last executing test programs: 33.46788421s ago: executing program 3 (id=1902): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 29.265030968s ago: executing program 0 (id=1906): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a2f1a9d73d51cfdf361e93754d4bfc135f155a79fd5671662faa9d2d49f1376e9e615927c3"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) 21.778676632s ago: executing program 3 (id=1908): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a2f1a9d73d51cfdf361e93754d4bfc135f155a79fd5671662faa9d2d49f1376e9e615927c3"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r5, 0x0, 0x0) 21.757111167s ago: executing program 2 (id=1911): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 21.756791178s ago: executing program 0 (id=1912): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) 21.733805298s ago: executing program 1 (id=1914): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 21.733711736s ago: executing program 2 (id=1915): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 21.683762687s ago: executing program 3 (id=1916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.498190194s ago: executing program 0 (id=1917): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x2001, 0x28) write(r0, &(0x7f0000000200)='atkbd', 0x5) 3.497988318s ago: executing program 2 (id=1918): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r2, 0x26, &(0x7f0000000180)) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x3) 3.497804324s ago: executing program 1 (id=1919): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x2804000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x10000, 0x40000) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800080, 0x0) 3.497616971s ago: executing program 3 (id=1920): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 3.489237313s ago: executing program 1 (id=1921): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) 3.489124543s ago: executing program 1 (id=1922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_io_uring_setup(0x3, &(0x7f0000000d00)={0x0, 0x1201eac, 0x8, 0xfffffffe, 0x114}, &(0x7f0000000000), &(0x7f0000000cc0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.479574766s ago: executing program 2 (id=1923): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) 3.477362222s ago: executing program 0 (id=1924): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) 3.438845987s ago: executing program 0 (id=1925): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) 3.433231311s ago: executing program 1 (id=1926): unshare(0x8000000) semget(0x1, 0x4, 0x3c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x7, 0x0, 0x4, 0x86c8, 0x81, 0xf4, 0x4, 0x4, 0xc0, 0x14, 0x2, 0xa5, 0xa, 0x6, 0x5, 0xcc, [0xf6000000, 0x6]}}) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r0, 0xf4652000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000058ea5fe5a300da45af65d701eaef338681a2c259565599ea3c8a079bebe417818dc29aeefdf833da9a4a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r4 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r5, r2, 0x12, 0x12, 0x0, @void, @value=r2}, 0x20) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r8) creat(&(0x7f0000000140)='./file0\x00', 0x57) 3.392520483s ago: executing program 2 (id=1927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x5, 0x0, [{0x814, 0x0, 0xc41eeb7}, {0xab6, 0x0, 0x400000}, {0x7ba983eddf06ca8, 0x0, 0xc}, {0xb76}, {0x91a, 0x0, 0x5}]}) sendmsg$nl_route(r0, 0x0, 0x4040) pipe2$watch_queue(0x0, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9001010000000000240012800b00010062726964676500001400028008001d000700000008001c0009000000"], 0x44}}, 0x800) socketpair(0x26, 0x100000005, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="52973bffae9619ad9a57b2c2c09c72dd0d7c95d5ab5fca8f30411377f1921ab11b9b706ccc3fe4c1f8d2013f9e318fe09e800b015f3443c5a688095c96ee2ec1dea3e3a6f69e432b4256cf7ad4d94957ae826b2cfbcf27ab6260d2e1ccbcd4251b82b6c6ecd51fa54074ac2dc259fe842bfe39949a454b13512dde", 0x7b}, {&(0x7f0000000a80)="2242cffaf92c57b02b679d1c2282415c2191be37d4d2480f5a067e593c3a8c2b8409306ff909b3150d01d0ca82dffd1c0ff22eacdf2d644c7204d62a54fdf43e93eba236d522e80c5a72e52cc535dbe363514aa22598795207f474b74733ddc0781a492319a2f3dbcfc05427663d07d92d5ba6b2c213c8e01bba0fe542ed727ca50c446d7f09b7bfae25aca40f4a150c4643c9e9f9050b19760bd57c5d979ef7d9a8b3e510e653d88ff336e83aae60b52c4102aab0558219007a8852781285c68a423f165f26ccd1947d8c4bb6b7d68d0212a43c541f07e281f7d2", 0xdb}], 0x2, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000004580)="ae017579034f09f9fa2b94", 0xb}, {&(0x7f0000004e80)="a6f93b8431a4e835806ec98df29440bb45bfc75e0d8f5bfb7c17e4a79f9e0cf2b00139f6a69641bd873dcef9624c1c4bf19e91978b3ea4019e626fdc99db004d61412401eff4d363c76b3787fb08dce3706436c50aa8083801443a2b85f653144409f174e67ae52808775b51d77b2187399f827200baa8ba823b9347541cbd24288d06fb3f8c3c3593feb5af38d312dc2f86a48e40d8dff33b8a0befa71c560539e0d4a36318187465eacc0fe1f0ae27156184564e4320a51004b2001617bdc7eec134f8d846ad071e90bba2143d2c98d900da946aa854faa37506749e19dda511abc274e45cf331df66b25e31088fc2ba66bcc2f9b547c73e81b3de245e5db7b3af6c0e86699ae47f6b9fe1626ac00152eeb4f2e85f8c9d78c3e9c4ac7bcdc3794739169cf326b9b1e243a3db72d4df6495c8ea85e3d5fc8883b6ded59348b0b2a1a7735151fec8a88992e00e033e1484fc5de8a8af0ed35b8b46333633de77a5cecc5f05b7594532c37089389704b7f6eafb9d27fb89445996926643b9c89e25ae94a4e7f559839443c41f2f9a7716eff030816ea90a5c54a5bf4d1aab297425129639d4de0e5ad6daba55689fafb1d548f906b3a0fdf79c7e8990494d74c0ebf7e4b79a65d3abfd918968a2ab3283e8e9652a2253d5d51ba28761b21e030502d17fa4fb7ae7cef532732cd665a0d6585c28c53b51c04958e1247450598ab1dbae773b25f030362e91b36e3d94b176159d87d8084aefd15da438735594d916fbdfe70c38c319296312d1321f3ae3d888840b1221bbc191c7a10bc649900d2b1306dd14f58353164016a823f4c1916dbc61a31ced55a107c2a2b4267c2b42e50dbf818e8d91e58f42241939c876ee23366d2ddaee60b3d55d176a1027448ab4b92fe1a23368b81081278ff5b26005ba3cb74620e38bf7f8e5041f5efa30e8d95714f21f75420cd1c88c2cba56f78f99d95cd7a0e2dc16109e11063f4bbbb3f4bbc7bce08098c9056ef8d0600c6bd4ad5f6e69e471422056e691d9de8460d05b10eee4a5b75f8869d3d051bf35c4fa338ca75fc07cda6d235800221b492d6ad9b62cff8bde54c5253424f00565ff80a0135f05c57e4595413ae092ca85fb5ca03749955f1fb5520e6219474cb1812cb316d67351b48dbebd9f6987704bfddff4834bf9ef6f14eda0f77a003dced952c791cfc8d6ca3c4b9198f4f4cc815178451d28702a8687392173618317903d2c95d4c1b269ee192e5d532ce8c6b59639686b7083c9cd151a65b7a0ba4682fb23ee4a811a67850964409438066589fa11b85be42a9872e2549f8177e42e6139446cd5b5fd9bcf8416675d0fc062ed346e3568a5bbdc583b2248d40f9b3ed75073aadfb664e3db09dd229c015e141ad509f95bf41351dacbc6b499abb00878fc76c04c406f534ec1bcdd0e921e6c6b5e38204522e0339e8b3444fe13558abbf9de4022b032b22cdb4b62a4bdb53952d9bf6c97f7179f2b52f093d2c4483576b87f44899d74b8b2f58a6db0e97bf96bb5872e84967a6fcb9c5bb3f013965dd5ecd33850ab1034412f5e46821bee5196598b2d76090beec7fb7279234b62326133c88ee2a4017875755997c5abd4d9ab69532774bbcdea2d07439170245f0800986ec2ed7783a4858ea7e106c36704d6902737f528960fead820a5563c5bfa271a68cd19fe0118ed13ea1642369e6059a41f512c57448a2cb414598c764889d8dc58a5a29580aa3d0b107f5f3e1fc28361042cdac058984c931a5e4a2bf61174208f46b0a114f6ddd1c3abb8b909ab3861d5ced53e60e5955b92846a3a4c7463faf8127c1dc2c310b49bd3560552a1466fed9a07de91b34bf6e1ba5a741dc2a526871fda01dc89e24ba8d725aba2cd9546148f336e432b173b5e5e3e01a9b0be66e813d6e456f64939c0b4b4122fe08a40c68a655037ee880655926b7221545017f99e8d7ccf89335d3cad59b515e82ebed3ffd77704202ec783bbb10cf7865ad71d6afee80d8277ebc5e3fbf894ab05e08df20ee667f2b8722f9e5b070035dd2958b907beff604c356ab89a4b09dd4c9f5f86f6892987a027355d77c64d2e9e8539f313dec032a35a126786753cfd1f1244c316255f4dbf5870c8201a85a2bea7504fadf527dea2b1d4ae975091800c86d8eb2adb3986d9317145239de76be57cceab83d2d92f6aabc3ef942a9c3aa9d23060b737f91bfe33fd6fe2f14329f1b919cd506cc26cbc28187dbbb9883897ae20e314ed52b754a8004182d5b41bca0b0760cfa3c191ecd3196cf15c6d140ff7862e35b718f5827e7ebfc70a9cead96980e83b980364cad468f94f20ac732e10839196a51bfadb24f10f71a2ea8ba0ad025d9d4b2fb615b93533a52c06633be206a2007858d91fd29fb5f692556a97d919de9e1e1aa82217b8b2ba4a58978f6956cec212acc75bbfae8d04fd7d6b11152d412af7019efcf9befa084b9ff898f1adaeafe0c9ed3ae7ec838ce57d3d968ed5323b99cae5dc6639778b871f5b32e5de4678440412b7c2572aeaf34bb89a7554f1e92bf4279ac347b47bc2fe400f04cefa02c75d06e47e044f66ddb375160177d2f638e137260fb25dae01b4c78bf6e5f38da8050f00d78762a9b2cafd5827f4d18529e42f891853b9fb8b81ed7da0dadc9e2f8856ed7f5883a63ed1d10f0709024bf87a28a91d51d4c419ace259c70388c6cc4b4f5aab8ec36d6de3519ab5305e93732efd4684fb16bb14707fd2b43c36cbe07646f2731773354edcc4c923f5dc86576fa212df8754c82672e0aa5d647e2fd50da3af77a92424db9fa9ae8907e44a919be024986c08431ae6ab29e41505b82e182f657fb4700700d2fad0b65cac96bc6340d9ffcae87b2190831e2380e318a28c83570c05957e8cbdfd858a9ee50477a45148217af175f4d09858fafb4a7b13b2944ed021be7bc9f09cc648f8e1d8c3fa0161f7e68ac4a3dbd3885bc58ef85585a18f97d7d27833a3726edc4693e8b587a7c1d4851eb33a32d78330121fadbfb0bd60fa5d7756e2f666694b4b5daf785ff302b06fedad43787aa33f67c13a4413785ba68d33c507439d9c739454f48939087873294a7cf5a57a00ba98444ce52a83a546c67deb6f2f3a8bda150cd98c72631a0be009d0a263ebbc4f512a949e4cf120909f4e5e64114c4a2b459f16323ad8771870f944d14fcdba311a9d89668b770415a7deab2da586592c41b251e7e52ee99bb35a9c0e630dddd7585d24ef96821378b5c17ad18b275d37021f02334aaf9a10bec0e0d7234c66db5961f7b13e0011f6af7feff35fe2ad853b26427cb1af8d0dcb290a1bc1898e74f6a7c2a2b034e84d7a736f42e171615e8d0027c23b6208c90e635a978fd6584c22bed7edc73e6a18ff7012fff2cd4cd722fc4ba1e64b81a8afd9395423066b38454e250c7f447106ffd6ca61b98f7b1b125df91c7b39880e043b357acecf94826722fdfa9939dfffd6d2fd47f3fea2f58c1d6d3115b39bf9ffc1096d5cacdb65b6b43c62e35fe2738e8748a17472f3c5529d230ec7f60f726563680a476b144eb30c6c6182948406dbde662823e982ea90ae11b863d1fb002b62f21cad783b96620d93c82ed7a1000ee8a878d32c31d2b4deb49491a8629acc7de7edb13685c1b631f510d7fa274334e39c7f81d1d66dc0a4f2939163987efff299d59f88c7c28bf4545bac172e427dd22adc15923fea208d6425e28933b235f69400c60095e241a6a2b446926f0d5e8def17941461f73227357c3f0f5fe50a7564e3984ac747229d0ffe35341ba2662aa22af1ea4f63191e111f0de03b5890c479a53441ea41a90ab37fbd0ad15fe17c6fd9ec3dabda164fd784a15a0e651e890c301e762fb41439dc1eef76aef97156a400d4c6f726c3652c9c55e51052613bcac11c17b25a868ce13687239d9ca62b6baba8e4dea8a2a895a56afa07ad5158d40ca223a41b2edc933b3b0918c17e17d22256395250a33b99052b49e2820adf8b0b648f7c83fd487d0186b13901e92be2f93afc61ca61cc642fe84e12973d79b4eb4d3b03f10b490a7e0a9678405cab203f5cf8b40975dcdc3a8995b2e29c19e18ee9f2699847457cfaa8f602e974b0c720282338980244d9ed63e0a32dcd3f651264faf0ba5829d8747d50060e64f968c3c545d0036d651ac0adc242e6cc704564b47f5e460bdcc0c253f52eb6cb00075b17959f7741d1cdeee1c5d3dfc23b13feb04589ce98ee3d9fc20b720dd53089fffd6b4d51b05fdac269701e5dd2ababc70640fe3d75e972ace0c7eb10282b9c84509832c4b87fa85d700f32a1d8dba53a7b3d6645cba0a22fde49fadd7f4ea0c70a451831389c0da9eed603188287842ecf329f0904df9d7c650ebd71095281ff7e5754ce20205644f795239e65513529644e4a15d6cd2ee6c46c54ee76a3a1d8d5cf25939f1c016e500596a4a34fc7cdb7988f161608a50b122b96c0ca4592b4bb1bc51d76fcda0da30b91ce665c9e7956ade4eec9f754b0e78b24d8116abfe6e33a68b05f4abd69d716ce0601fdcf084b8c085cf8c2c0c7d7dc05c0b9f64d5bf6f3697fd37002a34c87a864ad6001cd5cad78e11de385138151d3326db253a812113cbcf5ce6a7caf22f07d8239132149c5b370efc05d10f78413858774d59cb156a3185b86087f8d1c1f7cd4a1d1d1c63ad9dbcf6cfe6668416f131d47b5917727177c95a2244489ecaf18678c7ebf3d39f92d6a15bafd209dd0746e268859f4c658636f317cf36275601eacd4139d1730b2db5b0257dd689432cacad0fdde0d42f7edbe6c7298e0cb1aa5464ab044fb7aea547033583d7868c714bc75711e070ae83252af0dd054f4ada1a05650f744379ec265f4fd60bfdd0d7af94855d875b87746bb2d263dfffa236152c6560c21e62c74fa6ac9c70050562bb1213c2b00ff957d38d5fd495d89bea1da9a85374e608bb1c4506aaa994e711d14748129f194457a25f7d1e9f4257ea172d2c4b8a203cc94e6cd42e8cdb6315577ebfcd9671ac820d50a800bd33a6adff6cdd9891b0f9caff51c485c75bbd2eb7ddcfde96766b11aac9d5be02c3c21324f304565d701f5b06bd242e750fbfa8449f18b7c2a8b8baa8c45d8246d3efaa21f19ee8f99f304cd4ce1de5cba4e8588494958643549f46a5b035fc7ec9a360aa56f0b781b7488c28d619b51e2daa999f4e612ba8914ab23f17ddc47147b81499c41a34050a613ed11f02c72df1165b6f42156cf4f9906bee3bc38f4f6e37c72cb2f72b926c0ce4e13e913ebaa54e89905f49e2bdb477acb90fcd819cd96f4fa7a78eff4c49016ab85dde00f74f44a89e66c4f4052137d02ad9e5e0db62a1dd779b2eed7d6d6830e717aa8b97418fe900b31b8a8f30bb32bdfa3371afe9cbd325246f348656f76c1e395d258e7d8fa23d64328d07d858f701ff7bf95e41e1f7f4b7eaa5996df47cffe32b1dc31ff6f8ee4a3d8587713bdea7fd64ff20a41797dbd5d12d541ddfb7b6aea55d0a880c38217f4b69fe53d0c605455606b79d9ca5a2a1b1b1e9e0f25c4d75a6ac8095cad53515b01829f33f11d65b2a5253e91f3112572a550f483411638ac7bfce4e4eff070249a9807a809821f8ee38fe7402f128a08be6dff017461c03a99a18928ad4643c80e80fc1dae8cbb8682f4b7c4fa2fe4b53999a6c69ceafee939518294abb16fec96f6feacc2685b92ae35042296eae037649378f0d6e3f6aaff1eebc3a51720ce8b64904e1c3e3c98b7a7b3977a5056613eda8f1f7fae96a8", 0x1000}, {&(0x7f0000005e80)="55c86e538e72f448faecaf96e0df30e2a67ad4bd5b7a7630093653c08aa259e3563b34f4cca89beedb5a6dc6cf1ba502b0a1e160a95b7b5b43a7a3b7c2be1da83b96f068ba3679ef0afed086ebf5290a1260ba4ff07ed1af81ed017c9db2d6264bc4483628048284502a", 0x6a}], 0x3, &(0x7f000000c140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r4]}}], 0xe0, 0x8000}}, {{&(0x7f000000c240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c2c0)="b40df7fd4aacc8942acec7e540ae506349088a7c198c5c41be38dad6ebc080602b", 0x21}, {&(0x7f000000c300)="5fccd73e48c22000813bce18d76a23484a633051e93dab3d234662735821e35192b230f45c4b6dc24e8fcdfd14a1118724b6468336c3e7d2ac2cfd84df1ef6788236719bde89bfdd97e8d2a872fef787aeb7cef33be5ad7e865a4b677c36480a7d4891dea80e1f6b4629deb264daee33b8fc0e9b9210830ed6a99774249c76f41f9b660f37f49c2a1fc1321ac64038477132fa594e34cea2bdfa5d4a730fd71abd8ef5b050b727bdf8c394", 0xab}], 0x2, 0x0, 0x0, 0x4000}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)=""/200, 0xc8}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/128, 0x80}], 0x3, &(0x7f0000000940)=""/107, 0x6b}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r4, r4, 0x0, 0x20000005) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1002000ff) fcntl$dupfd(r5, 0x0, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf25000000", @ANYRES32=r7, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) 3.392378688s ago: executing program 3 (id=1928): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce", 0x26}], 0x1) statx(0xffffffffffffffff, 0x0, 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 8.536042ms ago: executing program 3 (id=1929): mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000420)="01000000") 7.968566ms ago: executing program 0 (id=1930): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, 0x0, 0xf70dc44c952f9e8f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 6.265865ms ago: executing program 1 (id=1931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x5, 0x0, [{0x814, 0x0, 0xc41eeb7}, {0xab6, 0x0, 0x400000}, {0x7ba983eddf06ca8, 0x0, 0xc}, {0xb76}, {0x91a, 0x0, 0x5}]}) sendmsg$nl_route(r0, 0x0, 0x4040) pipe2$watch_queue(0x0, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9001010000000000240012800b00010062726964676500001400028008001d000700000008001c0009000000"], 0x44}}, 0x800) socketpair(0x26, 0x100000005, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="52973bffae9619ad9a57b2c2c09c72dd0d7c95d5ab5fca8f30411377f1921ab11b9b706ccc3fe4c1f8d2013f9e318fe09e800b015f3443c5a688095c96ee2ec1dea3e3a6f69e432b4256cf7ad4d94957ae826b2cfbcf27ab6260d2e1ccbcd4251b82b6c6ecd51fa54074ac2dc259fe842bfe39949a454b13512dde", 0x7b}, {&(0x7f0000000a80)="2242cffaf92c57b02b679d1c2282415c2191be37d4d2480f5a067e593c3a8c2b8409306ff909b3150d01d0ca82dffd1c0ff22eacdf2d644c7204d62a54fdf43e93eba236d522e80c5a72e52cc535dbe363514aa22598795207f474b74733ddc0781a492319a2f3dbcfc05427663d07d92d5ba6b2c213c8e01bba0fe542ed727ca50c446d7f09b7bfae25aca40f4a150c4643c9e9f9050b19760bd57c5d979ef7d9a8b3e510e653d88ff336e83aae60b52c4102aab0558219007a8852781285c68a423f165f26ccd1947d8c4bb6b7d68d0212a43c541f07e281f7d2", 0xdb}], 0x2, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000004580)="ae017579034f09f9fa2b94", 0xb}, {&(0x7f0000004e80)="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", 0x1000}, {&(0x7f0000005e80)="55c86e538e72f448faecaf96e0df30e2a67ad4bd5b7a7630093653c08aa259e3563b34f4cca89beedb5a6dc6cf1ba502b0a1e160a95b7b5b43a7a3b7c2be1da83b96f068ba3679ef0afed086ebf5290a1260ba4ff07ed1af81ed017c9db2d6264bc4483628048284502a", 0x6a}], 0x3, &(0x7f000000c140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r4]}}], 0xe0, 