last executing test programs: 6m10.891939176s ago: executing program 3 (id=362): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 6m10.618847114s ago: executing program 3 (id=364): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x437, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) 6m9.165984106s ago: executing program 3 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x11, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e1d}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 6m4.047261743s ago: executing program 3 (id=377): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x437, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) 6m2.737321725s ago: executing program 3 (id=381): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x8, 0xd, 0xfffffffc}) r1 = syz_open_dev$media(&(0x7f0000000040), 0xfd, 0x400c01) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x80000) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x22, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m59.696873947s ago: executing program 3 (id=389): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff55, &(0x7f00000002c0)=0x3fe) ptrace$peekuser(0x3, 0x0, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 5m44.365429622s ago: executing program 32 (id=389): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff55, &(0x7f00000002c0)=0x3fe) ptrace$peekuser(0x3, 0x0, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 5m14.495132168s ago: executing program 2 (id=446): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) tkill(r2, 0xb) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000840)=0x1, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x4204, 0x7, 0x9}, &(0x7f00000000c0)=0x10) close(r0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kexec_crash_size', 0x2, 0x42) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'cpuset'}, {0x2d, 'rlimit'}, {0x2d, 'blkio'}]}, 0x17) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 5m11.417347514s ago: executing program 2 (id=449): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfffffffffffffe92}, 0x90) 5m11.0171721s ago: executing program 2 (id=451): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 5m8.992736848s ago: executing program 2 (id=453): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) r4 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) 5m6.366765072s ago: executing program 2 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$isdn(0x22, 0x2, 0x22) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/216, 0xd8}], 0x1}) 5m4.022132859s ago: executing program 2 (id=459): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) 4m48.656733288s ago: executing program 33 (id=459): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) 8.626916331s ago: executing program 4 (id=949): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() pipe2(0x0, 0x4000) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000280)) 7.684447029s ago: executing program 0 (id=950): socket(0xa, 0x3, 0xff) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 7.468251514s ago: executing program 0 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) 7.003050383s ago: executing program 4 (id=953): r0 = userfaultfd(0x80801) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) r1 = eventfd2(0x4, 0x0) write$eventfd(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) lseek(0xffffffffffffffff, 0x4, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000300)={0x20, 0x24, 0x78, {0x78, 0x3, "f34e04ebc007f9555b830869fef0761b81f7aebe19fc96a351cb5720b8358b8d01bd251c184762d250bcf5191321308ee724e92210003b800e3677fcf3da9cd9b6627085dd594845405cad5946fd38f78adea9053f08a496bafaa4541eab89bbcfa4f9bdc47d751071c92355f53f89d729c0a16c1b4d"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f0000000380)={0x0, 0x22, 0x11, {[@global=@item_4={0x3, 0x1, 0x7, "7d56f22b"}, @global=@item_012={0x0, 0x1, 0xd}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, 'gz16'}, @main=@item_4={0x3, 0x0, 0xc, "44b5e536"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x65, 0x1, {0x22, 0xa4a}}}}, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x1, 0x7f, "24fe701b1e1f5062b7f9d04a31259e0eb6bc3b47ec1e195f424d3ec9302d4b4ad82d5e10411960f94225c20d0208b79bf3dad3590a467575bbfd0d81fd9a89711762140b9a9b7e091d4a000553c584622a35e092ed30305b3a314410e57e44e62d77694f0336bc80b197a3003dc0ed89cc1b77da884769731eeaec8ccaf3dd"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xc}}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 6.075546512s ago: executing program 0 (id=954): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b\x00\x00'], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b40)={0x0, @local, @remote}, &(0x7f0000000b80)=0xc) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x2, 0x4, {{0xd, 0x4, 0x2, 0x32, 0x34, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0xb, 0x7d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x7, 0x5, "c812e1"}, {0x0, 0x4, "56fb"}, {0x0, 0x4, "4197"}]}]}}}}}) 5.920891554s ago: executing program 1 (id=955): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004e40)="8ad4e3c34c781c6d6c85892028314d9e994c4b5de197604aca59cf14f089c5e446bf8c3cefa4b19af81c9644308919e71bd8128a5f8bcc7858d5e974eae853c0534ef7ee226f038c64dc5b70044910b0e7ba1e2207d4309dc72dcba2bb8893ec2fb45e9045e4339ebdc5bc38e5ce", 0x6e}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="708ac1f188f766e30b18191d75d06cc79ac72e659782db13e4cdaa6bb033967a75968413269b179e6e7b848c7b65060a7a7e8e4ea2809151f259990811ce02399662dbaf6fbcb7428f774857729f6f4134c774d50c7a28dbabf72cf21f92ec30891e81a86e53597a", 0x68}], 0x3, &(0x7f0000004a00)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729364eade, 0x1}) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 5.6259689s ago: executing program 1 (id=956): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x6000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) 4.665072951s ago: executing program 1 (id=957): epoll_create1(0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xca1, &(0x7f0000000600)={0x0, 0x24bc, 0x40, 0x0, 0x190, 0x0, r0}, &(0x7f0000000280), &(0x7f00000003c0)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e0000001"], 0x80}}, 0x0) 3.646381762s ago: executing program 1 (id=958): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0]) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r2, 0x1, 0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x1, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x4a, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.573614883s ago: executing program 4 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r3, r3, r3) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x1, &(0x7f0000000380)) geteuid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x1000) geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f00000006c0)='./file0\x00', 0x0) 2.556779452s ago: executing program 0 (id=960): socket$inet_udp(0x2, 0x2, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7ff, 0x33d4, 0x180, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x6}, 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000054c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x40000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2.535063005s ago: executing program 1 (id=961): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() pipe2(0x0, 0x4000) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000280)) 2.355106317s ago: executing program 4 (id=962): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085000000410000008500000008000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x68, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) fsopen(&(0x7f0000000000)='cgroup\x00', 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 1.419152639s ago: executing program 0 (id=963): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) 693.410815ms ago: executing program 1 (id=964): connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x307, 0x80, 0xc3, 0x7, 0x0, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xca1, &(0x7f0000000600)={0x0, 0x24bc, 0x40, 0x0, 0x190, 0x0, r0}, &(0x7f0000000280), &(0x7f00000003c0)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e0000001"], 0x80}}, 0x0) 0s ago: executing program 0 (id=967): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1400200bd2) r3 = syz_usbip_server_init(0x5) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xff, 0x40, 0x10, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x92c, 0xf588, 0xff9e, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x6, 0x5}}}}}]}}]}}, 0x0) write$usbip_server(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000003000000080000000000000001000000f90000000500000000000000000000000000000005000000000000000015bde31de3d96f3ec9f085af1f0affaabe247a44c9193181900015aa07583252e47a1871bbb876779e72a5f387d16550e074a4c18c68"], 0x30) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): onfig 0 descriptor?? [ 243.418195][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 243.568926][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 243.619752][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.619857][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.619903][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 243.619928][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.686312][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.716776][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.892169][ T9] usb 1-1: config 0 descriptor?? [ 244.586060][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 244.590184][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 245.226032][ T9] usb 1-1: USB disconnect, device number 7 [ 245.399643][ T1228] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.516799][ T1228] usb 4-1: USB disconnect, device number 12 [ 246.540720][ T6891] delete_channel: no stack [ 246.571956][ T6896] orangefs_mount: mount request failed with -4 [ 247.467924][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.503198][ T6903] ceph: No mds server is up or the cluster is laggy [ 247.594559][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 247.594795][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 248.256230][ T6926] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 249.480884][ T6918] macvlan2: entered promiscuous mode [ 249.480917][ T6918] macvlan2: entered allmulticast mode [ 249.548210][ T6918] bond2: entered promiscuous mode [ 249.564811][ T6918] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.919906][ T6918] bond2: left promiscuous mode [ 251.707959][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 252.002651][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 252.002727][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 252.002757][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.002785][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 252.002812][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 252.004382][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 252.004438][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 252.004466][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.004493][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 252.004520][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 252.005989][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 252.006044][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 252.006071][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.006098][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 252.006125][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 252.217727][ T9] usb 1-1: string descriptor 0 read error: -22 [ 252.217935][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 252.217961][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.295789][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 252.484820][ T9] usb 1-1: USB disconnect, device number 8 [ 252.579041][ T6185] udevd[6185]: setting mode of /dev/bus/usb/001/008 to 020664 failed: No such file or directory [ 252.579295][ T6185] udevd[6185]: setting owner of /dev/bus/usb/001/008 to uid=0, gid=0 failed: No such file or directory [ 255.648184][ T6044] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 256.678358][ T6044] usb 5-1: Using ep0 maxpacket: 8 [ 256.684498][ T6044] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 256.684593][ T6044] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.684617][ T6044] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.684643][ T6044] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.684668][ T6044] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.684712][ T6044] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.684736][ T6044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.057354][ T6044] usb 5-1: can't set config #16, error -71 [ 258.090332][ T6044] usb 5-1: USB disconnect, device number 7 [ 258.142847][ T7006] fuse: Invalid rootmode [ 261.060690][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.060776][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.448599][ T7057] fuse: Invalid rootmode [ 267.488300][ T6001] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 267.660540][ T6001] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.660581][ T6001] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.660627][ T6001] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.660652][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.688760][ T7081] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 267.706330][ T6001] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.898460][ T5867] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 269.660721][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 269.662809][ T5867] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 269.662945][ T5867] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.662961][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.662983][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.662996][ T5867] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.663024][ T5867] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.663038][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.094514][ T5867] usb 5-1: usb_control_msg returned -32 [ 270.094548][ T5867] usbtmc 5-1:16.0: can't read capabilities [ 270.323068][ T5867] usb 5-1: USB disconnect, device number 8 [ 271.315859][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.457486][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.827733][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.185623][ T7123] fuse: Bad value for 'fd' [ 272.195129][ T7123] fuseblk: Bad value for 'fd' [ 272.675807][ T7123] Invalid source name [ 273.740852][ T7129] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 276.158962][ T992] usb 1-1: USB disconnect, device number 9 [ 278.588190][ T1228] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 