last executing test programs: 2m31.307430085s ago: executing program 4 (id=201): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000004340)=""/102376, 0x18fe8) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x9, 0x0) getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000005200)={{0x0, 0x0, 0xee00, 0xee00, 0x0, 0x10, 0x4309}, 0x0, 0x0, 0x81, 0x7, 0x8001, 0x5, 0x3, 0xe98, 0x15e4, 0x6}) 2m29.030013141s ago: executing program 4 (id=206): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) rmdir(&(0x7f0000000040)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r3}, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000280)=0x6) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000002c0)={0x9, r0}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10, 0x20}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1}, 0x94) io_uring_setup(0x30dc, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}}, 0x80) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, 0x0, 0x7f, 0x0, 0x6}}) 2m27.037923034s ago: executing program 4 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$user(&(0x7f0000000100), 0x0, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r7, 0x9f) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fc49de2}]}]}, 0x20}}, 0x200000c0) 2m25.745107923s ago: executing program 4 (id=212): syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) r0 = fanotify_init(0x81, 0x40000) fanotify_mark(r0, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) 2m24.529906259s ago: executing program 4 (id=215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000010401010000000000000000010000050a00020000000005e4ffffff0500010001000000"], 0x28}, 0x1, 0x2000000, 0x0, 0x4040000}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350900000000000000b7020000180000007b2af8ff00000000b509000000000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc7020000080000001822000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 2m22.669436237s ago: executing program 4 (id=220): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 2m7.451581782s ago: executing program 32 (id=220): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 18.478383539s ago: executing program 2 (id=424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000010401010000000000000000010000050a00020000000005e4ffffff0500010001000000"], 0x28}, 0x1, 0x2000000, 0x0, 0x4040000}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350900000000000000b7020000180000007b2af8ff00000000b509000000000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc7020000080000001822000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 16.650194665s ago: executing program 2 (id=426): mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1000482, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) 16.049523806s ago: executing program 2 (id=429): syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') prlimit64(0x0, 0x7, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) 15.488686984s ago: executing program 3 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 14.929032314s ago: executing program 2 (id=432): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xfffffffffffffedb, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x598e}]}, &(0x7f0000000180)=0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258) close(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r9 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r10 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r10, &(0x7f0000000000)=""/43, 0x2b) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x1007, 0x8010, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}}, 0x0) 14.261952365s ago: executing program 3 (id=434): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r6, 0x29, 0xcf, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40e02, 0x8) r9 = creat(&(0x7f0000000500)='./bus\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x4, '\x00', 0x0, @fallback=0x24, r8, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff]}, 0x94) syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000070100400020000000020000000000004898ed5c80ab7cd833c544951fea3a29c290"]) creat(&(0x7f0000000040)='./file0\x00', 0x4b) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 8.053936204s ago: executing program 0 (id=439): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 7.716883613s ago: executing program 1 (id=440): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x8000) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) 7.682237086s ago: executing program 0 (id=441): syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') prlimit64(0x0, 0x7, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) 7.124893855s ago: executing program 0 (id=442): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac14140000000000000000000300060000000000"], 0x50}}, 0x0) 6.71173444s ago: executing program 1 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.333375241s ago: executing program 0 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000066080200ff"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 4.46997051s ago: executing program 0 (id=445): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x28}}, 0x802) 4.418092802s ago: executing program 1 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x17}) 4.172198508s ago: executing program 3 (id=447): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0x604, 0x0) 3.723346622s ago: executing program 1 (id=448): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x9, 0x0) getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000005200)={{0x0, 0x0, 0xee00, 0xee00, 0x0, 0x10, 0x4309}, 0x0, 0x0, 0x81, 0x7, 0x8001, 0x5, 0x3, 0xe98, 0x15e4, 0x6}) 2.60636029s ago: executing program 0 (id=449): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 2.508408321s ago: executing program 2 (id=450): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.572835868s ago: executing program 2 (id=451): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x0, 0x1, 0x0, 0x1, 0x5, 0x8, 0x3, 0xa, 0xfd, 0xfffffffa, 0x1, 0x1, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000003, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfbfffff8]}) 1.57242028s ago: executing program 3 (id=452): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x80, 0x3c, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x7fff, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf7001000800000000000000000000000000000374d99f400000000000000000000000000013c0040af44ae88673c"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000540001000100", @ANYRES32=0x0, @ANYBLOB=' \x00\t\x00', @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 864.46263ms ago: executing program 3 (id=453): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac14140000000000000000000300060000000000"], 0x50}}, 0x0) 691.473412ms ago: executing program 1 (id=454): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 441.277197ms ago: executing program 1 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000066080200ffd000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 0s ago: executing program 3 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): 59391, setting to 1024 [ 114.599604][ T45] usb 1-1: string descriptor 0 read error: -22 [ 114.599790][ T45] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.599818][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.606388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.607251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.709260][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.709285][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.128812][ T45] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 115.260251][ T45] usb 1-1: USB disconnect, device number 2 [ 115.497679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.499416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.266597][ T5170] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.407168][ T5170] usb 1-1: device descriptor read/64, error -71 [ 116.667061][ T5170] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.799194][ T5170] usb 1-1: device descriptor read/64, error -71 [ 116.907048][ T5170] usb usb1-port1: attempt power cycle [ 119.434240][ T6015] netlink: 88 bytes leftover after parsing attributes in process `syz.3.17'. [ 119.595222][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.776424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.776480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.776626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.131319][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 120.131355][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 120.170387][ T6028] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 120.170888][ T6028] bridge0: port 3(team0) entered blocking state [ 120.171040][ T6028] bridge0: port 3(team0) entered disabled state [ 120.363617][ T6028] team0: entered allmulticast mode [ 120.363643][ T6028] team_slave_0: entered allmulticast mode [ 120.363668][ T6028] team_slave_1: entered allmulticast mode [ 120.396250][ T6028] team0: entered promiscuous mode [ 120.396274][ T6028] team_slave_0: entered promiscuous mode [ 120.399076][ T6028] team_slave_1: entered promiscuous mode [ 120.428239][ T6028] bridge0: port 3(team0) entered blocking state [ 120.428691][ T6028] bridge0: port 3(team0) entered forwarding state [ 121.088871][ T1248] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.606501][ T1248] usb 5-1: Using ep0 maxpacket: 32 [ 121.610043][ T1248] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 121.610072][ T1248] usb 5-1: config 0 has no interface number 0 [ 121.610128][ T1248] usb 5-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 121.610155][ T1248] usb 5-1: config 0 interface 214 has no altsetting 0 [ 121.613626][ T1248] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 121.613655][ T1248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.613676][ T1248] usb 5-1: Product: syz [ 121.613690][ T1248] usb 5-1: Manufacturer: syz [ 121.613706][ T1248] usb 5-1: SerialNumber: syz [ 121.780508][ T1248] usb 5-1: config 0 descriptor?? [ 121.783617][ T6029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.072969][ T6029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 123.544741][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 123.545240][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 124.047180][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.257691][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 124.258141][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 124.258160][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 124.258559][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 124.259041][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 124.259441][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.260418][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.260818][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.261221][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.262128][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 124.263227][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.263623][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 124.264009][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 124.270677][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 124.272063][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.272674][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 124.466558][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 124.469122][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 124.469722][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 124.474224][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 124.474921][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 124.475569][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 124.476210][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 124.478746][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 124.479342][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 124.483989][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 124.488348][ T1248] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 124.647684][ T1248] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 72:39:f5:bd:ee:59 [ 124.846560][ T1248] usb 5-1: USB disconnect, device number 2 [ 124.850409][ T1248] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 131.768848][ T6083] tipc: Started in network mode [ 131.768885][ T6083] tipc: Node identity b6d723140c85, cluster identity 4711 [ 131.769865][ T6083] tipc: Enabled bearer , priority 0 [ 131.770797][ T6083] syzkaller0: entered promiscuous mode [ 131.770825][ T6083] syzkaller0: entered allmulticast mode [ 131.837495][ T6083] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.741106][ T38] audit: type=1326 audit(1756904072.248:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.741167][ T38] audit: type=1326 audit(1756904072.258:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.741219][ T38] audit: type=1326 audit(1756904072.258:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.741265][ T38] audit: type=1326 audit(1756904072.258:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.741311][ T38] audit: type=1326 audit(1756904072.258:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.741356][ T38] audit: type=1326 audit(1756904072.268:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.741403][ T38] audit: type=1326 audit(1756904072.268:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.741448][ T38] audit: type=1326 audit(1756904072.268:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.741494][ T38] audit: type=1326 audit(1756904072.268:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.741540][ T38] audit: type=1326 audit(1756904072.268:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 132.798844][ T5991] tipc: Node number set to 3125945108 [ 133.115154][ T6087] tipc: Resetting bearer [ 133.117870][ T5991] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.159112][ T6082] tipc: Resetting bearer [ 