last executing test programs: 10m28.389339067s ago: executing program 1 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x4408, 0x40088}}, 0x20}}, 0x20000800) 10m27.557737869s ago: executing program 1 (id=563): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x9e) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740", 0x2a) write$qrtrtun(r0, &(0x7f0000000340)="25375468d806f651fd4481058460159cd8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c9bb440e69e82bb46cd07f6eee8286930573bbfa022955a1744b947e767704184270cf3dbc17d9913088b56292b25558fe91a2e21b2800d9df409de8cbda88e3cbfe2ef78f6fbe38f542b45890ea3b905daecb08061e0ad4b472504bf1a9013ab24d5434e7a5b02aef143998ebd6a9b286ea0a89c306bf504f078e2d6f6f8a34435f1ae8083fb593c1a72308c97fb", 0xc3) write$qrtrtun(r0, &(0x7f0000000440)="418ed3d937933303e64e5112018529758e8fa16105880d39b004d3b509be9762c0cc94dc150babb7d1bdae96ab6344bd9bac3d026bc09677c70a00fc7cf80b5cecc90917848aaba189dd82b94cc05e3289b965ce56282ad7440c3e0866eaf7ffffffff130000e498fad722b0221f4d46b1dad12b877ba10e54580593fe577e9a377d256a9d0fe8761d733602a29017da1f0a1cd668003ca005609559c0ed6f3917604a2bfdb22ae50d09b14d558976cf9c28c80b76e18f3e28874e3828dcd857f08ec90e5de6c70c4de045e5380ca76c42d382a231b73a1fba1043a31f779591f3ebfbc6b3e681fa747fcf574edcc460", 0xf0) write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x27e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x459], 0x0, 0x0, 0x1, 0x1}}, 0x40) 10m26.899127252s ago: executing program 1 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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") r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 10m24.865948759s ago: executing program 1 (id=574): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) rename(0x0, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='./file0\x00') 10m23.508843374s ago: executing program 1 (id=581): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000c40)=@x86={0xa9, 0x5, 0x8, 0x0, 0x3, 0x6, 0xad, 0x0, 0x8, 0x3, 0x9, 0xfd, 0x0, 0x5, 0x7, 0x88, 0x7, 0x13, 0x35, '\x00', 0x8, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 10m22.258618391s ago: executing program 1 (id=586): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x26}, 0x9c) 10m19.441151812s ago: executing program 32 (id=586): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x26}, 0x9c) 3m58.777387092s ago: executing program 5 (id=1897): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x40}}, 0x20050000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xb64, 0x0, 0x2}, {0x38c, 0x0, 0x6}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m57.34118619s ago: executing program 5 (id=1899): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 3m56.100920281s ago: executing program 5 (id=1901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3m55.3892642s ago: executing program 5 (id=1903): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000004ac0)=[@in={0x2, 0x4e21, @remote}], 0x10) 3m54.478530655s ago: executing program 5 (id=1905): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x4000008) 3m53.492687407s ago: executing program 5 (id=1907): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff08, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x80047455, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x11) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 3m37.111593251s ago: executing program 33 (id=1907): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff08, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x80047455, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x11) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f38316e030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 59.759220944s ago: executing program 0 (id=2256): r0 = io_uring_setup(0x3e45, 0x0) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xf) close(r2) close_range(r0, 0xffffffffffffffff, 0x0) 58.956641198s ago: executing program 0 (id=2257): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)}, 0x4000005) 57.409682646s ago: executing program 0 (id=2260): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES16=0x0], 0xfd, 0x59eb, &(0x7f0000006480)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, 0x0) 52.581300601s ago: executing program 0 (id=2267): r0 = io_uring_setup(0x3e45, 0x0) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xf) close(r2) close_range(r0, 0xffffffffffffffff, 0x0) 51.79960093s ago: executing program 0 (id=2269): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80c0, &(0x7f0000000100)={[{@nouser_xattr}, {@cache_strategy_disabled}, {@dax_never}, {@cache_strategy_disabled}, {@dax_never}, {@nouser_xattr}]}, 0x1, 0x174, &(0x7f00000003c0)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'osx.', 'cache_strategy=disabled'}) 50.84142508s ago: executing program 0 (id=2271): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) 45.026563857s ago: executing program 2 (id=2279): r0 = io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x97c3, 0x0, 0x0, 0x14e}) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xf) close(r2) close_range(r0, 0xffffffffffffffff, 0x0) 43.948363334s ago: executing program 2 (id=2282): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x34}], 0x1}, 0x4000005) 42.909890697s ago: executing program 2 (id=2285): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@largeio}, {@prjquota}]}, 0x1, 0xb8e1, &(0x7f0000013cc0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}], 0x3) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) open(0x0, 0x400141042, 0x0) 38.009361234s ago: executing program 2 (id=2288): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x1, 0x2000002, 0x0, 0x80000000008, 0x8000000000000000, 0x0, 0xfffdfffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffd, 0x2}) 37.093524935s ago: executing program 2 (id=2292): r0 = io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x97c3, 0x0, 0x0, 0x14e}) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xf) close(r2) close_range(r0, 0xffffffffffffffff, 0x0) 36.100382848s ago: executing program 2 (id=2293): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x2c9ab000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x1ffc, @empty, 0x7fffe}, 0x1c) syz_open_procfs$pagemap(0x0, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) 34.329228021s ago: executing program 34 (id=2271): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) 19.025336252s ago: executing program 35 (id=2293): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x2c9ab000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x1ffc, @empty, 0x7fffe}, 0x1c) syz_open_procfs$pagemap(0x0, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) 16.060555564s ago: executing program 3 (id=2318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000030c0)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x5efe) 15.322738712s ago: executing program 3 (id=2319): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x35, 0x36, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) fallocate(r0, 0x0, 0x0, 0x1001f0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r4 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) pwritev2(r4, 0x0, 0x0, 0x6e45, 0x80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 12.83175927s ago: executing program 4 (id=2323): syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f01000000000000000000090581062000000000090582022000000000090503"], 0x0) 12.54165422s ago: executing program 6 (id=2324): syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x88, 0x8f, 0xdb, 0x8, 0x1604, 0x8001, 0x37a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0xef, 0xe4}}]}}]}}, 0x0) 10.088275854s ago: executing program 3 (id=2325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xff0a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d04"], 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x0) 9.901869197s ago: executing program 6 (id=2326): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 9.816441379s ago: executing program 4 (id=2327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000030c0)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x5efe) 8.970973959s ago: executing program 4 (id=2328): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x597, &(0x7f0000000240)={0x0, 0x7e8c, 0x1000, 0x0, 0x13d}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) 7.774334852s ago: executing program 6 (id=2329): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 7.284753238s ago: executing program 4 (id=2330): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x220, 0x0, 0x19, 0x0, 0xd0, 0x0, 0x188, 0x1f0, 0x1f0, 0x188, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x60}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6erspan0\x00', 'team0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.138527141s ago: executing program 6 (id=2331): io_submit(0x0, 0x1, &(0x7f0000001500)=[0x0]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1d, &(0x7f00000000c0)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001a00)={0x2020}, 0x2020) 5.719416777s ago: executing program 3 (id=2332): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000012a00000000d96e6c8d5e8508"], 0x34}], 0x1}, 0x4000005) 5.146079948s ago: executing program 4 (id=2333): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x402, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402030c", @ANYRES8], 0x7) 5.05157189s ago: executing program 3 (id=2334): syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x88, 0x8f, 0xdb, 0x8, 0x1604, 0x8001, 0x37a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0xef, 0xe4}}]}}]}}, 0x0) 4.024774399s ago: executing program 6 (id=2335): syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f01000000000000000000090581062000000000090582022000000000090503"], 0x0) 3.272201028s ago: executing program 4 (id=2336): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f0000b87e"], 0x50) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x800001, &(0x7f0000005bc0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f5f6461710000000000000074615f636865636b73756d3d6e6f6e652c6e6f636f772c726174656c696d69745fc19e4b05745490d86572726f72732c70726a71756f74612c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5969, &(0x7f0000000100)="$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") 2.448410692s ago: executing program 3 (id=2337): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 0s ago: executing program 6 (id=2338): syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000402505a1a44000880203010902"], &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB]}) kernel console output (not intermixed with test programs): syz [ 843.207714][ T5840] usb 3-1: SerialNumber: syz [ 843.216513][ T5840] usb 3-1: config 0 descriptor?? [ 843.499216][ T8] usb 3-1: USB disconnect, device number 28 [ 843.541480][ T10] usb 1-1: USB disconnect, device number 20 [ 843.980454][T11333] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 844.023557][T11332] IPVS: stopping backup sync thread 11333 ... [ 844.817882][T11338] program syz.0.1917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.921534][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 845.145410][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 845.170970][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 845.171127][ T10] usb 3-1: config 0 has no interface number 0 [ 845.171266][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 845.201753][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 845.201927][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.202071][ T10] usb 3-1: Product: syz [ 845.202182][ T10] usb 3-1: Manufacturer: syz [ 845.202291][ T10] usb 3-1: SerialNumber: syz [ 845.235021][ T10] usb 3-1: config 0 descriptor?? [ 845.756766][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 845.958228][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 846.022591][ T8] usb 1-1: config 6 has an invalid interface number: 2 but max is 1 [ 846.022801][ T8] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 846.023002][ T8] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 846.023205][ T8] usb 1-1: config 6 has no interface number 0 [ 846.023394][ T8] usb 1-1: config 6 interface 2 has no altsetting 0 [ 846.055089][ T8] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 846.055328][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.055528][ T8] usb 1-1: Product: syz [ 846.055701][ T8] usb 1-1: Manufacturer: syz [ 846.055879][ T8] usb 1-1: SerialNumber: syz [ 846.578563][ T8] usb 1-1: USB disconnect, device number 21 [ 846.785671][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 846.785939][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 846.786065][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 846.786432][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 846.824531][ T10] usb 3-1: USB disconnect, device number 29 [ 847.542563][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 847.700652][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 847.708833][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 847.709018][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 847.764469][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 847.764640][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.764789][ T10] usb 4-1: Product: syz [ 847.764898][ T10] usb 4-1: Manufacturer: syz [ 847.765006][ T10] usb 4-1: SerialNumber: syz [ 847.776120][ T10] usb 4-1: config 0 descriptor?? [ 847.802985][ T10] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 847.982450][ T5840] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 848.118902][ T10] usb 4-1: USB disconnect, device number 31 [ 848.161985][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 848.282370][ T5840] usb 5-1: config 162 has an invalid interface number: 246 but max is 0 [ 848.282478][ T5840] usb 5-1: config 162 has no interface number 0 [ 848.282574][ T5840] usb 5-1: config 162 interface 246 altsetting 4 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 848.282693][ T5840] usb 5-1: config 162 interface 246 has no altsetting 0 [ 848.299626][ T5839] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 848.376417][ T5840] usb 5-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 848.376593][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.376731][ T5840] usb 5-1: Product: syz [ 848.376846][ T5840] usb 5-1: Manufacturer: syz [ 848.376958][ T5840] usb 5-1: SerialNumber: syz [ 848.495929][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 848.517859][ T5839] usb 3-1: config 0 has no interfaces? [ 848.559327][ T5839] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 848.559566][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 848.559767][ T5839] usb 3-1: Product: syz [ 848.559944][ T5839] usb 3-1: SerialNumber: syz [ 848.569990][ T5839] usb 3-1: config 0 descriptor?? [ 848.834880][ T5839] usb 3-1: USB disconnect, device number 30 [ 848.867660][ T5840] usb 5-1: USB disconnect, device number 50 [ 850.234765][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 850.396037][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 850.437226][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.437384][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 850.456339][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 850.456515][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.456655][ T10] usb 1-1: Product: syz [ 850.456767][ T10] usb 1-1: Manufacturer: syz [ 850.456875][ T10] usb 1-1: SerialNumber: syz [ 850.765225][ T10] usb 1-1: 0:2 : does not exist [ 850.847202][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 851.058464][ T10] usb 1-1: USB disconnect, device number 22 [ 851.565603][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 851.678299][ T5840] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 851.862669][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 851.875463][ T5840] usb 4-1: config 6 has an invalid interface