last executing test programs: 8m46.906348558s ago: executing program 32 (id=4583): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x7, @vbi={0x4, 0x10, 0x4, 0x32314742, [0x7, 0xf], [0x0, 0x4], 0x108}}) 4m41.240415957s ago: executing program 33 (id=10649): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x6) 4m40.875037363s ago: executing program 34 (id=10657): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) open_by_handle_at(r0, 0x0, 0x210000) 4m37.087186253s ago: executing program 35 (id=10695): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 4m31.818063325s ago: executing program 36 (id=10745): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) pread64(r0, &(0x7f0000000040)=""/35, 0x23, 0x40000000) 4m18.40249604s ago: executing program 37 (id=10871): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x4c}}, 0x0) 3m49.333267195s ago: executing program 38 (id=11213): userfaultfd(0x801) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) 3m46.574107986s ago: executing program 6 (id=11244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468305f746f5f626f6e64000000200003801c0003"], 0x4c}}, 0x0) 3m45.082200857s ago: executing program 6 (id=11251): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 3m44.823929691s ago: executing program 6 (id=11257): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10101}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x1000, 0x0, 0x0, 0x567ab35067cbf9a3}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3m44.581191606s ago: executing program 6 (id=11261): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3m43.61176182s ago: executing program 6 (id=11272): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x26, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) 3m43.31627022s ago: executing program 6 (id=11277): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 3m42.56690233s ago: executing program 39 (id=11277): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 3m30.561475974s ago: executing program 4 (id=11383): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffe7c, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES8]) syz_usb_control_io(r0, 0x0, 0x0) 3m28.604939701s ago: executing program 4 (id=11405): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0205647, &(0x7f0000000940)={0xf010000, @pix={0xfffffb71, 0x0, 0x38414762}}) 3m28.425575397s ago: executing program 4 (id=11408): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) 3m28.210159339s ago: executing program 4 (id=11411): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0xb}, 0x18) 3m28.099527487s ago: executing program 5 (id=11413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000010401080000000000000000000000040500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) 3m27.904429515s ago: executing program 5 (id=11417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x11, 0x0, 0x0) 3m27.705005248s ago: executing program 5 (id=11420): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m27.184370507s ago: executing program 4 (id=11423): r0 = socket$inet6(0xa, 0x3, 0xf) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x20, 0xfffd, 0x2}, {0x0, 0x7ff, 0x0, 0x0, 0x0, 0xf42, 0x200000000000}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d3, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 3m26.866042376s ago: executing program 4 (id=11424): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x1000000000000006) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000240)={0x0, 0x8, 0x5, &(0x7f0000000040)={0x8, "83f635836663e1b5296b6b78660000000005000000000000b6e300"}}) 3m26.452285315s ago: executing program 40 (id=11424): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x1000000000000006) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000240)={0x0, 0x8, 0x5, &(0x7f0000000040)={0x8, "83f635836663e1b5296b6b78660000000005000000000000b6e300"}}) 3m25.801726914s ago: executing program 5 (id=11434): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8001, &(0x7f00000049c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) creat(&(0x7f0000002cc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8b) 3m24.754414005s ago: executing program 5 (id=11448): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}) 3m24.390215703s ago: executing program 5 (id=11454): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0xb}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@overlay={0xffffffff, 0x1, 0x4, 0x8, 0x71e, {}, {0x3, 0xc, 0x29, 0xab, 0xe8, 0x8, '`8#t'}, 0xd3, 0x3, {}, 0x34ae2f7e}) 3m24.088172769s ago: executing program 41 (id=11454): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0xb}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@overlay={0xffffffff, 0x1, 0x4, 0x8, 0x71e, {}, {0x3, 0xc, 0x29, 0xab, 0xe8, 0x8, '`8#t'}, 0xd3, 0x3, {}, 0x34ae2f7e}) 3m13.540172183s ago: executing program 0 (id=11564): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m13.388914626s ago: executing program 0 (id=11567): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0xa, "618eea4f"}, @local=@item_4={0x3, 0x2, 0x0, "67aff528"}, @global=@item_4, @local=@item_4={0x3, 0x2, 0x2, "049b9190"}, @local=@item_012={0x1, 0x2, 0x1, 'N'}, @global=@item_012={0x1, 0x1, 0x0, "1a"}, @local=@item_4={0x3, 0x2, 0x7, "fa9e274a"}, @local=@item_4={0x3, 0x2, 0x2}]}}, 0x0}, 0x0) 3m11.510441595s ago: executing program 0 (id=11587): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'none\x00', 0x1, 0x4, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x25}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 3m11.374780448s ago: executing program 0 (id=11588): pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000480)) 3m10.403735762s ago: executing program 0 (id=11602): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaba8d, 0x0) 3m10.145793115s ago: executing program 0 (id=11607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) 2m54.981899654s ago: executing program 42 (id=11607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) 2m12.75014392s ago: executing program 9 (id=12378): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e1e, 0x3, 'sed\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000001080)={{0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x6, 0x8, 0x2d}, {@remote, 0x4e22, 0x2000, 0x7f, 0x9, 0x5}}, 0x44) 2m12.661029318s ago: executing program 9 (id=12381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) 2m12.494341956s ago: executing program 9 (id=12382): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000d80)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) 2m12.270020742s ago: executing program 9 (id=12383): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x4, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x1, 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m11.337996515s ago: executing program 9 (id=12392): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x1, "a7"}, @global=@item_4={0x3, 0x1, 0x9}]}}, 0x0}, 0x0) 2m10.925734068s ago: executing program 9 (id=12400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) close(r0) 2m10.589561004s ago: executing program 43 (id=12400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) close(r0) 1m59.885770078s ago: executing program 2 (id=12530): r0 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x5f1c, 0x10100, 0x0, 0x1000040}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd_index=0x8, 0x4, 0x7, 0x6, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x23d, 0x0, 0x0, 0x0, 0x0) 1m59.682220027s ago: executing program 2 (id=12532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r1=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0xffffffff, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x4000) 1m59.532059902s ago: executing program 2 (id=12534): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004003040800", 0x58}], 0x1) 1m59.291333028s ago: executing program 2 (id=12537): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) 1m58.336816028s ago: executing program 2 (id=12551): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 1m58.025949566s ago: executing program 2 (id=12558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r1, &(0x7f0000001a40), 0x0}, 0x20) 1m57.62977029s ago: executing program 44 (id=12558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r1, &(0x7f0000001a40), 0x0}, 0x20) 1m56.625215678s ago: executing program 3 (id=12578): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) 1m56.598799332s ago: executing program 7 (id=12579): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 1m56.374978142s ago: executing program 7 (id=12582): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1) 1m56.35521257s ago: executing program 3 (id=12583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x100, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 1m56.260491082s ago: executing program 3 (id=12585): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) write(r0, 0x0, 0x0) 1m56.202725288s ago: executing program 7 (id=12587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}}, 0x0) 1m56.152593027s ago: executing program 3 (id=12588): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x46, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b18) 1m55.950012233s ago: executing program 3 (id=12591): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x12}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) 1m55.853849003s ago: executing program 1 (id=12594): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) 1m55.654399283s ago: executing program 8 (id=12595): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = fsopen(&(0x7f0000000100)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000200)='/$#*\'/\xd0@-.&\x00', 0x0, r0) 1m55.563324225s ago: executing program 8 (id=12596): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) 1m55.487991579s ago: executing program 8 (id=12597): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x0, @multicast1}, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x4e22, @multicast1}], 0x30) 1m55.425754271s ago: executing program 8 (id=12598): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0x8, "c4b4"}, @local=@item_012={0x0, 0x2, 0xa}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 1m54.825767662s ago: executing program 1 (id=12599): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0), 0x4) 1m54.617573791s ago: executing program 1 (id=12600): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x10001, 0x22a80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={r1, 0x8fd, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x35, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90bf8b1c5512406c00", [0x4, 0x40000000000000]}}) 1m54.32052278s ago: executing program 1 (id=12601): r0 = socket$inet(0x2, 0x6, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) 1m53.85069157s ago: executing program 1 (id=12602): io_setup(0x4, &(0x7f00000014c0)=<r0=>0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_tables_targets\x00') io_submit(r0, 0x1, &(0x7f0000001400)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfff, r1, 0x0, 0x0, 0x2, 0x0, 0x0, r1}]) 1m53.846136424s ago: executing program 7 (id=12603): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000300)={0x385200480, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1m53.836166801s ago: executing program 3 (id=12604): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00212400000024249002813e7c09cbabe53b893324c0f53c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m53.441099656s ago: executing program 8 (id=12605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 1m53.232978802s ago: executing program 7 (id=12606): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000180)=""/140, &(0x7f0000000000)=0x8c) 1m53.187259656s ago: executing program 1 (id=12607): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e28, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x28ac, 0x4) 1m53.033538285s ago: executing program 8 (id=12608): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e25, @loopback}, 0x10) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000001080)) 1m25.852352658s ago: executing program 7 (id=12609): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1m9.973818527s ago: executing program 45 (id=12608): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e25, @loopback}, 0x10) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000001080)) 0s ago: executing program 46 (id=12604): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00212400000024249002813e7c09cbabe53b893324c0f53c"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): with an up link [ 682.799353][T29987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.840167][T30195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.947581][T30195] team0: Port device team_slave_0 added [ 682.965772][T30195] team0: Port device team_slave_1 added [ 683.173762][T30195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.184701][T30195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.225032][T30195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.286543][T29987] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.297556][T30195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.306476][T30195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.343954][T30195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.383188][T26963] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 683.423620][T28441] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.430730][T28441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.497785][T30195] hsr_slave_0: entered promiscuous mode [ 683.522644][T30195] hsr_slave_1: entered promiscuous mode [ 683.533819][T30195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.542238][T26963] usb 1-1: Using ep0 maxpacket: 16 [ 683.555880][T26963] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 683.561723][T30195] Cannot create hsr debugfs directory [ 683.581045][T26963] usb 1-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 683.633027][T26963] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 683.642010][T26963] usb 1-1: config 1 has no interface number 1 [ 683.669101][T26963] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 683.723705][T26963] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 43690, setting to 1024 [ 683.745271][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.745443][T26963] usb 1-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 683.752410][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.798302][T26963] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 683.818043][T26963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.854169][T29987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.864658][T26963] usb 1-1: Product: syz [ 683.868844][T26963] usb 1-1: Manufacturer: syz [ 683.891507][T26963] usb 1-1: SerialNumber: syz [ 684.000923][T29987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.083487][T24489] Bluetooth: hci0: command tx timeout [ 684.163700][T26963] usb 1-1: USB disconnect, device number 46 [ 684.261365][T29987] veth0_vlan: entered promiscuous mode [ 684.298576][T29987] veth1_vlan: entered promiscuous mode [ 684.370329][T29987] veth0_macvtap: entered promiscuous mode [ 