last executing test programs: 1m17.851762511s ago: executing program 3 (id=283): sched_setscheduler(0x0, 0x2, 0x0) socket(0x22, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x8, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x408, 0x4000000, 0x2, 0xff, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1m17.329103295s ago: executing program 3 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m16.771209128s ago: executing program 3 (id=288): bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r0 = syz_io_uring_setup(0x3de6, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x1bb}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 1m16.486740778s ago: executing program 3 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 1m16.254457068s ago: executing program 3 (id=294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x8}, 0x0) 1m15.901025736s ago: executing program 3 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "fbffffffffffffff", "1fd33c81cf7995313c09de00fd6ded74", '\x00', "1e00040000000100"}, 0x28) write$binfmt_script(r0, 0x0, 0x0) 1m15.345814961s ago: executing program 32 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "fbffffffffffffff", "1fd33c81cf7995313c09de00fd6ded74", '\x00', "1e00040000000100"}, 0x28) write$binfmt_script(r0, 0x0, 0x0) 23.460882918s ago: executing program 0 (id=651): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 23.137774605s ago: executing program 0 (id=655): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100000000000000000000000032c5"], 0x2c}, 0x1, 0x0, 0x0, 0x20048010}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 22.868824213s ago: executing program 0 (id=657): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x10, 0x8, 0x3}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 22.746952434s ago: executing program 0 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000080)='./file0/file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 22.559560083s ago: executing program 0 (id=661): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3c, 0x8) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) 22.132852995s ago: executing program 0 (id=666): r0 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x2880, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f000000a040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000380)="ef", 0x1}], 0x1}}, {{&(0x7f0000000980)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000002140)="df", 0x1}], 0x1}}], 0x2, 0x40080) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r3, 0x100}, 0x8) 21.798048445s ago: executing program 33 (id=666): r0 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x2880, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f000000a040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000380)="ef", 0x1}], 0x1}}, {{&(0x7f0000000980)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000002140)="df", 0x1}], 0x1}}], 0x2, 0x40080) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r3, 0x100}, 0x8) 6.784517137s ago: executing program 4 (id=764): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x20, 0x9, 0x2, "ccfc"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.270469687s ago: executing program 6 (id=667): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4.147504385s ago: executing program 4 (id=776): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) 3.684850132s ago: executing program 4 (id=779): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xce1, &(0x7f0000000100)={0x0, 0x8ddc, 0x10310, 0xfffffffe, 0x4a}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 3.424961743s ago: executing program 6 (id=782): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x17, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=[{0x3, 0x2, 0xe, 0x2}], 0x10, 0x81}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 3.283257999s ago: executing program 2 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x2, 0x2, 0x4, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 3.195815319s ago: executing program 4 (id=784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.916769921s ago: executing program 1 (id=787): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1}, 0x9}], 0x1, 0x40022001, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, 0x0, 0x4) 2.717325104s ago: executing program 2 (id=788): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xab8a, 0x3080, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) 2.706359538s ago: executing program 1 (id=790): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0x0, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) 2.517913059s ago: executing program 6 (id=791): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1, 0xc, 0x6, 0x10, 0x72}, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x0, 0x0}]}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, 0x0}, 0x68) 2.419734015s ago: executing program 1 (id=792): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40012162) 2.41883282s ago: executing program 4 (id=793): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.361395546s ago: executing program 5 (id=794): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 2.083573755s ago: executing program 1 (id=795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x1a0, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x16c, 0x2, [@TCA_FW_ACT={0x168, 0x4, [@m_simple={0x110, 0x17, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '\xc8^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1270, 0x0, 0x0, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x6, 0xffffffffffffffff, 0xff, 0x8}}]}, {0xaa, 0x6, "cd74896bc9df123d61f8c524ae04aa2c99cb293e39afbda987de59db73deca85d2054f5e83779b4e5d7bd29c38867f4bc628754ddbb8389765b714b0e0de944465a316914ba4e9793ef272e60c0811b1ae3ff1a330bdd4ffe37aea06168b1c076d386c93dce236404942be2ffc7061f40effd30ca4b85b286e5e9e386eaf215fc66c4d302995841b6d1fa152193ae32bd8fe7b670c73acc3bd0bc5689cb566ea56bb434e395b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x28, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 1.9919424s ago: executing program 2 (id=796): r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000000000ffff94d4ff000000000000d63175a60600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"0e337b42cc00d331ff0007000000000000001a00", r5}) 1.956258385s ago: executing program 5 (id=797): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x35, r1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 1.658041969s ago: executing program 2 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) close(r2) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 1.468326674s ago: executing program 5 (id=799): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = gettid() timer_delete(r1) tkill(r2, 0x12) 1.387586179s ago: executing program 1 (id=800): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x4, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x42) 1.293148689s ago: executing program 4 (id=801): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000004c0)='P') 1.158362214s ago: executing program 2 (id=802): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f0000001380)=""/229, 0xe5) 996.698369ms ago: executing program 5 (id=803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="c4a37d047df80066baf80cb8a8250188ef66bafc0c66ed660f1c71093665460f01cfb92b0a0000b863000000ba000000000f30f6b3e29f00000fc738f30fbdc2b9800000c00f3235000800000f300f015800", 0x52}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 852.689863ms ago: executing program 1 (id=804): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 656.831509ms ago: executing program 6 (id=805): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000280)={0x0, 0x31, 0x4, "6adef7fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 554.476047ms ago: executing program 5 (id=806): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000008c0)="89e62494ef80ce9d03e999b5169cd79c65", 0x11}], 0x1}}], 0x1, 0x20000040) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 194.381641ms ago: executing program 5 (id=807): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet(0x2, 0xa, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x0, 0xf}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x12, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x12, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0xffbf) 0s ago: executing program 2 (id=808): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) kernel console output (not intermixed with test programs): ibutes in process `syz.3.28'. [ 104.723616][ T6012] gtp0: entered promiscuous mode [ 104.728662][ T6012] gtp0: entered allmulticast mode [ 104.768477][ T6012] Zero length message leads to an empty skb [ 104.921604][ T5849] usb 2-1: USB disconnect, device number 2 [ 104.965135][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.082371][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.164250][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 105.219496][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 105.243082][ T10] usb 1-1: config 0 has no interface number 0 [ 105.249296][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 105.277714][ T6028] loop8: detected capacity change from 0 to 16385 [ 105.300705][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 105.325200][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.352025][ T10] usb 1-1: Product: syz [ 105.356285][ T10] usb 1-1: Manufacturer: syz [ 105.379811][ T10] usb 1-1: SerialNumber: syz [ 105.436843][ T10] usb 1-1: config 0 descriptor?? [ 106.641151][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.37'. [ 106.942502][ T10] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 106.951061][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 106.972311][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 107.012959][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 107.039996][ T10] usb 1-1: USB disconnect, device number 2 [ 107.627013][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.804814][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.825150][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.853917][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 107.863606][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.879493][ T10] usb 2-1: config 0 descriptor?? [ 107.911400][ T5918] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.941513][ T5940] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.062595][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 108.092849][ T5918] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.113306][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.131515][ T5918] usb 5-1: config 0 has no interface number 0 [ 108.141534][ T5940] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.150916][ T5918] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.166289][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.174739][ T5918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.187468][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.198075][ T5940] usb 1-1: config 0 descriptor?? [ 108.218411][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 108.263965][ T5918] usb 5-1: config 0 descriptor?? [ 108.308540][ T5918] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 108.393927][ T10] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 108.500414][ T5918] usb 5-1: USB disconnect, device number 2 [ 108.647114][ T5940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 108.681531][ T5940] pwc: recv_control_msg error -32 req 02 val 2700 [ 108.691183][ T5940] pwc: recv_control_msg error -32 req 02 val 2c00 [ 108.704002][ T5940] pwc: recv_control_msg error -32 req 04 val 1000 [ 108.932282][ T5940] pwc: recv_control_msg error -71 req 04 val 1400 [ 108.945815][ T5940] pwc: recv_control_msg error -71 req 02 val 2000 [ 108.958003][ T5940] pwc: recv_control_msg error -71 req 02 val 2100 [ 108.967815][ T5940] pwc: recv_control_msg error -71 req 04 val 1500 [ 108.978478][ T5940] pwc: recv_control_msg error -71 req 02 val 2500 [ 109.007218][ T5940] pwc: recv_control_msg error -71 req 02 val 2400 [ 109.020898][ T5940] pwc: recv_control_msg error -71 req 02 val 2600 [ 109.038735][ T5940] pwc: recv_control_msg error -71 req 02 val 2900 [ 109.066383][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 109.082292][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 109.093204][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 109.134113][ T5940] pwc: Registered as video103. [ 109.164147][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 109.206925][ T5940] usb 1-1: USB disconnect, device number 3 [ 109.319098][ T10] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 109.335156][ T10] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 109.349023][ T10] kovaplus 0003:1E7D:2D50.0001: probe with driver kovaplus failed with error -71 [ 109.375842][ T10] usb 2-1: USB disconnect, device number 3 [ 109.630589][ T6098] bridge0: entered allmulticast mode [ 109.652345][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 109.661208][ T6098] bridge_slave_1: left allmulticast mode [ 109.697726][ T6098] bridge_slave_1: left promiscuous mode [ 109.717981][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.807846][ T6098] bridge_slave_0: left allmulticast mode [ 109.815189][ T6098] bridge_slave_0: left promiscuous mode [ 109.848100][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.892920][ T6098] bridge0 (unregistering): left allmulticast mode [ 110.826921][ T30] audit: type=1326 audit(1751993387.063:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 110.969260][ T30] audit: type=1326 audit(1751993387.063:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e558 code=0x7ffc0000 [ 111.041784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.071320][ T30] audit: type=1326 audit(1751993387.083:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e558 code=0x7ffc0000 [ 111.121442][ T5848] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.176489][ T30] audit: type=1326 audit(1751993387.083:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e558 code=0x7ffc0000 [ 111.271337][ T30] audit: type=1326 audit(1751993387.083:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e558 code=0x7ffc0000 [ 111.333863][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.401119][ T30] audit: type=1326 audit(1751993387.083:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e558 code=0x7ffc0000 [ 111.411418][ T5848] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 111.500558][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.519514][ T30] audit: type=1326 audit(1751993387.093:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e558 code=0x7ffc0000 [ 111.577121][ T5848] usb 4-1: config 0 descriptor?? [ 111.611534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.620213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.631693][ T5848] pwc: Askey VC010 type 2 USB webcam detected. [ 111.682229][ T30] audit: type=1326 audit(1751993387.093:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e558 code=0x7ffc0000 [ 111.765789][ T30] audit: type=1326 audit(1751993387.093:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e558 code=0x7ffc0000 [ 111.849348][ T30] audit: type=1326 audit(1751993387.093:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e558 code=0x7ffc0000 [ 112.025066][ T5848] pwc: recv_control_msg error -32 req 02 val 2b00 [ 112.049698][ T5848] pwc: recv_control_msg error -32 req 02 val 2700 [ 112.065245][ T5848] pwc: recv_control_msg error -32 req 02 val 2c00 [ 112.073167][ T5848] pwc: recv_control_msg error -32 req 04 val 1000 [ 112.283170][ T5848] pwc: recv_control_msg error -71 req 04 val 1400 [ 112.301960][ T5848] pwc: recv_control_msg error -71 req 02 val 2000 [ 112.315422][ T5848] pwc: recv_control_msg error -71 req 02 val 2100 [ 112.323281][ T5848] pwc: recv_control_msg error -71 req 04 val 1500 [ 112.342628][ T5848] pwc: recv_control_msg error -71 req 02 val 2500 [ 112.366726][ T5848] pwc: recv_control_msg error -71 req 02 val 2400 [ 112.382459][ T5848] pwc: recv_control_msg error -71 req 02 val 2600 [ 112.389656][ T5848] pwc: recv_control_msg error -71 req 02 val 2900 [ 112.401623][ T5848] pwc: recv_control_msg error -71 req 02 val 2800 [ 112.408875][ T5848] pwc: recv_control_msg error -71 req 04 val 1100 [ 112.441503][ T5848] pwc: recv_control_msg