last executing test programs: 3m1.448221253s ago: executing program 4 (id=2831): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) 3m0.517883145s ago: executing program 4 (id=2850): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r1, 0x0, 0x20) fcntl$setpipe(r1, 0x407, 0x0) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50}, 0x50) 3m0.323082551s ago: executing program 4 (id=2856): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 3m0.107012408s ago: executing program 4 (id=2859): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x300, r1, {0x7, 0x1f, 0x19d0}}, 0x50) 2m59.871649768s ago: executing program 4 (id=2865): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 2m59.595618414s ago: executing program 4 (id=2869): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) 2m44.228371112s ago: executing program 0 (id=2972): set_mempolicy(0x6, &(0x7f0000000000)=0x40006, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000580)={0x100000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) lseek(r0, 0x1000000, 0x0) 2m43.549409064s ago: executing program 0 (id=2975): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x4b) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 2m40.784686799s ago: executing program 0 (id=2979): r0 = socket$inet_sctp(0x2, 0x1, 0x84) io_submit(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1) 2m40.515078461s ago: executing program 0 (id=2980): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="08003700000000000a000600080211"], 0x30}}, 0x0) 2m37.532763745s ago: executing program 3 (id=2991): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, 0xffd7, 0x0) 2m35.830932779s ago: executing program 1 (id=3000): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x6c, 0x43, 0xa6, 0x8, 0x5d1, 0x9003, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0xcc, 0x98}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/199) 2m35.539764298s ago: executing program 2 (id=3002): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='\x00', 0x89901) fchdir(r0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2m35.217898686s ago: executing program 2 (id=3003): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 2m34.873353496s ago: executing program 3 (id=3004): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@loopback, r2}, 0x14) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 2m34.611452576s ago: executing program 3 (id=3005): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x727d, &(0x7f0000000080)={0x0, 0x189f, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) 2m34.28301532s ago: executing program 3 (id=3006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x0, 0x0, 0x0, {}, [@q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb450}]}}]}, 0x60}}, 0x0) 2m34.095914731s ago: executing program 1 (id=3007): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000001f800)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 2m33.901580516s ago: executing program 3 (id=3008): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 2m33.756861866s ago: executing program 3 (id=3009): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) syz_usb_disconnect(r0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x20100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x2, 0x2, 0x2, 0x3, 0x8}) 2m33.296855499s ago: executing program 0 (id=3010): r0 = memfd_create(&(0x7f0000002280)='\xcaB\x89\xed`@>\x89=\x9e', 0x0) write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00') 2m33.296479597s ago: executing program 1 (id=3011): pipe2$9p(0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) 2m33.296265431s ago: executing program 2 (id=3012): r0 = getpid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r0, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 2m32.946626274s ago: executing program 1 (id=3013): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2d0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b3, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x6b, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c64afa0d2a1d2"}, {0xdd, 0x2, "4f3fef835ea8"}]}}]}, 0x2d0}}, 0x0) 2m32.946235486s ago: executing program 2 (id=3014): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x30}}, 0x0) 2m32.687793108s ago: executing program 0 (id=3015): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 2m32.635517903s ago: executing program 1 (id=3016): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x32a8, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x30}) io_uring_enter(r0, 0x79dc, 0x0, 0x0, 0x0, 0x0) 2m32.627603003s ago: executing program 2 (id=3017): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) 2m32.276289773s ago: executing program 2 (id=3018): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 0s ago: executing program 1 (id=3020): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0x20004000) kernel console output (not intermixed with test programs): T12954] hsr_slave_0: entered promiscuous mode [ 508.008871][T12954] hsr_slave_1: entered promiscuous mode [ 508.036707][T12954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.056632][T12954] Cannot create hsr debugfs directory [ 508.568966][T12996] chnl_net:caif_netlink_parms(): no params data found [ 508.752434][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.916214][ T3028] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.083832][ T5246] Bluetooth: hci5: command tx timeout [ 509.356187][ T3028] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.666161][ T3028] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.735880][ T29] audit: type=1326 audit(1729244351.994:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.2.2252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d597dff9 code=0x0 [ 509.792413][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.004523][ T3028] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.050042][T12996] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.062007][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.078929][T12996] bridge_slave_0: entered allmulticast mode [ 510.091861][T12996] bridge_slave_0: entered promiscuous mode [ 510.108153][T12996] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.121379][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.139095][T12996] bridge_slave_1: entered allmulticast mode [ 510.147833][T12996] bridge_slave_1: entered promiscuous mode [ 510.329043][T12996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.373260][T12996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.566745][T12996] team0: Port device team_slave_0 added [ 510.611788][T12996] team0: Port device team_slave_1 added [ 510.832402][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.953578][T13086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.044391][T12996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.051385][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.250662][T12996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.312081][T13091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.319160][T12996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.343544][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.421911][T12996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.562826][ T5285] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 511.573600][ T8] IPVS: starting estimator thread 0... [ 511.624042][T12954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.640130][ T3028] bridge_slave_1: left allmulticast mode [ 511.654755][ T3028] bridge_slave_1: left promiscuous mode [ 511.672502][T13098] IPVS: using max 17 ests per chain, 40800 per kthread [ 511.683066][ T3028] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.712304][ T3028] bridge_slave_0: left allmulticast mode [ 511.726678][ T3028] bridge_slave_0: left promiscuous mode [ 511.735575][ T5285] usb 3-1: config 189 has an invalid descriptor of length 60, skipping remainder of the config [ 511.754711][ T5285] usb 3-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 511.773776][ T3028] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.781408][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 511.813810][ T5285] usb 3-1: Product: syz [ 511.841304][ T5285] usb 3-1: Manufacturer: syz [ 511.863889][ T5285] usb 3-1: SerialNumber: syz [ 511.874557][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 512.624045][ T3028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.638154][ T3028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.650408][ T3028] bond0 (unregistering): Released all slaves [ 512.664445][T13097] tipc: Started in network mode [ 512.669580][T13097] tipc: Node identity ac1414aa, cluster identity 4711 [ 512.677753][T13097] tipc: Enabled bearer , priority 10 [ 512.736439][T12954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.821580][T12996] hsr_slave_0: entered promiscuous mode [ 512.829503][T12996] hsr_slave_1: entered promiscuous mode [ 512.847892][T12996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.859351][T12996] Cannot create hsr debugfs directory [ 512.877846][T12954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.912441][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 513.067016][ T5285] hub 3-1:189.0: bad descriptor, ignoring hub [ 513.090132][ T5285] hub 3-1:189.0: probe with driver hub failed with error -5 [ 513.128808][ T5285] keyspan 3-1:189.0: Keyspan - (without firmware) converter detected [ 513.139178][T12954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.173072][ T5285] usb 3-1: USB disconnect, device number 32 [ 513.213102][ T5285] keyspan 3-1:189.0: device disconnected [ 513.248112][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2268'. [ 513.516179][T13133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.523201][ T3028] hsr_slave_0: left promiscuous mode [ 513.530613][ T3028] hsr_slave_1: left promiscuous mode [ 513.553602][ T3028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.572408][ T3028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.633033][ T3028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.640475][ T3028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.722290][T13138] netlink: 'syz.4.2272': attribute type 11 has an invalid length. [ 513.756288][ T3028] veth1_macvtap: left promiscuous mode [ 513.768477][T13138] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2272'. [ 513.778233][ T3028] veth0_macvtap: left promiscuous mode [ 513.790384][ T3028] veth1_vlan: left promiscuous mode [ 513.803175][ T5288] tipc: Node number set to 2886997162 [ 513.806248][ T3028] veth0_vlan: left promiscuous mode [ 513.884054][T13146] netlink: 'syz.2.2274': attribute type 9 has an invalid length. [ 513.891821][T13146] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.2274'. [ 513.952506][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 514.992399][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.124201][ T3028] team0 (unregistering): Port device team_slave_1 removed [ 515.290250][ T3028] team0 (unregistering): Port device team_slave_0 removed [ 516.032403][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.678907][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 516.997855][T13192] input: syz0 as /devices/virtual/input/input41 [ 517.061115][T12954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.072587][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 517.077467][T12954] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.121280][ T711] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.128430][ T711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.210601][ T711] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.217753][ T711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.919568][T12954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.983355][T13192] input: failed to attach handler leds to device input41, error: -6 [ 518.112405][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.304011][T12996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.331728][T12996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.368840][T12954] veth0_vlan: entered promiscuous mode [ 518.402636][T12996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.459375][T12996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.489411][T12954] veth1_vlan: entered promiscuous mode [ 518.634724][T12954] veth0_macvtap: entered promiscuous mode [ 518.660474][T12954] veth1_macvtap: entered promiscuous mode [ 518.756281][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.806820][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.825862][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.842503][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.854614][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.875729][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.891050][T12954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.907510][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.919271][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.936885][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.952103][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.966934][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.988115][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.000900][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.022016][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.053847][T12954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.152411][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.202780][T12996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.229826][T12954] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.290488][T12954] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.352686][T12954] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.393568][T12954] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.535872][T12996] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.701800][ T711] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.708971][ T711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.777901][ T711] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.785075][ T711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.037404][ T711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.096058][ T711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.192406][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.228835][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.279875][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.334523][T12996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.603747][T12996] veth0_vlan: entered promiscuous mode [ 520.650116][T12996] veth1_vlan: entered promiscuous mode [ 520.802772][T12996] veth0_macvtap: entered promiscuous mode [ 520.846395][T12996] veth1_macvtap: entered promiscuous mode [ 520.930255][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.990063][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.046350][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.100319][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.141634][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.187224][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.232400][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.241063][T13245] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2298'. [ 