last executing test programs: 9.885950658s ago: executing program 0 (id=1099): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="00000100000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40000) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) 6.815163434s ago: executing program 0 (id=1115): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) write(r0, &(0x7f0000000340)="05000000", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010000d500000000000001000000080001000c00000008000200030000002c0004"], 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000002c0)=ANY=[@ANYRES8], 0x118) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x8010, 0xffffffffffffffff, 0x6b718000) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000000c0)={'caif0\x00', @multicast}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) socket$netlink(0x10, 0x3, 0x0) 4.811181108s ago: executing program 0 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FRA_FLOW={0x8, 0xb, 0x3}]}, 0x34}}, 0x0) 4.36415753s ago: executing program 0 (id=1124): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e200e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000007d3191ed277e476c7db8630000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50}, 0xffffffffffffffb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0x10034) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000001840)={0x0, 0x0, "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"}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0x4, 0x8, 0x6, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0x61}, {}, {0x6}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x98, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x15, 0xf, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}}, @random={0xff, 0x1, "03"}, @channel_switch={0x25, 0x3}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7f}) 3.962207581s ago: executing program 2 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) 3.865445361s ago: executing program 4 (id=1129): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_dccp(0x2, 0x6, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000005c0)={0x4, 0xc}, 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000740)={@multicast1, @loopback, 0x0}, &(0x7f00000007c0)=0xc) sendmsg$nl_route(r4, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv4_delroute={0x60, 0x19, 0x0, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x5, 0xff, 0x2, 0xfe, 0x3, 0xd00}, [@RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_FLOW={0x8, 0xb, 0xbaa}, @RTA_PRIORITY={0x8, 0x6, 0xffffffff}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x21, 0x6, r6}}, @RTA_SRC={0x8, 0x2, @local}, @RTA_NH_ID={0x8, 0x1e, 0x458}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_IIF={0x8, 0x3, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20049814}, 0x40000) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffd3d, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x141, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c8, 0x2, [@TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS, @TCA_GRED_PARMS={0x38}, @TCA_GRED_DPS={0x10}]}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x200}, 0x1, 0x8100000000000000}, 0x0) close_range(r5, r1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GETFSUUID(r11, 0x8008662c, &(0x7f0000000540)) r12 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010ff7f040000000000eaff00000003a621f3d94266709c3fdea41f8223f65999160709f7f06e3dec99606661284bdda1fd37eb2cf62a1d2c90820fab0fa13a609ab26216c6fe7baf6f3feb5bb0e0ae3c5e5610633b61ef4872bc81033ad010e6b0c86a0e6e948c0403429d96954ce95914f9ceae1ea12266e3c85b472f15b2", @ANYRES32=r10, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES32=r13, @ANYBLOB="0a000200bbbbbbbbbbbb000008001f00ff03000008000a00", @ANYRES32=r13, @ANYBLOB="05002700070000000800280077e4000008000f000fbc0000"], 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=@getchain={0x44, 0x66, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x9, 0xf}, {0xe, 0xe}, {0x10, 0xc}}, [{0x8, 0xb, 0x4777}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40010) sendmsg$nl_route(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2400000019000100bd7000fddbdf250a0610060002ff0800200000080017000200000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) getsockname(r3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r14}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x6, 0x6}}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xec}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffe01, 0x7f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0xfffffffe, {0x0, 0x0, 0x74, r14, {}, {}, {0xe, 0x3f00}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x80) 3.179908566s ago: executing program 0 (id=1130): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc038480a, &(0x7f0000000280)={0x2, 0x0, 0x8000000}) 2.717809699s ago: executing program 2 (id=1132): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f000001a080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.457608925s ago: executing program 2 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0xffffffffffffff74}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}}, 0x0) 2.443199844s ago: executing program 4 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x3}]}}}]}, 0x3c}}, 0x0) 2.391145377s ago: executing program 3 (id=1135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.245571377s ago: executing program 4 (id=1136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 2.218717792s ago: executing program 2 (id=1137): syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x32, &(0x7f0000000100)=@string={0x32, 0x3, "ed4876663ea7cf378030b2769586a39c94ecb31b6c373c940dbe506ff4934d0481439d01dce71363f9def934224feee8"}}, {0x5d, &(0x7f00000001c0)=@string={0x5d, 0x3, "27a6b502eb2f8fc89fbaffe8f01bfd2c7bdd39e9c33116869875deb90779480a908b0ca083aa4debad1114f244b62421a0c0da77737be9e8e115ea54de5912b9291c14571568578bd1858fbb04c470b8aa4b5450db06f1eaff0723"}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 2.038517511s ago: executing program 4 (id=1138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000280)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x80, 0x20}}, 0x1c}}, 0x0) 1.892210433s ago: executing program 3 (id=1140): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000010c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 1.761840637s ago: executing program 4 (id=1141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380003"], 0x78) write$binfmt_elf32(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000003800000000000000000000000000200000000000000000000000000003"], 0x158) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4081, 0x0) 1.718438377s ago: executing program 1 (id=1142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0) 1.487714127s ago: executing program 4 (id=1143): socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, 0x0, 0x82) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0xc0902, 0x0) unshare(0x2a020400) syz_pidfd_open(0x0, 0x0) setns(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x200440c0) write$binfmt_aout(r2, 0x0, 0xad7) open$dir(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) open(0x0, 0x60102, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201e040128000000000001090224000100000000090400000103000000092100000001220200090781"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1.469276777s ago: executing program 3 (id=1144): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x9, 0x8) 1.389031794s ago: executing program 2 (id=1145): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_dccp(0x2, 0x6, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000005c0)={0x4, 0xc}, 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000740)={@multicast1, @loopback, 0x0}, &(0x7f00000007c0)=0xc) sendmsg$nl_route(r4, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv4_delroute={0x60, 0x19, 0x0, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x5, 0xff, 0x2, 0xfe, 0x3, 0xd00}, [@RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_FLOW={0x8, 0xb, 0xbaa}, @RTA_PRIORITY={0x8, 0x6, 0xffffffff}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x21, 0x6, r6}}, @RTA_SRC={0x8, 0x2, @local}, @RTA_NH_ID={0x8, 0x1e, 0x458}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_IIF={0x8, 0x3, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20049814}, 0x40000) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffd3d, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x141, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c8, 0x2, [@TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "23e3d9419bd7bbaa20bbb9de10106025fad3d6225df5c13a36978dfb3fb8394c86831e668fbccb7366f6455c32de671417829b5077d97646588cfd74d48bf7afe22b8c6d98ab094a75258963abe1c2aefb413aa50a3c4312564cba8a3e4504697c68b8066f382d478eafea471bcf0ad6d141a2fcbf1e00dd3000f4a5f0a8d7e709ea1f8d19a5009354ec83177ecc7c92be96f7a40e323b12e741afef87a57681ee5b429ad62d68c5e1047c7925ff5dc9f1d5f92d449dd39d65a3fceea644ad357c15f913acc269da138a2363b649788eb5b739ba7e2cd8bec6b35271f7b2f8a59820d6f56c051f00a9aed2eeba6c514eb6bef74050eab5c4192299053e3438bc"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS, @TCA_GRED_PARMS={0x38}, @TCA_GRED_DPS={0x10}]}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x200}, 0x1, 0x8100000000000000}, 0x0) close_range(r5, r1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GETFSUUID(r11, 0x8008662c, &(0x7f0000000540)) r12 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010ff7f040000000000eaff00000003a621f3d94266709c3fdea41f8223f65999160709f7f06e3dec99606661284bdda1fd37eb2cf62a1d2c90820fab0fa13a609ab26216c6fe7baf6f3feb5bb0e0ae3c5e5610633b61ef4872bc81033ad010e6b0c86a0e6e948c0403429d96954ce95914f9ceae1ea12266e3c85b472f15b2", @ANYRES32=r10, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES32=r13, @ANYBLOB="0a000200bbbbbbbbbbbb000008001f00ff03000008000a00", @ANYRES32=r13, @ANYBLOB="05002700070000000800280077e4000008000f000fbc0000"], 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=@getchain={0x44, 0x66, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x9, 0xf}, {0xe, 0xe}, {0x10, 0xc}}, [{0x8, 0xb, 0x4777}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40010) sendmsg$nl_route(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2400000019000100bd7000fddbdf250a0610060002ff0800200000080017000200000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) getsockname(r3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r14}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x6, 0x6}}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xec}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffe01, 0x7f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0xfffffffe, {0x0, 0x0, 0x74, r14, {}, {}, {0xe, 0x3f00}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x80) 1.310108308s ago: executing program 1 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x3}]}}}]}, 0x3c}}, 0x0) 1.104579811s ago: executing program 1 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0xffffffffffffff74}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}}, 0x0) 1.025846164s ago: executing program 3 (id=1148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 813.43889ms ago: executing program 0 (id=1149): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r5 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYBLOB="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"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r6, 0x5412, 0x0) 803.663195ms ago: executing program 2 (id=1150): syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0xc1, 0x7a, 0x94, 0x10, 0xf7d4, 0xbee3, 0x3df7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xc, 0x7}}]}}]}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 716.081393ms ago: executing program 1 (id=1151): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xd0, &(0x7f0000004b00), 0x4) 644.136505ms ago: executing program 3 (id=1152): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, 0x0) 477.83688ms ago: executing program 1 (id=1153): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308"], 0xffdd) 185.124925ms ago: executing program 1 (id=1154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x3000002, 0x13, 0xffffffffffffffff, 0xca8a4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x31) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080), 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000180)="1000000000000000290000003b000000", 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @noop, @lsrr={0x83, 0xfffffffffffffd3a, 0x0, [@dev, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900), 0x0) 0s ago: executing program 3 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001540)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x8001]}, @NL80211_ATTR_FRAME={0x55, 0x33, @beacon={{{}, {}, @device_a, @broadcast}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.454699][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.052735][ T6828] netlink: 45 bytes leftover after parsing attributes in process `syz.1.531'. [ 188.520114][ T6841] dummy0: entered promiscuous mode [ 188.539172][ T5304] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 188.546874][ T6841] dummy0: left promiscuous mode [ 188.604822][ T6845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.537'. [ 188.769169][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 188.798398][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 188.843157][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.902780][ T5304] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 188.946130][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.988400][ T5304] usb 4-1: Product: syz [ 189.006523][ T5304] usb 4-1: Manufacturer: syz [ 189.060295][ T5304] usb 4-1: SerialNumber: syz [ 189.083385][ T5304] usb 4-1: config 0 descriptor?? [ 189.971433][ T5304] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 189.982778][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 189.990648][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 189.999620][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 190.007402][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 190.018296][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 190.025965][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 190.075530][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 190.112700][ T5304] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 190.139988][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 190.164279][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 190.189532][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 190.198557][ T6862] tap0: tun_chr_ioctl cmd 2147767521 [ 190.214395][ T5304] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 190.253969][ T5304] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 190.308067][ T5304] usb 4-1: USB disconnect, device number 7 [ 190.326171][ T6870] netlink: 96 bytes leftover after parsing attributes in process `syz.0.545'. [ 190.369362][ T5304] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 190.411361][ T5304] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 190.517571][ T5304] keyspan 4-1:0.0: device disconnected [ 190.584233][ T6870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.808266][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.820081][ T6879] kvm: emulating exchange as write [ 190.872648][ T5222] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 190.945423][ T4607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.957512][ T4607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.970016][ T4607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.980172][ T4607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.988308][ T4607] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 190.996137][ T4607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.028258][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 191.036328][ T8] usb 3-1: config 14 has an invalid interface number: 137 but max is 1 [ 191.046669][ T8] usb 3-1: config 14 has no interface number 1 [ 191.068409][ T8] usb 3-1: config 14 interface 137 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.082705][ T8] usb 3-1: config 14 interface 137 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.097094][ T8] usb 3-1: config 14 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.126772][ T5222] usb 1-1: descriptor type invalid, skip [ 191.141454][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 191.145692][ T5222] usb 1-1: descriptor type invalid, skip [ 191.167095][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.198576][ T8] usb 3-1: Product: syz [ 191.203681][ T8] usb 3-1: Manufacturer: syz [ 191.217002][ T5222] usb 1-1: descriptor type invalid, skip [ 191.223097][ T8] usb 3-1: SerialNumber: syz [ 191.241728][ T5222] usb 1-1: not running at top speed; connect to a high speed hub [ 191.278787][ T5222] usb 1-1: config 1 interface 0 altsetting 194 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.308057][ T5222] usb 1-1: config 1 interface 0 has no altsetting 0 [ 191.334958][ T5222] usb 1-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.40 [ 191.357470][ T5222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.385932][ T5222] usb 1-1: Product: syz [ 191.405792][ T5222] usb 1-1: Manufacturer: syz [ 191.416072][ T5222] usb 1-1: SerialNumber: syz [ 191.429509][ T6878] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 191.488743][ T8] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 191.497469][ T8] dvb_usb_af9015 3-1:14.0: probe with driver dvb_usb_af9015 failed with error -22 [ 191.530834][ T8] usb 3-1: USB disconnect, device number 12 [ 192.101465][ T6870] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=924852256 (1849704512 ns) > initial count (1077952628 ns). Using initial count to start timer. [ 192.211684][ T6888] xt_nfacct: accounting object `sy' does not exists [ 192.360689][ C1] eth0: bad gso: type: 1, size: 1408 [ 192.368094][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 192.789430][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.822080][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.838958][ T6881] bridge_slave_0: entered allmulticast mode [ 192.858465][ T6881] bridge_slave_0: entered promiscuous mode [ 192.890849][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.911966][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.927664][ T6881] bridge_slave_1: entered allmulticast mode [ 192.945655][ T6881] bridge_slave_1: entered promiscuous mode [ 193.059072][ T4607] Bluetooth: hci6: command tx timeout [ 193.169580][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.215105][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.452828][ T5222] usbhid 1-1:1.0: can't add hid device: -71 [ 193.475760][ T5222] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 193.512407][ T5222] usb 1-1: USB disconnect, device number 9 [ 193.519873][ T6881] team0: Port device team_slave_0 added [ 193.549939][ T6881] team0: Port device team_slave_1 added [ 193.707039][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.726492][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.792880][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.843620][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.864651][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.936429][ T29] audit: type=1326 audit(1722378255.831:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 193.977667][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.020493][ T29] audit: type=1326 audit(1722378255.841:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 194.099013][ T29] audit: type=1326 audit(1722378255.841:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 194.168672][ T29] audit: type=1326 audit(1722378255.841:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 194.241767][ T29] audit: type=1326 audit(1722378255.841:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 194.262161][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.283773][ T29] audit: type=1326 audit(1722378255.851:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 194.314524][ T29] audit: type=1326 audit(1722378255.851:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 194.354555][ T29] audit: type=1326 audit(1722378255.891:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 194.389846][ T6881] hsr_slave_0: entered promiscuous mode [ 194.409041][ T29] audit: type=1326 audit(1722378255.891:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 194.436352][ T6881] hsr_slave_1: entered promiscuous mode [ 194.442873][ T6926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.443950][ T29] audit: type=1326 audit(1722378255.891:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024577299 code=0x7ffc0000 [ 194.498106][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.506863][ T6881] Cannot create hsr debugfs directory [ 194.513035][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.524548][ T6929] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 194.871991][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 194.970566][ T6935] 8021q: adding VLAN 0 to HW filter on device team1 [ 195.061007][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 195.129072][ T4607] Bluetooth: hci6: command tx timeout [ 195.339923][ T5222] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 195.510359][ T6881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.551576][ T5222] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 195.584051][ T5222] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.605319][ T5222] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.637902][ T5222] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.657421][ T5222] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.675734][ T5222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.684852][ T5222] usb 3-1: Product: syz [ 195.692742][ T5222] usb 3-1: Manufacturer: syz [ 195.702870][ T5222] usb 3-1: SerialNumber: syz [ 195.738279][ T941] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 195.749141][ T6881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.921146][ T6881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.939925][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 195.951216][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.966327][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.997857][ T941] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.91 [ 196.022468][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.030886][ T6953] xt_nfacct: accounting object `sy' does not exists [ 196.048745][ T5222] usb 3-1: USB disconnect, device number 13 [ 196.063061][ T941] usb 2-1: config 0 descriptor?? [ 196.127327][ T6881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.426965][ T6881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.446039][ T6881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.457919][ T6881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.489257][ T6881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.513051][ T941] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 196.542390][ T941] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 196.562634][ T941] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 196.582770][ T941] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 196.588853][ T6959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.575'. [ 196.601218][ T941] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 196.634035][ T941] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 196.652207][ T941] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 196.679662][ T941] lenovo 0003:17EF:60EE.0004: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 196.747573][ T941] usb 2-1: USB disconnect, device number 6 [ 196.789080][ T6962] tipc: Enabling of bearer rejected, failed to enable media [ 196.829826][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.883980][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.922312][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.929541][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.027347][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.034678][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.208650][ T4607] Bluetooth: hci6: command tx timeout [ 197.471580][ T6980] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 197.729362][ T6987] QAT: failed to copy from user cfg_data. [ 197.871087][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.999018][ T6999] netlink: 168 bytes leftover after parsing attributes in process `syz.3.587'. [ 198.128953][ T941] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 198.204758][ T7006] tipc: Started in network mode [ 198.218341][ T7006] tipc: Node identity _, cluster identity 4711 [ 198.229525][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.245526][ T7006] tipc: Enabling of bearer rejected, failed to enable media [ 198.329878][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 198.332253][ T6881] veth0_vlan: entered promiscuous mode [ 198.337575][ T941] usb 3-1: config 14 has an invalid interface number: 137 but max is 1 [ 198.366005][ T6881] veth1_vlan: entered promiscuous mode [ 198.372348][ T944] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 198.375724][ T941] usb 3-1: config 14 has no interface number 1 [ 198.397115][ T941] usb 3-1: config 14 interface 137 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.422327][ T941] usb 3-1: config 14 interface 137 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.423238][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 198.446313][ T6881] veth0_macvtap: entered promiscuous mode [ 198.463585][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 198.468067][ T941] usb 3-1: config 14 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.485234][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.496149][ T6881] veth1_macvtap: entered promiscuous mode [ 198.507318][ T941] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 198.514607][ T9] usb 2-1: Product: syz [ 198.516937][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.537184][ T9] usb 2-1: Manufacturer: syz [ 198.542305][ T941] usb 3-1: Product: syz [ 198.549246][ T9] usb 2-1: SerialNumber: syz [ 198.559176][ T941] usb 3-1: Manufacturer: syz [ 198.563739][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.574136][ T941] usb 3-1: SerialNumber: syz [ 198.598340][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 198.604670][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 198.618310][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.618360][ T944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.632248][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.647014][ T944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.664189][ T944] usb 1-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 198.673564][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.685269][ T944] usb 1-1: config 0 descriptor?? [ 198.687245][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.726829][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.757585][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.792749][ T7011] vhci_hcd: invalid port number 0 [ 198.798323][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.798349][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.835390][ T941] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 198.849075][ T941] dvb_usb_af9015 3-1:14.0: probe with driver dvb_usb_af9015 failed with error -22 [ 198.868031][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.885080][ T941] usb 3-1: USB disconnect, device number 14 [ 198.891165][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.914353][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.926267][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.971712][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.001931][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.026616][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.038547][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.057765][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.077713][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.088836][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.099240][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.113240][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.124235][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.135793][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.160405][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.176848][ T944] wacom 0003:056A:0300.0005: unknown main item tag 0x0 [ 199.195293][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.207825][ T944] wacom 0003:056A:0300.0005: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 199.222205][ T9] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 199.252097][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.265836][ T944] wacom 0003:056A:0300.0005: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.0-1/input0 [ 199.291345][ T4607] Bluetooth: hci6: command tx timeout [ 199.299505][ T6881] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.313512][ T944] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0300.0005/input/input13 [ 199.326517][ T6881] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.338187][ T6881] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.347083][ T6881] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.418885][ T944] usb 1-1: USB disconnect, device number 10 [ 199.490391][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.509745][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.601800][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.648016][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.663136][ T7017] netlink: 10 bytes leftover after parsing attributes in process `syz.3.594'. [ 199.818646][ T7022] QAT: failed to copy from user cfg_data. [ 200.161353][ T7032] netlink: 168 bytes leftover after parsing attributes in process `syz.4.599'. [ 200.817327][ C1] eth0: bad gso: type: 1, size: 1408 [ 200.895795][ T7051] netlink: 10 bytes leftover after parsing attributes in process `syz.4.606'. [ 201.072239][ T7056] QAT: failed to copy from user cfg_data. [ 201.458275][ T5304] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 