261][ T5779] libceph: connect (1)[c::]:6789 error -101 [ 1002.996384][ T5779] libceph: mon0 (1)[c::]:6789 connect error [ 1003.495402][T14827] ceph: No mds server is up or the cluster is laggy [ 1003.538183][ T5779] libceph: connect (1)[c::]:6789 error -101 [ 1003.698984][ T5779] libceph: mon0 (1)[c::]:6789 connect error [ 1003.709084][T14846] binder: 14844:14846 ioctl c0306201 200000000240 returned -11 [ 1004.247158][T14855] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1005.459722][T14862] fuse: Unknown parameter 'use00000000000000000000' [ 1006.390264][T14869] binder: 14867:14869 ioctl c0306201 200000000240 returned -11 [ 1007.286965][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1007.437193][T14883] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1008.226301][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1008.339356][T14879] ceph: No mds server is up or the cluster is laggy [ 1008.345307][T14888] fuse: Unknown parameter 'use00000000000000000000' [ 1008.673772][T14896] fuse: Unknown parameter 'group_id00000000000000000000' [ 1008.759801][ T5818] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1008.899684][T14898] binder: BINDER_SET_CONTEXT_MGR already set [ 1008.909732][T14898] binder: 14897:14898 ioctl 4018620d 200000000040 returned -16 [ 1008.929447][T14898] binder: 14897:14898 ioctl c0306201 200000000240 returned -11 [ 1008.950271][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 1008.961841][ T5818] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1008.991430][ T5818] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1009.011146][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.019203][ T5818] usb 4-1: Product: syz [ 1009.037392][ T5818] usb 4-1: Manufacturer: syz [ 1009.049816][ T5818] usb 4-1: SerialNumber: syz [ 1009.071917][ T5818] usb 4-1: config 0 descriptor?? [ 1009.336042][ T5818] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1009.511802][T14902] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1010.326412][ T5818] dvb-usb: bulk message failed: -22 (2/0) [ 1010.343870][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1010.380155][ T5818] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1010.407081][ T5818] usb 4-1: media controller created [ 1010.491923][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1010.558118][ T5818] usb 4-1: selecting invalid altsetting 0 [ 1010.568948][ T5818] cxusb: set interface failed [ 1010.576822][ T5818] dvb-usb: bulk message failed: -22 (1/0) [ 1010.590487][T14911] fuse: Unknown parameter 'user_i00000000000000000000' [ 1010.677783][ T5818] DVB: Unable to find symbol mt352_attach() [ 1010.690779][ T5818] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1010.882160][ T5818] rc_core: IR keymap rc-dvico-portable not found [ 1010.888582][ T5818] Registered IR keymap rc-empty [ 1010.930499][ T5818] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1010.960613][ T5818] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input18 [ 1011.018363][ T5818] dvb-usb: schedule remote query interval to 100 msecs. [ 1011.037409][ T5818] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1011.101257][ T5818] usb 4-1: USB disconnect, device number 86 [ 1011.241414][ T5818] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1011.478814][T14921] fuse: Bad value for 'user_id' [ 1011.676040][T14923] binder: 14922:14923 ioctl c0306201 200000000240 returned -11 [ 1012.030123][ T5779] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1012.209621][ T5779] usb 4-1: device descriptor read/64, error -71 [ 1012.406461][T14934] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1013.264445][T14937] fuse: Unknown parameter 'user_i00000000000000000000' [ 1013.359939][ T5779] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1013.540443][ T5779] usb 4-1: device descriptor read/64, error -71 [ 1013.670347][ T5779] usb usb4-port1: attempt power cycle [ 1013.838803][T14941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1014.089660][ T5779] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1014.652804][T14946] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1015.637697][ T5779] usb 4-1: device descriptor read/8, error -71 [ 1015.852105][T14950] fuse: Bad value for 'user_id' [ 1017.231702][T14960] fuse: Unknown parameter 'user_i00000000000000000000' [ 1018.571256][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 1019.254542][ T5838] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1020.405264][ T5838] usb 4-1: device descriptor read/64, error -71 [ 1021.389673][ T5838] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1021.599757][ T5838] usb 4-1: device descriptor read/64, error -71 [ 1021.730569][ T5838] usb usb4-port1: attempt power cycle [ 1023.094726][T15011] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1024.799647][ T5779] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1026.841331][ T5779] usb 4-1: device descriptor read/64, error -71 [ 1027.812059][T15049] cgroup: Name too long [ 1029.679719][T15063] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1029.737871][T15066] syzkaller0: entered promiscuous mode [ 1029.744095][T15066] syzkaller0: entered allmulticast mode [ 1029.929672][ T5779] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1030.114881][ T5779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.128760][ T5779] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1030.149600][ T5779] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1030.184452][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.208584][ T5779] usb 3-1: config 0 descriptor?? [ 1030.227561][ T5779] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1030.309716][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1030.470881][ T9] usb 2-1: device descriptor read/64, error -71 [ 1030.739851][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1030.899853][ T9] usb 2-1: device descriptor read/64, error -71 [ 1031.023246][ T9] usb usb2-port1: attempt power cycle [ 1031.439653][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1031.470601][ T9] usb 2-1: device descriptor read/8, error -71 [ 1031.741799][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1031.780400][ T9] usb 2-1: device descriptor read/8, error -71 [ 1033.265496][ T9] usb usb2-port1: unable to enumerate USB device [ 1033.402069][ T5779] usb 3-1: USB disconnect, device number 41 [ 1035.353478][T15103] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1037.404960][T15116] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1038.991341][T15122] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1042.576241][T15137] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1043.601072][T15146] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1044.298844][ T5838] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1044.544226][ T5838] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1044.576253][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1044.618796][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1044.673182][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1044.749449][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1045.116470][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1045.148110][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1045.265139][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1045.284513][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1045.315711][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1045.334351][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1045.353915][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1045.365125][ T5779] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1045.582616][ T5779] usb 4-1: device descriptor read/64, error -71 [ 1048.461317][T11749] Bluetooth: hci2: command 0x0406 tx timeout [ 1048.569645][ T5779] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1049.198169][T15179] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1049.274675][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1049.283645][ T5838] usb 2-1: unable to read config index 4 descriptor/start: -71 [ 1049.291440][ T5838] usb 2-1: can't read configurations, error -71 [ 1049.837517][T15196] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1053.044140][T15211] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1053.223477][T15213] syzkaller0: entered promiscuous mode [ 1053.236750][T15213] syzkaller0: entered allmulticast mode [ 1054.001604][ T5838] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1054.272997][ T5838] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1054.377375][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.850388][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.856758][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.864487][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1055.930912][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1055.953619][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.979943][T15230] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1055.987892][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.019590][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1056.027906][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.050944][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.077343][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1056.099115][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.119682][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.150594][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1056.160734][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.189852][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.210701][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1056.220666][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.239630][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.259605][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1056.271846][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.289861][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.309646][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1056.317772][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.327141][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.349869][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1056.359849][ T5838] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1056.368952][ T5838] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1056.389643][ T5838] usb 4-1: Product: syz [ 1056.393891][ T5838] usb 4-1: Manufacturer: syz [ 1056.398518][ T5838] usb 4-1: SerialNumber: syz [ 1056.430499][ T5838] usb 4-1: config 0 descriptor?? [ 1056.456564][ T5838] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1056.551687][ T5838] usb 4-1: USB disconnect, device number 98 [ 1056.560465][ T5838] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1056.812429][T15242] syzkaller0: entered promiscuous mode [ 1056.818343][T15242] syzkaller0: entered allmulticast mode [ 1057.275125][ T5838] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1057.284692][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1057.311758][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1057.556158][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.825546][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1057.840092][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1057.848906][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1057.859678][ T5838] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1057.889337][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.912118][ T5838] usb 4-1: config 0 descriptor?? [ 1057.940710][ T5838] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1057.951560][T15250] ceph: No mds server is up or the cluster is laggy [ 1059.339632][T15263] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1060.433036][ T788] usb 4-1: USB disconnect, device number 99 [ 1060.639832][ T9871] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1060.834734][ T9871] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1060.911866][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1060.921827][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1060.933638][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1060.948624][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1060.960642][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.037087][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1061.062863][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.094427][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.146019][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1061.157357][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.168336][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.179659][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1061.194925][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.204267][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.216621][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1061.227386][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.236557][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.247807][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1061.276129][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.293087][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.310906][T15273] syzkaller0: entered promiscuous mode [ 1061.316449][T15273] syzkaller0: entered allmulticast mode [ 1061.329624][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1061.340361][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.349314][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.362438][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1061.382404][ T9871] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1061.393395][ T9871] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1061.402871][ T9871] usb 3-1: Product: syz [ 1061.407429][ T9871] usb 3-1: Manufacturer: syz [ 1061.412564][ T9871] usb 3-1: SerialNumber: syz [ 1061.433552][ T9871] usb 3-1: config 0 descriptor?? [ 1061.469399][ T9871] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1061.698739][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.721841][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.146076][T15283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.176970][T15283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.215334][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 1062.216621][ T788] usb 3-1: USB disconnect, device number 42 [ 1062.241983][ T788] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1062.919934][ T788] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1063.149789][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 1063.195639][ T788] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1063.217962][T15295] Bluetooth: MGMT ver 1.22 [ 1063.226580][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.312588][ T788] usb 3-1: Product: syz [ 1063.324631][ T788] usb 3-1: Manufacturer: syz [ 1063.349671][ T788] usb 3-1: SerialNumber: syz [ 1063.356061][T15294] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1063.894464][T15292] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1066.054346][ T788] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1066.073435][ T788] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1066.162914][ T788] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 1066.220363][ T788] usb 3-1: USB disconnect, device number 43 [ 1066.823024][T15177] udevd[15177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1066.847787][T15310] syzkaller0: entered promiscuous mode [ 1066.858959][T15310] syzkaller0: entered allmulticast mode [ 1067.455701][T15324] fuse: Unknown parameter '0x0000000000000003' [ 1067.964203][T14496] Bluetooth: hci4: command 0x0406 tx timeout [ 1068.229801][ T9871] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1068.722386][T15330] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1069.249879][ T9871] usb 4-1: Using ep0 maxpacket: 32 [ 1069.264746][ T9871] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1069.305274][ T9871] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1069.430499][ T9871] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1069.440967][ T9871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1069.451161][ T9871] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1069.461584][ T9871] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1069.493840][ T9871] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1069.504233][ T9871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.585197][ T9871] usb 4-1: config 0 descriptor?? [ 1069.920233][ T9871] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 100 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1070.003581][T15342] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1070.032536][T15348] syzkaller0: entered promiscuous mode [ 1070.038053][T15348] syzkaller0: entered allmulticast mode [ 1070.167678][ T789] usb 4-1: USB disconnect, device number 100 [ 1070.217602][ T789] usblp0: removed [ 1071.659144][T15365] fuse: Unknown parameter '0x0000000000000003' [ 1071.689048][T15361] syz_tun: entered promiscuous mode [ 1071.788846][T15361] syz_tun: left promiscuous mode [ 1072.473025][T15366] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1072.709713][ T788] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1074.890492][ T788] usb 2-1: device descriptor read/all, error -71 [ 1075.155930][T15380] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1076.295539][T15390] syzkaller0: entered promiscuous mode [ 1076.310139][T15390] syzkaller0: entered allmulticast mode [ 1077.011533][T15405] fuse: Unknown parameter '0x0000000000000003' [ 1077.472095][T15399] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1080.110627][T15422] syzkaller0: entered promiscuous mode [ 1080.144998][T15422] syzkaller0: entered allmulticast mode [ 1082.112583][T15440] syzkaller0: entered promiscuous mode [ 1082.126130][T15440] syzkaller0: entered allmulticast mode [ 1083.092806][T15444] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1083.420401][T15452] fuse: Unknown parameter '0x0000000000000003' [ 1083.849603][ T5838] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1084.871673][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.911582][ T5838] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1084.939953][ T5838] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1084.979760][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.014174][ T5838] usb 2-1: config 0 descriptor?? [ 1085.219242][T15463] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1086.316614][T15470] syzkaller0: entered promiscuous mode [ 1086.345764][T15470] syzkaller0: entered allmulticast mode [ 1086.376690][ T23] usb 2-1: USB disconnect, device number 92 [ 1087.534253][T15474] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1087.765304][T15484] fuse: Unknown parameter '0x0000000000000003' [ 1088.920308][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1088.926337][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1088.935523][T15491] ceph: No mds server is up or the cluster is laggy [ 1089.398411][T15500] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1090.680891][T15503] syzkaller0: entered promiscuous mode [ 1090.686460][T15503] syzkaller0: entered allmulticast mode [ 1091.998192][T15510] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1092.983894][T15522] fuse: Unknown parameter '0x0000000000000003' [ 1093.577371][T15529] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1095.131579][T15534] syzkaller0: entered promiscuous mode [ 1095.137139][T15534] syzkaller0: entered allmulticast mode [ 1095.232174][ T5779] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1095.646824][ T5779] usb 4-1: no configurations [ 1095.659586][ T5779] usb 4-1: can't read configurations, error -22 [ 1095.819670][ T5779] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1096.028255][ T5779] usb 4-1: no configurations [ 1096.033005][ T5779] usb 4-1: can't read configurations, error -22 [ 1096.055667][ T5779] usb usb4-port1: attempt power cycle [ 1096.479860][ T5779] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1096.524252][ T5779] usb 4-1: no configurations [ 1096.529340][ T5779] usb 4-1: can't read configurations, error -22 [ 1096.680954][ T5779] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1096.731187][ T5779] usb 4-1: no configurations [ 1096.735872][ T5779] usb 4-1: can't read configurations, error -22 [ 1096.749796][ T5779] usb usb4-port1: unable to enumerate USB device [ 1096.758140][T15559] syzkaller0: entered promiscuous mode [ 1096.764778][T15559] syzkaller0: entered allmulticast mode [ 1098.293146][T15573] fuse: Unknown parameter 'user_i00000000000000000000' [ 1098.417269][T15581] syzkaller0: entered promiscuous mode [ 1098.428028][T15581] syzkaller0: entered allmulticast mode [ 1099.388636][T15595] binder: BINDER_SET_CONTEXT_MGR already set [ 1099.407823][T15595] binder: 15594:15595 ioctl 4018620d 200000000040 returned -16 [ 1099.458367][T15595] binder: 15594:15595 ioctl c0306201 200000000240 returned -11 [ 1100.318517][T15604] fuse: Unknown parameter 'user_id00000000000000000000' [ 1100.690893][T15611] syzkaller0: entered promiscuous mode [ 1100.709591][T15611] syzkaller0: entered allmulticast mode [ 1101.109905][ T23] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1101.345808][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.369951][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.382065][ T23] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1101.409423][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1101.448630][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.480941][ T23] usb 2-1: Product: syz [ 1101.485276][ T23] usb 2-1: Manufacturer: syz [ 1101.490587][ T23] usb 2-1: SerialNumber: syz [ 1101.546936][ T23] cdc_mbim 2-1:1.0: skipping garbage [ 1102.240963][T15625] fuse: Unknown parameter 'fd0x0000000000000003' [ 1102.604267][ T23] cdc_mbim 2-1:1.0: bind() failure [ 1102.639364][ T23] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1102.657133][ T23] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1102.685656][ T23] usbtest: probe of 2-1:1.1 failed with error -71 [ 1102.701538][ T23] usb 2-1: USB disconnect, device number 93 [ 1103.003074][T15634] fuse: Unknown parameter 'user_id00000000000000000000' [ 1103.425947][T15642] syzkaller0: entered promiscuous mode [ 1103.451861][T15642] syzkaller0: entered allmulticast mode [ 1105.195622][T15657] fuse: Unknown parameter 'fd0x0000000000000003' [ 1105.244428][T15659] fuse: Unknown parameter 'user_id00000000000000000000' [ 1105.978410][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3051'. [ 1105.989982][T15667] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.003126][T15667] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1106.309825][ T5837] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1106.392813][T15675] syzkaller0: entered promiscuous mode [ 1106.398368][T15675] syzkaller0: entered allmulticast mode [ 1106.519808][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 1106.537307][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1106.547226][ T5837] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1106.566307][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.589710][ T5837] usb 4-1: Product: syz [ 1106.593958][ T5837] usb 4-1: Manufacturer: syz [ 1106.605624][ T5837] usb 4-1: SerialNumber: syz [ 1106.622630][ T5837] usb 4-1: config 0 descriptor?? [ 1106.848005][ T5837] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1106.868772][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 1106.881662][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1106.899880][ T5837] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1106.926506][ T5837] usb 4-1: media controller created [ 1106.961675][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1107.022540][ T5837] usb 4-1: selecting invalid altsetting 0 [ 1107.093050][ T5837] cxusb: set interface failed [ 1107.149069][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1107.681477][ T5837] DVB: Unable to find symbol mt352_attach() [ 1107.687469][ T5837] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1107.834218][T15686] fuse: Bad value for 'fd' [ 1107.951978][ T5837] rc_core: IR keymap rc-dvico-portable not found [ 1107.958397][ T5837] Registered IR keymap rc-empty [ 1107.990617][ T5837] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1108.031445][ T5837] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input19 [ 1108.091415][ T5837] dvb-usb: schedule remote query interval to 100 msecs. [ 1108.098638][ T5837] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1108.168962][ T5837] usb 4-1: USB disconnect, device number 105 [ 1108.325179][ T5837] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1108.519869][T15701] syzkaller0: entered promiscuous mode [ 1108.528908][T15701] syzkaller0: entered allmulticast mode [ 1110.384662][T15711] fuse: Bad value for 'fd' [ 1110.593862][ T9871] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1110.849351][ T9871] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1110.858137][ T9871] usb 3-1: can't read configurations, error -61 [ 1111.030373][ T9871] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1111.238962][ T9871] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1111.257083][ T9871] usb 3-1: can't read configurations, error -61 [ 1111.276110][ T9871] usb usb3-port1: attempt power cycle [ 1111.489528][ T5837] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1111.673663][ T5837] usb 2-1: device descriptor read/64, error -71 [ 1111.699927][ T9871] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1111.763262][ T9871] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1111.772112][ T9871] usb 3-1: can't read configurations, error -61 [ 1111.979768][ T5837] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1111.980896][ T9871] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1112.040799][ T9871] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1112.050072][ T9871] usb 3-1: can't read configurations, error -61 [ 1112.064894][ T9871] usb usb3-port1: unable to enumerate USB device [ 1112.171575][ T5837] usb 2-1: device descriptor read/64, error -71 [ 1112.299868][ T5837] usb usb2-port1: attempt power cycle [ 1112.609756][ T9871] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1112.739626][ T5837] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1112.810395][ T5837] usb 2-1: device descriptor read/8, error -71 [ 1112.813592][ T9871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.834129][ T9871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.846190][ T9871] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1112.863143][ T9871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1112.874078][ T9871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.874545][T15734] syzkaller0: entered promiscuous mode [ 1112.882895][ T9871] usb 4-1: Product: syz [ 1112.893906][ T9871] usb 4-1: Manufacturer: syz [ 1112.899125][T15734] syzkaller0: entered allmulticast mode [ 1112.899455][ T9871] usb 4-1: SerialNumber: syz [ 1112.939167][ T9871] cdc_mbim 4-1:1.0: skipping garbage [ 1113.081291][ T5837] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1113.140451][ T5837] usb 2-1: device descriptor read/8, error -71 [ 1113.362457][ T5837] usb usb2-port1: unable to enumerate USB device [ 1113.489618][ T5779] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1116.067307][ T9871] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 1116.079762][ T9871] cdc_mbim 4-1:1.0: bind() failure [ 1116.091052][ T9871] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1116.091469][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.098081][ T9871] cdc_ncm 4-1:1.1: bind() failure [ 1116.208201][ T9871] usb 4-1: USB disconnect, device number 106 [ 1116.210000][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.223648][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.356637][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.496909][ T5779] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1116.667787][ T5779] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1116.814124][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.320125][ T5779] usb 3-1: config 0 descriptor?? [ 1117.401368][ T5779] usb 3-1: can't set config #0, error -71 [ 1117.522763][ T5779] usb 3-1: USB disconnect, device number 48 [ 1117.983101][T15763] syzkaller0: entered promiscuous mode [ 1118.009365][T15763] syzkaller0: entered allmulticast mode [ 1118.049647][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1118.252493][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1118.260378][ T9] usb 2-1: can't read configurations, error -61 [ 1118.519625][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1120.023373][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1120.729299][ T9] usb 2-1: can't read configurations, error -61 [ 1120.756556][ T9] usb usb2-port1: attempt power cycle [ 1122.139746][ T788] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1122.733853][T15794] syzkaller0: entered promiscuous mode [ 1122.739973][T15794] syzkaller0: entered allmulticast mode [ 1122.782108][ T788] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1122.792055][ T788] usb 4-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1122.844342][ T788] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 1122.861214][ T788] usb 4-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 1122.881044][ T788] usb 4-1: Product: syz [ 1122.885279][ T788] usb 4-1: Manufacturer: syz [ 1122.890229][ T788] usb 4-1: SerialNumber: syz [ 1123.132422][ T788] usb 4-1: unit 4 not found! [ 1125.444384][ T788] usb 4-1: USB disconnect, device number 107 [ 1125.546910][T15177] udevd[15177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1125.608817][ T9871] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1126.427882][ T9871] usb 3-1: device descriptor read/all, error -71 [ 1128.539791][ T23] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1128.826484][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1128.904060][ T23] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1129.034866][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 1129.160568][ T23] usb 3-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 1129.180904][ T23] usb 3-1: Product: syz [ 1129.191150][ T23] usb 3-1: Manufacturer: syz [ 1129.201384][ T23] usb 3-1: SerialNumber: syz [ 1129.441926][T15844] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3111'. [ 1130.073775][ T23] usb 3-1: unit 4 not found! [ 1130.102077][ T23] usb 3-1: USB disconnect, device number 51 [ 1130.132124][T15177] udevd[15177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.660045][ T23] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1133.202609][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.212865][ T23] usb 4-1: config 0 has no interfaces? [ 1133.218381][ T23] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1133.227852][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.239595][ T23] usb 4-1: config 0 descriptor?? [ 1134.874672][ T23] usb 4-1: USB disconnect, device number 108 [ 1136.759601][ T5837] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1137.331706][ T5837] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1137.362317][ T5837] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1137.381690][ T5837] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1137.396562][ T5837] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1137.420114][ T5837] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1137.446204][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1137.466659][ T5837] usb 3-1: Product: syz [ 1137.471304][ T5837] usb 3-1: Manufacturer: syz [ 1137.498378][T15900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1137.537578][ T5837] cdc_wdm 3-1:1.0: skipping garbage [ 1137.550882][ T5837] cdc_wdm 3-1:1.0: skipping garbage [ 1137.568757][ T5837] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1137.856097][ T5838] usb 3-1: USB disconnect, device number 52 [ 1140.739823][ T5837] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1140.964569][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.993910][ T5837] usb 4-1: config 0 has no interfaces? [ 1141.001540][ T5837] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1141.036313][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.100967][ T5837] usb 4-1: config 0 descriptor?? [ 1141.161297][ T788] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1141.538008][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1141.637077][ T788] usb 2-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1141.673897][ T788] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 1141.687685][ T788] usb 2-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 1141.711352][ T788] usb 2-1: Product: syz [ 1141.715559][ T788] usb 2-1: Manufacturer: syz [ 1141.730656][ T788] usb 2-1: SerialNumber: syz [ 1141.763582][ T5837] usb 4-1: USB disconnect, device number 109 [ 1141.995119][ T788] usb 2-1: unit 4 not found! [ 1142.094927][ T788] usb 2-1: USB disconnect, device number 101 [ 1142.181453][T15177] udevd[15177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.279662][ T788] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1144.475009][ T788] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1144.483955][ T788] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1144.538895][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1144.578764][ T788] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1144.614502][ T788] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1144.643087][ T788] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1144.652293][ T788] usb 4-1: Product: syz [ 1144.681745][ T788] usb 4-1: Manufacturer: syz [ 1144.714177][T15959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1144.762266][T15969] syzkaller0: entered promiscuous mode [ 1144.770142][T15969] syzkaller0: entered allmulticast mode [ 1144.771429][ T788] cdc_wdm 4-1:1.0: skipping garbage [ 1144.793082][ T788] cdc_wdm 4-1:1.0: skipping garbage [ 1144.813035][ T788] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1145.894403][ T5837] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1145.913989][ T5838] usb 4-1: USB disconnect, device number 110 [ 1146.092030][ T5837] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.107351][ T5837] usb 2-1: config 0 has no interfaces? [ 1146.113556][ T5837] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1146.124558][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.140332][ T5837] usb 2-1: config 0 descriptor?? [ 1146.259639][ T23] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1146.414763][ T5837] usb 2-1: USB disconnect, device number 102 [ 1146.443221][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1146.463483][ T23] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1146.487453][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 1146.496972][ T23] usb 3-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 1146.505504][ T23] usb 3-1: Product: syz [ 1146.509831][ T23] usb 3-1: Manufacturer: syz [ 1146.514542][ T23] usb 3-1: SerialNumber: syz [ 1146.756051][ T23] usb 3-1: unit 4 not found! [ 1146.796178][ T23] usb 3-1: USB disconnect, device number 53 [ 1147.145749][T16002] syzkaller0: entered promiscuous mode [ 1147.151556][T16002] syzkaller0: entered allmulticast mode [ 1148.840671][ T788] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1149.029576][ T5838] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1149.055710][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.066871][ T788] usb 3-1: config 0 has no interfaces? [ 1149.075052][ T788] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1149.084648][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.097503][ T788] usb 3-1: config 0 descriptor?? [ 1149.212392][ T5838] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1149.221215][ T5838] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1149.231663][ T5838] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1149.241247][ T5838] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1149.261701][ T5838] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1149.270903][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1149.279038][ T5838] usb 4-1: Product: syz [ 1149.283734][ T5838] usb 4-1: Manufacturer: syz [ 1149.293313][T16021] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1149.302700][ T5838] cdc_wdm 4-1:1.0: skipping garbage [ 1149.307973][ T5838] cdc_wdm 4-1:1.0: skipping garbage [ 1149.313989][ T5838] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1149.422848][ T5838] usb 3-1: USB disconnect, device number 54 [ 1149.583190][ T9871] usb 4-1: USB disconnect, device number 111 [ 1150.548340][T16042] program