521.271810][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.319068][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.401245][T12996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.496583][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.616292][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.663662][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.674219][ T29] audit: type=1326 audit(1729244363.934:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.1.2301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3c417dff9 code=0x0 [ 521.696031][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.715931][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.747581][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.763654][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.781114][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.799558][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.809758][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2303'. [ 521.823810][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.837686][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.856955][T12996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.912856][ T5284] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 521.927611][T12996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.946351][T13262] loop9: detected capacity change from 0 to 7 [ 521.954849][T12996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.972260][T12996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.981592][T13262] Dev loop9: unable to read RDB block 7 [ 521.989393][T12996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.998394][T13262] loop9: unable to read partition table [ 522.004365][T13262] loop9: partition table beyond EOD, truncated [ 522.013469][T13262] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 522.065992][ T5284] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 522.099023][ T5284] usb 4-1: config 0 has no interface number 0 [ 522.131686][ T5284] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 522.167616][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.175750][ T5284] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 522.196769][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.213287][ T5284] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 47, changing to 9 [ 522.256074][ T5284] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 8192, setting to 1024 [ 522.267155][T13267] mmap: syz.4.2306 (13267) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 522.271759][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.279388][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 522.296550][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.307296][ T5284] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 522.319348][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.328112][ T5284] usb 4-1: Product: syz [ 522.333133][ T5284] usb 4-1: Manufacturer: syz [ 522.339312][ T5284] usb 4-1: SerialNumber: syz [ 522.365251][ T5284] usb 4-1: config 0 descriptor?? [ 522.395399][ T5284] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 522.417111][ T5284] xpad 4-1:0.237: probe with driver xpad failed with error -5 [ 522.625447][ T5284] usb 4-1: USB disconnect, device number 25 [ 523.021798][ T3009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.093198][ T81] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 523.145301][ T3009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.302489][ T81] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.312932][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 523.342419][ T81] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 523.372469][ T81] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.516738][T10988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.527509][ T3009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.544722][ T81] usb 1-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 523.555225][T10988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.563206][ T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.571386][ T81] usb 1-1: Product: syz [ 523.575761][T10988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.582992][ T81] usb 1-1: Manufacturer: syz [ 523.587698][ T81] usb 1-1: SerialNumber: syz [ 523.598819][T10988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.606875][T13301] netlink: 'syz.3.2323': attribute type 9 has an invalid length. [ 523.607522][ T81] usb 1-1: config 0 descriptor?? [ 523.625413][T10988] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 523.634899][ T81] usb 1-1: Found UVC 0.00 device syz (0086:0b5b) [ 523.641282][ T81] usb 1-1: No valid video chain found. [ 523.647002][T10988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.649827][T13301] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.2323'. [ 523.824445][ T3009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.833296][T13306] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 523.854268][T13306] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2324'. [ 523.966785][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'. [ 524.032000][ T8] usb 1-1: USB disconnect, device number 31 [ 524.187052][T13318] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 524.222193][T13318] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 524.322707][T13325] input: syz1 as /devices/virtual/input/input42 [ 524.352686][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 524.480955][ T3009] bridge_slave_1: left allmulticast mode [ 524.492895][ T3009] bridge_slave_1: left promiscuous mode [ 524.495741][T13328] netlink: 536 bytes leftover after parsing attributes in process `syz.1.2334'. [ 524.512538][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.533016][ T3009] bridge_slave_0: left allmulticast mode [ 524.538713][ T3009] bridge_slave_0: left promiscuous mode [ 524.561739][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.258751][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.298005][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.331706][ T3009] bond0 (unregistering): Released all slaves [ 525.392599][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.461874][T13302] chnl_net:caif_netlink_parms(): no params data found [ 525.758028][ T5246] Bluetooth: hci4: command tx timeout [ 526.418286][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.432594][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.460737][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.481017][T13302] bridge_slave_0: entered allmulticast mode [ 526.528423][T13302] bridge_slave_0: entered promiscuous mode [ 527.178472][T13392] input: syz1 as /devices/virtual/input/input43 [ 527.203457][T13302] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.225478][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.242588][T13302] bridge_slave_1: entered allmulticast mode [ 527.256866][T13302] bridge_slave_1: entered promiscuous mode [ 527.413546][ T3009] hsr_slave_0: left promiscuous mode [ 527.420362][ T3009] hsr_slave_1: left promiscuous mode [ 527.472602][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.482725][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.490160][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.545642][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.569591][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.625221][ T3009] veth1_macvtap: left promiscuous mode [ 527.630790][ T3009] veth0_macvtap: left promiscuous mode [ 527.655572][ T3009] veth1_vlan: left promiscuous mode [ 527.660906][ T3009] veth0_vlan: left promiscuous mode [ 527.792541][ T5246] Bluetooth: hci4: command tx timeout [ 528.212693][ T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 528.365807][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 528.501898][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 528.512568][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.560437][ T25] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 528.588096][ T25] usb 1-1: can't read configurations, error -71 [ 529.120725][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 529.214335][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 529.221809][T13428] netlink: 'syz.2.2368': attribute type 7 has an invalid length. [ 529.241786][T13428] netlink: 'syz.2.2368': attribute type 8 has an invalid length. [ 529.255668][T13428] netlink: 4244 bytes leftover after parsing attributes in process `syz.2.2368'. [ 529.552417][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 529.873238][ T5246] Bluetooth: hci4: command tx timeout [ 530.403761][T13451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2377'. [ 530.466331][T13302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.479528][T13302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.577593][T13302] team0: Port device team_slave_0 added [ 530.592418][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 530.614333][T13302] team0: Port device team_slave_1 added [ 530.773040][T13302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.780154][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.891433][T13302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.007554][T13302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.059474][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.161853][T13302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.465909][T13302] hsr_slave_0: entered promiscuous mode [ 531.499966][T13302] hsr_slave_1: entered promiscuous mode [ 531.606805][T13302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.615613][T13302] Cannot create hsr debugfs directory [ 531.632420][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.953016][ T5246] Bluetooth: hci4: command tx timeout [ 532.658537][T13302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 532.672440][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.715638][T13302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 532.755040][T13302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 532.812141][T13302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 532.826085][T13553] tipc: Started in network mode [ 532.831065][T13553] tipc: Node identity 7f000001, cluster identity 4711 [ 532.839057][T13553] tipc: Enabled bearer , priority 10 [ 533.016399][T13302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.058713][T13302] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.072657][ T5286] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 533.082923][ T3040] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.090028][ T3040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.127304][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.134482][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.274952][T13302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.317286][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 533.329129][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 533.346883][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 533.358481][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.375567][ T5286] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.386677][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.410606][T13302] veth0_vlan: entered promiscuous mode [ 533.418766][ T5286] usb 4-1: config 0 descriptor?? [ 533.453565][T13302] veth1_vlan: entered promiscuous mode [ 533.462780][ T81] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 533.520978][T13302] veth0_macvtap: entered promiscuous mode [ 533.537003][T13302] veth1_macvtap: entered promiscuous mode [ 533.586014][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.608642][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.632493][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.646206][ T81] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 533.661031][ T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.661904][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.676326][ T81] usb 1-1: Product: syz [ 533.692852][ T81] usb 1-1: Manufacturer: syz [ 533.702060][ T81] usb 1-1: SerialNumber: syz [ 533.707504][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.712455][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 533.742484][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.747327][ T81] usb 1-1: config 0 descriptor?? [ 533.762347][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.782350][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.809339][T13302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.844732][ T5286] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x5 [ 533.860803][ T5286] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 533.870905][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.893919][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.910711][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.921535][ T5286] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 533.943979][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.952480][ T5283] tipc: Node number set to 2130706433 [ 533.962524][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.987101][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.006718][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.020385][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.033389][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.067807][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.081482][T13302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.104495][T13302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.119412][ T5286] usb 4-1: USB disconnect, device number 26 [ 534.166757][T13302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.187225][T13302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.190486][ T81] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 534.205314][T13302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.257805][ T81] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 534.338712][ T81] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 534.406495][ T8] usb 1-1: USB disconnect, device number 34 [ 534.452611][ T711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.488625][ T711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.571609][ T3040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.592852][ T3040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.752444][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.860210][T13610] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.2319'. [ 534.901462][T13610] netlink: 'syz.4.2319': attribute type 1 has an invalid length. [ 534.941172][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2319'. [ 535.792461][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.822578][ T81] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 535.872734][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.993125][ T81] usb 4-1: Using ep0 maxpacket: 16 [ 536.003861][ T81] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.019825][ T81] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.029786][ T81] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 536.082302][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.102552][ T81] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 536.162473][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.196672][ T81] usb 