201.594840][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 201.625785][ T7067] netlink: 'syz.0.612': attribute type 14 has an invalid length. [ 201.692114][ T4607] Bluetooth: hci3: command 0x0406 tx timeout [ 201.692181][ T5226] Bluetooth: hci1: command 0x0406 tx timeout [ 201.704419][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.718912][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.723713][ T7067] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.730593][ T5304] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 201.739358][ T7067] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.747712][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.751046][ T5304] usb 3-1: config 0 descriptor?? [ 201.756535][ T7067] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.778580][ T7067] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.948377][ T7067] vxlan0: entered promiscuous mode [ 202.143968][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 202.143982][ T29] audit: type=1326 audit(1722378264.001:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.231603][ T5304] elo 0003:04E7:0030.0006: item fetching failed at offset 5/7 [ 202.252507][ T5304] elo 0003:04E7:0030.0006: parse failed [ 202.287265][ T29] audit: type=1326 audit(1722378264.001:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.315069][ T5304] elo 0003:04E7:0030.0006: probe with driver elo failed with error -22 [ 202.383073][ T29] audit: type=1326 audit(1722378264.011:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.429721][ T5273] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 202.515865][ T5304] usb 3-1: USB disconnect, device number 15 [ 202.522080][ T29] audit: type=1326 audit(1722378264.031:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.611950][ T29] audit: type=1326 audit(1722378264.041:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.684506][ T29] audit: type=1326 audit(1722378264.041:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.710939][ T29] audit: type=1326 audit(1722378264.051:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.737543][ T5273] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 202.788245][ T5273] usb 5-1: config 0 has no interface number 0 [ 202.795833][ T5273] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.806952][ T29] audit: type=1326 audit(1722378264.061:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.807015][ T29] audit: type=1326 audit(1722378264.091:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.807063][ T29] audit: type=1326 audit(1722378264.091:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7073 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc300977299 code=0x7ffc0000 [ 202.937395][ T7085] tipc: Started in network mode [ 202.959229][ T5273] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.977558][ T7085] tipc: Node identity aaaaaaaaaa2b, cluster identity 4711 [ 202.978640][ T5273] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 203.016715][ T5273] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 203.033059][ T5273] usb 5-1: Manufacturer: syz [ 203.036506][ T7085] tipc: Enabled bearer , priority 0 [ 203.085196][ T5273] usb 5-1: config 0 descriptor?? [ 203.117882][ T7084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.420416][ T5304] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.475494][ T7077] QAT: Device 0 not found [ 203.502223][ T5304] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 203.698385][ T941] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.825748][ T5273] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0008/input/input16 [ 203.902376][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.948385][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.993354][ T941] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 204.019235][ T5273] sony 0003:054C:03D5.0008: input,hidraw1: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 204.047403][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.121141][ T941] usb 2-1: config 0 descriptor?? [ 204.160235][ T5304] tipc: Node number set to 8497834 [ 204.326221][ T7100] netlink: 10 bytes leftover after parsing attributes in process `syz.3.625'. [ 204.484315][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.500316][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.509769][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.522694][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.532722][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.540366][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.596630][ T941] lg-g15 0003:046D:C222.0009: hidraw2: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 204.825052][ T5304] usb 2-1: USB disconnect, device number 8 [ 205.089778][ T9] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 205.355756][ T941] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 205.578827][ T941] usb 4-1: Using ep0 maxpacket: 32 [ 205.589186][ T7102] chnl_net:caif_netlink_parms(): no params data found [ 205.619226][ T941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.678579][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 205.734427][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.787495][ T941] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 205.832564][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.864594][ T941] usb 4-1: config 0 descriptor?? [ 205.887732][ T7107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.895757][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 205.923858][ T941] hub 4-1:0.0: USB hub found [ 205.968689][ T7114] netlink: 'syz.1.627': attribute type 14 has an invalid length. [ 206.092904][ T7114] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.101832][ T7114] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.110715][ T7114] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.119605][ T7114] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.212510][ T7114] vxlan0: entered promiscuous mode [ 206.256201][ T941] hub 4-1:0.0: 2 ports detected [ 206.569546][ T5223] Bluetooth: hci3: command tx timeout [ 206.673130][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.708677][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.716092][ T7102] bridge_slave_0: entered allmulticast mode [ 206.750309][ T7102] bridge_slave_0: entered promiscuous mode [ 206.858401][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.865644][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.905895][ T7102] bridge_slave_1: entered allmulticast mode [ 206.935455][ T7102] bridge_slave_1: entered promiscuous mode [ 207.101490][ T8] usb 5-1: USB disconnect, device number 7 [ 207.188234][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.231659][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.518025][ T7102] team0: Port device team_slave_0 added [ 207.540343][ T7102] team0: Port device team_slave_1 added [ 207.821582][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.848869][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.918237][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.944349][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.968199][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.048246][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.219477][ T941] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 208.354704][ T7102] hsr_slave_0: entered promiscuous mode [ 208.374784][ T7136] xt_policy: neither incoming nor outgoing policy selected [ 208.395469][ T7102] hsr_slave_1: entered promiscuous mode [ 208.420794][ T7102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.438350][ T7102] Cannot create hsr debugfs directory [ 208.456040][ T7135] netlink: 256 bytes leftover after parsing attributes in process `syz.4.633'. [ 208.591210][ T7135] 9pnet_fd: p9_fd_create_tcp (7135): problem binding to privport [ 208.648679][ T5223] Bluetooth: hci3: command tx timeout [ 208.658456][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 208.658477][ T29] audit: type=1326 audit(1722378270.571:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7131 comm="syz.4.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7377977299 code=0x0 [ 208.762919][ T7141] netlink: 'syz.1.636': attribute type 32 has an invalid length. [ 208.818474][ T5223] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 209.071364][ T941] hub 4-1:0.0: set hub depth failed [ 209.084788][ T47] usb 4-1: USB disconnect, device number 8 [ 209.145197][ T7102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.498668][ T7102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.608291][ T7155] tap0: tun_chr_ioctl cmd 2147767521 [ 209.667196][ T7157] netlink: 'syz.4.639': attribute type 4 has an invalid length. [ 209.682422][ T7157] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.639'. [ 209.757312][ T7102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.041641][ T7102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.434262][ T7102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.465086][ T7102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.512393][ T7102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.566945][ T7102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.728661][ T5223] Bluetooth: hci3: command tx timeout [ 210.948771][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.039311][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.106981][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.114276][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.170982][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.178223][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.328263][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 211.523612][ T8] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 211.543951][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.565355][ T8] usb 5-1: Product: syz [ 211.584665][ T8] usb 5-1: Manufacturer: syz [ 211.594833][ T8] usb 5-1: SerialNumber: syz [ 211.626387][ T8] usb 5-1: config 0 descriptor?? [ 211.877040][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.971367][ T5223] Bluetooth: hci5: Invalid handle: 0x6163 > 0x0eff [ 212.047131][ T7102] veth0_vlan: entered promiscuous mode [ 212.102413][ T7102] veth1_vlan: entered promiscuous mode [ 212.184524][ T7102] veth0_macvtap: entered promiscuous mode [ 212.220097][ T7102] veth1_macvtap: entered promiscuous mode [ 212.291587][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.323199][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.351682][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.392928][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.435549][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.472980][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.504440][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.537011][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.567956][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.620332][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.662218][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.700673][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.724679][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.740592][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.777611][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.813943][ T5227] Bluetooth: hci3: command tx timeout [ 213.178353][ T7202] netlink: 'syz.1.654': attribute type 32 has an invalid length. [ 213.900963][ T5227] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 213.996882][ T8] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 214.046748][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.066285][ T8] usb 5-1: USB disconnect, device number 8 [ 214.075780][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.093716][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.109996][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.132764][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.153326][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.179470][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.202371][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.216553][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.216738][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.656'. [ 214.237520][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.256445][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.270723][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.289518][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.304624][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.327928][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.428799][ T8] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 214.510508][ T7102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.552446][ T7102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.588220][ T7102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.616317][ T7102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.699753][ T8] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 214.958883][ T7225] netlink: 'syz.4.660': attribute type 7 has an invalid length. [ 215.155915][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.193413][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.357844][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.391356][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.559703][ T7235] netlink: 'syz.3.664': attribute type 14 has an invalid length. [ 215.637498][ T7237] netlink: 'syz.4.666': attribute type 32 has an invalid length. [ 215.778294][ T5304] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.880412][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 215.998268][ T5304] usb 2-1: Using ep0 maxpacket: 8 [ 216.013895][ T5304] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 216.028270][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.054579][ T5304] usb 2-1: Product: syz [ 216.060806][ T5304] usb 2-1: Manufacturer: syz [ 216.067286][ T5304] usb 2-1: SerialNumber: syz [ 216.101026][ T5304] usb 2-1: config 0 descriptor?? [ 216.387282][ T5304] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 217.018890][ T944] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 217.332676][ T944] usb 3-1: Using ep0 maxpacket: 16 [ 217.355603][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.392071][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.410171][ T944] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 217.419669][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.430998][ T944] usb 3-1: config 0 descriptor?? [ 218.405120][ T5304] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 218.442251][ T5304] usb 2-1: USB disconnect, device number 9 [ 218.898770][ T5271] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 219.087462][ T944] usbhid 3-1:0.0: can't add hid device: -71 [ 219.094530][ T944] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 219.188690][ T944] usb 3-1: USB disconnect, device number 16 [ 219.197512][ T5271] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 219.245183][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.267760][ T5271] usb 4-1: config 0 descriptor?? [ 