error -71 req 04 val 1200 [ 112.462359][ T5848] pwc: Registered as video103. [ 112.470419][ T5848] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 112.551995][ T5848] usb 4-1: USB disconnect, device number 2 [ 112.917900][ T6163] loop7: detected capacity change from 0 to 16384 [ 113.204453][ T5848] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.401624][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 113.409962][ T5848] usb 1-1: config 0 has no interfaces? [ 113.422351][ T5848] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 113.439937][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.448561][ T5848] usb 1-1: Product: syz [ 113.453144][ T5848] usb 1-1: Manufacturer: syz [ 113.457793][ T5848] usb 1-1: SerialNumber: syz [ 113.474137][ T5848] usb 1-1: config 0 descriptor?? [ 113.711679][ T5849] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.752284][ T6163] I/O error, dev loop7, sector 3624 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 113.767389][ T6163] I/O error, dev loop7, sector 3880 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 113.786217][ T6163] I/O error, dev loop7, sector 4104 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 113.796444][ T6163] I/O error, dev loop7, sector 3624 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.810521][ T6163] Buffer I/O error on dev loop7, logical block 453, async page read [ 113.820724][ T6163] I/O error, dev loop7, sector 3624 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.833170][ T6163] Buffer I/O error on dev loop7, logical block 453, async page read [ 113.843443][ T6163] I/O error, dev loop7, sector 3624 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.853358][ T6163] Buffer I/O error on dev loop7, logical block 453, async page read [ 113.871430][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 113.914451][ T5849] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 113.924411][ T10] usb 1-1: USB disconnect, device number 4 [ 113.930520][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.933933][ T5849] usb 5-1: config 0 descriptor?? [ 113.945049][ T6162] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 113.945089][ T6162] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 113.945468][ T6162] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 113.945552][ T6162] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 113.945634][ T6162] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 113.945712][ T6162] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 113.945792][ T6162] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 113.945873][ T6162] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 114.029659][ T5849] gspca_main: sunplus-2.14.0 probing 041e:400b [ 114.040604][ T6162] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 114.092289][ T6162] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 114.122909][ T6162] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x800 phys_seg 69 prio class 0 [ 115.341949][ T5848] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.500846][ T5849] gspca_sunplus: reg_w_riv err -71 [ 115.511392][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 115.520511][ T5849] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 115.542117][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.582209][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.590938][ T5849] usb 5-1: USB disconnect, device number 3 [ 115.640336][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.686050][ T5848] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.729085][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.762712][ T5848] usb 3-1: config 0 descriptor?? [ 116.410893][ T5848] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 116.452067][ T5848] microsoft 0003:045E:07DA.0002: no inputs found [ 116.474498][ T5848] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 116.525199][ T5848] usb 3-1: USB disconnect, device number 2 [ 116.601496][ T5849] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.611889][ T6239] fido_id[6239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 116.791471][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 116.808138][ T5849] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 116.825331][ T5849] usb 5-1: config 0 has no interface number 0 [ 116.835001][ T5849] usb 5-1: config 0 interface 180 has no altsetting 0 [ 116.857773][ T5849] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 116.868544][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.889786][ T5849] usb 5-1: Product: syz [ 116.901380][ T5849] usb 5-1: Manufacturer: syz [ 116.910907][ T5849] usb 5-1: SerialNumber: syz [ 116.924348][ T5849] usb 5-1: config 0 descriptor?? [ 116.966247][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 117.163395][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.188515][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 117.201586][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.212866][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 117.228582][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.260032][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.282132][ T10] usb 4-1: Manufacturer: syz [ 117.336937][ T10] usb 4-1: config 0 descriptor?? [ 117.495125][ T5849] viperboard 5-1:0.180: version 0.00 found at bus 005 address 004 [ 117.590483][ T5849] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 117.612799][ T5849] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 117.681373][ T10] rc_core: IR keymap rc-hauppauge not found [ 117.696015][ T5849] usb 5-1: USB disconnect, device number 4 [ 117.701313][ T10] Registered IR keymap rc-empty [ 117.707381][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.734619][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.776476][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 117.795929][ T5940] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.823148][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 117.848373][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.871924][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.932903][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.952560][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.970962][ T5940] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 117.980696][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.989738][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.997239][ T5940] usb 1-1: Product: syz [ 118.001852][ T5940] usb 1-1: Manufacturer: syz [ 118.006543][ T5940] usb 1-1: SerialNumber: syz [ 118.016244][ T5940] usb 1-1: config 0 descriptor?? [ 118.034422][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.056998][ T5940] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 118.063549][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.082313][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.112736][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.151505][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.188091][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 118.206470][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 118.222583][ T10] usb 4-1: USB disconnect, device number 3 [ 119.074852][ T5849] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.263542][ T5849] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.281333][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.322965][ T5849] usb 2-1: config 0 descriptor?? [ 119.352504][ T5849] cp210x 2-1:0.0: cp210x converter detected [ 119.491732][ T5940] gspca_sunplus: reg_r err -71 [ 119.496658][ T5940] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 119.521895][ T5940] usb 1-1: USB disconnect, device number 5 [ 119.769454][ T5849] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 119.928120][ T30] kauditd_printk_skb: 169 callbacks suppressed [ 119.928140][ T30] audit: type=1326 audit(1751993396.173:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.3.128" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 120.037585][ T5849] usb 2-1: cp210x converter now attached to ttyUSB0 [ 120.251173][ T5849] usb 2-1: USB disconnect, device number 4 [ 120.382603][ T5849] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.466239][ T6315] netlink: 988 bytes leftover after parsing attributes in process `syz.0.134'. [ 120.491783][ T5849] cp210x 2-1:0.0: device disconnected [ 121.191701][ T5940] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 121.406629][ T5940] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.422811][ T5940] usb 3-1: config 0 has no interface number 0 [ 121.464992][ T5940] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 121.497762][ T5940] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 121.551323][ T5940] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.560488][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.630993][ T5940] usb 3-1: config 0 descriptor?? [ 121.643864][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 121.657799][ T6321] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.705246][ T6339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.143'. [ 121.726003][ T5940] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 121.980199][ T5918] usb 3-1: USB disconnect, device number 3 [ 121.986274][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 122.391819][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.563187][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 122.613067][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.638783][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.663656][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.683859][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.729675][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.750408][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.999956][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 123.024184][ T24] usbtmc 4-1:16.0: can't read capabilities [ 123.257249][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.281581][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.291043][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.300196][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.309384][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.342615][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.351807][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.391480][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.400673][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.409793][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.418898][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.429842][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.439032][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.448186][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.462876][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.472054][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.506881][ T5940] usb 4-1: USB disconnect, device number 4 [ 123.574300][ T6391] syzkaller1: entered promiscuous mode [ 123.579869][ T6391] syzkaller1: entered allmulticast mode [ 123.926175][ T6395] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 124.064051][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'. [ 124.120937][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'. [ 124.828430][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 124.931566][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.173'. [ 125.011376][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.177866][ T24] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 125.197010][ T24] usb 3-1: config 0 has no interface number 0 [ 125.216678][ T24] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 125.236359][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.253980][ T24] usb 3-1: Product: syz [ 125.269612][ T24] usb 3-1: Manufacturer: syz [ 125.281359][ T24] usb 3-1: SerialNumber: syz [ 125.298155][ T24] usb 3-1: config 0 descriptor?? [ 125.361739][ T5938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.521542][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 125.546247][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.589687][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.632137][ T5938] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.665361][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.694345][ T5938] usb 4-1: config 0 descriptor?? [ 125.721375][ T5938] hub 4-1:0.0: USB hub found [ 125.924016][ T5938] hub 4-1:0.0: 1 port detected [ 126.292803][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 126.407683][ T24] asix 3-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 126.437601][ T24] asix 3-1:0.239: probe with driver asix failed with error -71 [ 126.465936][ T24] usb 3-1: USB disconnect, device number 4 [ 126.568763][ T5939] hub 4-1:0.0: activate --> -90 [ 126.801759][ T5918] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 126.865588][ T6465] loop2: detected capacity change from 0 to 7 [ 126.877069][ T6027] Dev loop2: unable to read RDB block 7 [ 126.887406][ T6027] loop2: unable to read partition table [ 126.894225][ T6027] loop2: partition table beyond EOD, truncated [ 126.923662][ T6465] Dev loop2: unable to read RDB block 7 [ 126.935630][ T6465] loop2: unable to read partition table [ 126.966234][ T6465] loop2: partition table beyond EOD, truncated [ 127.000921][ T6465] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 127.032366][ T5918] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 127.048855][ T5918] usb 1-1: config 0 has no interface number 0 [ 127.094727][ T5849] usb 4-1: USB disconnect, device number 5 [ 127.111323][ T5918] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 127.171270][ T5918] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 127.229408][ T5918] usb 1-1: config 0 interface 230 has no altsetting 0 [ 127.258855][ T5918] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 127.275230][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.284554][ T5918] usb 1-1: Product: syz [ 127.288863][ T5918] usb 1-1: Manufacturer: syz [ 127.298694][ T5918] usb 1-1: SerialNumber: syz [ 127.320356][ T6471] syzkaller1: entered promiscuous mode [ 127.332321][ T5918] usb 1-1: config 0 descriptor?? [ 127.339073][ T6457] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.353544][ T6471] syzkaller1: entered allmulticast mode [ 127.365849][ T6457] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.384827][ T5918] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 127.437643][ T5918] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 127.888386][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 127.931517][ T5940] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.082589][ T5848] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.091640][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 128.097716][ T5940] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 128.107882][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.119722][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.131729][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.146286][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.158009][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.172048][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.186808][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.198971][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.211041][ T5940] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 128.220418][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 128.229257][ T5940] usb 3-1: SerialNumber: syz [ 128.237182][ T5940] usb 3-1: config 0 descriptor?? [ 128.242306][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 128.250209][ T5848] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 128.267851][ T5940] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 128.279515][ T5848] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.293388][ T5848] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.309182][ T5848] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.319771][ T5848] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.340642][ T5848] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.350030][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.487033][ T6486] input: syz1 as /devices/virtual/input/input9 [ 