4-1: config 0 descriptor?? [ 536.462145][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.613918][T13663] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 536.650949][ T81] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0020/input/input44 [ 536.694984][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.783615][T10988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 536.794099][T10988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 536.802281][T10988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 536.811456][T10988] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 536.823574][T10988] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 536.830842][T10988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 536.838001][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.001326][T10988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 537.011044][T10988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 537.019082][T10988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 537.027085][T10988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 537.034898][T10988] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 537.043070][T10988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 537.105883][ T81] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 537.131740][ T81] usb 4-1: USB disconnect, device number 27 [ 537.306737][T13684] netlink: 'syz.4.2451': attribute type 9 has an invalid length. [ 537.342586][T13684] netlink: 134672 bytes leftover after parsing attributes in process `syz.4.2451'. [ 537.375797][ T35] bridge_slave_1: left allmulticast mode [ 537.381475][ T35] bridge_slave_1: left promiscuous mode [ 537.384976][T13684] openvswitch: netlink: Port -524278 exceeds max allowable 65535 [ 537.395711][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.457219][ T35] bridge_slave_0: left allmulticast mode [ 537.467575][ T35] bridge_slave_0: left promiscuous mode [ 537.487693][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.788194][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 537.872398][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.953893][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.990169][ T5284] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 538.005523][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.026447][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.039104][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.050007][ T25] usb 2-1: config 0 descriptor?? [ 538.173961][ T5284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.184411][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.201931][ T5284] usb 5-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 538.211282][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 538.219523][ T5284] usb 5-1: Product: syz [ 538.224107][ T5284] usb 5-1: Manufacturer: syz [ 538.228855][ T5284] usb 5-1: SerialNumber: syz [ 538.243139][ T5284] usb 5-1: config 0 descriptor?? [ 538.316495][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.329270][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.341422][ T35] bond0 (unregistering): Released all slaves [ 538.472963][ T25] plantronics 0003:047F:FFFF.0021: ignoring exceeding usage max [ 538.489662][ T25] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 538.577623][ T25] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 538.725050][T13711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2456'. [ 538.746238][ T5283] usb 2-1: USB disconnect, device number 29 [ 538.912389][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 538.919602][T10988] Bluetooth: hci3: command tx timeout [ 538.953771][ T5283] usb 5-1: USB disconnect, device number 30 [ 539.031657][ T35] hsr_slave_0: left promiscuous mode [ 539.050547][ T35] hsr_slave_1: left promiscuous mode [ 539.065576][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.073830][T10988] Bluetooth: hci5: command tx timeout [ 539.091917][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.111226][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.124466][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.175893][ T35] veth1_macvtap: left promiscuous mode [ 539.181450][ T35] veth0_macvtap: left promiscuous mode [ 539.188817][ T35] veth1_vlan: left promiscuous mode [ 539.195082][ T35] veth0_vlan: left promiscuous mode [ 539.952397][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 540.008598][ T35] team0 (unregistering): Port device team_slave_1 removed [ 540.064152][ T35] team0 (unregistering): Port device team_slave_0 removed [ 540.883312][T13678] chnl_net:caif_netlink_parms(): no params data found [ 540.917250][T13674] chnl_net:caif_netlink_parms(): no params data found [ 540.992390][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.002493][T10988] Bluetooth: hci3: command tx timeout [ 541.155336][T10988] Bluetooth: hci5: command tx timeout [ 541.327349][T13781] input: syz1 as /devices/virtual/input/input45 [ 541.488969][T13678] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.496258][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.504010][T13678] bridge_slave_0: entered allmulticast mode [ 541.510906][T13678] bridge_slave_0: entered promiscuous mode [ 541.519636][T13678] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.527512][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.534745][T13678] bridge_slave_1: entered allmulticast mode [ 541.541574][T13678] bridge_slave_1: entered promiscuous mode [ 541.644504][T13674] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.732400][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 541.752548][T13674] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.770168][T13674] bridge_slave_0: entered allmulticast mode [ 541.793431][T13674] bridge_slave_0: entered promiscuous mode [ 541.801031][T13674] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.808436][T13674] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.816937][T13674] bridge_slave_1: entered allmulticast mode [ 541.823965][T13674] bridge_slave_1: entered promiscuous mode [ 541.895695][ T25] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 541.905235][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.917769][ T25] usb 2-1: Product: syz [ 541.921962][ T25] usb 2-1: Manufacturer: syz [ 541.926982][ T25] usb 2-1: SerialNumber: syz [ 541.980508][ T25] usb 2-1: config 0 descriptor?? [ 542.032410][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 543.072644][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 543.082541][T10988] Bluetooth: hci3: command tx timeout [ 543.242472][T10988] Bluetooth: hci5: command tx timeout [ 543.776780][ T25] usb 2-1: USB disconnect, device number 30 [ 543.815316][T13674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.827886][T13674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.883579][T13678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.900526][T13678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.998584][T13828] loop2: detected capacity change from 0 to 7 [ 544.021749][T13674] team0: Port device team_slave_0 added [ 544.027041][T13828] Dev loop2: unable to read RDB block 7 [ 544.042500][T13828] loop2: unable to read partition table [ 544.048301][T13828] loop2: partition table beyond EOD, truncated [ 544.068087][T13674] team0: Port device team_slave_1 added [ 544.072433][T13828] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 544.112403][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 544.215461][T13674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.240862][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.266754][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.322728][T13674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.351676][T13678] team0: Port device team_slave_0 added [ 544.375486][T13678] team0: Port device team_slave_1 added [ 544.390409][T13674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.408070][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.487842][T13674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.652589][ T5286] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 544.737758][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.832461][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.855203][T13678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.881757][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.881949][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.902296][ T5286] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 544.982045][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.989519][T13678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.014206][ T5286] usb 5-1: config 0 descriptor?? [ 545.076761][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.153762][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 545.175670][T10988] Bluetooth: hci3: command tx timeout [ 545.219659][T13678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.226810][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.252889][T13678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.293543][T13867] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.312790][T10988] Bluetooth: hci5: command tx timeout [ 545.321984][T13869] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.329204][T13869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.381707][T13674] hsr_slave_0: entered promiscuous mode [ 545.423002][T13674] hsr_slave_1: entered promiscuous mode [ 545.429390][T13674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.444870][ T5286] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 545.458187][ T5286] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 545.478035][T13674] Cannot create hsr debugfs directory [ 545.524055][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.609497][T13678] hsr_slave_0: entered promiscuous mode [ 545.619833][T13678] hsr_slave_1: entered promiscuous mode [ 545.629000][T13678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.648397][T13678] Cannot create hsr debugfs directory [ 545.657683][ T5286] cp2112 0003:10C4:EA90.0022: error requesting version [ 545.680505][ T5286] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -71 [ 545.704139][ T5286] usb 5-1: USB disconnect, device number 31 [ 545.721067][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.161189][ T35] bridge_slave_1: left allmulticast mode [ 546.177294][ T35] bridge_slave_1: left promiscuous mode [ 546.187519][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.195538][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.233921][ T35] bridge_slave_0: left allmulticast mode [ 546.239608][ T35] bridge_slave_0: left promiscuous mode [ 546.256734][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.232448][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.572137][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.617945][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.659175][ T35] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 547.703855][ T35] bond0 (unregistering): Released all slaves [ 548.019024][ T29] audit: type=1326 audit(1729244390.284:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13912 comm="syz.1.2513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3c417dff9 code=0x0 [ 548.272445][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 548.312459][ T35] tipc: Disabling bearer [ 548.403175][ T35] tipc: Left network mode [ 548.972650][T13929] program syz.4.2516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.097263][T13935] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2515'. [ 549.125511][T13920] netlink: 'syz.3.2515': attribute type 29 has an invalid length. [ 549.221766][ T35] hsr_slave_0: left promiscuous mode [ 549.246267][ T35] hsr_slave_1: left promiscuous mode [ 549.267422][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.295806][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.371142][ T35] veth1_macvtap: left promiscuous mode [ 549.388659][ T35] veth0_macvtap: left promiscuous mode [ 549.412030][ T35] veth1_vlan: left promiscuous mode [ 549.430841][ T35] veth0_vlan: left promiscuous mode [ 549.573478][ T5286] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 549.762186][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 549.786466][ T5286] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 549.812511][ T5286] usb 2-1: config 0 has no interface number 0 [ 549.826203][ T5286] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 549.848797][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.872439][ T5286] usb 2-1: Product: syz [ 549.876628][ T5286] usb 2-1: Manufacturer: syz [ 549.899739][ T5286] usb 2-1: SerialNumber: syz [ 549.925108][ T5286] usb 2-1: config 0 descriptor?? [ 549.944200][ T5286] smsc95xx v2.0.0 [ 549.958601][ T5286] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 549.991197][ T5286] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 550.156271][ T5286] usb 2-1: USB disconnect, device number 31 [ 550.487791][ T35] team0 (unregistering): Port device team_slave_1 removed [ 550.549466][ T35] team0 (unregistering): Port device team_slave_0 removed [ 551.290145][T13954] vivid-004: disconnect [ 551.308742][T13953] vivid-004: reconnect [ 551.497417][T13933] netlink: 'syz.3.2515': attribute type 29 has an invalid length. [ 551.630278][ T8] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 551.673237][ T8] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 551.680659][ T8] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 551.706279][ T8] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 551.741005][ T8] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 551.847623][T13674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.863807][T13674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.892860][ T5285] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 551.906485][T13674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 552.004342][T13674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 552.079911][ T5285] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 552.099397][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.133926][ T5285] usb 4-1: Product: syz [ 552.138127][ T5285] usb 4-1: Manufacturer: syz [ 552.153689][ T5285] usb 4-1: SerialNumber: syz [ 552.178132][ T5285] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 552.278010][ T35] IPVS: stop unused estimator thread 0... [ 552.371156][T13972] syzkaller1: entered promiscuous mode [ 552.382128][T13972] syzkaller1: entered allmulticast mode [ 552.419473][T13674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.458937][T13674] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.556351][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.563549][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.681543][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.688728][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.769722][T13678] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 552.788249][T13678] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 552.808301][T13678] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 552.831580][T13678] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 