syz.1.3178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1151.316618][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 1151.624020][T16052] hsr_slave_0 (unregistering): left promiscuous mode [ 1151.958812][T16045] loop2: detected capacity change from 0 to 32768 [ 1151.994646][T16045] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3179 (16045) [ 1152.149380][T16045] BTRFS info (device loop2): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 1152.160877][T16045] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1152.186196][T16045] BTRFS info (device loop2): using free space tree [ 1152.410799][T16081] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1153.387804][T16045] BTRFS info (device loop2): enabling ssd optimizations [ 1153.462967][T16045] BTRFS info (device loop2): auto enabling async discard [ 1153.659873][ T788] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1153.734233][T11748] BTRFS info (device loop2): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 1153.849593][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 1153.870016][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.899541][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.929949][ T788] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1153.939109][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.023867][ T788] usb 4-1: config 0 descriptor?? [ 1154.052163][ T788] hub 4-1:0.0: USB hub found [ 1154.316660][ T788] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1154.751551][ T788] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 1154.847326][ T788] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1155.004414][ T5838] usb 4-1: USB disconnect, device number 112 [ 1155.124798][T16092] fido_id[16092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1155.309816][ T788] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1155.569861][ T788] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1155.615458][ T788] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1155.649673][ T5838] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1155.649686][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1155.649741][ T788] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1155.892617][ T788] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1155.925405][ T788] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1155.951653][ T788] usb 2-1: Product: syz [ 1156.449045][ T788] usb 2-1: Manufacturer: syz [ 1156.532336][T16096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1156.573174][ T788] cdc_wdm 2-1:1.0: skipping garbage [ 1156.600190][ T788] cdc_wdm 2-1:1.0: skipping garbage [ 1156.609731][ T788] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1156.680383][ T5838] usb 4-1: device not accepting address 113, error -71 [ 1156.694730][T16105] binder: 16104:16105 ioctl c0306201 200000000240 returned -11 [ 1156.820913][ T9871] usb 2-1: USB disconnect, device number 103 [ 1157.089647][T16113] loop3: detected capacity change from 0 to 32768 [ 1157.103949][T16113] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3197 (16113) [ 1157.126733][T16113] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1157.137620][T16113] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1157.146466][T16113] BTRFS info (device loop3): turning on sync discard [ 1157.153239][T16113] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1157.163539][T16113] BTRFS info (device loop3): use zstd compression, level 3 [ 1157.170817][T16113] BTRFS info (device loop3): turning on async discard [ 1157.177764][T16113] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1157.188442][T16113] BTRFS info (device loop3): trying to use backup root at mount time [ 1157.196644][T16113] BTRFS info (device loop3): enabling auto defrag [ 1157.203169][T16113] BTRFS info (device loop3): using free space tree [ 1157.248738][ T1095] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1157.287191][T16113] BTRFS error (device loop3): failed to load root extent [ 1157.294477][T16113] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1157.305354][ T1095] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1157.325807][T16113] BTRFS warning (device loop3): couldn't read tree root [ 1157.333159][T16113] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1157.346026][ T1085] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1157.356969][T16113] BTRFS warning (device loop3): couldn't read tree root [ 1157.364084][T16113] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1157.389966][T16113] BTRFS info (device loop3): enabling ssd optimizations [ 1157.397755][T16113] BTRFS info (device loop3): rebuilding free space tree [ 1157.479586][T16113] BTRFS info (device loop3): checking UUID tree [ 1159.659758][T14017] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1159.996345][ T5838] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1160.250467][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 1160.294556][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.325870][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.356308][ T5838] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1160.406900][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.435757][ T5838] usb 2-1: config 0 descriptor?? [ 1160.472798][ T5838] hub 2-1:0.0: USB hub found [ 1160.709756][ T5838] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1160.874656][T16155] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1161.093722][ T5838] hid-generic 0003:046D:C31C.000A: unknown main item tag 0x0 [ 1161.148724][ T5838] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 1161.870835][T16146] usb 2-1: reset high-speed USB device number 104 using dummy_hcd [ 1163.009833][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1163.232982][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1163.274230][ T9] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1163.295782][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1163.309659][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1163.338555][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1163.356208][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1163.374071][ T9] usb 3-1: Product: syz [ 1163.386885][ T9] usb 3-1: Manufacturer: syz [ 1163.401749][T16164] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1163.424174][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1163.434028][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1163.445009][ T9] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1163.739700][ T5838] usb 3-1: USB disconnect, device number 55 [ 1165.452788][T16178] tipc: Enabling of bearer rejected, failed to enable media [ 1165.463003][T16178] syzkaller0: entered promiscuous mode [ 1165.468550][T16178] syzkaller0: entered allmulticast mode [ 1166.300800][T16187] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1167.563581][T16146] usbhid 2-1:0.0: reset_resume error -32 [ 1167.740204][ T788] usb 2-1: USB disconnect, device number 104 [ 1169.209623][ T5838] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1169.528377][ T5838] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1170.259743][ T5838] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1170.270881][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1170.299950][ T5838] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1170.403868][ T5838] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1170.449679][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1170.499736][ T5838] usb 3-1: Product: syz [ 1170.519540][ T5838] usb 3-1: Manufacturer: syz [ 1170.523854][T16213] tipc: Enabling of bearer rejected, failed to enable media [ 1170.568017][T16213] syzkaller0: entered promiscuous mode [ 1170.577514][T16205] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1170.592421][T16213] syzkaller0: entered allmulticast mode [ 1170.620925][ T5838] cdc_wdm 3-1:1.0: skipping garbage [ 1170.678651][ T5838] cdc_wdm 3-1:1.0: skipping garbage [ 1170.684457][ T5838] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1171.392204][ T5838] usb 3-1: USB disconnect, device number 56 [ 1171.693195][T16220] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1173.179572][ T789] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1173.369701][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 1173.391707][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.420775][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.455953][ T789] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1174.303049][T16235] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1174.389586][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.560315][ T789] usb 3-1: config 0 descriptor?? [ 1174.574706][ T789] hub 3-1:0.0: USB hub found [ 1175.539614][ T789] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1175.601371][ T789] usbhid 3-1:0.0: can't add hid device: -71 [ 1175.609728][ T789] usbhid: probe of 3-1:0.0 failed with error -71 [ 1175.690379][ T789] usb 3-1: USB disconnect, device number 57 [ 1177.375647][T16257] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1177.644102][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.650687][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.759731][ T789] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1178.116627][ T789] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1178.141383][ T789] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1178.150766][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.212579][ T789] usb 4-1: config 0 descriptor?? [ 1178.281290][ T789] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1178.789523][ T28] kauditd_printk_skb: 632 callbacks suppressed [ 1178.789542][ T28] audit: type=1326 audit(1780960314.799:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16256 comm="syz.0.3237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f261119ce59 code=0x0 [ 1179.119948][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1179.894782][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1179.917626][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.971821][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.019592][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1180.035893][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.063318][ T9] usb 2-1: config 0 descriptor?? [ 1180.080694][ T9] hub 2-1:0.0: USB hub found [ 1180.283569][ T9] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1180.434190][ T788] usb 4-1: USB disconnect, device number 115 [ 1180.691496][ T9] hid-generic 0003:046D:C31C.000B: unknown main item tag 0x0 [ 1180.742167][ T9] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 1181.341430][ T9] usb 2-1: USB disconnect, device number 105 [ 1181.463530][T16289] fido_id[16289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1181.879733][ T9] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1182.129610][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1182.148457][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.215993][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.331962][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1182.341859][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.362625][ T9] usb 2-1: config 0 descriptor?? [ 1182.397285][ T9] hub 2-1:0.0: USB hub found [ 1183.056662][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1183.081813][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1183.114236][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 1183.222724][ T9] usb 2-1: USB disconnect, device number 106 [ 1183.990881][T16308] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1185.978987][ T788] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1186.332927][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1186.862629][ T788] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1186.882032][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.904046][ T788] usb 4-1: config 0 descriptor?? [ 1186.935283][ T788] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1189.714037][ T9871] usb 4-1: USB disconnect, device number 116 [ 1190.730333][T16341] binder: 16340:16341 ioctl c0306201 0 returned -14 [ 1195.320902][T16371] binder: 16369:16371 ioctl c0306201 0 returned -14 [ 1198.301404][T16410] binder: 16409:16410 ioctl c0306201 0 returned -14 [ 1202.594983][T16454] loop2: detected capacity change from 0 to 1024 [ 1203.263665][T16459] overlayfs: missing 'lowerdir' [ 1203.436298][ T28] audit: type=1800 audit(1780960339.419:3420): pid=16461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3302" name="file0" dev="loop2" ino=26 res=0 errno=0 [ 1204.020811][T16463] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1209.171031][T16504] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1210.309647][ T9871] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1210.546563][ T9871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.600074][ T9871] usb 4-1: config 0 has no interfaces? [ 1210.605648][ T9871] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1210.645019][ T9871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.700251][ T9871] usb 4-1: config 0 descriptor?? [ 1211.221767][ T9871] usb 4-1: USB disconnect, device number 117 [ 1212.496698][T16521] loop2: detected capacity change from 0 to 32768 [ 1212.539615][T16521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3318 (16521) [ 1212.643502][T16521] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1212.704696][T16521] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1212.737342][T16521] BTRFS info (device loop2): turning on sync discard [ 1212.757861][T16521] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1212.776023][T16521] BTRFS info (device loop2): use zstd compression, level 3 [ 1212.802783][T16521] BTRFS info (device loop2): turning on async discard [ 1212.823047][T16521] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1212.866815][T16521] BTRFS info (device loop2): trying to use backup root at mount time [ 1212.895818][T16521] BTRFS info (device loop2): enabling auto defrag [ 1212.911547][T16521] BTRFS info (device loop2): using free space tree [ 1213.049022][ T1095] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1213.124470][T16521] BTRFS error (device loop2): failed to load root extent [ 1213.189078][T16521] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1213.189561][ T788] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1213.216645][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1213.284474][T16521] BTRFS warning (device loop2): couldn't read tree root [ 1213.299708][T16521] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1213.332542][ T38] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1213.389858][T16521] BTRFS warning (device loop2): couldn't read tree root [ 1213.396949][T16521] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1213.423052][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1213.445214][ T788] usb 2-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1213.473668][ T788] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 1213.529604][ T788] usb 2-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 1213.570771][T16521] BTRFS info (device loop2): enabling ssd optimizations [ 1213.581787][ T788] usb 2-1: Product: syz [ 1213.679887][ T788] usb 2-1: Manufacturer: syz [ 1213.695606][T16521] BTRFS info (device loop2): rebuilding free space tree [ 1213.846750][ T788] usb 2-1: SerialNumber: syz [ 1214.360836][T16521] BTRFS info (device loop2): checking UUID tree [ 1214.491336][T16558] AppArmor: change_hat: Invalid input '0' [ 1214.549929][ T788] usb 2-1: unit 4 not found! [ 1214.630345][ T788] usb 2-1: USB disconnect, device number 107 [ 1214.752936][T11748] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1214.805856][T15806] udevd[15806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1215.479558][ T789] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1216.060251][T16567] binder: BINDER_SET_CONTEXT_MGR already set [ 1216.066312][T16567] binder: 16565:16567 ioctl 4018620d 200000000040 returned -16 [ 1216.120076][T16570] binder: 16565:16570 ioctl c0306201 2000000003c0 returned -22 [ 1216.164302][ T789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.199597][ T789] usb 4-1: config 0 has no interfaces? [ 1216.208259][T16567] binder: 16565:16567 ioctl c0306201 200000000240 returned -11 [ 1216.236759][ T789] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1216.378563][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.407128][ T789] usb 4-1: config 0 descriptor?? [ 1217.189616][ T5837] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1217.492413][ T5837] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.515947][ T5837] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1217.563322][ T788] usb 4-1: USB disconnect, device number 118 [ 1217.570727][ T5837] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1217.593755][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.626439][ T5837] usb 3-1: Product: syz [ 1217.633313][ T5837] usb 3-1: Manufacturer: syz [ 1217.640564][ T5837] usb 3-1: SerialNumber: syz [ 1217.653327][ T5837] cdc_mbim 3-1:1.0: skipping garbage [ 1217.858717][T16580] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1218.200227][ T788] libceph: connect (1)[c::]:6789 error -101 [ 1218.206295][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 1218.281866][ T5837] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 1218.288828][ T5837] cdc_mbim 3-1:1.0: bind() failure [ 1218.305724][ T5837] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1218.347019][ T5837] cdc_ncm 3-1:1.1: bind() failure [ 1218.504696][ T788] libceph: connect (1)[c::]:6789 error -101 [ 1218.606781][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 1218.806415][T16597] loop3: detected capacity change from 0 to 32768 [ 1218.820783][T16597] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3339 (16597) [ 1218.844961][T16597] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1218.855237][T16597] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1218.864066][T16597] BTRFS info (device loop3): turning on sync discard [ 1218.870804][T16597] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1218.880215][T16597] BTRFS info (device loop3): use zstd compression, level 3 [ 1218.888039][T16597] BTRFS info (device loop3): turning on async discard [ 1218.894860][T16597] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1218.905493][T16597] BTRFS info (device loop3): trying