684.388579][T29165] udevd[29165]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.394199][T29987] veth1_macvtap: entered promiscuous mode [ 684.521865][T29987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.533282][T29987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.559239][T29987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.575659][T29987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.595644][T29987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.616763][T29987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.660107][T29987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.680191][T29987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.689808][T29987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.698996][T29987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.725633][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 684.725648][ T29] audit: type=1326 audit(1738647243.727:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30393 comm="syz.9.11336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7fc00000 [ 684.772348][T26954] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 684.907201][T30195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 684.943049][T26954] usb 5-1: Using ep0 maxpacket: 8 [ 684.949809][T30195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 684.964756][T26954] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 684.974150][T26954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.007318][T30195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 685.023483][T26954] usb 5-1: Product: syz [ 685.034194][T26954] usb 5-1: Manufacturer: syz [ 685.041276][T26954] usb 5-1: SerialNumber: syz [ 685.054868][T30195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 685.072975][T26954] usb 5-1: config 0 descriptor?? [ 685.094712][T26954] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 685.121759][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.157037][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.256284][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.300809][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.415279][T30195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.445259][T30195] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.468461][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.475635][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.492645][ T8] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 685.556854][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.564041][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.673052][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.716304][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.726522][T26954] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 685.734205][T30195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.754603][T26954] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 685.762578][ T8] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 685.771635][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.783700][T26954] usb 5-1: USB disconnect, device number 45 [ 685.833446][ T8] usb 1-1: config 0 descriptor?? [ 685.874348][T30195] veth0_vlan: entered promiscuous mode [ 685.927284][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.937106][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.947279][T30195] veth1_vlan: entered promiscuous mode [ 685.989419][T30195] veth0_macvtap: entered promiscuous mode [ 686.010754][T30195] veth1_macvtap: entered promiscuous mode [ 686.066303][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.102652][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.142649][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.162627][T24489] Bluetooth: hci0: command tx timeout [ 686.182080][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.201693][T30195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.264760][ T8] zeroplus 0003:0C12:0030.001E: collection stack underflow [ 686.279582][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.302252][ T8] zeroplus 0003:0C12:0030.001E: item 0 2 0 12 parsing failed [ 686.322687][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.335220][ T8] zeroplus 0003:0C12:0030.001E: parse failed [ 686.357568][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.368083][ T8] zeroplus 0003:0C12:0030.001E: probe with driver zeroplus failed with error -22 [ 686.472299][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.479567][ T6107] usb 1-1: USB disconnect, device number 47 [ 686.507061][T30195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.583650][T30195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.622413][T30195] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.631148][T30195] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.670322][T30195] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.907311][T28519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.962540][T28519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.017240][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.048460][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.066155][T30494] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 687.072710][T30494] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 687.134556][T30494] vhci_hcd vhci_hcd.0: Device attached [ 687.187664][T30494] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 687.194225][T30494] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 687.219744][T30508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 687.236949][T30494] vhci_hcd vhci_hcd.0: Device attached [ 687.295686][T30503] vhci_hcd: connection closed [ 687.295775][T30496] vhci_hcd: connection closed [ 687.312392][T26963] vhci_hcd: vhci_device speed not set [ 687.332186][ T1110] vhci_hcd: stop threads [ 687.337224][ T1110] vhci_hcd: release socket [ 687.351373][ T1110] vhci_hcd: disconnect device [ 687.373636][ T1110] vhci_hcd: stop threads [ 687.377919][ T1110] vhci_hcd: release socket [ 687.400851][ T1110] vhci_hcd: disconnect device [ 687.409027][T26963] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 687.423876][T26954] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 687.583205][T26954] usb 4-1: Using ep0 maxpacket: 16 [ 687.606273][T26954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.633064][T26954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.643442][T26961] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 687.660854][T26954] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 687.663679][T30531] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11368'. [ 687.698954][T26954] usb 4-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 687.724844][T26954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.752962][T26954] usb 4-1: config 0 descriptor?? [ 687.815327][T26961] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.831614][T26961] usb 10-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 687.843778][T26961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.886185][T26961] usb 10-1: config 0 descriptor?? [ 688.209305][T26954] wacom 0003:056A:0022.001F: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 688.248396][T26954] wacom 0003:056A:0022.001F: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.3-1/input0 [ 688.292720][T26954] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0022.001F/input/input118 [ 688.325207][T26961] wacom 0003:056A:00F0.0020: hidraw1: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.9-1/input0 [ 688.470332][T26964] usb 4-1: USB disconnect, device number 39 [ 688.516705][T26954] usb 10-1: USB disconnect, device number 6 [ 688.872285][ T6107] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 689.042753][ T6107] usb 6-1: Using ep0 maxpacket: 8 [ 689.072008][ T6107] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.105803][ T6107] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.143328][ T6107] usb 6-1: config 0 interface 0 has no altsetting 0 [ 689.163189][ T6107] usb 6-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 689.202424][ T6107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.222400][T26961] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 689.243152][ T6107] usb 6-1: config 0 descriptor?? [ 689.392207][T26961] usb 5-1: Using ep0 maxpacket: 32 [ 689.423171][T26961] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 689.447464][T26961] usb 5-1: config 0 has no interface number 0 [ 689.473603][T26961] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 689.473632][T26961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.473652][T26961] usb 5-1: Product: syz [ 689.473665][T26961] usb 5-1: Manufacturer: syz [ 689.473680][T26961] usb 5-1: SerialNumber: syz [ 689.475611][T26961] usb 5-1: config 0 descriptor?? [ 689.477691][T26961] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 689.670762][ T6107] ortek 0003:05A4:2000.0021: bogus close delimiter [ 689.670784][ T6107] ortek 0003:05A4:2000.0021: item 0 1 2 10 parsing failed [ 689.673912][ T6107] ortek 0003:05A4:2000.0021: probe with driver ortek failed with error -22 [ 689.897731][ T6107] usb 6-1: USB disconnect, device number 35 [ 690.050134][T26961] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 690.081843][T26961] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 690.286153][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 690.298824][ T8] usb 5-1: USB disconnect, device number 46 [ 690.317340][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 690.342777][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 690.357729][T30632] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11396'. [ 690.370013][ T8] quatech2 5-1:0.51: device disconnected [ 691.742568][ T8] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 691.812371][T26954] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 691.912642][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 691.924415][ T8] usb 10-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 691.942354][ T8] usb 10-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 691.981747][ T8] usb 10-1: config 0 interface 0 has no altsetting 0 [ 691.989373][T26954] usb 1-1: Using ep0 maxpacket: 16 [ 692.006558][T26954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.028900][T26954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.039715][ T8] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 692.062208][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.071814][T26954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 692.095257][ T8] usb 10-1: Product: syz [ 692.112234][T26960] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 692.120040][ T8] usb 10-1: Manufacturer: syz [ 692.134476][T26954] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 692.155622][ T8] usb 10-1: SerialNumber: syz [ 692.189672][ T8] usb 10-1: config 0 descriptor?? [ 692.195174][T26954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.228431][ T8] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input125 [ 692.273064][T26954] usb 1-1: config 0 descriptor?? [ 692.314905][T26960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.359841][T26960] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 692.375782][T26960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.419472][T26960] usb 6-1: config 0 descriptor?? [ 692.446100][T26960] pwc: Askey VC010 type 2 USB webcam detected. [ 692.544119][ T8] usb 10-1: USB disconnect, device number 7 [ 692.573455][T26963] vhci_hcd: vhci_device speed not set [ 692.705516][T26954] input: HID 0955:7214 Haptics as /devices/virtual/input/input126 [ 692.775746][T26954] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 692.797855][T26954] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 692.950766][T26964] usb 1-1: USB disconnect, device number 48 [ 693.005766][ T8] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 693.058159][T26960] pwc: recv_control_msg error -71 req 02 val 2700 [ 693.083544][ T8] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 693.110202][T26960] pwc: recv_control_msg error -71 req 02 val 2c00 [ 693.132448][T26960] pwc: recv_control_msg error -71 req 04 val 1000 [ 693.148202][ T8] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 693.167781][T26960] pwc: recv_control_msg error -71 req 04 val 1300 [ 693.191638][ T8] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 693.203345][T26960] pwc: recv_control_msg error -71 req 04 val 1400 [ 693.222188][T26960] pwc: recv_control_msg error -71 req 02 val 2000 [ 693.252418][T26960] pwc: recv_control_msg error -71 req 02 val 2100 [ 693.262216][T26960] pwc: recv_control_msg error -71 req 04 val 1500 [ 693.278430][T26960] pwc: recv_control_msg error -71 req 02 val 2500 [ 693.305149][T26960] pwc: recv_control_msg error -71 req 02 val 2400 [ 693.342427][T26960] pwc: recv_control_msg error -71 req 02 val 2600 [ 693.356175][T26960] pwc: recv_control_msg error -71 req 02 val 2900 [ 693.382519][T26960] pwc: recv_control_msg error -71 req 02 val 2800 [ 693.417470][T30738] rdma_op ffff8880347159f0 conn xmit_rdma 0000000000000000 [ 693.422252][T26960] pwc: recv_control_msg error -71 req 04 val 1100 [ 693.442207][T26960] pwc: recv_control_msg error -71 req 04 val 1200 [ 693.493634][T26960] pwc: Registered as video103. [ 693.511338][T26960] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input127 [ 693.613990][T26960] usb 6-1: USB disconnect, device number 36 [ 693.964373][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 693.982492][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.993694][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 694.025664][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 694.034305][ T5148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 694.041653][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 694.223862][T30771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11439'. [ 694.515953][T30767] chnl_net:caif_netlink_parms(): no params data found [ 694.754583][T30801] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11447'. [ 694.831542][T30767] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.842415][T30767] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.849596][T30767] bridge_slave_0: entered allmulticast mode [ 694.881128][T30767] bridge_slave_0: entered promiscuous mode [ 695.004599][T30767] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.033481][T30767] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.040740][T30767] bridge_slave_1: entered allmulticast mode [ 695.064787][T30767] bridge_slave_1: entered promiscuous mode [ 695.245260][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.303102][T30767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.324782][T30767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.360861][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.464878][T30767] team0: Port device team_slave_0 added [ 695.533733][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.588739][T30767] team0: Port device team_slave_1 added [ 695.836595][T30833] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11462'. [ 695.868314][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.882319][T30833] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11462'. [ 695.973418][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 