552.888369][T13674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.906350][T13674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.095840][T13674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.296885][T13678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.335701][T13674] veth0_vlan: entered promiscuous mode [ 553.399211][T13674] veth1_vlan: entered promiscuous mode [ 553.423916][T13678] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.507703][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.514920][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.561415][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.568611][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.799422][T13678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.914241][T13674] veth0_macvtap: entered promiscuous mode [ 553.924031][T13674] veth1_macvtap: entered promiscuous mode [ 554.024015][T13678] veth0_vlan: entered promiscuous mode [ 554.046167][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.082906][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.106841][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.137231][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.151500][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.178995][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.192604][ T5283] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 554.207502][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.220170][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.238591][T13674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.272234][T13678] veth1_vlan: entered promiscuous mode [ 554.306854][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.321197][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.338766][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.350671][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.372596][ T5283] usb 2-1: Using ep0 maxpacket: 8 [ 554.403508][ T5283] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 554.411786][ T5283] usb 2-1: config 179 has no interface number 0 [ 554.453133][ T5283] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 554.485083][ T5283] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 554.527577][ T5283] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 554.556115][ T5283] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 554.599501][ T5283] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 554.622469][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.636439][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.665581][ T5283] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 554.684432][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.704179][ T5284] usb 4-1: USB disconnect, device number 28 [ 554.725517][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.740719][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.795742][T13674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.860994][T13674] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.905333][T13987] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 555.360474][T13674] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.396683][ T5283] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input46 [ 555.749042][ T25] usb 2-1: USB disconnect, device number 32 [ 555.749113][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 555.749155][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 555.812515][T13674] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.832790][T13674] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.865771][ T5283] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 556.101375][T13678] veth0_macvtap: entered promiscuous mode [ 556.191374][T13678] veth1_macvtap: entered promiscuous mode [ 556.365637][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.417905][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.459183][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.478530][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.522425][ T5286] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 556.537907][ T5284] usb 4-1: ath9k_htc: USB layer deinitialized [ 556.544318][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.612800][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.676807][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.718147][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.761895][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.803811][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.828849][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.867614][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.960179][T13678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.011996][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.089013][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.138439][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.195686][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.260423][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.317032][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.377773][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.430400][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.489096][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.549320][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.598112][T13678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.710969][T13678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.752409][T13678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.761145][T13678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.802472][T13678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.870704][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.903610][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.088667][ T711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.131228][ T711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.156577][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.182469][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.239791][T14066] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2552'. [ 558.466771][ T29] audit: type=1326 audit(1729244400.734:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 558.570551][ T29] audit: type=1326 audit(1729244400.734:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 558.653667][ T29] audit: type=1326 audit(1729244400.754:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 558.682422][ T5286] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 558.716838][ T29] audit: type=1326 audit(1729244400.774:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7a2d7e033 code=0x7ffc0000 [ 558.808544][ T29] audit: type=1326 audit(1729244400.774:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7a2d7e033 code=0x7ffc0000 [ 558.862420][ T5286] usb 3-1: Using ep0 maxpacket: 16 [ 558.871380][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.902436][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.913507][ T29] audit: type=1326 audit(1729244400.824:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 558.948959][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 558.982452][ T5286] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 558.991611][ T29] audit: type=1326 audit(1729244400.824:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 559.029377][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.056399][ T5286] usb 3-1: config 0 descriptor?? [ 559.066001][ T29] audit: type=1326 audit(1729244400.824:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 559.091569][T14110] vivid-002: ================= START STATUS ================= [ 559.130238][T14110] vivid-002: Radio HW Seek Mode: Bounded [ 559.135725][ T29] audit: type=1326 audit(1729244400.824:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 559.151126][T14110] vivid-002: Radio Programmable HW Seek: false [ 559.192798][T14113] batadv0: entered promiscuous mode [ 559.215996][ T29] audit: type=1326 audit(1729244400.824:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 559.217144][T14110] vivid-002: RDS Rx I/O Mode: [ 559.260829][T14113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.321662][T14110] Block I/O [ 559.325038][T14110] vivid-002: Generate RBDS Instead of RDS: false [ 559.341883][T14110] vivid-002: RDS Reception: true [ 559.355790][T14110] vivid-002: RDS Program Type: 0 inactive [ 559.377343][T14110] vivid-002: RDS PS Name: inactive [ 559.428213][T14110] vivid-002: RDS Radio Text: inactive [ 559.488716][T14110] vivid-002: RDS Traffic Announcement: false inactive [ 559.516920][T14110] vivid-002: RDS Traffic Program: false inactive [ 559.537834][ T5286] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0024/input/input48 [ 559.570777][T14110] vivid-002: RDS Music: false inactive [ 559.582945][T14110] vivid-002: ================== END STATUS ================== [ 559.597393][ T5286] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 559.693863][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 559.764842][ T5286] usb 3-1: USB disconnect, device number 33 [ 559.776638][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 559.857659][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.889456][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.918940][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 559.928245][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.942969][ T25] usb 2-1: config 0 descriptor?? [ 560.266294][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 560.273385][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 560.296961][ T25] usb 2-1: USB disconnect, device number 33 [ 560.872439][ T81] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 560.914149][ T5288] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 560.986947][T14194] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 561.033780][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.052419][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.076071][ T81] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 561.097490][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 561.100257][ T81] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.113920][ T5288] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 561.131053][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.147016][ T5288] usb 4-1: config 0 has no interface number 0 [ 561.151143][ T81] usb 3-1: config 0 descriptor?? [ 561.174288][ T5288] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 561.212576][ T5288] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 561.258219][ T5288] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 561.282475][ T5286] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 561.308428][ T5288] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 561.329062][ T5288] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 561.350125][ T5288] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 561.375356][ T5288] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 561.435664][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.463120][ T5288] usb 4-1: Product: syz [ 561.467565][ T5288] usb 4-1: Manufacturer: syz [ 561.472199][ T5288] usb 4-1: SerialNumber: syz [ 561.482853][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 561.510709][ T5286] usb 5-1: config 0 has no interfaces? [ 561.519735][ T5286] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 561.531033][ T5288] usb 4-1: config 0 descriptor?? [ 561.544473][T14181] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 561.551001][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.551864][T14181] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 561.568926][ T5286] usb 5-1: config 0 descriptor?? [ 561.602084][ T81] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 561.657728][ T81] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 561.839042][ T5288] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 561.847525][ T5286] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 561.868609][ T5288] etas_es58x 4-1:0.219: could not retrieve the product info string [ 561.912274][ T5288] usb 4-1: USB disconnect, device number 29 [ 561.928328][ T81] usb 3-1: USB disconnect, device number 34 [ 561.933722][ T5288] etas_es58x 4-1:0.219: Disconnecting syz syz [ 562.020121][T14198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.060623][ T5286] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 562.080610][T14198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.090841][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.109818][ T5285] usb 5-1: USB disconnect, device number 32 [ 562.117929][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.128371][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 562.142774][ T5286] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 562.152980][ T5286] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 562.161112][ T5286] usb 1-1: Manufacturer: syz [ 562.169096][ T5286] usb 1-1: config 0 descriptor?? [ 562.585587][ T5286] appleir 0003:05AC:8243.0026: unknown main item tag 0x0 [ 562.603003][ T5286] appleir 0003:05AC:8243.0026: No inputs registered, leaving [ 562.634824][ T5286] appleir 0003:05AC:8243.0026: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 562.839096][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.846338][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.933697][ T5285] usb 1-1: USB disconnect, device number 35 [ 563.071347][T14248] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2604'. [ 563.218706][T14255] netlink: 4072 bytes leftover after parsing attributes in process `syz.1.2606'. [ 563.239273][T14255] openvswitch: netlink: Actions may not be safe on all matching packets [ 563.433108][ T5284] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 563.592490][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 563.608767][ T5284] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 563.640097][ T5284] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.660257][ T5284] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 563.687313][ T5284] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.707506][ T5284] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.729161][ T5284] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 563.739637][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.772494][ T81] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 563.801852][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 563.801868][ T29] audit: type=1326 audit(1729244406.064:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14272 comm="syz.0.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 563.830408][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.867142][ T29] audit: type=1326 audit(1729244406.104:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14272 comm="syz.0.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 563.922459][ T29] audit: type=1326 audit(1729244406.114:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14272 comm="syz.0.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 563.944758][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.944798][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.944808][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.944829][ T81] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 563.944914][ T81] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 563.944944][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.947843][ T81] usb 2-1: config 0 descriptor?? [ 564.010542][ T5284] usb 5-1: usb_control_msg returned -32 [ 564.032577][ T5284] usbtmc 5-1:16.0: can't read capabilities [ 564.037777][ T29] audit: type=1326 audit(1729244406.114:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14272 comm="syz.0.