0x8000}}, {{&(0x7f000000c240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c2c0)="b40df7fd4aacc8942acec7e540ae506349088a7c198c5c41be38dad6ebc080602b", 0x21}, {&(0x7f000000c300)="5fccd73e48c22000813bce18d76a23484a633051e93dab3d234662735821e35192b230f45c4b6dc24e8fcdfd14a1118724b6468336c3e7d2ac2cfd84df1ef6788236719bde89bfdd97e8d2a872fef787aeb7cef33be5ad7e865a4b677c36480a7d4891dea80e1f6b4629deb264daee33b8fc0e9b9210830ed6a99774249c76f41f9b660f37f49c2a1fc1321ac64038477132fa594e34cea2bdfa5d4a730fd71abd8ef5b050b727bdf8c394", 0xab}], 0x2, 0x0, 0x0, 0x4000}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)=""/200, 0xc8}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/128, 0x80}], 0x3, &(0x7f0000000940)=""/107, 0x6b}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r4, r4, 0x0, 0x20000005) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1002000ff) fcntl$dupfd(r5, 0x0, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000100001002970", @ANYRES32=r7, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) 0s ago: executing program 2 (id=1932): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a", 0x24}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 0s ago: executing program 1 (id=1935): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000900)='0x1d6', 0x5) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000b00), 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') kernel console output (not intermixed with test programs): 236, changing to 11 [ 243.850542][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 243.850562][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 243.852104][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.852139][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 243.852159][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 243.852179][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 243.856682][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.856718][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 243.856738][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 243.856756][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 243.872192][ T5833] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 243.872209][ T5833] usb 8-1: Product: syz [ 243.872216][ T5833] usb 8-1: Manufacturer: syz [ 243.872223][ T5833] usb 8-1: SerialNumber: syz [ 243.914599][ T5833] usb 8-1: config 0 descriptor?? [ 243.969172][T10295] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.016750][ T5833] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 246.794292][ T30] usb 8-1: USB disconnect, device number 38 [ 246.800650][ T30] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 251.323409][T10290] fido_id[10290]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 251.973570][ T8158] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 252.002401][ T5833] hid_parser_main: 12 callbacks suppressed [ 252.002416][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x7 [ 252.002442][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 252.002454][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 252.002466][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 252.002478][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 252.002495][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 252.002507][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 252.002519][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 252.002570][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 252.002690][ T5833] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 252.003790][ T5833] hid-generic 0000:0000:0000.0064: hidraw1: HID v0.00 Device [syz0] on syz0 [ 252.124608][ T8158] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 252.124643][ T8158] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 252.125586][ T8158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.125604][ T8158] usb 6-1: config 0 has no interfaces? [ 252.127197][ T8158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.127209][ T8158] usb 6-1: config 0 has no interfaces? [ 252.127958][ T8158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.127969][ T8158] usb 6-1: config 0 has no interfaces? [ 252.128843][ T8158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.128860][ T8158] usb 6-1: config 0 has no interfaces? [ 252.129750][ T8158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.129765][ T8158] usb 6-1: config 0 has no interfaces? [ 252.130664][ T8158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.130680][ T8158] usb 6-1: config 0 has no interfaces? [ 252.131569][ T8158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.131583][ T8158] usb 6-1: config 0 has no interfaces? [ 252.132477][ T8158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.132493][ T8158] usb 6-1: config 0 has no interfaces? [ 252.162565][ T8158] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 252.162650][ T8158] usb 6-1: Product: syz [ 252.162662][ T8158] usb 6-1: Manufacturer: syz [ 252.162674][ T8158] usb 6-1: SerialNumber: syz [ 252.168138][ T8158] usb 6-1: config 0 descriptor?? [ 252.252865][ T5833] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 252.413109][ T5833] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 252.413134][ T5833] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 252.413919][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.413942][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 252.413955][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 252.413971][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 252.414803][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.414824][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 252.414837][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 252.414849][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 252.415810][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.415842][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 252.415862][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 252.415880][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 252.416755][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.416775][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 252.416788][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 252.416801][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 252.417566][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.417587][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 252.417600][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 252.417613][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 252.418376][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.418397][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 252.418410][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 252.418422][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 252.419217][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.419237][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 252.419250][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 252.419262][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 252.420056][ T5833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.420089][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 252.420108][ T5833] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 252.420128][ T5833] usb 8-1: config 0 interface 0 has no altsetting 0 [ 252.422045][ T5833] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 252.422064][ T5833] usb 8-1: Product: syz [ 252.422075][ T5833] usb 8-1: Manufacturer: syz [ 252.422086][ T5833] usb 8-1: SerialNumber: syz [ 252.423482][ T5833] usb 8-1: config 0 descriptor?? [ 252.424005][T10516] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 252.428552][ T5833] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 253.180945][ T5889] usb 6-1: USB disconnect, device number 50 [ 253.192800][ T5890] usb 8-1: USB disconnect, device number 39 [ 253.194210][ T5890] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 255.516534][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.516591][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.529085][ T1043] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 255.574591][ T5826] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 255.582449][ T1043] usb 5-1: USB disconnect, device number 39 [ 255.585879][ T5826] usb 7-1: USB disconnect, device number 33 [ 255.742733][T10628] loop6: detected capacity change from 0 to 8 [ 255.749403][T10628] Dev loop6: unable to read RDB block 8 [ 255.749425][T10628] loop6: unable to read partition table [ 255.749518][T10628] loop6: partition table beyond EOD, truncated [ 255.749529][T10628] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5) [ 256.872444][ T8158] hid-generic 0000:0000:0000.0065: hidraw1: HID v0.00 Device [syz0] on syz0 [ 258.383178][T10526] fido_id[10526]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.052751][ T5826] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 259.633353][T10740] loop6: detected capacity change from 0 to 8 [ 259.637997][T10740] Dev loop6: unable to read RDB block 8 [ 259.638019][T10740] loop6: unable to read partition table [ 259.638147][T10740] loop6: partition table beyond EOD, truncated [ 259.638158][T10740] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5) [ 261.015773][T10740] futex_wake_op: syz.2.902 tries to shift op by 144; fix this program [ 268.610225][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 268.610241][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 271.018569][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 271.018585][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 272.672054][T10864] loop6: detected capacity change from 0 to 8 [ 272.769311][T10864] Dev loop6: unable to read RDB block 8 [ 272.769334][T10864] loop6: unable to read partition table [ 272.769430][T10864] loop6: partition table beyond EOD, truncated [ 272.769439][T10864] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5) [ 274.302867][ T30] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 274.453512][ T30] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 274.453537][ T30] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 274.454394][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.454405][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.454421][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.455196][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.455208][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.455222][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.456001][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.456012][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.456027][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.457026][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.457038][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.457052][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.457827][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.457838][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.457853][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.458806][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.458818][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.458832][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.459580][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.459591][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.459606][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.460358][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.460369][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.460383][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.461958][ T30] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 274.461971][ T30] usb 8-1: Product: syz [ 274.461978][ T30] usb 8-1: Manufacturer: syz [ 274.461985][ T30] usb 8-1: SerialNumber: syz [ 274.489463][ T30] usb 8-1: config 0 descriptor?? [ 274.496023][ T30] yurex 8-1:0.0: Could not find endpoints [ 277.554878][ T8158] usb 8-1: USB disconnect, device number 41 [ 282.617099][T10737] fido_id[10737]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 282.938156][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 282.938172][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 285.873274][T10990] fido_id[10990]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 288.575126][T11003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 288.575153][T11003] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 288.575257][T11003] vhci_hcd vhci_hcd.0: Device attached [ 288.762818][ T5936] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 288.822732][ T5936] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 290.199236][T11004] vhci_hcd: connection reset by peer [ 290.202488][ T12] vhci_hcd vhci_hcd.2: stop threads [ 290.202515][ T12] vhci_hcd vhci_hcd.2: release socket [ 290.216313][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 292.292749][ T855] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 292.463634][ T855] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 292.463688][ T855] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 292.464784][ T855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.464803][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.464828][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.465728][ T855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.465746][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.465775][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.466717][ T855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.466735][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.466759][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.467829][ T855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.467846][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.467871][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.469627][ T855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.469644][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.469669][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.470601][ T855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.470618][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.470642][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.471541][ T855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.471558][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.471582][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.472502][ T855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.472520][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.472545][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.567351][ T855] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 292.567375][ T855] usb 7-1: Product: syz [ 292.567386][ T855] usb 7-1: Manufacturer: syz [ 292.567397][ T855] usb 7-1: SerialNumber: syz [ 292.571329][ T855] usb 7-1: config 0 descriptor?? [ 292.577394][ T855] yurex 7-1:0.0: Could not find endpoints [ 292.903306][ T8158] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 293.052725][ T8158] usb 8-1: Using ep0 maxpacket: 16 [ 293.077107][ T8158] usb 8-1: device descriptor read/all, error -71 [ 293.548699][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 293.993576][ T5936] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 296.306145][ T5936] usb 7-1: USB disconnect, device number 34 [ 297.953138][ T1347] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 298.113148][ T1347] usb 7-1: Using ep0 maxpacket: 8 [ 298.114025][ T1347] usb 7-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.00 [ 298.115036][ T1347] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.115052][ T1347] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.115065][ T1347] usb 7-1: config 0 interface 0 has no altsetting 0 [ 298.115081][ T1347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.135360][ T1347] usb 7-1: config 0 descriptor?? [ 302.198247][ T1347] usbhid 7-1:0.0: can't add hid device: -71 [ 302.198299][ T1347] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 302.201234][ T1347] usb 7-1: USB disconnect, device number 35 [ 303.220597][T11035] binder: 11034:11035 ioctl c0306201 0 returned -14 [ 307.751969][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 309.452672][ T5826] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 309.623395][ T5826] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 