128.538943][ T5201] bcm5974 3-1:0.0: could not read from device [ 128.556872][ T5201] bcm5974 3-1:0.0: could not read from device [ 128.559246][ T5940] usb 3-1: USB disconnect, device number 5 [ 128.579939][ T5201] bcm5974 3-1:0.0: could not read from device [ 128.591428][ T5848] usb 2-1: GET_CAPABILITIES returned 0 [ 128.607266][ T5848] usbtmc 2-1:16.0: can't read capabilities [ 128.913297][ T5940] usb 2-1: USB disconnect, device number 5 [ 128.919962][ T6493] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 129.566546][ T6523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.210'. [ 129.575936][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 129.974944][ T5918] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 130.010882][ T5918] usb 1-1: USB disconnect, device number 6 [ 130.164038][ T6533] netlink: 112 bytes leftover after parsing attributes in process `syz.3.215'. [ 131.371155][ T6559] syz_tun: entered allmulticast mode [ 131.430178][ T6557] syz_tun: left allmulticast mode [ 132.230610][ T6581] loop4: detected capacity change from 0 to 7 [ 132.270612][ T6581] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 132.321526][ T6581] loop4: p1 start 1600481121 is beyond EOD, truncated [ 132.328405][ T6581] loop4: p2 size 1346830336 extends beyond EOD, truncated [ 132.413020][ T6581] loop4: p3 start 1572963 is beyond EOD, truncated [ 132.419620][ T6581] loop4: p4 start 1536 is beyond EOD, truncated [ 132.511458][ T6581] loop4: p5 start 12 is beyond EOD, truncated [ 132.628007][ T6027] udevd[6027]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 132.973898][ T6597] loop2: detected capacity change from 0 to 7 [ 132.996395][ T6597] Dev loop2: unable to read RDB block 7 [ 133.010117][ T6597] loop2: unable to read partition table [ 133.024855][ T6597] loop2: partition table beyond EOD, truncated [ 133.052847][ T6597] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.811377][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.001807][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 135.052614][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.071896][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.088744][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.117598][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 135.143357][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.168133][ T24] usb 3-1: config 0 descriptor?? [ 135.756921][ T6688] netlink: 'syz.1.260': attribute type 4 has an invalid length. [ 135.772783][ T6690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.261'. [ 135.816942][ T6688] netlink: 'syz.1.260': attribute type 4 has an invalid length. [ 135.875094][ T24] usb 3-1: USB disconnect, device number 6 [ 137.411564][ T5918] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.575450][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 137.587856][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.608582][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.628848][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.649099][ T5918] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 137.658968][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.689844][ T5918] usb 1-1: config 0 descriptor?? [ 137.931610][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.283'. [ 137.958278][ T6748] netlink: 'syz.3.283': attribute type 7 has an invalid length. [ 138.011143][ T6748] netlink: 'syz.3.283': attribute type 8 has an invalid length. [ 138.056202][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 138.105038][ T6748] erspan0: entered promiscuous mode [ 138.137772][ T6748] batadv_slave_1: entered promiscuous mode [ 138.154574][ T5918] hid-multitouch 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 138.172650][ T6748] gretap0: entered promiscuous mode [ 138.292327][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.300193][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.393499][ T5937] usb 1-1: USB disconnect, device number 7 [ 138.469594][ T5939] IPVS: starting estimator thread 0... [ 138.581541][ T6756] IPVS: using max 28 ests per chain, 67200 per kthread [ 138.909920][ T49] IPVS: stop unused estimator thread 0... [ 139.930336][ T6648] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.051313][ T5937] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.099977][ T6648] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.221280][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 140.235580][ T5937] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 140.272150][ T5937] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.277469][ T6648] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.300078][ T5937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.348828][ T5937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.395208][ T5937] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.418221][ T5937] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.442788][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.506173][ T6648] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.671399][ T5939] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.701495][ T5937] usb 5-1: GET_CAPABILITIES returned 0 [ 140.707095][ T5937] usbtmc 5-1:16.0: can't read capabilities [ 140.832061][ T6648] bridge_slave_1: left allmulticast mode [ 140.838083][ T6648] bridge_slave_1: left promiscuous mode [ 140.864559][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 140.888768][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.922118][ T5939] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 140.935988][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.951060][ T6648] bridge_slave_0: left allmulticast mode [ 140.981375][ T5939] usb 3-1: Product: syz [ 140.985671][ T5939] usb 3-1: Manufacturer: syz [ 140.990323][ T5939] usb 3-1: SerialNumber: syz [ 140.995962][ T6648] bridge_slave_0: left promiscuous mode [ 141.012203][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.054991][ T5937] usb 5-1: USB disconnect, device number 5 [ 141.061117][ T6784] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 141.090217][ T6800] usbtmc 5-1:16.0: usb_control_msg returned -19 [ 141.319448][ T5939] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 141.395765][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.405022][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.413859][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.431111][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.440185][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.635137][ T6648] erspan0 (unregistering): left promiscuous mode [ 141.674000][ T6648] gretap0 (unregistering): left promiscuous mode [ 142.125303][ T5937] usb 3-1: USB disconnect, device number 7 [ 142.159355][ T5937] usblp0: removed [ 142.188940][ T6648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.207572][ T6648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.218537][ T6648] bond0 (unregistering): Released all slaves [ 142.669769][ T6648] batadv_slave_1: left promiscuous mode [ 142.782662][ T6648] hsr_slave_0: left promiscuous mode [ 142.796236][ T6648] hsr_slave_1: left promiscuous mode [ 142.822298][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.829855][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.931604][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.951296][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.039442][ T6648] veth1_macvtap: left promiscuous mode [ 143.077221][ T6648] veth0_macvtap: left promiscuous mode [ 143.101623][ T6648] veth1_vlan: left promiscuous mode [ 143.107140][ T6648] veth0_vlan: left promiscuous mode [ 143.133660][ T6848] use of bytesused == 0 is deprecated and will be removed in the future, [ 143.175545][ T6848] use the actual size instead. [ 143.461726][ T5853] Bluetooth: hci4: command tx timeout [ 144.420651][ T6648] team0 (unregistering): Port device team_slave_1 removed [ 144.509622][ T6648] team0 (unregistering): Port device team_slave_0 removed [ 145.182947][ T6812] chnl_net:caif_netlink_parms(): no params data found [ 145.326312][ T6884] tipc: Failed to remove unknown binding: 66,1,1/0:378706665/378706667 [ 145.335672][ T6884] tipc: Failed to remove unknown binding: 66,1,1/0:378706665/378706667 [ 145.541368][ T5853] Bluetooth: hci4: command tx timeout [ 145.630542][ T30] audit: type=1804 audit(1751993421.863:182): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.324" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=13381 res=1 errno=0 [ 145.805699][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.838484][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.879381][ T6812] bridge_slave_0: entered allmulticast mode [ 145.916740][ T6812] bridge_slave_0: entered promiscuous mode [ 145.939126][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.984808][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.996980][ T6812] bridge_slave_1: entered allmulticast mode [ 146.010019][ T6812] bridge_slave_1: entered promiscuous mode [ 146.302293][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.333199][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.498861][ T6922] netlink: 156 bytes leftover after parsing attributes in process `syz.1.331'. [ 146.504000][ T6812] team0: Port device team_slave_0 added [ 146.568965][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 146.637136][ T6812] team0: Port device team_slave_1 added [ 146.875119][ T6930] loop9: detected capacity change from 0 to 8 [ 146.930867][ T6930] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 146.987170][ T6930] loop9: partition table partially beyond EOD, truncated [ 147.051673][ T6930] loop9: p1 size 81768186 extends beyond EOD, truncated [ 147.096594][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.103810][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.134014][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.181571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.228533][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.266098][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.396904][ T6027] udevd[6027]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 147.409998][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.621388][ T5853] Bluetooth: hci4: command tx timeout [ 147.839231][ T6812] hsr_slave_0: entered promiscuous mode [ 147.867967][ T6812] hsr_slave_1: entered promiscuous mode [ 147.887312][ T6812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.904080][ T6812] Cannot create hsr debugfs directory [ 148.512328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.521672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.552123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.603484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 148.612186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.620584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.681786][ T5918] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.891297][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 148.918905][ T5918] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 148.926555][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 148.941619][ T5918] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.973241][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.001360][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.015321][ T5918] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 149.023129][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.051908][ T5918] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.117491][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.167159][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.188588][ T5918] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 149.196711][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.211270][ T5918] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.275777][ T6812] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.284973][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.357195][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.384203][ T6812] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.409369][ T5918] usb 1-1: string descriptor 0 read error: -22 [ 149.421593][ T5918] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 149.430991][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.476901][ T6812] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.525469][ T5918] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 149.549500][ T6812] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.630689][ T6984] syzkaller0: entered promiscuous mode [ 149.640752][ T6984] syzkaller0: entered allmulticast mode [ 149.669397][ T6987] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 149.701465][ T5853] Bluetooth: hci4: command tx timeout [ 149.859084][ T5848] usb 1-1: USB disconnect, device number 8 [ 150.125279][ T6812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.199336][ T6812] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.257886][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.266065][ T6639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.365261][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.372588][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.661587][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.889199][ T6812] veth0_vlan: entered promiscuous mode [ 150.930157][ T6812] veth1_vlan: entered promiscuous mode [ 151.082093][ T6812] veth0_macvtap: entered promiscuous mode [ 151.112614][ T6812] veth1_macvtap: entered promiscuous mode [ 151.178424][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.197437][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.228041][ T6812] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.239518][ T6812] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.249736][ T6812] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.264507][ T6812] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.405330][ T5937] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 151.440694][ T6644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.464179][ T6644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.578295][ T6653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.600448][ T5937] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.613733][ T6653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.631692][ T5937] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.651045][ T5937] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.671873][ T5937] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 151.702880][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 151.715307][ T5937] usb 1-1: Product: syz [ 151.719686][ T5937] usb 1-1: Manufacturer: syz [ 151.732975][ T5937] usb 1-1: SerialNumber: syz [ 152.007889][ T5937] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 152.107308][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.146584][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.162342][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.170251][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.178476][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.186850][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.196097][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.217654][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.238053][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.257023][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.283079][ T5940] usb 1-1: USB disconnect, device number 9 [ 152.290283][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.316301][ T7033] usblp0: removed [ 152.326075][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.357520][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.371925][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.379817][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.396184][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.404636][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.420718][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.436232][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.446209][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.456497][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.464850][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.473020][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.480849][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.495868][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.509789][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.520423][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.529640][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.540596][ T5937] hid-generic 2008:0083:C0F5.0005: unknown main item tag 0x0 [ 152.595702][ T5937] hid-generic 2008:0083:C0F5.0005: hidraw0: HID v80.00 Device [syz0] on syz0 [ 152.693186][ T7062] fido_id[7062]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.223221][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.393'. [ 156.274637][ T7169] ÿ: renamed from bond_slave_0 (while UP) [ 156.907835][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 157.932924][ T5848] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.118513][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 158.160651][ T5848] usb 5-1: config index 0 descriptor too short (expected 38678, got 435) [ 158.195029][ T5848] usb 5-1: config 228 has too many interfaces: 239, using maximum allowed: 32 [ 158.231269][ T5848] usb 5-1: config 228 has an invalid descriptor of length 0, skipping remainder of the config [ 158.269185][ T5848] usb 5-1: config 228 has 0 interfaces, different from the descriptor's value: 239 [ 158.299458][ T5848] usb 5-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 158.357036][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.386285][ T5848] usb 5-1: Product: syz [ 158.395098][ T5848] usb 5-1: Manufacturer: syz [ 158.399783][ T5848] usb 5-1: SerialNumber: syz [ 158.711617][ T5940] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 158.957241][ T5940] usb 6-1: Using ep0 maxpacket: 32 [ 159.015585][ T7245] netlink: 27 bytes leftover after parsing attributes in process `syz.5.422'. [ 159.075954][ T5848] usb 5-1: USB disconnect, device number 6 [ 159.101314][ T5940] usb 6-1: unable to get BOS descriptor or descriptor too short [ 159.123005][ T5940] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 159.130676][ T5940] usb 6-1: can't read configurations, error -71 [ 160.179665][ T7281] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 161.644766][ T30] audit: type=1326 audit(1751993437.893:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.0.434" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x0 [ 162.472151][ T5918] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.653405][ T5918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.681331][ T5918] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.706228][ T5918] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.752063][ T5918] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 162.761462][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 162.769594][ T5918] usb 2-1: Product: syz [ 162.774735][ T5918] usb 2-1: Manufacturer: syz [ 162.777220][ T7336] macvlan2: entered allmulticast mode [ 162.779551][ T5918] usb 2-1: SerialNumber: syz [ 162.789964][ T7336] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 162.804060][ T7336] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 162.834210][ T7336] team0: Port device macvlan2 added [ 163.040308][ T5918] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 163.154999][ T7344] binder: 7342:7344 ioctl 4018620d 0 returned -22 [ 163.231133][ T7346] binder: 7342:7346 ioctl c018620c 0 returned -14 [ 163.292623][ T5918] usb 2-1: USB disconnect, device number 6 [ 163.306423][ T7321] usblp0: removed [ 163.683398][ T7355] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.703890][ T7355] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 164.791441][ T5918] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.966924][ T7394] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 164.987518][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 164.995861][ T7394] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 165.013203][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.013235][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.013261][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.013286][ T5918] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.013328][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.013353][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.252143][ T5918] usb 3-1: GET_CAPABILITIES returned 0 [ 165.257898][ T5918] usbtmc 3-1:16.0: can't read capabilities [ 165.508233][ T5848] usb 3-1: USB disconnect, device number 8 [ 165.646304][ T7418] loop2: detected capacity change from 0 to 7 [ 165.680946][ T7418] Dev loop2: unable to read RDB block 7 [ 165.698826][ T7418] loop2: unable to read partition table [ 165.705417][ T7418] loop2: partition table beyond EOD, truncated [ 165.713741][ T7418] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.721045][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 169.211393][ T5918] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 169.401333][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 169.437739][ T5918] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 169.461117][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.483650][ T5918] usb 6-1: Product: syz [ 169.494795][ T5918] usb 6-1: Manufacturer: syz [ 169.513114][ T5918] usb 6-1: SerialNumber: syz [ 169.576268][ T5918] usb 6-1: config 0 descriptor?? [ 169.891382][ T5918] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 170.461843][ T5938] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 170.586997][ T7545] syzkaller0: entered promiscuous mode [ 170.614743][ T7545] syzkaller0: entered allmulticast mode [ 170.626402][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 170.645026][ T7550] netlink: 'syz.4.517': attribute type 6 has an invalid length. [ 170.671868][ T5938] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 170.682912][ T7550] netlink: 'syz.4.517': attribute type 7 has an invalid length. [ 170.690608][ T7550] netlink: 'syz.4.517': attribute type 15 has an invalid length. [ 170.708284][ T5938] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.719703][ T5938] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.723831][ T7550] netlink: 'syz.4.517': attribute type 16 has an invalid length. [ 170.744480][ T7550] netlink: 'syz.4.517': attribute type 21 has an invalid length. [ 170.745826][ T5938] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.754396][ T7550] netlink: 'syz.4.517': attribute type 25 has an invalid length. [ 170.764416][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.780266][ T7550] netlink: 'syz.4.517': attribute type 27 has an invalid length. [ 170.789395][ T5938] usb 1-1: Product: syz [ 170.797542][ T7550] netlink: 'syz.4.517': attribute type 28 has an invalid length. [ 170.798757][ T5938] usb 1-1: Manufacturer: syz [ 170.806733][ T7550] netlink: 'syz.4.517': attribute type 29 has an invalid length. [ 170.820320][ T5938] usb 1-1: SerialNumber: syz [ 170.825292][ T7550] netlink: 'syz.4.517': attribute type 30 has an invalid length. [ 170.912575][ T5918] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 170.954569][ T5918] usb 6-1: USB disconnect, device number 4 [ 171.261860][ T5938] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 171.487743][ T7561] mmap: syz.4.521 (7561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.449504][ T5938] usb 1-1: USB disconnect, device number 10 [ 172.528966][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.011699][ T7569] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 173.538975][ T7591] bond1: (slave gretap1): making interface the new active one [ 173.596649][ T7591] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 173.821541][ T5848] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 173.993751][ T5848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.005668][ T5848] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 174.015400][ T5848] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 174.036707][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.099417][ T5848] usb 3-1: config 0 descriptor?? [ 174.121343][ T5938] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 174.133384][ T5848] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 174.163644][ T5848] dvb-usb: bulk message failed: -22 (3/0) [ 174.214681][ T7615] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.229543][ T5848] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 174.250275][ T5848] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 174.294325][ T5848] usb 3-1: media controller created [ 174.301842][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 174.314103][ T5938] usb 5-1: config 0 has no interfaces? [ 174.324264][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.326857][ T5938] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.368111][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.398075][ T5938] usb 5-1: Product: syz [ 174.412969][ T5938] usb 5-1: Manufacturer: syz [ 174.418303][ T5848] dvb-usb: bulk message failed: -22 (6/0) [ 174.436321][ T5938] usb 5-1: SerialNumber: syz [ 174.450073][ T5848] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 174.463454][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.474414][ T5938] usb 5-1: config 0 descriptor?? [ 174.487016][ T5848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 174.542261][ T5848] dvb-usb: schedule remote query interval to 150 msecs. [ 174.569508][ T5848] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 174.641847][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 174.687034][ T24] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 174.703378][ T24] usb 1-1: config 0 has no interface number 0 [ 174.730584][ T5848] dvb-usb: bulk message failed: -22 (1/0) [ 174.735674][ T24] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 174.767382][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.770688][ T5848] dvb-usb: error while querying for an remote control event. [ 174.814889][ T24] usb 1-1: Product: syz [ 174.842733][ T24] usb 1-1: Manufacturer: syz [ 174.847423][ T24] usb 1-1: SerialNumber: syz [ 174.904987][ T24] usb 1-1: config 0 descriptor?? [ 174.926197][ T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 174.991477][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 174.997321][ T5940] dvb-usb: error while querying for an remote control event. [ 175.028453][ T5938] usb 5-1: USB disconnect, device number 7 [ 175.091341][ T5939] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 175.171456][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 175.179610][ T5940] dvb-usb: error while querying for an remote control event. [ 175.210696][ T5849] usb 3-1: USB disconnect, device number 9 [ 175.222575][ T5848] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.241307][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 175.264813][ T5939] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 175.276835][ T5849] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 175.293065][ T5939] usb 6-1: config 0 has no interface number 0 [ 175.309324][ T5939] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.340039][ T5939] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 175.354270][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.362758][ T5939] usb 6-1: Product: syz [ 175.367367][ T5939] usb 6-1: Manufacturer: syz [ 175.374280][ T5939] usb 6-1: SerialNumber: syz [ 175.383664][ T5939] usb 6-1: config 0 descriptor?? [ 175.392049][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 175.402737][ T5939] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 175.409736][ T5848] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 175.412809][ T5939] em28xx 6-1:0.132: Video interface 132 found: [ 175.435799][ T5848] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 175.459737][ T5848] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 175.488665][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.501145][ T5848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.512005][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.525071][ T5848] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.553267][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.582364][ T5848] usb 2-1: config 0 descriptor?? [ 175.816602][ T5848] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 175.831585][ T5939] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 175.885377][ T5848] usb 2-1: USB disconnect, device number 7 [ 175.968316][ T5848] usblp0: removed [ 176.331442][ T24] gspca_topro: reg_r err -71 [ 176.336358][ T24] gspca_topro: Sensor soi763a [ 176.352682][ T24] usb 1-1: USB disconnect, device number 11 [ 176.392851][ T5940] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 176.421506][ T5848] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.499782][ T5939] em28xx 6-1:0.132: failed to read eeprom (err=-110) [ 176.514911][ T5939] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 176.581622][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 176.601511][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 176.609891][ T5848] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.636052][ T5848] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.645002][ T5940] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 176.656075][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.673778][ T5848] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.690414][ T5940] usb 3-1: Product: syz [ 176.698707][ T5940] usb 3-1: Manufacturer: syz [ 176.705920][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.716691][ T5940] usb 3-1: SerialNumber: syz [ 176.723534][ T5848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.734948][ T5940] usb 3-1: config 0 descriptor?? [ 176.742220][ T5939] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 176.750098][ T5940] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 176.750471][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.776593][ T5848] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.782140][ T5939] em28xx 6-1:0.132: analog set to bulk mode. [ 176.787491][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.804975][ T24] em28xx 6-1:0.132: Registering V4L2 extension [ 176.824204][ T5848] usb 2-1: config 0 descriptor?? [ 176.841758][ T5939] usb 6-1: USB disconnect, device number 5 [ 176.878549][ T5939] em28xx 6-1:0.132: Disconnecting em28xx [ 177.057375][ T5848] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.189945][ T24] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 177.204505][ T24] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 177.219301][ T24] em28xx 6-1:0.132: No AC97 audio processor [ 177.245849][ T24] usb 6-1: Decoder not found [ 177.250832][ T24] em28xx 6-1:0.132: failed to create media graph [ 177.281565][ T24] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 177.324218][ T24] em28xx 6-1:0.132: Remote control support is not available for this card. [ 177.358413][ T5848] usb 2-1: USB disconnect, device number 8 [ 177.363400][ T5939] em28xx 6-1:0.132: Closing input extension [ 177.385675][ T5848] usblp0: removed [ 177.424908][ T5939] em28xx 6-1:0.132: Freeing device [ 178.188144][ T5940] gspca_stk1135: reg_w 0xf err -71 [ 178.194497][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 178.200898][ T5940] gspca_stk1135: Sensor write failed [ 178.230588][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 178.261569][ T5940] gspca_stk1135: Sensor write failed [ 178.266979][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 178.287716][ T5940] gspca_stk1135: Sensor read failed [ 178.301415][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 178.307833][ T5940] gspca_stk1135: Sensor read failed [ 178.361395][ T5940] gspca_stk1135: Detected sensor type unknown (0x0) [ 178.368113][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 178.415722][ T5940] gspca_stk1135: Sensor read failed [ 178.421038][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 178.456260][ T5940] gspca_stk1135: Sensor read failed [ 178.491421][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 178.515504][ T5940] gspca_stk1135: Sensor write failed [ 178.533006][ T5940] gspca_stk1135: serial bus timeout: status=0x00 [ 178.551374][ T5940] gspca_stk1135: Sensor write failed [ 178.580715][ T5940] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 178.648569][ T5940] usb 3-1: USB disconnect, device number 10 [ 178.719620][ T7712] netlink: 156 