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 564.060769][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.101706][ T29] audit: type=1326 audit(1729244406.114:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14272 comm="syz.0.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff7a2d7cadf code=0x7ffc0000 [ 564.126854][ T29] audit: type=1326 audit(1729244406.114:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14272 comm="syz.0.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a2d7dff9 code=0x7ffc0000 [ 564.149175][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.325707][T14285] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 564.333697][ T5285] usb 5-1: USB disconnect, device number 33 [ 564.600436][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.616158][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.642214][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.662517][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.670256][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.692415][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.703544][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.711590][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.719915][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.727718][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.735595][ T81] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 564.743595][ T81] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 564.864483][ T81] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 564.879292][ T81] usb 2-1: USB disconnect, device number 34 [ 565.602502][ T5285] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 565.777927][ T5285] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 565.813673][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.870357][ T5285] usb 5-1: config 0 descriptor?? [ 566.096157][ T5285] [drm] vendor descriptor length:6 data:06 5f f2 51 72 8a 00 00 00 00 00 [ 566.133140][ T5285] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 566.301491][ T5285] [drm:udl_init] *ERROR* Selecting channel failed [ 566.304344][ T3009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.355685][ T5285] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 566.382496][ T5285] [drm] Initialized udl on minor 2 [ 566.403255][ T5285] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 566.446167][ T5285] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 566.469831][ T5286] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 566.492619][ T5285] usb 5-1: USB disconnect, device number 34 [ 566.504361][ T5286] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 566.675630][ T3009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.861791][ T3009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.056901][ T3009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.480618][ T3009] bridge_slave_1: left allmulticast mode [ 567.511548][ T3009] bridge_slave_1: left promiscuous mode [ 567.532660][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.574179][ T3009] bridge_slave_0: left allmulticast mode [ 567.621123][ T3009] bridge_slave_0: left promiscuous mode [ 567.632666][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.148235][T14338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.820125][T14296] syz.3.2625 (14296): drop_caches: 1 [ 568.889499][ T5285] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 568.950355][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 568.971019][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 568.979697][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 568.987671][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 569.006088][T14345] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 569.014533][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 569.023368][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 569.062472][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 569.069427][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.080590][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.183450][ T5285] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 569.193637][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.203866][ T5285] usb 5-1: config 0 descriptor?? [ 569.468142][ T5285] usbhid 5-1:0.0: can't add hid device: -71 [ 569.482610][T14351] netlink: 'syz.2.2648': attribute type 11 has an invalid length. [ 569.492473][ T5285] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 569.513808][ T5285] usb 5-1: USB disconnect, device number 35 [ 570.144182][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.207800][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.231863][ T3009] bond0 (unregistering): Released all slaves [ 571.033107][ T5286] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 571.204364][ T5288] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 571.233540][ T5286] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 571.247466][ T9604] Bluetooth: hci3: command tx timeout [ 571.266897][ T5286] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 571.277375][ T5286] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 571.286830][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.300769][T14376] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 571.315450][ T5286] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.403871][ T5288] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.414289][ T5288] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 571.445725][ T5288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 571.472145][ T5288] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 571.532287][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.588302][T14383] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 571.627676][ T5286] usb 3-1: USB disconnect, device number 35 [ 571.825835][ T5288] hub 5-1:1.0: bad descriptor, ignoring hub [ 571.846733][ T5288] hub 5-1:1.0: probe with driver hub failed with error -5 [ 571.911149][ T5288] cdc_wdm 5-1:1.0: skipping garbage [ 571.941130][T13511] udevd[13511]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.966961][ T5288] cdc_wdm 5-1:1.0: skipping garbage [ 572.002620][ T3009] hsr_slave_0: left promiscuous mode [ 572.009252][ T5288] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 572.043120][ T5288] cdc_wdm 5-1:1.0: Unknown control protocol [ 572.072426][ T3009] hsr_slave_1: left promiscuous mode [ 572.125320][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.151740][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.220938][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.245313][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.305447][ T3009] veth1_macvtap: left promiscuous mode [ 572.324223][ T3009] veth0_macvtap: left promiscuous mode [ 572.342439][ T3009] veth1_vlan: left promiscuous mode [ 572.352742][ T5286] usb 5-1: USB disconnect, device number 36 [ 572.362403][ T3009] veth0_vlan: left promiscuous mode [ 572.951057][T14418] VFS: Mount too revealing [ 573.327559][ T9604] Bluetooth: hci3: command tx timeout [ 573.432670][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 573.468122][ T81] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 573.487669][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 573.643851][ T81] usb 5-1: Using ep0 maxpacket: 16 [ 573.660582][ T81] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 573.678327][ T81] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 573.688219][ T81] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.717124][ T81] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.737029][ T81] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.749395][ T81] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.790029][ T81] usb 5-1: Product: syz [ 573.794411][ T81] usb 5-1: Manufacturer: syz [ 573.799042][ T81] usb 5-1: SerialNumber: syz [ 574.078882][ T81] usb 5-1: USB disconnect, device number 37 [ 574.183882][T14436] netlink: 4272 bytes leftover after parsing attributes in process `syz.3.2675'. [ 574.210464][T14436] netlink: 'syz.3.2675': attribute type 3 has an invalid length. [ 574.514152][T14346] chnl_net:caif_netlink_parms(): no params data found [ 574.944936][T14346] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.956473][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.983186][T14346] bridge_slave_0: entered allmulticast mode [ 575.006674][T14346] bridge_slave_0: entered promiscuous mode [ 575.056452][T14346] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.100394][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.139212][T14346] bridge_slave_1: entered allmulticast mode [ 575.174078][T14346] bridge_slave_1: entered promiscuous mode [ 575.408950][ T9604] Bluetooth: hci3: command tx timeout [ 575.576030][T14346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.630066][T14346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.781556][T14496] input: syz0 as /devices/virtual/input/input49 [ 575.838068][T14346] team0: Port device team_slave_0 added [ 575.846678][T14346] team0: Port device team_slave_1 added [ 575.862484][ T5284] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 575.890815][T14346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.910639][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.957087][T14346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.001528][T14346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.018943][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.045767][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 576.061432][ T5284] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 724, setting to 64 [ 576.082846][ T5284] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.096204][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.136054][T14346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.152360][ T5284] usb 3-1: Product: syz [ 576.156549][ T5284] usb 3-1: Manufacturer: syz [ 576.196007][ T5284] usb 3-1: SerialNumber: syz [ 576.490241][T14346] hsr_slave_0: entered promiscuous mode [ 576.512028][T14346] hsr_slave_1: entered promiscuous mode [ 576.527504][T14346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.567947][T14346] Cannot create hsr debugfs directory [ 577.238753][ T5284] cdc_ncm 3-1:1.0: bind() failure [ 577.254228][ T5284] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 577.307787][ T5284] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 577.342729][ T5284] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 577.382280][ T5284] usb 3-1: USB disconnect, device number 36 [ 577.592419][ T9604] Bluetooth: hci3: command tx timeout [ 578.861328][T14346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 578.898756][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 578.980539][T14346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 579.085740][T14346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 579.112503][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 579.117991][T14572] TCP: TCP_TX_DELAY enabled [ 579.144860][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 579.189254][T14346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 579.217142][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 579.312724][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 579.399687][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.508545][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.570714][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.762282][T14346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.868595][ T25] usb 4-1: usb_control_msg returned -32 [ 579.925377][T14346] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.932622][ T25] usbtmc 4-1:16.0: can't read capabilities [ 580.031214][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.038396][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.144482][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.151680][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.213234][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 580.224547][T14592] usbtmc 4-1:16.0: Unable to send data, error -71 [ 580.490989][T14346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.694705][T14346] veth0_vlan: entered promiscuous mode [ 580.748762][T14346] veth1_vlan: entered promiscuous mode [ 580.887755][T14346] veth0_macvtap: entered promiscuous mode [ 580.946122][T14346] veth1_macvtap: entered promiscuous mode [ 581.037176][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.071048][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.127701][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.164184][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.193735][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.226273][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.261989][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.308817][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.364977][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.416145][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.435766][T14610] netlink: 'syz.4.2732': attribute type 9 has an invalid length. [ 581.446310][T14611] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 581.469967][T14346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.486635][T14610] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.2732'. [ 581.543936][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.593379][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.637087][ T81] usb 4-1: USB disconnect, device number 30 [ 581.654366][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.694806][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.727376][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.766193][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.826932][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.887676][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.944426][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.999363][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.061806][T14346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.091013][T14346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.134110][T14346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.175444][T14346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.226426][T14346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.602976][ T3040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.610833][ T3040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.805895][T14639] syzkaller1: entered promiscuous mode [ 582.826088][T14639] syzkaller1: entered allmulticast mode [ 582.892466][ T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 582.931792][ T3040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.953592][ T3040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.077530][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 583.134110][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 583.185534][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 