133.446307][ T6082] tipc: Disabling bearer [ 133.466798][ T5914] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.698622][ T6107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.146506][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 134.150533][ T5914] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 134.150591][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.150633][ T5914] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.150660][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.150687][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.151654][ T5914] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 134.151692][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.151711][ T5914] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.151729][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.151747][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.152690][ T5914] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 134.152728][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.152747][ T5914] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.152765][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.152783][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.170875][ T5914] usb 2-1: string descriptor 0 read error: -22 [ 134.171069][ T5914] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.171095][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.385269][ T1391] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.536005][ T5914] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 134.620336][ T5914] usb 2-1: USB disconnect, device number 2 [ 134.791684][ T6115] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.936558][ T5991] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.106519][ T5991] usb 1-1: Using ep0 maxpacket: 8 [ 135.110108][ T5991] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 135.110168][ T5991] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 135.110304][ T5991] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.110332][ T5991] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.110360][ T5991] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.210763][ T6123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.337004][ T5991] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 136.337057][ T5991] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.337086][ T5991] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.337111][ T5991] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.337136][ T5991] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.959938][ T5991] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 136.960004][ T5991] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.960034][ T5991] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.960062][ T5991] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.960089][ T5991] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.273390][ T6121] input: syz1 as /devices/virtual/input/input5 [ 137.325570][ T5991] usb 1-1: string descriptor 0 read error: -71 [ 137.325742][ T5991] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 137.325768][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.278877][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.278988][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.284549][ T5991] usb 1-1: can't set config #168, error -71 [ 144.393364][ T5991] usb 1-1: USB disconnect, device number 7 [ 144.535076][ T6136] Bluetooth: MGMT ver 1.23 [ 146.156541][ T5991] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 146.181973][ T6143] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.182000][ T6143] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 146.305852][ T6152] tipc: Started in network mode [ 146.305887][ T6152] tipc: Node identity 62d3b141a794, cluster identity 4711 [ 146.306108][ T6152] tipc: Enabled bearer , priority 0 [ 146.308144][ T6152] syzkaller0: entered promiscuous mode [ 146.308175][ T6152] syzkaller0: entered allmulticast mode [ 146.337599][ T5991] usb 3-1: Using ep0 maxpacket: 32 [ 146.363043][ T6152] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 146.366472][ T6143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.366496][ T6143] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 146.415118][ T5991] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 146.415139][ T5991] usb 3-1: config 0 has no interface number 0 [ 146.415173][ T5991] usb 3-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 146.415191][ T5991] usb 3-1: config 0 interface 214 has no altsetting 0 [ 146.456303][ T5991] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 146.456583][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.456617][ T5991] usb 3-1: Product: syz [ 146.456632][ T5991] usb 3-1: Manufacturer: syz [ 146.456647][ T5991] usb 3-1: SerialNumber: syz [ 146.510311][ T5991] usb 3-1: config 0 descriptor?? [ 146.526106][ T6146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.529181][ T6153] tipc: Resetting bearer [ 146.561350][ T6143] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.561374][ T6143] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 146.589212][ T6151] tipc: Resetting bearer [ 146.660612][ T6143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.660638][ T6143] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 146.757922][ T6143] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.757945][ T6143] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 146.758499][ T6146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.822379][ T6151] tipc: Disabling bearer [ 148.224102][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 148.224799][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 148.224818][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 148.387251][ T5914] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.556516][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 148.558992][ T5914] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 148.559013][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.595208][ T5914] usb 1-1: config 0 descriptor?? [ 148.613017][ T5914] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 148.833776][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 148.834476][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 148.835053][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 148.835530][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 148.835987][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 148.836652][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 148.837139][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 148.837603][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 148.838057][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 148.838506][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 148.838953][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 148.839413][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 148.839884][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 148.840332][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 148.840790][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 148.841244][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 148.841746][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 148.842211][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 148.842660][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 148.843113][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 148.843595][ T5991] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 149.220582][ T5991] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 8e:c2:34:ab:e4:83 [ 149.249502][ T5991] usb 3-1: USB disconnect, device number 2 [ 149.291507][ T5991] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 149.706946][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.857645][ T5914] gspca_vc032x: reg_w err -71 [ 149.857674][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857685][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857694][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857702][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857711][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857720][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857729][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857738][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857747][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857756][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857765][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857775][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857784][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857793][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857802][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857811][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857820][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857828][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.857836][ T5914] gspca_vc032x: Unknown sensor... [ 149.857924][ T5914] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 149.876492][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 149.892282][ T5917] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 149.892377][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.892412][ T5917] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.892442][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.892473][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.904904][ T5914] usb 1-1: USB disconnect, device number 8 [ 149.915384][ T5917] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 149.915463][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.915498][ T5917] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.915530][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.915568][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.948655][ T5917] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 149.948727][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.948760][ T5917] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.948789][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.948821][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.114106][ T5917] usb 4-1: string descriptor 0 read error: -22 [ 150.114333][ T5917] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 150.114362][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.284623][ T5917] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 150.396420][ T5991] usb 4-1: USB disconnect, device number 2 [ 150.436505][ T992] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.596493][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 150.598887][ T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 150.598953][ T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 150.598984][ T992] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.599011][ T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.599039][ T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.602140][ T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 150.602196][ T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 150.602225][ T992] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.602251][ T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.602277][ T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.605432][ T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 150.605488][ T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 150.605517][ T992] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.605544][ T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.605571][ T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.813567][ T992] usb 5-1: string descriptor 0 read error: -22 [ 150.813740][ T992] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 150.813765][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.992306][ T992] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 151.267371][ T5914] usb 5-1: USB disconnect, device number 4 [ 151.281959][ T5991] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.521528][ T5991] usb 3-1: Using ep0 maxpacket: 8 [ 151.652700][ T5991] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 151.652763][ T5991] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 151.652807][ T5991] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.652868][ T5991] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.652944][ T5991] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.851790][ T5991] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 151.851860][ T5991] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 151.851928][ T5991] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.851990][ T5991] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.852059][ T5991] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.924498][ T5991] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 151.924701][ T5991] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 151.924779][ T5991] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.924806][ T5991] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.924834][ T5991] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.607239][ T5991] usb 3-1: string descriptor 0 read error: -22 [ 152.607413][ T5991] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 152.607439][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.666976][ T5991] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 153.146576][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.173485][ T5914] usb 5-1: device descriptor read/64, error -71 [ 154.436564][ T5914] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.457844][ T31] usb 3-1: USB disconnect, device number 3 [ 154.806889][ T5991] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 155.443734][ T5991] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.443762][ T5991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.443783][ T5991] usb 1-1: config 0 has no interface number 0 [ 155.443945][ T5991] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.443970][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.476466][ T5914] usb 5-1: device descriptor read/64, error -71 [ 155.514387][ T5991] usb 1-1: config 0 descriptor?? [ 155.587926][ T5991] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 155.589204][ T5914] usb usb5-port1: attempt power cycle [ 155.779852][ T5925] usb 1-1: USB disconnect, device number 9 [ 155.956535][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 155.997163][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 156.001176][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.001228][ T5914] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.001253][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.060500][ T5914] usb 5-1: config 0 descriptor?? [ 156.395512][ T5914] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 157.670733][ T992] usb 5-1: USB disconnect, device number 7 [ 158.458689][ T5991] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.326419][ T5991] usb 1-1: Using ep0 maxpacket: 8 [ 159.329074][ T5991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.329128][ T5991] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.332726][ T5991] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 159.332753][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.332774][ T5991] usb 1-1: Product: syz [ 159.332788][ T5991] usb 1-1: Manufacturer: syz [ 159.332803][ T5991] usb 1-1: SerialNumber: syz [ 159.414048][ T5991] usb 1-1: config 0 descriptor?? [ 159.460051][ T5991] radioshark 1-1:0.0: Invalid radioSHARK device [ 159.460089][ T5991] radioshark 1-1:0.0: probe with driver radioshark failed with error -22 [ 159.460657][ T5991] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 159.684302][ T5991] usb 1-1: USB disconnect, device number 10 [ 160.295510][ T38] kauditd_printk_skb: 16 callbacks suppressed [ 160.295529][ T38] audit: type=1326 audit(1756904099.878:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6216 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62085debe9 code=0x7fc00000 [ 162.160058][ T6238] wlan0 speed is unknown, defaulting to 1000 [ 162.161572][ T6238] wlan0 speed is unknown, defaulting to 1000 [ 162.228255][ T6238] wlan0 speed is unknown, defaulting to 1000 [ 162.347487][ T6238] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.360176][ T6238] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.436249][ T6238] wlan0 speed is unknown, defaulting to 1000 [ 162.439975][ T6238] wlan0 speed is unknown, defaulting to 1000 [ 162.443019][ T6238] wlan0 speed is unknown, defaulting to 1000 [ 162.447401][ T6238] wlan0 speed is unknown, defaulting to 1000 [ 162.450445][ T6238] wlan0 speed is unknown, defaulting to 1000 [ 162.884597][ T5925] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 163.069035][ T5925] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.069065][ T5925] usb 2-1: config 0 has no interface number 0 [ 163.069117][ T5925] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.069158][ T5925] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.069183][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.148349][ T5925] usb 2-1: config 0 descriptor?? [ 163.162210][ T5925] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 163.295231][ T6245] tipc: Started in network mode [ 163.295263][ T6245] tipc: Node identity ea5c2076893d, cluster identity 4711 [ 163.295495][ T6245] tipc: Enabled bearer , priority 0 [ 163.299034][ T6245] syzkaller0: entered promiscuous mode [ 163.299069][ T6245] syzkaller0: entered allmulticast mode [ 163.336046][ T6245] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 163.399570][ T1248] usb 2-1: USB disconnect, device number 3 [ 163.486003][ T6250] tipc: Resetting bearer [ 163.579209][ T6244] tipc: Resetting bearer [ 163.886934][ T5918] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 164.036590][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 164.039926][ T5918] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 164.039954][ T5918] usb 5-1: config 0 has no interface number 0 [ 164.040005][ T5918] usb 5-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 164.040031][ T5918] usb 5-1: config 0 interface 214 has no altsetting 0 [ 164.129884][ T5918] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 164.129915][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.129937][ T5918] usb 5-1: Product: syz [ 164.129952][ T5918] usb 5-1: Manufacturer: syz [ 164.129967][ T5918] usb 5-1: SerialNumber: syz [ 164.219246][ T6244] tipc: Disabling bearer [ 164.233258][ T5918] usb 5-1: config 0 descriptor?? [ 164.234399][ T6252] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 164.287262][ T992] tipc: Node number set to 1667309686 [ 164.640890][ T6249] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.114727][ T6262] block device autoloading is deprecated and will be removed. [ 165.556534][ T992] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.746471][ T992] usb 3-1: Using ep0 maxpacket: 32 [ 165.771875][ T992] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 165.771902][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.779355][ T992] usb 3-1: config 0 descriptor?? [ 165.864963][ T992] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 165.867517][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 165.870819][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 165.870852][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 166.537664][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 166.540819][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 166.592562][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 166.789714][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 166.792712][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 166.794753][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 166.798338][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 166.810985][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 166.819187][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 166.914665][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 166.966530][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 166.970761][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 166.971543][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 166.975617][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 166.976732][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 166.981646][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 167.099326][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 167.212155][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 167.212718][ T992] gspca_vc032x: reg_w err -71 [ 167.212732][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212743][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212752][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212762][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212771][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212781][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212790][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212800][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212809][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212819][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212828][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212837][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212846][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212856][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212865][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212873][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212882][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212892][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.212901][ T992] gspca_vc032x: Unknown sensor... [ 167.212987][ T992] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 167.249580][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 167.251293][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 167.255509][ T5918] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 167.266781][ T992] usb 3-1: USB disconnect, device number 4 [ 167.357412][ T5918] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 22:2d:09:77:94:ab [ 167.394529][ T5918] usb 5-1: USB disconnect, device number 8 [ 167.409220][ T5918] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 170.706564][ T5914] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 170.724542][ T992] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.730333][ T6294] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.96'. [ 170.817861][ T992] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.878955][ T5914] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.878983][ T5914] usb 4-1: config 0 has no interface number 0 [ 170.879158][ T5914] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.879202][ T5914] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 170.879227][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.935473][ T5914] usb 4-1: config 0 descriptor?? [ 170.950657][ T5914] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 171.577289][ T5914] usb 4-1: USB disconnect, device number 3 [ 172.679520][ T5991] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 173.326437][ T5991] usb 1-1: Using ep0 maxpacket: 32 [ 173.330686][ T5991] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 173.330715][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.419172][ T5991] usb 1-1: config 0 descriptor?? [ 173.425707][ T5991] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 174.405929][ T6319] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 174.405981][ T6319] netlink: 44 bytes leftover after parsing attributes in process `syz.1.104'. [ 175.202684][ T5991] gspca_vc032x: reg_w err -71 [ 175.202705][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202716][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202726][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202735][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202744][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202753][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202762][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202771][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202780][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202789][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202798][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202829][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202838][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202847][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202856][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202865][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202874][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202883][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.202892][ T5991] gspca_vc032x: Unknown sensor... [ 175.202987][ T5991] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 175.343547][ T5991] usb 1-1: USB disconnect, device number 11 [ 176.929439][ T6335] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.109'. [ 178.991328][ T6347] siw: device registration error -23 [ 179.716461][ T992] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 179.913631][ T992] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.913659][ T992] usb 2-1: config 0 has no interface number 0 [ 179.913715][ T992] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.913756][ T992] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.913782][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.052194][ T992] usb 2-1: config 0 descriptor?? [ 180.105234][ T992] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 180.274271][ T5925] usb 2-1: USB disconnect, device number 4 [ 180.542276][ T6359] netlink: 'syz.2.116': attribute type 2 has an invalid length. [ 180.542331][ T6359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.116'. [ 181.396454][ T5914] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.566798][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 181.572853][ T5914] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 181.572891][ T5914] usb 5-1: config 0 has no interface number 0 [ 181.572960][ T5914] usb 5-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 181.572987][ T5914] usb 5-1: config 0 interface 214 has no altsetting 0 [ 181.585915][ T5914] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 181.585947][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.585968][ T5914] usb 5-1: Product: syz [ 181.585984][ T5914] usb 5-1: Manufacturer: syz [ 181.585999][ T5914] usb 5-1: SerialNumber: syz [ 181.674701][ T5914] usb 5-1: config 0 descriptor?? [ 181.685493][ T6357] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 182.848922][ T6354] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 184.197605][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 184.479645][ T6383] netlink: 252 bytes leftover after parsing attributes in process `syz.1.124'. [ 184.479695][ T6383] dummy0: entered promiscuous mode [ 184.991177][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 185.357848][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 185.360977][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 185.361064][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 185.402003][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 185.799692][ T6391] siw: device registration error -23 [ 185.808050][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 185.808614][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 185.811130][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 185.813788][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 185.816103][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 185.873073][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 185.887333][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 185.888281][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 185.891788][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 185.892338][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 