309.623428][ T5826] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 309.628136][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.628160][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.628186][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 309.629204][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.629222][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.629247][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 309.631103][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.631115][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.631130][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 309.633132][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.633145][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.633161][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 309.633930][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.633942][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.633956][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 309.634789][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.634801][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.634816][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 309.635670][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.635682][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.635696][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 309.639000][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.639020][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.639044][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 309.666322][ T5826] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 309.666349][ T5826] usb 8-1: Product: syz [ 309.666362][ T5826] usb 8-1: Manufacturer: syz [ 309.666376][ T5826] usb 8-1: SerialNumber: syz [ 309.669880][ T5826] usb 8-1: config 0 descriptor?? [ 309.674778][ T5826] yurex 8-1:0.0: Could not find endpoints [ 312.528703][ T5826] usb 8-1: USB disconnect, device number 44 [ 315.826546][T11259] bridge8: entered promiscuous mode [ 316.948682][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.948738][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.412691][ T5826] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 319.582991][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 319.583859][ T5826] usb 6-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.00 [ 319.584919][ T5826] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.584947][ T5826] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.584971][ T5826] usb 6-1: config 0 interface 0 has no altsetting 0 [ 319.584999][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.589917][ T5826] usb 6-1: config 0 descriptor?? [ 321.586281][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.943'. [ 322.494658][ T5826] usbhid 6-1:0.0: can't add hid device: -71 [ 322.494735][ T5826] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 322.498420][ T5826] usb 6-1: USB disconnect, device number 51 [ 327.262465][T11272] bridge9: entered promiscuous mode [ 333.382860][ T8158] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 333.555574][ T8158] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 333.559982][ T8158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.571906][ T8158] usb 8-1: USB2VGA dongle found at address 45 [ 333.586193][ T8158] usb 8-1: Allocated 8 output buffers [ 336.016712][ T8158] usb 8-1: Failed to early initialize device [ 336.049300][ T8158] usb 8-1: USB disconnect, device number 45 [ 345.566736][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 345.594164][ T5890] hid_parser_main: 62 callbacks suppressed [ 345.594188][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x7 [ 345.594210][ T5890] hid-generic 0000:0000:0000.0066: ignoring exceeding usage max [ 345.595319][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 345.595384][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 345.595403][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 345.595422][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 345.595440][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 345.595460][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 345.595479][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 345.595787][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 345.595808][ T5890] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 345.598788][ T5890] hid-generic 0000:0000:0000.0066: hidraw1: HID v0.00 Device [syz0] on syz0 [ 350.237495][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 350.237510][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.965'. [ 350.736339][ T5826] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 351.103163][ T5826] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 351.103188][ T5826] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 351.104043][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.104065][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 351.104080][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 351.104093][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 351.105143][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.105164][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 351.105177][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 351.105190][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 351.108157][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.108185][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 351.108199][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 351.108212][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 351.109145][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.109167][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 351.109180][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 351.109193][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 351.110024][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.110056][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 351.110076][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 351.110096][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 351.110987][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.111008][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 351.111021][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 351.111034][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 351.111888][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.111909][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 351.111921][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 351.111934][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 351.186383][ T5826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.186423][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 351.186444][ T5826] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 351.186464][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 351.193213][ T5826] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 351.193232][ T5826] usb 8-1: Product: syz [ 351.193240][ T5826] usb 8-1: Manufacturer: syz [ 351.193247][ T5826] usb 8-1: SerialNumber: syz [ 351.207322][ T5826] usb 8-1: config 0 descriptor?? [ 351.209592][T11519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.213378][ T5826] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 351.764539][ T30] usb 8-1: USB disconnect, device number 46 [ 351.765791][ T30] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 353.602622][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 353.602637][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'. [ 356.822644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 364.091303][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 364.091319][T11543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 372.153571][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 373.867916][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 373.945287][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 378.393576][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.393607][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.651793][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 383.652052][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.988'. [ 388.833932][T11517] fido_id[11517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 391.732656][ T855] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 391.893167][ T855] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 391.893190][ T855] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 391.893972][ T855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.893984][ T855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.894004][ T855] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.894017][ T855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 391.894859][ T855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.894871][ T855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.894889][ T855] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.894902][ T855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 391.895700][ T855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.895712][ T855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.895730][ T855] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.895742][ T855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 391.896518][ T855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.896529][ T855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.896591][ T855] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.896605][ T855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 391.897402][ T855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.897413][ T855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.897431][ T855] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.897443][ T855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 391.901535][ T855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.901551][ T855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.901578][ T855] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.901595][ T855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 391.962728][ T855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.962743][ T855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.962764][ T855] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.962777][ T855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 391.979828][ T855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.979851][ T855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.979887][ T855] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.979910][ T855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 392.013070][ T855] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 392.013094][ T855] usb 6-1: Product: syz [ 392.013106][ T855] usb 6-1: Manufacturer: syz [ 392.013118][ T855] usb 6-1: SerialNumber: syz [ 392.062825][ T855] usb 6-1: config 0 descriptor?? [ 392.065743][ T855] yurex 6-1:0.0: Could not find endpoints [ 394.518429][ T5889] usb 6-1: USB disconnect, device number 52 [ 405.864351][ T5889] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 406.034036][ T5889] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 406.034073][ T5889] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 406.036068][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.036090][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.036122][ T5889] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.036145][ T5889] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.037077][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.037094][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.037127][ T5889] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.037149][ T5889] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.038275][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.038294][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.038327][ T5889] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.038349][ T5889] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.039447][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.039464][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.039497][ T5889] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.039520][ T5889] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.040614][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.040633][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.040667][ T5889] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.040689][ T5889] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.041603][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.041619][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.041654][ T5889] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.041673][ T5889] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.042683][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.042704][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.042750][ T5889] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.042772][ T5889] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.047909][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.047933][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.047971][ T5889] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.047995][ T5889] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.052259][ T5889] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 406.052277][ T5889] usb 8-1: Product: syz [ 406.052286][ T5889] usb 8-1: Manufacturer: syz [ 406.052296][ T5889] usb 8-1: SerialNumber: syz [ 406.054536][ T5889] usb 8-1: config 0 descriptor?? [ 406.059195][ T5889] yurex 8-1:0.0: Could not find endpoints [ 406.153738][ T43] audit: type=1326 audit(1789187103.694:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.0.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 406.163718][ T43] audit: type=1326 audit(1789187103.694:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.0.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 407.876298][ T30] usb 8-1: USB disconnect, device number 47 [ 407.894373][ T43] audit: type=1326 audit(1789187105.434:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.0.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701efec code=0x7ffc0000 [ 407.917061][ T43] audit: type=1326 audit(1789187105.454:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.0.