bytes leftover after parsing attributes in process `syz.0.560'. [ 178.735041][ T5918] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 178.902825][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 178.929097][ T5918] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 178.961760][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.990294][ T5918] usb 5-1: Product: syz [ 179.000645][ T5918] usb 5-1: Manufacturer: syz [ 179.014641][ T5918] usb 5-1: SerialNumber: syz [ 179.055504][ T5918] usb 5-1: config 0 descriptor?? [ 179.291998][ T5918] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 179.343836][ T5938] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 179.382741][ T7732] loop2: detected capacity change from 0 to 7 [ 179.396932][ T7732] loop2: [POWERTEC] p1 p2 p3 [ 179.411166][ T7732] loop2: p2 start 4294967287 is beyond EOD, truncated [ 179.422535][ T7732] loop2: p3 start 1932423285 is beyond EOD, truncated [ 179.515143][ T5938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.551080][ T5938] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 179.585232][ T6003] udevd[6003]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 179.592261][ T5938] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.604608][ T5939] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.614465][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.624572][ T5938] usb 1-1: Product: syz [ 179.628863][ T5938] usb 1-1: Manufacturer: syz [ 179.634129][ T5938] usb 1-1: SerialNumber: syz [ 179.692180][ T5940] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 179.772932][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 179.794086][ T5939] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 179.807913][ T5939] usb 3-1: config 179 has no interface number 0 [ 179.815085][ T5939] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 179.834079][ T5939] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 179.863814][ T5939] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.875406][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 179.891504][ T5940] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 179.900642][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.905887][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.927846][ T5939] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 179.946299][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.964540][ T5940] usb 2-1: config 0 descriptor?? [ 179.997509][ T5939] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 180.016551][ T5938] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 180.061512][ T5939] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 180.072688][ T5938] usb 1-1: USB disconnect, device number 12 [ 180.101603][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.135532][ T7731] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 180.178549][ T5940] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 180.207395][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.277653][ T5940] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 180.327086][ T5940] usb 2-1: media controller created [ 180.346793][ T5918] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 180.417148][ T5918] usb 5-1: USB disconnect, device number 8 [ 180.456098][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.537651][ T5940] az6027: usb out operation failed. (-71) [ 180.544345][ T5937] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 180.563100][ T5938] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 180.563997][ T5940] az6027: usb out operation failed. (-71) [ 180.604566][ T5940] stb0899_attach: Driver disabled by Kconfig [ 180.624206][ T5940] az6027: no front-end attached [ 180.624206][ T5940] [ 180.671846][ T5940] az6027: usb out operation failed. (-71) [ 180.677673][ T5940] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 180.724302][ T5940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 180.741588][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 180.780197][ T5918] usb 3-1: USB disconnect, device number 11 [ 180.780307][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 180.792011][ T5937] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 180.795262][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 180.834947][ T5940] dvb-usb: schedule remote query interval to 400 msecs. [ 180.855813][ T5937] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 180.871779][ T5940] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 180.890192][ T5937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.931672][ T5940] usb 2-1: USB disconnect, device number 9 [ 180.945486][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.965702][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 181.020589][ T5937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.074765][ T5937] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.117475][ T5940] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 181.128819][ T5937] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.151425][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.420401][ T5937] usb 1-1: usb_control_msg returned -32 [ 181.431406][ T5937] usbtmc 1-1:16.0: can't read capabilities [ 181.438023][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.444196][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.451218][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.459144][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.471449][ C0] usbtmc 1-1:16.0: invalid notification: 11 [ 181.480412][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.488532][ C0] usbtmc 1-1:16.0: invalid notification: 2 [ 181.496962][ C0] usbtmc 1-1:16.0: invalid notification: 5 [ 181.506485][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.514703][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.521359][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.527715][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.534080][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.540356][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.546886][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.553075][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.559238][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.565426][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.571492][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.577564][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.583638][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.589717][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.595787][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.601879][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.607947][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.614111][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.621827][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.628215][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.634310][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.640398][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.646485][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.652573][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.658899][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.665007][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.671106][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.677228][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.683355][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.689464][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.695586][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.701820][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.707929][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.714046][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.720729][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.726890][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.732998][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.739127][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.745192][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.751429][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.757608][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.763725][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.769805][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.775888][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.782366][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.788445][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.794546][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.800655][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.806782][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.812903][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.818988][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.830779][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.837274][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.843371][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.849488][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.855825][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.862148][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.868252][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.874335][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.880422][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.886465][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.892597][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.898847][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.904962][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.911041][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.917147][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.923604][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.929892][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.936058][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.942230][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.948345][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.954554][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.960663][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.966840][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.972915][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.979041][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.985580][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.991718][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 181.997794][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.003909][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.010006][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.016102][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.022203][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.028849][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.035286][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.045375][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.051465][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.057536][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.063746][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.070747][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.076944][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.083011][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.089090][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.095197][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.101354][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.107435][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.113539][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.119636][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.125736][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.132802][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.139049][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.145140][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.151311][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.157438][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.163527][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.169605][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.175682][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.182047][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.188149][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.194337][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.200413][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.206488][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.212566][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.218718][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.224824][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.231333][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.237406][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.243499][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.249654][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.255822][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.261933][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.268087][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.274163][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.280250][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.286363][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.292414][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.298498][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.304606][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.310680][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.316796][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.322881][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.328966][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.335585][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.341683][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.347791][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.353909][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.360024][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.366118][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.372191][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.378269][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.384393][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.390478][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.396552][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.402654][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.408735][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.414905][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.421001][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.427775][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.434858][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.441254][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.450513][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.456640][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.462730][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.468818][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.474914][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.481112][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.487309][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.493397][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.499469][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.505684][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.511930][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.518024][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.524097][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.530160][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.539433][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.545979][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.552128][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.558242][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.564356][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.570419][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.576514][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.582683][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.588781][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.594928][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.601059][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.607193][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.613288][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.619379][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.625489][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.631575][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.637722][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.651846][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.658218][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.664401][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.670514][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.676677][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.682836][ C0] usbtmc 1-1:16.0: invalid notification: 0 [ 182.692452][ T5939] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.896405][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 182.916801][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 182.930924][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.956226][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.981951][ T5939] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 182.999284][ T924] usb 1-1: USB disconnect, device number 13 [ 183.025591][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.072952][ T5939] usb 2-1: config 0 descriptor?? [ 183.518380][ T5939] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 183.551258][ T5939] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 183.581272][ T5939] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 183.588279][ T5939] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 183.624502][ T5939] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 183.656951][ T5939] savu 0003:1E7D:2D5A.0006: unbalanced collection at end of report description [ 183.732310][ T5939] savu 0003:1E7D:2D5A.0006: parse failed [ 183.748391][ T5939] savu 0003:1E7D:2D5A.0006: probe with driver savu failed with error -22 [ 183.786206][ T7808] loop6: detected capacity change from 0 to 7 [ 183.799176][ T5939] usb 2-1: USB disconnect, device number 10 [ 183.849016][ T7808] Dev loop6: unable to read RDB block 7 [ 183.878805][ T7808] loop6: unable to read partition table [ 183.888992][ T7808] loop6: partition table beyond EOD, truncated [ 183.906087][ T7808] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.293360][ T7819] validate_nla: 2 callbacks suppressed [ 184.293380][ T7819] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 184.453606][ T7819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.497509][ T7825] dummy0: entered promiscuous mode [ 184.519452][ T7825] bond1: (slave dummy0): making interface the new active one [ 184.529114][ T7825] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 185.948291][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.152130][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 186.172512][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.229219][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.276998][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 186.315511][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.430316][ T10] usb 2-1: config 0 descriptor?? [ 187.051814][ T10] mcp2221 0003:04D8:00DD.0007: item fetching failed at offset 1/5 [ 187.091584][ T10] mcp2221 0003:04D8:00DD.0007: can't parse reports [ 187.132369][ T10] mcp2221 0003:04D8:00DD.0007: probe with driver mcp2221 failed with error -22 [ 187.215644][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.615'. [ 187.260789][ T10] usb 2-1: USB disconnect, device number 11 [ 188.121456][ T7900] input: syz1 as /devices/virtual/input/input13 [ 188.631412][ T5939] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 188.791390][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 188.820953][ T5939] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 188.863275][ T5939] usb 1-1: config 0 has no interface number 0 [ 188.869480][ T5939] usb 1-1: config 0 interface 184 has no altsetting 0 [ 188.915141][ T5939] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 188.930926][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.961400][ T5939] usb 1-1: Product: syz [ 188.965643][ T5939] usb 1-1: Manufacturer: syz [ 188.986017][ T5939] usb 1-1: SerialNumber: syz [ 188.993907][ T7890] netlink: 'syz.2.619': attribute type 2 has an invalid length. [ 189.009438][ T5939] usb 1-1: config 0 descriptor?? [ 189.025396][ T5939] smsc75xx v1.0.0 [ 189.121279][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 189.326489][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 189.338549][ T7914] loop2: detected capacity change from 0 to 7 [ 189.364557][ T7914] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 189.412278][ T7914] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 189.456731][ T7914] Dev loop2: unable to read RDB block 7 [ 189.488422][ T7914] loop2: unable to read partition table [ 189.513718][ T7914] loop2: partition table beyond EOD, truncated [ 189.525822][ T7914] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 189.547287][ T5216] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 189.570083][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.571743][ T5216] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 189.584716][ T10] usb 6-1: too many configurations: 105, using maximum allowed: 8 [ 189.586675][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 189.598962][ T5216] Dev loop2: unable to read RDB block 7 [ 189.617098][ T10] usb 6-1: can't read configurations, error -71 [ 189.625302][ T5216] loop2: unable to read partition table [ 189.644615][ T5216] loop2: partition table beyond EOD, truncated [ 190.444509][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 190.496660][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 190.542736][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 190.565061][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 190.581605][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 190.601382][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 190.611116][ T5939] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 190.656335][ T5939] usb 1-1: USB disconnect, device number 14 [ 192.608377][ T7998] netlink: 'syz.0.655': attribute type 4 has an invalid length. [ 192.630315][ T5939] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.814121][ T5939] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.837374][ T5939] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 192.868593][ T5939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.904851][ T5939] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 192.932077][ T5939] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 192.976163][ T5939] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.988967][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.999395][ T5939] usb 2-1: Product: syz [ 193.027250][ T5939] usb 2-1: Manufacturer: syz [ 193.063028][ T5939] cdc_wdm 2-1:1.0: skipping garbage [ 193.068332][ T5939] cdc_wdm 2-1:1.0: skipping garbage [ 193.081291][ T5938] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 193.109358][ T5939] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 193.121346][ T5939] cdc_wdm 2-1:1.0: Unknown control protocol [ 193.271469][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 193.298244][ T5938] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 193.311607][ T5938] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.341447][ T5938] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.369864][ T5938] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.389123][ T5938] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.402830][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 193.402975][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 193.407990][ T10] usb 2-1: USB disconnect, device number 12 [ 193.412997][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 193.418325][ T7995] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 193.424032][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 193.424053][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 193.472922][ T5938] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.523036][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.600363][ T6639] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.710374][ T6639] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.795095][ T5938] usb 5-1: GET_CAPABILITIES returned 0 [ 193.803283][ T5938] usbtmc 5-1:16.0: can't read capabilities [ 193.818198][ T6639] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.937745][ T6639] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.041691][ T10] usb 5-1: USB disconnect, device number 9 [ 194.228806][ T6639] bridge_slave_1: left allmulticast mode [ 194.241299][ T6639] bridge_slave_1: left promiscuous mode [ 194.271118][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.329101][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.345296][ T6639] bridge_slave_0: left allmulticast mode [ 194.351521][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.361128][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.373620][ T6639] bridge_slave_0: left promiscuous mode [ 194.379506][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.394110][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.402500][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.054070][ T8043] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 195.282607][ T6639] bond1 (unregistering): (slave gretap1): Releasing active interface [ 195.739121][ T6639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.754533][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.767075][ T6639] bond0 (unregistering): Released all slaves [ 195.789309][ T6639] bond1 (unregistering): Released all slaves [ 196.501720][ T5853] Bluetooth: hci1: command tx timeout [ 196.601907][ T5940] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 196.771406][ T6639] hsr_slave_0: left promiscuous mode [ 196.780413][ T5940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.804940][ T6639] hsr_slave_1: left promiscuous mode [ 196.811119][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.824996][ T5940] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 196.840482][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.850923][ T5940] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.862323][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.870714][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.886706][ T5940] usb 2-1: Product: syz [ 196.898224][ T5940] usb 2-1: Manufacturer: syz [ 196.900301][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.908759][ T5940] usb 2-1: SerialNumber: syz [ 196.978938][ T6639] veth1_macvtap: left promiscuous mode [ 196.987676][ T6639] veth0_macvtap: left promiscuous mode [ 196.997605][ T6639] veth1_vlan: left promiscuous mode [ 197.003157][ T6639] veth0_vlan: left promiscuous mode [ 197.156145][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.175316][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.205607][ T5940] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 197.256920][ T5940] usb 2-1: USB disconnect, device number 13 [ 197.671915][ T5940] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.851287][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 197.870853][ T5940] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 197.901298][ T5940] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 197.938530][ T5940] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.957254][ T5940] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.987985][ T5940] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 198.019468][ T5940] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.041376][ T5940] usb 2-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.065123][ T5940] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.120805][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.317409][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 198.377613][ T5940] usb 2-1: usb_control_msg returned -32 [ 198.395504][ T5940] usbtmc 2-1:16.0: can't read capabilities [ 198.407708][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 198.415814][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.422080][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.428176][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.435183][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.441327][ C0] usbtmc 2-1:16.0: invalid notification: 11 [ 198.447812][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.454127][ C0] usbtmc 2-1:16.0: invalid notification: 2 [ 198.460205][ C0] usbtmc 2-1:16.0: invalid notification: 5 [ 198.466319][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.472720][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.478790][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.484840][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.490929][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.497082][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.503245][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.509257][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.515746][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.523321][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.530416][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.536542][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.542687][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.548927][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.555092][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.561208][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.567354][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.573511][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.579603][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.585820][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.591942][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.597898][ T5853] Bluetooth: hci1: command tx timeout [ 198.603445][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.609416][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.615439][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.621920][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.627890][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.633903][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.639861][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.645948][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.651941][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.657901][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.663929][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.669880][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.676071][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.682065][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.688023][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.694052][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.700087][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.706130][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.712105][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.718055][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.724552][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.730539][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.736580][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.742666][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.748636][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.754948][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.760933][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.766941][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.772949][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.778894][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.784877][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.790826][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.796828][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.802807][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.808737][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.814670][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.820589][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.827082][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.833089][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.839017][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.844971][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.850893][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.856846][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.862834][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.868761][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.874701][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.880619][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.886669][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.892645][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.898588][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.904555][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.910486][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.916453][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.922466][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.928853][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.934841][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.940757][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.946729][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.952704][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.958693][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.964681][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.970609][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.976577][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.982560][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.988519][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 