219.321673][ T7280] netlink: 'syz.2.678': attribute type 14 has an invalid length. [ 220.214159][ T7295] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 220.259226][ T7295] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.683'. [ 220.307890][ T7295] netlink: 1 bytes leftover after parsing attributes in process `syz.1.683'. [ 221.018342][ T944] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 221.137276][ T7311] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.215772][ T5271] pegasus 4-1:0.0: can't reset MAC [ 221.238458][ T5271] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 221.282618][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.296187][ T5271] usb 4-1: USB disconnect, device number 9 [ 221.314636][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.336978][ T944] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 221.359180][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.380717][ T944] usb 3-1: config 0 descriptor?? [ 221.483659][ T7320] netlink: 'syz.0.692': attribute type 7 has an invalid length. [ 221.837208][ T944] apple 0003:05AC:0262.000A: unbalanced delimiter at end of report description [ 221.877797][ T944] apple 0003:05AC:0262.000A: parse failed [ 221.887052][ T944] apple 0003:05AC:0262.000A: probe with driver apple failed with error -22 [ 222.078615][ T941] usb 3-1: USB disconnect, device number 17 [ 222.093489][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 225.188320][ T5304] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.196209][ T944] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 225.388262][ T5304] usb 1-1: Using ep0 maxpacket: 16 [ 225.410549][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 225.431751][ T944] usb 4-1: New USB device found, idVendor=0408, idProduct=4030, bcdDevice=fa.f1 [ 225.450992][ T5304] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 225.463836][ T944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.475970][ T5304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.490669][ T944] usb 4-1: Product: syz [ 225.500456][ T5304] usb 1-1: Product: syz [ 225.504706][ T5304] usb 1-1: Manufacturer: syz [ 225.509482][ T944] usb 4-1: Manufacturer: syz [ 225.514107][ T944] usb 4-1: SerialNumber: syz [ 225.528415][ T5304] usb 1-1: SerialNumber: syz [ 225.543068][ T944] usb 4-1: config 0 descriptor?? [ 225.563693][ T5304] usb 1-1: config 0 descriptor?? [ 225.575120][ T944] usb 4-1: Found UVC 0.00 device syz (0408:4030) [ 225.605556][ T944] usb 4-1: No valid video chain found. [ 225.878417][ T944] usb 1-1: USB disconnect, device number 11 [ 225.898481][ T941] usb 4-1: USB disconnect, device number 10 [ 226.418264][ T5273] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 226.638272][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 226.657722][ T5273] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 226.689114][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.739897][ T5273] usb 5-1: config 0 descriptor?? [ 226.779167][ T5273] usb 5-1: bad CDC descriptors [ 226.797095][ T5273] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 226.825393][ T5273] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 226.860612][ T5273] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 231.837938][ T944] usb 5-1: USB disconnect, device number 9 [ 232.230822][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 232.287843][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 232.688310][ T47] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 232.910278][ T47] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 232.938312][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.978875][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.008741][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 233.030850][ T47] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 233.050662][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.097260][ T47] usb 4-1: config 0 descriptor?? [ 233.118282][ T5304] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 233.329553][ T5304] usb 5-1: Using ep0 maxpacket: 32 [ 233.361254][ T5304] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 127 [ 233.372689][ T944] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 233.409246][ T5304] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.427632][ T5304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.446342][ T5304] usb 5-1: Product: syz [ 233.455679][ T5304] usb 5-1: Manufacturer: syz [ 233.469130][ T5304] usb 5-1: SerialNumber: syz [ 233.489340][ T7446] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 233.568527][ T5222] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 233.583930][ T944] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 233.598026][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.610711][ T47] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 233.625963][ T47] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 233.626833][ T944] usb 3-1: Product: syz [ 233.643861][ T47] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 233.658827][ T944] usb 3-1: Manufacturer: syz [ 233.663488][ T944] usb 3-1: SerialNumber: syz [ 233.664140][ T47] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 233.690643][ T944] usb 3-1: config 0 descriptor?? [ 233.708500][ T47] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 233.716432][ T47] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 233.736445][ T47] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 233.753131][ T7456] Driver unsupported XDP return value 0 on prog (id 106) dev N/A, expect packet loss! [ 233.774722][ T5304] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 233.778977][ T5222] usb 1-1: Using ep0 maxpacket: 8 [ 233.796739][ T47] thrustmaster 0003:044F:B653.000B: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.3-1/input0 [ 233.820222][ T5222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 233.831269][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.839783][ T47] thrustmaster 0003:044F:B653.000B: no inputs found [ 233.848078][ T5222] usb 1-1: New USB device found, idVendor=10cf, idProduct=8062, bcdDevice=f0.04 [ 233.857816][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.881193][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.895942][ T5222] usb 1-1: config 0 descriptor?? [ 234.181340][ T5222] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 234.195704][ T5271] usb 5-1: USB disconnect, device number 10 [ 234.202367][ T5222] usb 1-1: USB disconnect, device number 12 [ 234.216829][ T5271] usblp0: removed [ 235.039644][ T944] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 235.046058][ T944] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 235.064532][ T944] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 235.084561][ T944] usb 3-1: USB disconnect, device number 18 [ 235.265746][ T7468] tipc: Started in network mode [ 235.292258][ T7468] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 235.306115][ T7468] tipc: Enabling of bearer rejected, failed to enable media [ 235.949496][ T5222] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 236.184728][ T47] usb 4-1: USB disconnect, device number 11 [ 236.763993][ T7494] xt_TPROXY: Can be used only with -p tcp or -p udp [ 236.791889][ T5271] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 236.939311][ T5222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.981563][ T5222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.020082][ T5222] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 237.066532][ T5222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.066927][ T944] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 237.120725][ T5222] usb 2-1: config 0 descriptor?? [ 237.281062][ T5271] usb 3-1: Using ep0 maxpacket: 32 [ 237.290997][ T944] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 237.308509][ T5271] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 127 [ 237.319129][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.344810][ T944] usb 1-1: config 0 descriptor?? [ 237.353813][ T944] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 237.369696][ T5271] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.406774][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.427742][ T5271] usb 3-1: Product: syz [ 237.438519][ T5271] usb 3-1: Manufacturer: syz [ 237.443227][ T5271] usb 3-1: SerialNumber: syz [ 237.472047][ T7490] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 237.647493][ T5222] steelseries 0003:1038:12B6.000C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 237.744716][ T5271] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.819275][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'. [ 238.006453][ T5222] usb 3-1: USB disconnect, device number 19 [ 238.010718][ T944] gp8psk: usb in 146 operation failed. [ 238.017558][ T5222] usblp0: removed [ 238.029891][ T944] gp8psk: failed to get FW version [ 238.048263][ T944] gp8psk: usb in 149 operation failed. [ 238.055591][ T944] gp8psk: failed to get FPGA version [ 238.073143][ T944] gp8psk: usb in 138 operation failed. [ 238.090359][ T944] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-22) [ 238.109911][ T944] dvb_usb_gp8psk 1-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 238.140188][ T47] usb 2-1: USB disconnect, device number 10 [ 238.141330][ T944] usb 1-1: USB disconnect, device number 13 [ 238.496366][ T7497] netlink: 'syz.3.762': attribute type 4 has an invalid length. [ 240.008425][ T5271] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 240.149037][ T5222] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 240.240438][ T5271] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 240.299483][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.359023][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.371813][ T5222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.405529][ T5271] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 240.406617][ T5222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.449035][ T5222] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 240.465783][ T5271] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 240.475994][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.493701][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.507033][ T5222] usb 1-1: config 0 descriptor?? [ 240.545736][ T5271] usb 2-1: config 0 descriptor?? [ 240.985972][ T5271] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x0 [ 241.037215][ T5271] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x0 [ 241.079578][ T5271] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x0 [ 241.114460][ T5271] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x0 [ 241.153309][ T5222] usb 1-1: language id specifier not provided by device, defaulting to English [ 241.170479][ T5271] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x0 [ 241.184649][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.198644][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.250108][ T5271] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x0 [ 241.270527][ T5271] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x0 [ 241.528604][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 241.536748][ T5271] thrustmaster 0003:044F:B653.000E: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.1-1/input0 [ 242.386683][ T5222] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input17 [ 242.404549][ T5271] thrustmaster 0003:044F:B653.000E: no inputs found [ 242.412076][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 242.426191][ T5222] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input18 [ 242.432300][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 127 [ 242.458677][ T5222] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input19 [ 242.523433][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.527562][ T5222] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input20 [ 242.575544][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.575890][ T5222] uclogic 0003:256C:006D.000D: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 242.616871][ T5222] usb 1-1: USB disconnect, device number 14 [ 242.637324][ T9] usb 5-1: Product: syz [ 242.652515][ T9] usb 5-1: Manufacturer: syz [ 242.682156][ T9] usb 5-1: SerialNumber: syz [ 242.762734][ T7554] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 243.106282][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 243.360102][ T9] usb 5-1: USB disconnect, device number 11 [ 243.529590][ T9] usblp0: removed [ 243.535409][ T5271] usb 2-1: USB disconnect, device number 11 [ 243.795251][ T7575] netlink: 44306 bytes leftover after parsing attributes in process `syz.3.786'. [ 245.578933][ T47] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 245.824645][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.884848][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.899160][ T47] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.988822][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.006532][ T47] usb 5-1: config 0 descriptor?? [ 246.669583][ T47] usb 5-1: language id specifier not provided by device, defaulting to English [ 246.823986][ T5273] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 247.019664][ T5273] usb 1-1: Using ep0 maxpacket: 32 [ 247.049008][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 247.491834][ T7622] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.037496][ T47] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000F/input/input21 [ 248.057801][ T5273] usb 1-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43 [ 248.068446][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.078477][ T5273] usb 1-1: Product: syz [ 248.082717][ T5273] usb 1-1: Manufacturer: syz [ 248.087452][ T5273] usb 1-1: SerialNumber: syz [ 248.096432][ T47] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000F/input/input22 [ 248.122134][ T5273] usb 1-1: config 0 descriptor?? [ 248.134124][ T47] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000F/input/input23 [ 248.175843][ T47] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000F/input/input24 [ 248.196869][ T47] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 248.213693][ T47] usb 5-1: USB disconnect, device number 12 [ 248.222021][ T5227] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 248.231086][ T5271] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 248.302871][ T7632] netlink: 64 bytes leftover after parsing attributes in process `syz.1.803'. [ 248.344056][ T5273] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 248.450725][ T5273] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 248.477027][ T5273] dib0700: firmware download failed at 7 with -22 [ 248.515923][ T5273] usb 1-1: USB disconnect, device number 15 [ 248.538279][ T5271] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 248.588038][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.671100][ T5271] usb-storage 4-1:32.0: USB Mass Storage device detected [ 248.715884][ T5271] usb-storage 4-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 249.088827][ T7639] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 249.095820][ T7639] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 