185.892900][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 185.893878][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 185.894921][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 185.895451][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 185.906566][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 186.096681][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 186.166497][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 186.196275][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 186.196878][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 186.197412][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 186.197916][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 186.198436][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 186.198952][ T5914] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 186.298989][ T5914] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 86:f0:47:7a:89:d9 [ 186.302962][ T5914] usb 5-1: USB disconnect, device number 9 [ 186.509254][ T5914] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 186.671528][ T5918] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.060571][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 187.060597][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.060611][ T5918] usb 3-1: Product: syz [ 187.060622][ T5918] usb 3-1: Manufacturer: syz [ 187.060632][ T5918] usb 3-1: SerialNumber: syz [ 187.123178][ T6411] netlink: 'syz.3.128': attribute type 2 has an invalid length. [ 187.123227][ T6411] netlink: 44 bytes leftover after parsing attributes in process `syz.3.128'. [ 189.708855][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 190.373224][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 190.373779][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 190.373848][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 190.375672][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 190.528473][ T5918] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 190.573524][ T5918] usb 3-1: USB disconnect, device number 5 [ 192.542402][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.581766][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.884895][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.908712][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.314464][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.564199][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.746494][ T5170] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 193.956509][ T5170] usb 1-1: Using ep0 maxpacket: 32 [ 193.961314][ T5170] usb 1-1: device descriptor read/all, error -71 [ 194.213271][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.801306][ T6468] siw: device registration error -23 [ 200.077302][ T6481] debugfs: 'ttyS3' already exists in 'caif_serial' [ 200.077731][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.077804][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.108809][ T5170] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 204.476848][ T5170] usb 4-1: Using ep0 maxpacket: 8 [ 205.146839][ T5170] usb 4-1: device descriptor read/all, error -71 [ 206.679120][ T5170] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 206.828775][ T5170] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.828796][ T5170] usb 4-1: config 0 has no interface number 0 [ 206.828831][ T5170] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.828850][ T5170] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.828877][ T5170] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.828894][ T5170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.882213][ T5170] usb 4-1: config 0 descriptor?? [ 206.956992][ T5170] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 207.006460][ T5903] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 207.150767][ T5170] usb 4-1: USB disconnect, device number 5 [ 207.166808][ T5903] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.166834][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.166854][ T5903] usb 3-1: config 0 has no interface number 0 [ 207.166901][ T5903] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.166944][ T5903] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.166969][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.202090][ T5903] usb 3-1: config 0 descriptor?? [ 207.456806][ T5903] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 207.482542][ T5903] usb 3-1: USB disconnect, device number 6 [ 208.449772][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 216.415351][ T38] audit: type=1326 audit(1756904155.988:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6588 comm="syz.0.169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79fc84ebe9 code=0x0 [ 220.903758][ T6626] siw: device registration error -23 [ 221.100994][ T6618] tipc: Enabling of bearer rejected, failed to enable media [ 222.406509][ T6648] netlink: 'syz.4.179': attribute type 2 has an invalid length. [ 222.406559][ T6648] netlink: 44 bytes leftover after parsing attributes in process `syz.4.179'. [ 223.303986][ T6659] netlink: 232 bytes leftover after parsing attributes in process `syz.0.183'. [ 223.304062][ T6659] vlan…: renamed from dummy0 (while UP) [ 226.103893][ T6689] bpq0: entered promiscuous mode [ 226.107032][ T5903] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 226.268507][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 226.270752][ T5903] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 226.270809][ T5903] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 226.270838][ T5903] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.270864][ T5903] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.271137][ T5903] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.289234][ T5903] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 226.289300][ T5903] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 226.289333][ T5903] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.289364][ T5903] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.289394][ T5903] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.296832][ T5903] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 226.296898][ T5903] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 226.296932][ T5903] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.296962][ T5903] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.296995][ T5903] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.538739][ T5903] usb 2-1: string descriptor 0 read error: -22 [ 226.538860][ T5903] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 226.538876][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.769506][ T5903] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 226.949197][ T5903] usb 2-1: USB disconnect, device number 5 [ 227.240492][ T6701] Zero length message leads to an empty skb [ 231.461540][ T6724] block device autoloading is deprecated and will be removed. [ 231.963839][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 231.963869][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.199'. [ 231.977851][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 231.977884][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.199'. [ 233.289657][ T6742] can0: slcan on ttyS3. [ 236.264158][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 241.114548][ T6812] siw: device registration error -23 [ 243.787326][ T6825] 9pnet_virtio: no channels available for device syz [ 251.143389][ T6872] mmap: syz.3.235 (6872) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 252.105092][ T6900] veth0_to_team: entered promiscuous mode [ 252.105126][ T6900] veth0_to_team: entered allmulticast mode [ 255.356249][ T6918] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.249'. [ 255.416499][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 255.590859][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.590887][ T10] usb 3-1: config 0 has no interface number 0 [ 255.630814][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 255.630846][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.630866][ T10] usb 3-1: Product: syz [ 255.630881][ T10] usb 3-1: Manufacturer: syz [ 255.630896][ T10] usb 3-1: SerialNumber: syz [ 255.687926][ T10] usb 3-1: config 0 descriptor?? [ 256.246927][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 256.390429][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 256.391139][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 256.391235][ T10] usb 3-1: media controller created [ 256.458548][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.549862][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.550481][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.606513][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 257.656705][ T6915] usb 3-1: dvb_usb_ec168: I2C read not implemented [ 257.796952][ T10] usb 3-1: USB disconnect, device number 7 [ 257.900342][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.915101][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.921585][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.939372][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.951174][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.989125][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.001579][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.006538][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.023928][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.041788][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.286526][ T1248] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 258.476860][ T1248] usb 1-1: Using ep0 maxpacket: 8 [ 258.479808][ T1248] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 258.479837][ T1248] usb 1-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 258.479891][ T1248] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 258.479920][ T1248] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 258.479945][ T1248] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.479989][ T1248] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.480014][ T1248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.555603][ T1248] usbtmc 1-1:16.0: bulk endpoints not found [ 258.946324][ T6936] wlan0 speed is unknown, defaulting to 1000 [ 260.575663][ T5840] Bluetooth: hci5: command tx timeout [ 261.050980][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.051061][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.165177][ T31] usb 1-1: USB disconnect, device number 14 [ 261.902268][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.262'. [ 262.459789][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.636393][ T5840] Bluetooth: hci5: command tx timeout [ 264.717067][ T5840] Bluetooth: hci5: command tx timeout [ 265.230284][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.376893][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.925303][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.148120][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.340315][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.535658][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.796473][ T5840] Bluetooth: hci5: command tx timeout [ 267.229869][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.007524][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.445615][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.612715][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.222878][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.327018][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.472213][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.588970][ T7032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.278'. [ 269.653762][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.231550][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.258949][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.330563][ T6936] chnl_net:caif_netlink_parms(): no params data found [ 275.281591][ T7065] tipc: Started in network mode [ 275.281625][ T7065] tipc: Node identity 6ecc4cc86965, cluster identity 4711 [ 275.291460][ T7065] tipc: Enabled bearer , priority 0 [ 275.327871][ T7067] syzkaller0: entered promiscuous mode [ 275.327910][ T7067] syzkaller0: entered allmulticast mode [ 275.344152][ T57] bridge_slave_1: left allmulticast mode [ 275.344597][ T57] bridge_slave_1: left promiscuous mode [ 275.355747][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.441616][ T57] bridge_slave_0: left allmulticast mode [ 275.441652][ T57] bridge_slave_0: left promiscuous mode [ 275.441951][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.407525][ T5903] tipc: Node number set to 128535752 [ 283.177227][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.431926][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.481039][ T57] bond0 (unregistering): Released all slaves [ 283.621622][ T7064] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 286.244336][ T7114] 9pnet_virtio: no channels available for device syz [ 286.669864][ T7065] tipc: Resetting bearer [ 286.921700][ T7062] tipc: Resetting bearer [ 287.207276][ T7062] tipc: Disabling bearer [ 287.983914][ T7130] hub 9-0:1.0: USB hub found [ 288.040957][ T7130] hub 9-0:1.0: 1 port detected [ 289.456479][ T1248] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 289.476443][ T5917] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 289.613104][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.613265][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.613461][ T6936] bridge_slave_0: entered allmulticast mode [ 289.647845][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 289.651175][ T6936] bridge_slave_0: entered promiscuous mode [ 289.652037][ T1248] usb 1-1: Using ep0 maxpacket: 32 [ 289.653603][ T5917] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 289.653661][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 289.653700][ T5917] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.653726][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.653752][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 