695.976613][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 695.977692][T30767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.977708][T30767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.977732][T30767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.979692][T30767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.979708][T30767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.979733][T30767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.992314][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 696.007827][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 696.010001][ T5148] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 696.011056][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 696.057368][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.092378][ T5148] Bluetooth: hci4: command tx timeout [ 696.138199][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.233263][T30767] hsr_slave_0: entered promiscuous mode [ 696.234059][T30767] hsr_slave_1: entered promiscuous mode [ 696.234569][T30767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.234594][T30767] Cannot create hsr debugfs directory [ 696.670828][ T61] bridge_slave_1: left allmulticast mode [ 696.694855][ T61] bridge_slave_1: left promiscuous mode [ 696.695853][T30864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11469'. [ 696.700563][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.766159][ T61] bridge_slave_0: left allmulticast mode [ 696.771841][ T61] bridge_slave_0: left promiscuous mode [ 696.784524][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.258539][T30880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11477'. [ 697.954331][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.966807][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.978033][ T61] bond0 (unregistering): Released all slaves [ 698.015560][T30902] netlink: 284 bytes leftover after parsing attributes in process `syz.3.11486'. [ 698.047040][T30906] sch_tbf: peakrate 8 is lower than or equals to rate 2147483649 ! [ 698.084267][ T5148] Bluetooth: hci0: command tx timeout [ 698.123626][T26960] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 698.163229][ T5148] Bluetooth: hci4: command tx timeout [ 698.294719][T26960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.306298][T26960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.319915][T26960] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 698.330037][T26960] usb 10-1: New USB device strings: Mfr=104, Product=1, SerialNumber=0 [ 698.338695][T26960] usb 10-1: Product: syz [ 698.344035][T26960] usb 10-1: Manufacturer: syz [ 698.354553][T26960] usb 10-1: config 0 descriptor?? [ 698.623872][T30844] chnl_net:caif_netlink_parms(): no params data found [ 698.681936][ T61] hsr_slave_0: left promiscuous mode [ 698.693292][ T61] hsr_slave_1: left promiscuous mode [ 698.699096][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.712231][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.720110][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.732977][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.761915][ T61] veth1_macvtap: left promiscuous mode [ 698.767610][ T61] veth0_macvtap: left promiscuous mode [ 698.773355][ T61] veth1_vlan: left promiscuous mode [ 698.779044][ T61] veth0_vlan: left promiscuous mode [ 698.983995][T26960] uclogic 0003:256C:006D.0023: failed retrieving Huion firmware version: -71 [ 698.993419][T26960] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 699.003540][T26960] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 699.034843][T26960] usb 10-1: USB disconnect, device number 8 [ 699.336854][ T61] team0 (unregistering): Port device team_slave_1 removed [ 699.421606][ T61] team0 (unregistering): Port device team_slave_0 removed [ 699.864863][T30934] delete_channel: no stack [ 699.875303][T30933] delete_channel: no stack [ 700.169351][ T5148] Bluetooth: hci0: command tx timeout [ 700.243034][ T5148] Bluetooth: hci4: command tx timeout [ 700.295757][T30844] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.324141][T30844] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.331325][T30844] bridge_slave_0: entered allmulticast mode [ 700.343563][T30844] bridge_slave_0: entered promiscuous mode [ 700.374647][T30844] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.399772][T30844] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.419807][T30844] bridge_slave_1: entered allmulticast mode [ 700.444065][T30844] bridge_slave_1: entered promiscuous mode [ 700.550068][T30844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.582873][T30844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.600714][T30767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 700.690098][T30767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 700.718663][T30767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 700.742567][T30844] team0: Port device team_slave_0 added [ 700.759593][T30767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 700.788015][T30844] team0: Port device team_slave_1 added [ 700.803620][T30961] fuse: Unknown parameter 'no' [ 700.825322][ T29] audit: type=1326 audit(1738647259.827:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30962 comm="syz.9.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 700.853133][ T29] audit: type=1326 audit(1738647259.827:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30962 comm="syz.9.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 700.875732][ T29] audit: type=1326 audit(1738647259.827:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30962 comm="syz.9.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 700.898878][ T29] audit: type=1326 audit(1738647259.827:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30962 comm="syz.9.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 700.921283][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.966309][T30844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.981240][T30844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.007170][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.014418][ T29] audit: type=1326 audit(1738647259.827:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30962 comm="syz.9.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 701.036822][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.047475][T30844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.103285][T30844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.110260][T30844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.136173][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.206549][T30844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.254465][T30975] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11517'. [ 701.398090][T30981] kernel read not supported for file /� lhOb��~��h����3��J��y�x����v�L�=Q�R�n��FGr���q�ςû~QV7��"qH���d0��������%Nny���D (pid: 30981 comm: syz.9.11520) [ 701.436127][T30844] hsr_slave_0: entered promiscuous mode [ 701.443123][ T29] audit: type=1800 audit(1738647260.447:425): pid=30981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.11520" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=94426 res=0 errno=0 [ 701.478903][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.489777][T30844] hsr_slave_1: entered promiscuous mode [ 701.496518][T30844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.505556][T30844] Cannot create hsr debugfs directory [ 701.571964][ T29] audit: type=1804 audit(1738647260.487:426): pid=30983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.11520" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=94426 res=1 errno=0 [ 701.607711][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.623225][T26961] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 701.710466][T30988] sctp: [Deprecated]: syz.9.11522 (pid 30988) Use of int in max_burst socket option. [ 701.710466][T30988] Use struct sctp_assoc_value instead [ 701.731284][T30767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.811589][T30767] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.817619][T26961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.834401][T26961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.856572][T26961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.890132][T26961] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.905115][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.912308][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.932331][T26961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.967329][T26961] usb 4-1: config 0 descriptor?? [ 701.968410][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.979420][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.244096][ T5148] Bluetooth: hci0: command tx timeout [ 702.323470][ T5148] Bluetooth: hci4: command tx timeout [ 702.395986][T26961] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 702.452621][T26961] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 702.455202][ T29] audit: type=1326 audit(1738647261.457:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31004 comm="syz.0.11531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff059d8cda9 code=0x7ffc0000 [ 702.487554][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.498695][T31005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11531'. [ 702.521324][ T29] audit: type=1326 audit(1738647261.457:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31004 comm="syz.0.11531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff059d8cda9 code=0x7ffc0000 [ 702.547493][ T29] audit: type=1326 audit(1738647261.497:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31004 comm="syz.0.11531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff059d8cda9 code=0x7ffc0000 [ 702.569810][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.589875][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 702.602588][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 702.602612][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 702.602682][ T5148] Workqueue: hci3 hci_rx_work [ 702.602708][ T5148] Call Trace: [ 702.602715][ T5148] <TASK> [ 702.602724][ T5148] dump_stack_lvl+0x241/0x360 [ 702.602749][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.602768][ T5148] ? __pfx__printk+0x10/0x10 [ 702.602798][ T5148] ? __kmalloc_cache_noprof+0x243/0x390 [ 702.602815][ T5148] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 702.602840][ T5148] sysfs_create_dir_ns+0x2ce/0x3a0 [ 702.602862][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 702.602895][ T5148] kobject_add_internal+0x435/0x8d0 [ 702.602928][ T5148] kobject_add+0x152/0x220 [ 702.602950][ T5148] ? do_raw_spin_unlock+0x13c/0x8b0 [ 702.602969][ T5148] ? device_add+0x3e7/0xbf0 [ 702.602986][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 702.603010][ T5148] ? _raw_spin_unlock+0x28/0x50 [ 702.603032][ T5148] ? get_device_parent+0x165/0x410 [ 702.603051][ T5148] device_add+0x4e5/0xbf0 [ 702.603074][ T5148] hci_conn_add_sysfs+0xe8/0x200 [ 702.603101][ T5148] le_conn_complete_evt+0xc9f/0x12e0 [ 702.603133][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 702.603150][ T5148] ? __mutex_unlock_slowpath+0x227/0x800 [ 702.603182][ T5148] ? skb_pull_data+0x112/0x230 [ 702.603216][ T5148] hci_le_enh_conn_complete_evt+0x185/0x420 [ 702.603244][ T5148] hci_event_packet+0xa55/0x1540 [ 702.603266][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 702.603292][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 702.603309][ T5148] ? do_raw_spin_unlock+0x13c/0x8b0 [ 702.603335][ T5148] ? hci_send_to_monitor+0xd8/0x7f0 [ 702.603357][ T5148] ? kcov_remote_start+0x97/0x7d0 [ 702.603382][ T5148] hci_rx_work+0x3f3/0xdb0 [ 702.603405][ T5148] ? process_scheduled_works+0x976/0x1840 [ 702.603425][ T5148] process_scheduled_works+0xa66/0x1840 [ 702.603471][ T5148] ? __pfx_process_scheduled_works+0x10/0x10 [ 702.603501][ T5148] ? assign_work+0x364/0x3d0 [ 702.603526][ T5148] worker_thread+0x870/0xd30 [ 702.603563][ T5148] ? __kthread_parkme+0x169/0x1d0 [ 702.603588][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 702.603638][ T5148] kthread+0x7a9/0x920 [ 702.603660][ T5148] ? __pfx_kthread+0x10/0x10 [ 702.603686][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 702.603708][ T5148] ? __pfx_kthread+0x10/0x10 [ 702.603729][ T5148] ? __pfx_kthread+0x10/0x10 [ 702.603756][ T5148] ? __pfx_kthread+0x10/0x10 [ 702.603777][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 702.603796][ T5148] ? lockdep_hardirqs_on+0x99/0x150 [ 702.603817][ T5148] ? __pfx_kthread+0x10/0x10 [ 702.603840][ T5148] ret_from_fork+0x4b/0x80 [ 702.603860][ T5148] ? __pfx_kthread+0x10/0x10 [ 702.603883][ T5148] ret_from_fork_asm+0x1a/0x30 [ 702.603919][ T5148] </TASK> [ 702.604568][ T5148] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 702.637284][T26961] usb 4-1: USB disconnect, device number 40 [ 702.641949][ T5148] Bluetooth: hci3: failed to register connection device [ 702.754432][T30767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 703.079167][T30767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.173837][T26965] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 703.221359][T30767] veth0_vlan: entered promiscuous mode [ 703.235378][T30844] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 703.245279][T30844] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 703.260843][T30844] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 703.278462][T30844] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 703.306006][T30767] veth1_vlan: entered promiscuous mode [ 703.342374][T26965] usb 1-1: Using ep0 maxpacket: 8 [ 703.356939][T26965] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.381583][T26965] usb 1-1: config 0 interface 0 has no altsetting 0 [ 703.388810][T26965] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 703.409539][T30767] veth0_macvtap: entered promiscuous mode [ 703.414967][T26965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.434404][T26965] usb 1-1: config 0 descriptor?? [ 703.474486][T30767] veth1_macvtap: entered promiscuous mode [ 703.519934][T30767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.551862][T30767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.551882][T30767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.551900][T30767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.553685][T30767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.564161][T30767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.564182][T30767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.564196][T30767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.564211][T30767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.565111][T30767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.694489][T30767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.694559][T30767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.694585][T30767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.694610][T30767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.762083][T30844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.831518][T30844] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.868216][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.868291][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.870134][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.870154][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.873620][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.873695][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.882089][T26965] steelseries 