number: 2 but max is 1 [ 851.875618][ T5840] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 851.875749][ T5840] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 851.875887][ T5840] usb 4-1: config 6 has no interface number 0 [ 851.876013][ T5840] usb 4-1: config 6 interface 2 has no altsetting 0 [ 851.937627][ T5840] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 851.937799][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.937933][ T5840] usb 4-1: Product: syz [ 851.938042][ T5840] usb 4-1: Manufacturer: syz [ 851.938151][ T5840] usb 4-1: SerialNumber: syz [ 852.404464][ T5839] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 852.596600][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 852.635993][ T5839] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 852.636209][ T5839] usb 1-1: config 0 has no interface number 0 [ 852.636419][ T5839] usb 1-1: config 0 interface 12 has no altsetting 0 [ 852.700285][ T5839] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 852.700457][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.700571][ T5839] usb 1-1: Product: syz [ 852.700683][ T5839] usb 1-1: Manufacturer: syz [ 852.700791][ T5839] usb 1-1: SerialNumber: syz [ 852.715710][ T5839] usb 1-1: config 0 descriptor?? [ 852.727404][ T5840] usb 4-1: USB disconnect, device number 32 [ 853.496517][ T5840] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 853.671975][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 853.709566][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 853.709750][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 853.873270][ T5840] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 853.873501][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.873698][ T5840] usb 5-1: Product: syz [ 853.873868][ T5840] usb 5-1: Manufacturer: syz [ 853.874040][ T5840] usb 5-1: SerialNumber: syz [ 853.896510][ T5840] usb 5-1: config 0 descriptor?? [ 853.926705][ T5840] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 854.063438][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 854.223785][ T5839] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 854.224050][ T5839] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 854.224169][ T5839] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 854.224541][ T5839] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 854.245439][ T5839] usb 1-1: USB disconnect, device number 23 [ 854.254264][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 854.285941][ T10] usb 3-1: config 0 has no interfaces? [ 854.300013][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 854.300133][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 854.300234][ T10] usb 3-1: Product: syz [ 854.300307][ T10] usb 3-1: SerialNumber: syz [ 854.331747][ T8] usb 5-1: USB disconnect, device number 51 [ 854.389372][ T10] usb 3-1: config 0 descriptor?? [ 854.671166][ T8] usb 3-1: USB disconnect, device number 31 [ 855.689889][ T5792] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 855.690094][ T5792] Bluetooth: hci1: Injecting HCI hardware error event [ 855.690725][ T5792] Bluetooth: hci1: hardware error 0x00 [ 856.382457][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 856.616400][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.616651][ T10] usb 5-1: config 0 has no interfaces? [ 856.730422][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 856.730597][ T10] usb 5-1: New USB device strings: Mfr=136, Product=2, SerialNumber=3 [ 856.730747][ T10] usb 5-1: Product: syz [ 856.730856][ T10] usb 5-1: Manufacturer: syz [ 856.730968][ T10] usb 5-1: SerialNumber: syz [ 856.775393][ T10] usb 5-1: config 0 descriptor?? [ 856.910859][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 857.166175][ T5839] usb 5-1: USB disconnect, device number 52 [ 857.488257][T11417] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 857.490805][T11417] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 857.493728][T11417] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 857.510457][T11417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 857.517180][T11417] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 857.525212][T11417] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 857.911080][ T5792] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 859.501056][T11415] chnl_net:caif_netlink_parms(): no params data found [ 859.759082][ T5792] Bluetooth: hci5: command tx timeout [ 860.746789][ T5839] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 860.970045][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 861.022235][ T5839] usb 3-1: config 0 has no interfaces? [ 861.049662][ T5839] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 861.059531][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 861.068001][ T5839] usb 3-1: Product: syz [ 861.072350][ T5839] usb 3-1: SerialNumber: syz [ 861.231622][ T5839] usb 3-1: config 0 descriptor?? [ 861.460044][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 861.487776][ T5839] usb 3-1: USB disconnect, device number 32 [ 861.747000][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 861.778394][ T10] usb 1-1: config 0 has no interfaces? [ 861.785455][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 861.795540][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.947303][ T10] usb 1-1: config 0 descriptor?? [ 861.990649][ T5792] Bluetooth: hci5: command tx timeout [ 863.394472][ T8] usb 1-1: USB disconnect, device number 24 [ 863.517661][T11415] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.533384][T11415] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.541349][T11415] bridge_slave_0: entered allmulticast mode [ 863.551314][T11415] bridge_slave_0: entered promiscuous mode [ 863.648874][T11415] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.657527][T11415] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.665689][T11415] bridge_slave_1: entered allmulticast mode [ 863.674400][T11415] bridge_slave_1: entered promiscuous mode [ 864.133286][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 864.184419][T11415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.232216][ T5792] Bluetooth: hci5: command tx timeout [ 864.281315][T11415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.868177][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 864.954098][T11415] team0: Port device team_slave_0 added [ 865.076427][T11415] team0: Port device team_slave_1 added [ 865.774816][T11415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.782577][T11415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.808945][T11415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.863943][ T5839] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 865.964752][T11415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.972271][T11415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.998825][T11415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.191684][ T5839] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 866.201200][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.285759][ T5839] usb 3-1: config 0 descriptor?? [ 866.390514][ T5839] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 866.434299][ T5839] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 866.458032][ T5792] Bluetooth: hci5: command tx timeout [ 866.577206][T11415] hsr_slave_0: entered promiscuous mode [ 866.597464][T11415] hsr_slave_1: entered promiscuous mode [ 866.605698][T11415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.613612][T11415] Cannot create hsr debugfs directory [ 868.763399][T11415] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 868.829237][T11415] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 868.861088][T11415] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 869.134845][T11415] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 869.288957][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.503368][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.717239][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.963402][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.289883][ T8] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 870.506359][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 870.826655][ T8] usb 5-1: config 0 has no interfaces? [ 870.922760][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 870.932425][ T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 870.940828][ T8] usb 5-1: Product: syz [ 870.945655][ T8] usb 5-1: SerialNumber: syz [ 871.051301][ T8] usb 5-1: config 0 descriptor?? [ 871.380078][ T8] usb 5-1: USB disconnect, device number 53 [ 872.139594][ T13] bridge_slave_1: left allmulticast mode [ 872.145451][ T13] bridge_slave_1: left promiscuous mode [ 872.152476][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.268193][ T13] bridge_slave_0: left allmulticast mode [ 872.274155][ T13] bridge_slave_0: left promiscuous mode [ 872.289640][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.673891][ T13] ip6gretap0 (unregistering): left allmulticast mode [ 873.092578][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.253314][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.354373][ T13] bond0 (unregistering): Released all slaves [ 874.041802][ T5839] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 874.245465][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 874.385848][ T5839] usb 4-1: config 0 has no interfaces? [ 874.391782][ T5839] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 874.401356][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.496444][ T5839] usb 4-1: config 0 descriptor?? [ 874.683400][ T13] hsr_slave_0: left promiscuous mode [ 874.720866][ T13] hsr_slave_1: left promiscuous mode [ 874.728881][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.737881][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.837351][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.846047][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.011752][ T13] veth1_macvtap: left promiscuous mode [ 875.020144][ T13] veth0_macvtap: left promiscuous mode [ 875.026092][ T13] veth1_vlan: left promiscuous mode [ 875.031564][ T13] veth0_vlan: left promiscuous mode [ 876.647609][ T13] team0 (unregistering): Port device team_slave_1 removed [ 876.678313][ T13] team0 (unregistering): Port device team_slave_0 removed [ 877.217038][T11415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.402395][T11415] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.536613][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.544526][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.707451][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.709289][ T10] usb 4-1: USB disconnect, device number 33 [ 877.715351][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.286497][ T13] IPVS: stop unused estimator thread 0... [ 878.693222][ T8] usb 3-1: USB disconnect, device number 33 [ 878.833463][ T5840] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 879.045108][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 879.074788][ T5840] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 879.087007][ T5840] usb 4-1: config 253 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 879.098406][ T5840] usb 4-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 879.108971][ T5840] usb 4-1: config 253 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 879.119164][ T5840] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 879.417806][ T5840] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.427463][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 879.436143][ T5840] usb 4-1: SerialNumber: syz [ 879.500441][T11510] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 879.566433][T11510] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 879.646817][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 879.662257][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.669316][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.677078][T11510] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 879.868704][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 879.870019][ T5839] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 879.936054][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 879.954530][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 880.086494][ T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 880.096129][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.104732][ T10] usb 3-1: Product: syz [ 880.109163][ T10] usb 3-1: Manufacturer: syz [ 880.114276][ T10] usb 3-1: SerialNumber: syz [ 880.117180][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 880.165751][ T5840] usb 4-1: USB disconnect, device number 34 [ 880.276384][ T5839] usb 5-1: config 0 has no interfaces? [ 880.340102][ T10] usb 3-1: config 0 descriptor?? [ 880.353610][ T5839] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 880.363681][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 880.372302][ T5839] usb 5-1: Product: syz [ 880.376747][ T5839] usb 5-1: SerialNumber: syz [ 880.438984][ T10] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 880.500527][ T5839] usb 5-1: config 0 descriptor?? [ 880.659306][ T10] usb 3-1: USB disconnect, device number 34 [ 880.809706][ T8] usb 5-1: USB disconnect, device number 54 [ 881.195731][T11415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.201443][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 884.251326][ T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 884.466244][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 884.551446][ T8] usb 3-1: config 0 has no interfaces? [ 884.557298][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 884.567655][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.692910][ T8] usb 3-1: config 0 descriptor?? [ 885.015233][ T5874] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 885.044818][ T10] usb 3-1: USB disconnect, device number 35 [ 885.066885][T11415] veth0_vlan: entered promiscuous mode [ 885.204370][T11415] veth1_vlan: entered promiscuous mode [ 885.311169][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 885.344781][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 885.357208][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 885.450489][ T5874] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 885.460818][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.469198][ T5874] usb 4-1: Product: syz [ 885.473832][ T5874] usb 4-1: Manufacturer: syz [ 885.478704][ T5874] usb 4-1: SerialNumber: syz [ 885.598570][ T5874] usb 4-1: config 0 descriptor?? [ 885.615544][T11415] veth0_macvtap: entered promiscuous mode [ 885.649572][ T5874] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 885.778555][T11415] veth1_macvtap: entered promiscuous mode [ 885.878336][ T8] usb 4-1: USB disconnect, device number 35 [ 886.095928][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.107715][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.117994][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.129011][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.145076][T11415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.366679][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.377722][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.388067][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.405643][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.417967][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.428871][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.439505][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.450353][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.465954][T11415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.545490][T11415] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.556251][T11415] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.565630][T11415] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.574906][T11415] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.054109][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 