to use backup root at mount time [ 1218.913611][T16597] BTRFS info (device loop3): enabling auto defrag [ 1218.920115][T16597] BTRFS info (device loop3): using free space tree [ 1219.002034][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1219.060066][T16589] ceph: No mds server is up or the cluster is laggy [ 1219.192111][T16597] BTRFS error (device loop3): failed to load root extent [ 1219.199254][T16597] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1219.208114][T13708] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1219.251016][T16597] BTRFS warning (device loop3): couldn't read tree root [ 1219.258060][T16597] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1219.284986][T13708] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1219.297296][T16597] BTRFS warning (device loop3): couldn't read tree root [ 1219.304379][T16597] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1219.332670][T16597] BTRFS info (device loop3): enabling ssd optimizations [ 1219.347478][T16597] BTRFS info (device loop3): rebuilding free space tree [ 1219.367165][T16597] BTRFS info (device loop3): checking UUID tree [ 1221.439559][ T788] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1221.583292][T14017] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1221.603417][ T5837] usb 3-1: USB disconnect, device number 58 [ 1221.749910][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.799036][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.016360][ T788] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1222.036074][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.115695][ T788] usb 2-1: config 0 descriptor?? [ 1222.924436][ T788] usbhid 2-1:0.0: can't add hid device: -71 [ 1222.969878][ T788] usbhid: probe of 2-1:0.0 failed with error -71 [ 1223.016681][ T788] usb 2-1: USB disconnect, device number 108 [ 1223.786986][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1223.843592][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1224.630752][T16650] ceph: No mds server is up or the cluster is laggy [ 1226.659699][ T789] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1226.909245][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.966297][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.020974][ T789] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1227.030542][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.041531][ T789] usb 4-1: config 0 descriptor?? [ 1227.582499][ T789] usbhid 4-1:0.0: can't add hid device: -71 [ 1227.610120][ T789] usbhid: probe of 4-1:0.0 failed with error -71 [ 1227.633939][ T789] usb 4-1: USB disconnect, device number 119 [ 1227.743971][T16680] loop1: detected capacity change from 0 to 1024 [ 1231.620696][ T788] IPVS: starting estimator thread 0... [ 1231.667962][T16702] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1231.749740][T16711] IPVS: using max 32 ests per chain, 76800 per kthread [ 1231.779596][ T9871] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1231.801266][T16714] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1231.979741][ T9871] usb 4-1: Using ep0 maxpacket: 32 [ 1231.994296][ T9871] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1232.015140][ T9871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.038922][ T9871] usb 4-1: Product: syz [ 1232.063731][ T9871] usb 4-1: Manufacturer: syz [ 1232.083987][ T9871] usb 4-1: SerialNumber: syz [ 1232.110524][ T9871] usb 4-1: config 0 descriptor?? [ 1232.138235][ T9871] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1232.199785][ T788] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1233.249076][ T9871] gspca_ov534_9: reg_w failed -110 [ 1233.380029][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.407292][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.465414][ T788] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1233.485057][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.516763][ T788] usb 2-1: config 0 descriptor?? [ 1233.749560][ T9871] gspca_ov534_9: Unknown sensor 0000 [ 1233.749642][ T9871] ov534_9: probe of 4-1:0.0 failed with error -22 [ 1234.070698][ T788] usbhid 2-1:0.0: can't add hid device: -71 [ 1234.078994][ T788] usbhid: probe of 2-1:0.0 failed with error -71 [ 1234.093827][ T788] usb 2-1: USB disconnect, device number 109 [ 1235.345388][ T9871] usb 4-1: USB disconnect, device number 120 [ 1236.082704][ T788] IPVS: starting estimator thread 0... [ 1236.123442][T16746] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1236.219737][T16751] IPVS: using max 32 ests per chain, 76800 per kthread [ 1237.625295][T16758] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1238.659639][ T9871] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1238.882658][ T9871] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1238.959606][ T789] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1239.640219][T16775] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1239.649641][ T9871] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1239.650225][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.669512][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.669782][ T9871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1239.709849][ T9871] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1239.775844][ T9871] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1239.789870][ T9871] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1239.860691][ T9871] usb 4-1: Product: syz [ 1239.864903][ T9871] usb 4-1: Manufacturer: syz [ 1239.876121][T16770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1239.879787][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 1239.900118][ T789] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1239.950846][ T9871] cdc_wdm 4-1:1.0: skipping garbage [ 1239.956082][ T9871] cdc_wdm 4-1:1.0: skipping garbage [ 1239.973472][ T789] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1240.009600][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.017744][ T9871] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1240.041864][ T789] usb 2-1: Product: syz [ 1240.072366][ T789] usb 2-1: Manufacturer: syz [ 1240.086471][ T789] usb 2-1: SerialNumber: syz [ 1240.117394][ T789] usb 2-1: config 0 descriptor?? [ 1240.220125][ T9] usb 4-1: USB disconnect, device number 121 [ 1241.822554][T16789] loop3: detected capacity change from 0 to 40427 [ 1241.856493][T16789] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1241.864307][T16789] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1241.876069][T16789] F2FS-fs (loop3): invalid crc value [ 1241.932144][T16789] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1241.995728][T16789] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1242.002917][T16789] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1242.074684][ T9] usb 2-1: USB disconnect, device number 110 [ 1243.899558][ T789] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1244.191082][ T789] usb 3-1: config 0 has no interfaces? [ 1244.273960][ T789] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1244.283901][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.293239][ T789] usb 3-1: Product: syz [ 1244.297503][ T789] usb 3-1: Manufacturer: syz [ 1244.302794][ T789] usb 3-1: SerialNumber: syz [ 1244.316280][ T789] usb 3-1: config 0 descriptor?? [ 1244.580482][ T788] usb 3-1: USB disconnect, device number 59 [ 1244.861639][T16812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1245.046198][T16817] ================================================================== [ 1245.054330][T16817] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 1245.062149][T16817] Read of size 8 at addr ffff8881412e9218 by task syz.0.3397/16817 [ 1245.070120][T16817] [ 1245.072538][T16817] CPU: 0 PID: 16817 Comm: syz.0.3397 Not tainted syzkaller #0 [ 1245.080035][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1245.090121][T16817] Call Trace: [ 1245.093431][T16817] [ 1245.096401][T16817] dump_stack_lvl+0x18c/0x250 [ 1245.101130][T16817] ? __lock_acquire+0x7d40/0x7d40 [ 1245.106223][T16817] ? show_regs_print_info+0x20/0x20 [ 1245.111462][T16817] ? load_image+0x420/0x420 [ 1245.115994][T16817] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1245.121563][T16817] ? __virt_addr_valid+0x18c/0x540 [ 1245.126833][T16817] ? __virt_addr_valid+0x469/0x540 [ 1245.131982][T16817] print_report+0xa8/0x210 [ 1245.136433][T16817] ? dvb_device_open+0xca/0x370 [ 1245.141327][T16817] kasan_report+0x117/0x150 [ 1245.145890][T16817] ? chrdev_open+0x3e3/0x6a0 [ 1245.150518][T16817] ? dvb_device_open+0xca/0x370 [ 1245.155410][T16817] dvb_device_open+0xca/0x370 [ 1245.160123][T16817] ? do_raw_spin_unlock+0x121/0x230 [ 1245.165362][T16817] chrdev_open+0x5cc/0x6a0 [ 1245.169814][T16817] ? cd_forget+0x160/0x160 [ 1245.174274][T16817] ? fsnotify_perm+0x3ed/0x5e0 [ 1245.179124][T16817] ? cd_forget+0x160/0x160 [ 1245.183575][T16817] do_dentry_open+0x8c6/0x1500 [ 1245.188380][T16817] path_openat+0x27f1/0x3230 [ 1245.193012][T16817] ? trace_irq_disable+0x37/0xe0 [ 1245.197997][T16817] ? do_sys_openat2+0xda/0x1d0 [ 1245.202798][T16817] ? verify_lock_unused+0x140/0x140 [ 1245.208029][T16817] ? do_filp_open+0x430/0x430 [ 1245.212741][T16817] ? asan.module_dtor+0x20/0x20 [ 