278.778169][ T1228] usb 1-1: Using ep0 maxpacket: 8 [ 278.782048][ T1228] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 278.782115][ T1228] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.782139][ T1228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.782162][ T1228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.782299][ T1228] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.782347][ T1228] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.782371][ T1228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.997007][ T7159] fuse: Bad value for 'fd' [ 279.008570][ T7159] fuseblk: Bad value for 'fd' [ 279.496701][ T7160] Invalid source name [ 279.523436][ T1228] usb 1-1: usb_control_msg returned -32 [ 279.523493][ T1228] usbtmc 1-1:16.0: can't read capabilities [ 279.884909][ T992] usb 1-1: USB disconnect, device number 10 [ 280.158361][ T1228] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 280.178198][ T5867] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 280.311421][ T1228] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.311462][ T1228] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.311508][ T1228] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.311533][ T1228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.364809][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 280.367804][ T7168] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 280.399015][ T5867] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.399049][ T5867] usb 2-1: config 0 has no interface number 0 [ 280.399113][ T5867] usb 2-1: config 0 interface 2 has no altsetting 0 [ 280.404263][ T5867] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 280.404297][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.404320][ T5867] usb 2-1: Product: syz [ 280.404335][ T5867] usb 2-1: Manufacturer: syz [ 280.404350][ T5867] usb 2-1: SerialNumber: syz [ 280.427443][ T1228] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.488792][ T5867] usb 2-1: config 0 descriptor?? [ 280.846695][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.847395][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.875589][ T5867] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.684858][ T5867] usb 2-1: USB disconnect, device number 6 [ 283.394034][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 284.148150][ T7192] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 284.194411][ T7192] Device name not specified. [ 284.194411][ T7192] [ 286.448157][ T6001] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 286.608203][ T6001] usb 1-1: Using ep0 maxpacket: 8 [ 286.649497][ T6001] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 286.649574][ T6001] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.649600][ T6001] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.649627][ T6001] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.649856][ T6001] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.649905][ T6001] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.649930][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.986060][ T5854] usb 3-1: USB disconnect, device number 6 [ 287.017557][ T6001] usb 1-1: usb_control_msg returned -32 [ 287.017615][ T6001] usbtmc 1-1:16.0: can't read capabilities [ 287.393117][ T9] usb 1-1: USB disconnect, device number 11 [ 287.848149][ T5854] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 287.998141][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 288.001997][ T5854] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 288.002025][ T5854] usb 3-1: config 0 has no interface number 0 [ 288.002106][ T5854] usb 3-1: config 0 interface 2 has no altsetting 0 [ 288.040146][ T5854] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 288.040180][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.040202][ T5854] usb 3-1: Product: syz [ 288.040218][ T5854] usb 3-1: Manufacturer: syz [ 288.040234][ T5854] usb 3-1: SerialNumber: syz [ 288.086938][ T5854] usb 3-1: config 0 descriptor?? [ 288.861364][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.861886][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.867554][ T5854] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.902293][ T5854] usb 3-1: USB disconnect, device number 7 [ 291.445214][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 293.006187][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.119041][ T7248] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 293.119072][ T7248] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 293.119248][ T7248] vhci_hcd vhci_hcd.0: Device attached [ 293.163557][ T7248] netlink: 72 bytes leftover after parsing attributes in process `syz.4.388'. [ 293.163588][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 293.163605][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 293.903350][ T6001] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 293.951536][ T7252] vhci_hcd: connection closed [ 293.953325][ T6725] vhci_hcd: stop threads [ 293.953344][ T6725] vhci_hcd: release socket [ 293.985398][ T6725] vhci_hcd: disconnect device [ 293.988221][ T992] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 293.988302][ T992] usb 41-1: enqueue for inactive port 0 [ 294.068349][ T992] vhci_hcd: vhci_device speed not set [ 294.086481][ T6001] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.086521][ T6001] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.086565][ T6001] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.086588][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.612996][ T7249] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.617328][ T6001] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.001757][ T9] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 295.258251][ T6044] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 295.267745][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 295.267792][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.267813][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.270274][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 295.270330][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.270415][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.272381][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 295.272489][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.272514][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.284333][ T9] usb 1-1: string descriptor 0 read error: -22 [ 295.284552][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 295.284576][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.478215][ T6044] usb 2-1: Using ep0 maxpacket: 8 [ 295.481404][ T6044] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 295.481478][ T6044] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.481503][ T6044] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.481529][ T6044] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.481554][ T6044] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.481600][ T6044] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.481625][ T6044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.587943][ T9] adutux 1-1:168.0: interrupt endpoints not found [ 295.770979][ T9] usb 1-1: USB disconnect, device number 12 [ 297.248866][ T6044] usb 2-1: usb_control_msg returned -32 [ 297.248919][ T6044] usbtmc 2-1:16.0: can't read capabilities [ 297.937388][ T6044] usb 2-1: USB disconnect, device number 7 [ 299.218222][ T1228] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 299.368318][ T1228] usb 3-1: Using ep0 maxpacket: 32 [ 299.374960][ T1228] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 299.375000][ T1228] usb 3-1: config 0 has no interface number 0 [ 299.375259][ T1228] usb 3-1: config 0 interface 2 has no altsetting 0 [ 299.428749][ T1228] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 299.428771][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.428783][ T1228] usb 3-1: Product: syz [ 299.429040][ T1228] usb 3-1: Manufacturer: syz [ 299.429052][ T1228] usb 3-1: SerialNumber: syz [ 299.518711][ T1228] usb 3-1: config 0 descriptor?? [ 300.300078][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.300724][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.341505][ T1228] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.989093][ T1228] usb 3-1: USB disconnect, device number 8 [ 301.446826][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 301.711049][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 305.377122][ T7299] ======================================================= [ 305.377122][ T7299] WARNING: The mand mount option has been deprecated and [ 305.377122][ T7299] and is ignored by this kernel. Remove the mand [ 305.377122][ T7299] option from the mount to silence this warning. [ 305.377122][ T7299] ======================================================= [ 306.779308][ T6044] usb 4-1: USB disconnect, device number 13 [ 309.088540][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 309.088762][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 311.389163][ T7318] ceph: No mds server is up or the cluster is laggy [ 311.396561][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 311.396821][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 312.142030][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 312.142285][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 312.145340][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 312.145569][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 313.355626][ T6001] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 313.705059][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 314.738211][ T6001] usb 1-1: Using ep0 maxpacket: 32 [ 315.748348][ T6001] usb 1-1: device descriptor read/all, error -71 [ 317.014030][ T6733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.026283][ T6733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.027938][ T6733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.051567][ T6733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.052340][ T6733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.831031][ T7359] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 318.831056][ T7359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 318.833252][ T7359] vhci_hcd vhci_hcd.0: Device attached [ 319.078187][ T7362] netlink: 72 bytes leftover after parsing attributes in process `syz.1.421'. [ 319.078207][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 319.078217][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 319.140490][ T6734] Bluetooth: hci2: command tx timeout [ 320.065495][ T6001] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 320.161065][ T7363] vhci_hcd: connection reset by peer [ 320.166064][ T5914] vhci_hcd: stop threads [ 320.166088][ T5914] vhci_hcd: release socket [ 320.166172][ T5914] vhci_hcd: disconnect device [ 321.385736][ T6734] Bluetooth: hci2: command tx timeout [ 321.402158][ T992] libceph: connect (1)[c::]:6789 error -101 [ 321.446184][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 321.463870][ T1522] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.632757][ T7376] ceph: No mds server is up or the cluster is laggy [ 323.269907][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.269960][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.474402][ T6734] Bluetooth: hci2: command tx timeout [ 323.487021][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 323.627063][ T1522] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.638177][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 323.640584][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 323.640608][ T9] usb 3-1: config 0 has no interface number 0 [ 323.640656][ T9] usb 3-1: config 0 interface 2 has no altsetting 0 [ 323.643667][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 323.643691][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.643710][ T9] usb 3-1: Product: syz [ 323.643724][ T9] usb 3-1: Manufacturer: syz [ 323.643737][ T9] usb 3-1: SerialNumber: syz [ 323.670312][ T9] usb 3-1: config 0 descriptor?? [ 324.059123][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.059768][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.110491][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.329754][ T9] usb 3-1: USB disconnect, device number 9 [ 324.564197][ T1522] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.728974][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.198214][ T6001] vhci_hcd: vhci_device speed not set [ 325.882457][ T6733] Bluetooth: hci2: command tx timeout [ 325.990650][ T1522] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.555920][ T6044] libceph: connect (1)[c::]:6789 error -101 [ 327.556171][ T6044] libceph: mon0 (1)[c::]:6789 connect error [ 328.554317][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 328.554461][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 328.699608][ T7408] ceph: No mds server is up or the cluster is laggy [ 330.326540][ T992] libceph: connect (1)[c::]:6789 error -101 [ 330.326791][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 330.378550][ T7429] ceph: No mds server is up or the cluster is laggy [ 331.220229][ T7347] chnl_net:caif_netlink_parms(): no params data found [ 332.699178][ T6001] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 332.878272][ T6001] usb 1-1: Using ep0 maxpacket: 8 [ 332.881219][ T6001] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 332.881289][ T6001] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.881313][ T6001] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.881339][ T6001] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.881364][ T6001] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.881412][ T6001] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 332.881436][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.282456][ T6001] usb 1-1: usb_control_msg returned -32 [ 334.282516][ T6001] usbtmc 1-1:16.0: can't read capabilities [ 334.629044][ T6001] usb 1-1: USB disconnect, device number 15 [ 337.863242][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 337.863387][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 337.869651][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 337.869799][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 337.874507][ T7470] ceph: No mds server is up or the cluster is laggy [ 339.231171][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 339.231431][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 339.239557][ T992] libceph: connect (1)[c::]:6789 error -101 [ 339.239799][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 339.415687][ T7479] ceph: No mds server is up or the cluster is laggy [ 339.477223][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.477385][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.477628][ T7347] bridge_slave_0: entered allmulticast mode [ 339.482732][ T7347] bridge_slave_0: entered promiscuous mode [ 339.502271][ T992] libceph: connect (1)[c::]:6789 error -101 [ 339.502499][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 339.517616][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.517781][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.518374][ T7347] bridge_slave_1: entered allmulticast mode [ 339.532357][ T7347] bridge_slave_1: entered promiscuous mode [ 344.413580][ T1522] bridge_slave_1: left allmulticast mode [ 344.413770][ T1522] bridge_slave_1: left promiscuous mode [ 344.414664][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.608137][ T992] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 344.642400][ T1522] bridge_slave_0: left allmulticast mode [ 344.642435][ T1522] bridge_slave_0: left promiscuous mode [ 344.642974][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.340453][ T992] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 345.340475][ T992] usb 1-1: config 0 has no interface number 0 [ 345.340506][ T992] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.465804][ T992] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 345.465828][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.465841][ T992] usb 1-1: Product: syz [ 345.465851][ T992] usb 1-1: Manufacturer: syz [ 345.465859][ T992] usb 1-1: SerialNumber: syz [ 345.509553][ T992] usb 1-1: config 0 descriptor?? [ 345.553494][ T992] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 345.638861][ T7511] delete_channel: no stack [ 345.668943][ T5881] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 347.108847][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 347.117858][ T5881] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 347.117889][ T5881] usb 2-1: config 0 has no interface number 0 [ 347.137687][ T5881] usb 2-1: config 0 interface 2 has no altsetting 0 [ 347.174876][ T5881] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 347.174909][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.174929][ T5881] usb 2-1: Product: syz [ 347.174942][ T5881] usb 2-1: Manufacturer: syz [ 347.174956][ T5881] usb 2-1: SerialNumber: syz [ 347.250466][ T7525] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 347.345387][ T5881] usb 2-1: config 0 descriptor?? [ 347.363184][ T7526] fuse: Unknown parameter 'user_id00000000000000000000' [ 347.705699][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.714053][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.816625][ T5881] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.654423][ T5881] usb 2-1: USB disconnect, device number 8 [ 349.039342][ T5986] usb 1-1: USB disconnect, device number 16 [ 349.059950][ T5986] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 349.203464][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.191490][ T5881] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 350.542041][ T6044] libceph: connect (1)[c::]:6789 error -101 [ 350.542283][ T6044] libceph: mon0 (1)[c::]:6789 connect error [ 350.619440][ T7542] ceph: No mds server is up or the cluster is laggy [ 350.620501][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 350.626941][ T5881] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 350.627017][ T5881] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.627042][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.627070][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.627095][ T5881] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.627141][ T5881] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 350.627167][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.994410][ T5881] usb 2-1: usb_control_msg returned -32 [ 351.994468][ T5881] usbtmc 2-1:16.0: can't read capabilities [ 353.028349][ T5881] usb 2-1: USB disconnect, device number 9 [ 354.790076][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 354.938224][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 354.966988][ T31] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 354.967020][ T31] usb 2-1: config 0 has no interface number 0 [ 354.967076][ T31] usb 2-1: config 0 interface 2 has no altsetting 0 [ 355.033367][ T31] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 355.033400][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.033421][ T31] usb 2-1: Product: syz [ 355.033437][ T31] usb 2-1: Manufacturer: syz [ 355.033453][ T31] usb 2-1: SerialNumber: syz [ 355.074489][ T31] usb 2-1: config 0 descriptor?? [ 355.325166][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.327094][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.366269][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.083184][ T31] usb 2-1: USB disconnect, device number 10 [ 357.537693][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 357.537938][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 357.607858][ T7539] udevd[7539]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.642272][ T7585] ceph: No mds server is up or the cluster is laggy [ 360.610678][ T1522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.230316][ T1522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.315662][ T1522] bond0 (unregistering): Released all slaves [ 364.189959][ T6734] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.204499][ T6734] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.212638][ T6734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.215070][ T6734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.216300][ T6734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.221141][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 364.482320][ T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 364.482352][ T9] usb 2-1: config 0 has no interface number 0 [ 364.482408][ T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.517795][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 364.517827][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.517848][ T9] usb 2-1: Product: syz [ 364.517862][ T9] usb 2-1: Manufacturer: syz [ 364.517876][ T9] usb 2-1: SerialNumber: syz [ 364.585227][ T9] usb 2-1: config 0 descriptor?? [ 364.643912][ T9] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 366.472902][ T6734] Bluetooth: hci5: command tx timeout [ 366.984570][ T7647] fuse: Unknown parameter '0x0000000000000003' [ 367.102669][ T1522] bond1 (unregistering): Released all slaves [ 367.187221][ T1522] bond2 (unregistering): Released all slaves [ 368.031000][ T6044] usb 2-1: USB disconnect, device number 11 [ 368.049254][ T6044] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 368.973521][ T6734] Bluetooth: hci5: command tx timeout [ 370.614129][ T6733] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.627112][ T6733] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.629128][ T6733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.632070][ T6733] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.633067][ T6733] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.151191][ T6733] Bluetooth: hci5: command tx timeout [ 371.590079][ T7672] fuse: Bad value for 'fd' [ 371.591578][ T7672] fuseblk: Bad value for 'fd' [ 371.677168][ T7674] Invalid source name [ 372.728204][ T6733] Bluetooth: hci6: command tx timeout [ 372.778524][ T7681] fuse: Unknown parameter '0x0000000000000003' [ 373.336347][ T6733] Bluetooth: hci5: command tx timeout [ 374.813176][ T6733] Bluetooth: hci6: command tx timeout [ 376.888138][ T6733] Bluetooth: hci6: command tx timeout [ 376.949575][ T1522] hsr_slave_0: left promiscuous mode [ 377.009354][ T1522] hsr_slave_1: left promiscuous mode [ 377.026176][ T1522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.026316][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.069253][ T1522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.069287][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.351100][ T7711] fuse: Bad value for 'fd' [ 378.145778][ T7713] fuseblk: Bad value for 'fd' [ 378.228864][ T7713] Invalid source name [ 378.683104][ T1522] veth1_macvtap: left promiscuous mode [ 378.683528][ T1522] veth0_macvtap: left promiscuous mode [ 378.683912][ T1522] veth1_vlan: left promiscuous mode [ 378.684322][ T1522] veth0_vlan: left promiscuous mode [ 378.979116][ T6733] Bluetooth: hci6: command tx timeout [ 379.182364][ T7724] fuse: Unknown parameter '0x0000000000000003' [ 384.076528][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.076619][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.058222][ T1522] team0 (unregistering): Port device team_slave_1 removed [ 385.488966][ T1522] team0 (unregistering): Port device team_slave_0 removed [ 385.999466][ T7748] fuse: Bad value for 'fd' [ 386.049293][ T7748] fuseblk: Bad value for 'fd' [ 386.146826][ T7749] Invalid source name [ 386.897377][ T7755] sctp: [Deprecated]: syz.4.524 (pid 7755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.897377][ T7755] Use struct sctp_sack_info instead [ 389.928149][ T992] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 390.078215][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 390.080790][ T992] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 390.080819][ T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.080838][ T992] usb 5-1: config 0 has no interface number 0 [ 390.080890][ T992] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.116508][ T992] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 390.116545][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.116566][ T992] usb 5-1: Product: syz [ 390.116582][ T992] usb 5-1: Manufacturer: syz [ 390.116598][ T992] usb 5-1: SerialNumber: syz [ 390.288949][ T992] usb 5-1: config 0 descriptor?? [ 390.311690][ T992] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 390.550199][ T992] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 390.550514][ T992] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 390.621986][ T7789] fuse: Bad value for 'fd' [ 390.631027][ T7789] fuseblk: Bad value for 'fd' [ 390.768210][ T7791] Invalid source name [ 390.901140][ T992] usb 5-1: USB disconnect, device number 9 [ 392.758950][ T7804] netlink: 'syz.0.534': attribute type 21 has an invalid length. [ 393.993124][ T7804] netlink: 132 bytes leftover after parsing attributes in process `syz.0.534'. [ 394.895426][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 394.955884][ T7667] chnl_net:caif_netlink_parms(): no params data found [ 395.605534][ T7827] fuse: Bad value for 'fd' [ 395.618960][ T7827] fuseblk: Bad value for 'fd' [ 396.460526][ T7828] Invalid source name [ 399.436256][ T7859] process 'syz.4.545' launched './file1' with NULL argv: empty string added [ 399.709164][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 399.872459][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 399.872499][ T9] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.872543][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 399.872566][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.084858][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.101495][ T9] usb 5-1: invalid MIDI out EP 0 [ 400.542880][ T7783] udevd[7783]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.617198][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 400.646187][ T9] usb 5-1: USB disconnect, device number 10 [ 404.327475][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.327639][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.327841][ T7632] bridge_slave_0: entered allmulticast mode [ 404.331405][ T7632] bridge_slave_0: entered promiscuous mode [ 404.388358][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.388523][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.388834][ T7667] bridge_slave_0: entered allmulticast mode [ 404.392213][ T7667] bridge_slave_0: entered promiscuous mode [ 404.403737][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.403877][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.404129][ T7632] bridge_slave_1: entered allmulticast mode [ 404.426385][ T7632] bridge_slave_1: entered promiscuous mode [ 404.471076][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.471218][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.471469][ T7667] bridge_slave_1: entered allmulticast mode [ 404.481631][ T7667] bridge_slave_1: entered promiscuous mode [ 409.107843][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.320297][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.346837][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.775242][ T1522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.881490][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.691121][ T992] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 411.441936][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.441974][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.442015][ T992] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 411.442038][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.459881][ T992] usb 2-1: config 0 descriptor?? [ 412.352570][ T1522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.430212][ T7632] team0: Port device team_slave_0 added [ 412.445071][ T7667] team0: Port device team_slave_0 added [ 412.455713][ T7632] team0: Port device team_slave_1 added [ 412.470232][ T7667] team0: Port device team_slave_1 added [ 412.549591][ T992] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 412.549643][ T992] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 412.549670][ T992] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 412.549696][ T992] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 412.549724][ T992] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 412.549751][ T992] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 412.549777][ T992] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 412.632277][ T992] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 412.736871][ T992] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 413.080895][ T7970] netlink: 72 bytes leftover after parsing attributes in process `syz.4.575'. [ 413.080998][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.575'. [ 413.082489][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 413.487084][ T7969] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 413.487117][ T7969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 413.487423][ T7969] vhci_hcd vhci_hcd.0: Device attached [ 413.488862][ T7971] vhci_hcd: connection closed [ 413.514801][ T6021] vhci_hcd: stop threads [ 413.514826][ T6021] vhci_hcd: release socket [ 413.515136][ T6021] vhci_hcd: disconnect device [ 414.218589][ T31] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 414.245957][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.571'. [ 414.569961][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 414.809981][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 414.810019][ T7977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.571'. [ 414.884829][ T1522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.052401][ T7978] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 415.052521][ T7978] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.055494][ T7978] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 415.055542][ T7978] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 415.117410][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.117424][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.117441][ T7632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.192168][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.192588][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.192608][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.263914][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.263943][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.264053][ T7632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.474321][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.474336][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.474355][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.023093][ T1522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.514630][ T7986] loop9: detected capacity change from 0 to 7 [ 416.604311][ T7986] Dev loop9: unable to read RDB block 7 [ 416.604377][ T7986] loop9: unable to read partition table [ 416.604638][ T7986] loop9: partition table beyond EOD, truncated [ 416.604684][ T7986] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.409001][ T992] usb 2-1: USB disconnect, device number 12 [ 417.980399][ T7632] hsr_slave_0: entered promiscuous mode [ 417.984634][ T7632] hsr_slave_1: entered promiscuous mode [ 417.985405][ T7632] debugfs: 'hsr0' already exists in 'hsr' [ 417.985423][ T7632] Cannot create hsr debugfs directory [ 418.468694][ T7667] hsr_slave_0: entered promiscuous mode [ 418.486350][ T7667] hsr_slave_1: entered promiscuous mode [ 418.503591][ T7667] debugfs: 'hsr0' already exists in 'hsr' [ 418.503627][ T7667] Cannot create hsr debugfs directory [ 418.820985][ T8014] binder: 8013:8014 ioctl 4018620d 0 returned -22 [ 419.859190][ T8024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 419.861828][ T8024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.862139][ T8024] vhci_hcd vhci_hcd.0: Device attached [ 420.138901][ T8025] vhci_hcd: connection closed [ 420.163543][ T5914] vhci_hcd: stop threads [ 420.163567][ T5914] vhci_hcd: release socket [ 420.163626][ T5914] vhci_hcd: disconnect device [ 420.262334][ T9] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 420.262435][ T9] usb 35-1: enqueue for inactive port 0 [ 420.338211][ T9] vhci_hcd: vhci_device speed not set [ 424.555708][ T1522] bridge_slave_1: left allmulticast mode [ 424.555731][ T1522] bridge_slave_1: left promiscuous mode [ 424.562025][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.852787][ T1522] bridge_slave_0: left allmulticast mode [ 425.852820][ T1522] bridge_slave_0: left promiscuous mode [ 425.853121][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.926923][ T8054] binder: 8053:8054 ioctl 4018620d 0 returned -22 [ 425.980439][ T1522] bridge_slave_1: left allmulticast mode [ 425.980474][ T1522] bridge_slave_1: left promiscuous mode [ 425.981196][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.068538][ T1522] bridge_slave_0: left allmulticast mode [ 426.068571][ T1522] bridge_slave_0: left promiscuous mode [ 426.070856][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.356874][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.594'. [ 427.257799][ T6734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.276236][ T6734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.281505][ T6734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.289085][ T6734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.289966][ T6734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.572063][ T6734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.583147][ T6734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.585108][ T6734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.587058][ T6734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.610999][ T6734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.478192][ T6734] Bluetooth: hci2: command tx timeout [ 430.775014][ T6734] Bluetooth: hci4: command tx timeout [ 431.560501][ T6734] Bluetooth: hci2: command tx timeout [ 431.602353][ T8083] netlink: 120 bytes leftover after parsing attributes in process `syz.1.600'. [ 431.938707][ T8093] binder: 8092:8093 ioctl 4018620d 0 returned -22 [ 432.138632][ T1522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.188738][ T1522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.210603][ T1522] bond0 (unregistering): Released all slaves [ 432.373627][ T1522] bond0 (unregistering): Released all slaves [ 432.896035][ T6734] Bluetooth: hci4: command tx timeout [ 433.623622][ T6734] Bluetooth: hci2: command tx timeout [ 434.638267][ T9] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 434.832645][ T9] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 434.832717][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.832746][ T9] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.834295][ T9] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 434.834362][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.834391][ T9] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.954488][ T9] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 434.954564][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.954592][ T9] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.970834][ T6734] Bluetooth: hci4: command tx timeout [ 435.116746][ T9] usb 1-1: string descriptor 0 read error: -22 [ 435.116885][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 435.116900][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.345223][ T9] adutux 1-1:168.0: interrupt endpoints not found [ 435.395856][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.532216][ T5881] usb 1-1: USB disconnect, device number 17 [ 435.690754][ T6734] Bluetooth: hci2: command tx timeout [ 435.808324][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.858889][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.783592][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.084132][ T6734] Bluetooth: hci4: command tx timeout [ 437.258075][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.618203][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.894513][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.129187][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.586001][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.773643][ C0] vkms_vblank_simulate: vblank timer overrun [ 442.678290][ T1522] hsr_slave_0: left promiscuous mode [ 442.719126][ T1522] hsr_slave_1: left promiscuous mode [ 442.733618][ T1522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.733691][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.772108][ T1522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.772199][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.010310][ T1522] veth1_macvtap: left promiscuous mode [ 443.010385][ T1522] veth0_macvtap: left promiscuous mode [ 443.030205][ T1522] veth1_vlan: left promiscuous mode [ 443.030341][ T1522] veth0_vlan: left promiscuous mode [ 445.375964][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.376050][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.388701][ T8181] netlink: 72 bytes leftover after parsing attributes in process `syz.0.626'. [ 446.388723][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 446.388733][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 450.692828][ T8208] netlink: 72 bytes leftover after parsing attributes in process `syz.1.635'. [ 450.692852][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 450.692865][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 452.138730][ T1522] team0 (unregistering): Port device team_slave_1 removed [ 452.719243][ T1522] team0 (unregistering): Port device team_slave_0 removed [ 454.188104][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.489281][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.694772][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.334906][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.889899][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.360394][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.803465][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.906237][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.226028][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.394978][ T8070] chnl_net:caif_netlink_parms(): no params data found [ 457.430371][ T8063] chnl_net:caif_netlink_parms(): no params data found [ 457.459007][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.637651][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.200619][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.200725][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.200915][ T8063] bridge_slave_0: entered allmulticast mode [ 461.231670][ T8063] bridge_slave_0: entered promiscuous mode [ 461.323308][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.323465][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.323732][ T8070] bridge_slave_0: entered allmulticast mode [ 461.338088][ T8070] bridge_slave_0: entered promiscuous mode [ 461.354540][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.354698][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.354965][ T8063] bridge_slave_1: entered allmulticast mode [ 461.366735][ T8063] bridge_slave_1: entered promiscuous mode [ 461.373218][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.373362][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.373605][ T8070] bridge_slave_1: entered allmulticast mode [ 461.390738][ T8070] bridge_slave_1: entered promiscuous mode [ 461.608377][ T6044] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 461.775299][ T6044] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 461.775343][ T6044] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 461.775359][ T6044] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.776364][ T6044] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 461.776398][ T6044] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 461.776415][ T6044] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.777357][ T6044] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 461.777389][ T6044] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 461.777404][ T6044] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.781402][ T6044] usb 5-1: string descriptor 0 read error: -22 [ 461.781573][ T6044] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 461.781596][ T6044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.055699][ T6044] adutux 5-1:168.0: interrupt endpoints not found [ 462.259839][ T6044] usb 5-1: USB disconnect, device number 11 [ 462.429645][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.474338][ T8070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.506884][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.527179][ T8070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.818658][ T8063] team0: Port device team_slave_0 added [ 470.951162][ T8070] team0: Port device team_slave_0 added [ 471.002308][ T8063] team0: Port device team_slave_1 added [ 471.021066][ T8070] team0: Port device team_slave_1 added [ 473.358161][ T5938] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 473.591215][ T5938] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 473.591285][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 473.591314][ T5938] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.593176][ T5938] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 473.593236][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 473.593265][ T5938] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.594874][ T5938] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 473.594932][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 473.594960][ T5938] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.714030][ T5938] usb 2-1: string descriptor 0 read error: -22 [ 473.714232][ T5938] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 473.714260][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.804840][ T5938] adutux 2-1:168.0: interrupt endpoints not found [ 473.968512][ T5938] usb 2-1: USB disconnect, device number 13 [ 474.486532][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.486553][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.486582][ T8070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.549761][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.549780][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.549809][ T8063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.550672][ T1522] bridge_slave_1: left allmulticast mode [ 474.550698][ T1522] bridge_slave_1: left promiscuous mode [ 474.550987][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.700532][ T1522] bridge_slave_0: left allmulticast mode [ 474.700568][ T1522] bridge_slave_0: left promiscuous mode [ 474.700877][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.342651][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.393716][ T1522] bridge_slave_1: left allmulticast mode [ 476.393749][ T1522] bridge_slave_1: left promiscuous mode [ 476.394026][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.638711][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.925541][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.104162][ T1522] bridge_slave_0: left allmulticast mode [ 478.104196][ T1522] bridge_slave_0: left promiscuous mode [ 478.104511][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.641852][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.069726][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.257556][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.985519][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.051015][ T1522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.084198][ T8400] binder: 8399:8400 ioctl c0306201 0 returned -14 [ 480.405553][ T1522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.561750][ T1522] bond0 (unregistering): Released all slaves [ 480.750947][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.251275][ T1522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.380049][ T1522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.471488][ T1522] bond0 (unregistering): Released all slaves [ 482.632262][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.632284][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.632323][ T8070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.671118][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.671137][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.671169][ T8063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.612108][ T8429] netlink: 72 bytes leftover after parsing attributes in process `syz.1.697'. [ 485.612130][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 485.612140][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 487.338342][ T8443] binder: 8437:8443 ioctl c0306201 0 returned -14 [ 487.517512][ T5881] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 488.180863][ T5881] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 488.180896][ T5881] usb 2-1: config 0 has no interface number 0 [ 488.180946][ T5881] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.193045][ T5881] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 488.193081][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.193102][ T5881] usb 2-1: Product: syz [ 488.193117][ T5881] usb 2-1: Manufacturer: syz [ 488.193132][ T5881] usb 2-1: SerialNumber: syz [ 488.312933][ T5881] usb 2-1: config 0 descriptor?? [ 488.468887][ T5881] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 488.578856][ T1522] hsr_slave_0: left promiscuous mode [ 488.722123][ T1522] hsr_slave_1: left promiscuous mode [ 488.723280][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.830351][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.954395][ T992] usb 2-1: USB disconnect, device number 14 [ 492.069775][ T992] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 492.272047][ T1522] hsr_slave_0: left promiscuous mode [ 492.353480][ T1522] hsr_slave_1: left promiscuous mode [ 492.365021][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.439938][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.167651][ T5881] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 493.348229][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 493.372046][ T5881] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 493.372069][ T5881] usb 1-1: config 0 has no interface number 0 [ 493.372104][ T5881] usb 1-1: config 0 interface 2 has no altsetting 0 [ 493.375802][ T5881] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 493.375823][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.375836][ T5881] usb 1-1: Product: syz [ 493.375845][ T5881] usb 1-1: Manufacturer: syz [ 493.375853][ T5881] usb 1-1: SerialNumber: syz [ 493.380471][ T5881] usb 1-1: config 0 descriptor?? [ 493.926825][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.095777][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.246094][ T5881] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.488219][ T992] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 494.504041][ T5881] usb 1-1: USB disconnect, device number 18 [ 494.527946][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 494.531398][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 494.532714][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 494.534807][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 494.535530][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 494.547632][ T6733] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.602891][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.610137][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.611569][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.614373][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.618142][ T992] usb 2-1: device descriptor read/64, error -71 [ 494.659437][ T1522] team0 (unregistering): Port device team_slave_1 removed [ 494.871032][ T992] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 494.876943][ T8471] udevd[8471]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.950878][ T1522] team0 (unregistering): Port device team_slave_0 removed [ 495.011983][ T992] usb 2-1: device descriptor read/64, error -71 [ 495.138147][ T992] usb usb2-port1: attempt power cycle [ 496.865036][ T5799] Bluetooth: hci2: command tx timeout [ 496.880765][ T5799] Bluetooth: hci5: command tx timeout [ 498.356820][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.582355][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.668253][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.715509][ T8503] binder: 8502:8503 ioctl c0306201 0 returned -14 [ 498.968101][ T5799] Bluetooth: hci2: command tx timeout [ 498.968141][ T5799] Bluetooth: hci5: command tx timeout [ 499.038707][ T1522] team0 (unregistering): Port device team_slave_1 removed [ 499.137662][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.241019][ T8505] fuse: Bad value for 'fd' [ 499.245662][ T8505] fuseblk: Bad value for 'fd' [ 499.380668][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.688981][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.699487][ T8508] Invalid source name [ 499.713723][ T1522] team0 (unregistering): Port device team_slave_0 removed [ 499.749684][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.899361][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.150372][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.204124][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.401248][ T6734] Bluetooth: hci5: command tx timeout [ 501.401375][ T6734] Bluetooth: hci2: command tx timeout [ 502.269308][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.178659][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.397765][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'. [ 503.448158][ T5799] Bluetooth: hci2: command tx timeout [ 503.448189][ T5799] Bluetooth: hci5: command tx timeout [ 504.308333][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.696579][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.795096][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.848132][ T5938] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 505.001636][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 505.004401][ T5938] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 505.004490][ T5938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.004517][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 505.004544][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 505.004569][ T5938] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.004616][ T5938] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 505.004640][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.485657][ T5938] usb 1-1: usb_control_msg returned -32 [ 506.485716][ T5938] usbtmc 1-1:16.0: can't read capabilities [ 506.726183][ T5938] usb 1-1: USB disconnect, device number 19 [ 506.817419][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.817505][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.099806][ T8546] fuse: Bad value for 'fd' [ 507.118727][ T8542] fuseblk: Bad value for 'fd' [ 507.191609][ T8546] Invalid source name [ 507.215452][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.341479][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.373765][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.426623][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.603178][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.640157][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.796253][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.201334][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.945447][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.383118][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 511.938695][ T8577] futex_wake_op: syz.1.730 tries to shift op by -1; fix this program [ 512.408310][ T8479] chnl_net:caif_netlink_parms(): no params data found [ 512.748215][ T5938] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 512.910715][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 512.915747][ T5938] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 512.915816][ T5938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.915840][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.915865][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.915890][ T5938] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.915937][ T5938] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 512.915960][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.185139][ T5938] usb 1-1: usb_control_msg returned -32 [ 513.185195][ T5938] usbtmc 1-1:16.0: can't read capabilities [ 513.228364][ T5986] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 513.268603][ T5938] usb 1-1: USB disconnect, device number 20 [ 513.385570][ T5986] usb 2-1: Using ep0 maxpacket: 32 [ 513.428638][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.477816][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.497335][ T8480] bridge_slave_0: entered allmulticast mode [ 513.969775][ T8480] bridge_slave_0: entered promiscuous mode [ 513.970794][ T5986] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 513.970824][ T5986] usb 2-1: config 0 has no interface number 0 [ 513.973783][ T5986] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 513.973816][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.973838][ T5986] usb 2-1: Product: syz [ 513.973853][ T5986] usb 2-1: Manufacturer: syz [ 513.973869][ T5986] usb 2-1: SerialNumber: syz [ 514.001800][ T5986] usb 2-1: config 0 descriptor?? [ 514.024859][ T5986] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 514.079510][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.079706][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.079976][ T8480] bridge_slave_1: entered allmulticast mode [ 514.092969][ T8480] bridge_slave_1: entered promiscuous mode [ 514.194470][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.646079][ T5986] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 516.268751][ T5986] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 516.453081][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 516.471523][ T5881] usb 2-1: USB disconnect, device number 18 [ 516.583022][ T5881] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 516.964795][ T5881] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 516.966075][ T5881] quatech2 2-1:0.51: device disconnected [ 518.077545][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.009969][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.028497][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.028650][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.028901][ T8479] bridge_slave_0: entered allmulticast mode [ 519.095925][ T8479] bridge_slave_0: entered promiscuous mode [ 519.188109][ T5881] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 519.725939][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 519.758602][ T5881] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 519.758681][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.758707][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.758734][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.758760][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.758808][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.758834][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.848164][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.848620][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.849379][ T8479] bridge_slave_1: entered allmulticast mode [ 519.870929][ T8479] bridge_slave_1: entered promiscuous mode [ 520.249747][ T5881] usb 5-1: usb_control_msg returned -32 [ 520.249806][ T5881] usbtmc 5-1:16.0: can't read capabilities [ 520.315773][ T5986] usb 5-1: USB disconnect, device number 12 [ 520.546655][ T8480] team0: Port device team_slave_0 added [ 520.555419][ T1522] bridge_slave_1: left allmulticast mode [ 520.555442][ T1522] bridge_slave_1: left promiscuous mode [ 520.555615][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.639209][ T1522] bridge_slave_0: left allmulticast mode [ 520.639235][ T1522] bridge_slave_0: left promiscuous mode [ 520.639454][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.650708][ T1228] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 521.268326][ T1522] bridge_slave_1: left allmulticast mode [ 521.268351][ T1522] bridge_slave_1: left promiscuous mode [ 521.268534][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.298085][ T1228] usb 1-1: Using ep0 maxpacket: 32 [ 521.300620][ T1228] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 521.300649][ T1228] usb 1-1: config 0 has no interface number 0 [ 521.303727][ T1228] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 521.303755][ T1228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.303774][ T1228] usb 1-1: Product: syz [ 521.303789][ T1228] usb 1-1: Manufacturer: syz [ 521.303803][ T1228] usb 1-1: SerialNumber: syz [ 521.309905][ T1228] usb 1-1: config 0 descriptor?? [ 521.314529][ T1228] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 521.715868][ T1522] bridge_slave_0: left allmulticast mode [ 521.717308][ T1522] bridge_slave_0: left promiscuous mode [ 521.724480][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.430415][ T1228] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 522.536486][ T1228] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 522.553158][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 522.613889][ T1228] usb 1-1: USB disconnect, device number 21 [ 522.668141][ T1228] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 522.758375][ T1228] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 522.759491][ T1228] quatech2 1-1:0.51: device disconnected [ 523.088203][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 523.241641][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 523.247354][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 523.247387][ T9] usb 5-1: config 0 has no interface number 0 [ 523.247472][ T9] usb 5-1: config 0 interface 2 has no altsetting 0 [ 523.281867][ T9] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 523.281903][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.281926][ T9] usb 5-1: Product: syz [ 523.281942][ T9] usb 5-1: Manufacturer: syz [ 523.281958][ T9] usb 5-1: SerialNumber: syz [ 523.345508][ T9] usb 5-1: config 0 descriptor?? [ 524.085866][ T8667] netlink: 72 bytes leftover after parsing attributes in process `syz.1.758'. [ 524.085898][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 524.085912][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 524.628234][ T8677] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 524.628318][ T8677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 524.633043][ T8677] vhci_hcd vhci_hcd.0: Device attached [ 524.898162][ T1228] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 524.931894][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.264171][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.283945][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.349257][ T8678] vhci_hcd: connection reset by peer [ 525.353335][ T5914] vhci_hcd: stop threads [ 525.353359][ T5914] vhci_hcd: release socket [ 525.353446][ T5914] vhci_hcd: disconnect device [ 525.494007][ T1522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.566294][ T9] usb 5-1: USB disconnect, device number 13 [ 526.666228][ T1522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.856809][ T1522] bond0 (unregistering): Released all slaves [ 526.895474][ T8471] udevd[8471]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.208740][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.763'. [ 528.574451][ T5854] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 528.888455][ T5854] usb 2-1: Using ep0 maxpacket: 8 [ 528.890665][ T5854] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 528.890720][ T5854] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.890747][ T5854] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.890774][ T5854] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.890799][ T5854] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.890869][ T5854] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 528.890894][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.121942][ T8699] libceph: resolve '0..' (ret=-3): failed [ 529.244500][ T5854] usb 2-1: usb_control_msg returned -32 [ 529.244535][ T5854] usbtmc 2-1:16.0: can't read capabilities [ 529.453854][ T1522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.473869][ T5854] usb 2-1: USB disconnect, device number 19 [ 529.672376][ T1522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.810033][ T1522] bond0 (unregistering): Released all slaves [ 530.019677][ T1228] vhci_hcd: vhci_device speed not set [ 530.147564][ T8480] team0: Port device team_slave_1 added [ 530.193937][ T8479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.574940][ T8479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.411712][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.411726][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.411744][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.791352][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.791367][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.791386][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.854256][ T8479] team0: Port device team_slave_0 added [ 532.093292][ T8479] team0: Port device team_slave_1 added [ 532.093883][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.149326][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.981989][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.074687][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.408807][ T1522] team0 (unregistering): Port device team_slave_1 removed [ 537.418138][ T5854] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 537.530323][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.570604][ T5854] usb 5-1: Using ep0 maxpacket: 8 [ 537.588892][ T5854] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 537.588972][ T5854] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.588997][ T5854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.589023][ T5854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 537.589048][ T5854] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.589098][ T5854] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 537.589124][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.818832][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'. [ 537.895980][ T8741] libceph: resolve '0..' (ret=-3): failed [ 538.058946][ T5854] usb 5-1: usb_control_msg returned -32 [ 538.058989][ T5854] usbtmc 5-1:16.0: can't read capabilities [ 538.184216][ T1522] team0 (unregistering): Port device team_slave_0 removed [ 538.215859][ T1228] usb 5-1: USB disconnect, device number 14 [ 538.393868][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.556140][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.037731][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.176702][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.230445][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 540.439313][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 540.449550][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 540.449580][ T9] usb 5-1: config 0 has no interface number 0 [ 540.449636][ T9] usb 5-1: config 0 interface 2 has no altsetting 0 [ 540.456026][ T9] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 540.456055][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.456075][ T9] usb 5-1: Product: syz [ 540.456089][ T9] usb 5-1: Manufacturer: syz [ 540.456103][ T9] usb 5-1: SerialNumber: syz [ 540.527112][ T9] usb 5-1: config 0 descriptor?? [ 542.444846][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.472414][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.511563][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.979265][ T9] usb 5-1: USB disconnect, device number 15 [ 543.698623][ T5854] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 544.542709][ T8770] evm: overlay not supported [ 544.678020][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 544.682823][ T5854] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 544.682854][ T5854] usb 2-1: config 0 has no interface number 0 [ 544.682910][ T5854] usb 2-1: config 0 interface 2 has no altsetting 0 [ 544.833385][ T5854] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 544.833421][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.833444][ T5854] usb 2-1: Product: syz [ 544.833460][ T5854] usb 2-1: Manufacturer: syz [ 544.833476][ T5854] usb 2-1: SerialNumber: syz [ 544.902833][ T5854] usb 2-1: config 0 descriptor?? [ 544.928811][ T8471] udevd[8471]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.376059][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.376651][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.421894][ T5854] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 545.489629][ T1522] team0 (unregistering): Port device team_slave_1 removed [ 546.751798][ T5854] usb 2-1: USB disconnect, device number 20 [ 546.756379][ T8693] udevd[8693]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 546.756498][ T8693] udevd[8693]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 547.155345][ T1522] team0 (unregistering): Port device team_slave_0 removed [ 547.164683][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.786'. [ 547.174481][ T8785] libceph: resolve '0..' (ret=-3): failed [ 548.743399][ T8471] udevd[8471]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.718081][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 549.878132][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 549.880779][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 549.880811][ T9] usb 2-1: config 0 has no interface number 0 [ 549.883523][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 549.883555][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.883577][ T9] usb 2-1: Product: syz [ 549.883586][ T9] usb 2-1: Manufacturer: syz [ 549.883595][ T9] usb 2-1: SerialNumber: syz [ 550.058195][ T9] usb 2-1: config 0 descriptor?? [ 550.070491][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 550.362061][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 550.542175][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 550.586778][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 550.605016][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 550.606478][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 550.617257][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 550.619086][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.816532][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 550.819968][ T9] usb 2-1: USB disconnect, device number 21 [ 550.848878][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 550.883668][ T6734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 550.894897][ T6734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 550.925432][ T6734] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 550.963654][ T6734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 550.980657][ T6734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 551.124603][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 551.127146][ T9] quatech2 2-1:0.51: device disconnected [ 551.689213][ T5854] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 551.711813][ T8799] kthread_run failed with err -4 [ 551.878086][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 551.884665][ T5854] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 551.884696][ T5854] usb 5-1: config 0 has no interface number 0 [ 551.884750][ T5854] usb 5-1: config 0 interface 2 has no altsetting 0 [ 551.917652][ T5854] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 551.917687][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.917709][ T5854] usb 5-1: Product: syz [ 551.917725][ T5854] usb 5-1: Manufacturer: syz [ 551.917741][ T5854] usb 5-1: SerialNumber: syz [ 551.972727][ T5854] usb 5-1: config 0 descriptor?? [ 552.847146][ T5799] Bluetooth: hci4: command tx timeout [ 553.211686][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.212351][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.605719][ T5799] Bluetooth: hci6: command tx timeout [ 553.678253][ T5854] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 553.941575][ T5854] usb 5-1: USB disconnect, device number 16 [ 554.969711][ T5799] Bluetooth: hci4: command tx timeout [ 554.996722][ T8471] udevd[8471]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.360798][ T5874] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 556.916484][ T5799] Bluetooth: hci6: command tx timeout [ 556.968096][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 556.970531][ T5874] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 556.970561][ T5874] usb 2-1: config 0 has no interface number 0 [ 556.970612][ T5874] usb 2-1: config 0 interface 2 has no altsetting 0 [ 556.973726][ T5874] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 556.973766][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.973787][ T5874] usb 2-1: Product: syz [ 556.973802][ T5874] usb 2-1: Manufacturer: syz [ 556.973817][ T5874] usb 2-1: SerialNumber: syz [ 557.057962][ T5799] Bluetooth: hci4: command tx timeout [ 557.058937][ T5874] usb 2-1: config 0 descriptor?? [ 557.331438][ T8849] delete_channel: no stack [ 557.400998][ T8837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.401516][ T8837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.406139][ T5874] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.684844][ T5874] usb 2-1: USB disconnect, device number 22 [ 558.968078][ T5799] Bluetooth: hci6: command tx timeout [ 559.009866][ T8794] udevd[8794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.128305][ T5799] Bluetooth: hci4: command tx timeout [ 561.048273][ T5799] Bluetooth: hci6: command tx timeout [ 561.074208][ T8802] chnl_net:caif_netlink_parms(): no params data found [ 562.088502][ T5881] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 562.268057][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 562.271753][ T5881] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 562.271781][ T5881] usb 1-1: config 0 has no interface number 0 [ 562.271821][ T5881] usb 1-1: config 0 interface 2 has no altsetting 0 [ 562.275124][ T5881] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 562.275157][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.275180][ T5881] usb 1-1: Product: syz [ 562.275195][ T5881] usb 1-1: Manufacturer: syz [ 562.275211][ T5881] usb 1-1: SerialNumber: syz [ 562.332403][ T8800] chnl_net:caif_netlink_parms(): no params data found [ 562.353449][ T5881] usb 1-1: config 0 descriptor?? [ 562.625168][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.625961][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.688350][ T5881] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.790706][ T5881] usb 1-1: USB disconnect, device number 22 [ 563.419168][ T8897] delete_channel: no stack [ 564.153995][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.154244][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.154521][ T8802] bridge_slave_0: entered allmulticast mode [ 564.178663][ T8802] bridge_slave_0: entered promiscuous mode [ 564.345959][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.346119][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.346380][ T8802] bridge_slave_1: entered allmulticast mode [ 564.484248][ T8802] bridge_slave_1: entered promiscuous mode [ 568.108089][ T1228] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 568.195477][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.260065][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.260154][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.309868][ T1228] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 568.309915][ T1228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.309938][ T1228] usb 5-1: Product: syz [ 568.309954][ T1228] usb 5-1: Manufacturer: syz [ 568.309970][ T1228] usb 5-1: SerialNumber: syz [ 568.413991][ T1228] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 568.555080][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.576091][ T8800] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.576255][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.606738][ T8800] bridge_slave_0: entered allmulticast mode [ 568.646008][ T8800] bridge_slave_0: entered promiscuous mode [ 568.714374][ T5874] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 568.768135][ T5938] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 568.918192][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 568.945636][ T5938] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 568.945754][ T5938] usb 2-1: config 0 has no interface number 0 [ 568.945821][ T5938] usb 2-1: config 0 interface 2 has no altsetting 0 [ 568.980291][ T5938] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 568.980329][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.980352][ T5938] usb 2-1: Product: syz [ 568.980368][ T5938] usb 2-1: Manufacturer: syz [ 568.980468][ T5938] usb 2-1: SerialNumber: syz [ 569.036118][ T8800] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.036906][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.042037][ T8800] bridge_slave_1: entered allmulticast mode [ 569.083907][ T8800] bridge_slave_1: entered promiscuous mode [ 569.087334][ T5938] usb 2-1: config 0 descriptor?? [ 569.572001][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.572793][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.177991][ T5874] usb 5-1: Service connection timeout for: 256 [ 570.178019][ T5874] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 570.212625][ T5867] usb 5-1: USB disconnect, device number 17 [ 570.249007][ T5874] ath9k_htc: Failed to initialize the device [ 570.252123][ T5867] usb 5-1: ath9k_htc: USB layer deinitialized [ 570.323988][ T5938] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.394268][ T8943] delete_channel: no stack [ 570.487158][ T5938] usb 2-1: USB disconnect, device number 23 [ 570.603526][ T8794] udevd[8794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.852458][ T8802] team0: Port device team_slave_0 added [ 572.734939][ T8802] team0: Port device team_slave_1 added [ 572.810454][ T8961] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 572.811409][ T8961] fuseblk: Bad value for 'fd' [ 573.330887][ T8961] Invalid source name [ 573.360886][ T1228] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 573.395500][ T8800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.510550][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.510584][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.510616][ T1228] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 573.510640][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.568703][ T1228] usb 2-1: config 0 descriptor?? [ 573.846227][ T8800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.995567][ T1228] arvo 0003:1E7D:30D4.0005: invalid report_size 737302141 [ 573.995598][ T1228] arvo 0003:1E7D:30D4.0005: item 0 4 1 7 parsing failed [ 573.996630][ T1228] arvo 0003:1E7D:30D4.0005: parse failed [ 573.996713][ T1228] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -22 [ 574.160637][ T1522] bridge_slave_1: left allmulticast mode [ 574.160661][ T1522] bridge_slave_1: left promiscuous mode [ 574.160846][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.209686][ T5854] usb 2-1: USB disconnect, device number 24 [ 574.242218][ T1522] bridge_slave_0: left allmulticast mode [ 574.242251][ T1522] bridge_slave_0: left promiscuous mode [ 574.242551][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.330132][ T8972] delete_channel: no stack [ 574.357048][ T1522] bridge_slave_1: left allmulticast mode [ 574.357084][ T1522] bridge_slave_1: left promiscuous mode [ 574.357368][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.496960][ T1522] bridge_slave_0: left allmulticast mode [ 574.496984][ T1522] bridge_slave_0: left promiscuous mode [ 574.497161][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.639183][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 576.366384][ T1522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.376899][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 576.385862][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 576.385883][ T31] usb 5-1: config 0 has no interface number 0 [ 576.385917][ T31] usb 5-1: config 0 interface 2 has no altsetting 0 [ 576.440355][ T31] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 576.440378][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.440390][ T31] usb 5-1: Product: syz [ 576.440399][ T31] usb 5-1: Manufacturer: syz [ 576.440408][ T31] usb 5-1: SerialNumber: syz [ 576.512189][ T31] usb 5-1: config 0 descriptor?? [ 576.588941][ T8993] fuse: Bad value for 'fd' [ 576.593208][ T1522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.612588][ T8993] fuseblk: Bad value for 'fd' [ 576.697933][ T8995] Invalid source name [ 577.211681][ T1522] bond0 (unregistering): Released all slaves [ 577.222113][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.222700][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.258301][ T31] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 577.408986][ T31] usb 5-1: USB disconnect, device number 18 [ 577.613443][ T8471] udevd[8471]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.880810][ T1522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.973730][ T8999] delete_channel: no stack [ 578.739041][ T1522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.828081][ T5874] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 578.833077][ T1522] bond0 (unregistering): Released all slaves [ 578.869883][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.869904][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.869932][ T8802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.988270][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 578.990262][ T5874] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 578.990328][ T5874] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.990343][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 578.990358][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 578.990373][ T5874] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.990400][ T5874] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 578.990415][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.118292][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.118313][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.118344][ T8802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.118907][ T5986] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 579.180618][ T8800] team0: Port device team_slave_0 added [ 579.231500][ T5874] usb 5-1: usb_control_msg returned -32 [ 579.231557][ T5874] usbtmc 5-1:16.0: can't read capabilities [ 579.272476][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.272516][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.272558][ T5986] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 579.272584][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.334612][ T8800] team0: Port device team_slave_1 added [ 579.388328][ T5986] usb 2-1: config 0 descriptor?? [ 579.400477][ T5874] usb 5-1: USB disconnect, device number 19 [ 579.864734][ T5986] arvo 0003:1E7D:30D4.0006: invalid report_size 737302141 [ 579.864762][ T5986] arvo 0003:1E7D:30D4.0006: item 0 4 1 7 parsing failed [ 579.865661][ T5986] arvo 0003:1E7D:30D4.0006: parse failed [ 579.865736][ T5986] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -22 [ 580.057196][ T5881] usb 2-1: USB disconnect, device number 25 [ 580.096270][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.096290][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.096321][ T8800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.108367][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.108388][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.108419][ T8800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.724746][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.486727][ T1522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.740466][ T5874] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 581.868152][ T5874] usb 1-1: device descriptor read/64, error -71 [ 582.138056][ T5874] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 582.558093][ T5874] usb 1-1: device descriptor read/64, error -71 [ 582.637368][ T9032] delete_channel: no stack [ 582.708210][ T5874] usb usb1-port1: attempt power cycle [ 583.152118][ T1522] team0 (unregistering): Port device team_slave_1 removed [ 583.435636][ T5874] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 583.469104][ T5874] usb 1-1: device descriptor read/8, error -71 [ 583.618077][ T9043] binder: 9040:9043 ioctl c0306201 200000000040 returned -14 [ 584.428174][ T5874] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 584.499265][ T1522] team0 (unregistering): Port device team_slave_0 removed [ 584.958267][ T5874] usb 1-1: device not accepting address 26, error -71 [ 584.959321][ T5874] usb usb1-port1: unable to enumerate USB device [ 585.328748][ T5881] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 585.622872][ T9057] trusted_key: syz.1.853 sent an empty control message without MSG_MORE. [ 585.713096][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 586.023796][ T5881] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 586.023891][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 586.023916][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 586.023941][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.023965][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.024011][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 586.024034][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.320346][ T9064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 586.320379][ T9064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 586.323738][ T9064] vhci_hcd vhci_hcd.0: Device attached [ 586.371365][ T5881] usb 5-1: usb_control_msg returned -32 [ 586.371400][ T5881] usbtmc 5-1:16.0: can't read capabilities [ 586.523644][ T5881] usb 5-1: USB disconnect, device number 20 [ 586.648743][ T5854] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 587.274580][ T9065] vhci_hcd: connection reset by peer [ 587.291423][ T4528] vhci_hcd: stop threads [ 587.291446][ T4528] vhci_hcd: release socket [ 587.291531][ T4528] vhci_hcd: disconnect device [ 588.566087][ T9071] delete_channel: no stack [ 588.760091][ T1522] team0 (unregistering): Port device team_slave_1 removed [ 588.931906][ T1522] team0 (unregistering): Port device team_slave_0 removed [ 589.862684][ T9084] binder: 9077:9084 ioctl c0306201 200000000040 returned -14 [ 592.018081][ T5854] vhci_hcd: vhci_device speed not set [ 592.095298][ T8802] hsr_slave_0: entered promiscuous mode [ 592.100474][ T8802] hsr_slave_1: entered promiscuous mode [ 592.102163][ T8802] debugfs: 'hsr0' already exists in 'hsr' [ 592.102189][ T8802] Cannot create hsr debugfs directory [ 593.378988][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 593.548100][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 593.588125][ T31] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 593.588228][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 593.588254][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 593.588281][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 593.588308][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 593.588354][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 593.588376][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.202903][ T9107] delete_channel: no stack [ 594.465690][ T8800] hsr_slave_0: entered promiscuous mode [ 594.489034][ T8800] hsr_slave_1: entered promiscuous mode [ 594.496291][ T8800] debugfs: 'hsr0' already exists in 'hsr' [ 594.496329][ T8800] Cannot create hsr debugfs directory [ 594.559686][ T31] usb 2-1: usb_control_msg returned -32 [ 594.559742][ T31] usbtmc 2-1:16.0: can't read capabilities [ 594.660180][ T31] usb 2-1: USB disconnect, device number 26 [ 595.556746][ T9132] binder: 9128:9132 ioctl c0306201 200000000040 returned -14 [ 597.345282][ T9139] : entered promiscuous mode [ 597.532071][ T9137] fuse: Bad value for 'fd' [ 597.533472][ T9137] fuseblk: Bad value for 'fd' [ 597.895149][ T9143] Invalid source name [ 599.729668][ T9146] delete_channel: no stack [ 600.478015][ T5854] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 600.658182][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 600.660853][ T5854] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 600.660921][ T5854] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 600.660945][ T5854] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 600.660972][ T5854] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.660998][ T5854] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.661045][ T5854] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 600.661069][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.975666][ T5854] usb 1-1: usb_control_msg returned -32 [ 600.975725][ T5854] usbtmc 1-1:16.0: can't read capabilities [ 601.049600][ T5854] usb 1-1: USB disconnect, device number 27 [ 601.482272][ T8802] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 601.713262][ T8802] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 602.384872][ T9183] : entered promiscuous mode [ 602.719052][ T8802] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 603.004785][ T8802] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 603.591041][ T9190] fuse: Bad value for 'fd' [ 603.592114][ T9190] fuseblk: Bad value for 'fd' [ 603.657568][ T9191] Invalid source name [ 606.069350][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 607.185125][ T8800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 607.584730][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.683402][ T8802] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.754083][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.754258][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.777486][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.816087][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.421167][ T6734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 610.426769][ T6734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 610.439980][ T6734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 610.469934][ T6734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 610.505877][ T6734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 610.772192][ T9255] fuse: Bad value for 'fd' [ 610.777167][ T9255] fuseblk: Bad value for 'fd' [ 610.963304][ T9257] Invalid source name [ 612.570455][ T5799] Bluetooth: hci2: command tx timeout [ 613.245285][ T6734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 613.257423][ T6734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 613.261949][ T6734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 613.268779][ T6734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 613.269738][ T6734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 614.037398][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 614.658061][ T6734] Bluetooth: hci2: command tx timeout [ 615.450669][ T6734] Bluetooth: hci4: command tx timeout [ 616.728068][ T6734] Bluetooth: hci2: command tx timeout [ 617.528294][ T6734] Bluetooth: hci4: command tx timeout [ 617.545384][ T9305] fuse: Bad value for 'fd' [ 617.555591][ T9305] fuseblk: Bad value for 'fd' [ 617.649739][ T9309] Invalid source name [ 618.146957][ T9302] netlink: 72 bytes leftover after parsing attributes in process `syz.4.902'. [ 618.146987][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'. [ 618.147002][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 618.808999][ T5799] Bluetooth: hci2: command tx timeout [ 619.627247][ T5799] Bluetooth: hci4: command tx timeout [ 620.435459][ T9323] overlayfs: failed lookup in lower (newroot/254, name='file0', err=-40): overlapping layers [ 621.155001][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 621.688121][ T5799] Bluetooth: hci4: command tx timeout [ 623.803211][ T9349] fuse: Bad value for 'fd' [ 624.778610][ T9349] fuseblk: Bad value for 'fd' [ 625.275352][ T9356] Invalid source name [ 626.033104][ T9247] chnl_net:caif_netlink_parms(): no params data found [ 626.040634][ T6001] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 626.161311][ T3498] bridge_slave_1: left allmulticast mode [ 626.161341][ T3498] bridge_slave_1: left promiscuous mode [ 626.161586][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.187994][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 626.205764][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.205803][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.205847][ T6001] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 626.205874][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.227390][ T6001] usb 5-1: config 0 descriptor?? [ 626.305640][ T3498] bridge_slave_0: left allmulticast mode [ 626.305677][ T3498] bridge_slave_0: left promiscuous mode [ 626.305993][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.690342][ T6001] usbhid 5-1:0.0: can't add hid device: -71 [ 626.690437][ T6001] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 626.711404][ T6001] usb 5-1: USB disconnect, device number 21 [ 627.321355][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.472737][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.539283][ T3498] bond0 (unregistering): Released all slaves [ 627.910857][ T9270] chnl_net:caif_netlink_parms(): no params data found [ 628.128233][ T3498] hsr_slave_0: left promiscuous mode [ 628.178076][ T3498] hsr_slave_1: left promiscuous mode [ 628.180937][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.219268][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.480890][ T9403] fuse: Bad value for 'fd' [ 628.482463][ T9403] fuseblk: Bad value for 'fd' [ 628.969058][ T9404] Invalid source name [ 630.121581][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.121672][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.297995][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 631.448655][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 631.451398][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.451445][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.451505][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 631.451532][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.535106][ T31] usb 1-1: config 0 descriptor?? [ 632.815812][ T31] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 632.815851][ T31] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 632.815879][ T31] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 632.815906][ T31] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 632.815933][ T31] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 632.815959][ T31] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 632.815986][ T31] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 632.816012][ T31] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 632.900570][ T31] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 633.055476][ T31] usb 1-1: USB disconnect, device number 28 [ 633.187708][ T9427] fido_id[9427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 634.586938][ T9440] fuse: Bad value for 'fd' [ 634.592917][ T9440] fuseblk: Bad value for 'fd' [ 634.886650][ T9444] Invalid source name [ 634.897320][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 636.178871][ T3498] team0 (unregistering): Port device team_slave_0 removed [ 638.658290][ T5986] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 638.818006][ T5986] usb 2-1: Using ep0 maxpacket: 32 [ 638.822132][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.822175][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.822218][ T5986] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 638.822244][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.966834][ T5986] usb 2-1: config 0 descriptor?? [ 639.500175][ T5986] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 639.500221][ T5986] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 639.500249][ T5986] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 639.500276][ T5986] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 639.500303][ T5986] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 639.500330][ T5986] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 639.500357][ T5986] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 639.500384][ T5986] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 639.576093][ T5986] savu 0003:1E7D:2D5A.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 639.920364][ T5986] usb 2-1: USB disconnect, device number 27 [ 640.074441][ T9475] fido_id[9475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 641.382293][ T9484] fuse: Bad value for 'fd' [ 641.401851][ T9484] fuseblk: Bad value for 'fd' [ 641.514134][ T9485] Invalid source name [ 643.094009][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.094195][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.094501][ T9247] bridge_slave_0: entered allmulticast mode [ 643.108449][ T9247] bridge_slave_0: entered promiscuous mode [ 643.123393][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.123541][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.123768][ T9247] bridge_slave_1: entered allmulticast mode [ 643.126584][ T9247] bridge_slave_1: entered promiscuous mode [ 645.104649][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 645.186418][ T5854] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 645.278271][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 645.281935][ T9270] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.282165][ T9270] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.282855][ T9270] bridge_slave_0: entered allmulticast mode [ 645.287737][ T9270] bridge_slave_0: entered promiscuous mode [ 645.297606][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.297642][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.297684][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 645.297707][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.307261][ T31] usb 1-1: config 0 descriptor?? [ 645.335796][ T9247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.346461][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.347663][ T9270] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.348512][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.348544][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.348582][ T5854] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 645.348604][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.354587][ T5854] usb 5-1: config 0 descriptor?? [ 645.356103][ T9270] bridge_slave_1: entered allmulticast mode [ 645.388365][ T9270] bridge_slave_1: entered promiscuous mode [ 646.032694][ T9247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.295134][ T5854] arvo 0003:1E7D:30D4.000A: invalid report_size 737302141 [ 646.295164][ T5854] arvo 0003:1E7D:30D4.000A: item 0 4 1 7 parsing failed [ 646.296087][ T5854] arvo 0003:1E7D:30D4.000A: parse failed [ 646.296472][ T31] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 646.296515][ T31] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 646.296542][ T31] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 646.296567][ T31] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 646.296593][ T31] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 646.296618][ T31] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 646.296644][ T31] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 646.296670][ T31] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 646.301572][ T5854] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -22 [ 646.309043][ T31] savu 0003:1E7D:2D5A.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 646.944175][ T9519] netlink: 72 bytes leftover after parsing attributes in process `syz.1.957'. [ 646.944380][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 646.944498][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 647.009725][ T31] usb 5-1: USB disconnect, device number 22 [ 647.032902][ T5874] usb 1-1: USB disconnect, device number 29 [ 648.911867][ T9270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.935609][ T9247] team0: Port device team_slave_0 added [ 648.964427][ T9270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.211094][ T9247] team0: Port device team_slave_1 added [ 650.898383][ T5867] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 651.024824][ T9557] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 651.024849][ T9557] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 651.024985][ T9557] vhci_hcd vhci_hcd.0: Device attached [ 651.052104][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 651.055322][ T5867] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.055348][ T5867] usb 2-1: config 0 has no interface number 0 [ 651.055397][ T5867] usb 2-1: config 0 interface 2 has no altsetting 0 [ 651.070582][ T5867] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 651.070616][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.070636][ T5867] usb 2-1: Product: syz [ 651.070651][ T5867] usb 2-1: Manufacturer: syz [ 651.070665][ T5867] usb 2-1: SerialNumber: syz [ 651.108081][ T5867] usb 2-1: config 0 descriptor?? [ 651.591855][ T9569] netlink: 72 bytes leftover after parsing attributes in process `syz.4.966'. [ 651.592065][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 651.592213][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 651.681985][ T992] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 651.955336][ T31] usb 34-1: SetAddress Request (2) to port 0 [ 651.955384][ T31] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 651.955400][ T31] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 31, name: kworker/1:0 [ 651.955418][ T31] preempt_count: 0, expected: 0 [ 651.955427][ T31] RCU nest depth: 0, expected: 0 [ 651.955437][ T31] 6 locks held by kworker/1:0/31: [ 651.955450][ T31] #0: ffff88801eebd538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 651.955518][ T31] #1: ffffc90000a5fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 651.955575][ T31] #2: ffff888028671188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 651.955626][ T31] #3: ffff8880286745b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 651.955677][ T31] #4: ffff888027fa2658 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 651.955728][ T31] #5: ffff8880282bee68 (&mbus->lock#2){+.+.}-{3:3}, at: mon_complete+0x5c/0x200 [ 651.955787][ T31] irq event stamp: 461230 [ 651.955795][ T31] hardirqs last enabled at (461229): [] _raw_spin_unlock_irqrestore+0x85/0x110 [ 651.955838][ T31] hardirqs last disabled at (461230): [] vhci_urb_enqueue+0xb5f/0xee0 [ 651.955873][ T31] softirqs last enabled at (454986): [] __local_bh_enable_ip+0x1b3/0x2e0 [ 651.955905][ T31] softirqs last disabled at (454980): [] wg_packet_decrypt_worker+0xcd/0xce0 [ 651.955942][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 651.955968][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 651.955983][ T31] Workqueue: usb_hub_wq hub_event [ 651.956006][ T31] Call Trace: [ 651.956015][ T31] [ 651.956025][ T31] dump_stack_lvl+0x189/0x250 [ 651.956058][ T31] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 651.956080][ T31] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 651.956106][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.956140][ T31] ? rtlock_slowlock_locked+0xd8/0x4010 [ 651.956173][ T31] ? print_lock_name+0xde/0x100 [ 651.956208][ T31] __might_resched+0x44b/0x5d0 [ 651.956242][ T31] ? __pfx___might_resched+0x10/0x10 [ 651.956266][ T31] ? mon_complete+0x5c/0x200 [ 651.956294][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 651.956349][ T31] rt_spin_lock+0xc7/0x3e0 [ 651.956379][ T31] ? __pfx_rt_spin_lock+0x10/0x10 [ 651.956405][ T31] ? rt_mutex_slowunlock+0x493/0x8a0 [ 651.956441][ T31] mon_complete+0x5c/0x200 [ 651.956474][ T31] __usb_hcd_giveback_urb+0x254/0x5e0 [ 651.956512][ T31] vhci_urb_enqueue+0xb82/0xee0 [ 651.956560][ T31] ? __pfx_vhci_urb_enqueue+0x10/0x10 [ 651.956587][ T31] ? rt_spin_unlock+0x150/0x200 [ 651.956614][ T31] ? usb_hcd_map_urb_for_dma+0x3c1/0xd80 [ 651.956643][ T31] ? rt_spin_unlock+0x161/0x200 [ 651.956673][ T31] usb_hcd_submit_urb+0x320/0x1a80 [ 651.956719][ T31] usb_start_wait_urb+0x114/0x4c0 [ 651.956749][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 651.956802][ T31] usb_control_msg+0x232/0x3e0 [ 651.956834][ T31] hub_port_init+0xe24/0x2800 [ 651.956889][ T31] hub_event+0x2532/0x4a20 [ 651.956982][ T31] ? __pfx_hub_event+0x10/0x10 [ 651.957008][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 651.957047][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 651.957070][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 651.957099][ T31] process_scheduled_works+0xae1/0x17b0 [ 651.957165][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 651.957217][ T31] worker_thread+0x8a0/0xda0 [ 651.957277][ T31] kthread+0x711/0x8a0 [ 651.957316][ T31] ? __pfx_worker_thread+0x10/0x10 [ 651.957350][ T31] ? __pfx_kthread+0x10/0x10 [ 651.957380][ T31] ? rt_spin_unlock+0x150/0x200 [ 651.957410][ T31] ? rt_spin_unlock+0x161/0x200 [ 651.957433][ T31] ? __pfx_kthread+0x10/0x10 [ 651.957467][ T31] ret_from_fork+0x4bc/0x870 [ 651.957498][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 651.957536][ T31] ? __switch_to_asm+0x39/0x70 [ 651.957556][ T31] ? __switch_to_asm+0x33/0x70 [ 651.957575][ T31] ? __pfx_kthread+0x10/0x10 [ 651.957609][ T31] ret_from_fork_asm+0x1a/0x30 [ 651.957658][ T31] [ 652.219507][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.245115][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.338577][ T31] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 652.432892][ T5867] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 652.550194][ T9565] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1 [ 653.165350][ T58] vhci_hcd: stop threads [ 653.165367][ T58] vhci_hcd: release socket [ 653.165711][ T58] vhci_hcd: disconnect device [ 653.687546][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.687567][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.687597][ T9247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.880351][ T992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 653.887482][ T992] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 653.887511][ T992] usb 1-1: can't read configurations, error -71 [ 654.161044][ T5867] usb 2-1: USB disconnect, device number 28 [ 657.368240][ T31] usb 34-1: device descriptor read/8, error -110 [ 657.764473][ T31] usb usb34-port1: attempt power cycle [ 658.361606][ T31] usb usb34-port1: unable to enumerate USB device [ 658.379990][ T3498] bridge_slave_1: left allmulticast mode [ 658.380023][ T3498] bridge_slave_1: left promiscuous mode [ 658.385350][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.459867][ T3498] bridge_slave_0: left allmulticast mode [ 658.459903][ T3498] bridge_slave_0: left promiscuous mode [ 658.460668][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.368722][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.440120][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.460873][ T3498] bond0 (unregistering): Released all slaves [ 660.948068][ T3498] hsr_slave_0: left promiscuous mode [ 660.988147][ T3498] hsr_slave_1: left promiscuous mode [ 660.989481][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.039059][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1