887.266921][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 887.320349][ T8] usb 3-1: config 0 has no interfaces? [ 887.390801][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 887.402264][ T8] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 887.410890][ T8] usb 3-1: Product: syz [ 887.415353][ T8] usb 3-1: SerialNumber: syz [ 887.449310][ T8] usb 3-1: config 0 descriptor?? [ 887.682276][ T8] usb 3-1: USB disconnect, device number 36 [ 889.712293][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 889.968246][ T5840] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 890.199632][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 890.249887][ T5840] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 890.258485][ T5840] usb 3-1: config 0 has no interface number 0 [ 890.265225][ T5840] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 890.275657][ T5840] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 890.286185][ T5840] usb 3-1: config 0 interface 41 has no altsetting 0 [ 890.485090][ T5840] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 890.494691][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.503150][ T5840] usb 3-1: Product: syz [ 890.507851][ T5840] usb 3-1: Manufacturer: syz [ 890.512739][ T5840] usb 3-1: SerialNumber: syz [ 890.649513][ T5840] usb 3-1: config 0 descriptor?? [ 890.657456][T11594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 890.711940][T11594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 890.936242][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 891.069782][T11594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 891.151428][T11594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 891.211956][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 891.278241][ T8] usb 1-1: config 0 has no interfaces? [ 891.284199][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 891.294106][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.429422][ T8] usb 1-1: config 0 descriptor?? [ 891.664111][ T5840] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 891.791726][ T8] usb 1-1: USB disconnect, device number 25 [ 892.360919][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 893.305732][ T5840] usb 3-1: USB disconnect, device number 37 [ 894.422265][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 896.892463][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.901027][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.205526][ T4896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.214764][ T4896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.025583][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 901.274447][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 901.337311][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 901.372732][ T8] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 901.381446][ T8] usb 4-1: config 0 has no interface number 0 [ 901.387867][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 901.404764][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 901.417675][ T8] usb 4-1: config 0 interface 41 has no altsetting 0 [ 901.709356][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 901.746365][ T10] usb 5-1: config 0 has no interfaces? [ 901.752440][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 901.761826][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.818959][ T8] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 901.828515][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.843039][ T8] usb 4-1: Product: syz [ 901.849841][ T8] usb 4-1: Manufacturer: syz [ 901.854719][ T8] usb 4-1: SerialNumber: syz [ 901.923433][ T10] usb 5-1: config 0 descriptor?? [ 901.995967][ T8] usb 4-1: config 0 descriptor?? [ 902.004734][T11682] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 902.062837][T11682] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 902.276640][ T5839] usb 5-1: USB disconnect, device number 55 [ 902.397952][T11682] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 902.479890][T11682] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 903.007112][ T8] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 904.459437][ T5839] usb 4-1: USB disconnect, device number 36 [ 906.616907][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 906.841611][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 906.896722][ T8] usb 1-1: config 0 has no interfaces? [ 906.902783][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 906.912466][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.991633][ T8] usb 1-1: config 0 descriptor?? [ 907.303544][ T8] usb 1-1: USB disconnect, device number 26 [ 908.423221][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 908.648430][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 908.675261][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.686307][ T8] usb 7-1: config 0 has no interfaces? [ 908.795647][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 908.805392][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.813983][ T8] usb 7-1: Product: syz [ 908.818524][ T8] usb 7-1: Manufacturer: syz [ 908.823398][ T8] usb 7-1: SerialNumber: syz [ 908.892512][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 908.967224][ T8] usb 7-1: config 0 descriptor?? [ 909.106534][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.117559][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 909.126907][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 909.136494][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.263575][ T8] usb 7-1: USB disconnect, device number 2 [ 909.420148][ T10] usb 1-1: config 0 descriptor?? [ 912.149995][ T5840] usb 1-1: USB disconnect, device number 27 [ 912.165193][ T5839] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 912.408437][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 912.439399][ T5839] usb 5-1: config 0 has no interfaces? [ 912.448333][ T5839] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 912.462453][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.594968][ T5839] usb 5-1: config 0 descriptor?? [ 913.367226][T11798] process 'syz.6.2055' launched '/dev/fd/3' with NULL argv: empty string added [ 913.401532][ T8] usb 5-1: USB disconnect, device number 56 [ 917.584992][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 917.829002][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 917.940944][ T8] usb 3-1: config 0 has no interfaces? [ 917.946799][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 917.959892][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.068882][ T8] usb 3-1: config 0 descriptor?? [ 918.343121][ T8] usb 3-1: USB disconnect, device number 38 [ 918.464719][T11858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.072617][ T5840] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 927.287022][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 927.407302][ T5840] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 927.417593][ T5840] usb 3-1: config 0 has no interface number 0 [ 927.424194][ T5840] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 927.434516][ T5840] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 927.444989][ T5840] usb 3-1: config 0 interface 41 has no altsetting 0 [ 927.847852][ T5840] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 927.857418][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.866807][ T5840] usb 3-1: Product: syz [ 927.871400][ T5840] usb 3-1: Manufacturer: syz [ 927.876273][ T5840] usb 3-1: SerialNumber: syz [ 928.053094][ T5840] usb 3-1: config 0 descriptor?? [ 928.063973][T11932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 928.072501][T11932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 928.449219][T11932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 928.554719][T11932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 928.845774][T11954] 9pnet_fd: Insufficient options for proto=fd [ 929.021258][ T5840] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 929.200865][T11954] Process accounting resumed [ 930.486003][ T5840] usb 3-1: USB disconnect, device number 39 [ 931.279491][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 931.439664][ T5874] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 931.514687][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 931.588770][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 931.598651][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.607451][ T10] usb 4-1: Product: syz [ 931.619065][ T10] usb 4-1: Manufacturer: syz [ 931.626121][ T10] usb 4-1: SerialNumber: syz [ 931.654433][ T5874] usb 1-1: device descriptor read/64, error -71 [ 931.764424][ T10] usb 4-1: config 0 descriptor?? [ 931.790723][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 931.931956][ T5874] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 932.104079][ T5874] usb 1-1: device descriptor read/64, error -71 [ 932.231980][ T5874] usb usb1-port1: attempt power cycle [ 932.669786][ T5874] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 932.716543][ T5874] usb 1-1: device descriptor read/8, error -71 [ 932.979549][ T5874] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 933.044031][ T5874] usb 1-1: device descriptor read/8, error -71 [ 933.172540][ T5874] usb usb1-port1: unable to enumerate USB device [ 934.471131][ T10] gspca_stk1135: reg_w 0x300 err -71 [ 934.478384][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 934.484959][ T10] gspca_stk1135: Sensor write failed [ 934.490808][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 934.497667][ T10] gspca_stk1135: Sensor write failed [ 934.503269][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 934.510362][ T10] gspca_stk1135: Sensor read failed [ 934.515872][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 934.522647][ T10] gspca_stk1135: Sensor read failed [ 934.528069][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 934.535162][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 934.542321][ T10] gspca_stk1135: Sensor read failed [ 934.547825][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 934.554578][ T10] gspca_stk1135: Sensor read failed [ 934.560173][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 934.576926][ T10] gspca_stk1135: Sensor write failed [ 934.585451][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 934.592040][ T10] gspca_stk1135: Sensor write failed [ 934.598107][ T10] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 935.076464][ T10] usb 4-1: USB disconnect, device number 37 [ 935.363178][ T5839] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 935.599089][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 935.641915][ T5839] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 935.650341][ T5839] usb 1-1: config 0 has no interface number 0 [ 935.657856][ T5839] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 935.671130][ T5839] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 935.682501][ T5839] usb 1-1: config 0 interface 41 has no altsetting 0 [ 935.863537][ T5839] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 935.874696][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.885898][ T5839] usb 1-1: Product: syz [ 935.891340][ T5839] usb 1-1: Manufacturer: syz [ 935.896220][ T5839] usb 1-1: SerialNumber: syz [ 936.037299][ T5839] usb 1-1: config 0 descriptor?? [ 936.046815][T12004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 936.070613][T12004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 936.395150][T12004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 936.486162][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 936.558997][T12004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 936.818057][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 937.021719][ T5839] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 937.060150][ T10] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 937.069855][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.249062][ T10] usb 4-1: config 0 descriptor?? [ 937.281739][ T10] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 937.369670][ T10] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 938.476022][ T5839] usb 1-1: USB disconnect, device number 32 [ 941.916653][ T5839] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 942.103001][ T5839] usb 1-1: device descriptor read/64, error -71 [ 942.424535][ T5839] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 942.665357][ T5839] usb 1-1: device descriptor read/64, error -71 [ 942.815492][ T5839] usb usb1-port1: attempt power cycle [ 942.844838][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 943.081911][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 943.194490][ T10] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 943.204202][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.212734][ T10] usb 7-1: Product: syz [ 943.223362][ T10] usb 7-1: Manufacturer: syz [ 943.228254][ T10] usb 7-1: SerialNumber: syz [ 943.295607][ T5839] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 943.381141][ T10] usb 7-1: config 0 descriptor?? [ 943.412152][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 943.468534][ T5839] usb 1-1: device descriptor read/8, error -71 [ 943.769297][ T5839] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 943.891854][ T5839] usb 1-1: device descriptor read/8, error -71 [ 944.034582][ T5839] usb usb1-port1: unable to enumerate USB device [ 944.725670][T12067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2140'. [ 945.325772][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 945.332704][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 945.888410][ T10] gspca_stk1135: reg_w 0x2ff err -71 [ 945.895279][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 945.901866][ T10] gspca_stk1135: Sensor write failed [ 945.907717][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 945.914319][ T10] gspca_stk1135: Sensor write failed [ 945.920554][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 945.927220][ T10] gspca_stk1135: Sensor read failed [ 945.932715][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 945.939400][ T10] gspca_stk1135: Sensor read failed [ 945.944830][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 945.961684][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 945.973303][ T10] gspca_stk1135: Sensor read failed [ 945.979911][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 945.986487][ T10] gspca_stk1135: Sensor read failed [ 945.992098][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 945.998801][ T10] gspca_stk1135: Sensor write failed [ 946.004527][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 946.011334][ T10] gspca_stk1135: Sensor write failed [ 946.017114][ T10] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 946.541096][ T10] usb 7-1: USB disconnect, device number 3 [ 947.466333][ T5839] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 947.700955][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 947.770168][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.781177][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 947.846774][ T5840] usb 4-1: USB disconnect, device number 38 [ 947.949610][ T5839] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 947.959033][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.967547][ T5839] usb 3-1: Product: syz [ 947.971889][ T5839] usb 3-1: Manufacturer: syz [ 947.976644][ T5839] usb 3-1: SerialNumber: syz [ 948.368530][ T5839] usb 3-1: 0:2 : does not exist [ 948.460080][ T5839] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 948.686765][ T5839] usb 3-1: USB disconnect, device number 40 [ 949.148923][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.319982][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2153'. [ 