249.146582][ T9] usb 4-1: USB disconnect, device number 12 [ 249.184905][ T7639] vhci_hcd vhci_hcd.0: Device attached [ 249.247549][ T7640] vhci_hcd: connection closed [ 249.261692][ T12] vhci_hcd: stop threads [ 249.321424][ T12] vhci_hcd: release socket [ 249.346332][ T12] vhci_hcd: disconnect device [ 249.508347][ T5273] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 249.719052][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 249.731249][ T5273] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 249.750014][ T5273] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 249.766569][ T5273] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 249.778699][ T5273] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 249.810155][ T5273] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 249.842896][ T5273] usb 1-1: config 0 has no interface number 0 [ 249.880354][ T5273] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 249.918487][ T5273] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 249.937783][ T5273] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 249.968858][ T5273] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.003554][ T5273] usb 1-1: config 0 interface 125 has no altsetting 0 [ 250.031635][ T5273] usb 1-1: config 0 interface 125 has no altsetting 2 [ 250.055896][ T5273] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 250.068724][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.093123][ T5273] usb 1-1: Product: syz [ 250.117196][ T5273] usb 1-1: Manufacturer: syz [ 250.129940][ T5273] usb 1-1: SerialNumber: syz [ 250.152466][ T5273] usb 1-1: config 0 descriptor?? [ 250.181031][ T5273] usb 1-1: selecting invalid altsetting 2 [ 251.318259][ T5273] get_1284_register timeout [ 251.348848][ C1] usb 1-1: async_complete: urb error -104 [ 251.354857][ C1] usb 1-1: async_complete: urb error -104 [ 251.360676][ C1] usb 1-1: async_complete: urb error -104 [ 251.366485][ C1] usb 1-1: async_complete: urb error -104 [ 251.468545][ T5273] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 251.831949][ T5273] usb 1-1: USB disconnect, device number 16 [ 253.561916][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 254.125939][ T7703] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.568518][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 254.580410][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.613517][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.638317][ T7709] netlink: 25 bytes leftover after parsing attributes in process `syz.0.824'. [ 254.647264][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 254.647299][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.671439][ T25] usb 5-1: config 0 descriptor?? [ 254.715000][ T7712] netlink: 64 bytes leftover after parsing attributes in process `syz.3.826'. [ 254.755020][ T7709] gretap0: entered promiscuous mode [ 255.098235][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 255.361023][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.412732][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.413067][ T25] savu 0003:1E7D:2D5A.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 255.427066][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.446293][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.469271][ T9] usb 2-1: config 0 descriptor?? [ 255.508729][ T25] usb 5-1: USB disconnect, device number 13 [ 255.905829][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 255.919479][ T9] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 255.937694][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.954453][ T9] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 256.455440][ T25] usb 2-1: USB disconnect, device number 12 [ 256.455753][ C0] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -19 [ 257.680370][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 257.901409][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 257.929966][ T25] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 257.951392][ T25] usb 5-1: config 179 has no interface number 0 [ 257.998522][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 258.028253][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 258.080380][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 258.113451][ T25] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 258.188241][ T25] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 258.188559][ T7767] netlink: 68 bytes leftover after parsing attributes in process `syz.3.843'. [ 258.209202][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 258.223485][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.282743][ T7758] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 258.408516][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 258.416833][ T9] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 258.450687][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.483672][ T9] usb 2-1: config 0 descriptor?? [ 258.617237][ T25] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input25 [ 258.744838][ T9] usb 2-1: USB disconnect, device number 13 [ 258.785848][ T5273] usb 5-1: USB disconnect, device number 14 [ 258.785919][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 258.785966][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 258.842660][ T5273] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 258.870655][ T7782] netlink: 68 bytes leftover after parsing attributes in process `syz.0.848'. [ 258.889886][ T7782] netlink: 48 bytes leftover after parsing attributes in process `syz.0.848'. [ 260.049556][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 260.297598][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 260.467883][ T5273] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 260.529813][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.545318][ T9] usb 2-1: config 0 descriptor?? [ 260.868212][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 260.890163][ T5273] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 260.899469][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.918215][ T5273] usb 1-1: Product: syz [ 260.922435][ T5273] usb 1-1: Manufacturer: syz [ 260.927207][ T5273] usb 1-1: SerialNumber: syz [ 260.951400][ T5273] r8152-cfgselector 1-1: Unknown version 0x0000 [ 260.957814][ T5273] r8152-cfgselector 1-1: config 0 descriptor?? [ 261.831799][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 261.852503][ T9] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 261.863693][ T5273] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 261.913562][ T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 262.075195][ T5222] usb 2-1: USB disconnect, device number 14 [ 262.288295][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 262.489992][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.508314][ T5271] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 262.529465][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.548252][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 262.568190][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.600146][ T9] usb 4-1: config 0 descriptor?? [ 262.738275][ T5271] usb 5-1: Using ep0 maxpacket: 16 [ 262.746148][ T5271] usb 5-1: config 0 has no interfaces? [ 262.754100][ T5271] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 262.796927][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.818475][ T5271] usb 5-1: config 0 descriptor?? [ 263.086714][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'. [ 263.286140][ T8] usb 5-1: USB disconnect, device number 15 [ 263.295249][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 263.458535][ T5222] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 263.549938][ T5271] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 263.704852][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0012/input/input26 [ 263.777086][ T9] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0012/input/input27 [ 263.792489][ T5271] usb 2-1: Using ep0 maxpacket: 16 [ 263.851670][ T5271] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 263.918205][ T5222] usb 1-1: Using ep0 maxpacket: 16 [ 263.920186][ T5271] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.933250][ T5222] usb 1-1: config index 0 descriptor too short (expected 65138, got 92) [ 263.948270][ T5222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.965617][ T5222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.221025][ T5222] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.652938][ T5222] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 264.748228][ T5222] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 264.809755][ T5222] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 264.855822][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 264.864284][ T5271] usb 2-1: SerialNumber: syz [ 264.874135][ T5271] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 264.888625][ T5271] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 264.889536][ T5222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.895087][ T5271] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 264.936704][ T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0012/input/input28 [ 264.969770][ T5222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.977831][ T5222] usb 1-1: Product: syz [ 264.991184][ T5222] usb 1-1: Manufacturer: syz [ 265.008234][ T5222] usb 1-1: SerialNumber: syz [ 265.030898][ T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0012/input/input29 [ 265.072240][ T9] uclogic 0003:256C:006D.0012: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 265.145358][ T9] usb 4-1: USB disconnect, device number 13 [ 265.253270][ T8] usb 2-1: USB disconnect, device number 15 [ 265.268381][ T5222] cdc_ncm 1-1:1.0: bind() failure [ 265.325081][ T5222] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 265.378691][ T5222] cdc_ncm 1-1:1.1: bind() failure [ 265.393500][ T5222] usb 1-1: USB disconnect, device number 18 [ 266.779063][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 266.968486][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 266.998172][ T8] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 267.028186][ T8] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.061438][ T8] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.096021][ T8] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.123823][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 267.138592][ T941] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 267.152492][ T8] usb 5-1: config 0 has no interface number 0 [ 267.186202][ T8] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 267.258183][ T8] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 267.286380][ T8] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.338402][ T5273] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 267.340129][ T8] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.348267][ T941] usb 3-1: Using ep0 maxpacket: 16 [ 267.397891][ T941] usb 3-1: config 0 has no interfaces? [ 267.405653][ T8] usb 5-1: config 0 interface 125 has no altsetting 0 [ 267.416461][ T941] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 267.428325][ T8] usb 5-1: config 0 interface 125 has no altsetting 2 [ 267.446151][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.460407][ T8] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 267.480753][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.487471][ T941] usb 3-1: config 0 descriptor?? [ 267.498245][ T8] usb 5-1: Product: syz [ 267.512696][ T8] usb 5-1: Manufacturer: syz [ 267.517352][ T8] usb 5-1: SerialNumber: syz [ 267.550702][ T8] usb 5-1: config 0 descriptor?? [ 267.560372][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.574818][ T8] usb 5-1: selecting invalid altsetting 2 [ 267.603032][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.643376][ T5273] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 267.678184][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.740249][ T5273] usb 1-1: config 0 descriptor?? [ 268.133712][ T941] usb 3-1: USB disconnect, device number 20 [ 268.317170][ T7902] netlink: 'syz.1.891': attribute type 21 has an invalid length. [ 268.360170][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 268.377811][ T5273] usb 1-1: language id specifier not provided by device, defaulting to English [ 268.610802][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 268.654971][ T8] get_1284_register timeout [ 268.675337][ T8] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 268.675429][ C0] usb 5-1: async_complete: urb error -104 [ 268.675589][ C0] usb 5-1: async_complete: urb error -104 [ 268.675726][ C0] usb 5-1: async_complete: urb error -104 [ 268.675861][ C0] usb 5-1: async_complete: urb error -104 [ 268.813795][ T5273] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0013/input/input30 [ 268.828635][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 268.837591][ T9] usb 4-1: config index 0 descriptor too short (expected 65409, got 129) [ 268.848626][ T9] usb 4-1: config 1 has an invalid interface number: 32 but max is 1 [ 268.883641][ T9] usb 4-1: config 1 has an invalid interface number: 2 but max is 1 [ 268.905262][ T9] usb 4-1: config 1 has an invalid interface number: 2 but max is 1 [ 268.923409][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.932481][ T5273] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0013/input/input31 [ 268.937477][ T9] usb 4-1: config 1 has no interface number 0 [ 268.996392][ T5273] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0013/input/input32 [ 268.999850][ T9] usb 4-1: config 1 has no interface number 1 [ 269.028254][ T9] usb 4-1: config 1 interface 32 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 269.087289][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.096686][ T5273] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0013/input/input33 [ 269.135930][ T8] usb 5-1: USB disconnect, device number 16 [ 269.164929][ T5273] uclogic 0003:256C:006D.0013: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 269.177539][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.200336][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.218415][ T9] usb 4-1: Product: syz [ 269.231052][ T5273] usb 1-1: USB disconnect, device number 19 [ 269.231804][ T9] usb 4-1: Manufacturer: syz [ 269.278164][ T9] usb 4-1: SerialNumber: syz [ 269.475641][ T29] audit: type=1326 audit(1722378331.391:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7904 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d5177299 code=0x7fc00000 [ 269.547200][ T9] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 269.621781][ T9] usb 4-1: USB disconnect, device number 14 [ 269.718677][ T25] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 269.948647][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 269.967706][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 270.019542][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.039013][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 270.047072][ T25] usb 3-1: SerialNumber: syz [ 270.091945][ T25] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 270.125948][ T25] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 