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x7ffc0000 [ 410.102692][ T30] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 410.274712][ T30] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 410.274747][ T30] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 410.276551][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.276582][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.276597][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.277508][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.277545][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.277563][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.279494][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.279526][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.279543][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.281135][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.281169][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.281187][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.282121][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.282154][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.282172][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.284941][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.284979][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.284998][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.286010][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.286046][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.286064][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.286979][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.287024][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.287042][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.290247][ T30] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 410.290267][ T30] usb 6-1: Product: syz [ 410.290279][ T30] usb 6-1: Manufacturer: syz [ 410.290291][ T30] usb 6-1: SerialNumber: syz [ 410.411866][ T30] usb 6-1: config 0 descriptor?? [ 410.452710][ T30] yurex 6-1:0.0: Could not find endpoints [ 411.274849][T12311] FAULT_INJECTION: forcing a failure. [ 411.274849][T12311] name failslab, interval 1, probability 0, space 0, times 0 [ 411.274880][T12311] CPU: 0 UID: 0 PID: 12311 Comm: syz.3.1030 Not tainted syzkaller #0 PREEMPT(full) [ 411.274921][T12311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.274935][T12311] Call Trace: [ 411.274942][T12311] [ 411.274951][T12311] dump_stack_lvl+0x100/0x190 [ 411.274982][T12311] should_fail_ex.cold+0x5/0xa [ 411.275008][T12311] should_failslab+0xc2/0x120 [ 411.275033][T12311] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 411.275056][T12311] ? proc_alloc_inode+0x25/0x200 [ 411.275081][T12311] ? __pfx_proc_alloc_inode+0x10/0x10 [ 411.275106][T12311] proc_alloc_inode+0x25/0x200 [ 411.275127][T12311] alloc_inode+0x68/0x250 [ 411.275154][T12311] new_inode+0x22/0x1c0 [ 411.275183][T12311] proc_setup_self+0x58/0x1e0 [ 411.275206][T12311] proc_fill_super+0x5b8/0x870 [ 411.275235][T12311] ? __pfx_proc_fill_super+0x10/0x10 [ 411.275259][T12311] get_tree_nodev+0xdd/0x190 [ 411.275281][T12311] vfs_get_tree+0x92/0x320 [ 411.275309][T12311] path_mount+0x7d0/0x24c0 [ 411.275339][T12311] ? __pfx_path_mount+0x10/0x10 [ 411.275363][T12311] ? lockdep_hardirqs_on+0x7d/0x110 [ 411.275395][T12311] ? putname+0xb1/0x110 [ 411.275417][T12311] ? kmem_cache_free+0x127/0x6c0 [ 411.275453][T12311] ? __ia32_sys_mount+0x292/0x310 [ 411.275479][T12311] __ia32_sys_mount+0x292/0x310 [ 411.275503][T12311] ? __pfx___ia32_sys_mount+0x10/0x10 [ 411.275538][T12311] __do_fast_syscall_32+0x13a/0x8b0 [ 411.275571][T12311] do_fast_syscall_32+0x32/0x70 [ 411.275625][T12311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.275652][T12311] RIP: 0023:0xf7f58fec [ 411.275674][T12311] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 411.275684][T12311] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 411.275706][T12311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 411.275720][T12311] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.275732][T12311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.275752][T12311] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 411.275766][T12311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.275793][T12311] [ 411.283918][T12311] proc_fill_super: can't allocate /proc/self [ 411.840241][ T5890] usb 6-1: USB disconnect, device number 53 [ 412.227225][ T43] audit: type=1326 audit(1789187109.764:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 412.227299][ T43] audit: type=1326 audit(1789187109.764:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 412.228095][ T43] audit: type=1326 audit(1789187109.764:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701efec code=0x7ffc0000 [ 412.228147][ T43] audit: type=1326 audit(1789187109.764:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x7ffc0000 [ 412.926169][T12335] FAULT_INJECTION: forcing a failure. [ 412.926169][T12335] name failslab, interval 1, probability 0, space 0, times 0 [ 412.926191][T12335] CPU: 1 UID: 0 PID: 12335 Comm: syz.1.1042 Not tainted syzkaller #0 PREEMPT(full) [ 412.926205][T12335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 412.926213][T12335] Call Trace: [ 412.926217][T12335] [ 412.926222][T12335] dump_stack_lvl+0x100/0x190 [ 412.926241][T12335] should_fail_ex.cold+0x5/0xa [ 412.926257][T12335] should_failslab+0xc2/0x120 [ 412.926273][T12335] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 412.926287][T12335] ? proc_alloc_inode+0x25/0x200 [ 412.926303][T12335] ? __pfx_proc_alloc_inode+0x10/0x10 [ 412.926319][T12335] proc_alloc_inode+0x25/0x200 [ 412.926338][T12335] alloc_inode+0x68/0x250 [ 412.926356][T12335] new_inode+0x22/0x1c0 [ 412.926375][T12335] proc_setup_self+0x58/0x1e0 [ 412.926390][T12335] proc_fill_super+0x5b8/0x870 [ 412.926408][T12335] ? __pfx_proc_fill_super+0x10/0x10 [ 412.926423][T12335] get_tree_nodev+0xdd/0x190 [ 412.926437][T12335] vfs_get_tree+0x92/0x320 [ 412.926454][T12335] path_mount+0x7d0/0x24c0 [ 412.926473][T12335] ? __pfx_path_mount+0x10/0x10 [ 412.926488][T12335] ? lockdep_hardirqs_on+0x7d/0x110 [ 412.926506][T12335] ? putname+0xb1/0x110 [ 412.926519][T12335] ? kmem_cache_free+0x127/0x6c0 [ 412.926541][T12335] ? __ia32_sys_mount+0x292/0x310 [ 412.926555][T12335] __ia32_sys_mount+0x292/0x310 [ 412.926570][T12335] ? __pfx___ia32_sys_mount+0x10/0x10 [ 412.926589][T12335] __do_fast_syscall_32+0x13a/0x8b0 [ 412.926608][T12335] do_fast_syscall_32+0x32/0x70 [ 412.926626][T12335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.926642][T12335] RIP: 0023:0xf7f43fec [ 412.926654][T12335] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 412.926660][T12335] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 412.926671][T12335] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 412.926677][T12335] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.926684][T12335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.926691][T12335] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 412.926697][T12335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.926711][T12335] [ 412.926725][T12335] proc_fill_super: can't allocate /proc/self [ 413.263631][ T43] audit: type=1326 audit(1789187110.794:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 413.263688][ T43] audit: type=1326 audit(1789187110.794:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 413.267083][ T43] audit: type=1326 audit(1789187110.804:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701efec code=0x7ffc0000 [ 413.267215][ T43] audit: type=1326 audit(1789187110.804:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x7ffc0000 [ 413.539996][T12355] syz_tun: entered allmulticast mode [ 413.617645][T12361] FAULT_INJECTION: forcing a failure. [ 413.617645][T12361] name failslab, interval 1, probability 0, space 0, times 0 [ 413.617675][T12361] CPU: 0 UID: 0 PID: 12361 Comm: syz.2.1055 Not tainted syzkaller #0 PREEMPT(full) [ 413.617699][T12361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.617711][T12361] Call Trace: [ 413.617719][T12361] [ 413.617727][T12361] dump_stack_lvl+0x100/0x190 [ 413.617757][T12361] should_fail_ex.cold+0x5/0xa [ 413.617779][T12361] should_failslab+0xc2/0x120 [ 413.617803][T12361] __kmalloc_noprof+0xfc/0x840 [ 413.617823][T12361] ? __memcg_list_lru_alloc+0x418/0x680 [ 413.617853][T12361] __memcg_list_lru_alloc+0x418/0x680 [ 413.617878][T12361] ? xa_load+0x149/0x2c0 [ 413.617901][T12361] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 413.617933][T12361] ? rcu_read_unlock+0x17/0x60 [ 413.617968][T12361] memcg_list_lru_alloc+0xd3/0x100 [ 413.617999][T12361] __memcg_slab_post_alloc_hook+0x27b/0x1270 [ 413.618035][T12361] ? kasan_save_track+0x14/0x30 [ 413.618057][T12361] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 413.618080][T12361] ? proc_alloc_inode+0x25/0x200 [ 413.618104][T12361] ? __pfx_proc_alloc_inode+0x10/0x10 [ 413.618128][T12361] proc_alloc_inode+0x25/0x200 [ 413.618147][T12361] alloc_inode+0x68/0x250 [ 413.618173][T12361] new_inode+0x22/0x1c0 [ 413.618201][T12361] proc_get_inode+0x1d/0x780 [ 413.618226][T12361] proc_fill_super+0x566/0x870 [ 413.618253][T12361] ? __pfx_proc_fill_super+0x10/0x10 [ 413.618275][T12361] get_tree_nodev+0xdd/0x190 [ 413.618296][T12361] vfs_get_tree+0x92/0x320 [ 413.618351][T12361] path_mount+0x7d0/0x24c0 [ 413.618381][T12361] ? __pfx_path_mount+0x10/0x10 [ 413.618403][T12361] ? lockdep_hardirqs_on+0x7d/0x110 [ 413.618431][T12361] ? putname+0xb1/0x110 [ 413.618453][T12361] ? kmem_cache_free+0x127/0x6c0 [ 413.618488][T12361] ? __ia32_sys_mount+0x292/0x310 [ 413.618512][T12361] __ia32_sys_mount+0x292/0x310 [ 413.618534][T12361] ? __pfx___ia32_sys_mount+0x10/0x10 [ 413.618567][T12361] __do_fast_syscall_32+0x13a/0x8b0 [ 413.618597][T12361] do_fast_syscall_32+0x32/0x70 [ 413.618625][T12361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 413.618646][T12361] RIP: 0023:0xf7fa7fec [ 413.618664][T12361] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 413.618672][T12361] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 413.618693][T12361] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 413.618707][T12361] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.618721][T12361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 413.618733][T12361] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 413.618745][T12361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 413.618770][T12361] [ 413.618952][T12361] proc_fill_super: get root inode failed [ 413.633842][ T30] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 413.654548][T12354] syz_tun: left allmulticast mode [ 413.680593][T12363] syz_tun: entered allmulticast mode [ 413.681374][T12362] syz_tun: left allmulticast mode [ 413.739754][T12370] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 413.739770][T12370] audit: out of memory in audit_log_start [ 413.793190][ T30] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 413.793226][ T30] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 413.795819][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.795855][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 413.795873][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 413.796694][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.796715][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 413.796726][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 413.797513][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.797545][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 413.797562][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 413.798415][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.798448][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 413.798464][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 413.799249][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.799270][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 413.799281][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 413.800020][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.800040][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 413.800051][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 413.800799][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.800819][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 413.800830][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 413.801572][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.801599][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 413.801610][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 413.804431][ T30] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 413.804445][ T30] usb 8-1: Product: syz [ 413.804453][ T30] usb 8-1: Manufacturer: syz [ 413.804460][ T30] usb 8-1: SerialNumber: syz [ 413.805615][ T30] usb 8-1: config 0 descriptor?? [ 413.807891][ T30] yurex 8-1:0.0: Could not find endpoints [ 413.921981][T12385] syz_tun: entered allmulticast mode [ 413.923145][T12384] syz_tun: left allmulticast mode [ 414.102848][ T8158] usb 8-1: USB disconnect, device number 48 [ 414.570245][T12397] FAULT_INJECTION: forcing a failure. [ 414.570245][T12397] name failslab, interval 1, probability 0, space 0, times 0 [ 414.570266][T12397] CPU: 2 UID: 0 PID: 12397 Comm: syz.0.1072 Not tainted syzkaller #0 PREEMPT(full) [ 414.570281][T12397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.570289][T12397] Call Trace: [ 414.570294][T12397] [ 414.570300][T12397] dump_stack_lvl+0x100/0x190 [ 414.570319][T12397] should_fail_ex.cold+0x5/0xa [ 414.570335][T12397] should_failslab+0xc2/0x120 [ 414.570352][T12397] __kmalloc_noprof+0xfc/0x840 [ 414.570367][T12397] ? __memcg_list_lru_alloc+0x418/0x680 [ 414.570389][T12397] __memcg_list_lru_alloc+0x418/0x680 [ 414.570406][T12397] ? xa_load+0x149/0x2c0 [ 414.570421][T12397] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 414.570441][T12397] ? rcu_read_unlock+0x17/0x60 [ 414.570461][T12397] memcg_list_lru_alloc+0xd3/0x100 [ 414.570480][T12397] __memcg_slab_post_alloc_hook+0x27b/0x1270 [ 414.570503][T12397] ? kasan_save_track+0x14/0x30 [ 414.570518][T12397] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 414.570532][T12397] ? proc_alloc_inode+0x25/0x200 [ 414.570553][T12397] ? __pfx_proc_alloc_inode+0x10/0x10 [ 414.570577][T12397] proc_alloc_inode+0x25/0x200 [ 414.570600][T12397] alloc_inode+0x68/0x250 [ 414.570634][T12397] new_inode+0x22/0x1c0 [ 414.570676][T12397] proc_get_inode+0x1d/0x780 [ 414.570700][T12397] proc_fill_super+0x566/0x870 [ 414.570726][T12397] ? __pfx_proc_fill_super+0x10/0x10 [ 414.570752][T12397] get_tree_nodev+0xdd/0x190 [ 414.570772][T12397] vfs_get_tree+0x92/0x320 [ 414.570799][T12397] path_mount+0x7d0/0x24c0 [ 414.570823][T12397] ? __pfx_path_mount+0x10/0x10 [ 414.570837][T12397] ? lockdep_hardirqs_on+0x7d/0x110 [ 414.570854][T12397] ? putname+0xb1/0x110 [ 414.570866][T12397] ? kmem_cache_free+0x127/0x6c0 [ 414.570887][T12397] ? __ia32_sys_mount+0x292/0x310 [ 414.570901][T12397] __ia32_sys_mount+0x292/0x310 [ 414.570916][T12397] ? __pfx___ia32_sys_mount+0x10/0x10 [ 414.570935][T12397] __do_fast_syscall_32+0x13a/0x8b0 [ 414.570954][T12397] do_fast_syscall_32+0x32/0x70 [ 414.570972][T12397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.570985][T12397] RIP: 0023:0xf701efec [ 414.570999][T12397] Code: Unable to access opcode bytes at 0xf701efc2. [ 414.571004][T12397] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 414.571015][T12397] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 414.571023][T12397] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.571029][T12397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.571035][T12397] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 414.571042][T12397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.571055][T12397] [ 414.571068][T12397] proc_fill_super: get root inode failed [ 414.656511][T12403] syz_tun: entered allmulticast mode [ 414.657655][T12402] syz_tun: left allmulticast mode [ 415.103309][ T5826] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 415.263096][ T5826] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 415.263131][ T5826] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 415.263889][ T5826] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.263911][ T5826] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 415.263924][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.264642][ T5826] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.264663][ T5826] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 415.264674][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.265437][ T5826] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.265458][ T5826] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 415.265469][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.266166][ T5826] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.266186][ T5826] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 415.266240][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.266939][ T5826] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.266959][ T5826] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 415.266970][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.267674][ T5826] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.267695][ T5826] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 415.267706][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.268433][ T5826] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.268454][ T5826] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 415.268465][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.269661][ T5826] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.269682][ T5826] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 415.269693][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.271149][ T5826] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 415.271161][ T5826] usb 5-1: Product: syz [ 415.271168][ T5826] usb 5-1: Manufacturer: syz [ 415.271176][ T5826] usb 5-1: SerialNumber: syz [ 415.279433][ T5826] usb 5-1: config 0 descriptor?? [ 415.283302][ T5826] yurex 5-1:0.0: Could not find endpoints [ 415.486586][ T5826] usb 5-1: USB disconnect, device number 40 [ 415.620941][T12429] FAULT_INJECTION: forcing a failure. [ 415.620941][T12429] name