950.383727][ T5874] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 950.562375][ T5874] usb 3-1: device descriptor read/64, error -71 [ 950.871374][ T5874] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 951.083217][ T5874] usb 3-1: device descriptor read/64, error -71 [ 951.106358][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 951.226231][ T5874] usb usb3-port1: attempt power cycle [ 951.324948][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 951.404702][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 951.414257][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.422840][ T10] usb 4-1: Product: syz [ 951.433440][ T10] usb 4-1: Manufacturer: syz [ 951.438338][ T10] usb 4-1: SerialNumber: syz [ 951.575279][ T10] usb 4-1: config 0 descriptor?? [ 951.611746][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 951.658094][ T5874] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 951.733750][ T5874] usb 3-1: device descriptor read/8, error -71 [ 951.888394][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 952.036709][ T5874] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 952.185276][ T5874] usb 3-1: device descriptor read/8, error -71 [ 952.330015][ T8] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 952.355547][ T5874] usb usb3-port1: unable to enumerate USB device [ 952.662183][ T8] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 952.672156][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.777721][ T8] usb 5-1: config 0 descriptor?? [ 952.846338][ T8] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 952.909613][ T8] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 954.077206][ T10] gspca_stk1135: reg_w 0x2ff err -71 [ 954.084391][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 954.091105][ T10] gspca_stk1135: Sensor write failed [ 954.096991][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 954.103736][ T10] gspca_stk1135: Sensor write failed [ 954.109351][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 954.116017][ T10] gspca_stk1135: Sensor read failed [ 954.121543][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 954.128379][ T10] gspca_stk1135: Sensor read failed [ 954.133799][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 954.140927][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 954.148374][ T10] gspca_stk1135: Sensor read failed [ 954.153884][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 954.160550][ T10] gspca_stk1135: Sensor read failed [ 954.176032][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 954.185779][ T10] gspca_stk1135: Sensor write failed [ 954.191490][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 954.198072][ T10] gspca_stk1135: Sensor write failed [ 954.203842][ T10] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 954.224609][ T10] usb 4-1: USB disconnect, device number 39 [ 954.724372][ T5839] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 954.939863][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 954.980725][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.991992][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 955.116187][ T5839] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 955.126038][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.134726][ T5839] usb 3-1: Product: syz [ 955.139161][ T5839] usb 3-1: Manufacturer: syz [ 955.146711][ T5839] usb 3-1: SerialNumber: syz [ 955.652013][ T5839] usb 3-1: 0:2 : does not exist [ 955.767033][ T5839] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 956.025933][ T5839] usb 3-1: USB disconnect, device number 45 [ 956.497445][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.728933][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2167'. [ 958.808086][ T5839] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 959.074872][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 959.155454][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.165947][ T5839] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 959.175343][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.387940][ T5839] usb 7-1: config 0 descriptor?? [ 959.920537][T10103] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 959.989799][ T5840] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 960.035006][ T5839] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 960.042443][ T5839] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 960.050640][ T5839] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 960.057836][ T5839] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 960.065244][ T5839] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 960.154797][T10103] usb 3-1: device descriptor read/64, error -71 [ 960.211126][ T5839] sony 0003:054C:024B.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.6-1/input0 [ 960.223492][ T5839] sony 0003:054C:024B.0006: failed to claim input [ 960.231941][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 960.367306][ T5840] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 960.376874][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.385492][ T5840] usb 1-1: Product: syz [ 960.390247][ T5840] usb 1-1: Manufacturer: syz [ 960.395137][ T5840] usb 1-1: SerialNumber: syz [ 960.542518][ T5840] usb 1-1: config 0 descriptor?? [ 960.552055][T10103] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 960.581535][ T5839] usb 7-1: USB disconnect, device number 4 [ 960.635908][ T5840] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 960.733973][T10103] usb 3-1: device descriptor read/64, error -71 [ 960.861539][T10103] usb usb3-port1: attempt power cycle [ 961.320673][T10103] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 961.473903][T10103] usb 3-1: device descriptor read/8, error -71 [ 961.769782][T10103] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 961.867834][T10103] usb 3-1: device descriptor read/8, error -71 [ 961.994429][T10103] usb usb3-port1: unable to enumerate USB device [ 963.041279][ T5840] gspca_stk1135: reg_w 0x2ff err -71 [ 963.047967][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 963.055779][ T5840] gspca_stk1135: Sensor write failed [ 963.061473][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 963.068210][ T5840] gspca_stk1135: Sensor write failed [ 963.074991][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 963.081563][ T5840] gspca_stk1135: Sensor read failed [ 963.088008][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 963.094676][ T5840] gspca_stk1135: Sensor read failed [ 963.100104][ T5840] gspca_stk1135: Detected sensor type unknown (0x0) [ 963.107172][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 963.113790][ T5840] gspca_stk1135: Sensor read failed [ 963.119470][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 963.126065][ T5840] gspca_stk1135: Sensor read failed [ 963.131769][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 963.142671][ T5840] gspca_stk1135: Sensor write failed [ 963.149693][ T5840] gspca_stk1135: serial bus timeout: status=0x00 [ 963.156283][ T5840] gspca_stk1135: Sensor write failed [ 963.162253][ T5840] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 963.870089][ T5840] usb 1-1: USB disconnect, device number 37 [ 964.335191][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 964.461505][ T5874] usb 5-1: USB disconnect, device number 57 [ 964.591593][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 964.613663][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.624361][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.720190][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.729640][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.738429][ T8] usb 4-1: Product: syz [ 964.742988][ T8] usb 4-1: Manufacturer: syz [ 964.747956][ T8] usb 4-1: SerialNumber: syz [ 965.201578][ T8] usb 4-1: 0:2 : does not exist [ 965.261276][ T8] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 965.460040][ T8] usb 4-1: USB disconnect, device number 40 [ 966.282516][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 967.210896][ T8] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 967.377639][ T5840] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 967.437173][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 967.504124][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.515416][ T8] usb 7-1: config 0 has no interfaces? [ 967.597223][ T5840] usb 5-1: device descriptor read/64, error -71 [ 967.599941][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 967.614195][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.622933][ T8] usb 7-1: Product: syz [ 967.633900][ T8] usb 7-1: Manufacturer: syz [ 967.641027][ T8] usb 7-1: SerialNumber: syz [ 967.728202][ T8] usb 7-1: config 0 descriptor?? [ 967.889852][ T5840] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 967.979707][ T8] usb 7-1: USB disconnect, device number 5 [ 968.102531][ T5840] usb 5-1: device descriptor read/64, error -71 [ 968.240052][ T5840] usb usb5-port1: attempt power cycle [ 968.634133][ T5840] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 968.685830][ T8] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 968.719032][ T5840] usb 5-1: device descriptor read/8, error -71 [ 969.003697][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 969.014249][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 969.039408][ T5840] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 969.087916][ T8] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 969.097783][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.106397][ T8] usb 3-1: Product: syz [ 969.110854][ T8] usb 3-1: Manufacturer: syz [ 969.116000][ T8] usb 3-1: SerialNumber: syz [ 969.130606][ T5840] usb 5-1: device descriptor read/8, error -71 [ 969.252761][ T8] usb 3-1: config 0 descriptor?? [ 969.301062][ T5840] usb usb5-port1: unable to enumerate USB device [ 969.342172][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 969.423754][ T5874] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 969.649186][ T5874] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 969.659102][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.738196][ T5874] usb 4-1: config 0 descriptor?? [ 969.800746][ T5874] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 969.852314][ T5874] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 971.478568][ T5874] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 971.715628][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 971.765043][ T5874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.776325][ T5874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 971.798783][ T8] gspca_stk1135: reg_w 0x2ff err -71 [ 971.805667][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 971.812986][ T8] gspca_stk1135: Sensor write failed [ 971.818903][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 971.825662][ T8] gspca_stk1135: Sensor write failed [ 971.831557][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 971.838235][ T8] gspca_stk1135: Sensor read failed [ 971.844508][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 971.851673][ T8] gspca_stk1135: Sensor read failed [ 971.857313][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 971.864604][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 971.871691][ T8] gspca_stk1135: Sensor read failed [ 971.877402][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 971.884306][ T8] gspca_stk1135: Sensor read failed [ 971.890014][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 971.907039][ T8] gspca_stk1135: Sensor write failed [ 971.912652][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 971.922204][ T8] gspca_stk1135: Sensor write failed [ 971.928465][ T8] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 972.105761][ T5874] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 972.121610][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.132180][ T5874] usb 5-1: Product: syz [ 972.136638][ T5874] usb 5-1: Manufacturer: syz [ 972.142314][ T5874] usb 5-1: SerialNumber: syz [ 972.453529][ T8] usb 3-1: USB disconnect, device number 50 [ 972.563568][ T5874] usb 5-1: 0:2 : does not exist [ 972.639410][ T5874] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 972.932472][ T5874] usb 5-1: USB disconnect, device number 62 [ 973.504213][ T77] bond0: (slave bond_slave_0): interface is now down [ 973.511984][ T77] bond0: (slave bond_slave_1): interface is now down [ 973.521441][ T77] bond0: now running without any active interface! [ 973.616124][T12239] netlink: 'syz.2.2195': attribute type 10 has an invalid length. [ 973.671489][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.728055][T12239] syz_tun: entered promiscuous mode [ 973.752218][T12239] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 973.828886][ T4896] bond0: (slave syz_tun): interface is now down [ 973.836608][ T4896] bond0: now running without any active interface! [ 975.442819][ T5840] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 975.549362][T10103] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 975.669172][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 975.712501][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.722970][ T5840] usb 3-1: config 0 has no interfaces? [ 975.737078][T10103] usb 5-1: device descriptor read/64, error -71 [ 975.757641][T12259] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 975.791802][ T5840] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 975.801905][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.810406][ T5840] usb 3-1: Product: syz [ 975.814744][ T5840] usb 3-1: Manufacturer: syz [ 975.819601][ T5840] usb 3-1: SerialNumber: syz [ 975.846183][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2201'. [ 975.885271][ T5840] usb 3-1: config 0 descriptor?? [ 976.021793][T10103] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 976.124915][ T5840] usb 3-1: USB disconnect, device number 51 [ 976.256496][T10103] usb 5-1: device descriptor read/64, error -71 [ 976.402299][T10103] usb usb5-port1: attempt power cycle [ 976.827606][T10103] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 977.021629][T10103] usb 5-1: device descriptor read/8, error -71 [ 977.334706][T10103] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 977.405591][T10103] usb 5-1: device descriptor read/8, error -71 [ 977.574383][T10103] usb usb5-port1: unable to enumerate USB device [ 979.039870][T10103] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 979.144361][ T5840] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 979.220243][T10103] usb 3-1: Using ep0 maxpacket: 32 [ 979.347731][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 979.370642][T10103] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 979.380247][T10103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.388778][T10103] usb 3-1: Product: syz [ 979.393217][T10103] usb 3-1: Manufacturer: syz [ 979.401285][T10103] usb 3-1: SerialNumber: syz [ 979.465303][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 979.477426][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 979.594805][ T5840] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 979.604579][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.613149][ T5840] usb 1-1: Product: syz [ 979.617752][ T5840] usb 1-1: Manufacturer: syz [ 979.624911][ T5840] usb 1-1: SerialNumber: syz [ 979.652734][T10103] usb 3-1: config 0 descriptor?? [ 979.703895][T10103] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 979.738566][ T5840] usb 1-1: config 0 descriptor?? [ 979.877325][ T5840] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 980.039943][ T5874] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 980.067616][ T5840] usb 1-1: USB disconnect, device number 38 [ 980.349852][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 980.480466][ T5874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.492491][ T5874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 