198.994478][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.000515][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.006589][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.012593][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.018559][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.024564][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.031023][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.037117][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.043265][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.049403][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.055563][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.061718][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.067802][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.074361][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.080457][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.086542][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.092629][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.098726][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.104813][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.111114][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.117187][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.123260][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.129653][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.135750][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.143755][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.149887][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.156085][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.162237][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.168350][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.174480][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.180603][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.186726][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.192936][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.198989][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.205016][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.211075][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.217131][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.223271][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.229637][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.235726][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.241778][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.247852][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.253936][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.259995][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.266049][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.272145][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.278209][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.284303][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.290376][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.297699][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.305001][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.311111][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.317204][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.323275][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.329347][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.339899][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.346167][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.352253][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.358331][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.364391][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.370492][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.376562][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.382639][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.388706][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.394763][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.400853][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.406926][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.412997][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.419090][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.426364][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.432762][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.438903][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.444978][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.451079][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.457285][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.463539][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.469672][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.475813][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.481920][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.488056][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.494186][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.500267][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.506380][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.512560][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.518701][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.524797][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.530902][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.539205][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.545626][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.551778][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.557879][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.563967][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.570049][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.576102][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.582188][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.588377][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.594482][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.600561][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.606661][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.612776][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.618887][ C0] usbtmc 2-1:16.0: invalid notification: 0 [ 199.711535][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.718168][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.821578][ T5939] usb 2-1: USB disconnect, device number 14 [ 200.291079][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 200.856520][ T8028] chnl_net:caif_netlink_parms(): no params data found [ 200.944039][ T8145] netlink: 532 bytes leftover after parsing attributes in process `syz.2.708'. [ 201.222556][ T5853] Bluetooth: hci1: command tx timeout [ 201.688201][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.701472][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.708862][ T8028] bridge_slave_0: entered allmulticast mode [ 201.753907][ T8028] bridge_slave_0: entered promiscuous mode [ 201.772119][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.801137][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.831624][ T8028] bridge_slave_1: entered allmulticast mode [ 201.839568][ T8028] bridge_slave_1: entered promiscuous mode [ 202.102765][ T8028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.136455][ T8028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.517654][ T8028] team0: Port device team_slave_0 added [ 202.558874][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.719'. [ 202.607885][ T8192] netlink: 'syz.5.719': attribute type 15 has an invalid length. [ 202.641777][ T8192] netlink: 'syz.5.719': attribute type 18 has an invalid length. [ 202.684771][ T8028] team0: Port device team_slave_1 added [ 202.764066][ T8192] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.773684][ T8192] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.782978][ T8192] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.791864][ T8192] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.806062][ T8192] vxlan0: entered promiscuous mode [ 202.908281][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.933543][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.964756][ T8028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.005755][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.018267][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.081409][ T8028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.248046][ T8028] hsr_slave_0: entered promiscuous mode [ 203.276163][ T8028] hsr_slave_1: entered promiscuous mode [ 203.292404][ T8028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.301356][ T8028] Cannot create hsr debugfs directory [ 203.301923][ T5853] Bluetooth: hci1: command tx timeout [ 204.475759][ T8240] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 204.836675][ T8247] bond2: (slave bridge0): making interface the new active one [ 204.874636][ T8247] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 205.468033][ T8028] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.520756][ T8028] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.676684][ T8028] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.737157][ T8028] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 206.468607][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.629926][ T8028] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.748529][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.755784][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.815606][ T8301] netlink: 'syz.5.749': attribute type 1 has an invalid length. [ 206.880262][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.887664][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.999471][ T8307] bond1: (slave bridge1): making interface the new active one [ 207.011098][ T8307] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 207.501556][ T5938] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 207.640764][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.705942][ T5938] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 207.721831][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.808085][ T5938] usb 6-1: config 0 descriptor?? [ 207.839369][ T5938] gspca_main: spca508-2.14.0 probing 8086:0110 [ 207.851747][ T8028] veth0_vlan: entered promiscuous mode [ 207.971941][ T8028] veth1_vlan: entered promiscuous mode [ 208.041074][ T5938] gspca_spca508: reg_read err -32 [ 208.064184][ T5938] gspca_spca508: reg_read err -32 [ 208.070347][ T5938] gspca_spca508: reg_read err -32 [ 208.086627][ T8028] veth0_macvtap: entered promiscuous mode [ 208.167546][ T8028] veth1_macvtap: entered promiscuous mode [ 208.284341][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.314336][ T5938] gspca_spca508: reg_read err -32 [ 208.333021][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.374629][ T8028] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.396550][ T8028] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.416592][ T8028] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.455990][ T8028] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.534256][ T5938] gspca_spca508: reg write: error -71 [ 208.550650][ T5938] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 208.663726][ T5938] usb 6-1: USB disconnect, device number 8 [ 208.999438][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.014649][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.107416][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.135209][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.237473][ T5938] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 209.527909][ T5938] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 209.548486][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.601387][ T5938] usb 5-1: Product: syz [ 209.605648][ T5938] usb 5-1: Manufacturer: syz [ 209.610312][ T5938] usb 5-1: SerialNumber: syz [ 209.651649][ T5938] usb 5-1: config 0 descriptor?? [ 209.659941][ T5938] ch341 5-1:0.0: ch341-uart converter detected [ 210.411327][ T5940] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 210.591539][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 210.617511][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.639318][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.663341][ T5940] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 210.692812][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.722818][ T5940] usb 3-1: config 0 descriptor?? [ 210.884530][ T5938] ch341-uart ttyUSB0: break control not supported, using simulated break [ 210.911870][ T5938] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 210.936057][ T5938] usb 5-1: USB disconnect, device number 10 [ 210.969464][ T5938] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 210.990817][ T5938] ch341 5-1:0.0: device disconnected [ 211.168615][ T5940] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 211.201926][ T5940] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 211.230268][ T5940] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 211.249496][ T5940] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 211.265988][ T5940] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 211.292829][ T5940] koneplus 0003:1E7D:2D51.