failslab, interval 1, probability 0, space 0, times 0 [ 415.620964][T12429] CPU: 1 UID: 0 PID: 12429 Comm: syz.1.1090 Not tainted syzkaller #0 PREEMPT(full) [ 415.620982][T12429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 415.620992][T12429] Call Trace: [ 415.620998][T12429] [ 415.621006][T12429] dump_stack_lvl+0x100/0x190 [ 415.621029][T12429] should_fail_ex.cold+0x5/0xa [ 415.621045][T12429] should_failslab+0xc2/0x120 [ 415.621061][T12429] __kmalloc_noprof+0xfc/0x840 [ 415.621074][T12429] ? __memcg_list_lru_alloc+0x418/0x680 [ 415.621093][T12429] __memcg_list_lru_alloc+0x418/0x680 [ 415.621109][T12429] ? xa_load+0x149/0x2c0 [ 415.621123][T12429] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 415.621149][T12429] ? rcu_read_unlock+0x17/0x60 [ 415.621170][T12429] memcg_list_lru_alloc+0xd3/0x100 [ 415.621189][T12429] __memcg_slab_post_alloc_hook+0x27b/0x1270 [ 415.621213][T12429] ? kasan_save_track+0x14/0x30 [ 415.621227][T12429] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 415.621242][T12429] ? proc_alloc_inode+0x25/0x200 [ 415.621258][T12429] ? __pfx_proc_alloc_inode+0x10/0x10 [ 415.621272][T12429] proc_alloc_inode+0x25/0x200 [ 415.621285][T12429] alloc_inode+0x68/0x250 [ 415.621301][T12429] new_inode+0x22/0x1c0 [ 415.621318][T12429] proc_get_inode+0x1d/0x780 [ 415.621332][T12429] proc_fill_super+0x566/0x870 [ 415.621348][T12429] ? __pfx_proc_fill_super+0x10/0x10 [ 415.621363][T12429] get_tree_nodev+0xdd/0x190 [ 415.621376][T12429] vfs_get_tree+0x92/0x320 [ 415.621392][T12429] path_mount+0x7d0/0x24c0 [ 415.621409][T12429] ? __pfx_path_mount+0x10/0x10 [ 415.621422][T12429] ? lockdep_hardirqs_on+0x7d/0x110 [ 415.621439][T12429] ? putname+0xb1/0x110 [ 415.621452][T12429] ? kmem_cache_free+0x127/0x6c0 [ 415.621473][T12429] ? __ia32_sys_mount+0x292/0x310 [ 415.621487][T12429] __ia32_sys_mount+0x292/0x310 [ 415.621502][T12429] ? __pfx___ia32_sys_mount+0x10/0x10 [ 415.621521][T12429] __do_fast_syscall_32+0x13a/0x8b0 [ 415.621540][T12429] do_fast_syscall_32+0x32/0x70 [ 415.621557][T12429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.621571][T12429] RIP: 0023:0xf7f43fec [ 415.621584][T12429] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 415.621589][T12429] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 415.621600][T12429] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 415.621607][T12429] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.621614][T12429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.621620][T12429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 415.621627][T12429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.621643][T12429] [ 415.621656][T12429] proc_fill_super: get root inode failed [ 415.834981][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 416.096250][T12451] bridge5: entered promiscuous mode [ 416.664208][T12462] FAULT_INJECTION: forcing a failure. [ 416.664208][T12462] name failslab, interval 1, probability 0, space 0, times 0 [ 416.664229][T12462] CPU: 2 UID: 0 PID: 12462 Comm: syz.0.1103 Not tainted syzkaller #0 PREEMPT(full) [ 416.664244][T12462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.664252][T12462] Call Trace: [ 416.664256][T12462] [ 416.664261][T12462] dump_stack_lvl+0x100/0x190 [ 416.664280][T12462] should_fail_ex.cold+0x5/0xa [ 416.664295][T12462] should_failslab+0xc2/0x120 [ 416.664311][T12462] __kmalloc_noprof+0xfc/0x840 [ 416.664324][T12462] ? aa_label_asxprint+0x75/0x130 [ 416.664342][T12462] aa_label_asxprint+0x75/0x130 [ 416.664357][T12462] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 416.664372][T12462] security_lsmprop_to_secctx+0x146/0x1a0 [ 416.664387][T12462] audit_log_subj_ctx+0x34f/0x460 [ 416.664401][T12462] ? map_id_range_up+0x2ce/0x3b0 [ 416.664417][T12462] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 416.664433][T12462] ? audit_log_format+0xe8/0x130 [ 416.664446][T12462] ? apparmor_current_getlsmprop_subj+0x107/0x3c0 [ 416.664464][T12462] audit_log_task_context+0x88/0xb0 [ 416.664477][T12462] ? __pfx_audit_log_task_context+0x10/0x10 [ 416.664493][T12462] audit_log_task+0x1b7/0x3a0 [ 416.664509][T12462] ? __pfx_audit_log_task+0x10/0x10 [ 416.664528][T12462] audit_seccomp+0x79/0x190 [ 416.664540][T12462] __seccomp_filter+0x88c/0x1130 [ 416.664554][T12462] ? __pfx___seccomp_filter+0x10/0x10 [ 416.664567][T12462] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 416.664583][T12462] __seccomp_permit_syscall+0x207/0x2d0 [ 416.664596][T12462] __do_fast_syscall_32+0x420/0x8b0 [ 416.664619][T12462] do_fast_syscall_32+0x32/0x70 [ 416.664637][T12462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 416.664651][T12462] RIP: 0023:0xf701efec [ 416.664665][T12462] Code: Unable to access opcode bytes at 0xf701efc2. [ 416.664671][T12462] RSP: 002b:00000000f540d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 416.664684][T12462] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 416.664692][T12462] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 416.664699][T12462] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 416.664725][T12462] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 416.664733][T12462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.664748][T12462] [ 417.358795][T12486] audit_log_lost: 18 callbacks suppressed [ 417.358814][T12486] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 417.358828][T12486] audit: out of memory in audit_log_start [ 417.359058][ T43] audit: type=1326 audit(1789187114.894:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 417.359497][ T43] audit: type=1326 audit(1789187114.894:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 417.359757][ T43] audit: type=1326 audit(1789187114.894:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 417.483933][ T5889] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 417.653592][ T5889] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 417.653616][ T5889] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 417.654509][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.654532][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 417.654545][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.654556][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 417.655269][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.655289][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 417.655302][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.655312][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 417.656054][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.656074][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 417.656087][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.656097][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 417.656952][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.656982][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 417.657000][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.657017][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 417.657861][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.657883][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 417.657896][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.657907][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 417.658627][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.658648][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 417.658661][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.658671][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 417.659370][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.659391][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 417.659404][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.659415][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 417.660148][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.660168][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 417.660181][ T5889] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.660192][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 417.703180][ T5889] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 417.703210][ T5889] usb 7-1: Product: syz [ 417.703223][ T5889] usb 7-1: Manufacturer: syz [ 417.703235][ T5889] usb 7-1: SerialNumber: syz [ 417.705139][ T5889] usb 7-1: config 0 descriptor?? [ 417.706817][ T5889] yurex 7-1:0.0: Could not submitting URB [ 417.706887][ T5889] yurex 7-1:0.0: probe with driver yurex failed with error -5 [ 417.920596][ T5889] usb 7-1: USB disconnect, device number 36 [ 418.328706][T12507] FAULT_INJECTION: forcing a failure. [ 418.328706][T12507] name failslab, interval 1, probability 0, space 0, times 0 [ 418.328727][T12507] CPU: 0 UID: 0 PID: 12507 Comm: syz.1.1126 Not tainted syzkaller #0 PREEMPT(full) [ 418.328740][T12507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.328748][T12507] Call Trace: [ 418.328753][T12507] [ 418.328758][T12507] dump_stack_lvl+0x100/0x190 [ 418.328777][T12507] should_fail_ex.cold+0x5/0xa [ 418.328792][T12507] should_failslab+0xc2/0x120 [ 418.328822][T12507] __kmalloc_noprof+0xfc/0x840 [ 418.328837][T12507] ? aa_label_asxprint+0x75/0x130 [ 418.328856][T12507] aa_label_asxprint+0x75/0x130 [ 418.328873][T12507] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 418.328887][T12507] security_lsmprop_to_secctx+0x146/0x1a0 [ 418.328902][T12507] audit_log_subj_ctx+0x34f/0x460 [ 418.328916][T12507] ? map_id_range_up+0x2ce/0x3b0 [ 418.328932][T12507] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 418.328947][T12507] ? audit_log_format+0xe8/0x130 [ 418.328960][T12507] ? apparmor_current_getlsmprop_subj+0x107/0x3c0 [ 418.328977][T12507] audit_log_task_context+0x88/0xb0 [ 418.328990][T12507] ? __pfx_audit_log_task_context+0x10/0x10 [ 418.329006][T12507] audit_log_task+0x1b7/0x3a0 [ 418.329022][T12507] ? __pfx_audit_log_task+0x10/0x10 [ 418.329041][T12507] audit_seccomp+0x79/0x190 [ 418.329053][T12507] __seccomp_filter+0x88c/0x1130 [ 418.329067][T12507] ? __pfx___seccomp_filter+0x10/0x10 [ 418.329085][T12507] __seccomp_permit_syscall+0x207/0x2d0 [ 418.329105][T12507] __do_fast_syscall_32+0x420/0x8b0 [ 418.329126][T12507] do_fast_syscall_32+0x32/0x70 [ 418.329144][T12507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.329159][T12507] RIP: 0023:0xf7f43fec [ 418.329173][T12507] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 418.329178][T12507] RSP: 002b:00000000f54065cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 418.329191][T12507] RAX: ffffffffffffffda RBX: 00000000f7404f8c RCX: 0000000000000081 [ 418.329199][T12507] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 418.329206][T12507] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 418.329213][T12507] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 418.329220][T12507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.329234][T12507] [ 418.329264][T12507] audit: error in audit_log_subj_ctx [ 418.329321][ T43] audit: type=1326 audit(1789187115.864:35): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12506 comm="syz.1.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 418.329434][ T43] audit: type=1326 audit(1789187115.864:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 418.329687][ T43] audit: type=1326 audit(1789187115.864:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 418.329824][ T43] audit: type=1326 audit(1789187115.864:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 418.952853][ T5889] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 419.103712][ T5889] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 419.103749][ T5889] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 419.104787][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.104826][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.104900][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 419.104919][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.105889][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.105921][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.105940][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 419.105957][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.106814][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.106846][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.106865][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 419.106881][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.107750][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.107785][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.107806][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 419.107823][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.108685][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.108720][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.108741][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 419.108758][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.109621][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.109654][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.109674][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 419.109690][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.110555][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.110589][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.110610][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 419.110627][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.111461][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.111497][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.111518][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 419.111535][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.114606][ T5889] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 419.114628][ T5889] usb 6-1: Product: syz [ 419.114640][ T5889] usb 6-1: Manufacturer: syz [ 419.114654][ T5889] usb 6-1: SerialNumber: syz [ 419.121182][ T5889] usb 6-1: config 0 descriptor?? [ 419.134292][ T5889] yurex 6-1:0.0: Could not submitting URB [ 419.134427][ T5889] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 419.367191][ T5889] usb 6-1: USB disconnect, device number 54 [ 439.824947][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.824999][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.188213][T12700] bridge6: entered promiscuous mode [ 448.777298][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1166'. [ 452.602703][ T5888] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 452.763665][ T5888] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 452.764650][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.781182][ T5888] usb 7-1: USB2VGA dongle found at address 37 [ 452.796062][ T5888] usb 7-1: Allocated 8 output buffers [ 454.596042][ T5888] usb 7-1: Failed to early initialize device [ 454.611032][ T5888] usb 7-1: USB disconnect, device number 37 [ 455.430637][T12828] bridge8: entered promiscuous mode [ 460.722724][ T5936] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 460.883509][ T5936] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 460.885400][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.082010][ T5936] usb 6-1: USB2VGA dongle found at address 55 [ 461.091806][ T5936] usb 6-1: Allocated 8 output buffers [ 463.019701][ T5936] usb 6-1: Failed to early initialize device [ 463.031454][ T5936] usb 6-1: USB disconnect, device number 55 [ 466.164029][T12847] binder: BINDER_SET_CONTEXT_MGR already set [ 466.164039][T12847] binder: 12844:12847 ioctl 4018620d 800002c0 returned -16 [ 466.852704][ T5889] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 467.022717][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 467.023282][ T5889] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 467.024223][ T5889] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 467.024250][ T5889] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 467.024273][ T5889] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 467.024292][ T5889] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 467.024310][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 467.026083][ T5889] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 467.026104][ T5889] usb 5-1: Product: syz [ 467.026117][ T5889] usb 5-1: Manufacturer: syz [ 467.026129][ T5889] usb 5-1: SerialNumber: syz [ 467.069684][ T5889] usb 5-1: config 0 descriptor?? [ 467.072411][ T5889] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 467.085243][ T5889] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 