980.652105][ T5874] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 980.668039][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.678635][ T5874] usb 5-1: Product: syz [ 980.683169][ T5874] usb 5-1: Manufacturer: syz [ 980.688050][ T5874] usb 5-1: SerialNumber: syz [ 981.177497][ T5874] usb 5-1: 0:2 : does not exist [ 981.319703][ T5874] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 981.591353][ T5874] usb 5-1: USB disconnect, device number 67 [ 981.653032][ T11] bond0: (slave bond_slave_0): interface is now down [ 981.664576][ T11] bond0: (slave bond_slave_1): interface is now down [ 981.675703][ T11] bond0: now running without any active interface! [ 981.758020][T12290] netlink: 'syz.6.2209': attribute type 10 has an invalid length. [ 981.917435][T12290] syz_tun: entered promiscuous mode [ 981.948604][T12290] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 981.960159][T11280] bond0: (slave syz_tun): interface is now down [ 981.976087][T11280] bond0: now running without any active interface! [ 982.075446][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.330883][T10103] gspca_stk1135: reg_w 0x2ff err -71 [ 982.337597][T10103] gspca_stk1135: serial bus timeout: status=0x00 [ 982.344297][T10103] gspca_stk1135: Sensor write failed [ 982.350053][T10103] gspca_stk1135: serial bus timeout: status=0x00 [ 982.356626][T10103] gspca_stk1135: Sensor write failed [ 982.365510][T10103] gspca_stk1135: serial bus timeout: status=0x00 [ 982.372288][T10103] gspca_stk1135: Sensor read failed [ 982.377799][T10103] gspca_stk1135: serial bus timeout: status=0x00 [ 982.384671][T10103] gspca_stk1135: Sensor read failed [ 982.390095][T10103] gspca_stk1135: Detected sensor type unknown (0x0) [ 982.400362][T10103] gspca_stk1135: serial bus timeout: status=0x00 [ 982.412519][T10103] gspca_stk1135: Sensor read failed [ 982.418064][T10103] gspca_stk1135: serial bus timeout: status=0x00 [ 982.429520][T10103] gspca_stk1135: Sensor read failed [ 982.435268][T10103] gspca_stk1135: serial bus timeout: status=0x00 [ 982.441854][T10103] gspca_stk1135: Sensor write failed [ 982.447629][T10103] gspca_stk1135: serial bus timeout: status=0x00 [ 982.454226][T10103] gspca_stk1135: Sensor write failed [ 982.463304][T10103] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 982.504843][T10103] usb 3-1: USB disconnect, device number 52 [ 983.122557][T10103] usb 4-1: USB disconnect, device number 41 [ 983.947053][T10103] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 984.614836][T10103] usb 7-1: Using ep0 maxpacket: 8 [ 984.852032][T10103] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.865929][T10103] usb 7-1: config 0 has no interfaces? [ 985.462482][T10103] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 985.479031][T10103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.488470][T10103] usb 7-1: Product: syz [ 985.493198][T10103] usb 7-1: Manufacturer: syz [ 985.498057][T10103] usb 7-1: SerialNumber: syz [ 985.644091][T12315] sch_tbf: burst 4393 is lower than device lo mtu (65550) ! [ 985.741890][T10103] usb 7-1: config 0 descriptor?? [ 986.251459][T10103] usb 7-1: USB disconnect, device number 6 [ 988.616401][T10103] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 988.706679][T12326] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2219'. [ 988.810111][T10103] usb 5-1: device descriptor read/64, error -71 [ 989.225916][T10103] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 989.418613][T10103] usb 5-1: device descriptor read/64, error -71 [ 989.579450][T10103] usb usb5-port1: attempt power cycle [ 990.024379][T10103] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 990.086079][T10103] usb 5-1: device descriptor read/8, error -71 [ 990.220631][ T5840] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 990.391456][T10103] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 990.417507][ T8] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 990.423330][ T5840] usb 7-1: Using ep0 maxpacket: 8 [ 990.439316][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 990.454739][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 990.488671][T10103] usb 5-1: device descriptor read/8, error -71 [ 990.523922][ T5840] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 990.534437][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.543055][ T5840] usb 7-1: Product: syz [ 990.547523][ T5840] usb 7-1: Manufacturer: syz [ 990.555670][ T5840] usb 7-1: SerialNumber: syz [ 990.578627][ T5840] usb 7-1: config 0 descriptor?? [ 990.608185][ T5840] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 990.655401][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 990.672454][T10103] usb usb5-port1: unable to enumerate USB device [ 990.678937][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.679084][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 990.740849][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 990.750517][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.759035][ T8] usb 3-1: Product: syz [ 990.763548][ T8] usb 3-1: Manufacturer: syz [ 990.768415][ T8] usb 3-1: SerialNumber: syz [ 990.900354][ T5840] usb 7-1: USB disconnect, device number 7 [ 991.134296][ T8] usb 3-1: 0:2 : does not exist [ 991.244110][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 991.298924][ T5081] Bluetooth: hci5: command 0x0406 tx timeout [ 991.484841][ T8] usb 3-1: USB disconnect, device number 53 [ 991.538990][T12338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.726842][T12338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.838628][T12340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.051084][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.484141][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 992.934127][ T8] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 993.192006][ T8] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 993.201788][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.288454][ T8] usb 5-1: config 0 descriptor?? [ 993.365650][ T8] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 993.447032][ T8] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 993.812105][T12357] program syz.0.2228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.027964][T12365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2230'. [ 999.517554][T10103] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 999.667547][T10103] usb 3-1: device descriptor read/64, error -71 [ 999.742729][ T5840] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 999.916063][ T5839] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 999.934846][ T5840] usb 7-1: Using ep0 maxpacket: 8 [ 999.949991][T10103] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 999.986248][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 999.998476][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1000.069605][ T5840] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1000.081424][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.089952][ T5840] usb 7-1: Product: syz [ 1000.094371][ T5840] usb 7-1: Manufacturer: syz [ 1000.099295][ T5840] usb 7-1: SerialNumber: syz [ 1000.123085][ T5840] usb 7-1: config 0 descriptor?? [ 1000.143757][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 1000.180798][T10103] usb 3-1: device descriptor read/64, error -71 [ 1000.188998][ T5839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.199881][ T5839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.231983][ T5840] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1000.287724][ T5839] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1000.297224][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.305701][ T5839] usb 4-1: Product: syz [ 1000.312245][ T5839] usb 4-1: Manufacturer: syz [ 1000.317051][ T5839] usb 4-1: SerialNumber: syz [ 1000.326460][T10103] usb usb3-port1: attempt power cycle [ 1000.410702][ T5840] usb 7-1: USB disconnect, device number 8 [ 1000.714919][T10103] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1000.742675][ T5839] usb 4-1: 0:2 : does not exist [ 1000.753180][T10103] usb 3-1: device descriptor read/8, error -71 [ 1000.837540][ T5839] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1001.036092][T10103] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1001.057699][ T5839] usb 4-1: USB disconnect, device number 42 [ 1001.107911][T10103] usb 3-1: device descriptor read/8, error -71 [ 1001.230027][T10103] usb usb3-port1: unable to enumerate USB device [ 1001.421301][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.412904][T12393] loop6: detected capacity change from 0 to 4096 [ 1002.640407][T12393] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1002.648974][T12393] NILFS (loop6): trying rollback from an earlier position [ 1002.830194][T12393] NILFS (loop6): recovery complete [ 1002.895653][T12400] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1003.138199][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 1003.138281][ T29] audit: type=1800 audit(1740573763.204:876): pid=12406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2238" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 1003.349874][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2241'. [ 1005.904195][ T5839] usb 5-1: USB disconnect, device number 72 [ 1006.948287][ T8] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1007.151666][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1007.206559][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1007.218859][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1007.308201][ T8] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1007.319010][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.327877][ T8] usb 5-1: Product: syz [ 1007.332436][ T8] usb 5-1: Manufacturer: syz [ 1007.337318][ T8] usb 5-1: SerialNumber: syz [ 1007.453101][ T8] usb 5-1: config 0 descriptor?? [ 1007.540065][ T8] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1007.755228][ T8] usb 5-1: USB disconnect, device number 73 [ 1009.524913][ T8] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1009.738638][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1009.795488][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.806330][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.902134][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1009.911791][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.920652][ T8] usb 5-1: Product: syz [ 1009.925079][ T8] usb 5-1: Manufacturer: syz [ 1009.930072][ T8] usb 5-1: SerialNumber: syz [ 1010.231478][ T8] usb 5-1: 0:2 : does not exist [ 1010.353838][ T8] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1010.593908][ T8] usb 5-1: USB disconnect, device number 74 [ 1010.829312][ T5874] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1010.905302][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.010593][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1011.017345][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1011.030700][ T5874] usb 7-1: device descriptor read/64, error -71 [ 1011.315890][ T5874] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1011.533702][ T5874] usb 7-1: device descriptor read/64, error -71 [ 1011.688604][ T5874] usb usb7-port1: attempt power cycle [ 1012.115264][ T5874] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1012.162477][ T5874] usb 7-1: device descriptor read/8, error -71 [ 1012.520867][ T5874] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1012.572324][ T5874] usb 7-1: device descriptor read/8, error -71 [ 1012.701463][ T5874] usb usb7-port1: unable to enumerate USB device [ 1013.406855][ T5839] IPVS: starting estimator thread 0... [ 1013.693745][T12464] IPVS: using max 240 ests per chain, 12000 per kthread [ 1014.213712][T12468] sctp: failed to load transform for md5: -2 [ 1014.242882][T12462] sctp: failed to load transform for md5: -2 [ 1015.000725][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 1015.682321][T10103] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1015.851423][T12492] netfs: Couldn't get user pages (rc=-14) [ 1015.918929][T10103] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1015.931560][T10103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.133877][T10103] usb 7-1: config 0 descriptor?? [ 1016.195004][T10103] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1016.260104][T10103] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1018.183471][ T5874] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1018.392095][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 1018.472328][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.483163][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1018.539552][ T5874] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1018.549267][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.557852][ T5874] usb 4-1: Product: syz [ 1018.562321][ T5874] usb 4-1: Manufacturer: syz [ 1018.567209][ T5874] usb 4-1: SerialNumber: syz [ 1018.891342][ T5874] usb 4-1: 0:2 : does not exist [ 1019.014129][ T5874] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1019.249897][ T5874] usb 4-1: USB disconnect, device number 43 [ 1019.719446][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.456213][ T5874] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1021.668469][ T5874] usb 5-1: device descriptor read/64, error -71 [ 1021.937222][ T5874] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1022.124657][ T5874] usb 5-1: device descriptor read/64, error -71 [ 1022.266230][ T5874] usb usb5-port1: attempt power cycle [ 1022.727563][ T5874] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1022.799469][ T5874] usb 5-1: device descriptor read/8, error -71 [ 1023.090448][ T5874] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1023.251636][ T5874] usb 5-1: device descriptor read/8, error -71 [ 1023.403122][ T5874] usb usb5-port1: unable to enumerate USB device [ 1023.989132][T12544] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1024.093729][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2273'. [ 1025.829599][ T5874] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1026.060617][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 1026.121500][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.132723][ T5874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1026.257834][ T5874] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.267469][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.279176][ T5874] usb 3-1: Product: syz [ 1026.283634][ T5874] usb 3-1: Manufacturer: syz [ 1026.288964][ T5874] usb 3-1: SerialNumber: syz [ 1026.664811][ T5874] usb 3-1: 0:2 : does not exist [ 1026.720583][ T5874] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1026.747657][T10103] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1026.971761][ T5874] usb 3-1: USB disconnect, device number 58 [ 1027.045115][T10103] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1027.117735][T10103] usb 4-1: config 0 has no interfaces? [ 1027.173376][T10103] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1027.185832][T10103] usb 4-1: New USB device strings: Mfr=136, Product=2, SerialNumber=3 [ 1027.194341][T10103] usb 4-1: Product: syz [ 1027.199940][T10103] usb 4-1: Manufacturer: syz [ 1027.204758][T10103] usb 4-1: SerialNumber: syz [ 1027.348693][T10103] usb 4-1: config 0 descriptor?? [ 1027.372483][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.679619][T10103] usb 4-1: USB disconnect, device number 44 [ 1029.315475][ T5839] usb 7-1: USB disconnect, device number 13 [ 1029.380125][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2281'. [ 1029.888573][T12562] infiniband syz1: set active [ 1029.896879][T12562] infiniband syz1: added syz_tun [ 1030.104425][T12562] RDS/IB: syz1: added [ 1030.108746][T12562] smc: adding ib device syz1 with port count 1 [ 1030.118483][T12562] smc: ib device syz1 port 1 has pnetid [ 1030.212785][ T5840] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1031.129567][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 1031.387229][ T5840] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1031.394536][ T5840] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1031.404073][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.549091][ T5874] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1031.566035][ T5840] usb 5-1: config 0 descriptor?? [ 1031.771281][ T5874] usb 4-1: device descriptor read/64, error -71 [ 1031.910015][T10103] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1032.123337][ T5874] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1032.234851][T10103] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.245749][T10103] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1032.255639][T10103] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1032.268483][T10103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.298598][ T5874] usb 4-1: device descriptor read/64, error -71 [ 1032.418508][T10103] usb 7-1: config 0 descriptor?? [ 1032.453154][ T5874] usb usb4-port1: attempt power cycle [ 1032.916388][ T5874] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1033.011207][ T5874] usb 4-1: device descriptor read/8, error -71 [ 1034.180061][ T5874] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1034.560814][ T5874] usb 4-1: device descriptor read/8, error -71 [ 1034.682032][ T5874] usb usb4-port1: unable to enumerate USB device [ 1034.896154][ T5840] usbhid 5-1:0.0: can't add hid device: -71 [ 1034.902976][ T5840] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1035.025774][ T5840] usb 5-1: USB disconnect, device number 79 [ 1035.162631][ T5874] usb 7-1: USB disconnect, device number 14 [ 1035.621212][ T5840] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1035.729605][T12587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.753281][ T5874] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1035.766134][ T5874] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1035.876575][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 1035.890042][T12587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.902227][ T13] wlan1: authenticated [ 1035.928000][ T13] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1035.954705][ T5840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.965364][ T5840] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1036.001313][ T13] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1036.005301][T12588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.010912][ T13] wlan1: associated [ 1036.095422][T12591] warning: `syz.6.2290' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1036.096101][ T5840] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1036.120281][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.128804][ T5840] usb 5-1: Product: syz [ 1036.133445][ T5840] usb 5-1: Manufacturer: syz [ 1036.138321][ T5840] usb 5-1: SerialNumber: syz [ 1036.325325][T10103] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1036.605515][T10103] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1036.632008][T10103] usb 4-1: config 0 has no interfaces? [ 1036.694074][T10103] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1036.706512][T10103] usb 4-1: New USB device strings: Mfr=136, Product=2, SerialNumber=3 [ 1036.716134][T10103] usb 4-1: Product: syz [ 1036.723876][T10103] usb 4-1: Manufacturer: syz [ 1036.728760][T10103] usb 4-1: SerialNumber: syz [ 1036.746827][ T5840] usb 5-1: 0:2 : does not exist [ 1036.811193][ T5840] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1036.845636][T10103] usb 4-1: config 0 descriptor?? [ 1036.987209][ T5840] usb 5-1: USB disconnect, device number 80 [ 1037.089027][T10103] usb 4-1: USB disconnect, device number 49 [ 1037.450493][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 1037.499605][ T6549] udevd[6549]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.055733][T10103] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1038.084029][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2294'. [ 1038.310746][T10103] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1038.320323][T10103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.426935][T10103] usb 3-1: config 0 descriptor?? [ 1038.501747][T10103] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1038.617401][T10103] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1039.571268][ T5874] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1039.765242][T10103] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1039.891205][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 1039.944513][ T5874] usb 4-1: no configurations [ 1039.949953][ T5874] usb 4-1: can't read configurations, error -22 [ 1040.033572][T10103] usb 7-1: Using ep0 maxpacket: 16 [ 1040.061958][T12609] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1040.106679][T10103] usb 7-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.117463][T10103] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1040.132155][T10103] usb 7-1: config 253 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1040.142804][T10103] usb 7-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1040.153386][T10103] usb 7-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1040.211616][ T5874] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1040.309630][T12610] bridge_slave_0: left allmulticast mode [ 1040.320119][T12610] bridge_slave_0: left promiscuous mode [ 1040.331376][T12610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.540461][T12610] bridge_slave_1: left allmulticast mode [ 1040.546437][T12610] bridge_slave_1: left promiscuous mode [ 1040.556979][T12610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.572843][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 1040.628243][ T5874] usb 4-1: no configurations [ 1040.634815][T10103] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1040.634983][T10103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1040.635120][T10103] usb 7-1: SerialNumber: syz [ 1040.652629][T12607] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1040.659717][ T5874] usb 4-1: can't read configurations, error -22 [ 1040.719171][T12607] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1040.853395][ T5874] usb usb4-port1: attempt power cycle [ 1040.964404][ T5081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1040.990998][ T5081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1041.004385][ T5081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1041.022793][T12610] bond0: (slave bond_slave_0): Releasing backup interface [ 1041.045338][ T5081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1041.063605][ T5081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1041.077906][ T5081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.091964][T10103] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -22 [ 1041.118959][T10103] usb 7-1: USB disconnect, device number 15 [ 1041.190796][T12610] bond0: (slave bond_slave_1): Releasing backup interface [ 1041.405154][T12610] team0: Port device team_slave_0 removed [ 1041.451308][ T5874] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1041.536700][T12610] team0: Port device team_slave_1 removed [ 1041.548318][T12610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.567595][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 1041.575572][ T5874] usb 4-1: no configurations [ 1041.580441][ T5874] usb 4-1: can't read configurations, error -22 [ 1041.619091][T12610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.627040][T12610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.812546][ T5874] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1041.892394][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 1041.920181][ T5874] usb 4-1: no configurations [ 1041.925301][ T5874] usb 4-1: can't read configurations, error -22 [ 1042.526010][ T5874] usb usb4-port1: unable to enumerate USB device [ 1043.389268][ T5081] Bluetooth: hci0: command tx timeout [ 1043.578643][T10103] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1043.599301][T12611] chnl_net:caif_netlink_parms(): no params data found [ 1043.883315][T10103] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.897326][T10103] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1043.906893][T10103] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1043.916600][T10103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.207211][T10103] usb 7-1: config 0 descriptor?? [ 1045.605191][ T5081] Bluetooth: hci0: command tx timeout [ 1045.765199][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1045.979043][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1046.024595][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.038579][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.154600][T12611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.162780][T12611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.170592][T12611] bridge_slave_0: entered allmulticast mode [ 1046.183109][T12611] bridge_slave_0: entered promiscuous mode [ 1046.253413][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.266418][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.274091][T12611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.274866][ T10] usb 5-1: Product: syz [ 1046.286404][ T10] usb 5-1: Manufacturer: syz [ 1046.286644][T12611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.294927][ T10] usb 5-1: SerialNumber: syz [ 1046.299100][T12611] bridge_slave_1: entered allmulticast mode [ 1046.315861][T12611] bridge_slave_1: entered promiscuous mode [ 1046.538183][T10103] usb 7-1: USB disconnect, device number 16 [ 1046.796771][T12485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.877726][T12611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.019440][ T10] usb 5-1: 0:2 : does not exist [ 1047.031873][T12485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.132998][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1047.194749][T12611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.228396][T10103] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1047.362520][T12485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.430938][ T10] usb 5-1: USB disconnect, device number 81 [ 1047.553072][T10103] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1047.624353][T10103] usb 7-1: config 0 has no interfaces? [ 1047.677931][T10103] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1047.690906][T10103] usb 7-1: New USB device strings: Mfr=136, Product=2, SerialNumber=3 [ 1047.699445][T10103] usb 7-1: Product: syz [ 1047.704524][T10103] usb 7-1: Manufacturer: syz [ 1047.709405][T10103] usb 7-1: SerialNumber: syz [ 1047.806122][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.834292][ T5081] Bluetooth: hci0: command tx timeout [ 1047.859650][T10103] usb 7-1: config 0 descriptor?? [ 1048.016940][T12485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.124810][T10103] usb 7-1: USB disconnect, device number 17 [ 1048.190827][T12611] team0: Port device team_slave_0 added [ 1048.229656][T12611] team0: Port device team_slave_1 added [ 1048.679980][T12635] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2307'. [ 1048.712375][T12611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.722821][T12611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.754968][T12611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.060486][T12611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.067736][T12611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.101218][T12611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.383151][T12485] bridge_slave_1: left allmulticast mode [ 1049.389463][T12485] bridge_slave_1: left promiscuous mode [ 1049.396226][T12485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.465282][T12485] bridge_slave_0: left allmulticast mode [ 1049.471239][T12485] bridge_slave_0: left promiscuous mode [ 1049.481897][T12485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.084494][ T5081] Bluetooth: hci0: command tx timeout [ 1050.351479][T11527] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1050.377842][T12485] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1050.554783][T11527] usb 5-1: Using ep0 maxpacket: 16 [ 1050.578833][T11527] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.589810][T11527] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1050.604843][T11527] usb 5-1: config 253 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1050.619520][T11527] usb 5-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1050.634460][T11527] usb 5-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1050.856657][T12485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.964060][T11527] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1050.973746][T11527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1050.985453][T11527] usb 5-1: SerialNumber: syz [ 1051.083734][T12485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.095946][T12639] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1051.105161][T12639] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1051.165923][T12485] bond0 (unregistering): Released all slaves [ 1051.186970][T12485] bond1 (unregistering): Released all slaves [ 1051.581334][T11527] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -22 [ 1051.643865][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1051.737915][T11527] usb 5-1: USB disconnect, device number 82 [ 1051.854554][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1051.886159][ T10] usb 7-1: no configurations [ 1051.894338][ T10] usb 7-1: can't read configurations, error -22 [ 1051.989417][T12485] tipc: Left network mode [ 1052.094280][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1052.292323][T12611] hsr_slave_0: entered promiscuous mode [ 1052.301726][T12611] hsr_slave_1: entered promiscuous mode [ 1052.375125][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1052.387986][ T10] usb 7-1: no configurations [ 1052.393249][ T10] usb 7-1: can't read configurations, error -22 [ 1052.482996][ T10] usb usb7-port1: attempt power cycle [ 1052.927767][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1053.065274][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1053.114165][ T10] usb 7-1: no configurations [ 1053.119062][ T10] usb 7-1: can't read configurations, error -22 [ 1053.401703][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1053.469555][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1053.490059][ T10] usb 7-1: no configurations [ 1053.498439][ T10] usb 7-1: can't read configurations, error -22 [ 1053.593607][ T10] usb usb7-port1: unable to enumerate USB device [ 1053.661578][T12485] hsr_slave_0: left promiscuous mode [ 1053.698396][ T10] usb 3-1: USB disconnect, device number 59 [ 1053.744994][T12485] hsr_slave_1: left promiscuous mode [ 1053.753530][T12485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.763567][T12485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.899798][T12485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.907830][T12485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.930907][T12485] veth1_macvtap: left promiscuous mode [ 1053.936978][T12485] veth0_macvtap: left promiscuous mode [ 1053.942964][T12485] veth1_vlan: left promiscuous mode [ 1053.951797][T12485] veth0_vlan: left promiscuous mode [ 1055.582301][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1055.609820][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1055.658808][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1055.715577][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1055.729807][T11527] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1055.793525][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1055.825484][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.829790][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1055.839133][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.874354][T12485] team0 (unregistering): Port device team_slave_1 removed [ 1055.874458][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1055.914536][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1055.955608][T12485] team0 (unregistering): Port device team_slave_0 removed [ 1056.031690][T11527] usb 7-1: Using ep0 maxpacket: 8 [ 1056.051231][T11527] usb 7-1: no configurations [ 1056.056401][T11527] usb 7-1: can't read configurations, error -22 [ 1056.184833][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1056.202317][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.213223][ T10] usb 5-1: Product: syz [ 1056.217660][ T10] usb 5-1: Manufacturer: syz [ 1056.225817][ T10] usb 5-1: SerialNumber: syz [ 1056.320205][T11527] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1056.741073][T11527] usb 7-1: Using ep0 maxpacket: 8 [ 1056.800523][T11527] usb 7-1: no configurations [ 1056.805432][T11527] usb 7-1: can't read configurations, error -22 [ 1056.889467][ T10] usb 5-1: 0:2 : does not exist [ 1056.897304][T11527] usb usb7-port1: attempt power cycle [ 1057.048248][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1057.080295][T12668] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2318'. [ 1057.294747][T11527] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1057.356759][T11527] usb 7-1: Using ep0 maxpacket: 8 [ 1057.375320][T11527] usb 7-1: no configurations [ 1057.380352][T11527] usb 7-1: can't read configurations, error -22 [ 1057.474504][ T10] usb 5-1: USB disconnect, device number 83 [ 1057.645938][T11527] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1057.710865][T11527] usb 7-1: Using ep0 maxpacket: 8 [ 1057.720292][T11527] usb 7-1: no configurations [ 1057.728853][T11527] usb 7-1: can't read configurations, error -22 [ 1057.749765][T11527] usb usb7-port1: unable to enumerate USB device [ 1058.209044][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.349229][ T5792] Bluetooth: hci3: command tx timeout [ 1058.883814][T12611] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1059.091928][T12611] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1059.229167][T12611] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1059.378830][T12611] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1060.572725][ T5792] Bluetooth: hci3: command tx timeout [ 1060.634471][ T5786] bond0: (slave syz_tun): Releasing backup interface [ 1060.681775][ T8] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1060.871086][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1060.922174][ T4896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.944137][ T8] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1060.959463][ T8] usb 5-1: config 253 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1060.970032][ T8] usb 5-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1060.980507][ T8] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1060.994002][ T8] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1061.150121][ T5840] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1061.167843][ T4896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.194836][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1061.204500][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1061.216844][ T8] usb 5-1: SerialNumber: syz [ 1061.303670][T12688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1061.339602][ T5840] usb 7-1: Using ep0 maxpacket: 8 [ 1061.361976][T12688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1061.466441][ T5840] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3 [ 1061.475874][T12662] chnl_net:caif_netlink_parms(): no params data found [ 1061.486530][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.494963][ T5840] usb 7-1: Product: syz [ 1061.499401][ T5840] usb 7-1: Manufacturer: syz [ 1061.504399][ T5840] usb 7-1: SerialNumber: syz [ 1061.548692][ T4896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.581291][ T5840] usb 7-1: config 0 descriptor?? [ 1061.808486][ T8] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -22 [ 1061.874143][ T4896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.915721][ T8] usb 5-1: USB disconnect, device number 84 [ 1062.194039][ T5840] usb 7-1: USB disconnect, device number 26 [ 1062.462270][T12611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.689506][ T6549] udevd[6549]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.796627][ T5792] Bluetooth: hci3: command tx timeout [ 1062.919063][T12611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.014614][ T4896] bridge_slave_1: left allmulticast mode [ 1063.020875][ T4896] bridge_slave_1: left promiscuous mode [ 1063.027618][ T4896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.224405][ T4896] bridge_slave_0: left allmulticast mode [ 1063.230466][ T4896] bridge_slave_0: left promiscuous mode [ 1063.237562][ T4896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.682879][ T5840] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1064.116669][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 1064.144398][ T5840] usb 4-1: no configurations [ 1064.149307][ T5840] usb 4-1: can't read configurations, error -22 [ 1064.201140][ T4896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.285985][ T4896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.325521][ T5840] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1064.351402][ T4896] bond0 (unregistering): Released all slaves [ 1064.477188][T12485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.485073][T12485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.526542][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 1064.557435][ T5840] usb 4-1: no configurations [ 1064.563800][ T5840] usb 4-1: can't read configurations, error -22 [ 1064.660658][ T5840] usb usb4-port1: attempt power cycle [ 1064.675627][T12485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.683629][T12485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.861534][ T4896] tipc: Left network mode [ 1065.023768][ T5792] Bluetooth: hci3: command tx timeout [ 1065.052211][ T5840] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1065.135567][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 1065.159283][ T5840] usb 4-1: no configurations [ 1065.164198][ T5840] usb 4-1: can't read configurations, error -22 [ 1065.376491][ T5840] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1065.441406][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 1065.463259][ T5840] usb 4-1: no configurations [ 1065.471553][ T5840] usb 4-1: can't read configurations, error -22 [ 1065.498887][ T5840] usb usb4-port1: unable to enumerate USB device [ 1066.392437][ T4896] hsr_slave_0: left promiscuous mode [ 1066.446270][ T4896] hsr_slave_1: left promiscuous mode [ 1066.460293][ T4896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.529263][ T4896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.537745][ T4896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.647789][ T4896] veth1_macvtap: left promiscuous mode [ 1066.653679][ T4896] veth0_macvtap: left promiscuous mode [ 1066.663413][ T4896] veth1_vlan: left promiscuous mode [ 1066.669239][ T4896] veth0_vlan: left promiscuous mode [ 1068.383231][ T4896] team0 (unregistering): Port device team_slave_1 removed [ 1068.412889][ T5792] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 1068.425586][ T4896] team0 (unregistering): Port device team_slave_0 removed [ 1068.431579][T11527] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1068.642521][T11527] usb 4-1: Using ep0 maxpacket: 8 [ 1068.719997][T11527] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3 [ 1068.729778][T11527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.738188][T11527] usb 4-1: Product: syz [ 1068.742821][T11527] usb 4-1: Manufacturer: syz [ 1068.747691][T11527] usb 4-1: SerialNumber: syz [ 1068.956199][T11527] usb 4-1: config 0 descriptor?? [ 1069.102782][T12731] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1069.215956][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.228899][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.237004][T12662] bridge_slave_0: entered allmulticast mode [ 1069.246561][T12662] bridge_slave_0: entered promiscuous mode [ 1069.289210][T11527] usb 4-1: USB disconnect, device number 58 [ 1069.423907][ T5839] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1069.468652][T12662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.477110][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.485005][T12662] bridge_slave_1: entered allmulticast mode [ 1069.494634][T12662] bridge_slave_1: entered promiscuous mode [ 1069.693443][ T6549] udevd[6549]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.695639][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 1069.772486][ T5839] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1069.784120][ T5839] usb 7-1: config 253 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1069.797851][ T5839] usb 7-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1069.808394][ T5839] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1069.818819][ T5839] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1070.127133][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.146889][ T5839] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.161056][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1070.169375][ T5839] usb 7-1: SerialNumber: syz [ 1070.301897][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.132165][T12744] loop4: detected capacity change from 0 to 32768 [ 1071.158186][T12662] team0: Port device team_slave_0 added [ 1071.217514][T12737] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1071.252328][T12737] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1071.306419][T12662] team0: Port device team_slave_1 added [ 1071.597593][T12744] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=ro,errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 1071.617760][T12744] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 1071.633074][T12744] bcachefs (loop4): Version upgrade from 1.13: inode_has_child_snapshots to 1.7: mi_btree_bitmap incomplete [ 1071.633074][T12744] Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.20: directory_size [ 1071.633074][T12744] running recovery passes: check_allocations,check_extents_to_backpointers,check_dirents [ 1071.675879][ T5839] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -22 [ 1071.699242][ T5839] usb 7-1: USB disconnect, device number 27 [ 1071.784457][T12744] bcachefs (loop4): error validating btree node on loop4 at btree extents level 0/0 [ 1071.784578][T12744] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 1071.784706][T12744] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 1071.824046][T12744] bcachefs (loop4): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 1071.838441][T12744] bcachefs (loop4): flagging btree extents lost data [ 1071.850927][T12744] bcachefs (loop4): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 1071.863446][T12744] bcachefs (loop4): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 1071.880198][T12744] bcachefs (loop4): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 1071.940001][T12744] error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 1072.022764][T12744] bcachefs (loop4): error validating btree node at btree dirents level 0/0 [ 1072.022880][T12744] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 1072.023002][T12744] node offset 16/24 bset u64s 36 bset byte offset 288: invalid bkey format 5, fixing [ 1072.065591][T12744] bcachefs (loop4): btree_node_read_work: rewriting btree node at due to error [ 1072.065591][T12744] btree=dirents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 1072.136258][T12744] bcachefs (loop4): error validating btree node at btree alloc level 0/0 [ 1072.136376][T12744] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 1072.136509][T12744] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 1072.184376][T12744] bcachefs (loop4): btree_node_read_work: rewriting btree node at due to error [ 1072.184376][T12744] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 1072.325702][T12662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.336583][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.366555][T12662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.384841][T12744] bcachefs (loop4): error validating btree node on loop4 at btree backpointers level 0/0 [ 1072.384958][T12744] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key 1095216660480:0:0 durability: 1 ptr: 0:37:0 gen 0 [ 1072.385079][T12744] node offset 0/24: incorrect min_key: got POS_MIN should be 1095216660480:0:0 [ 1072.430564][T12744] bcachefs (loop4): flagging btree backpointers lost data [ 1072.438388][T12744] bcachefs (loop4): running explicit recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 1072.484253][T12744] error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 1072.579348][T12744] bcachefs (loop4): scan_for_btree_nodes... [ 1072.641803][T12662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.655674][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.685931][T12662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.700479][T12744] bcachefs (loop4): btree node scan found 3 nodes after overwrites [ 1072.709054][T12744] done [ 1072.756117][T12611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.779244][T12744] bcachefs (loop4): check_topology... [ 1072.792624][T12744] bcachefs (loop4): btree root extents unreadable, must recover from scan [ 1072.808971][T12744] bcachefs (loop4): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 1072.824039][T12744] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 1072.916131][T12744] done [ 1072.933206][T12744] bcachefs (loop4): accounting_read... done [ 1072.943338][T12744] bcachefs (loop4): alloc_read... done [ 1072.949390][T12744] bcachefs (loop4): stripes_read... done [ 1072.960077][T12744] bcachefs (loop4): snapshots_read... done [ 1072.968166][T12744] bcachefs (loop4): check_allocations... [ 1072.975780][T12744] btree ptr not marked in member info btree allocated bitmap [ 1072.975904][T12744] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 1073.064207][T12744] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 1073.064329][T12744] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 1073.107079][T12744] bucket 0:0 gen 0 different types of data in same bucket: sb, user [ 1073.107199][T12744] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 0 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:0:0 gen 0 cached, fixing [ 1073.149134][T12744] btree ptr not marked in member info btree allocated bitmap [ 1073.149247][T12744] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 1073.184619][T12744] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 1073.184728][T12744] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 1073.215572][T12744] btree ptr not marked in member info btree allocated bitmap [ 1073.215686][T12744] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 1073.248009][T12744] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 1073.248117][T12744] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 1073.284814][T12744] btree ptr not marked in member info btree allocated bitmap [ 1073.284922][T12744] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 1073.317993][T12744] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 1073.318105][T12744] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 1073.347736][T12744] btree ptr not marked in member info btree allocated bitmap [ 1073.347843][T12744] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 1073.437663][T12744] btree ptr not marked in member info btree allocated bitmap [ 1073.437773][T12744] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 1073.470746][T12744] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 