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 211.334370][ T8400] syzkaller1: entered promiscuous mode [ 211.369937][ T8400] syzkaller1: entered allmulticast mode [ 211.741050][ T5937] usb 3-1: USB disconnect, device number 12 [ 213.480304][ T8461] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 213.691472][ T924] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 213.710616][ T8461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.856484][ T8466] bond3: (slave gretap1): making interface the new active one [ 213.901500][ T8466] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 213.937689][ T924] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 213.957507][ T924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.034091][ T924] usb 7-1: config 0 descriptor?? [ 214.074254][ T924] gspca_main: spca508-2.14.0 probing 8086:0110 [ 214.105789][ T8466] syz.4.793 (8466) used greatest stack depth: 19592 bytes left [ 214.275663][ T924] gspca_spca508: reg_read err -71 [ 214.301298][ T924] gspca_spca508: reg_read err -71 [ 214.312128][ T924] gspca_spca508: reg_read err -71 [ 214.365030][ T924] gspca_spca508: reg_read err -71 [ 214.381661][ T924] gspca_spca508: reg_read err -71 [ 214.429260][ T924] gspca_spca508: reg write: error -71 [ 214.455711][ T924] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 214.506680][ T8481] capability: warning: `syz.1.800' uses deprecated v2 capabilities in a way that may be insecure [ 214.571537][ T924] usb 7-1: USB disconnect, device number 2 [ 214.848280][ T5848] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 215.016572][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 215.037459][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.082081][ T5848] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 215.102628][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.169780][ T5848] usb 5-1: config 0 descriptor?? [ 215.194572][ T5937] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.373720][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.391745][ T924] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 215.426740][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.457233][ T5937] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 215.484101][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.537753][ T5937] usb 2-1: config 0 descriptor?? [ 215.579243][ T924] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 215.605921][ T924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.646770][ T924] usb 7-1: Product: syz [ 215.651122][ T924] usb 7-1: Manufacturer: syz [ 215.663616][ T8510] syzkaller1: entered promiscuous mode [ 215.678229][ T8510] syzkaller1: entered allmulticast mode [ 215.698526][ T5848] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 215.699044][ T924] usb 7-1: SerialNumber: syz [ 215.764990][ T924] usb 7-1: config 0 descriptor?? [ 215.809166][ T924] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 215.845966][ T5937] usbhid 2-1:0.0: can't add hid device: -71 [ 215.854832][ C0] ================================================================== [ 215.862979][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xfcd/0x1190 [ 215.870963][ C0] Read of size 1 at addr ffff88807b0fbfff by task syz.4.801/8485 [ 215.878730][ C0] [ 215.881112][ C0] CPU: 0 UID: 0 PID: 8485 Comm: syz.4.801 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 215.881139][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.881159][ C0] Call Trace: [ 215.881172][ C0] [ 215.881182][ C0] dump_stack_lvl+0x189/0x250 [ 215.881213][ C0] ? rcu_is_watching+0x15/0xb0 [ 215.881238][ C0] ? __kasan_check_byte+0x12/0x40 [ 215.881266][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.881288][ C0] ? rcu_is_watching+0x15/0xb0 [ 215.881310][ C0] ? lock_release+0x4b/0x3e0 [ 215.881329][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 215.881357][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 215.881388][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 215.881414][ C0] print_report+0xd2/0x2b0 [ 215.881431][ C0] ? mcp2221_raw_event+0xfcd/0x1190 [ 215.881456][ C0] kasan_report+0x118/0x150 [ 215.881480][ C0] ? mcp2221_raw_event+0xfcd/0x1190 [ 215.881510][ C0] mcp2221_raw_event+0xfcd/0x1190 [ 215.881541][ C0] ? down_trylock+0x50/0xb0 [ 215.881560][ C0] hid_input_report+0x40a/0x520 [ 215.881581][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 215.881608][ C0] hid_irq_in+0x47e/0x6d0 [ 215.881636][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 215.881667][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 215.881702][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 215.881730][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 215.881755][ C0] dummy_timer+0x862/0x4550 [ 215.881780][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.881838][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.881864][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.881887][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.881909][ C0] __hrtimer_run_queues+0x529/0xc60 [ 215.881946][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 215.881968][ C0] ? read_tsc+0x9/0x20 [ 215.881983][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 215.882009][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 215.882034][ C0] handle_softirqs+0x286/0x870 [ 215.882056][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 215.882084][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 215.882107][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 215.882136][ C0] __irq_exit_rcu+0xca/0x1f0 [ 215.882156][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 215.882180][ C0] irq_exit_rcu+0x9/0x30 [ 215.882199][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 215.882233][ C0] [ 215.882239][ C0] [ 215.882247][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.882268][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 215.882298][ C0] Code: 74 05 e8 bb 1c 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 3d 1f f6 65 8b 05 9c 9a 2e 07 85 c0 74 40 48 c7 04 24 0e 36 [ 215.882316][ C0] RSP: 0018:ffffc9000be77b60 EFLAGS: 00000206 [ 215.882335][ C0] RAX: 82523279493aee00 RBX: 0000000000000a02 RCX: 82523279493aee00 [ 215.882352][ C0] RDX: 0000000000000000 RSI: ffffffff8d997600 RDI: 0000000000000001 [ 215.882369][ C0] RBP: ffffc9000be77bf0 R08: ffffffff8fa1e5f7 R09: 1ffffffff1f43cbe [ 215.882383][ C0] R10: dffffc0000000000 R11: fffffbfff1f43cbf R12: dffffc0000000000 [ 215.882398][ C0] R13: ffffc9000be77d80 R14: ffff8880b8627ac0 R15: 1ffff920017cef6c [ 215.882421][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.882454][ C0] do_nanosleep+0x191/0x600 [ 215.882480][ C0] ? do_nanosleep+0x7f/0x600 [ 215.882510][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 215.882535][ C0] ? __hrtimer_setup+0x187/0x210 [ 215.882554][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 215.882578][ C0] hrtimer_nanosleep+0x169/0x360 [ 215.882602][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 215.882629][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 215.882657][ C0] ? __pfx_get_old_timespec32+0x10/0x10 [ 215.882688][ C0] __se_sys_clock_nanosleep_time32+0x2f3/0x380 [ 215.882711][ C0] ? __pfx___se_sys_clock_nanosleep_time32+0x10/0x10 [ 215.882734][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 215.882768][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.882803][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 215.882827][ C0] do_fast_syscall_32+0x34/0x80 [ 215.882846][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.882870][ C0] RIP: 0023:0xf712e539 [ 215.882895][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 215.882917][ C0] RSP: 002b:00000000f511d440 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 215.882941][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 215.882954][ C0] RDX: 00000000f511d474 RSI: 00000000f511d46c RDI: 00000000f511d474 [ 215.882967][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.882978][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.882991][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.883010][ C0] [ 215.883018][ C0] [ 216.366098][ C0] Allocated by task 5511: [ 216.370493][ C0] kasan_save_track+0x3e/0x80 [ 216.375214][ C0] __kasan_kmalloc+0x93/0xb0 [ 216.379910][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 216.385310][ C0] inetdev_init+0x7d/0x500 [ 216.389766][ C0] inetdev_event+0x301/0x15b0 [ 216.394480][ C0] notifier_call_chain+0x1b3/0x3e0 [ 216.399617][ C0] register_netdevice+0x1608/0x1ae0 [ 216.404852][ C0] bpq_device_event+0x491/0x600 [ 216.409734][ C0] notifier_call_chain+0x1b3/0x3e0 [ 216.414937][ C0] __dev_notify_flags+0x18d/0x2e0 [ 216.420002][ C0] netif_change_flags+0xe8/0x1a0 [ 216.424968][ C0] dev_change_flags+0x130/0x260 [ 216.429869][ C0] devinet_ioctl+0xbb4/0x1b50 [ 216.434676][ C0] inet_ioctl+0x3c0/0x4c0 [ 216.439029][ C0] sock_do_ioctl+0xdc/0x300 [ 216.443569][ C0] sock_ioctl+0x576/0x790 [ 216.447940][ C0] __se_sys_ioctl+0xf9/0x170 [ 216.452561][ C0] do_syscall_64+0xfa/0x3b0 [ 216.457103][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.463018][ C0] [ 216.465359][ C0] The buggy address belongs to the object at ffff88807b0fbc00 [ 216.465359][ C0] which belongs to the cache kmalloc-512 of size 512 [ 216.479440][ C0] The buggy address is located 511 bytes to the right of [ 216.479440][ C0] allocated 512-byte region [ffff88807b0fbc00, ffff88807b0fbe00) [ 216.494159][ C0] [ 216.496513][ C0] The buggy address belongs to the physical page: [ 216.502946][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b0f8 [ 216.511744][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 216.520267][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 216.528284][ C0] page_type: f5(slab) [ 216.532306][ C0] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 216.540927][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 216.549546][ C0] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 216.558251][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 216.566949][ C0] head: 00fff00000000002 ffffea0001ec3e01 00000000ffffffff 00000000ffffffff [ 216.575652][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 216.584349][ C0] page dumped because: kasan: bad access detected [ 216.590802][ C0] page_owner tracks the page as allocated [ 216.596543][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5223, tgid 5223 (udevd), ts 41925795077, free_ts 41849913318 [ 216.617368][ C0] post_alloc_hook+0x240/0x2a0 [ 216.622167][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 216.627743][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 216.633591][ C0] alloc_pages_mpol+0x232/0x4a0 [ 216.638485][ C0] allocate_slab+0x8a/0x3b0 [ 216.643089][ C0] ___slab_alloc+0xbfc/0x1480 [ 216.647813][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 216.653211][ C0] kernfs_fop_open+0x397/0xca0 [ 216.658012][ C0] do_dentry_open+0xdf0/0x1970 [ 216.662801][ C0] vfs_open+0x3b/0x340 [ 216.666905][ C0] path_openat+0x2ee5/0x3830 [ 216.671523][ C0] do_filp_open+0x1fa/0x410 [ 216.676066][ C0] do_sys_openat2+0x121/0x1c0 [ 216.680775][ C0] __x64_sys_openat+0x138/0x170 [ 216.685671][ C0] do_syscall_64+0xfa/0x3b0 [ 216.690195][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.696111][ C0] page last free pid 5216 tgid 5216 stack trace: [ 216.702467][ C0] __free_frozen_pages+0xc71/0xe70 [ 216.707607][ C0] __slab_free+0x326/0x400 [ 216.712056][ C0] qlist_free_all+0x97/0x140 [ 216.716664][ C0] kasan_quarantine_reduce+0x148/0x160 [ 216.722146][ C0] __kasan_slab_alloc+0x22/0x80 [ 216.727023][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 216.732954][ C0] __alloc_skb+0x112/0x2d0 [ 216.737497][ C0] netlink_sendmsg+0x5c6/0xb30 [ 216.742330][ C0] __sock_sendmsg+0x21c/0x270 [ 216.747071][ C0] ____sys_sendmsg+0x505/0x830 [ 216.751871][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 216.756665][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 216.761670][ C0] do_syscall_64+0xfa/0x3b0 [ 216.766199][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.772126][ C0] [ 216.774468][ C0] Memory state around the buggy address: [ 216.780114][ C0] ffff88807b0fbe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.788375][ C0] ffff88807b0fbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.796546][ C0] >ffff88807b0fbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.804642][ C0] ^ [ 216.812644][ C0] ffff88807b0fc000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 216.820724][ C0] ffff88807b0fc080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 216.828887][ C0] ================================================================== [ 216.836976][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 216.844192][ C0] CPU: 0 UID: 0 PID: 8485 Comm: syz.4.801 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 216.854364][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.864449][ C0] Call Trace: [ 216.867833][ C0] [ 216.870699][ C0] dump_stack_lvl+0x99/0x250 [ 216.875324][ C0] ? __asan_memcpy+0x40/0x70 [ 216.879934][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.885161][ C0] ? __pfx__printk+0x10/0x10 [ 216.889785][ C0] panic+0x2db/0x790 [ 216.893723][ C0] ? __pfx_panic+0x10/0x10 [ 216.898163][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 216.903401][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.909324][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.915687][ C0] ? mcp2221_raw_event+0xfcd/0x1190 [ 216.920919][ C0] check_panic_on_warn+0x89/0xb0 [ 216.925904][ C0] ? mcp2221_raw_event+0xfcd/0x1190 [ 216.931139][ C0] end_report+0x78/0x160 [ 216.935435][ C0] kasan_report+0x129/0x150 [ 216.939978][ C0] ? mcp2221_raw_event+0xfcd/0x1190 [ 216.945226][ C0] mcp2221_raw_event+0xfcd/0x1190 [ 216.950293][ C0] ? down_trylock+0x50/0xb0 [ 216.954831][ C0] hid_input_report+0x40a/0x520 [ 216.959719][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 216.965219][ C0] hid_irq_in+0x47e/0x6d0 [ 216.969586][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 216.974989][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 216.980918][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 216.986854][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 216.992266][ C0] dummy_timer+0x862/0x4550 [ 216.996816][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 217.003404][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 217.008386][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 217.013370][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 217.018351][ C0] __hrtimer_run_queues+0x529/0xc60 [ 217.023628][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 217.029389][ C0] ? read_tsc+0x9/0x20 [ 217.033577][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 217.039416][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 217.044583][ C0] handle_softirqs+0x286/0x870 [ 217.049407][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 217.054300][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 217.059626][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 217.064865][ C0] __irq_exit_rcu+0xca/0x1f0 [ 217.069516][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 217.074764][ C0] irq_exit_rcu+0x9/0x30 [ 217.079037][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 217.084707][ C0] [ 217.087656][ C0] [ 217.090608][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.096615][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 217.103161][ C0] Code: 74 05 e8 bb 1c 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 3d 1f f6 65 8b 05 9c 9a 2e 07 85 c0 74 40 48 c7 04 24 0e 36 [ 217.122809][ C0] RSP: 0018:ffffc9000be77b60 EFLAGS: 00000206 [ 217.128905][ C0] RAX: 82523279493aee00 RBX: 0000000000000a02 RCX: 82523279493aee00 [ 217.136900][ C0] RDX: 0000000000000000 RSI: ffffffff8d997600 RDI: 0000000000000001 [ 217.144905][ C0] RBP: ffffc9000be77bf0 R08: ffffffff8fa1e5f7 R09: 1ffffffff1f43cbe [ 217.152916][ C0] R10: dffffc0000000000 R11: fffffbfff1f43cbf R12: dffffc0000000000 [ 217.160932][ C0] R13: ffffc9000be77d80 R14: ffff8880b8627ac0 R15: 1ffff920017cef6c [ 217.168955][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 217.175335][ C0] do_nanosleep+0x191/0x600 [ 217.179878][ C0] ? do_nanosleep+0x7f/0x600 [ 217.184496][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 217.189557][ C0] ? __hrtimer_setup+0x187/0x210 [ 217.194540][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 217.199780][ C0] hrtimer_nanosleep+0x169/0x360 [ 217.204767][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 217.210277][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 217.215508][ C0] ? __pfx_get_old_timespec32+0x10/0x10 [ 217.221174][ C0] __se_sys_clock_nanosleep_time32+0x2f3/0x380 [ 217.227367][ C0] ? __pfx___se_sys_clock_nanosleep_time32+0x10/0x10 [ 217.234078][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 217.240752][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.246006][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 217.251157][ C0] do_fast_syscall_32+0x34/0x80 [ 217.256057][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.262507][ C0] RIP: 0023:0xf712e539 [ 217.266606][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 217.286245][ C0] RSP: 002b:00000000f511d440 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 217.294724][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 217.302758][ C0] RDX: 00000000f511d474 RSI: 00000000f511d46c RDI: 00000000f511d474 [ 217.310762][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.318790][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.326870][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.334886][ C0] [ 217.338254][ C0] Kernel Offset: disabled [ 217.342593][ C0] Rebooting in 86400 seconds..