289.665229][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.665393][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.668320][ T6936] bridge_slave_1: entered allmulticast mode [ 289.691909][ T6936] bridge_slave_1: entered promiscuous mode [ 289.696463][ T1248] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 289.696490][ T1248] usb 1-1: config 0 has no interface number 0 [ 289.696543][ T1248] usb 1-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 289.696569][ T1248] usb 1-1: config 0 interface 214 has no altsetting 0 [ 289.756481][ T5917] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 289.756538][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 289.756567][ T5917] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.756591][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.756616][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 289.794586][ T1248] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 289.794616][ T1248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.794638][ T1248] usb 1-1: Product: syz [ 289.794653][ T1248] usb 1-1: Manufacturer: syz [ 289.794675][ T1248] usb 1-1: SerialNumber: syz [ 289.806404][ T5917] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 289.806467][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 289.806498][ T5917] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.806525][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.806553][ T5917] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 289.896397][ T5917] usb 4-1: string descriptor 0 read error: -22 [ 289.896632][ T5917] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 289.896669][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.020328][ T1248] usb 1-1: config 0 descriptor?? [ 290.026600][ T7141] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.056237][ T5917] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 290.243601][ T5917] usb 4-1: USB disconnect, device number 6 [ 290.264768][ T7136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.199667][ T5170] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 291.263298][ T5925] wlan0 speed is unknown, defaulting to 1000 [ 291.303741][ T5925] infiniband syz1: ib_query_port failed (-19) [ 291.358465][ T5170] usb 4-1: device descriptor read/64, error -71 [ 291.657153][ T5170] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 291.787304][ T6936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.792847][ T6936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.876529][ T5170] usb 4-1: device descriptor read/64, error -71 [ 291.986997][ T5170] usb usb4-port1: attempt power cycle [ 292.154331][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 292.154871][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 292.154898][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 292.155409][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 292.155935][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 292.176518][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 292.177053][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 292.190393][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 292.201633][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 292.268605][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 292.273450][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 292.273996][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 292.274533][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 292.275044][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 292.275590][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 292.276090][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 292.636375][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 292.636918][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 292.639483][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 292.645656][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 292.721810][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 292.788155][ T7157] 9pnet_virtio: no channels available for device syz [ 292.824845][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 292.850233][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 292.890154][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 292.910263][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 292.932063][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 292.954951][ T1248] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.645101][ T1248] ax88179_178a 1-1:0.214 eth5: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, ea:6c:7c:d5:ce:af [ 293.673992][ T1248] usb 1-1: USB disconnect, device number 15 [ 293.687078][ T1248] ax88179_178a 1-1:0.214 eth5: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 293.726469][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 293.876709][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 293.965126][ T7170] hub 9-0:1.0: USB hub found [ 293.966387][ T7170] hub 9-0:1.0: 1 port detected [ 294.947573][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 294.947632][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 294.947660][ T45] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.947687][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.947714][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.954846][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 294.954910][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 294.954940][ T45] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.954966][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.955004][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.957963][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 294.958048][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 294.958083][ T45] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.958113][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.958144][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.970384][ T45] usb 3-1: string descriptor 0 read error: -22 [ 294.970551][ T45] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 294.970578][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.599609][ T45] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 295.683858][ T6936] team0: Port device team_slave_0 added [ 295.684702][ T7171] tipc: Enabled bearer , priority 0 [ 295.767428][ T6936] team0: Port device team_slave_1 added [ 296.352327][ T57] hsr_slave_0: left promiscuous mode [ 296.395517][ T57] hsr_slave_1: left promiscuous mode [ 296.403243][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.403335][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.451430][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.451465][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.681684][ T57] veth1_macvtap: left promiscuous mode [ 296.683151][ T57] veth0_macvtap: left promiscuous mode [ 296.683507][ T57] veth1_vlan: left promiscuous mode [ 296.683872][ T57] veth0_vlan: left promiscuous mode [ 296.727238][ T5170] usb 3-1: USB disconnect, device number 8 [ 297.368647][ T5170] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 297.519199][ T5170] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.519227][ T5170] usb 3-1: config 0 has no interface number 0 [ 297.541028][ T5170] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 297.541051][ T5170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.541066][ T5170] usb 3-1: Product: syz [ 297.541076][ T5170] usb 3-1: Manufacturer: syz [ 297.541086][ T5170] usb 3-1: SerialNumber: syz [ 297.605159][ T5170] usb 3-1: config 0 descriptor?? [ 297.842292][ T5170] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 297.881822][ T5170] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 297.882189][ T5170] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 297.882240][ T5170] usb 3-1: media controller created [ 297.953557][ T5170] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.077360][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.107891][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.055366][ T5914] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 299.117355][ T5170] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 299.138594][ T7198] usb 3-1: dvb_usb_ec168: I2C read not implemented [ 299.231511][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 299.239048][ T5914] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 299.239108][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 299.239137][ T5914] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.239164][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.239191][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 299.242147][ T5914] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 299.242203][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 299.242231][ T5914] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.242258][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.242285][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 299.266429][ T5914] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 299.266491][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 299.266521][ T5914] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.266546][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.266573][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 299.396456][ T5914] usb 1-1: string descriptor 0 read error: -22 [ 299.396618][ T5914] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 299.396642][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.477115][ T5170] usb 3-1: USB disconnect, device number 9 [ 299.504253][ T5914] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 299.865624][ T45] usb 1-1: USB disconnect, device number 16 [ 299.868165][ T7215] usb 1-1: Couldn't submit interrupt_out_urb -19 [ 300.506457][ T5914] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 300.679423][ T5914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.679475][ T5914] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.682587][ T5914] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.682615][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.682636][ T5914] usb 2-1: Product: syz [ 300.682651][ T5914] usb 2-1: Manufacturer: syz [ 300.682667][ T5914] usb 2-1: SerialNumber: syz [ 300.766818][ T38] audit: type=1326 audit(1756904240.258:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7217 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62085debe9 code=0x7fc00000 [ 300.792377][ T5914] cdc_ncm 2-1:1.0: skipping garbage [ 300.792406][ T5914] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 300.792458][ T5914] cdc_ncm 2-1:1.0: bind() failure [ 300.836172][ T5914] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 300.836219][ T5914] cdc_ncm 2-1:1.1: bind() failure [ 301.026016][ T5914] usb 2-1: USB disconnect, device number 7 [ 301.244512][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 301.300707][ T7228] process 'syz.2.326' launched './file0' with NULL argv: empty string added [ 301.454382][ T45] usb 1-1: device descriptor read/64, error -71 [ 301.686815][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 302.056536][ T5170] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 302.193354][ T57] team0 (unregistering): Port device team_slave_1 removed [ 302.221257][ T5170] usb 2-1: Using ep0 maxpacket: 8 [ 302.223703][ T5170] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 302.223765][ T5170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 302.223793][ T5170] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.223819][ T5170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.223845][ T5170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.226202][ T5170] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 302.239566][ T5170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 302.239609][ T5170] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.239636][ T5170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.239664][ T5170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.310356][ T45] usb 1-1: device descriptor read/64, error -71 [ 302.319921][ T5170] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 302.319979][ T5170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 302.320008][ T5170] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.320035][ T5170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.320061][ T5170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.403131][ T5170] usb 2-1: string descriptor 0 read error: -22 [ 302.403305][ T5170] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 302.403328][ T5170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.427879][ T45] usb usb1-port1: attempt power cycle [ 302.525435][ T5170] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 302.578210][ T57] team0 (unregistering): Port device team_slave_0 removed [ 302.692939][ T5170] usb 2-1: USB disconnect, device number 8 [ 302.766599][ T45] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 302.788461][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 302.791312][ T45] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 302.791400][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 302.791428][ T45] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.791455][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.791482][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.793108][ T45] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 302.793161][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 302.793208][ T45] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.793234][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.793261][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.797429][ T45] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 302.797492][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 302.797525][ T45] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.797554][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.797583][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.809865][ T45] usb 1-1: string descriptor 0 read error: -22 [ 302.810068][ T45] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 302.810096][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.854253][ T45] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 305.044811][ T7228] team0: Device gtp0 is of different type [ 306.384878][ T7165] tipc: Disabling bearer [ 307.088295][ T5170] usb 1-1: USB disconnect, device number 19 [ 307.297323][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.297341][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.297368][ T6936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.299810][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.299823][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.299848][ T6936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.716524][ T5903] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 307.764812][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 307.866452][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 307.869050][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.869083][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.869108][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.869152][ T5903] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 307.869177][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.086413][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 308.089053][ T31] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 308.089080][ T31] usb 2-1: config 0 has no interface number 0 [ 308.089161][ T31] usb 2-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 308.089188][ T31] usb 2-1: config 0 interface 214 has no altsetting 0 [ 308.092879][ T31] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 308.092911][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.092935][ T31] usb 2-1: Product: syz [ 308.092952][ T31] usb 2-1: Manufacturer: syz [ 308.092968][ T31] usb 2-1: SerialNumber: syz [ 308.108267][ T31] usb 2-1: config 0 descriptor?? [ 308.214881][ T5903] usb 4-1: config 0 descriptor?? [ 308.227726][ T7258] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 308.650387][ T7253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 308.729612][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.729651][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.729676][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.729699][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.729725][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.729749][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.729774][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.729798][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.729831][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.729856][ T5903] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 308.854767][ T6936] hsr_slave_0: entered promiscuous mode [ 308.856191][ T6936] hsr_slave_1: entered promiscuous mode [ 308.872680][ T6936] debugfs: 'hsr0' already exists in 'hsr' [ 308.872711][ T6936] Cannot create hsr debugfs directory [ 308.956898][ T5903] hid-multitouch 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 309.093151][ T5903] usb 4-1: USB disconnect, device number 10 [ 309.326416][ T5170] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 309.480101][ T5170] usb 1-1: Using ep0 maxpacket: 8 [ 309.482407][ T5170] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 309.482467][ T5170] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.482494][ T5170] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.482518][ T5170] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.482542][ T5170] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.484312][ T5170] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 309.484364][ T5170] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.484393][ T5170] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.484418][ T5170] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.484445][ T5170] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.486131][ T5170] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 309.486184][ T5170] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.486212][ T5170] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.511669][ T5170] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.511696][ T5170] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.662696][ T7274] fido_id[7274]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 309.683349][ T5170] usb 1-1: string descriptor 0 read error: -22 [ 309.683561][ T5170] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 309.683588][ T5170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.836595][ T5170] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 309.859048][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 309.860197][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 309.860224][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 309.947356][ T45] usb 1-1: USB disconnect, device number 20 [ 310.471181][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 310.473501][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 310.473898][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 310.486597][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 310.489549][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 310.490186][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 310.490779][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 310.491366][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 310.496126][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 310.499521][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 310.500278][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 310.504411][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 310.506115][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 310.516535][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 310.518832][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 310.520631][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 310.526037][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 310.528491][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 310.531990][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 310.536340][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 310.541340][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 310.896494][ T31] ax88179_178a 2-1:0.214 eth5: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 1a:01:c5:da:8d:99 [ 311.028196][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 311.076452][ T31] usb 2-1: USB disconnect, device number 9 [ 311.127068][ T31] ax88179_178a 2-1:0.214 eth5: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 311.158517][ T45] usb 1-1: device descriptor read/64, error -71 [ 311.197867][ T1248] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 311.346457][ T1248] usb 4-1: Using ep0 maxpacket: 8 [ 311.359956][ T1248] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 311.360028][ T1248] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.360062][ T1248] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.360092][ T1248] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.360121][ T1248] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.372381][ T1248] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 311.372463][ T1248] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.372493][ T1248] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.372519][ T1248] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.372546][ T1248] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.374007][ T1248] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 311.374071][ T1248] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.374102][ T1248] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.374134][ T1248] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.374163][ T1248] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.397255][ T45] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 311.526473][ T45] usb 1-1: device descriptor read/64, error -71 [ 311.580492][ T1248] usb 4-1: string descriptor 0 read error: -22 [ 311.580650][ T1248] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 311.580673][ T1248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.637744][ T45] usb usb1-port1: attempt power cycle [ 311.876571][ T1248] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 311.991923][ T45] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 312.091892][ T45] usb 1-1: device descriptor read/8, error -71 [ 312.157129][ T1248] usb 4-1: USB disconnect, device number 11 [ 313.227241][ T7313] team0: Device gtp0 is of different type [ 314.636571][ T7314] syzkaller0: entered promiscuous mode [ 314.636606][ T7314] syzkaller0: entered allmulticast mode [ 314.829788][ T7331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.349'. [ 315.328103][ T7338] netlink: 220 bytes leftover after parsing attributes in process `syz.2.351'. [ 315.405874][ T6936] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 315.813294][ T6936] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.946493][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 319.119314][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 319.121716][ T5925] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 319.121782][ T5925] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 319.121811][ T5925] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.121855][ T5925] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.121882][ T5925] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.123366][ T5925] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 319.123420][ T5925] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 319.123448][ T5925] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.123475][ T5925] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.123502][ T5925] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.125017][ T5925] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 319.125077][ T5925] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 319.125107][ T5925] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.125135][ T5925] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.125163][ T5925] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.361584][ T5925] usb 2-1: string descriptor 0 read error: -22 [ 319.361723][ T5925] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 319.361741][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.486768][ T5925] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 319.687064][ T5903] usb 2-1: USB disconnect, device number 10 [ 320.022435][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.027140][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.038966][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.048068][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.048852][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.540146][ T7380] can0 (unregistered): slcan off ttyS3. [ 321.951822][ T7399] netlink: 220 bytes leftover after parsing attributes in process `syz.1.364'. [ 322.076759][ T5848] Bluetooth: hci4: command tx timeout [ 322.459046][ T7395] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.459207][ T7395] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 322.483200][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.483283][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.431779][ T7395] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 325.161085][ T5848] Bluetooth: hci4: command 0x040f tx timeout [ 327.527884][ T5848] Bluetooth: hci4: command 0x040f tx timeout [ 329.510056][ T7452] netlink: 220 bytes leftover after parsing attributes in process `syz.2.377'. [ 329.605915][ T5848] Bluetooth: hci4: command 0x040f tx timeout [ 331.677721][ T5848] Bluetooth: hci4: command 0x040f tx timeout [ 331.821320][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 332.016570][ T9] usb 4-1: device descriptor read/64, error -71 [ 332.277982][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 332.479906][ T9] usb 4-1: device descriptor read/64, error -71 [ 332.656711][ T9] usb usb4-port1: attempt power cycle [ 333.076500][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 333.185372][ T9] usb 4-1: device descriptor read/8, error -71 [ 333.436392][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 333.626971][ T9] usb 4-1: device descriptor read/8, error -71 [ 333.663724][ T38] audit: type=1800 audit(1756904273.198:32): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.382" name="bus" dev="ramfs" ino=13863 res=0 errno=0 [ 333.748433][ T9] usb usb4-port1: unable to enumerate USB device [ 333.756743][ T5848] Bluetooth: hci4: command 0x040f tx timeout [ 333.930425][ T7377] chnl_net:caif_netlink_parms(): no params data found [ 333.992896][ T3522] bridge_slave_1: left allmulticast mode [ 333.992934][ T3522] bridge_slave_1: left promiscuous mode [ 333.993188][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.225616][ T3522] bridge_slave_0: left allmulticast mode [ 334.225652][ T3522] bridge_slave_0: left promiscuous mode [ 334.225935][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.084488][ T7490] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.385'. [ 337.437755][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.689562][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.858989][ T3522] bond0 (unregistering): Released all slaves [ 341.606389][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 341.806371][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 341.848086][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 341.848146][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 341.848177][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.848204][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 341.848233][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 341.849520][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 341.849575][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 