1073.470852][T12744] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 1073.513713][T12744] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.522752][T12744] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.534975][T12744] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.546958][T12744] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.558251][T12744] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.567421][T12744] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.583661][T12744] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.596177][T12744] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.609944][T12744] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.621935][T12744] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.633655][T12744] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.642699][T12744] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.657151][T12744] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.666063][T12744] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.677368][T12744] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.689625][T12744] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 1073.700527][T12744] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 1073.711759][T12744] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.726936][T12744] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 1073.736557][T12744] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.749256][T12744] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 1073.761840][T12744] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.773425][T12744] bucket 0:12 gen 0 has wrong data_type: got free, should be journal, fixing [ 1073.782944][T12744] bucket 0:12 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.798180][T12744] bucket 0:13 gen 0 has wrong data_type: got free, should be journal, fixing [ 1073.807670][T12744] bucket 0:13 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.821618][T12744] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 1073.837252][T12744] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.848895][T12744] bucket 0:15 gen 0 has wrong data_type: got free, should be journal, fixing [ 1073.858394][T12744] bucket 0:15 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.861551][T11527] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1073.876982][T12744] bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.886195][T12744] bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.900965][T12744] bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.910144][T12744] bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.929137][T12744] bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.941932][T12744] bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.953379][T12744] bucket 0:19 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.962423][T12744] bucket 0:19 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.976758][T12744] bucket 0:20 gen 0 has wrong data_type: got free, should be sb, fixing [ 1073.985883][T12744] bucket 0:20 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1073.997144][T12744] bucket 0:21 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.010221][T12744] bucket 0:21 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.021740][T12744] bucket 0:22 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.030647][T12744] bucket 0:22 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.047598][T12744] bucket 0:23 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.056623][T12744] bucket 0:23 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.070881][T12744] bucket 0:24 gen 0 has wrong data_type: got free, should be journal, fixing [ 1074.080439][T12744] bucket 0:24 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.093473][T12744] bucket 0:26 gen 0 has wrong data_type: got free, should be btree, fixing [ 1074.106021][T12744] bucket 0:26 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.117643][T12744] bucket 0:29 gen 0 has wrong data_type: got free, should be btree, fixing [ 1074.126796][T12744] bucket 0:29 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.142120][T12744] bucket 0:32 gen 0 has wrong data_type: got sb, should be btree, fixing [ 1074.155055][T12744] bucket 0:34 gen 0 data type user has wrong dirty_sectors: got 16, should be 8, fixing [ 1074.165931][T12744] bucket 0:35 gen 0 has wrong data_type: got free, should be btree, fixing [ 1074.178363][T12744] bucket 0:35 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.197549][T12744] bucket 0:37 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 1074.210674][T12744] bucket 0:37 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 1074.222516][T12744] bucket 0:38 gen 0 has wrong data_type: got free, should be btree, fixing [ 1074.232031][T12744] bucket 0:38 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.246965][T12744] bucket 0:41 gen 0 has wrong data_type: got free, should be btree, fixing [ 1074.259806][T12744] bucket 0:41 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.281883][T12744] bucket 0:120 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.291146][T12744] bucket 0:120 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.302560][T12744] bucket 0:121 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.314849][T12744] bucket 0:121 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.326188][T12744] bucket 0:122 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.335251][T12744] bucket 0:122 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.350726][T12744] bucket 0:123 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.359943][T12744] bucket 0:123 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.376533][T12744] bucket 0:124 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.388937][T12744] bucket 0:124 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.400208][T12744] bucket 0:125 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.409765][T12744] bucket 0:125 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.424217][T12744] bucket 0:126 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.433351][T12744] bucket 0:126 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.444630][T12744] bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing [ 1074.457109][T12744] bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 1074.473922][T11527] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1074.479987][T12744] done [ 1074.498784][T12744] bcachefs (loop4): going read-write [ 1074.509481][T12744] bcachefs (loop4): journal_replay... [ 1074.547550][T12744] ===================================================== [ 1074.563649][T12744] BUG: KMSAN: uninit-value in bch2_btree_node_get+0x5ed/0x1970 [ 1074.571698][T12744] bch2_btree_node_get+0x5ed/0x1970 [ 1074.577419][T12744] bch2_btree_path_traverse_one+0x283d/0x4790 [ 1074.586738][T12744] bch2_btree_iter_traverse+0xbb8/0x1110 [ 1074.592678][T12744] bch2_journal_replay_key+0x28a/0x13f0 [ 1074.604519][T12744] bch2_journal_replay+0x301d/0x4e20 [ 1074.610214][T12744] bch2_run_recovery_passes+0x5a2/0x1160 [ 1074.616097][T12744] bch2_fs_recovery+0x489c/0x6230 [ 1074.621645][T12744] bch2_fs_start+0x7ca/0xc20 [ 1074.626500][T12744] bch2_fs_get_tree+0x1564/0x24e0 [ 1074.634902][T12744] vfs_get_tree+0xb1/0x5a0 [ 1074.639597][T12744] do_new_mount+0x71f/0x15e0 [ 1074.644573][T12744] path_mount+0x742/0x1f10 [ 1074.649235][T12744] __se_sys_mount+0x71f/0x800 [ 1074.656261][T12744] __x64_sys_mount+0xe4/0x150 [ 1074.661227][T12744] x64_sys_call+0x39bf/0x3c30 [ 1074.666559][T11527] usb 7-1: config 0 has no interfaces? [ 1074.669234][T12744] do_syscall_64+0xcd/0x1e0 [ 1074.679577][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.687367][T12744] [ 1074.692813][T12744] Uninit was stored to memory at: [ 1074.701395][T12744] btree_node_iter_and_journal_peek+0x889/0x2560 [ 1074.708130][T12744] bch2_btree_path_traverse_one+0x2131/0x4790 [ 1074.714515][T12744] bch2_btree_iter_traverse+0xbb8/0x1110 [ 1074.720519][T12744] bch2_journal_replay_key+0x28a/0x13f0 [ 1074.729634][T12744] bch2_journal_replay+0x301d/0x4e20 [ 1074.735225][T12744] bch2_run_recovery_passes+0x5a2/0x1160 [ 1074.741220][T12744] bch2_fs_recovery+0x489c/0x6230 [ 1074.746537][T12744] bch2_fs_start+0x7ca/0xc20 [ 1074.751596][T12744] bch2_fs_get_tree+0x1564/0x24e0 [ 1074.756896][T12744] vfs_get_tree+0xb1/0x5a0 [ 1074.764672][T12744] do_new_mount+0x71f/0x15e0 [ 1074.770417][T12744] path_mount+0x742/0x1f10 [ 1074.775092][T12744] __se_sys_mount+0x71f/0x800 [ 1074.780613][T12744] __x64_sys_mount+0xe4/0x150 [ 1074.785547][T12744] x64_sys_call+0x39bf/0x3c30 [ 1074.793885][T12744] do_syscall_64+0xcd/0x1e0 [ 1074.798673][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.807160][T12744] [ 1074.809619][T12744] Uninit was created at: [ 1074.814998][T12744] ___kmalloc_large_node+0x22c/0x370 [ 1074.820584][T12744] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 1074.825198][T12662] hsr_slave_0: entered promiscuous mode [ 1074.829811][T12744] __kmalloc_node_noprof+0xc96/0x1250 [ 1074.837366][T12662] hsr_slave_1: entered promiscuous mode [ 1074.837722][T12744] __kvmalloc_node_noprof+0xc0/0x2d0 [ 1074.846687][T12662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1074.848587][T12744] bch2_btree_node_mem_alloc+0xa72/0x2ee0 [ 1074.856440][T12662] Cannot create hsr debugfs directory [ 1074.871080][T12744] bch2_btree_reserve_get+0x37f/0x2290 [ 1074.877001][T12744] bch2_btree_update_start+0x1af9/0x2d60 [ 1074.882891][T12744] bch2_btree_split_leaf+0x120/0xc90 [ 1074.883138][T11527] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1074.888441][T12744] bch2_trans_commit_error+0x1c0/0x1d60 [ 1074.888629][T12744] __bch2_trans_commit+0x1d5f/0xd310 [ 1074.898013][T11527] usb 7-1: New USB device strings: Mfr=136, Product=2, SerialNumber=3 [ 1074.898155][T11527] usb 7-1: Product: syz [ 1074.898270][T11527] usb 7-1: Manufacturer: syz [ 1074.898382][T11527] usb 7-1: SerialNumber: syz [ 1074.940326][T12744] bch2_journal_replay+0x3125/0x4e20 [ 1074.945912][T12744] bch2_run_recovery_passes+0x5a2/0x1160 [ 1074.951885][T12744] bch2_fs_recovery+0x489c/0x6230 [ 1074.957215][T12744] bch2_fs_start+0x7ca/0xc20 [ 1074.965236][T12744] bch2_fs_get_tree+0x1564/0x24e0 [ 1074.970548][T12744] vfs_get_tree+0xb1/0x5a0 [ 1074.975346][T12744] do_new_mount+0x71f/0x15e0 [ 1074.980197][T12744] path_mount+0x742/0x1f10 [ 1074.984964][T12744] __se_sys_mount+0x71f/0x800 [ 1074.989906][T12744] __x64_sys_mount+0xe4/0x150 [ 1074.997965][T12744] x64_sys_call+0x39bf/0x3c30 [ 1075.002887][T12744] do_syscall_64+0xcd/0x1e0 [ 1075.007867][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.014052][T12744] [ 1075.016598][T12744] CPU: 1 UID: 0 PID: 12744 Comm: syz.4.2336 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 1075.032903][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1075.044001][T12744] ===================================================== [ 1075.051291][T12744] Disabling lock debugging due to kernel taint [ 1075.060734][T12744] Kernel panic - not syncing: kmsan.panic set ... [ 1075.067350][T12744] CPU: 1 UID: 0 PID: 12744 Comm: syz.4.2336 Tainted: G B 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 1075.079955][T12744] Tainted: [B]=BAD_PAGE [ 1075.084278][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1075.094535][T12744] Call Trace: [ 1075.097979][T12744] [ 1075.101069][T12744] dump_stack_lvl+0x216/0x2d0 [ 1075.106000][T12744] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1075.112117][T12744] dump_stack+0x1e/0x24 [ 1075.116499][T12744] panic+0x4e2/0xcf0 [ 1075.120672][T12744] ? kmsan_get_metadata+0x51/0x1c0 [ 1075.126169][T12744] kmsan_report+0x2c7/0x2d0 [ 1075.130954][T12744] ? __msan_warning+0x95/0x120 [ 1075.135973][T12744] ? bch2_btree_node_get+0x5ed/0x1970 [ 1075.141641][T12744] ? bch2_btree_path_traverse_one+0x283d/0x4790 [ 1075.148178][T12744] ? bch2_btree_iter_traverse+0xbb8/0x1110 [ 1075.154298][T12744] ? bch2_journal_replay_key+0x28a/0x13f0 [ 1075.160413][T12744] ? bch2_journal_replay+0x301d/0x4e20 [ 1075.166176][T12744] ? bch2_run_recovery_passes+0x5a2/0x1160 [ 1075.172245][T12744] ? bch2_fs_recovery+0x489c/0x6230 [ 1075.177747][T12744] ? bch2_fs_start+0x7ca/0xc20 [ 1075.182788][T12744] ? bch2_fs_get_tree+0x1564/0x24e0 [ 1075.188280][T12744] ? vfs_get_tree+0xb1/0x5a0 [ 1075.193127][T12744] ? do_new_mount+0x71f/0x15e0 [ 1075.198158][T12744] ? path_mount+0x742/0x1f10 [ 1075.203006][T12744] ? __se_sys_mount+0x71f/0x800 [ 1075.208134][T12744] ? __x64_sys_mount+0xe4/0x150 [ 1075.213227][T12744] ? x64_sys_call+0x39bf/0x3c30 [ 1075.218304][T12744] ? do_syscall_64+0xcd/0x1e0 [ 1075.223203][T12744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.229550][T12744] ? bch2_btree_and_journal_iter_exit+0x14f/0x240 [ 1075.236210][T12744] ? btree_node_iter_and_journal_peek+0x2417/0x2560 [ 1075.243048][T12744] ? kmsan_get_metadata+0x13e/0x1c0 [ 1075.248493][T12744] ? kmsan_get_metadata+0x13e/0x1c0 [ 1075.253930][T12744] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1075.259990][T12744] __msan_warning+0x95/0x120 [ 1075.264805][T12744] bch2_btree_node_get+0x5ed/0x1970 [ 1075.270264][T12744] ? bch2_journal_replay_key+0x28a/0x13f0 [ 1075.276256][T12744] ? kmsan_get_metadata+0x50/0x1c0 [ 1075.281619][T12744] bch2_btree_path_traverse_one+0x283d/0x4790 [ 1075.287967][T12744] ? kmsan_get_metadata+0x13e/0x1c0 [ 1075.293413][T12744] ? bch2_journal_replay_key+0x28a/0x13f0 [ 1075.299444][T12744] ? bch2_journal_replay_key+0x28a/0x13f0 [ 1075.305428][T12744] bch2_btree_iter_traverse+0xbb8/0x1110 [ 1075.311305][T12744] ? bch2_journal_replay_key+0x26d/0x13f0 [ 1075.317327][T12744] bch2_journal_replay_key+0x28a/0x13f0 [ 1075.323153][T12744] ? bch2_journal_replay_key+0x26d/0x13f0 [ 1075.329162][T12744] bch2_journal_replay+0x301d/0x4e20 [ 1075.334712][T12744] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1075.340777][T12744] ? vprintk_emit+0xd00/0xea0 [ 1075.345695][T12744] ? stack_depot_save_flags+0x2c/0x750 [ 1075.351409][T12744] ? kmsan_get_metadata+0x13e/0x1c0 [ 1075.356910][T12744] ? vprintk+0x35/0x40 [ 1075.361198][T12744] ? kmsan_get_metadata+0x13e/0x1c0 [ 1075.366646][T12744] ? __pfx_bch2_journal_replay+0x10/0x10 [ 1075.372553][T12744] bch2_run_recovery_passes+0x5a2/0x1160 [ 1075.378431][T12744] bch2_fs_recovery+0x489c/0x6230 [ 1075.383732][T12744] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1075.390310][T12744] ? __closure_wake_up+0x16a/0x180 [ 1075.395657][T12744] bch2_fs_start+0x7ca/0xc20 [ 1075.400493][T12744] bch2_fs_get_tree+0x1564/0x24e0 [ 1075.405831][T12744] vfs_get_tree+0xb1/0x5a0 [ 1075.410487][T12744] ? mount_capable+0x97/0x120 [ 1075.415399][T12744] do_new_mount+0x71f/0x15e0 [ 1075.420242][T12744] ? kmsan_get_metadata+0x13e/0x1c0 [ 1075.425710][T12744] path_mount+0x742/0x1f10 [ 1075.430350][T12744] ? user_path_at+0x374/0x3e0 [ 1075.435258][T12744] __se_sys_mount+0x71f/0x800 [ 1075.440210][T12744] __x64_sys_mount+0xe4/0x150 [ 1075.445157][T12744] x64_sys_call+0x39bf/0x3c30 [ 1075.450078][T12744] do_syscall_64+0xcd/0x1e0 [ 1075.454855][T12744] ? clear_bhb_loop+0x25/0x80 [ 1075.459785][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.465941][T12744] RIP: 0033:0x7fc7a278e90a [ 1075.470527][T12744] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.490378][T12744] RSP: 002b:00007fc7a361ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1075.499012][T12744] RAX: ffffffffffffffda RBX: 00007fc7a361eef0 RCX: 00007fc7a278e90a [ 1075.507160][T12744] RDX: 00004000000000c0 RSI: 0000400000000040 RDI: 00007fc7a361eeb0 [ 1075.515345][T12744] RBP: 00004000000000c0 R08: 00007fc7a361eef0 R09: 0000000000800001 [ 1075.523553][T12744] R10: 0000000000800001 R11: 0000000000000246 R12: 0000400000000040 [ 1075.531708][T12744] R13: 00007fc7a361eeb0 R14: 0000000000005969 R15: 0000400000005bc0 [ 1075.539889][T12744] [ 1075.543397][T12744] Kernel Offset: disabled [ 1075.547863][T12744] Rebooting in 86400 seconds..