0003:1038:12B6.0025: unknown main item tag 0x0 [ 703.922780][T26965] steelseries 0003:1038:12B6.0025: unknown main item tag 0x0 [ 703.968166][T26965] steelseries 0003:1038:12B6.0025: unknown main item tag 0x0 [ 703.968201][T26965] steelseries 0003:1038:12B6.0025: unknown main item tag 0x0 [ 703.968230][T26965] steelseries 0003:1038:12B6.0025: unknown main item tag 0x0 [ 703.977774][T26965] steelseries 0003:1038:12B6.0025: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 704.059724][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.059747][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.080248][T26965] steelseries 0003:1038:12B6.0025: hid_hw_raw_request() failed with -71 [ 704.091965][T26965] usb 1-1: USB disconnect, device number 49 [ 704.132823][T30844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.259985][T30844] veth0_vlan: entered promiscuous mode [ 704.303243][T30844] veth1_vlan: entered promiscuous mode [ 704.323000][T24489] Bluetooth: hci0: command tx timeout [ 704.392741][T30844] veth0_macvtap: entered promiscuous mode [ 704.419072][T30844] veth1_macvtap: entered promiscuous mode [ 704.471777][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.494114][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.525343][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.546903][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.572277][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.601486][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.633858][T30844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.669734][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.692664][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.734871][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.773198][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.802524][T24489] Bluetooth: hci3: command tx timeout [ 704.812516][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.856034][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.868160][T30844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.933139][T30844] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.941892][T30844] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.973016][T30844] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.981803][T30844] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.201782][T28519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.235684][T28519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.303084][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.310931][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.622495][T26960] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 705.809331][T26960] usb 10-1: config 0 has an invalid interface number: 29 but max is 0 [ 705.829599][T26960] usb 10-1: config 0 has no interface number 0 [ 705.858402][T26960] usb 10-1: config 0 interface 29 has no altsetting 0 [ 705.880427][T26960] usb 10-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 705.893003][T26960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.911334][T26960] usb 10-1: Product: syz [ 705.931586][T26960] usb 10-1: Manufacturer: syz [ 705.941712][T26960] usb 10-1: SerialNumber: syz [ 705.963943][T26960] usb 10-1: config 0 descriptor?? [ 706.184653][T26960] peak_usb 10-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 706.203936][T31098] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 706.213293][ T25] IPVS: starting estimator thread 0... [ 706.322609][T31099] IPVS: using max 24 ests per chain, 57600 per kthread [ 706.385886][T26960] peak_usb 10-1:0.29 can0: sending command failure: -22 [ 706.402501][T26964] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 706.410066][T26960] peak_usb 10-1:0.29 can0: sending command failure: -22 [ 706.439550][T26960] peak_usb 10-1:0.29 can0: sending command failure: -22 [ 706.554049][T26960] peak_usb 10-1:0.29: probe with driver peak_usb failed with error -22 [ 706.562681][T26964] usb 1-1: Using ep0 maxpacket: 16 [ 706.571154][T26964] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.591305][T26960] usb 10-1: USB disconnect, device number 9 [ 706.603021][T26964] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.641847][T26964] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 706.721031][T26964] usb 1-1: config 0 interface 0 has no altsetting 0 [ 706.728370][T26964] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 706.748619][T26964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.780075][T26964] usb 1-1: config 0 descriptor?? [ 707.205909][T26964] hid-generic 0003:045E:05DA.0026: ignoring exceeding usage max [ 707.253863][T26964] hid-generic 0003:045E:05DA.0026: unbalanced collection at end of report description [ 707.289162][T26964] hid-generic 0003:045E:05DA.0026: probe with driver hid-generic failed with error -22 [ 707.413915][T26964] usb 1-1: USB disconnect, device number 50 [ 707.586219][T31156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11582'. [ 707.662293][T26961] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 707.823910][T26961] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 707.833766][T26961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.863939][T26961] usb 10-1: config 0 descriptor?? [ 708.291907][T26961] [drm:udl_init] *ERROR* Selecting channel failed [ 708.316599][T26961] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 708.334604][T26961] [drm] Initialized udl on minor 2 [ 708.352287][T26961] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 708.370616][T26961] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 708.380033][T26960] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 708.418583][T26961] usb 10-1: USB disconnect, device number 10 [ 708.432310][T26960] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 708.450512][T26960] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 709.521314][T31249] netlink: 180 bytes leftover after parsing attributes in process `syz.9.11610'. [ 711.541110][T26966] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 711.711586][T26966] usb 2-1: Using ep0 maxpacket: 32 [ 711.719828][T26966] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 711.742143][T26966] usb 2-1: config 0 has no interface number 0 [ 711.787066][T26966] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 711.812244][T26966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.832462][T26966] usb 2-1: Product: syz [ 711.836679][T26966] usb 2-1: Manufacturer: syz [ 711.863565][T26966] usb 2-1: SerialNumber: syz [ 711.883140][T26966] usb 2-1: config 0 descriptor?? [ 711.890262][T26966] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 712.107823][T26966] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 712.145801][T26966] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 712.188757][T31373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11652'. [ 712.380015][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 712.581327][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 712.582373][T26960] usb 2-1: USB disconnect, device number 10 [ 712.640503][T26960] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 712.697962][T31385] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11657'. [ 712.698564][T26960] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 712.773596][T26960] quatech2 2-1:0.51: device disconnected [ 713.502361][T26966] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 713.582237][T26961] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 713.693139][T26966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 713.712871][T26966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 713.750275][T26966] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 713.773322][T26961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 713.782247][T26966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.798994][T26961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.814575][T26966] usb 4-1: config 0 descriptor?? [ 713.830382][T31407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 713.840127][T26961] usb 2-1: New USB device found, idVendor=056a, idProduct=7a26, bcdDevice=ad.13 [ 713.858322][T26966] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input128 [ 713.872373][T26961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.902983][T26961] usb 2-1: config 0 descriptor?? [ 714.041950][T31427] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11665'. [ 714.319603][T26961] wacom 0003:056A:7A26.0027: Unknown device_type for 'HID 056a:7a26'. Ignoring. [ 714.445417][ T25] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 714.475704][ T5194] bcm5974 4-1:0.0: could not read from device [ 714.490553][ T5194] bcm5974 4-1:0.0: could not read from device [ 714.512776][T26966] usb 4-1: USB disconnect, device number 41 [ 714.534353][T26964] usb 2-1: USB disconnect, device number 11 [ 714.605645][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 714.626268][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.646615][ T25] usb 10-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 714.668556][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.689768][ T25] usb 10-1: config 0 descriptor?? [ 715.117086][ T25] cypress 0003:04B4:07B1.0028: unknown main item tag 0x0 [ 715.163909][ T25] cypress 0003:04B4:07B1.0028: unknown main item tag 0x0 [ 715.171042][ T25] cypress 0003:04B4:07B1.0028: unknown main item tag 0x0 [ 715.201843][ T25] cypress 0003:04B4:07B1.0028: unknown main item tag 0x0 [ 715.232889][ T25] cypress 0003:04B4:07B1.0028: unknown main item tag 0x0 [ 715.270225][ T25] cypress 0003:04B4:07B1.0028: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.9-1/input0 [ 715.338806][ T25] usb 10-1: USB disconnect, device number 11 [ 715.422755][T26960] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 715.603959][T26960] usb 4-1: Using ep0 maxpacket: 8 [ 715.617317][T26960] usb 4-1: config 0 has an invalid interface number: 112 but max is 1 [ 715.617344][T26960] usb 4-1: config 0 has an invalid interface number: 17 but max is 1 [ 715.617364][T26960] usb 4-1: config 0 has no interface number 0 [ 715.617381][T26960] usb 4-1: config 0 has no interface number 1 [ 715.620401][T26960] usb 4-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14 [ 715.620428][T26960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.620448][T26960] usb 4-1: Product: syz [ 715.620462][T26960] usb 4-1: Manufacturer: syz [ 715.620477][T26960] usb 4-1: SerialNumber: syz [ 715.622569][T26960] usb 4-1: config 0 descriptor?? [ 716.083074][ T25] usb 4-1: USB disconnect, device number 42 [ 716.392199][T26961] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 716.443778][T31504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11681'. [ 716.564050][T26961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.589141][T26961] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 716.616395][T26961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.675740][T26961] usb 2-1: config 0 descriptor?? [ 717.092060][T26961] logitech 0003:046D:C293.0029: bogus close delimiter [ 717.099276][T26961] logitech 0003:046D:C293.0029: item 0 0 2 10 parsing failed [ 717.126052][T26961] logitech 0003:046D:C293.0029: parse failed [ 717.135569][T26961] logitech 0003:046D:C293.0029: probe with driver logitech failed with error -22 [ 717.343341][ T25] usb 2-1: USB disconnect, device number 12 [ 719.082282][T26966] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 719.244177][T26966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.275675][T26966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.306621][T26966] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 719.364378][T26966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.412596][T26966] usb 2-1: config 0 descriptor?? [ 719.858339][T26966] arvo 0003:1E7D:30D4.002A: unbalanced delimiter at end of report description [ 719.903223][T26966] arvo 0003:1E7D:30D4.002A: parse failed [ 719.908942][T26966] arvo 0003:1E7D:30D4.002A: probe with driver arvo failed with error -22 [ 720.069994][T26961] usb 2-1: USB disconnect, device number 13 [ 720.092314][ T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 720.252228][T26966] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 720.252253][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 720.284094][ T8] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 720.302171][ T8] usb 10-1: config 179 has no interface number 0 [ 720.313692][ T8] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 720.342192][ T8] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 720.362365][ T8] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 720.392196][ T8] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 720.412570][ T8] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 720.421776][T26966] usb 4-1: Using ep0 maxpacket: 32 [ 720.441385][ T8] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 720.457413][T26966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.461796][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.477267][T26966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.491372][T26966] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 720.514286][T31639] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 720.514608][T26966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.550812][T26966] usb 4-1: config 0 descriptor?? [ 720.939764][T31639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.983587][T31639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.988757][T26966] ft260 0003:0403:6030.002B: item fetching failed at offset 0/2 [ 721.023332][T26966] ft260 0003:0403:6030.002B: failed to parse HID [ 721.037116][T26966] ft260 0003:0403:6030.002B: probe with driver ft260 failed with error -22 [ 721.211253][T26966] usb 4-1: USB disconnect, device number 43 [ 721.265209][T26965] usb 10-1: USB disconnect, device number 12 [ 721.265209][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 721.265254][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 723.052243][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 723.266183][ T25] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 723.282294][ T25] usb 2-1: config 0 has no interface number 0 [ 723.298603][ T25] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 723.308317][T31760] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11751'. [ 723.329139][ T25] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.360125][ T25] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 723.392719][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.402360][T26954] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 723.429214][ T25] usb 2-1: Product: syz [ 723.442353][ T25] usb 2-1: Manufacturer: syz [ 723.447052][ T25] usb 2-1: SerialNumber: syz [ 723.468147][ T25] usb 2-1: config 0 descriptor?? [ 723.484725][T31733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 723.496297][ T25] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 723.524834][ T25] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 723.574452][T26954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25149, setting to 1024 [ 723.611240][T26954] usb 4-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 723.646877][T26954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.688439][T26954] usb 4-1: config 0 descriptor?? [ 723.714303][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 723.916312][T26965] usb 2-1: USB disconnect, device number 14 [ 723.938944][T26965] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 723.975014][T26965] cyberjack 2-1:0.69: device disconnected [ 724.127577][T26954] hid-generic 0003:0EEF:C002.002C: unbalanced collection at end of report description [ 724.158529][T26954] hid-generic 0003:0EEF:C002.002C: probe with driver hid-generic failed with error -22 [ 724.347169][T26954] usb 4-1: USB disconnect, device number 44 [ 724.424262][T31794] tipc: Enabled bearer <eth:ipvlan1>, priority 25 [ 724.832431][T31805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11763'. [ 724.892397][T31805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11763'. [ 725.290676][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.301283][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.310125][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.320399][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.328970][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 725.349896][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.622230][ T25] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 725.784471][ T25] usb 4-1: config 0 has an invalid interface number: 250 but max is 0 [ 725.824751][ T25] usb 4-1: config 0 has no interface number 0 [ 725.830917][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 725.841518][T31825] chnl_net:caif_netlink_parms(): no params data found [ 725.882183][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.927286][ T25] usb 4-1: config 0 descriptor?? [ 726.102349][ T25] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 726.240030][T31825] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.252648][T31825] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.266891][T31825] bridge_slave_0: entered allmulticast mode [ 726.274817][T31825] bridge_slave_0: entered promiscuous mode [ 726.291820][T31825] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.309195][T31825] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.322968][T31825] bridge_slave_1: entered allmulticast mode [ 726.340120][T31825] bridge_slave_1: entered promiscuous mode [ 726.398641][T31825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.430221][T31825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.597155][T31825] team0: Port device team_slave_0 added [ 726.618543][T31825] team0: Port device team_slave_1 added [ 726.693506][T31877] vlan2: entered promiscuous mode [ 726.699367][T31877] syz_tun: entered promiscuous mode [ 726.705435][T31877] vlan2: entered allmulticast mode [ 726.710668][T31877] syz_tun: entered allmulticast mode [ 726.726887][T31825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.745557][T31825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.786643][T31825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.810129][T26961] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 726.839350][T31825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.852484][ T25] usb 4-1: device descriptor read/64, error -71 [ 726.858703][T31825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.898238][T31825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.974136][T26961] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 726.985993][T26961] usb 10-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 727.005411][T31825] hsr_slave_0: entered promiscuous mode [ 727.015327][T31825] hsr_slave_1: entered promiscuous mode [ 727.025962][T26961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.042572][T31825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 727.063788][T26961] usb 10-1: config 0 descriptor?? [ 727.072372][T31825] Cannot create hsr debugfs directory [ 727.092322][ T25] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 727.460155][T24489] Bluetooth: hci1: command tx timeout [ 727.482009][T26961] elecom 0003:056E:00E6.002D: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.9-1/input0 [ 727.535257][ T25] usb 4-1: USB disconnect, device number 45 [ 727.679971][T31901] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 727.709452][ T8] usb 10-1: USB disconnect, device number 13 [ 728.131485][T31921] tipc: Started in network mode [ 728.139527][T31923] ebtables: ebtables: counters copy to user failed while replacing table [ 728.157291][T31921] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 728.182277][T31921] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media [ 728.875923][T31825] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 728.956206][T31825] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 729.014940][T31825] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 729.074581][T31825] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 729.299470][T31825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.355587][T31825] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.405137][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.412291][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.486422][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.493579][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.522946][T24489] Bluetooth: hci1: command tx timeout [ 729.714592][T31825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.833587][T26961] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 729.851535][T31825] veth0_vlan: entered promiscuous mode [ 729.890098][T31825] veth1_vlan: entered promiscuous mode [ 729.948570][T31825] veth0_macvtap: entered promiscuous mode [ 729.964220][T31825] veth1_macvtap: entered promiscuous mode [ 729.991168][T31825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.025177][T31825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.047345][T26961] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 730.072872][T26961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.081700][T31825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.113169][T26961] usb 4-1: config 0 descriptor?? [ 730.129942][T31825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.170896][T31825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.192487][T31825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.222425][T31825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.265890][T31825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.278025][T31825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.331837][T31825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.352176][T26961] [drm] vendor descriptor length:8 data:08 5f d6 68 b1 cf e8 ff 00 00 00 [ 730.373784][T26961] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 730.381624][T31825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.398949][T31825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.438981][T31825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.456522][T31825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.469262][T31825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.479678][T31825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.491084][T31825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.523628][T31825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.549257][T26961] [drm:udl_init] *ERROR* Selecting channel failed [ 730.558345][T31825] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.608415][T31825] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.623917][T31825] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.637505][T26961] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 730.657384][T31825] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.666239][T26961] [drm] Initialized udl on minor 2 [ 730.679576][T26961] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 730.712556][T26961] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 730.741486][T26961] usb 4-1: USB disconnect, device number 46 [ 730.897221][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.935826][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.023270][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.085125][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.322236][T26961] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 731.502384][T26961] usb 2-1: Using ep0 maxpacket: 32 [ 731.546163][T26961] usb 2-1: config 0 has an invalid interface number: 227 but max is 0 [ 731.574292][T26961] usb 2-1: config 0 has no interface number 0 [ 731.594022][T26961] usb 2-1: config 0 interface 227 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.604019][T24489] Bluetooth: hci1: command tx timeout [ 731.635271][T26961] usb 2-1: config 0 interface 227 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.639067][T32066] program syz.8.11854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 731.684102][T26961] usb 2-1: config 0 interface 227 has no altsetting 0 [ 731.731553][T26961] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 731.765966][T26961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.815565][T26961] usb 2-1: config 0 descriptor?? [ 732.262385][T26961] uclogic 0003:5543:006E.002E: interface is invalid, ignoring [ 732.454262][T26961] usb 2-1: USB disconnect, device number 15 [ 732.652338][ T8] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 732.811912][T32110] netlink: 'syz.7.11867': attribute type 2 has an invalid length. [ 732.863657][ T8] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 732.887892][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.923221][ T8] usb 4-1: config 0 descriptor?? [ 732.974113][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 733.115908][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 733.115925][ T29] audit: type=1800 audit(1738647292.117:435): pid=32127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.11870" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 733.143401][T32125] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11872'. [ 733.166172][T32129] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11872'. [ 733.368000][ T8] gspca_cpia1: usb_control_msg 03, error -32 [ 733.397955][ T8] gspca_cpia1: usb_control_msg 03, error -71 [ 733.422444][ T8] gspca_cpia1: usb_control_msg 01, error -71 [ 733.428456][ T8] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 733.481386][ T8] usb 4-1: USB disconnect, device number 47 [ 733.682385][T24489] Bluetooth: hci1: command tx timeout [ 734.181120][T26966] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 734.373653][T26966] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 734.398212][T26966] usb 10-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 734.398242][T26966] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.398263][T26966] usb 10-1: Product: syz [ 734.398279][T26966] usb 10-1: Manufacturer: syz [ 734.398294][T26966] usb 10-1: SerialNumber: syz [ 734.640470][T26966] usb 10-1: selecting invalid altsetting 1 [ 734.811575][T32214] netlink: 'syz.1.11902': attribute type 280 has an invalid length. [ 734.841388][T26966] LME2510(C): Firmware Status: 06 03 47 00 00 00 [ 734.841424][T26966] usb 10-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 734.841597][T26966] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 734.843441][T26966] usb 10-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 734.843694][T26966] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 734.843728][T26966] usb 10-1: media controller created [ 734.845718][T26966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 734.930046][T26966] DVB: Unable to find symbol m88rs2000_attach() [ 734.930065][T26966] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 734.930086][T26966] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 735.023837][T26960] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 735.055787][T26966] usb 10-1: USB disconnect, device number 14 [ 735.174429][T26960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 735.186829][T26960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.221366][T26960] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 735.252880][T26960] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 735.277809][T26960] usb 9-1: Manufacturer: syz [ 735.291227][T26960] usb 9-1: config 0 descriptor?? [ 735.713406][T26960] cougar 0003:060B:700A.002F: unknown main item tag 0x0 [ 735.738515][T26960] cougar 0003:060B:700A.002F: unknown main item tag 0x0 [ 735.752689][T26960] cougar 0003:060B:700A.002F: unknown main item tag 0x0 [ 735.779071][T26960] cougar 0003:060B:700A.002F: unknown main item tag 0x0 [ 735.810057][T26960] cougar 0003:060B:700A.002F: unknown main item tag 0x0 [ 735.853753][T26960] cougar 0003:060B:700A.002F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 735.980532][T26960] usb 9-1: USB disconnect, device number 4 [ 736.589092][T32280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11920'. [ 736.621799][T32280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11920'. [ 736.742430][ T29] audit: type=1326 audit(1738647295.727:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.1.11922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 736.812219][ T29] audit: type=1326 audit(1738647295.727:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.1.11922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 736.834633][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.852323][T26966] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 736.880828][ T29] audit: type=1326 audit(1738647295.737:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.1.11922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 736.903361][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.938399][ T29] audit: type=1326 audit(1738647295.737:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.1.11922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 737.003024][ T29] audit: type=1326 audit(1738647295.737:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.1.11922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 737.027587][T26966] usb 9-1: Using ep0 maxpacket: 32 [ 737.052218][T26966] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.082574][T26966] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.092829][ T29] audit: type=1326 audit(1738647295.737:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.1.11922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 737.124633][T26966] usb 9-1: config 0 interface 0 has no altsetting 0 [ 737.137630][T26966] usb 9-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 737.167138][T26966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.175581][ T29] audit: type=1326 audit(1738647295.737:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.1.11922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 737.214082][T26966] usb 9-1: config 0 descriptor?? [ 737.253996][ T29] audit: type=1326 audit(1738647295.737:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.1.11922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 737.650934][T26966] itetech 0003:048D:8595.0030: hidraw0: USB HID v8.00 Device [HID 048d:8595] on usb-dummy_hcd.8-1/input0 [ 737.890218][ T8] usb 9-1: USB disconnect, device number 5 [ 738.031225][T32347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.238368][T32355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.522365][T26957] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 738.692506][T26957] usb 10-1: Using ep0 maxpacket: 32 [ 738.703852][T26957] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.740041][T26957] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.780556][T26957] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 738.801755][T26957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.822828][T26957] usb 10-1: config 0 descriptor?? [ 739.252800][T26957] kone 0003:1E7D:2CED.