341.849607][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.849635][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 341.849663][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 341.850852][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 341.850911][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 341.850942][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.850970][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 341.850997][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 341.854624][ T9] usb 4-1: string descriptor 0 read error: -22 [ 341.854778][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 341.854804][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.006697][ T5914] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 342.096818][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 342.146462][ T5914] usb 1-1: device descriptor read/64, error -71 [ 342.406454][ T5914] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 342.486510][ T3522] hsr_slave_0: left promiscuous mode [ 342.536487][ T5914] usb 1-1: device descriptor read/64, error -71 [ 342.616546][ T3522] hsr_slave_1: left promiscuous mode [ 342.623761][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.647524][ T5914] usb usb1-port1: attempt power cycle [ 342.900563][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.206433][ T9] usb 4-1: USB disconnect, device number 16 [ 343.213374][ T7521] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 343.426432][ T5914] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 343.451389][ T5914] usb 1-1: device descriptor read/8, error -71 [ 343.686465][ T5914] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 343.708074][ T5914] usb 1-1: device descriptor read/8, error -71 [ 343.806703][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 343.826861][ T5914] usb usb1-port1: unable to enumerate USB device [ 343.956493][ T10] usb 4-1: device descriptor read/64, error -71 [ 343.976400][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 344.126387][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 344.128974][ T31] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 344.129032][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 344.129072][ T31] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 344.129100][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 344.129128][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 344.130642][ T31] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 344.130697][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 344.130726][ T31] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 344.130752][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 344.130778][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 344.132257][ T31] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 344.132311][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 344.132341][ T31] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 344.132368][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 344.132397][ T31] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 344.172901][ T31] usb 2-1: string descriptor 0 read error: -22 [ 344.173073][ T31] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 344.173100][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.216455][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 344.366536][ T10] usb 4-1: device descriptor read/64, error -71 [ 344.435039][ T31] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 344.493678][ T10] usb usb4-port1: attempt power cycle [ 344.610195][ T31] usb 2-1: USB disconnect, device number 11 [ 344.846443][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 344.948013][ T10] usb 4-1: device descriptor read/8, error -71 [ 346.102380][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 346.398906][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 347.076492][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 347.236293][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 347.244312][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 347.244371][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 347.244400][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.244427][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.244455][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 347.246411][ T5918] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 347.287268][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 347.287342][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 347.287377][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.287407][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.287439][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 347.289009][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 347.289069][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 347.289103][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.289133][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.289164][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 347.293845][ T10] usb 2-1: string descriptor 0 read error: -22 [ 347.294013][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 347.294044][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.326820][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 347.396372][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 347.401342][ T5918] usb 3-1: no configurations [ 347.401362][ T5918] usb 3-1: can't read configurations, error -22 [ 347.566465][ T5918] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 347.716493][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 347.717413][ T5918] usb 3-1: no configurations [ 347.717429][ T5918] usb 3-1: can't read configurations, error -22 [ 347.717838][ T5918] usb usb3-port1: attempt power cycle [ 348.056461][ T5918] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 348.092881][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 348.094086][ T5918] usb 3-1: no configurations [ 348.094101][ T5918] usb 3-1: can't read configurations, error -22 [ 348.216408][ T5918] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 348.238510][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 348.239721][ T5918] usb 3-1: no configurations [ 348.239738][ T5918] usb 3-1: can't read configurations, error -22 [ 348.240143][ T5918] usb usb3-port1: unable to enumerate USB device [ 351.132275][ T7377] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.132465][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.132709][ T7377] bridge_slave_0: entered allmulticast mode [ 351.136178][ T7377] bridge_slave_0: entered promiscuous mode [ 351.177762][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.195624][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.195868][ T7377] bridge_slave_1: entered allmulticast mode [ 351.218464][ T7377] bridge_slave_1: entered promiscuous mode [ 352.215479][ T7377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.378260][ T7377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.158973][ T9] usb 2-1: USB disconnect, device number 12 [ 353.691466][ T7377] team0: Port device team_slave_0 added [ 353.738663][ T7377] team0: Port device team_slave_1 added [ 354.115562][ T38] audit: type=1326 audit(1756904293.688:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 354.140335][ T38] audit: type=1326 audit(1756904293.728:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 354.140376][ T38] audit: type=1326 audit(1756904293.728:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 354.140409][ T38] audit: type=1326 audit(1756904293.728:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 354.140441][ T38] audit: type=1326 audit(1756904293.728:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 354.142899][ T38] audit: type=1326 audit(1756904293.728:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 354.818940][ T7377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.818958][ T7377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.818989][ T7377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.896892][ T7377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.896906][ T7377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.896928][ T7377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.806464][ T5925] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 355.952531][ T7377] hsr_slave_0: entered promiscuous mode [ 355.953492][ T7377] hsr_slave_1: entered promiscuous mode [ 355.954122][ T7377] debugfs: 'hsr0' already exists in 'hsr' [ 355.954139][ T7377] Cannot create hsr debugfs directory [ 355.988788][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 355.995044][ T5925] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 355.995094][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 355.995115][ T5925] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.995133][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.995152][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.088426][ T5925] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 356.088484][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.088514][ T5925] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.088541][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.088567][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.203337][ T5925] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 356.203403][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.203432][ T5925] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.203460][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.203488][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.361498][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 356.361637][ T5925] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 356.361655][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.459001][ T5925] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 356.792400][ T5925] usb 4-1: USB disconnect, device number 21 [ 358.701043][ T5917] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 358.871903][ T7615] debugfs: 'ttyS3' already exists in 'caif_serial' [ 358.976457][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 358.978640][ T5917] usb 2-1: no configurations [ 358.978653][ T5917] usb 2-1: can't read configurations, error -22 [ 359.107593][ T5917] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 359.261171][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 359.262016][ T5917] usb 2-1: no configurations [ 359.262028][ T5917] usb 2-1: can't read configurations, error -22 [ 359.262472][ T5917] usb usb2-port1: attempt power cycle [ 359.616512][ T5917] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 359.637624][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 359.640082][ T5917] usb 2-1: no configurations [ 359.640100][ T5917] usb 2-1: can't read configurations, error -22 [ 359.766380][ T5917] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 359.797333][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 359.798370][ T5917] usb 2-1: no configurations [ 359.798387][ T5917] usb 2-1: can't read configurations, error -22 [ 359.798911][ T5917] usb usb2-port1: unable to enumerate USB device [ 361.280283][ T7648] team0: Device gtp0 is of different type [ 361.766369][ T38] audit: type=1326 audit(1756904301.338:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7640 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62085debe9 code=0x7fc00000 [ 362.941885][ T7660] team0: Device gtp0 is of different type [ 364.334249][ T7667] netlink: 252 bytes leftover after parsing attributes in process `syz.0.423'. [ 366.826618][ T5917] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 366.980755][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.980813][ T5917] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.023822][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.023854][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.023874][ T5917] usb 1-1: Product: syz [ 367.023889][ T5917] usb 1-1: Manufacturer: syz [ 367.023903][ T5917] usb 1-1: SerialNumber: syz [ 367.464336][ T5917] cdc_ncm 1-1:1.0: skipping garbage [ 367.464359][ T5917] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 367.464403][ T5917] cdc_ncm 1-1:1.0: bind() failure [ 367.578985][ T5917] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 367.579047][ T5917] cdc_ncm 1-1:1.1: bind() failure [ 367.642392][ T5917] usb 1-1: USB disconnect, device number 29 [ 367.807871][ T7377] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.898819][ T7377] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.046635][ T7377] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.141775][ T7377] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.600750][ T38] audit: type=1326 audit(1756904308.188:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91db1ebe9 code=0x7fc00000 [ 368.600812][ T38] audit: type=1326 audit(1756904308.188:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91db1ebe9 code=0x7fc00000 [ 368.600862][ T38] audit: type=1326 audit(1756904308.188:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91db1ebe9 code=0x7fc00000 [ 368.600910][ T38] audit: type=1326 audit(1756904308.188:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91db1ebe9 code=0x7fc00000 [ 368.600956][ T38] audit: type=1326 audit(1756904308.188:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91db1ebe9 code=0x7fc00000 [ 369.260515][ T7377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.487596][ T7377] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.801745][ T38] audit: type=1800 audit(1756904310.378:45): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.434" name="bus" dev="ramfs" ino=14275 res=0 errno=0 [ 370.806667][ T7725] Lens A: ================= START STATUS ================= [ 370.806687][ T7725] Lens A: Focus, Absolute: 0 [ 370.806733][ T7725] Lens A: ================== END STATUS ================== [ 370.904747][ T7726] veth0_to_team: entered promiscuous mode [ 370.904869][ T7726] veth0_to_team: entered allmulticast mode [ 