270.148171][ T25] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 270.454883][ T9] usb 3-1: USB disconnect, device number 21 [ 271.606874][ T7939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 271.653610][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 271.685792][ T7939] x_tables: duplicate underflow at hook 1 [ 271.868482][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 272.092396][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.133689][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.167984][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.200761][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.229036][ T9] usb 2-1: SerialNumber: syz [ 272.282639][ T9] usb 2-1: bad CDC descriptors [ 272.308342][ T5271] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 272.432382][ T7957] netlink: 'syz.3.912': attribute type 21 has an invalid length. [ 272.447797][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 272.510357][ T5271] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 272.591484][ T5271] usb 3-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=ea.05 [ 272.654656][ T5223] Bluetooth: hci5: command 0x0406 tx timeout [ 272.714626][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.889287][ T5271] usb 3-1: config 0 descriptor?? [ 273.276392][ T5273] usb 2-1: USB disconnect, device number 16 [ 273.316755][ T5222] usb 3-1: USB disconnect, device number 22 [ 273.948427][ T941] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 274.391811][ C1] eth0: bad gso: type: 1, size: 1408 [ 274.503294][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 274.521388][ T941] usb 4-1: config 0 has no interfaces? [ 274.527502][ T941] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 274.539429][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.560002][ T941] usb 4-1: config 0 descriptor?? [ 274.634102][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 275.069984][ T7994] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 275.335585][ T941] usb 4-1: USB disconnect, device number 15 [ 275.763276][ T29] audit: type=1326 audit(1722378337.671:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0d5177299 code=0x0 [ 277.063460][ T8022] netlink: 203452 bytes leftover after parsing attributes in process `syz.1.935'. [ 277.138299][ T8022] netlink: 'syz.1.935': attribute type 2 has an invalid length. [ 277.620179][ T5273] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 277.939100][ T5273] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 277.969092][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.020621][ T5273] usb 5-1: config 0 descriptor?? [ 279.940927][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 279.968156][ T5273] [drm:udl_init] *ERROR* Selecting channel failed [ 280.030055][ T5273] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 280.056333][ T5273] [drm] Initialized udl on minor 2 [ 280.100238][ T5273] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 280.139283][ T5273] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 280.177250][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 280.196863][ T5273] usb 5-1: USB disconnect, device number 17 [ 280.212762][ T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 281.350745][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 281.509479][ T941] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 281.618232][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 281.680894][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 281.718185][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 281.730184][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.772854][ T25] usb 4-1: Product: syz [ 281.777136][ T25] usb 4-1: Manufacturer: syz [ 281.788515][ T941] usb 1-1: config index 0 descriptor too short (expected 65409, got 129) [ 281.797041][ T941] usb 1-1: config 1 has an invalid interface number: 32 but max is 1 [ 281.817418][ T25] usb 4-1: SerialNumber: syz [ 281.838505][ T941] usb 1-1: config 1 has an invalid interface number: 2 but max is 1 [ 281.868043][ T941] usb 1-1: config 1 has an invalid interface number: 2 but max is 1 [ 281.876460][ T941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.918639][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 281.924958][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 281.941591][ T941] usb 1-1: config 1 has no interface number 0 [ 281.953783][ T941] usb 1-1: config 1 has no interface number 1 [ 281.968418][ T941] usb 1-1: config 1 interface 32 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 281.998250][ T941] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.053863][ T941] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.081358][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.124099][ T941] usb 1-1: Product: syz [ 282.146072][ T941] usb 1-1: Manufacturer: syz [ 282.161747][ T941] usb 1-1: SerialNumber: syz [ 282.422460][ T941] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 282.466470][ T941] usb 1-1: USB disconnect, device number 20 [ 282.893728][ T9] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 283.158301][ T5267] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 283.380736][ T5267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.418388][ T5267] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 283.463185][ T5267] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.482068][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.510457][ T5267] usb 5-1: SerialNumber: syz [ 283.529417][ T5267] usb 5-1: bad CDC descriptors [ 284.655748][ T941] usb 5-1: USB disconnect, device number 18 [ 284.702483][ T8130] mmap: syz.0.965 (8130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 286.569767][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 286.597323][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 286.609474][ T5227] Bluetooth: hci6: unexpected subevent 0x01 length: 78 > 18 [ 287.575499][ T8194] netlink: 'syz.2.983': attribute type 3 has an invalid length. [ 287.598708][ T8194] netlink: 'syz.2.983': attribute type 4 has an invalid length. [ 287.606399][ T8194] netlink: 'syz.2.983': attribute type 7 has an invalid length. [ 287.669110][ T8194] netlink: 'syz.2.983': attribute type 8 has an invalid length. [ 287.694353][ T8194] netlink: 'syz.2.983': attribute type 7 has an invalid length. [ 287.714767][ T8194] netlink: 198180 bytes leftover after parsing attributes in process `syz.2.983'. [ 288.460148][ T5223] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 288.498643][ T8219] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 288.695472][ T5223] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 288.748500][ T5267] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 288.978189][ T5267] usb 1-1: Using ep0 maxpacket: 32 [ 289.020471][ T5267] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.097502][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 289.124885][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 289.146776][ T5267] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 289.168071][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.237461][ T5267] usb 1-1: config 0 descriptor?? [ 289.250412][ T8214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.281423][ T5267] hub 1-1:0.0: USB hub found [ 289.948737][ T5267] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 290.512355][ T8239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.699956][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.719846][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.815577][ T5267] usbhid 1-1:0.0: can't add hid device: -32 [ 291.864546][ T5267] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 291.999617][ T5267] usb 1-1: USB disconnect, device number 21 [ 300.218431][ T5273] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 300.471832][ T5227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.482926][ T5227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.492286][ T5227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.493404][ T5273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.626997][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 300.637055][ T5227] Bluetooth: hci3: link tx timeout [ 300.642927][ T5227] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 300.726189][ T5226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.743538][ T5226] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 300.754701][ T5226] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.919021][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 301.173539][ T5273] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 301.222533][ T5226] Bluetooth: hci3: link tx timeout [ 301.227782][ T5226] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 301.276646][ T5273] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.319798][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 301.337564][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 301.343279][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 301.346767][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.365685][ T9] usb 3-1: Product: syz [ 301.370064][ T9] usb 3-1: Manufacturer: syz [ 301.374699][ T9] usb 3-1: SerialNumber: syz [ 301.386932][ T9] usb 3-1: config 0 descriptor?? [ 301.396457][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.408191][ T5273] usb 4-1: SerialNumber: syz [ 301.428944][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 301.440418][ T5273] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 301.456826][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.479455][ T5273] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 301.492786][ T5273] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 301.709318][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.885193][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.906307][ T5302] usb 4-1: USB disconnect, device number 17 [ 302.050756][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.068943][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (174) [ 302.372116][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 302.382367][ T9] em28xx 3-1:0.0: board has no eeprom [ 302.488854][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.497075][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 302.507709][ T5271] em28xx 3-1:0.0: Binding DVB extension [ 302.526942][ T9] usb 3-1: USB disconnect, device number 23 [ 302.554591][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 302.640105][ T5271] em28xx 3-1:0.0: Registering input extension [ 302.669552][ T9] em28xx 3-1:0.0: Closing input extension [ 302.721675][ T35] bridge_slave_1: left allmulticast mode [ 302.741786][ T5226] Bluetooth: hci3: command 0x0406 tx timeout [ 302.760551][ T9] em28xx 3-1:0.0: Freeing device [ 302.768311][ T35] bridge_slave_1: left promiscuous mode [ 302.776389][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.817216][ T5226] Bluetooth: hci5: unexpected subevent 0x01 length: 78 > 18 [ 302.898795][ T5227] Bluetooth: hci7: command tx timeout [ 302.909650][ T35] bridge_slave_0: left allmulticast mode [ 302.915826][ T35] bridge_slave_0: left promiscuous mode [ 302.961448][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.653867][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 304.131359][ T9] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 304.144560][ T9] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 304.155004][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.165072][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 304.175277][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.183738][ T9] usb 3-1: Product: syz [ 304.187952][ T9] usb 3-1: Manufacturer: syz [ 304.192724][ T9] usb 3-1: SerialNumber: syz [ 304.238372][ T9] usb 3-1: config 0 descriptor?? [ 304.584685][ T9] usbtest 3-1:0.0: Linux user mode ISO test driver [ 304.623944][ T9] usbtest 3-1:0.0: high-speed {control iso-out} tests (+alt) [ 304.915940][ T5273] usb 3-1: USB disconnect, device number 24 [ 304.992119][ T5227] Bluetooth: hci7: command tx timeout [ 305.278683][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.304005][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.325480][ T35] bond0 (unregistering): Released all slaves [ 305.371607][ T8293] chnl_net:caif_netlink_parms(): no params data found [ 306.558878][ T35] tipc: Left network mode [ 307.018502][ T5271] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 307.048379][ T5227] Bluetooth: hci7: command tx timeout [ 307.066645][ T5222] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 307.088239][ T5267] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 307.157107][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.178624][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.213657][ T8293] bridge_slave_0: entered allmulticast mode [ 307.243028][ T8293] bridge_slave_0: entered promiscuous mode [ 307.258296][ T5222] usb 2-1: Using ep0 maxpacket: 16 [ 307.260523][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.281109][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.299807][ T5222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 307.321429][ T5271] usb 4-1: config 0 has no interfaces? [ 307.322668][ T5222] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 307.347070][ T5222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.347092][ T5271] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 307.365322][ T8293] bridge_slave_1: entered allmulticast mode [ 307.375012][ T5267] usb 1-1: Using ep0 maxpacket: 32 [ 307.381913][ T5222] usb 2-1: Product: syz [ 307.385373][ T8293] bridge_slave_1: entered promiscuous mode [ 307.393061][ T5222] usb 2-1: Manufacturer: syz [ 307.401279][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.408321][ T5222] usb 2-1: SerialNumber: syz [ 307.417769][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.434966][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.453239][ T5222] usb 2-1: config 0 descriptor?? [ 307.474404][ T5222] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 307.475626][ T5271] usb 4-1: config 0 descriptor?? [ 307.490019][ T5222] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 307.501822][ T5267] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 307.537951][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.580179][ T5267] usb 1-1: config 0 descriptor?? [ 307.581685][ T5227] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 307.597868][ T5267] hub 1-1:0.0: USB hub found [ 307.807053][ T5267] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 307.845056][ T8293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.918463][ T35] hsr_slave_0: left promiscuous mode [ 307.942624][ T35] hsr_slave_1: left promiscuous mode [ 307.963150][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.984172][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.994608][ T8367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.023211][ T5267] usbhid 1-1:0.0: can't add hid device: -71 [ 308.032042][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.038353][ T5267] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 308.048423][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.048986][ T8367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.108422][ T5222] em28xx 2-1:0.0: unknown em28xx chip ID (174) [ 308.127174][ T5267] usb 1-1: USB disconnect, device number 22 [ 308.155796][ T35] veth1_macvtap: left promiscuous mode [ 308.169926][ T35] veth0_macvtap: left promiscuous mode [ 308.175882][ T35] veth1_vlan: left promiscuous mode [ 308.188656][ T35] veth0_vlan: left promiscuous mode [ 308.395971][ T5222] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 308.416784][ T5222] em28xx 2-1:0.0: board has no eeprom [ 308.543491][ T5222] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 308.554516][ T8] usb 4-1: USB disconnect, device number 18 [ 308.562511][ T5222] em28xx 2-1:0.0: dvb set to bulk mode. [ 308.581840][ T25] em28xx 2-1:0.0: Binding DVB extension [ 308.610084][ T5222] usb 2-1: USB disconnect, device number 17 [ 308.636875][ T5222] em28xx 2-1:0.0: Disconnecting em28xx [ 308.725785][ T25] em28xx 2-1:0.0: Registering input extension [ 308.763550][ T5222] em28xx 2-1:0.0: Closing input extension [ 308.838461][ T5222] em28xx 2-1:0.0: Freeing device [ 309.129918][ T5227] Bluetooth: hci7: command tx timeout [ 309.511587][ T8394] autofs: Bad value for 'fd' [ 309.671702][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.689885][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.697446][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.734715][ T5222] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 309.738276][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.767998][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.798298][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.820978][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.828571][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.845736][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.853850][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.902469][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.931829][ T5222] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 309.938838][ T8] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 309.949491][ T5222] usb 4-1: config 0 has no interface number 0 [ 309.949693][ T5222] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.949726][ T5222] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.952838][ T5222] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 310.026655][ T5222] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 310.059939][ T5222] usb 4-1: Manufacturer: syz [ 310.087528][ T5222] usb 4-1: config 0 descriptor?? [ 310.225741][ T35] team0 (unregistering): Port device team_slave_1 removed [ 310.340236][ T35] team0 (unregistering): Port device team_slave_0 removed [ 310.585050][ T5222] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0015/input/input36 [ 310.622230][ T5222] sony 0003:054C:03D5.0015: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 311.231051][ T8293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.313940][ T8] usb 4-1: USB disconnect, device number 19 [ 311.360217][ T8293] team0: Port device team_slave_0 added [ 311.409798][ T8293] team0: Port device team_slave_1 added [ 311.552464][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.561963][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.648928][ T8293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.678958][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.686035][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.721654][ T8411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 311.728292][ T8411] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 311.736534][ T8411] vhci_hcd vhci_hcd.0: Device attached [ 311.740342][ T8293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.789801][ T5302] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 311.954653][ T8293] hsr_slave_0: entered promiscuous mode [ 311.967414][ T8293] hsr_slave_1: entered promiscuous mode [ 311.989767][ T8293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.999010][ T5302] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 312.007818][ T5302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.024739][ T8293] Cannot create hsr debugfs directory [ 312.066722][ T5302] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 312.089145][ T5273] usb 10-1: SetAddress Request (2) to port 0 [ 312.094308][ T5302] usb 3-1: config 1 has no interface number 1 [ 312.109718][ T5302] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 312.141984][ T5273] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 312.148163][ T5302] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x4A, changing to 0xA [ 312.199803][ T5302] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 312.304050][ T5302] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.323568][ T5302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.341799][ T5302] usb 3-1: Product: syz [ 312.350506][ T5302] usb 3-1: Manufacturer: syz [ 312.357601][ T5302] usb 3-1: SerialNumber: syz [ 312.379771][ T8412] vhci_hcd: connection reset by peer [ 312.401086][ T128] vhci_hcd: stop threads [ 312.405395][ T128] vhci_hcd: release socket [ 312.444607][ T128] vhci_hcd: disconnect device [ 312.579366][ T5302] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 312.689260][ T5227] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 312.746456][ T5302] usb 3-1: USB disconnect, device number 25 [ 312.888783][ T5227] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 312.915313][ T5226] Bluetooth: hci6: sending frame failed (-49) [ 312.923328][ T5227] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 313.091855][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.110401][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.126416][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.176097][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.232770][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.264075][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.309400][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.331829][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.350251][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.357932][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.395448][ T8] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 313.427719][ T8] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 314.007199][ T8293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.050480][ T8293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.314060][ T8445] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1060'. [ 314.348784][ T8293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.396649][ T8293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.528983][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.625956][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.696553][ T5302] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.703802][ T5302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.918113][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.925320][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.327048][ T5271] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 317.447315][ T8473] QAT: Device 0 not found [ 317.457676][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.697821][ T5271] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 317.870725][ T5271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.948350][ T5271] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 318.025462][ T5273] usb 10-1: device descriptor read/8, error -110 [ 318.035009][ T5271] usb 2-1: config 1 has no interface number 1 [ 318.082407][ T5271] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 318.119276][ T5271] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x4A, changing to 0xA [ 318.151425][ T5271] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 318.182875][ T5271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.209155][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.227527][ T5271] usb 2-1: Product: syz [ 318.231890][ T5271] usb 2-1: Manufacturer: syz [ 318.236486][ T5271] usb 2-1: SerialNumber: syz [ 318.355824][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.477477][ T5271] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 318.488546][ T944] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 318.569189][ T5271] usb 2-1: USB disconnect, device number 18 [ 318.598977][ T5273] usb usb10-port1: attempt power cycle [ 318.715591][ T944] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 318.735330][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.771466][ T944] usb 1-1: config 0 descriptor?? [ 318.905037][ T8293] veth0_vlan: entered promiscuous mode [ 318.947210][ T8293] veth1_vlan: entered promiscuous mode [ 318.989917][ T944] ath6kl: Failed to submit usb control message: -71 [ 319.003756][ T944] ath6kl: unable to send the bmi data to the device: -71 [ 319.010948][ T944] ath6kl: Unable to send get target info: -71 [ 319.019371][ T944] ath6kl: Failed to init ath6kl core: -71 [ 319.039072][ T944] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 319.105949][ T944] usb 1-1: USB disconnect, device number 23 [ 319.174339][ T8293] veth0_macvtap: entered promiscuous mode [ 319.351673][ T8293] veth1_macvtap: entered promiscuous mode [ 319.423993][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.455068][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.484211][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.509811][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.539841][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.553299][ T5273] usb usb10-port1: unable to enumerate USB device [ 319.578328][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.611913][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.643512][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.667911][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.697709][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.740467][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.772374][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.805019][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.826754][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.870982][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.898489][ T5267] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 319.902765][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.966528][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.999494][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.019286][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.048208][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.078126][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.099835][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.110356][ T5267] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 320.118129][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.134678][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.142254][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.162924][ T5267] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 320.165285][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.183905][ T5267] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 320.204250][ T5267] usb 2-1: Manufacturer: syz [ 320.212268][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.216790][ T5267] usb 2-1: config 0 descriptor?? [ 320.233296][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.259639][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.299009][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.340290][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.358264][ T5267] rc_core: IR keymap rc-hauppauge not found [ 320.364239][ T5267] Registered IR keymap rc-empty [ 320.382915][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 320.403065][ T5267] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 320.424117][ T8293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.435586][ T5267] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 320.457014][ T8293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.471954][ T8293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.488010][ T8293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.623566][ T5267] usb 2-1: USB disconnect, device number 19 [ 320.638512][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 320.688193][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.712740][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.748352][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 320.767654][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.801405][ T25] usb 4-1: config 0 descriptor?? [ 320.841148][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.858829][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.936969][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.950053][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.983818][ T8515] netlink: 'syz.0.1077': attribute type 5 has an invalid length. [ 321.369958][ T25] playstation 0003:054C:05C4.0017: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 322.340341][ T25] playstation 0003:054C:05C4.0017: Failed to retrieve feature with reportID 18: -71 [ 322.350392][ T25] playstation 0003:054C:05C4.0017: Failed to retrieve DualShock4 pairing info: -71 [ 322.361692][ T25] playstation 0003:054C:05C4.0017: Failed to get MAC address from DualShock4 [ 322.370797][ T25] playstation 0003:054C:05C4.0017: Failed to create dualshock4. [ 322.463959][ T25] playstation 0003:054C:05C4.0017: probe with driver playstation failed with error -71 [ 322.725308][ T25] usb 4-1: USB disconnect, device number 20 [ 322.898269][ T8534] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1082'. [ 323.068504][ T941] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 323.391858][ T941] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.580105][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 323.816075][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.936440][ T941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.978319][ T941] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.007937][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.041344][ T941] usb 5-1: config 0 descriptor?? [ 324.065806][ T8530] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 324.138782][ T5273] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 324.340396][ T5273] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 324.349561][ T5273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.376086][ T5273] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 324.424268][ T5273] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.452859][ T5273] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.462311][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.474912][ T5273] usb 1-1: Product: syz [ 324.479766][ T5273] usb 1-1: Manufacturer: syz [ 324.506264][ T5273] cdc_wdm 1-1:1.0: skipping garbage [ 324.524729][ T941] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd [ 324.536838][ T5273] cdc_wdm 1-1:1.0: skipping garbage [ 324.555636][ T5273] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 324.571694][ T941] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 324.582317][ T5273] cdc_wdm 1-1:1.0: Unknown control protocol [ 324.594597][ T941] plantronics 0003:047F:FFFF.0018: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 324.658353][ T5271] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 324.744125][ T8] usb 5-1: USB disconnect, device number 19 [ 324.858422][ T5271] usb 2-1: Using ep0 maxpacket: 16 [ 324.864970][ T8561] program syz.3.1093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.889807][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.904322][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.935411][ T5271] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.961098][ T5271] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 324.976723][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.999865][ T5271] usb 2-1: config 0 descriptor?? [ 326.390977][ T5271] wacom 0003:056A:0022.0019: unbalanced collection at end of report description [ 326.405421][ T5271] wacom 0003:056A:0022.0019: parse failed [ 326.419049][ T5271] wacom 0003:056A:0022.0019: probe with driver wacom failed with error -22 [ 326.506962][ T5271] usb 2-1: USB disconnect, device number 20 [ 326.516471][ T5273] usb 1-1: USB disconnect, device number 24 [ 327.038226][ T5273] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 327.127109][ T8594] program syz.4.