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.9-1/input0 [ 739.441493][T26957] kone 0003:1E7D:2CED.0031: couldn't init struct kone_device [ 739.455241][T26957] kone 0003:1E7D:2CED.0031: couldn't install mouse [ 739.476262][T26957] kone 0003:1E7D:2CED.0031: probe with driver kone failed with error -5 [ 739.502463][T26957] usb 10-1: USB disconnect, device number 15 [ 739.562363][ T25] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 739.689429][T32426] UHID_CREATE from different security context by process 230 (syz.1.11964), this is not allowed. [ 739.725685][ T25] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 739.741661][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.780155][ T25] usb 4-1: config 0 descriptor?? [ 739.796550][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 740.000324][ T25] gp8psk: usb in 128 operation failed. [ 740.233996][ T25] gp8psk: usb in 146 operation failed. [ 740.239507][ T25] gp8psk: failed to get FW version [ 740.282351][ T25] gp8psk: usb in 149 operation failed. [ 740.302262][ T25] gp8psk: failed to get FPGA version [ 740.319207][ T25] gp8psk: usb in 138 operation failed. [ 740.339391][ T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 740.400702][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 740.431497][ T25] usb 4-1: USB disconnect, device number 48 [ 741.231676][T32500] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11993'. [ 741.993681][T32541] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 742.650375][ T8] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 742.850591][ T8] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 742.863251][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.894422][ T8] usb 9-1: config 0 descriptor?? [ 742.919984][ T8] cp210x 9-1:0.0: cp210x converter detected [ 742.952926][T32591] netlink: 'syz.9.12027': attribute type 31 has an invalid length. [ 743.342498][ T8] usb 9-1: cp210x converter now attached to ttyUSB0 [ 743.525584][T32615] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12035'. [ 743.536789][T26966] usb 9-1: USB disconnect, device number 6 [ 743.572892][T26966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 743.693959][T26966] cp210x 9-1:0.0: device disconnected [ 743.751395][T32623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12037'. [ 745.222385][T26964] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 745.384001][T26964] usb 10-1: Using ep0 maxpacket: 8 [ 745.396107][T26964] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 745.424034][T26964] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 745.452230][T26964] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 745.460427][T26964] usb 10-1: Product: syz [ 745.479125][T26964] usb 10-1: Manufacturer: syz [ 745.490807][T26964] usb 10-1: SerialNumber: syz [ 745.661979][T32724] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 745.661979][T32724] The task syz.8.12069 (32724) triggered the difference, watch for misbehavior. [ 745.731550][T26964] usb 10-1: Handspring Visor / Palm OS: No valid connect info available [ 745.753573][T26964] usb 10-1: Handspring Visor / Palm OS: port 0, is for Console use [ 745.767242][T26964] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 745.784459][T26964] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2 [ 745.945157][T26964] usb 10-1: palm_os_3_probe - error -71 getting bytes available request [ 745.963494][T26964] visor 10-1:1.0: Handspring Visor / Palm OS converter detected [ 745.986073][T26964] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 746.032584][T26964] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 746.054918][T26964] usb 10-1: USB disconnect, device number 16 [ 746.068708][T26964] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 746.084336][T26964] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 746.104230][T26964] visor 10-1:1.0: device disconnected [ 747.365105][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.371471][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.707497][ T358] bond0: option mode: unable to set because the bond device has slaves [ 749.814911][ T457] qrtr: Invalid version 0 [ 750.750975][ T507] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12151'. [ 750.802646][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 750.832285][T26964] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 750.992536][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.003229][T26964] usb 4-1: Using ep0 maxpacket: 32 [ 751.022147][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.043197][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 751.044785][T26964] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.060276][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 751.082188][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.112155][ T8] usb 2-1: config 0 descriptor?? [ 751.112178][T26964] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.176132][T26964] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 751.194394][T26964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.238266][T26964] hub 4-1:4.0: USB hub found [ 751.443929][T26964] hub 4-1:4.0: 2 ports detected [ 751.455919][T26964] usb 4-1: selecting invalid altsetting 1 [ 751.474015][T26964] hub 4-1:4.0: Using single TT (err -22) [ 751.545447][ T8] ryos 0003:1E7D:3138.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 751.769237][ T8] usb 2-1: USB disconnect, device number 16 [ 751.855430][ T550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12163'. [ 751.857976][T26964] usb 4-1: USB disconnect, device number 49 [ 751.891707][ T550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12163'. [ 751.930131][ T550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12163'. [ 751.946458][ T29] audit: type=1326 audit(1738647310.947:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 751.968718][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.019716][ T29] audit: type=1326 audit(1738647310.947:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 752.112846][ T29] audit: type=1326 audit(1738647310.947:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 752.135112][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.148464][ T560] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12167'. [ 752.170840][ T29] audit: type=1326 audit(1738647310.947:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 752.259013][ T29] audit: type=1326 audit(1738647310.947:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 752.328612][ T29] audit: type=1326 audit(1738647310.947:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 752.350859][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.375761][T26957] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x4 [ 752.405072][T26957] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x2 [ 752.442169][T26957] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x3 [ 752.479351][ T29] audit: type=1326 audit(1738647310.947:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 752.501596][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.538561][T26957] hid-generic 0000:3000000:0000.0033: hidraw0: <UNKNOWN> HID v0.00 Device [sy] on syz0 [ 752.552173][ T29] audit: type=1326 audit(1738647310.947:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 752.702225][ T29] audit: type=1326 audit(1738647310.947:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 752.802297][ T29] audit: type=1326 audit(1738647310.947:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=519 comm="syz.8.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe964b8cda9 code=0x7fc00000 [ 752.917102][ T595] netlink: 'syz.9.12176': attribute type 1 has an invalid length. [ 753.140440][ T605] support for the xor transformation has been removed. [ 753.422398][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 753.606604][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.631844][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.645976][ T8] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 753.665460][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.696476][ T8] usb 9-1: config 0 descriptor?? [ 753.782401][T26960] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 753.954501][T26960] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.954536][T26960] usb 10-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 753.954604][T26960] usb 10-1: config 0 interface 0 has no altsetting 0 [ 753.954632][T26960] usb 10-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 753.954655][T26960] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.957075][T26960] usb 10-1: config 0 descriptor?? [ 754.140948][ T8] arvo 0003:1E7D:30D4.0034: unknown main item tag 0x0 [ 754.143597][ T8] arvo 0003:1E7D:30D4.0034: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0 [ 754.339493][ T8] arvo 0003:1E7D:30D4.0034: couldn't init struct arvo_device [ 754.368985][ T8] arvo 0003:1E7D:30D4.0034: couldn't install keyboard [ 754.400392][T26960] nti 0003:0757:0A00.0035: unknown main item tag 0x0 [ 754.413481][ T8] arvo 0003:1E7D:30D4.0034: probe with driver arvo failed with error -71 [ 754.443058][T26960] nti 0003:0757:0A00.0035: ignoring exceeding usage max [ 754.467232][ T8] usb 9-1: USB disconnect, device number 7 [ 754.483124][T26960] nti 0003:0757:0A00.0035: usage index exceeded [ 754.516347][T26960] nti 0003:0757:0A00.0035: item 0 0 2 0 parsing failed [ 754.555532][T26960] nti 0003:0757:0A00.0035: probe with driver nti failed with error -22 [ 754.563465][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 754.606437][T26960] usb 10-1: USB disconnect, device number 17 [ 754.697912][ T665] syz.1.12202 (665) used obsolete PPPIOCDETACH ioctl [ 755.056170][ T682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12206'. [ 755.304625][ T694] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 755.569647][ T702] vlan2: entered allmulticast mode [ 756.252259][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 756.412256][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 756.478431][ T25] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 756.496681][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.543504][ T25] usb 2-1: Product: syz [ 756.547697][ T25] usb 2-1: Manufacturer: syz [ 756.578598][ T25] usb 2-1: SerialNumber: syz [ 756.611177][ T25] usb 2-1: config 0 descriptor?? [ 756.642855][ T25] gspca_main: sq905-2.14.0 probing 2770:9120 [ 757.264529][ T25] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 757.293077][ T25] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 757.333599][ T25] usb 2-1: USB disconnect, device number 17 [ 757.449362][ T796] dummy0: entered promiscuous mode [ 757.491569][ T796] dummy0: left promiscuous mode [ 757.916452][ T821] netlink: 'syz.9.12250': attribute type 1 has an invalid length. [ 758.382318][ T25] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 758.570125][ T25] usb 10-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 758.603363][ T25] usb 10-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 758.652479][ T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.694584][ T25] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 758.752173][ T25] usb 10-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 758.761329][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.810138][ T25] usb 10-1: config 0 descriptor?? [ 758.832059][ T25] usb-storage 10-1:0.0: USB Mass Storage device detected [ 758.848986][ T25] usb-storage 10-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 758.875693][ T872] xt_CT: No such helper "snmp_trap" [ 759.052370][T26966] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 759.060517][T26964] usb 10-1: USB disconnect, device number 18 [ 759.232569][T26966] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 759.277513][T26966] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 759.302223][T26966] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 759.311293][T26966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.363879][ T877] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 759.386455][T26966] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.488888][ T908] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media [ 759.787587][ T925] openvswitch: netlink: nsh attr 9 is out of range max 3 [ 759.804255][ T925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.020592][T26966] usb 2-1: USB disconnect, device number 18 [ 761.238760][ T1011] IPVS: ip_vs_edit_dest(): server weight less than zero [ 761.249448][T26960] IPVS: starting estimator thread 0... [ 761.382373][ T1013] IPVS: using max 23 ests per chain, 55200 per kthread [ 761.594136][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 761.594155][ T29] audit: type=1800 audit(1738647320.577:479): pid=1036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.12313" name="file1" dev="tmpfs" ino=463 res=0 errno=0 [ 762.312288][ T29] audit: type=1326 audit(1738647321.307:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1027 comm="syz.9.12311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7fc00000 [ 762.592250][T26964] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 762.783960][T26964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.798408][T26964] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 762.829283][T26964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.852227][T26960] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 762.863579][T26964] usb 2-1: config 0 descriptor?? [ 763.022577][T26960] usb 4-1: Using ep0 maxpacket: 8 [ 763.037057][T26960] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 763.067309][T26960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.094437][T26960] usb 4-1: Product: syz [ 763.102435][T26960] usb 4-1: Manufacturer: syz [ 763.107058][T26960] usb 4-1: SerialNumber: syz [ 763.124304][T26960] usb 4-1: config 0 descriptor?? [ 763.134774][T26960] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 763.289302][T26964] betop 0003:11C2:2208.0036: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.1-1/input0 [ 763.310195][T26964] betop 0003:11C2:2208.0036: no inputs found [ 763.508215][T26964] usb 2-1: USB disconnect, device number 19 [ 763.724570][ T1157] openvswitch: netlink: Unknown nsh attribute 0 [ 763.732319][ T1157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.757907][T26960] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 763.783295][T26960] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 