371.139467][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.139708][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.200273][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.200543][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.276800][ T7377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.560102][ T38] audit: type=1326 audit(1756904317.148:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7778 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546435ebe9 code=0x7fc00000 [ 379.676349][ T5991] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 379.771549][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.788516][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.796012][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.816156][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.822276][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.963623][ T5991] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.963655][ T5991] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 379.963680][ T5991] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.032977][ T5991] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 380.033001][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 380.033016][ T5991] usb 4-1: Product: syz [ 380.033026][ T5991] usb 4-1: Manufacturer: syz [ 380.033037][ T5991] usb 4-1: SerialNumber: syz [ 380.516563][ T5991] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 380.744565][ T5925] usb 4-1: USB disconnect, device number 22 [ 380.818582][ T5925] usblp0: removed [ 381.926740][ T5848] Bluetooth: hci4: command tx timeout [ 382.027870][ T7826] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.452'. [ 383.957645][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.957733][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.367249][ T38] audit: type=1326 audit(1756904324.938:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7838 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91db1ebe9 code=0x7fc00000 [ 401.563009][ T1325] ================================================================== [ 401.563032][ T1325] BUG: KASAN: slab-use-after-free in handle_tx+0x466/0x610 [ 401.563071][ T1325] Read of size 1 at addr ffff88805ea2b480 by task aoe_tx0/1325 [ 401.563089][ T1325] [ 401.563120][ T1325] CPU: 1 UID: 0 PID: 1325 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.563146][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.563167][ T1325] Call Trace: [ 401.563176][ T1325] [ 401.563185][ T1325] dump_stack_lvl+0x189/0x250 [ 401.563226][ T1325] ? __virt_addr_valid+0x1c8/0x5c0 [ 401.563243][ T1325] ? rcu_is_watching+0x15/0xb0 [ 401.563275][ T1325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.563307][ T1325] ? rcu_is_watching+0x15/0xb0 [ 401.563339][ T1325] ? lock_release+0x4b/0x3e0 [ 401.563366][ T1325] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 401.563398][ T1325] ? __virt_addr_valid+0x1c8/0x5c0 [ 401.563417][ T1325] ? __virt_addr_valid+0x4a5/0x5c0 [ 401.563437][ T1325] print_report+0xca/0x240 [ 401.563463][ T1325] ? handle_tx+0x466/0x610 [ 401.563483][ T1325] kasan_report+0x118/0x150 [ 401.563512][ T1325] ? handle_tx+0x466/0x610 [ 401.563538][ T1325] handle_tx+0x466/0x610 [ 401.563569][ T1325] dev_hard_start_xmit+0x2f0/0x870 [ 401.563610][ T1325] __dev_queue_xmit+0x1b50/0x3b70 [ 401.563636][ T1325] ? __dev_queue_xmit+0x26f/0x3b70 [ 401.563659][ T1325] ? do_raw_spin_lock+0x121/0x290 [ 401.563684][ T1325] ? __pfx___dev_queue_xmit+0x10/0x10 [ 401.563699][ T1325] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 401.563721][ T1325] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.563743][ T1325] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 401.563766][ T1325] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 401.563791][ T1325] ? __lock_acquire+0xab9/0xd20 [ 401.563813][ T1325] ? rt_mutex_slowunlock+0x493/0x8a0 [ 401.563832][ T1325] ? reacquire_held_locks+0x127/0x1d0 [ 401.563856][ T1325] ? rt_spin_lock+0x1bb/0x2c0 [ 401.563873][ T1325] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 401.563894][ T1325] ? rt_spin_unlock+0x65/0x80 [ 401.563913][ T1325] tx+0x6b/0x190 [ 401.563929][ T1325] ? __pfx_tx+0x10/0x10 [ 401.563944][ T1325] kthread+0x1cd/0x3e0 [ 401.563972][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.563995][ T1325] ? __pfx_default_wake_function+0x10/0x10 [ 401.564012][ T1325] ? __kthread_parkme+0x7b/0x200 [ 401.564035][ T1325] ? __kthread_parkme+0x1a1/0x200 [ 401.564059][ T1325] kthread+0x70e/0x8a0 [ 401.564084][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.564107][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.564134][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.564159][ T1325] ret_from_fork+0x3f9/0x770 [ 401.564181][ T1325] ? __pfx_ret_from_fork+0x10/0x10 [ 401.564211][ T1325] ? __switch_to_asm+0x39/0x70 [ 401.564226][ T1325] ? __switch_to_asm+0x33/0x70 [ 401.564241][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.564266][ T1325] ret_from_fork_asm+0x1a/0x30 [ 401.564289][ T1325] [ 401.564294][ T1325] [ 401.564298][ T1325] Allocated by task 6470: [ 401.564306][ T1325] kasan_save_track+0x3e/0x80 [ 401.564323][ T1325] __kasan_kmalloc+0x93/0xb0 [ 401.564341][ T1325] __kmalloc_cache_noprof+0x1a8/0x320 [ 401.564363][ T1325] alloc_tty_struct+0xa6/0x7c0 [ 401.564384][ T1325] tty_init_dev+0x59/0x4d0 [ 401.564404][ T1325] tty_open+0x5b7/0xd20 [ 401.564418][ T1325] chrdev_open+0x4cf/0x5e0 [ 401.564439][ T1325] do_dentry_open+0x9b1/0x1350 [ 401.564452][ T1325] vfs_open+0x3b/0x350 [ 401.564463][ T1325] path_openat+0x2ef1/0x3840 [ 401.564479][ T1325] do_filp_open+0x1fa/0x410 [ 401.564495][ T1325] do_sys_openat2+0x121/0x1c0 [ 401.564508][ T1325] __x64_sys_openat+0x138/0x170 [ 401.564522][ T1325] do_syscall_64+0xfa/0x3b0 [ 401.564543][ T1325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.564559][ T1325] [ 401.564563][ T1325] Freed by task 5925: [ 401.564570][ T1325] kasan_save_track+0x3e/0x80 [ 401.564586][ T1325] kasan_save_free_info+0x46/0x50 [ 401.564600][ T1325] __kasan_slab_free+0x5b/0x80 [ 401.564618][ T1325] kfree+0x195/0x550 [ 401.564636][ T1325] process_scheduled_works+0xade/0x17b0 [ 401.564654][ T1325] worker_thread+0x8a0/0xda0 [ 401.564672][ T1325] kthread+0x70e/0x8a0 [ 401.564694][ T1325] ret_from_fork+0x3f9/0x770 [ 401.564713][ T1325] ret_from_fork_asm+0x1a/0x30 [ 401.564727][ T1325] [ 401.564731][ T1325] Last potentially related work creation: [ 401.564736][ T1325] kasan_save_stack+0x3e/0x60 [ 401.564753][ T1325] kasan_record_aux_stack+0xbd/0xd0 [ 401.564766][ T1325] insert_work+0x3d/0x330 [ 401.564782][ T1325] __queue_work+0xd63/0x1010 [ 401.564830][ T1325] queue_work_on+0x181/0x270 [ 401.564849][ T1325] tty_release_struct+0xb8/0xd0 [ 401.564871][ T1325] tty_release+0xcb6/0x1650 [ 401.564891][ T1325] __fput+0x458/0xa80 [ 401.564904][ T1325] task_work_run+0x1d4/0x260 [ 401.564918][ T1325] do_exit+0x6b5/0x2300 [ 401.564930][ T1325] do_group_exit+0x21c/0x2d0 [ 401.564943][ T1325] get_signal+0x125e/0x1310 [ 401.564961][ T1325] arch_do_signal_or_restart+0x9a/0x750 [ 401.564979][ T1325] exit_to_user_mode_loop+0x75/0x110 [ 401.564999][ T1325] do_syscall_64+0x2bd/0x3b0 [ 401.565020][ T1325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.565034][ T1325] [ 401.565038][ T1325] The buggy address belongs to the object at ffff88805ea2b000 [ 401.565038][ T1325] which belongs to the cache kmalloc-cg-2k of size 2048 [ 401.565053][ T1325] The buggy address is located 1152 bytes inside of [ 401.565053][ T1325] freed 2048-byte region [ffff88805ea2b000, ffff88805ea2b800) [ 401.565071][ T1325] [ 401.565075][ T1325] The buggy address belongs to the physical page: [ 401.565095][ T1325] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ea29000 pfn:0x5ea28 [ 401.565116][ T1325] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 401.565129][ T1325] memcg:ffff88805a74b401 [ 401.565137][ T1325] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 401.565155][ T1325] page_type: f5(slab) [ 401.565170][ T1325] raw: 0080000000000240 ffff88801984b3c0 ffffea0001722e10 ffffea00017f0410 [ 401.565186][ T1325] raw: ffff88805ea29000 0000000000080004 00000000f5000000 ffff88805a74b401 [ 401.565206][ T1325] head: 0080000000000240 ffff88801984b3c0 ffffea0001722e10 ffffea00017f0410 [ 401.565221][ T1325] head: ffff88805ea29000 0000000000080004 00000000f5000000 ffff88805a74b401 [ 401.565236][ T1325] head: 0080000000000003 ffffea00017a8a01 00000000ffffffff 00000000ffffffff [ 401.565250][ T1325] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 401.565259][ T1325] page dumped because: kasan: bad access detected [ 401.565272][ T1325] page_owner tracks the page as allocated [ 401.565277][ T1325] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5918, tgid 5918 (kworker/1:5), ts 167298952083, free_ts 167220286248 [ 401.565308][ T1325] post_alloc_hook+0x240/0x2a0 [ 401.565330][ T1325] get_page_from_freelist+0x2119/0x21b0 [ 401.565345][ T1325] __alloc_frozen_pages_noprof+0x181/0x370 [ 401.565360][ T1325] alloc_pages_mpol+0xd1/0x380 [ 401.565381][ T1325] allocate_slab+0x8a/0x370 [ 401.565395][ T1325] ___slab_alloc+0x8d1/0xdd0 [ 401.565418][ T1325] __kmalloc_node_track_caller_noprof+0x14c/0x450 [ 401.565440][ T1325] kmemdup_noprof+0x2b/0x70 [ 401.565458][ T1325] neigh_sysctl_register+0x9f/0xa80 [ 401.565478][ T1325] addrconf_sysctl_register+0xb3/0x1c0 [ 401.565496][ T1325] ipv6_add_dev+0xd84/0x13c0 [ 401.565518][ T1325] addrconf_notify+0x794/0x1010 [ 401.565534][ T1325] notifier_call_chain+0x1b3/0x3e0 [ 401.565554][ T1325] register_netdevice+0x163c/0x1b10 [ 401.565577][ T1325] register_netdev+0x40/0x60 [ 401.565599][ T1325] usbnet_probe+0x1c4e/0x28b0 [ 401.565612][ T1325] page last free pid 5852 tgid 5852 stack trace: [ 401.565621][ T1325] __free_frozen_pages+0xb59/0xce0 [ 401.565643][ T1325] __put_partials+0x159/0x1a0 [ 401.565655][ T1325] __slab_free+0x2b3/0x390 [ 401.565670][ T1325] qlist_free_all+0x97/0x140 [ 401.565686][ T1325] kasan_quarantine_reduce+0x148/0x160 [ 401.565703][ T1325] __kasan_slab_alloc+0x22/0x80 [ 401.565721][ T1325] __kmalloc_noprof+0x1a5/0x430 [ 401.565741][ T1325] tomoyo_encode+0x28b/0x550 [ 401.565761][ T1325] tomoyo_realpath_from_path+0x58d/0x5d0 [ 401.565783][ T1325] tomoyo_path_perm+0x213/0x4b0 [ 401.565799][ T1325] tomoyo_path_unlink+0xa2/0xe0 [ 401.565822][ T1325] security_path_unlink+0x167/0x360 [ 401.565836][ T1325] do_unlinkat+0x2c1/0x570 [ 401.565854][ T1325] __x64_sys_unlink+0x47/0x50 [ 401.565872][ T1325] do_syscall_64+0xfa/0x3b0 [ 401.565893][ T1325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.565908][ T1325] [ 401.565911][ T1325] Memory state around the buggy address: [ 401.565920][ T1325] ffff88805ea2b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.565932][ T1325] ffff88805ea2b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.565943][ T1325] >ffff88805ea2b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.565953][ T1325] ^ [ 401.565973][ T1325] ffff88805ea2b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.565984][ T1325] ffff88805ea2b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.565992][ T1325] ================================================================== [ 401.566016][ T1325] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 401.566033][ T1325] CPU: 1 UID: 0 PID: 1325 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.566057][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.566071][ T1325] Call Trace: [ 401.566079][ T1325] [ 401.566086][ T1325] dump_stack_lvl+0x99/0x250 [ 401.566111][ T1325] ? __asan_memcpy+0x40/0x70 [ 401.566127][ T1325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.566150][ T1325] ? __pfx__printk+0x10/0x10 [ 401.566173][ T1325] vpanic+0x281/0x750 [ 401.566208][ T1325] ? __pfx_vpanic+0x10/0x10 [ 401.566236][ T1325] ? irqentry_exit+0x74/0x90 [ 401.566265][ T1325] panic+0xb9/0xc0 [ 401.566287][ T1325] ? __pfx_panic+0x10/0x10 [ 401.566311][ T1325] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 401.566333][ T1325] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 401.566357][ T1325] ? is_module_address+0x17/0xf0 [ 401.566375][ T1325] ? handle_tx+0x466/0x610 [ 401.566392][ T1325] check_panic_on_warn+0x89/0xb0 [ 401.566407][ T1325] ? handle_tx+0x466/0x610 [ 401.566423][ T1325] end_report+0x78/0x160 [ 401.566443][ T1325] kasan_report+0x129/0x150 [ 401.566465][ T1325] ? handle_tx+0x466/0x610 [ 401.566484][ T1325] handle_tx+0x466/0x610 [ 401.566507][ T1325] dev_hard_start_xmit+0x2f0/0x870 [ 401.566538][ T1325] __dev_queue_xmit+0x1b50/0x3b70 [ 401.566556][ T1325] ? __dev_queue_xmit+0x26f/0x3b70 [ 401.566573][ T1325] ? do_raw_spin_lock+0x121/0x290 [ 401.566595][ T1325] ? __pfx___dev_queue_xmit+0x10/0x10 [ 401.566610][ T1325] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 401.566631][ T1325] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.566653][ T1325] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 401.566674][ T1325] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 401.566699][ T1325] ? __lock_acquire+0xab9/0xd20 [ 401.566721][ T1325] ? rt_mutex_slowunlock+0x493/0x8a0 [ 401.566739][ T1325] ? reacquire_held_locks+0x127/0x1d0 [ 401.566764][ T1325] ? rt_spin_lock+0x1bb/0x2c0 [ 401.566780][ T1325] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 401.566800][ T1325] ? rt_spin_unlock+0x65/0x80 [ 401.566819][ T1325] tx+0x6b/0x190 [ 401.566853][ T1325] ? __pfx_tx+0x10/0x10 [ 401.566867][ T1325] kthread+0x1cd/0x3e0 [ 401.566894][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.566918][ T1325] ? __pfx_default_wake_function+0x10/0x10 [ 401.566934][ T1325] ? __kthread_parkme+0x7b/0x200 [ 401.566957][ T1325] ? __kthread_parkme+0x1a1/0x200 [ 401.566982][ T1325] kthread+0x70e/0x8a0 [ 401.567007][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.567030][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.567056][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.567081][ T1325] ret_from_fork+0x3f9/0x770 [ 401.567103][ T1325] ? __pfx_ret_from_fork+0x10/0x10 [ 401.567127][ T1325] ? __switch_to_asm+0x39/0x70 [ 401.567142][ T1325] ? __switch_to_asm+0x33/0x70 [ 401.567158][ T1325] ? __pfx_kthread+0x10/0x10 [ 401.567182][ T1325] ret_from_fork_asm+0x1a/0x30 [ 401.567211][ T1325] [ 401.567541][ T1325] Kernel Offset: disabled