467.214894][T12866] bridge10: entered promiscuous mode [ 470.547886][ T5826] usb 5-1: USB disconnect, device number 41 [ 470.549102][ T5826] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 478.055968][T12984] bridge4: entered promiscuous mode [ 478.096160][T12982] bridge7: entered promiscuous mode [ 479.123108][T12990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1195'. [ 479.468101][T12986] bridge11: entered promiscuous mode [ 480.969403][T13096] bridge8: entered promiscuous mode [ 480.975102][ T5889] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 481.123555][ T5889] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.124627][ T5889] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 481.124665][ T5889] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.124688][ T5889] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.124718][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.153522][ T5888] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 481.160672][ T5889] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.161099][ T5889] usb 5-1: invalid MIDI out EP 0 [ 481.307230][ T5888] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.308249][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.308274][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.308293][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.308324][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.310336][ T5888] usb 7-1: config 0 descriptor?? [ 481.369558][ T5889] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 481.617889][T13107] udevd[13107]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.248253][ T5889] usb 5-1: USB disconnect, device number 42 [ 483.504361][ T5888] hid_parser_main: 12 callbacks suppressed [ 483.504379][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.504401][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.504413][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.504425][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.504437][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.504449][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.504461][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.504478][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.504490][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.504502][ T5888] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 483.555062][ T5888] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 484.374252][ T10] usb 7-1: USB disconnect, device number 38 [ 485.236851][T13218] bridge9: entered promiscuous mode [ 499.225631][T13441] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 499.225658][T13441] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 499.225745][T13441] vhci_hcd vhci_hcd.0: Device attached [ 499.412769][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 499.475842][ T10] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 501.264368][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.264400][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.284143][T13442] vhci_hcd: connection reset by peer [ 502.284332][ T12] vhci_hcd vhci_hcd.2: stop threads [ 502.284346][ T12] vhci_hcd vhci_hcd.2: release socket [ 502.284372][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 504.615857][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 511.375428][T13667] bridge5: entered promiscuous mode [ 512.530140][T13665] jffs2: notice: (13665) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 515.021899][T13214] fido_id[13214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 523.037156][T13792] bridge10: entered promiscuous mode [ 523.137935][T13795] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 523.779800][T13788] bridge9: entered promiscuous mode [ 529.285492][T13804] syz.3.1239 (13804) used greatest stack depth: 18112 bytes left [ 532.047224][T13817] jffs2: notice: (13817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 532.376368][T13820] bridge11: entered promiscuous mode [ 535.470835][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 535.703085][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 537.758473][T13934] tmpfs: Unknown parameter 'rroot' [ 541.628618][T14252] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 542.065074][T14040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1249'. [ 542.065289][T14040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1249'. [ 550.313818][T14472] bridge6: entered promiscuous mode [ 557.222401][T14591] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 557.222432][T14591] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 557.227756][T14591] vhci_hcd vhci_hcd.0: Device attached [ 557.412748][ T5888] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 557.414331][T14592] vhci_hcd: connection closed [ 557.415148][ T13] vhci_hcd vhci_hcd.1: stop threads [ 557.415171][ T13] vhci_hcd vhci_hcd.1: release socket [ 557.415210][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 557.472686][ T5888] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 557.472738][ T5888] usb 39-1: enqueue for inactive port 0 [ 557.545028][ T5888] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 560.368078][T14695] bridge7: entered promiscuous mode [ 561.386115][T14699] bridge12: entered promiscuous mode [ 562.704355][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.704388][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.261996][T14705] warning: `syz.0.1273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 563.882655][ T5889] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 564.053063][ T5889] usb 8-1: Using ep0 maxpacket: 8 [ 565.552867][T14717] bridge12: entered promiscuous mode [ 566.633140][ T30] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 566.782645][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 567.934733][ T5889] usb 8-1: unable to get BOS descriptor or descriptor too short [ 567.934761][ T5889] usb 8-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 567.935456][ T5889] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 567.935473][ T5889] usb 8-1: can't read configurations, error -71 [ 570.125714][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 570.125742][ T30] usb 7-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 570.126805][ T30] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 570.126822][ T30] usb 7-1: can't read configurations, error -71 [ 570.752770][ T1347] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 570.984276][ T1347] usb 8-1: Using ep0 maxpacket: 8 [ 573.972219][ T1347] usb 8-1: unable to get BOS descriptor or descriptor too short [ 573.972245][ T1347] usb 8-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 573.973104][ T1347] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 573.973121][ T1347] usb 8-1: can't read configurations, error -71 [ 576.314296][T14744] bridge13: entered promiscuous mode [ 580.734937][ T8158] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 580.882712][ T8158] usb 8-1: Using ep0 maxpacket: 32 [ 580.884436][ T8158] usb 8-1: unable to get BOS descriptor or descriptor too short [ 580.884459][ T8158] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 580.885293][ T8158] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 580.885306][ T8158] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 580.885316][ T8158] usb 8-1: config 14 has no interface number 0 [ 580.885324][ T8158] usb 8-1: config 14 has no interface number 1 [ 580.885369][ T8158] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 580.885383][ T8158] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 580.885395][ T8158] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 580.885408][ T8158] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 580.885421][ T8158] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 580.885434][ T8158] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.885447][ T8158] usb 8-1: config 14 interface 57 has no altsetting 0 [ 580.885456][ T8158] usb 8-1: config 14 interface 228 has no altsetting 0 [ 580.887179][ T8158] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.887192][ T8158] usb 8-1: Product: syz [ 580.887199][ T8158] usb 8-1: Manufacturer: syz [ 580.887206][ T8158] usb 8-1: SerialNumber: syz [ 581.525630][ T8158] legousbtower 8-1:14.57: interrupt endpoints not found [ 581.534047][ T8158] legousbtower 8-1:14.228: get version request failed: -71 [ 581.534123][ T8158] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 581.567122][ T8158] usb 8-1: USB disconnect, device number 53 [ 585.633496][ T1043] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 585.782712][ T1043] usb 8-1: Using ep0 maxpacket: 8 [ 589.881515][ T1043] usb 8-1: unable to get BOS descriptor or descriptor too short [ 589.881541][ T1043] usb 8-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 589.882231][ T1043] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 589.882248][ T1043] usb 8-1: can't read configurations, error -71 [ 594.533345][ T5833] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 594.694274][ T5833] usb 5-1: not running at top speed; connect to a high speed hub [ 594.694294][ T5833] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 594.695959][ T5833] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 594.699188][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.699201][ T5833] usb 5-1: Product: syz [ 594.699208][ T5833] usb 5-1: Manufacturer: syz [ 594.699216][ T5833] usb 5-1: SerialNumber: syz [ 594.705125][ T5833] oti6858 5-1:1.0: oti6858 converter detected [ 594.728816][ T5833] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 595.134818][ T5889] usb 5-1: USB disconnect, device number 43 [ 595.144401][ T5889] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 595.153801][ T5889] oti6858 5-1:1.0: device disconnected [ 596.005853][T14882] bridge14: entered promiscuous mode [ 601.369919][T14890] Bluetooth: ISO socket layer initialized [ 607.134035][T14905] bridge0: port 1(syz_tun) entered blocking state [ 607.136295][T14905] bridge0: port 1(syz_tun) entered disabled state [ 607.137487][T14905] syz_tun: entered allmulticast mode [ 607.141570][T14905] syz_tun: entered promiscuous mode [ 607.155850][T14905] bridge0: port 1(syz_tun) entered blocking state [ 607.155958][T14905] bridge0: port 1(syz_tun) entered forwarding state [ 609.292748][ T1347] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 609.462751][ T1347] usb 6-1: Using ep0 maxpacket: 8 [ 612.771378][ T1347] usb 6-1: unable to get BOS descriptor or descriptor too short [ 612.771402][ T1347] usb 6-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 612.772337][ T1347] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 612.772354][ T1347] usb 6-1: can't read configurations, error -71 [ 623.033722][T15133] bridge13: entered promiscuous mode [ 624.145215][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.145262][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.767768][T15245] tipc: Resetting bearer [ 624.776638][T15245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 624.986043][T15245] team0: No ports can be present during mode change [ 624.988118][T15245] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 625.045509][T15245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.047018][T15245] team0: Port device bond0 added [ 625.607462][T15350] geneve0: entered promiscuous mode [ 625.982916][T15355] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 626.102952][T15245] tipc: Enabling of bearer rejected, already enabled [ 626.792906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 630.432743][ T8158] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 630.597961][ T8158] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.600544][ T8158] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.600571][ T8158] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 630.600589][ T8158] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 630.600620][ T8158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.702440][ T8158] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.951138][ T8158] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 633.217354][ T8158] usb 5-1: USB disconnect, device number 44 [ 633.794270][T15371] udevd[15371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.457775][T15374] bridge15: entered promiscuous mode [ 638.019871][T15380] geneve0: entered promiscuous mode [ 638.968482][T15382] syz_tun: left allmulticast mode [ 638.968512][T15382] syz_tun: left promiscuous mode [ 638.968706][T15382] bridge0: port 1(syz_tun) entered disabled state [ 638.983545][T15382] tipc: Resetting bearer [ 638.990046][T15382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 639.157407][T15382] netlink: 'syz.1.1335': attribute type 10 has an invalid length. [ 639.178146][T15382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.185667][T15382] team0: Port device bond0 added [ 639.393034][T15382] tipc: Enabling of bearer rejected, already enabled [ 644.215827][T15400] bridge14: entered promiscuous mode [ 644.794104][T15398] team0: Port device bond0 removed [ 644.794712][T15398] tipc: Resetting bearer [ 644.800913][T15398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 647.520740][T15398] team0: No ports can be present during mode change [ 647.756639][T15513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1342'. [ 647.911680][T15512] bridge16: entered promiscuous mode [ 652.112788][ T5888] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 652.262964][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 654.438105][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 654.438131][ T5888] usb 5-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 654.443198][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 654.443218][ T5888] usb 5-1: can't read configurations, error -71 [ 657.750212][T15561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1350'. [ 657.750301][T15561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1350'. [ 661.066673][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 662.836332][T15642] bridge10: entered promiscuous mode [ 666.142156][T15752] syz.2.1357 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 666.142194][T15752] CPU: 0 UID: 0 PID: 15752 Comm: syz.2.1357 Not tainted syzkaller #0 PREEMPT(full) [ 666.142213][T15752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 666.142224][T15752] Call Trace: [ 666.142230][T15752] [ 666.142237][T15752] dump_stack_lvl+0x100/0x190 [ 666.142265][T15752] dump_header+0xfb/0x606 [ 666.142286][T15752] oom_kill_process.cold+0xd/0x380 [ 666.142307][T15752] out_of_memory+0x340/0x14f0 [ 666.142335][T15752] ? __pfx_out_of_memory+0x10/0x10 [ 666.142365][T15752] mem_cgroup_out_of_memory+0xc6/0x130 [ 666.142385][T15752] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 666.142432][T15752] ? find_held_lock+0x2b/0x80 [ 666.142458][T15752] ? do_raw_spin_unlock+0x145/0x1e0 [ 666.142475][T15752] ? _raw_spin_unlock+0x28/0x50 [ 666.142499][T15752] try_charge_memcg+0x783/0xf60 [ 666.142529][T15752] ? __pfx_try_charge_memcg+0x10/0x10 [ 666.142553][T15752] ? find_held_lock+0x2b/0x80 [ 666.142593][T15752] ? rcu_read_unlock+0x17/0x60 [ 666.142617][T15752] ? rcu_read_unlock+0x17/0x60 [ 666.142650][T15752] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 666.142683][T15752] ? kasan_save_track+0x14/0x30 [ 666.142705][T15752] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 666.142724][T15752] ? alloc_buffer_head+0x21/0x140 [ 666.142865][T15752] alloc_buffer_head+0x21/0x140 [ 666.142889][T15752] folio_alloc_buffers+0x197/0x8e0 [ 666.142921][T15752] create_empty_buffers+0x3a/0x660 [ 666.142938][T15752] ? jbd2_journal_stop+0x187/0xf00 [ 666.142958][T15752] folio_create_buffers+0x13b/0x1a0 [ 666.142976][T15752] __block_write_begin_int+0x393/0x19c0 [ 666.142997][T15752] ? lock_acquire+0x1d1/0x380 [ 666.143019][T15752] ? ext4_page_mkwrite+0x33a/0x1860 [ 666.143041][T15752] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 666.143063][T15752] ? __pfx___block_write_begin_int+0x10/0x10 [ 666.143081][T15752] ? __pfx___might_resched+0x10/0x10 [ 666.143105][T15752] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 666.143122][T15752] block_page_mkwrite+0x34d/0x460 [ 666.143143][T15752] ext4_page_mkwrite+0xdf6/0x1860 [ 666.143168][T15752] ? __lock_acquire+0x5c0/0x1f40 [ 666.143191][T15752] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 