583.226955][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 583.295651][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 583.355414][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.376182][ T29] audit: type=1326 audit(1729244425.624:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.2.2746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c677dff9 code=0x0 [ 583.466311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 583.469330][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'. [ 583.974254][ T25] usb 2-1: config 0 descriptor?? [ 584.172421][ T5284] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 584.368502][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 584.384306][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 584.397614][ T25] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 584.410710][ T5284] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 584.425758][ T5284] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 584.461988][ T25] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 584.490870][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 584.514073][ T5284] usb 4-1: Product: syz [ 584.518277][ T5284] usb 4-1: Manufacturer: syz [ 584.531479][ T5284] usb 4-1: SerialNumber: syz [ 584.550965][ T5284] usb 4-1: config 0 descriptor?? [ 584.663640][ T5284] usb 2-1: USB disconnect, device number 35 [ 584.855034][ T81] usb 4-1: USB disconnect, device number 31 [ 585.302419][ T81] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 585.524179][ T81] usb 4-1: Using ep0 maxpacket: 32 [ 585.531685][ T81] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 585.547216][ T81] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 585.559047][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.573766][ T5286] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 585.591711][ T81] usb 4-1: Product: syz [ 585.598354][ T81] usb 4-1: Manufacturer: syz [ 585.671735][ T81] usb 4-1: SerialNumber: syz [ 585.693788][ T81] usb 4-1: config 0 descriptor?? [ 585.774327][ T81] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 585.822836][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 585.850544][ T5286] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 585.872460][ T5286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 585.882245][ T5286] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 585.893674][ T5286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 585.903883][ T5286] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.917132][ T5286] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 585.917851][ T81] usb 4-1: USB disconnect, device number 32 [ 585.926228][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.927262][ T3040] usb 4-1: Failed to submit usb control message: -71 [ 585.948360][ T3040] usb 4-1: unable to send the bmi data to the device: -71 [ 585.955766][ T3040] usb 4-1: unable to get target info from device [ 585.962754][ T3040] usb 4-1: could not get target info (-71) [ 585.968901][ T3040] usb 4-1: could not probe fw (-71) [ 586.223647][ T5286] usb 1-1: GET_CAPABILITIES returned 0 [ 586.229295][ T5286] usbtmc 1-1:16.0: can't read capabilities [ 586.517018][ T25] usb 1-1: USB disconnect, device number 36 [ 586.737144][T14799] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2781'. [ 586.882950][T14804] netlink: 'syz.3.2782': attribute type 9 has an invalid length. [ 586.904211][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 587.139839][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'. [ 587.352015][T14826] all (unregistering): Released all slaves [ 588.210691][T14855] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 588.804842][T14870] macvlan2: entered promiscuous mode [ 588.810561][T14870] vlan1: entered promiscuous mode [ 588.851433][T14870] team0: Port device macvlan2 added [ 590.079440][T14922] macvlan0: entered promiscuous mode [ 590.095734][T14921] macvlan0: left promiscuous mode [ 590.993836][T14968] loop9: detected capacity change from 0 to 1 [ 591.030367][T14968] Dev loop9: unable to read RDB block 1 [ 591.050173][T14968] loop9: unable to read partition table [ 591.057698][T14968] loop9: partition table beyond EOD, truncated [ 591.064450][T14968] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 591.064450][T14968] ) failed (rc=-5) [ 591.142452][T14978] input: syz1 as /devices/virtual/input/input50 [ 591.348843][T14988] tipc: Enabled bearer , priority 10 [ 591.712477][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 591.884067][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.884735][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.912384][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 591.947358][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 591.992721][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.032668][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.079558][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.093273][ T25] usb 4-1: config 0 descriptor?? [ 592.144573][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.295224][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.478679][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.515582][ T25] plantronics 0003:047F:FFFF.0029: ignoring exceeding usage max [ 592.521743][T10988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 592.543041][T10988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 592.550946][T10988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 592.572643][T10988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 592.598780][T10988] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 592.600826][ T25] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 592.614543][ T81] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 592.627835][T10988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 592.709328][ T25] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 592.737811][ T11] bridge_slave_1: left allmulticast mode [ 592.781377][ T11] bridge_slave_1: left promiscuous mode [ 592.822914][ T81] usb 1-1: Using ep0 maxpacket: 16 [ 592.825058][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.898426][ T11] bridge_slave_0: left allmulticast mode [ 592.904573][ T11] bridge_slave_0: left promiscuous mode [ 592.910349][ T81] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.911211][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.952406][ T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 592.991138][ T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 593.007473][ T81] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 593.017518][ T81] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 593.042558][ T81] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 593.051706][ T81] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 593.062370][ T81] usb 1-1: Manufacturer: syz [ 593.114861][ T81] usb 1-1: config 0 descriptor?? [ 593.432695][ T81] rc_core: IR keymap rc-hauppauge not found [ 593.438700][ T81] Registered IR keymap rc-empty [ 593.448775][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.482701][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.532640][ T81] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 593.545935][ T81] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input51 [ 593.612641][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.682511][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.760136][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.871192][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.924574][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.948267][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.972798][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.992447][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 594.020630][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 594.062431][ T81] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 594.076007][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.083734][ T81] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 594.099054][ T81] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 594.109676][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.119826][ T81] usb 1-1: USB disconnect, device number 37 [ 594.143143][ T11] bond0 (unregistering): Released all slaves [ 594.209562][T15026] netlink: 'syz.1.2879': attribute type 3 has an invalid length. [ 594.423294][T15052] input: syz0 as /devices/virtual/input/input52 [ 594.576191][T15054] team0: Device ipvlan2 is already an upper device of the team interface [ 594.614468][ T8] usb 4-1: USB disconnect, device number 33 [ 594.754101][ T9604] Bluetooth: hci4: command tx timeout [ 595.016678][ T29] audit: type=1326 audit(1729244437.274:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.0.2891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f582237dff9 code=0x0 [ 595.224109][ T11] hsr_slave_0: left promiscuous mode [ 595.252872][ T11] hsr_slave_1: left promiscuous mode [ 595.275587][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.304698][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.358942][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.373293][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.451573][ T11] veth1_macvtap: left promiscuous mode [ 595.467346][ T11] veth0_macvtap: left promiscuous mode [ 595.483700][ T11] veth1_vlan: left promiscuous mode [ 595.489030][ T11] veth0_vlan: left promiscuous mode [ 596.180504][ T11] team0 (unregistering): Port device team_slave_1 removed [ 596.251161][ T11] team0 (unregistering): Port device team_slave_0 removed [ 596.502498][ T5286] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 596.681023][ T5286] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 596.699214][ T5286] usb 1-1: config 0 has no interface number 0 [ 596.706451][ T5286] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 596.730637][ T5286] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 596.766320][ T5286] usb 1-1: config 0 interface 255 has no altsetting 0 [ 596.776448][ T5286] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 596.792504][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.813049][ T5286] usb 1-1: config 0 descriptor?? [ 596.832955][ T5286] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 596.842590][ T9604] Bluetooth: hci4: command tx timeout [ 596.917518][T15107] vlan3: entered promiscuous mode [ 596.940421][T15107] macvlan0: entered promiscuous mode [ 597.029948][T15107] macvlan0: left promiscuous mode [ 597.046076][ T6557] usb 1-1: USB disconnect, device number 38 [ 597.064690][T15110] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 597.077315][T15110] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 597.092402][T15110] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 597.101404][T15110] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 597.120323][T15110] geneve2: entered promiscuous mode [ 597.125796][T15110] geneve2: entered allmulticast mode [ 597.296968][T15018] chnl_net:caif_netlink_parms(): no params data found [ 597.396602][T15131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2908'. [ 597.433906][T15131] netlink: 'syz.1.2908': attribute type 7 has an invalid length. [ 597.441684][T15131] netlink: 'syz.1.2908': attribute type 8 has an invalid length. [ 597.522404][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'. [ 597.561452][T15131] gretap0: entered promiscuous mode [ 597.586685][T15131] batadv_slave_1: entered promiscuous mode [ 597.604745][T15131] gretap0: left promiscuous mode [ 597.617884][T15131] batadv_slave_1: left promiscuous mode [ 597.858099][T15018] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.889086][T15018] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.912573][T15018] bridge_slave_0: entered allmulticast mode [ 597.932955][T15018] bridge_slave_0: entered promiscuous mode [ 597.954438][T15018] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.980161][T15018] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.995637][T15018] bridge_slave_1: entered allmulticast mode [ 598.003478][T15018] bridge_slave_1: entered promiscuous mode [ 598.157302][T15018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.207806][T15018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.358864][T15018] team0: Port device team_slave_0 added [ 598.381566][T15018] team0: Port device team_slave_1 added [ 598.652802][T15018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.659887][T15018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.686215][T15018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.698981][T15018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.710883][T15018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.736892][T15018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.785323][T15194] input: syz1 as /devices/virtual/input/input53 [ 598.912640][ T9604] Bluetooth: hci4: command tx timeout [ 598.974141][T15199] ptrace attach of "./syz-executor exec"[15201] was attempted by ""[15199] [ 599.377489][T15018] hsr_slave_0: entered promiscuous mode [ 599.403143][T15226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2934'. [ 599.412931][T15224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2933'. [ 599.436803][T15018] hsr_slave_1: entered promiscuous mode [ 599.453490][T15018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.472433][T15018] Cannot create hsr debugfs directory [ 599.692094][T15232] netlink: 'syz.3.2937': attribute type 2 has an invalid length. [ 599.751763][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2937'. [ 600.813765][T15253] ALSA: mixer_oss: invalid OSS volume '1:' [ 600.857509][T15253] ALSA: mixer_oss: invalid OSS volume 'invalid' [ 600.891783][T15253] ALSA: mixer_oss: invalid OSS volume 'verification' [ 600.924349][T15253] ALSA: mixer_oss: invalid OSS volume 'stack' [ 600.970606][T15253] ALSA: mixer_oss: invalid OSS volume 'proc' [ 600.992415][ T9604] Bluetooth: hci4: command tx timeout [ 602.273677][ T9604] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 602.283670][ T9604] Bluetooth: hci3: Injecting HCI hardware error event [ 602.295617][T10988] Bluetooth: hci3: hardware error 0x00 [ 602.492942][ T5286] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 602.678348][ T5286] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 602.707958][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.735938][ T5286] usb 3-1: config 0 descriptor?? [ 602.759751][ T5286] usb-storage 3-1:0.0: USB Mass Storage device detected [ 603.482480][ T8] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 603.609653][ T5288] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 603.642700][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 603.654127][ T8] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 603.687405][ T8] usb 4-1: config 0 has no interface number 0 [ 603.700355][ T8] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 603.748244][ T8] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 603.793793][ T5288] usb 2-1: too many configurations: 57, using maximum allowed: 8 [ 603.815590][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 603.831282][ T5288] usb 2-1: config index 0 descriptor too short (expected 65379, got 173) [ 603.855960][ T8] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 