763.802760][T26960] usb 4-1: USB disconnect, device number 50 [ 763.883496][ T8] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 764.052463][T26964] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 764.069619][ T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.080016][ T8] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.113547][ T8] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 764.132257][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.149071][ T8] usb 9-1: Product: syz [ 764.154864][ T8] usb 9-1: Manufacturer: syz [ 764.159489][ T8] usb 9-1: SerialNumber: syz [ 764.168554][ T8] usb 9-1: selecting invalid altsetting 1 [ 764.235341][T26964] usb 10-1: Using ep0 maxpacket: 16 [ 764.253262][T26964] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.283026][T26964] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.316557][T26964] usb 10-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 764.352354][T26964] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.391803][T26964] usb 10-1: config 0 descriptor?? [ 764.776271][ T8] cdc_ncm 9-1:1.0: SET_CRC_MODE failed [ 764.803722][ T8] usb 9-1: selecting invalid altsetting 1 [ 764.822902][ T8] cdc_ncm 9-1:1.0: bind() failure [ 764.855393][ T8] usb 9-1: USB disconnect, device number 8 [ 764.876645][T26964] itetech 0003:06CB:73F5.0037: hidraw0: USB HID v0.03 Device [HID 06cb:73f5] on usb-dummy_hcd.9-1/input0 [ 765.022432][T26966] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 765.080915][T26964] usb 10-1: USB disconnect, device number 19 [ 765.192224][T26966] usb 2-1: Using ep0 maxpacket: 8 [ 765.204181][T26966] usb 2-1: config 150 has an invalid interface number: 204 but max is 0 [ 765.226350][T26966] usb 2-1: config 150 has no interface number 0 [ 765.242177][T26966] usb 2-1: config 150 interface 204 has no altsetting 0 [ 765.271194][T26966] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 765.300958][T26966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.321059][T26966] usb 2-1: Product: syz [ 765.332397][T26966] usb 2-1: Manufacturer: syz [ 765.342415][T26966] usb 2-1: SerialNumber: syz [ 765.613451][T26966] usb 2-1: USB disconnect, device number 20 [ 766.145295][ T29] audit: type=1326 audit(1738647325.137:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.12373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 766.217990][ T29] audit: type=1326 audit(1738647325.137:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.12373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 766.222237][ T6107] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 766.283590][ T29] audit: type=1326 audit(1738647325.167:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.12373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 766.361282][ T29] audit: type=1326 audit(1738647325.167:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.12373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 766.423221][ T29] audit: type=1326 audit(1738647325.167:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.12373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 766.483935][ T6107] usb 9-1: Using ep0 maxpacket: 16 [ 766.484167][ T29] audit: type=1326 audit(1738647325.167:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.12373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 766.503245][ T6107] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.573575][ T6107] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 766.581230][ T29] audit: type=1326 audit(1738647325.167:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.12373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 766.615819][ T6107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.627888][ T29] audit: type=1326 audit(1738647325.167:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.12373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfedf8cda9 code=0x7ffc0000 [ 766.663554][ T6107] usb 9-1: config 0 descriptor?? [ 767.114261][ T6107] hid-multitouch 0003:1FD2:6007.0038: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 767.324773][ T6107] usb 9-1: USB disconnect, device number 9 [ 768.220397][ T29] audit: type=1400 audit(1738647327.217:489): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=1361 comm="syz.8.12393" [ 768.396602][ T1371] RDS: rds_bind could not find a transport for ::c000:20:0:0, load rds_tcp or rds_rdma? [ 768.758405][ T61] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.873777][ T61] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.053572][ T1396] use of bytesused == 0 is deprecated and will be removed in the future, [ 769.072241][ T1396] use the actual size instead. [ 769.102645][ T61] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.171791][ T1399] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12405'. [ 769.293697][T26964] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 769.350192][ T61] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.438909][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 769.449989][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 769.461210][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 769.481162][T26964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 769.492905][T26964] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 769.501993][T26964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.510253][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 769.518343][ T5148] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 769.529237][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 769.538492][T26964] usb 2-1: config 0 descriptor?? [ 770.000153][T26964] uclogic 0003:5543:0005.0039: No inputs registered, leaving [ 770.021141][ T1441] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media [ 770.043191][T26964] uclogic 0003:5543:0005.0039: hidraw0: USB HID v1.01 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 770.111203][ T1419] chnl_net:caif_netlink_parms(): no params data found [ 770.173156][ T61] bridge_slave_1: left allmulticast mode [ 770.178826][ T61] bridge_slave_1: left promiscuous mode [ 770.202502][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.218737][T26964] usb 2-1: USB disconnect, device number 21 [ 770.254340][ T61] bridge_slave_0: left allmulticast mode [ 770.260031][ T61] bridge_slave_0: left promiscuous mode [ 770.286974][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.832468][T26957] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 770.875788][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.891294][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.915908][ T61] bond0 (unregistering): Released all slaves [ 770.953742][ T1452] vlan2: entered allmulticast mode [ 770.958892][ T1452] gretap0: entered allmulticast mode [ 771.033453][T26957] usb 9-1: Using ep0 maxpacket: 16 [ 771.045943][T26957] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.067503][T26957] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.081376][T26957] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 771.091164][T26957] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.110024][T26957] usb 9-1: config 0 descriptor?? [ 771.120658][ T61] tipc: Disabling bearer <udp:s> [ 771.132471][ T61] tipc: Disabling bearer <eth:ipvlan1> [ 771.192337][ T61] tipc: Left network mode [ 771.513194][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.520344][ T1419] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.551339][ T1419] bridge_slave_0: entered allmulticast mode [ 771.560418][T26957] corsair 0003:1B1C:1B02.003A: unexpected long global item [ 771.563538][ T1419] bridge_slave_0: entered promiscuous mode [ 771.621600][T24489] Bluetooth: hci3: command tx timeout [ 771.632327][T26957] corsair 0003:1B1C:1B02.003A: parse failed [ 771.638307][T26957] corsair 0003:1B1C:1B02.003A: probe with driver corsair failed with error -22 [ 771.712344][ T61] hsr_slave_0: left promiscuous mode [ 771.783030][ T61] hsr_slave_1: left promiscuous mode [ 771.788917][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.802047][T26964] usb 9-1: USB disconnect, device number 10 [ 771.847486][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.886644][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.909838][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.997130][ T61] veth1_macvtap: left promiscuous mode [ 772.008279][ T61] veth0_macvtap: left promiscuous mode [ 772.022499][ T61] veth1_vlan: left promiscuous mode [ 772.038397][ T61] veth0_vlan: left promiscuous mode [ 772.916256][ T61] team0 (unregistering): Port device team_slave_1 removed [ 773.003692][ T61] team0 (unregistering): Port device team_slave_0 removed [ 773.582059][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.591249][ T1419] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.604965][ T1419] bridge_slave_1: entered allmulticast mode [ 773.611647][ T1419] bridge_slave_1: entered promiscuous mode [ 773.648673][ T1518] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 773.692265][T24489] Bluetooth: hci3: command tx timeout [ 773.783897][ T1419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.824506][ T1419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.936304][ T1419] team0: Port device team_slave_0 added [ 773.958421][ T1419] team0: Port device team_slave_1 added [ 774.044256][ T1419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.051238][ T1419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.125727][ T1419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.160576][ T1419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.182108][ T1419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.252638][ T1419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.407038][ T1419] hsr_slave_0: entered promiscuous mode [ 774.425823][ T1419] hsr_slave_1: entered promiscuous mode [ 774.431908][ T1419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.446312][ T29] audit: type=1326 audit(1738647333.437:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1583 comm="syz.1.12461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb22d8cda9 code=0x0 [ 774.481105][ T1419] Cannot create hsr debugfs directory [ 774.508170][ T61] IPVS: stop unused estimator thread 0... [ 775.026471][ T1604] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.12467'. [ 775.665788][ T1641] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12477'. [ 775.744441][ T8] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 775.762873][T24489] Bluetooth: hci3: command tx timeout [ 775.928315][ T8] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 775.960940][ T8] usb 4-1: config 0 has no interface number 0 [ 775.975178][ T8] usb 4-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b [ 775.994973][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.023726][ T8] usb 4-1: Product: syz [ 776.027918][ T8] usb 4-1: Manufacturer: syz [ 776.055438][ T8] usb 4-1: SerialNumber: syz [ 776.066646][ T8] usb 4-1: config 0 descriptor?? [ 776.087454][ T8] option 4-1:0.188: GSM modem (1-port) converter detected [ 776.314906][ T1419] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 776.325793][ T1419] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 776.339428][T26954] usb 4-1: USB disconnect, device number 51 [ 776.353268][T26954] option 4-1:0.188: device disconnected [ 776.371922][ T1419] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 776.405250][ T1419] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 776.528484][ T29] audit: type=1326 audit(1738647335.527:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1677 comm="syz.1.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 776.578058][ T1419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.599074][ T29] audit: type=1326 audit(1738647335.527:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1677 comm="syz.1.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 776.629984][ T1419] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.645848][ T29] audit: type=1326 audit(1738647335.567:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1677 comm="syz.1.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 776.673668][T28519] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.680815][T28519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.718071][T28519] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.725210][T28519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.742875][ T29] audit: type=1326 audit(1738647335.567:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1677 comm="syz.1.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 776.832535][ T29] audit: type=1326 audit(1738647335.567:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1677 comm="syz.1.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 776.873552][ T1419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 776.906827][ T1419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 776.933895][ T29] audit: type=1326 audit(1738647335.567:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1677 comm="syz.1.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 777.027344][ T29] audit: type=1326 audit(1738647335.567:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1677 comm="syz.1.