666.143211][T15752] ? inode_to_bdi+0x9e/0x160 [ 666.143229][T15752] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 666.143261][T15752] do_page_mkwrite+0x17a/0x440 [ 666.143282][T15752] do_fault+0x659/0x1830 [ 666.143300][T15752] ? __pfx_filemap_map_pages+0x10/0x10 [ 666.143324][T15752] ? __pfx_do_fault+0x10/0x10 [ 666.143343][T15752] ? rcu_read_unlock+0x2d/0xb0 [ 666.143366][T15752] ? rcu_read_unlock+0x2d/0xb0 [ 666.143389][T15752] ? __pte_offset_map+0x179/0x310 [ 666.143412][T15752] __handle_mm_fault+0x150b/0x2f60 [ 666.143443][T15752] ? __pfx___handle_mm_fault+0x10/0x10 [ 666.143466][T15752] ? __pfx_mt_find+0x10/0x10 [ 666.143498][T15752] ? find_vma+0xbf/0x140 [ 666.143516][T15752] ? __pfx_find_vma+0x10/0x10 [ 666.143537][T15752] handle_mm_fault+0x363/0xa20 [ 666.143575][T15752] do_user_addr_fault+0x745/0x12f0 [ 666.143602][T15752] exc_page_fault+0x6f/0xd0 [ 666.143628][T15752] asm_exc_page_fault+0x26/0x30 [ 666.143644][T15752] RIP: 0023:0xf70afac0 [ 666.143660][T15752] Code: f0 83 c7 01 83 eb 08 e8 1e 9a fe ff 8b 46 20 8b 4e 18 8d 50 f8 83 c1 08 89 56 20 8b 54 24 10 89 4e 18 89 4c 24 0c 8b 4c 24 14 <89> 50 f8 89 48 fc 8b 44 24 18 39 c7 73 7a 8b 45 24 99 03 03 13 53 [ 666.143675][T15752] RSP: 002b:00000000ffd1c140 EFLAGS: 00010202 [ 666.143690][T15752] RAX: 0000000033a08000 RBX: 00000000f6c74568 RCX: 00000000ffffffff [ 666.143701][T15752] RDX: 0000000082a68eee RSI: 00000000f7f95610 RDI: 00000000000003f2 [ 666.143711][T15752] RBP: 00000000f7464fe8 R08: 0000000000000000 R09: 0000000000000000 [ 666.143721][T15752] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 666.143749][T15752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.143776][T15752] [ 666.191615][T15752] memory: usage 8kB, limit 8kB, failcnt 98 [ 666.191636][T15752] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 666.191648][T15752] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 666.191657][T15752] Memory cgroup stats for /syz2/test: [ 666.191816][T15752] cache 4096 [ 666.191826][T15752] rss 0 [ 666.191832][T15752] rss_huge 0 [ 666.191839][T15752] shmem 0 [ 666.191846][T15752] mapped_file 0 [ 666.191853][T15752] dirty 0 [ 666.191860][T15752] writeback 0 [ 666.191867][T15752] workingset_refault_anon 0 [ 666.191874][T15752] workingset_refault_file 14 [ 666.191882][T15752] swap 0 [ 666.191889][T15752] swapcached 0 [ 666.191896][T15752] pgpgin 24 [ 666.191903][T15752] pgpgout 23 [ 666.191909][T15752] pgfault 18 [ 666.191916][T15752] pgmajfault 13 [ 666.191923][T15752] inactive_anon 0 [ 666.191930][T15752] active_anon 0 [ 666.191937][T15752] inactive_file 0 [ 666.191945][T15752] active_file 4096 [ 666.191952][T15752] unevictable 0 [ 666.191958][T15752] hierarchical_memory_limit 8192 [ 666.191967][T15752] hierarchical_memsw_limit 9223372036854771712 [ 666.191975][T15752] total_cache 4096 [ 666.191982][T15752] total_rss 0 [ 666.191989][T15752] total_rss_huge 0 [ 666.191997][T15752] total_shmem 0 [ 666.192003][T15752] total_mapped_file 0 [ 666.192010][T15752] total_dirty 0 [ 666.192019][T15752] total_writeback 0 [ 666.192026][T15752] total_workingset_refault_anon 0 [ 666.192042][T15752] total_workingset_refault_file 14 [ 666.192049][T15752] total_swap 0 [ 666.192057][T15752] total_swapcached 0 [ 666.192064][T15752] total_pgpgin 24 [ 666.192071][T15752] total_pgpgout 23 [ 666.192080][T15752] total_pgfault 18 [ 666.192087][T15752] total_pgmajfault 13 [ 666.192096][T15752] total_inactive_anon 0 [ 666.192103][T15752] total_active_anon 0 [ 666.192110][T15752] total_inactive_file 0 [ 666.192120][T15752] total_active_file 4096 [ 666.192126][T15752] total_unevictable 0 [ 666.192133][T15752] anon_cost 0 [ 666.192139][T15752] file_cost 0 [ 666.192146][T15752] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1357,pid=15752,uid=0 [ 666.193131][T15752] Memory cgroup out of memory: Killed process 15752 (syz.2.1357) total-vm:104076kB, anon-rss:148kB, file-rss:22448kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 666.607204][T15760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1359'. [ 666.636761][T15760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1359'. [ 666.799880][T15823] syz.2.1360 invoked oom-killer: gfp_mask=0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), order=1, oom_score_adj=1000 [ 666.799918][T15823] CPU: 3 UID: 0 PID: 15823 Comm: syz.2.1360 Not tainted syzkaller #0 PREEMPT(full) [ 666.799941][T15823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 666.799954][T15823] Call Trace: [ 666.799962][T15823] [ 666.799972][T15823] dump_stack_lvl+0x100/0x190 [ 666.800005][T15823] dump_header+0xfb/0x606 [ 666.800028][T15823] oom_kill_process.cold+0xd/0x380 [ 666.800047][T15823] out_of_memory+0x340/0x14f0 [ 666.800089][T15823] ? __pfx_out_of_memory+0x10/0x10 [ 666.800129][T15823] mem_cgroup_out_of_memory+0xc6/0x130 [ 666.800153][T15823] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 666.800175][T15823] ? find_held_lock+0x2b/0x80 [ 666.800196][T15823] ? do_raw_spin_unlock+0x145/0x1e0 [ 666.800211][T15823] ? _raw_spin_unlock+0x28/0x50 [ 666.800237][T15823] try_charge_memcg+0x783/0xf60 [ 666.800280][T15823] ? __pfx_try_charge_memcg+0x10/0x10 [ 666.800302][T15823] ? find_held_lock+0x2b/0x80 [ 666.800318][T15823] ? rcu_read_unlock+0x17/0x60 [ 666.800346][T15823] ? rcu_read_unlock+0x17/0x60 [ 666.800385][T15823] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 666.800419][T15823] ? kasan_unpoison+0x27/0x60 [ 666.800436][T15823] __kmalloc_cache_noprof+0x52a/0x6d0 [ 666.800459][T15823] ? bpf_prog_alloc_no_stats+0x15f/0x690 [ 666.800481][T15823] bpf_prog_alloc_no_stats+0x15f/0x690 [ 666.800507][T15823] bpf_prog_alloc+0x3b/0x200 [ 666.800530][T15823] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 666.800558][T15823] bpf_prog_load+0x49e/0x2a80 [ 666.800614][T15823] ? __lock_acquire+0x5c0/0x1f40 [ 666.800648][T15823] ? __pfx_bpf_prog_load+0x10/0x10 [ 666.800672][T15823] ? lock_acquire+0x1d1/0x380 [ 666.800719][T15823] __sys_bpf+0x1f46/0x4a30 [ 666.800745][T15823] ? __pfx___sys_bpf+0x10/0x10 [ 666.800762][T15823] ? __pfx_futex_hash+0x10/0x10 [ 666.800810][T15823] ? __lock_acquire+0x5c0/0x1f40 [ 666.800833][T15823] ? ksys_write+0x190/0x250 [ 666.800849][T15823] ? ksys_write+0x190/0x250 [ 666.800885][T15823] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 666.800925][T15823] ? xfd_validate_state+0x129/0x190 [ 666.800960][T15823] ? __ia32_sys_bpf+0xcc/0x170 [ 666.800977][T15823] __ia32_sys_bpf+0xcc/0x170 [ 666.800995][T15823] ? __do_fast_syscall_32+0xb3/0x8b0 [ 666.801020][T15823] __do_fast_syscall_32+0x13a/0x8b0 [ 666.801050][T15823] do_fast_syscall_32+0x32/0x70 [ 666.801081][T15823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 666.801111][T15823] RIP: 0023:0xf7fa7fec [ 666.801134][T15823] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 666.801144][T15823] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 666.801165][T15823] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 666.801178][T15823] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.801191][T15823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.801203][T15823] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 666.801215][T15823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.801243][T15823] [ 666.803766][T15823] memory: usage 4kB, limit 8kB, failcnt 135 [ 666.803784][T15823] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 666.803797][T15823] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 666.803809][T15823] Memory cgroup stats for /syz2/test: [ 666.803927][T15823] cache 4096 [ 666.803935][T15823] rss 0 [ 666.803941][T15823] rss_huge 0 [ 666.803948][T15823] shmem 0 [ 666.803954][T15823] mapped_file 0 [ 666.803960][T15823] dirty 4096 [ 666.803967][T15823] writeback 0 [ 666.803974][T15823] workingset_refault_anon 0 [ 666.803980][T15823] workingset_refault_file 14 [ 666.803988][T15823] swap 0 [ 666.803994][T15823] swapcached 0 [ 666.804000][T15823] pgpgin 24 [ 666.804006][T15823] pgpgout 23 [ 666.804013][T15823] pgfault 19 [ 666.804019][T15823] pgmajfault 13 [ 666.804025][T15823] inactive_anon 0 [ 666.804032][T15823] active_anon 0 [ 666.804039][T15823] inactive_file 0 [ 666.804046][T15823] active_file 4096 [ 666.804053][T15823] unevictable 0 [ 666.804060][T15823] hierarchical_memory_limit 8192 [ 666.804067][T15823] hierarchical_memsw_limit 9223372036854771712 [ 666.804076][T15823] total_cache 4096 [ 666.804083][T15823] total_rss 0 [ 666.804090][T15823] total_rss_huge 0 [ 666.804097][T15823] total_shmem 0 [ 666.804112][T15823] total_mapped_file 0 [ 666.804120][T15823] total_dirty 4096 [ 666.804128][T15823] total_writeback 0 [ 666.804136][T15823] total_workingset_refault_anon 0 [ 666.804144][T15823] total_workingset_refault_file 14 [ 666.804152][T15823] total_swap 0 [ 666.804159][T15823] total_swapcached 0 [ 666.804167][T15823] total_pgpgin 24 [ 666.804175][T15823] total_pgpgout 23 [ 666.804183][T15823] total_pgfault 19 [ 666.804190][T15823] total_pgmajfault 13 [ 666.804197][T15823] total_inactive_anon 0 [ 666.804204][T15823] total_active_anon 0 [ 666.804211][T15823] total_inactive_file 0 [ 666.804219][T15823] total_active_file 4096 [ 666.804226][T15823] total_unevictable 0 [ 666.804234][T15823] anon_cost 0 [ 666.804240][T15823] file_cost 0 [ 666.804248][T15823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1360,pid=15761,uid=0 [ 666.804887][T15823] Memory cgroup out of memory: Killed process 15761 (syz.2.1360) total-vm:104076kB, anon-rss:204kB, file-rss:22832kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 667.130850][T15646] bridge8: entered promiscuous mode [ 667.172935][ T5833] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 667.202907][ T8158] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 667.343988][ T5833] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 667.345094][ T5833] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 667.345114][ T5833] usb 7-1: config 1 has no interface number 0 [ 667.353337][ T8158] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 667.356253][ T8158] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 667.356269][ T8158] usb 6-1: config 1 has no interface number 0 [ 667.359354][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.359377][ T5833] usb 7-1: Product: syz [ 667.359389][ T5833] usb 7-1: Manufacturer: syz [ 667.359401][ T5833] usb 7-1: SerialNumber: syz [ 667.359935][ T8158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.359949][ T8158] usb 6-1: Product: syz [ 667.359956][ T8158] usb 6-1: Manufacturer: syz [ 667.359964][ T8158] usb 6-1: SerialNumber: syz [ 667.368015][ T5833] usb 7-1: cannot find UAC_HEADER [ 667.487962][ T5833] snd-usb-audio 7-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 667.488794][ T8158] usb 6-1: 3:1 : does not exist [ 667.488808][ T8158] usb 6-1: 3:2 : does not exist [ 670.143884][ T855] usb 6-1: USB disconnect, device number 58 [ 670.323447][ T10] usb 7-1: USB disconnect, device number 41 [ 670.801728][T15872] udevd[15872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.377441][T15874] udevd[15874]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.317885][T15892] bridge17: entered promiscuous mode [ 679.363427][T15899] bridge9: entered promiscuous mode [ 681.758672][T15896] bridge11: entered promiscuous mode [ 685.594450][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.594497][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.215504][ T5833] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 699.415030][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 703.181688][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 703.181729][ T5833] usb 5-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 703.182757][ T5833] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 703.182792][ T5833] usb 5-1: can't read configurations, error -71 [ 728.795777][ T1347] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 729.045433][ T1347] usb 7-1: Using ep0 maxpacket: 8 [ 729.571017][T16067] bridge12: entered promiscuous mode [ 734.073084][ T1347] usb 7-1: unable to get BOS descriptor or descriptor too short [ 734.073129][ T1347] usb 7-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 734.127399][ T1347] usb 7-1: unable to read config index 0 descriptor/start: -32 [ 734.127426][ T1347] usb 7-1: chopping to 0 config(s) [ 734.127447][ T1347] usb 7-1: can't read configurations, error -32 [ 734.286525][ T1347] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 746.374742][ T8158] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 746.642237][ T8158] usb 5-1: not running at top speed; connect to a high speed hub [ 746.642264][ T8158] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 746.666294][ T8158] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 746.666323][ T8158] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 746.704836][ T8158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.704861][ T8158] usb 5-1: Product: syz [ 746.704874][ T8158] usb 5-1: Manufacturer: syz [ 746.704886][ T8158] usb 5-1: SerialNumber: syz [ 746.861703][ T8158] oti6858 5-1:1.0: oti6858 converter detected [ 746.874744][ T8158] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 747.053916][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.053966][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.394238][ T5889] usb 5-1: USB disconnect, device number 49 [ 747.417097][ T5889] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 747.417598][ T5889] oti6858 5-1:1.0: device disconnected [ 750.932928][ T1043] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 751.099580][ T1043] usb 7-1: Using ep0 maxpacket: 8 [ 751.510736][ T1043] usb 7-1: unable to get BOS descriptor or descriptor too short [ 751.510771][ T1043] usb 7-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 751.512106][ T1043] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 751.512134][ T1043] usb 7-1: can't read configurations, error -71 [ 770.309193][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 791.102976][ T42] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 791.324848][ T42] usb 7-1: not running at top speed; connect to a high speed hub [ 791.324877][ T42] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 791.328922][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.328975][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.414448][ T42] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 793.800006][ T42] uvcvideo 7-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 793.800361][ T42] uvcvideo 7-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 793.800397][ T42] uvcvideo 7-1:1.1: Failed to initialize the device (-71). [ 793.802294][ T42] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -71 [ 793.805645][ T42] usb 7-1: USB disconnect, device number 46 [ 808.484480][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.484542][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.383205][ T855] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 811.406196][ T1347] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 811.532703][ T855] usb 5-1: Using ep0 maxpacket: 8 [ 811.576432][ T1347] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 811.760009][ T1347] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 811.760048][ T1347] usb 7-1: config 0 interface 0 has no altsetting 0 [ 811.760081][ T1347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.762730][ T1347] usb 7-1: config 0 descriptor?? [ 814.402257][ T855] usb 5-1: unable to get BOS descriptor or descriptor too short [ 814.402295][ T855] usb 5-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 814.403260][ T855] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 814.403290][ T855] usb 5-1: can't read configurations, error -71 [ 814.778533][ T1347] usbhid 7-1:0.0: can't add hid device: -71 [ 814.778614][ T1347] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 814.830790][ T1347] usb 7-1: USB disconnect, device number 47 [ 863.362765][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'. [ 869.920702][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.920752][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.285945][T16750] input: syz1 as /devices/virtual/input/input17 [ 903.351097][T16866] bridge18: entered promiscuous mode [ 907.892669][T16099] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 908.042443][T16099] usb 5-1: device descriptor read/64, error -71 [ 