603.892216][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.925691][ T8] usb 4-1: Product: syz [ 603.943131][ T8] usb 4-1: SerialNumber: syz [ 603.949918][ T5288] usb 2-1: config index 1 descriptor too short (expected 65379, got 173) [ 603.991909][ T8] usb 4-1: config 0 descriptor?? [ 604.009839][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.034800][ T8] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 604.064627][ T5288] usb 2-1: config index 2 descriptor too short (expected 65379, got 173) [ 604.075436][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input54 [ 604.134855][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.146939][ T5286] usb 3-1: USB disconnect, device number 37 [ 604.222197][ T5288] usb 2-1: config index 3 descriptor too short (expected 65379, got 173) [ 604.240177][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 604.290198][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.369657][ T5288] usb 2-1: config index 4 descriptor too short (expected 65379, got 173) [ 604.406714][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.473094][ T5288] usb 2-1: config index 5 descriptor too short (expected 65379, got 173) [ 604.473126][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.479025][ T5288] usb 2-1: config index 6 descriptor too short (expected 65379, got 173) [ 604.479056][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.498415][ T5288] usb 2-1: config index 7 descriptor too short (expected 65379, got 173) [ 604.498451][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.512495][ T5288] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 604.512527][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.512625][ T5288] usb 2-1: Product: syz [ 604.512644][ T5288] usb 2-1: Manufacturer: syz [ 604.512661][ T5288] usb 2-1: SerialNumber: syz [ 604.520181][ T5288] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 604.588638][T15317] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2965'. [ 604.625166][ T5286] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 605.114309][T15309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.117636][T15309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.156623][T10988] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 605.196125][ T5285] usb 2-1: USB disconnect, device number 36 [ 605.522134][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.529723][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.536931][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.544196][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.551419][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.558730][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.565960][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.573401][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.580565][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.587751][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 605.623591][ T5288] usb 4-1: USB disconnect, device number 34 [ 605.623645][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 605.640753][ T5286] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 605.667749][ T5286] ath9k_htc: Failed to initialize the device [ 605.690882][ T5285] usb 2-1: ath9k_htc: USB layer deinitialized [ 605.715844][ T5288] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 608.302553][ T5286] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 608.482529][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 608.503165][ T5286] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 608.520972][ T5286] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 608.555299][ T5286] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.588288][ T5286] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 608.621049][ T5286] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 608.671362][ T5286] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 608.696269][ T5286] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 608.748531][ T5286] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.807309][ T5286] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 608.841967][ T5286] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 608.894058][ T5286] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 608.928240][ T5286] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 608.974101][ T5286] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 609.028217][ T5286] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 609.081601][ T5286] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 609.231154][ T5286] usb 1-1: string descriptor 0 read error: -22 [ 609.240978][ T5286] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 609.268512][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.324767][ T5286] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 609.422506][ T5288] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 609.592462][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 609.600124][ T5288] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 609.614712][ T5288] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 609.635641][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.666096][ T5288] usb 4-1: Product: syz [ 609.670303][ T5288] usb 4-1: Manufacturer: syz [ 609.698639][ T5288] usb 4-1: SerialNumber: syz [ 609.704652][ T5285] usb 1-1: USB disconnect, device number 39 [ 609.748522][ T5288] usb 4-1: config 0 descriptor?? [ 609.780180][ T5288] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 610.392488][ T5288] gspca_zc3xx: reg_w_i err -71 [ 610.982532][ T5288] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 610.993506][ T5288] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 611.035354][ T5288] usb 4-1: USB disconnect, device number 35 [ 613.844735][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 614.132621][ T5285] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 614.304113][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 614.348346][ T5285] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 614.377171][ T5285] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 614.423658][ T5285] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 614.485140][ T5285] usb 4-1: config 250 has no interface number 0 [ 614.491461][ T5285] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 614.579648][ T5285] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 614.651207][ T5285] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 614.713197][ T5285] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 614.802500][ T5285] usb 4-1: config 250 interface 228 has no altsetting 0 [ 614.846728][ T5285] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 614.870819][ T29] audit: type=1326 audit(1729244457.134:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c677dff9 code=0x7ffc0000 [ 614.916862][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 614.951034][ T5285] usb 4-1: Product: syz [ 614.967983][ T5285] usb 4-1: SerialNumber: syz [ 614.999109][ T29] audit: type=1326 audit(1729244457.134:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c677dff9 code=0x7ffc0000 [ 615.052985][ T5285] hub 4-1:250.228: bad descriptor, ignoring hub [ 615.059272][ T5285] hub 4-1:250.228: probe with driver hub failed with error -5 [ 615.110702][ T29] audit: type=1326 audit(1729244457.174:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f36c677dff9 code=0x7ffc0000 [ 615.222333][ T29] audit: type=1326 audit(1729244457.184:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c677dff9 code=0x7ffc0000 [ 615.300666][ T5285] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 615.371159][ T29] audit: type=1326 audit(1729244457.184:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36c677dbfb code=0x7ffc0000 [ 615.544737][ T29] audit: type=1326 audit(1729244457.184:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c677dff9 code=0x7ffc0000 [ 615.573430][ C0] usblp0: nonzero read bulk status received: -71 [ 615.682613][ T29] audit: type=1326 audit(1729244457.184:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c677dff9 code=0x7ffc0000 [ 615.780265][T15382] usblp0: error -71 reading from printer [ 615.789423][ C0] usblp0: nonzero read bulk status received: -71 [ 615.809456][ T29] audit: type=1326 audit(1729244457.194:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f36c677dff9 code=0x7ffc0000 [ 615.834983][ T5288] usb 4-1: USB disconnect, device number 36 [ 615.875630][ T5288] usblp0: removed [ 615.892583][ T5285] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 615.965625][ T29] audit: type=1326 audit(1729244457.194:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c677dff9 code=0x7ffc0000 [ 616.091176][ T29] audit: type=1326 audit(1729244457.194:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c677dff9 code=0x7ffc0000 [ 616.122381][ T5285] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.158683][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 616.204205][ T5285] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 616.238771][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.272740][ T5285] usb 2-1: config 0 descriptor?? [ 616.293970][ T5285] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 616.314078][ T5285] dvb-usb: bulk message failed: -22 (3/0) [ 616.363737][ T5285] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 616.415606][ T5285] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 616.448367][ T5285] usb 2-1: media controller created [ 616.478708][ T5285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.495691][T15404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.541594][T15404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.578753][ T5285] dvb-usb: bulk message failed: -22 (6/0) [ 616.625860][ T5285] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 616.674419][ T5285] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55 [ 616.739156][ T5285] dvb-usb: schedule remote query interval to 150 msecs. [ 616.783046][ T5285] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 616.837002][ T5285] usb 2-1: USB disconnect, device number 37 [ 616.927517][ T5285] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 617.774480][T15409] unknown channel width for channel at 909000KHz? [ 617.792750][T15409] unknown channel width for channel at 909000KHz? [ 617.831640][T15409] unknown channel width for channel at 909000KHz? [ 617.892442][ T5288] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 618.103096][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 618.150678][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 618.225938][ T5288] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 618.304701][ T5288] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 618.339497][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 618.402833][ T5288] usb 4-1: Product: syz [ 618.427652][ T5288] usb 4-1: Manufacturer: syz [ 618.462418][ T5288] usb 4-1: SerialNumber: syz [ 618.511165][ T5288] usb 4-1: config 0 descriptor?? [ 618.759121][ T5288] usb 4-1: USB disconnect, device number 37 [ 624.324036][ T5246] Bluetooth: hci1: command 0x0406 tx timeout [ 626.784795][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.798445][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.386379][ T16] sched: DL replenish lagged too much [ 712.799745][ T5240] Bluetooth: hci5: command 0x0406 tx timeout [ 713.029641][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.043725][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.897454][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.903822][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 770.092325][T10988] Bluetooth: hci4: command 0x0406 tx timeout [ 773.424225][ T30] INFO: task kworker/u8:4:72 blocked for more than 141 seconds. [ 773.431910][ T30] Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 773.532262][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 773.540987][ T30] task:kworker/u8:4 state:D stack:21112 pid:72 tgid:72 ppid:2 flags:0x00004000 [ 773.712402][ T30] Workqueue: netns cleanup_net [ 773.717233][ T30] Call Trace: [ 773.720526][ T30] [ 773.842445][ T30] __schedule+0x1895/0x4b30 [ 773.847030][ T30] ? __pfx___schedule+0x10/0x10 [ 773.851915][ T30] ? __pfx_lock_release+0x10/0x10 [ 774.035264][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 774.040790][ T30] ? kthread_data+0x52/0xd0 [ 774.172343][ T30] ? schedule+0x90/0x320 [ 774.176646][ T30] ? wq_worker_sleeping+0x66/0x240 [ 774.181788][ T30] ? schedule+0x90/0x320 [ 774.352443][ T30] schedule+0x14b/0x320 [ 774.356666][ T30] schedule_preempt_disabled+0x13/0x30 [ 774.362153][ T30] __mutex_lock+0x6a7/0xd70 [ 774.482371][ T30] ? __mutex_lock+0x52a/0xd70 [ 774.487138][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 774.492190][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 774.665421][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 774.670361][ T30] cleanup_net+0x615/0xcc0 [ 774.762281][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 774.767284][ T30] ? process_scheduled_works+0x976/0x1850 [ 774.898513][ T30] process_scheduled_works+0xa63/0x1850 [ 774.982470][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 774.988512][ T30] ? assign_work+0x364/0x3d0 [ 775.112316][ T30] worker_thread+0x870/0xd30 [ 775.116981][ T30] ? __kthread_parkme+0x169/0x1d0 [ 775.122040][ T30] ? __pfx_worker_thread+0x10/0x10 [ 775.262362][ T30] kthread+0x2f0/0x390 [ 775.341272][ T30] ? __pfx_worker_thread+0x10/0x10 [ 775.412587][ T30] ? __pfx_kthread+0x10/0x10 [ 775.417225][ T30] ret_from_fork+0x4b/0x80 [ 775.421668][ T30] ? __pfx_kthread+0x10/0x10 [ 775.592257][ T30] ret_from_fork_asm+0x1a/0x30 [ 775.597089][ T30] [ 775.652484][ T30] INFO: task kworker/u8:10:3040 blocked for more than 143 seconds. [ 775.660734][ T30] Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 775.852281][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.861296][ T30] task:kworker/u8:10 state:D stack:20728 pid:3040 tgid:3040 ppid:2 flags:0x00004000 [ 776.092333][ T30] Workqueue: events_unbound linkwatch_event [ 776.098320][ T30] Call Trace: [ 776.101628][ T30] [ 776.452268][ T30] __schedule+0x1895/0x4b30 [ 776.456860][ T30] ? __pfx___schedule+0x10/0x10 [ 776.461755][ T30] ? __pfx_lock_release+0x10/0x10 [ 776.492296][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 776.497814][ T30] ? kthread_data+0x52/0xd0 [ 776.522248][ T30] ? schedule+0x90/0x320 [ 776.526541][ T30] ? wq_worker_sleeping+0x66/0x240 [ 776.531685][ T30] ? schedule+0x90/0x320 [ 776.562248][ T30] schedule+0x14b/0x320 [ 776.566457][ T30] schedule_preempt_disabled+0x13/0x30 [ 776.571946][ T30] __mutex_lock+0x6a7/0xd70 [ 776.602252][ T30] ? __mutex_lock+0x52a/0xd70 [ 776.606973][ T30] ? linkwatch_event+0xe/0x60 [ 776.611669][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 776.652274][ T30] ? process_scheduled_works+0x976/0x1850 [ 776.658042][ T30] linkwatch_event+0xe/0x60 [ 776.676407][ T30] process_scheduled_works+0xa63/0x1850 [ 776.692295][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 776.698325][ T30] ? assign_work+0x364/0x3d0 [ 776.712253][ T30] worker_thread+0x870/0xd30 [ 776.716906][ T30] ? __kthread_parkme+0x169/0x1d0 [ 776.721959][ T30] ? __pfx_worker_thread+0x10/0x10 [ 776.738509][ T30] kthread+0x2f0/0x390 [ 776.742641][ T30] ? __pfx_worker_thread+0x10/0x10 [ 776.747779][ T30] ? __pfx_kthread+0x10/0x10 [ 776.752462][ T30] ret_from_fork+0x4b/0x80 [ 776.756908][ T30] ? __pfx_kthread+0x10/0x10 [ 776.761520][ T30] ret_from_fork_asm+0x1a/0x30 [ 776.766414][ T30] [ 776.769485][ T30] INFO: task dhcpcd:4903 blocked for more than 144 seconds. [ 776.776839][ T30] Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 776.784723][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 776.793498][ T30] task:dhcpcd state:D stack:20352 pid:4903 tgid:4903 ppid:4902 flags:0x00000002 [ 776.803750][ T30] Call Trace: [ 776.807054][ T30] [ 776.810002][ T30] __schedule+0x1895/0x4b30 [ 776.814604][ T30] ? __pfx___schedule+0x10/0x10 [ 776.819500][ T30] ? __pfx_lock_release+0x10/0x10 [ 776.824622][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 776.830129][ T30] ? schedule+0x90/0x320 [ 776.834606][ T30] schedule+0x14b/0x320 [ 776.838813][ T30] schedule_preempt_disabled+0x13/0x30 [ 776.844434][ T30] __mutex_lock+0x6a7/0xd70 [ 776.848975][ T30] ? __mutex_lock+0x52a/0xd70 [ 776.853705][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 776.858847][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 776.863939][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 776.868904][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 776.874076][ T30] ? __lock_acquire+0x1384/0x2050 [ 776.879131][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 776.884911][ T30] netlink_rcv_skb+0x1e3/0x430 [ 776.889712][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 776.895253][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 776.900592][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 776.905863][ T30] netlink_unicast+0x7f6/0x990 [ 776.910667][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 776.916010][ T30] ? __virt_addr_valid+0x183/0x530 [ 776.921146][ T30] ? __check_object_size+0x48e/0x900 [ 776.926492][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 776.931290][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.936667][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 776.941631][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.946975][ T30] __sock_sendmsg+0x221/0x270 [ 776.951690][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 776.956532][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 776.961839][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 776.968055][ T30] __sys_sendmsg+0x292/0x380 [ 776.972724][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 776.977865][ T30] ? netlink_bind+0xaeb/0xc90 [ 776.982614][ T30] ? __pfx___sys_bind+0x10/0x10 [ 776.987663][ T30] ? fd_install+0x35c/0x5d0 [ 776.992257][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 776.998617][ T30] ? do_syscall_64+0x100/0x230 [ 777.003482][ T30] ? do_syscall_64+0xb6/0x230 [ 777.008189][ T30] do_syscall_64+0xf3/0x230 [ 777.012745][ T30] ? clear_bhb_loop+0x35/0x90 [ 777.017454][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.023432][ T30] RIP: 0033:0x7f0662506a4b [ 777.027866][ T30] RSP: 002b:00007fffe77fd608 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.036360][ T30] RAX: ffffffffffffffda RBX: 00007f066242e6c0 RCX: 00007f0662506a4b [ 777.044408][ T30] RDX: 0000000000000000 RSI: 00007fffe78117b8 RDI: 0000000000000019 [ 777.052438][ T30] RBP: 0000000000000019 R08: 0000000000000000 R09: 00007fffe78117b8 [ 777.060432][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 777.068493][ T30] R13: 00007fffe78117b8 R14: 0000000000000048 R15: 0000000000000001 [ 777.076599][ T30] [ 777.079668][ T30] [ 777.079668][ T30] Showing all locks held in the system: [ 777.087463][ T30] 3 locks held by kworker/1:0/25: [ 777.092817][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 777.103884][ T30] #1: ffffc900001f7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 777.114970][ T30] #2: ffffffff8fcd2d08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 777.125475][ T30] 1 lock held by khungtaskd/30: [ 777.130363][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 777.140289][ T30] 2 locks held by kworker/u8:2/35: [ 777.145457][ T30] 4 locks held by kworker/u8:4/72: [ 777.150614][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 777.161613][ T30] #1: ffffc900020cfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 777.172362][ T30] #2: ffffffff8fcc6210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 777.181834][ T30] #3: ffffffff8fcd2d08 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 777.191593][ T30] 3 locks held by kworker/u8:6/2595: [ 777.196946][ T30] #0: ffff88802def6148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 777.208605][ T30] #1: ffffc90009047d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 777.222422][ T30] #2: ffffffff8fcd2d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 777.231970][ T30] 3 locks held by kworker/u8:10/3040: [ 777.237530][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 777.249294][ T30] #1: ffffc90009d57d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 777.260391][ T30] #2: ffffffff8fcd2d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 777.269478][ T30] 2 locks held by jbd2/sda1-8/4651: [ 777.274754][ T30] 2 locks held by udevd/4689: [ 777.279454][ T30] 1 lock held by dhcpcd/4903: [ 777.284237][ T30] #0: ffffffff8fcd2d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 777.293917][ T30] 2 locks held by getty/4986: [ 777.298612][ T30] #0: ffff88802e8e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 777.312263][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 777.326299][ T30] 5 locks held by kworker/u9:9/5246: [ 777.331608][ T30] 3 locks held by kworker/1:4/5283: [ 777.336875][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 777.349359][ T30] #1: ffffc9000446fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 777.360506][ T30] #2: ffffffff8fcd2d08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 777.370185][ T30] 5 locks held by kworker/u9:0/9604: [ 777.375739][ T30] #0: ffff888021717948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 777.386626][ T30] #1: ffffc90003e87d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 777.399509][ T30] #2: ffff888068f2cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 777.409481][ T30] #3: ffff888068f2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 777.419296][ T30] #4: ffffffff8fe3f628 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 777.429136][ T30] 1 lock held by syz.0.2058/12334: [ 777.434325][ T30] 3 locks held by syz-executor/12954: [ 777.439755][ T30] 1 lock held by syz-executor/13678: [ 777.445106][ T30] 8 locks held by syz-executor/15018: [ 777.450499][ T30] #0: ffff888065102420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 777.459491][ T30] #1: ffff888078b43c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 777.469337][ T30] #2: ffff88814476eb48 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 777.479479][ T30] #3: ffffffff8f570d48 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 777.489871][ T30] #4: ffff88807afb30e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 777.500679][ T30] #5: ffff88807afb4250 (&devlink->lock_key#37){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 777.510887][ T30] #6: ffffffff8fcd2d08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 777.519886][ T30] #7: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 777.530868][ T30] 1 lock held by syz.3.2989/15377: [ 777.536044][ T30] 3 locks held by kworker/1:3/15453: [ 777.541345][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 777.552430][ T30] #1: ffffc900041dfd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 777.562793][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 777.573780][ T30] 2 locks held by syz-executor/15456: [ 777.579167][ T30] [ 777.581500][ T30] ============================================= [ 777.581500][ T30] [ 777.589992][ T30] NMI backtrace for cpu 0 [ 777.594335][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 777.604897][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 777.614988][ T30] Call Trace: [ 777.618291][ T30] [ 777.621240][ T30] dump_stack_lvl+0x241/0x360 [ 777.625944][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.631164][ T30] ? __pfx__printk+0x10/0x10 [ 777.635776][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 777.640738][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 777.646214][ T30] ? _printk+0xd5/0x120 [ 777.650365][ T30] ? __pfx__printk+0x10/0x10 [ 777.654957][ T30] ? __wake_up_klogd+0xcc/0x110 [ 777.659823][ T30] ? __pfx__printk+0x10/0x10 [ 777.664415][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 777.669461][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 777.675448][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 777.681439][ T30] watchdog+0xff4/0x1040 [ 777.685689][ T30] ? watchdog+0x1ea/0x1040 [ 777.690118][ T30] ? __pfx_watchdog+0x10/0x10 [ 777.694805][ T30] kthread+0x2f0/0x390 [ 777.698882][ T30] ? __pfx_watchdog+0x10/0x10 [ 777.703569][ T30] ? __pfx_kthread+0x10/0x10 [ 777.708168][ T30] ret_from_fork+0x4b/0x80 [ 777.712594][ T30] ? __pfx_kthread+0x10/0x10 [ 777.717192][ T30] ret_from_fork_asm+0x1a/0x30 [ 777.721969][ T30] [ 777.725359][ T30] Sending NMI from CPU 0 to CPUs 1: [ 777.730612][ C1] NMI backtrace for cpu 1 [ 777.730625][ C1] CPU: 1 UID: 0 PID: 4689 Comm: udevd Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 777.730643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 777.730654][ C1] RIP: 0010:__slab_free+0x196/0x3d0 [ 777.730674][ C1] Code: ea 48 8b 4c 24 20 4d 89 f8 e8 f6 dc ff ff 89 c3 eb 43 48 8b 5c 24 20 4c 89 f9 48 89 ea 4c 89 e0 48 8b 34 24 f0 48 0f c7 4e 20 <0f> 84 c3 00 00 00 eb 4e e8 7d 7b a9 ff 48 8b 3c 24 4c 89 e6 48 89 [ 777.730687][ C1] RSP: 0018:ffffc90003ba7340 EFLAGS: 00000242 [ 777.730703][ C1] RAX: ffff8881e9a74000 RBX: ffff8881e9a74800 RCX: 0000000000100006 [ 777.730715][ C1] RDX: 0000000000100007 RSI: ffffea0007a69c00 RDI: ffff88801ac41dc0 [ 777.730728][ C1] RBP: 0000000000100007 R08: 0000000000000001 R09: ffffffff81feae5f [ 777.730739][ C1] R10: dffffc0000000000 R11: fffffbfff2859307 R12: ffff8881e9a74000 [ 777.730751][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000100006 [ 777.730762][ C1] FS: 00007f54254d4c80(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 777.730776][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.730787][ C1] CR2: 00007fc1d8fffd00 CR3: 0000000078c54000 CR4: 00000000003526f0 [ 777.730801][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.730811][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 777.730821][ C1] Call Trace: [ 777.730827][ C1] [ 777.730833][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 777.730853][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 777.730878][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 777.730898][ C1] ? nmi_handle+0x2a/0x5a0 [ 777.730921][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 777.730942][ C1] ? nmi_handle+0x14f/0x5a0 [ 777.730963][ C1] ? nmi_handle+0x2a/0x5a0 [ 777.730980][ C1] ? __slab_free+0x196/0x3d0 [ 777.730996][ C1] ? default_do_nmi+0x63/0x160 [ 777.731017][ C1] ? exc_nmi+0x123/0x1f0 [ 777.731036][ C1] ? end_repeat_nmi+0xf/0x53 [ 777.731055][ C1] ? qlist_free_all+0x8f/0x140 [ 777.731072][ C1] ? __slab_free+0x196/0x3d0 [ 777.731087][ C1] ? __slab_free+0x196/0x3d0 [ 777.731104][ C1] ? __slab_free+0x196/0x3d0 [ 777.731120][ C1] [ 777.731125][ C1] [ 777.731133][ C1] ? __phys_addr+0xba/0x170 [ 777.731150][ C1] qlist_free_all+0x9a/0x140 [ 777.731167][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 777.731185][ C1] __kasan_kmalloc+0x23/0xb0 [ 777.731202][ C1] ? tomoyo_encode+0x26f/0x540 [ 777.731220][ C1] ? tomoyo_encode+0x26f/0x540 [ 777.731238][ C1] __kmalloc_noprof+0x1fc/0x400 [ 777.731261][ C1] tomoyo_encode+0x26f/0x540 [ 777.731282][ C1] tomoyo_realpath_from_path+0x59e/0x5e0 [ 777.731307][ C1] tomoyo_check_open_permission+0x255/0x500 [ 777.731323][ C1] ? __lock_acquire+0x1384/0x2050 [ 777.731347][ C1] ? tomoyo_check_open_permission+0x204/0x500 [ 777.731364][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 777.731396][ C1] ? tomoyo_file_open+0x165/0x220 [ 777.731418][ C1] security_file_open+0x777/0x990 [ 777.731437][ C1] do_dentry_open+0x369/0x1460 [ 777.731462][ C1] vfs_open+0x3e/0x330 [ 777.731481][ C1] path_openat+0x2c84/0x3590 [ 777.731517][ C1] ? __pfx_path_openat+0x10/0x10 [ 777.731547][ C1] do_filp_open+0x235/0x490 [ 777.731571][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 777.731603][ C1] ? _raw_spin_unlock+0x28/0x50 [ 777.731626][ C1] ? alloc_fd+0x5a1/0x640 [ 777.731646][ C1] do_sys_openat2+0x13e/0x1d0 [ 777.731665][ C1] ? __might_fault+0xaa/0x120 [ 777.731680][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 777.731701][ C1] ? rcu_is_watching+0x15/0xb0 [ 777.731718][ C1] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 777.731741][ C1] __x64_sys_openat+0x247/0x2a0 [ 777.731762][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 777.731784][ C1] ? do_syscall_64+0x100/0x230 [ 777.731802][ C1] ? do_syscall_64+0xb6/0x230 [ 777.731819][ C1] do_syscall_64+0xf3/0x230 [ 777.731836][ C1] ? clear_bhb_loop+0x35/0x90 [ 777.731853][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.731878][ C1] RIP: 0033:0x7f542511a477 [ 777.731892][ C1] Code: 10 00 00 00 44 8b 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 82 69 0d 00 f7 d8 64 89 02 48 83 [ 777.731905][ C1] RSP: 002b:00007ffedfa35528 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 777.731921][ C1] RAX: ffffffffffffffda RBX: 0000555f607f3da0 RCX: 00007f542511a477 [ 777.731933][ C1] RDX: 0000000000090800 RSI: 0000555f6077b2a0 RDI: 00000000ffffff9c [ 777.731949][ C1] RBP: 0000555f607d1020 R08: 0000000000090800 R09: 0000555f6077b2a0 [ 777.731960][ C1] R10: 0000000000000000 R11: 0000000000000287 R12: 0000555f6077b2a0 [ 777.731970][ C1] R13: 00000000000000ff R14: 0000555f3e3a01c4 R15: 0000000000000000 [ 777.731987][ C1] [ 777.732615][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 777.732629][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 777.732654][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 777.732667][ T30] Call Trace: [ 777.732676][ T30] [ 777.732686][ T30] dump_stack_lvl+0x241/0x360 [ 777.732720][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.732745][ T30] ? __pfx__printk+0x10/0x10 [ 777.732764][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 777.732801][ T30] ? vscnprintf+0x5d/0x90 [ 777.732829][ T30] panic+0x349/0x880 [ 777.732851][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 777.732879][ T30] ? __pfx_panic+0x10/0x10 [ 777.732897][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 777.732922][ T30] ? __irq_work_queue_local+0x137/0x410 [ 777.732952][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 777.732974][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 777.733001][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 777.733031][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 777.733060][ T30] watchdog+0x1033/0x1040 [ 777.733091][ T30] ? watchdog+0x1ea/0x1040 [ 777.733123][ T30] ? __pfx_watchdog+0x10/0x10 [ 777.733151][ T30] kthread+0x2f0/0x390 [ 777.733172][ T30] ? __pfx_watchdog+0x10/0x10 [ 777.733199][ T30] ? __pfx_kthread+0x10/0x10 [ 777.733222][ T30] ret_from_fork+0x4b/0x80 [ 777.733250][ T30] ? __pfx_kthread+0x10/0x10 [ 777.733273][ T30] ret_from_fork_asm+0x1a/0x30 [ 777.733313][ T30] [ 778.348375][ T30] Kernel Offset: disabled [ 778.352698][ T30] Rebooting in 86400 seconds..