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 777.043739][ T1694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12495'. [ 777.099799][ T1419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.229675][ T1419] veth0_vlan: entered promiscuous mode [ 777.281579][ T1419] veth1_vlan: entered promiscuous mode [ 777.396779][ T1419] veth0_macvtap: entered promiscuous mode [ 777.418929][ T1419] veth1_macvtap: entered promiscuous mode [ 777.493033][ T1419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.542237][ T1419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.593017][ T1419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.604600][ T1419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.644139][ T1419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.654974][T26954] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 777.678590][ T1419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.700407][ T1419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.716673][ T1726] xt_CT: No such helper "pptp" [ 777.716691][ T1419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.734579][ T1419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.788611][ T1419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.842507][T24489] Bluetooth: hci3: command tx timeout [ 777.842695][ T1419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.872246][T26954] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 777.888084][T26954] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 777.900249][ T1419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.917143][T26954] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x2 has invalid maxpacket 463, setting to 64 [ 777.930721][ T1419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.941098][T26954] usb 9-1: config 0 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 777.954433][ T1419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.973706][ T1419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.984385][ T1419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.993272][T26954] usb 9-1: config 0 interface 0 has no altsetting 0 [ 777.995431][ T1419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.001382][T26954] usb 9-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 778.001408][T26954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.014368][ T1419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.068239][T26954] usb 9-1: config 0 descriptor?? [ 778.091633][ T1737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12508'. [ 778.102271][ T1712] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 778.109519][ T1712] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 778.140687][ T1419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.166027][ T1419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.185342][ T1419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.202202][ T1419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.250633][ T1745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12511'. [ 778.293765][ T1745] tipc: Started in network mode [ 778.298684][ T1745] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 778.330721][ T1745] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 778.351977][ T1745] tipc: Enabled bearer <udp:s>, priority 10 [ 778.539586][T26954] gyration 0003:0C16:0003.003B: unbalanced collection at end of report description [ 778.583860][T26954] gyration 0003:0C16:0003.003B: probe with driver gyration failed with error -22 [ 778.621016][T28519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.663376][T28519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.762548][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.775159][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.840082][T26954] usb 9-1: USB disconnect, device number 11 [ 779.469758][ T6107] tipc: Node number set to 1 [ 779.762361][ T6107] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 779.917054][ T29] audit: type=1326 audit(1738647338.917:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.12533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4758cda9 code=0x7ffc0000 [ 779.943227][ T6107] usb 9-1: Using ep0 maxpacket: 16 [ 779.965181][ T6107] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.983071][ T6107] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.012275][ T6107] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.022223][ T29] audit: type=1326 audit(1738647338.957:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.12533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4758cda9 code=0x7ffc0000 [ 780.047411][ T6107] usb 9-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 780.047438][ T6107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.049261][ T6107] usb 9-1: config 0 descriptor?? [ 780.134590][ T29] audit: type=1326 audit(1738647338.957:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.12533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7e4758cda9 code=0x7ffc0000 [ 780.236873][ T29] audit: type=1326 audit(1738647338.957:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.12533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4758cda9 code=0x7ffc0000 [ 780.290423][ T29] audit: type=1326 audit(1738647338.957:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.12533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4758cda9 code=0x7ffc0000 [ 780.346026][ T29] audit: type=1326 audit(1738647338.967:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.12533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f7e4758cda9 code=0x7ffc0000 [ 780.413527][ T29] audit: type=1326 audit(1738647338.967:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.12533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4758cda9 code=0x7ffc0000 [ 780.456978][ T29] audit: type=1326 audit(1738647338.967:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.12533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4758cda9 code=0x7ffc0000 [ 780.541891][ T6107] ryos 0003:1E7D:31CE.003C: unknown main item tag 0x0 [ 780.583979][ T6107] ryos 0003:1E7D:31CE.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.8-1/input0 [ 780.585996][ T1852] x_tables: ip_tables: udp match: only valid for protocol 17 [ 780.792033][T26961] usb 9-1: USB disconnect, device number 12 [ 781.593668][T28441] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.650480][ T1899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12557'. [ 781.801030][T28441] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.074768][T28441] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.404774][T28441] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.450176][ T29] audit: type=1326 audit(1738647341.447:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1927 comm="syz.1.12569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 782.537839][ T29] audit: type=1326 audit(1738647341.447:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1927 comm="syz.1.12569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22d8cda9 code=0x7ffc0000 [ 782.768241][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 782.778862][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 782.792656][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 782.804377][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 782.813538][ T5148] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 782.820827][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 782.912346][T28441] bridge_slave_1: left allmulticast mode [ 782.960572][T28441] bridge_slave_1: left promiscuous mode [ 782.977694][T28441] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.988918][ T1954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12577'. [ 783.027801][T28441] bridge_slave_0: left allmulticast mode [ 783.052213][T28441] bridge_slave_0: left promiscuous mode [ 783.062836][T28441] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.312284][T26966] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 784.485044][T26966] usb 9-1: Using ep0 maxpacket: 16 [ 784.497885][T26966] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.542380][T26966] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.575006][T26966] usb 9-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 784.614604][T26966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.649900][T26966] usb 9-1: config 0 descriptor?? [ 784.885411][ T5148] Bluetooth: hci3: command tx timeout [ 785.180403][T26966] hid (null): bogus close delimiter [ 785.203780][T26966] nzxt-kraken2 0003:1E71:170E.003D: bogus close delimiter [ 785.221701][T28441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.242412][T26966] nzxt-kraken2 0003:1E71:170E.003D: item 0 0 2 10 parsing failed [ 785.263416][T26966] nzxt-kraken2 0003:1E71:170E.003D: hid parse failed with -22 [ 785.282498][T26966] nzxt-kraken2 0003:1E71:170E.003D: probe with driver nzxt-kraken2 failed with error -22 [ 785.296836][T28441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.338154][T28441] bond0 (unregistering): Released all slaves [ 785.434613][T26966] usb 9-1: USB disconnect, device number 13 [ 785.448321][ T1973] tipc: Started in network mode [ 785.472888][ T1973] tipc: Node identity -, cluster identity 4711 [ 786.032487][T26966] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 786.248446][T26966] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 786.289581][T26966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 786.361471][T26966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 786.409811][T26966] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 786.462695][T26966] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 786.506687][ T1950] chnl_net:caif_netlink_parms(): no params data found [ 786.523830][T26966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.574465][T26966] usb 4-1: config 0 descriptor?? [ 787.049443][ T5148] Bluetooth: hci3: command tx timeout [ 791.172359][ T5148] Bluetooth: hci3: command tx timeout [ 791.192085][ C1] sched: DL replenish lagged too much [ 793.409714][T24489] Bluetooth: hci3: command tx timeout [ 795.749487][T24489] Bluetooth: hci2: command 0x0406 tx timeout [ 795.774862][T26966] usb 4-1: can't set config #0, error -71 [ 808.992646][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.193891][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.367329][ T5148] Bluetooth: hci4: command 0x0406 tx timeout [ 823.371528][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 836.904635][T26966] usb 4-1: USB disconnect, device number 52 [ 852.248455][T28246] Bluetooth: hci1: command 0x0406 tx timeout [ 873.868998][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.018436][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 910.116397][T28246] Bluetooth: hci3: command 0x0406 tx timeout [ 931.892239][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.911121][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 975.487470][ T30] INFO: task kworker/u8:2:28441 blocked for more than 143 seconds. [ 975.502112][ T30] Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 975.509762][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 978.990880][ T30] task:kworker/u8:2 state:D stack:21104 pid:28441 tgid:28441 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 980.307322][ T30] Workqueue: netns cleanup_net [ 980.325483][ T30] Call Trace: [ 980.328787][ T30] <TASK> [ 980.331739][ T30] __schedule+0x190e/0x4c90 [ 980.488681][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.838064][ T30] ? __pfx___schedule+0x10/0x10 [ 980.892040][ T30] ? __pfx_lock_release+0x10/0x10 [ 980.897118][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 981.012028][ T30] ? kthread_data+0x52/0xd0 [ 981.016717][ T30] ? schedule+0x90/0x320 [ 981.020989][ T30] ? wq_worker_sleeping+0x66/0x240 [ 981.172069][ T30] ? schedule+0x90/0x320 [ 981.176355][ T30] schedule+0x14b/0x320 [ 981.180531][ T30] schedule_preempt_disabled+0x13/0x30 [ 981.323592][ T30] __mutex_lock+0x817/0x1010 [ 981.328232][ T30] ? __mutex_lock+0x602/0x1010 [ 981.442088][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 981.447681][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 981.542112][ T30] ? synchronize_rcu+0x11b/0x360 [ 981.547086][ T30] ? __pfx_synchronize_rcu+0x10/0x10 [ 981.652042][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 981.657986][ T30] ? rcu_is_watching+0x15/0xb0 [ 981.792120][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 981.797545][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 981.881770][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 981.963679][ T30] hwsim_exit_net+0x5c1/0x670 [ 981.968427][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 982.062160][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 982.068042][ T30] cleanup_net+0x812/0xd60 [ 982.152059][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 982.157049][ T30] ? process_scheduled_works+0x976/0x1840 [ 982.232057][ T30] process_scheduled_works+0xa66/0x1840 [ 982.237695][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 982.282083][ T30] ? assign_work+0x364/0x3d0 [ 982.286738][ T30] worker_thread+0x870/0xd30 [ 982.332053][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 982.338007][ T30] ? __kthread_parkme+0x169/0x1d0 [ 982.382144][ T30] ? __pfx_worker_thread+0x10/0x10 [ 982.387316][ T30] kthread+0x7a9/0x920 [ 982.391405][ T30] ? __pfx_kthread+0x10/0x10 [ 982.472176][ T30] ? __pfx_worker_thread+0x10/0x10 [ 982.477326][ T30] ? __pfx_kthread+0x10/0x10 [ 982.481938][ T30] ? __pfx_kthread+0x10/0x10 [ 982.602260][ T30] ? __pfx_kthread+0x10/0x10 [ 982.606894][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 982.682316][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 982.687581][ T30] ? __pfx_kthread+0x10/0x10 [ 982.752274][ T30] ret_from_fork+0x4b/0x80 [ 982.756735][ T30] ? __pfx_kthread+0x10/0x10 [ 982.761346][ T30] ret_from_fork_asm+0x1a/0x30 [ 982.823173][ T30] </TASK> [ 982.832280][ T30] INFO: task kworker/u8:8:28521 blocked for more than 150 seconds. [ 982.840220][ T30] Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 983.002141][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 983.010858][ T30] task:kworker/u8:8 state:D stack:23600 pid:28521 tgid:28521 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 983.192169][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 983.198464][ T30] Call Trace: [ 983.201776][ T30] <TASK> [ 983.312076][ T30] __schedule+0x190e/0x4c90 [ 983.316649][ T30] ? __pfx___schedule+0x10/0x10 [ 983.321526][ T30] ? __pfx_lock_release+0x10/0x10 [ 983.372051][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 983.377983][ T30] ? kthread_data+0x52/0xd0 [ 983.432737][ T30] ? schedule+0x90/0x320 [ 983.437014][ T30] ? wq_worker_sleeping+0x66/0x240 [ 983.492536][ T30] ? schedule+0x90/0x320 [ 983.496820][ T30] schedule+0x14b/0x320 [ 983.500999][ T30] schedule_preempt_disabled+0x13/0x30 [ 983.614578][ T30] __mutex_lock+0x817/0x1010 [ 983.619240][ T30] ? __mutex_lock+0x602/0x1010 [ 983.692050][ T30] ? addrconf_verify_work+0x19/0x30 [ 983.697296][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 983.752888][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 983.758910][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 983.852384][ T30] ? process_scheduled_works+0x976/0x1840 [ 983.858146][ T30] addrconf_verify_work+0x19/0x30 [ 983.922206][ T30] process_scheduled_works+0xa66/0x1840 [ 983.927812][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 983.992144][ T30] ? assign_work+0x364/0x3d0 [ 983.996775][ T30] worker_thread+0x870/0xd30 [ 984.001396][ T30] ? __kthread_parkme+0x169/0x1d0 [ 984.105044][ T30] ? __pfx_worker_thread+0x10/0x10 [ 984.110196][ T30] kthread+0x7a9/0x920 [ 984.192070][ T30] ? __pfx_kthread+0x10/0x10 [ 984.196704][ T30] ? __pfx_worker_thread+0x10/0x10 [ 984.201859][ T30] ? __pfx_kthread+0x10/0x10 [ 984.312046][ T30] ? __pfx_kthread+0x10/0x10 [ 984.316704][ T30] ? __pfx_kthread+0x10/0x10 [ 984.321313][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 984.414773][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 984.420037][ T30] ? __pfx_kthread+0x10/0x10 [ 984.482111][ T30] ret_from_fork+0x4b/0x80 [ 984.486690][ T30] ? __pfx_kthread+0x10/0x10 [ 984.491303][ T30] ret_from_fork_asm+0x1a/0x30 [ 984.602071][ T30] </TASK> [ 984.605217][ T30] [ 984.605217][ T30] Showing all locks held in the system: [ 984.682884][ T30] 3 locks held by kworker/u8:0/11: [ 984.702191][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 984.832102][ T30] #1: ffffc90000107c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 984.972039][ T30] #2: ffffffff8fcc0148 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 984.981079][ T30] 1 lock held by khungtaskd/30: [ 985.092037][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 985.162055][ T30] 2 locks held by getty/5586: [ 985.166765][ T30] #0: ffff8880314670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 985.242778][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 985.304514][ T30] 3 locks held by kworker/0:2/26954: [ 985.309825][ T30] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 SYZFAIL: failed to send rpc fd=3 want=184 sent=0 n=-1 (errno 32: Broken pipe) [ 985.422470][ T30] #1: ffffc90003c47c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 985.475925][ T30] #2: ffffffff8fcc0148 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20