1245.217629][T16817] do_filp_open+0x1f5/0x430 [ 1245.222167][T16817] ? vfs_tmpfile+0x490/0x490 [ 1245.226960][T16817] ? preempt_schedule_common+0x82/0xc0 [ 1245.232468][T16817] ? _raw_spin_unlock+0x3a/0x40 [ 1245.237355][T16817] ? alloc_fd+0x58f/0x630 [ 1245.241726][T16817] do_sys_openat2+0x134/0x1d0 [ 1245.246442][T16817] ? do_sys_open+0xe0/0xe0 [ 1245.250893][T16817] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1245.256910][T16817] ? lock_chain_count+0x20/0x20 [ 1245.261798][T16817] __x64_sys_openat+0x139/0x160 [ 1245.266685][T16817] do_syscall_64+0x55/0xb0 [ 1245.271136][T16817] ? clear_bhb_loop+0x40/0x90 [ 1245.275841][T16817] ? clear_bhb_loop+0x40/0x90 [ 1245.280547][T16817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1245.286482][T16817] RIP: 0033:0x7f261115d68e [ 1245.290926][T16817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1245.310569][T16817] RSP: 002b:00007f260f3d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1245.319022][T16817] RAX: ffffffffffffffda RBX: 00007f260f3d56c0 RCX: 00007f261115d68e [ 1245.327036][T16817] RDX: 0000000000040002 RSI: 00007f260f3d4c00 RDI: ffffffffffffff9c [ 1245.335055][T16817] RBP: 00007f260f3d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1245.343064][T16817] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1245.351061][T16817] R13: 00007f2611416128 R14: 00007f2611416090 R15: 00007ffc53370df8 [ 1245.359075][T16817] [ 1245.362116][T16817] [ 1245.364466][T16817] Allocated by task 1: [ 1245.368549][T16817] kasan_set_track+0x4e/0x70 [ 1245.373182][T16817] __kasan_kmalloc+0x8f/0xa0 [ 1245.377801][T16817] dvb_register_device+0x2fd/0x2210 [ 1245.383034][T16817] dvb_register_frontend+0x649/0x930 [ 1245.388352][T16817] vidtv_bridge_probe+0x9ab/0xf80 [ 1245.393480][T16817] platform_probe+0x13b/0x1c0 [ 1245.398234][T16817] really_probe+0x25b/0xb20 [ 1245.402770][T16817] __driver_probe_device+0x1ef/0x390 [ 1245.408088][T16817] driver_probe_device+0x4f/0x420 [ 1245.413168][T16817] __driver_attach+0x451/0x6e0 [ 1245.417960][T16817] bus_for_each_dev+0x235/0x2b0 [ 1245.422832][T16817] bus_add_driver+0x340/0x630 [ 1245.427539][T16817] driver_register+0x23a/0x310 [ 1245.432335][T16817] vidtv_bridge_init+0x3d/0x70 [ 1245.437258][T16817] do_one_initcall+0x242/0x790 [ 1245.442075][T16817] do_initcall_level+0x137/0x1f0 [ 1245.447081][T16817] do_initcalls+0x69/0xd0 [ 1245.451453][T16817] kernel_init_freeable+0x3ed/0x580 [ 1245.456686][T16817] kernel_init+0x1d/0x1c0 [ 1245.461038][T16817] ret_from_fork+0x48/0x80 [ 1245.465483][T16817] ret_from_fork_asm+0x11/0x20 [ 1245.470277][T16817] [ 1245.472624][T16817] Freed by task 16775: [ 1245.476756][T16817] kasan_set_track+0x4e/0x70 [ 1245.481377][T16817] kasan_save_free_info+0x2e/0x50 [ 1245.486437][T16817] ____kasan_slab_free+0x126/0x1e0 [ 1245.491575][T16817] slab_free_freelist_hook+0x130/0x1a0 [ 1245.497071][T16817] __kmem_cache_free+0xba/0x1e0 [ 1245.501973][T16817] dvb_device_open+0x2ee/0x370 [ 1245.506856][T16817] chrdev_open+0x5cc/0x6a0 [ 1245.511304][T16817] do_dentry_open+0x8c6/0x1500 [ 1245.516100][T16817] path_openat+0x27f1/0x3230 [ 1245.520727][T16817] do_filp_open+0x1f5/0x430 [ 1245.525259][T16817] do_sys_openat2+0x134/0x1d0 [ 1245.529968][T16817] __x64_sys_openat+0x139/0x160 [ 1245.534850][T16817] do_syscall_64+0x55/0xb0 [ 1245.539295][T16817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1245.545221][T16817] [ 1245.547566][T16817] The buggy address belongs to the object at ffff8881412e9200 [ 1245.547566][T16817] which belongs to the cache kmalloc-256 of size 256 [ 1245.561649][T16817] The buggy address is located 24 bytes inside of [ 1245.561649][T16817] freed 256-byte region [ffff8881412e9200, ffff8881412e9300) [ 1245.575387][T16817] [ 1245.577731][T16817] The buggy address belongs to the physical page: [ 1245.584226][T16817] page:ffffea000504ba00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1412e8 [ 1245.594517][T16817] head:ffffea000504ba00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1245.603494][T16817] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 1245.611600][T16817] page_type: 0xffffffff() [ 1245.615965][T16817] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 1245.624580][T16817] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1245.633183][T16817] page dumped because: kasan: bad access detected [ 1245.639611][T16817] page_owner tracks the page as allocated [ 1245.645341][T16817] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13448634135, free_ts 0 [ 1245.665082][T16817] post_alloc_hook+0x1c1/0x200 [ 1245.669891][T16817] get_page_from_freelist+0x1951/0x19e0 [ 1245.675464][T16817] __alloc_pages+0x1f0/0x460 [ 1245.680078][T16817] alloc_page_interleave+0x24/0x1e0 [ 1245.685309][T16817] alloc_slab_page+0x5d/0x160 [ 1245.690018][T16817] new_slab+0x87/0x2d0 [ 1245.694120][T16817] ___slab_alloc+0xc5d/0x12f0 [ 1245.698836][T16817] __kmem_cache_alloc_node+0x19e/0x250 [ 1245.704331][T16817] kmalloc_trace+0x2a/0xe0 [ 1245.708778][T16817] bus_add_driver+0x162/0x630 [ 1245.713481][T16817] driver_register+0x23a/0x310 [ 1245.718282][T16817] usb_register_driver+0x206/0x3d0 [ 1245.723461][T16817] do_one_initcall+0x242/0x790 [ 1245.728266][T16817] do_initcall_level+0x137/0x1f0 [ 1245.733242][T16817] do_initcalls+0x69/0xd0 [ 1245.737606][T16817] kernel_init_freeable+0x3ed/0x580 [ 1245.742838][T16817] page_owner free stack trace missing [ 1245.748224][T16817] [ 1245.750565][T16817] Memory state around the buggy address: [ 1245.756213][T16817] ffff8881412e9100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1245.764296][T16817] ffff8881412e9180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1245.772380][T16817] >ffff8881412e9200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1245.780462][T16817] ^ [ 1245.785334][T16817] ffff8881412e9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1245.793416][T16817] ffff8881412e9300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1245.801494][T16817] ================================================================== [ 1245.818247][T16817] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1245.825509][T16817] CPU: 0 PID: 16817 Comm: syz.0.3397 Not tainted syzkaller #0 [ 1245.832993][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1245.843071][T16817] Call Trace: [ 1245.846377][T16817] [ 1245.849334][T16817] dump_stack_lvl+0x18c/0x250 [ 1245.854056][T16817] ? show_regs_print_info+0x20/0x20 [ 1245.859290][T16817] ? load_image+0x420/0x420 [ 1245.863826][T16817] panic+0x2dc/0x730 [ 1245.867754][T16817] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1245.873945][T16817] ? bpf_jit_dump+0xd0/0xd0 [ 1245.878485][T16817] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1245.884499][T16817] ? _raw_spin_unlock+0x40/0x40 [ 1245.889385][T16817] ? dvb_device_open+0xca/0x370 [ 1245.894269][T16817] check_panic_on_warn+0x84/0xa0 [ 1245.899273][T16817] ? dvb_device_open+0xca/0x370 [ 1245.904162][T16817] end_report+0x6f/0x130 [ 1245.908435][T16817] kasan_report+0x128/0x150 [ 1245.912968][T16817] ? chrdev_open+0x3e3/0x6a0 [ 1245.917588][T16817] ? dvb_device_open+0xca/0x370 [ 1245.922477][T16817] dvb_device_open+0xca/0x370 [ 1245.927190][T16817] ? do_raw_spin_unlock+0x121/0x230 [ 1245.932422][T16817] chrdev_open+0x5cc/0x6a0 [ 1245.936870][T16817] ? cd_forget+0x160/0x160 [ 1245.941320][T16817] ? fsnotify_perm+0x3ed/0x5e0 [ 1245.946110][T16817] ? cd_forget+0x160/0x160 [ 1245.950564][T16817] do_dentry_open+0x8c6/0x1500 [ 1245.955366][T16817] path_openat+0x27f1/0x3230 [ 1245.959988][T16817] ? trace_irq_disable+0x37/0xe0 [ 1245.964962][T16817] ? do_sys_openat2+0xda/0x1d0 [ 1245.969760][T16817] ? verify_lock_unused+0x140/0x140 [ 1245.974986][T16817] ? do_filp_open+0x430/0x430 [ 1245.979689][T16817] ? asan.module_dtor+0x20/0x20 [ 1245.984573][T16817] do_filp_open+0x1f5/0x430 [ 1245.989102][T16817] ? vfs_tmpfile+0x490/0x490 [ 1245.993734][T16817] ? preempt_schedule_common+0x82/0xc0 [ 1245.999233][T16817] ? _raw_spin_unlock+0x3a/0x40 [ 1246.004116][T16817] ? alloc_fd+0x58f/0x630 [ 1246.008490][T16817] do_sys_openat2+0x134/0x1d0 [ 1246.013203][T16817] ? do_sys_open+0xe0/0xe0 [ 1246.017649][T16817] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1246.023663][T16817] ? lock_chain_count+0x20/0x20 [ 1246.028556][T16817] __x64_sys_openat+0x139/0x160 [ 1246.033439][T16817] do_syscall_64+0x55/0xb0 [ 1246.037883][T16817] ? clear_bhb_loop+0x40/0x90 [ 1246.042584][T16817] ? clear_bhb_loop+0x40/0x90 [ 1246.047282][T16817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1246.053206][T16817] RIP: 0033:0x7f261115d68e [ 1246.057649][T16817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1246.077283][T16817] RSP: 002b:00007f260f3d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1246.085731][T16817] RAX: ffffffffffffffda RBX: 00007f260f3d56c0 RCX: 00007f261115d68e [ 1246.093744][T16817] RDX: 0000000000040002 RSI: 00007f260f3d4c00 RDI: ffffffffffffff9c [ 1246.101760][T16817] RBP: 00007f260f3d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1246.109764][T16817] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1246.117761][T16817] R13: 00007f2611416128 R14: 00007f2611416090 R15: 00007ffc53370df8 [ 1246.125777][T16817] [ 1246.129082][T16817] Kernel Offset: disabled [ 1246.133404][T16817] Rebooting in 86400 seconds..