908.289537][T16099] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 908.424892][T16099] usb 5-1: device descriptor read/64, error -71 [ 908.532924][T16099] usb usb5-port1: attempt power cycle [ 908.872704][T16099] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 908.893396][T16099] usb 5-1: device descriptor read/8, error -71 [ 909.132716][T16099] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 909.155552][T16099] usb 5-1: device descriptor read/8, error -71 [ 909.263177][T16099] usb usb5-port1: unable to enumerate USB device [ 916.602721][ T8158] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 916.774261][ T8158] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 916.775286][ T8158] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.775310][ T8158] usb 5-1: config 0 interface 0 has no altsetting 0 [ 916.775333][ T8158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.777678][ T8158] usb 5-1: config 0 descriptor?? [ 921.439821][ T8158] usbhid 5-1:0.0: can't add hid device: -71 [ 921.439926][ T8158] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 921.442362][ T8158] usb 5-1: USB disconnect, device number 56 [ 931.357754][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.357803][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 948.109634][ T855] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 948.300985][ T855] usb 8-1: Using ep0 maxpacket: 16 [ 948.301827][ T855] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 948.303099][ T855] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 948.303120][ T855] usb 8-1: config 0 has no interface number 0 [ 948.303149][ T855] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 948.303168][ T855] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 948.306452][ T855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.306473][ T855] usb 8-1: Product: syz [ 948.306484][ T855] usb 8-1: Manufacturer: syz [ 948.306495][ T855] usb 8-1: SerialNumber: syz [ 948.430776][ T855] usb 8-1: config 0 descriptor?? [ 948.431645][T17235] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 948.431957][T17235] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 952.344116][ T855] asix 8-1:0.251: probe with driver asix failed with error -71 [ 952.352155][ T855] usb 8-1: USB disconnect, device number 56 [ 992.799964][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.800022][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1016.706039][T17588] ======================================================= [ 1016.706039][T17588] WARNING: The mand mount option has been deprecated and [ 1016.706039][T17588] and is ignored by this kernel. Remove the mand [ 1016.706039][T17588] option from the mount to silence this warning. [ 1016.706039][T17588] ======================================================= [ 1035.264914][ T855] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1035.471155][ T855] usb 8-1: Using ep0 maxpacket: 8 [ 1036.009277][ T855] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1036.009331][ T855] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=7e.0a [ 1036.010181][ T855] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1036.010210][ T855] usb 8-1: can't read configurations, error -71 [ 1038.884893][ T5888] kworker/1:5 (5888) used greatest stack depth: 16920 bytes left [ 1054.271507][ T5889] kworker/2:5 (5889) used greatest stack depth: 15568 bytes left [ 1054.289664][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.289723][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.674636][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.674689][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1160.752307][T18032] bridge10: entered promiscuous mode [ 1177.104015][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.104079][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.217531][T18126] bridge13: entered promiscuous mode [ 1182.042911][ T855] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1182.207056][ T855] usb 6-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 1182.207983][ T855] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.207995][ T855] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1182.210008][ T855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.210021][ T855] usb 6-1: Product: syz [ 1182.210028][ T855] usb 6-1: Manufacturer: syz [ 1182.210036][ T855] usb 6-1: SerialNumber: syz [ 1184.862305][ T855] usb 6-1: 0:1 : does not exist [ 1184.862319][ T855] usb 6-1: 0:2 : does not exist [ 1184.862351][ T855] usb 6-1: unit 183 not found! [ 1184.862360][ T855] usb 6-1: unit 23 not found! [ 1184.922445][ T855] usb 6-1: USB disconnect, device number 59 [ 1190.531359][T18238] udevd[18238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.553624][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.553654][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.983825][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.983855][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.423655][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.423686][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1376.642892][ T855] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1377.241594][ T855] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 1377.255202][ T855] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.670501][ T855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.670517][ T855] usb 7-1: Product: syz [ 1377.670525][ T855] usb 7-1: Manufacturer: syz [ 1377.670532][ T855] usb 7-1: SerialNumber: syz [ 1377.696215][ T855] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1377.696228][ T855] cdc_wdm 7-1:1.0: Unknown control protocol [ 1380.297932][ T5826] usb 7-1: USB disconnect, device number 48 [ 1405.096731][T19351] bridge19: entered promiscuous mode [ 1422.863819][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.863851][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1458.682031][T19750] bridge20: entered promiscuous mode [ 1459.379042][T19752] bridge15: entered promiscuous mode [ 1484.315640][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.315670][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.877732][T19967] bridge16: entered promiscuous mode [ 1492.589797][T19975] bridge17: entered promiscuous mode [ 1526.267262][T20147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1853'. [ 1526.267296][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'. [ 1538.606176][T20164] team0: Port device bond0 removed [ 1538.606604][T20164] tipc: Resetting bearer [ 1538.609917][T20164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1545.744595][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.744699][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.996586][T20197] bridge18: entered promiscuous mode [ 1598.155214][T20462] bridge21: entered promiscuous mode [ 1607.183565][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.183636][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.311127][T20680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 1623.653886][T20808] bridge19: entered promiscuous mode [ 1627.673673][T20817] bridge22: entered promiscuous mode [ 1632.957248][T20828] [ 1632.958257][T20828] ====================================================== [ 1632.960742][T20828] WARNING: possible circular locking dependency detected [ 1632.962999][T20828] syzkaller #0 Not tainted [ 1632.964548][T20828] ------------------------------------------------------ [ 1632.966822][T20828] syz.1.1935/20828 is trying to acquire lock: [ 1632.968803][T20828] ffffffff903fe7e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 1632.972416][T20828] [ 1632.972416][T20828] but task is already holding lock: [ 1632.974694][T20828] ffff88801e8e9440 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 1632.977946][T20828] [ 1632.977946][T20828] which lock already depends on the new lock. [ 1632.977946][T20828] [ 1632.981705][T20828] [ 1632.981705][T20828] the existing dependency chain (in reverse order) is: [ 1632.984515][T20828] [ 1632.984515][T20828] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 1632.987266][T20828] lock_acquire+0x1d1/0x380 [ 1632.989075][T20828] down_write+0x8b/0x1f0 [ 1632.990640][T20828] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1632.992701][T20828] usbg_make_tpg+0x251/0x610 [ 1632.994323][T20828] target_fabric_make_tpg+0xab/0x8c0 [ 1632.996155][T20828] configfs_mkdir+0x525/0xd40 [ 1632.997834][T20828] vfs_mkdir+0x364/0x850 [ 1632.999367][T20828] filename_mkdirat+0x48b/0x5e0 [ 1633.001061][T20828] __ia32_sys_mkdir+0x6a/0x90 [ 1633.003142][T20828] __do_fast_syscall_32+0x13a/0x8b0 [ 1633.004994][T20828] do_fast_syscall_32+0x32/0x70 [ 1633.006716][T20828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1633.008888][T20828] [ 1633.008888][T20828] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 1633.011388][T20828] lock_acquire+0x1d1/0x380 [ 1633.012982][T20828] __mutex_lock+0x1a4/0x1bd0 [ 1633.014627][T20828] tcm_alloc_inst+0x5f/0x1e0 [ 1633.016425][T20828] try_get_usb_function_instance+0x136/0x1f0 [ 1633.018650][T20828] usb_get_function_instance+0x16/0x70 [ 1633.020595][T20828] function_make+0x18c/0x3f0 [ 1633.022246][T20828] configfs_mkdir+0x525/0xd40 [ 1633.023784][T20828] vfs_mkdir+0x364/0x850 [ 1633.025307][T20828] filename_mkdirat+0x48b/0x5e0 [ 1633.027009][T20828] __ia32_sys_mkdir+0x6a/0x90 [ 1633.028713][T20828] __do_fast_syscall_32+0x13a/0x8b0 [ 1633.030510][T20828] do_fast_syscall_32+0x32/0x70 [ 1633.032598][T20828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1633.034760][T20828] [ 1633.034760][T20828] -> #1 (func_lock){+.+.}-{4:4}: [ 1633.036990][T20828] lock_acquire+0x1d1/0x380 [ 1633.038604][T20828] __mutex_lock+0x1a4/0x1bd0 [ 1633.040226][T20828] try_get_usb_function_instance+0x26/0x1f0 [ 1633.042298][T20828] usb_get_function_instance+0x16/0x70 [ 1633.044279][T20828] function_make+0x18c/0x3f0 [ 1633.046177][T20828] configfs_mkdir+0x525/0xd40 [ 1633.047838][T20828] vfs_mkdir+0x364/0x850 [ 1633.049318][T20828] filename_mkdirat+0x48b/0x5e0 [ 1633.050951][T20828] __ia32_sys_mkdirat+0x88/0xc0 [ 1633.052723][T20828] __do_fast_syscall_32+0x13a/0x8b0 [ 1633.054586][T20828] do_fast_syscall_32+0x32/0x70 [ 1633.056288][T20828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1633.058453][T20828] [ 1633.058453][T20828] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1633.061254][T20828] check_prev_add+0xeb/0xe60 [ 1633.062927][T20828] __lock_acquire+0x1528/0x1f40 [ 1633.064635][T20828] lock_acquire+0x1d1/0x380 [ 1633.066403][T20828] __mutex_lock+0x1a4/0x1bd0 [ 1633.068202][T20828] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1633.070219][T20828] configfs_symlink+0x695/0x1340 [ 1633.071885][T20828] vfs_symlink+0x178/0x4d0 [ 1633.073402][T20828] filename_symlinkat+0x2a6/0x560 [ 1633.075168][T20828] __ia32_sys_symlinkat+0x9b/0xe0 [ 1633.076990][T20828] __do_fast_syscall_32+0x13a/0x8b0 [ 1633.078723][T20828] do_fast_syscall_32+0x32/0x70 [ 1633.080324][T20828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1633.082509][T20828] [ 1633.082509][T20828] other info that might help us debug this: [ 1633.082509][T20828] [ 1633.085640][T20828] Chain exists of: [ 1633.085640][T20828] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#27 [ 1633.085640][T20828] [ 1633.090327][T20828] Possible unsafe locking scenario: [ 1633.090327][T20828] [ 1633.092826][T20828] CPU0 CPU1 [ 1633.094504][T20828] ---- ---- [ 1633.096194][T20828] lock(&sb->s_type->i_mutex_key#27); [ 1633.097944][T20828] lock(tpg_instances_lock); [ 1633.100168][T20828] lock(&sb->s_type->i_mutex_key#27); [ 1633.102648][T20828] lock(gadget_subsys.su_mutex); [ 1633.104629][T20828] [ 1633.104629][T20828] *** DEADLOCK *** [ 1633.104629][T20828] [ 1633.107993][T20828] locks held by syz.1.1935/20828: 2, last CPU#3: [ 1633.110306][T20828] #0: ffff8880228dc460 (sb_writers#15){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1633.113309][T20828] #1: ffff88801e8e9440 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 1633.116659][T20828] [ 1633.116659][T20828] stack backtrace: [ 1633.118512][T20828] CPU: 3 UID: 0 PID: 20828 Comm: syz.1.1935 Not tainted syzkaller #0 PREEMPT(full) [ 1633.121515][T20828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1633.124813][T20828] Call Trace: [ 1633.125870][T20828] [ 1633.126817][T20828] dump_stack_lvl+0x100/0x190 [ 1633.128318][T20828] print_circular_bug.cold+0x178/0x1be [ 1633.130040][T20828] check_noncircular+0x146/0x160 [ 1633.131658][T20828] check_prev_add+0xeb/0xe60 [ 1633.133116][T20828] __lock_acquire+0x1528/0x1f40 [ 1633.134677][T20828] ? kasan_save_track+0x14/0x30 [ 1633.136314][T20828] ? kasan_save_free_info+0x3b/0x70 [ 1633.138118][T20828] lock_acquire+0x1d1/0x380 [ 1633.139566][T20828] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1633.141628][T20828] ? __pfx___might_resched+0x10/0x10 [ 1633.143371][T20828] __mutex_lock+0x1a4/0x1bd0 [ 1633.144850][T20828] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1633.146833][T20828] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1633.148822][T20828] ? __lock_acquire+0x5c0/0x1f40 [ 1633.150386][T20828] ? __pfx___mutex_lock+0x10/0x10 [ 1633.152087][T20828] ? make_vfsuid+0xec/0x140 [ 1633.153517][T20828] ? __pfx___might_resched+0x10/0x10 [ 1633.155172][T20828] ? make_vfsgid+0xf1/0x140 [ 1633.156609][T20828] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1633.158915][T20828] ? security_inode_permission+0xbf/0x250 [ 1633.160734][T20828] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1633.162865][T20828] ? inode_permission+0x374/0x620 [ 1633.164441][T20828] ? mntput_no_expire+0xe7/0x220 [ 1633.166007][T20828] configfs_symlink+0x695/0x1340 [ 1633.167740][T20828] ? bpf_lsm_inode_permission+0x9/0x10 [ 1633.169648][T20828] ? security_inode_permission+0xbf/0x250 [ 1633.171611][T20828] ? __pfx_configfs_symlink+0x10/0x10 [ 1633.173291][T20828] vfs_symlink+0x178/0x4d0 [ 1633.174746][T20828] filename_symlinkat+0x2a6/0x560 [ 1633.176307][T20828] ? __pfx_filename_symlinkat+0x10/0x10 [ 1633.178078][T20828] ? strncpy_from_user+0x19d/0x2d0 [ 1633.179688][T20828] ? do_getname+0x191/0x390 [ 1633.181121][T20828] __ia32_sys_symlinkat+0x9b/0xe0 [ 1633.182778][T20828] __do_fast_syscall_32+0x13a/0x8b0 [ 1633.184431][T20828] do_fast_syscall_32+0x32/0x70 [ 1633.186073][T20828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1633.188148][T20828] RIP: 0023:0xf7f43fec [ 1633.189444][T20828] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 1633.191554][T20828] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 1633.194136][T20828] RAX: ffffffffffffffda RBX: 0000000080001500 RCX: 00000000ffffff9c [ 1633.196588][T20828] RDX: 0000000080001600 RSI: 0000000000000000 RDI: 0000000000000000 [ 1633.199080][T20828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1633.201671][T20828] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1633.204249][T20828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1633.206708][T20828] [ 1638.004955][T20938] sctp: sctp_init_sock: sk:ffff8880531c1280 [ 1639.039187][T20938] sctp: sctp_setsockopt: sk:ffff8880531c1280, optname:9 [ 1640.204933][T20938] sctp: sctp_close: sk:ffff8880531c1280, timeout:0 [ 1640.204953][T20938] sctp: sctp_destroy_sock: sk:ffff8880531c1280 [ 1641.913181][ T6258] syz_tun (unregistering): left allmulticast mode SYZFAIL: failed to send rpc fd=3 want=83520 sent=0 n=-1 (errno 32: Broken pipe) [ 1642.098333][ T5818] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.116109][ T5818] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.176247][ T5818] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.225305][ T5818] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.322185][ T5818] dvmrp6: left allmulticast mode [ 1642.396031][ T5818] bond0 (unregistering): Released all slaves [ 1642.457621][ T5818] tipc: Disabling bearer [ 1642.462946][ T5818] tipc: Left network mode [ 1642.514873][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1642.622039][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1642.639651][ T5818] hsr_slave_0: left promiscuous mode [ 1642.640041][ T5818] hsr_slave_1: left promiscuous mode [ 1642.642030][ T5818] veth1_macvtap: left promiscuous mode [ 1642.642067][ T5818] veth0_macvtap: left promiscuous mode [ 1642.642149][ T5818] veth1_vlan: left promiscuous mode [ 1642.671331][ T5818] team0 (unregistering): Port device vlan0 removed [ 1642.854638][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4