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.131295][ T5273] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 328.148130][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.173169][ T5273] usb 1-1: config 0 descriptor?? [ 328.231174][ T5273] cp210x 1-1:0.0: cp210x converter detected [ 328.528406][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 328.639660][ T5273] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 328.668384][ T5273] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 328.698366][ T5273] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 328.731456][ T5273] usb 1-1: cp210x converter now attached to ttyUSB0 [ 328.745028][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.784073][ T5273] usb 1-1: USB disconnect, device number 25 [ 328.800442][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.822611][ T5273] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 328.828168][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 328.868829][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.878606][ T5273] cp210x 1-1:0.0: device disconnected [ 328.912754][ T8] usb 2-1: config 0 descriptor?? [ 329.343231][ T8] logitech-djreceiver 0003:046D:C534.001A: unknown main item tag 0x0 [ 330.345086][ T8] usb 2-1: USB disconnect, device number 21 [ 331.883680][ T8640] veth1_macvtap: left promiscuous mode [ 331.884284][ T8639] netlink: 'syz.1.1121': attribute type 3 has an invalid length. [ 331.889386][ T8640] macsec0: entered promiscuous mode [ 331.923739][ T8640] macsec0: entered allmulticast mode [ 331.933117][ T8639] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1121'. [ 331.992868][ T8643] veth1_macvtap: entered promiscuous mode [ 332.030059][ T8643] veth1_macvtap: entered allmulticast mode [ 332.052902][ T8643] macsec0: left promiscuous mode [ 332.072333][ T8643] macsec0: left allmulticast mode [ 332.091666][ T8643] veth1_macvtap: left allmulticast mode [ 332.250762][ T29] audit: type=1326 audit(1722378394.171:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8644 comm="syz.0.1124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9024577299 code=0x0 [ 332.615186][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 332.958017][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 333.104376][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.177033][ T8658] netlink: 273 bytes leftover after parsing attributes in process `syz.4.1129'. [ 333.259761][ T25] usb 2-1: config 0 descriptor?? [ 333.307820][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 333.321063][ T25] cp210x 2-1:0.0: cp210x converter detected [ 333.393750][ T8658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.655144][ T8658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.728840][ T5271] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 333.766556][ T25] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 333.785472][ T25] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 333.809331][ T25] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 333.817970][ T8670] usb usb8: usbfs: process 8670 (syz.2.1132) did not claim interface 0 before use [ 333.839993][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 333.860330][ T25] usb 2-1: USB disconnect, device number 22 [ 333.871667][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 333.917163][ T25] cp210x 2-1:0.0: device disconnected [ 333.926405][ T5271] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.977291][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 334.017348][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 334.058666][ T5271] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.077569][ T8674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1133'. [ 334.099020][ T8674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1133'. [ 334.108318][ T5271] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.139245][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.179320][ T5271] usb 1-1: config 0 descriptor?? [ 334.185320][ T8666] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 334.299668][ T8678] netlink: 'syz.3.1135': attribute type 3 has an invalid length. [ 334.307506][ T8678] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1135'. [ 334.378669][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'. [ 334.544262][ T8685] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 334.626487][ T5271] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 334.688038][ T5271] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 334.716657][ T5271] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 335.005474][ T25] usb 1-1: USB disconnect, device number 26 [ 335.194198][ T8700] netlink: 273 bytes leftover after parsing attributes in process `syz.2.1145'. [ 335.355780][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 335.516575][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1147'. [ 336.110671][ T5272] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 336.350530][ T5272] usb 3-1: Using ep0 maxpacket: 16 [ 336.372291][ T5272] usb 3-1: New USB device found, idVendor=f7d4, idProduct=bee3, bcdDevice=3d.f7 [ 336.402385][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.436353][ T5272] usb 3-1: Product: syz [ 336.468263][ T5272] usb 3-1: Manufacturer: syz [ 336.506491][ T5272] usb 3-1: SerialNumber: syz [ 336.526471][ T5227] Bluetooth: hci6: sending frame failed (-49) [ 336.535425][ T5226] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 336.548547][ T5272] usb 3-1: config 0 descriptor?? [ 336.568360][ T30] INFO: task syz.4.502:6742 blocked for more than 144 seconds. [ 336.576048][ T30] Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 336.579510][ T8726] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 336.598197][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.609283][ T5272] cdc_eem 3-1:0.0: probe with driver cdc_eem failed with error -22 [ 336.651346][ T30] task:syz.4.502 state:D stack:26992 pid:6742 tgid:6741 ppid:5224 flags:0x00000004 [ 336.697849][ T30] Call Trace: [ 336.713046][ T30] [ 336.779780][ T30] __schedule+0x17ae/0x4a10 [ 336.820448][ T30] ? __pfx___schedule+0x10/0x10 [ 336.830157][ T5272] usb 3-1: USB disconnect, device number 26 [ 336.855986][ T30] ? __pfx_lock_release+0x10/0x10 [ 336.886601][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 336.913230][ T30] ? schedule+0x90/0x320 [ 336.934192][ T30] schedule+0x14b/0x320 [ 336.955003][ T30] schedule_preempt_disabled+0x13/0x30 [ 336.976022][ T30] __ww_mutex_lock+0xec2/0x2790 [ 337.001268][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 337.028390][ T30] ? modeset_lock+0x2bf/0x650 [ 337.040469][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 337.054853][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 337.075434][ T30] ? __asan_memset+0x23/0x50 [ 337.091197][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 337.118651][ T30] ww_mutex_lock+0x40/0x1f0 [ 337.141275][ T30] ? modeset_lock+0x2b0/0x650 [ 337.164852][ T30] modeset_lock+0x2bf/0x650 [ 337.197323][ T30] drm_modeset_lock_all_ctx+0x12e/0x350 [ 337.229622][ T30] drm_mode_obj_get_properties_ioctl+0x22d/0x610 [ 337.253584][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 337.280147][ T30] ? drm_dev_enter+0x45/0x150 [ 337.301470][ T30] drm_ioctl_kernel+0x33a/0x440 [ 337.323870][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 337.367062][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 337.386479][ T30] ? __might_fault+0xc6/0x120 [ 337.409184][ T30] drm_ioctl+0x611/0xad0 [ 337.428194][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 337.455616][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 337.477911][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 337.502281][ T30] ? security_file_ioctl+0x87/0xb0 [ 337.536138][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 337.558797][ T30] __se_sys_ioctl+0xfc/0x170 [ 337.580216][ T30] do_syscall_64+0xf3/0x230 [ 337.613104][ T30] ? clear_bhb_loop+0x35/0x90 [ 337.636709][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.679905][ T30] RIP: 0033:0x7fb997b77299 [ 337.756680][ T30] RSP: 002b:00007fb998922048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.779444][ T30] RAX: ffffffffffffffda RBX: 00007fb997d05f80 RCX: 00007fb997b77299 [ 337.795311][ T30] RDX: 0000000020000dc0 RSI: 00000000c02064b9 RDI: 0000000000000003 [ 337.880384][ T30] RBP: 00007fb997be48e6 R08: 0000000000000000 R09: 0000000000000000 [ 337.905213][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.954232][ T30] R13: 000000000000000b R14: 00007fb997d05f80 R15: 00007ffe8016ddb8 [ 338.000561][ T30] [ 338.039398][ T30] [ 338.039398][ T30] Showing all locks held in the system: [ 338.047306][ T30] 1 lock held by khungtaskd/30: [ 338.094190][ T30] #0: ffffffff8e7377a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 338.141525][ T30] 3 locks held by kworker/u8:4/58: [ 338.163688][ T30] 2 locks held by kworker/u8:6/978: [ 338.182899][ T30] #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 338.212896][ T30] #1: ffff8880b9228948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 338.226285][ T30] 2 locks held by getty/4980: [ 338.238270][ T30] #0: ffff88802bbb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 338.256955][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 338.267309][ T30] 3 locks held by syz.3.423/6534: [ 338.272780][ T30] 2 locks held by syz.4.502/6742: [ 338.284584][ T30] #0: ffffc90003327b30 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_obj_get_properties_ioctl+0x1d3/0x610 [ 338.304862][ T30] #1: ffff888020920518 (crtc_ww_class_mutex){+.+.}-{3:3}, at: modeset_lock+0x2bf/0x650 [ 338.317367][ T30] 1 lock held by syz.4.1143/8701: [ 338.335042][ T30] #0: ffffffff8e73cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 338.359374][ T30] [ 338.362023][ T30] ============================================= [ 338.362023][ T30] [ 338.380092][ T30] NMI backtrace for cpu 0 [ 338.384495][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 338.395137][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 338.405320][ T30] Call Trace: [ 338.408632][ T30] [ 338.411608][ T30] dump_stack_lvl+0x241/0x360 [ 338.416374][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.421705][ T30] ? __pfx__printk+0x10/0x10 [ 338.426421][ T30] ? vprintk_emit+0x631/0x770 [ 338.431140][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 338.436220][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 338.441222][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 338.446736][ T30] ? _printk+0xd5/0x120 [ 338.450945][ T30] ? __pfx__printk+0x10/0x10 [ 338.455577][ T30] ? __wake_up_klogd+0xcc/0x110 [ 338.460476][ T30] ? __pfx__printk+0x10/0x10 [ 338.465110][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 338.470178][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 338.476201][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 338.482239][ T30] watchdog+0xfee/0x1030 [ 338.486716][ T30] ? watchdog+0x1ea/0x1030 [ 338.491890][ T30] ? __pfx_watchdog+0x10/0x10 [ 338.496637][ T30] kthread+0x2f0/0x390 [ 338.500832][ T30] ? __pfx_watchdog+0x10/0x10 [ 338.505560][ T30] ? __pfx_kthread+0x10/0x10 [ 338.510191][ T30] ret_from_fork+0x4b/0x80 [ 338.514657][ T30] ? __pfx_kthread+0x10/0x10 [ 338.519286][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.524119][ T30] [ 338.529741][ T30] Sending NMI from CPU 0 to CPUs 1: [ 338.536606][ C1] NMI backtrace for cpu 1 [ 338.536620][ C1] CPU: 1 UID: 0 PID: 8293 Comm: syz-executor Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 338.536642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 338.536652][ C1] RIP: 0010:kasan_check_range+0x5/0x290 [ 338.536680][ C1] Code: 8d e8 af 9b e3 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 [ 338.536702][ C1] RSP: 0018:ffffc900155af550 EFLAGS: 00000246 [ 338.536718][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff816fd1a0 [ 338.536731][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ff674e8 [ 338.536742][ C1] RBP: ffffc900155af690 R08: ffffffff8142a7f6 R09: 1ffffffff269d300 [ 338.536756][ C1] R10: dffffc0000000000 R11: fffffbfff269d301 R12: 1ffff92002ab5eb8 [ 338.536769][ C1] R13: ffffffff8142a5c3 R14: ffffffff8142a5c3 R15: dffffc0000000000 [ 338.536783][ C1] FS: 00005555816b5500(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 338.536804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.536816][ C1] CR2: 00007f4cab4d0678 CR3: 00000000340fa000 CR4: 00000000003506f0 [ 338.536831][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.536842][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.536853][ C1] Call Trace: [ 338.536860][ C1] [ 338.536867][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 338.536896][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 338.536922][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 338.536949][ C1] ? nmi_handle+0x2a/0x5a0 [ 338.536976][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 338.536999][ C1] ? nmi_handle+0x14f/0x5a0 [ 338.537015][ C1] ? nmi_handle+0x2a/0x5a0 [ 338.537033][ C1] ? kasan_check_range+0x5/0x290 [ 338.537054][ C1] ? default_do_nmi+0x63/0x160 [ 338.537072][ C1] ? exc_nmi+0x123/0x1f0 [ 338.537088][ C1] ? end_repeat_nmi+0xf/0x53 [ 338.537114][ C1] ? __virt_addr_valid+0x183/0x530 [ 338.537130][ C1] ? __virt_addr_valid+0x183/0x530 [ 338.537148][ C1] ? __virt_addr_valid+0x3b6/0x530 [ 338.537164][ C1] ? lock_release+0xb0/0xa30 [ 338.537188][ C1] ? kasan_check_range+0x5/0x290 [ 338.537210][ C1] ? kasan_check_range+0x5/0x290 [ 338.537233][ C1] ? kasan_check_range+0x5/0x290 [ 338.537255][ C1] [ 338.537260][ C1] [ 338.537266][ C1] lock_release+0xb0/0xa30 [ 338.537292][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 338.537318][ C1] ? __pfx_lock_release+0x10/0x10 [ 338.537343][ C1] ? __pfx___might_resched+0x10/0x10 [ 338.537367][ C1] ? __might_fault+0xaa/0x120 [ 338.537390][ C1] ? __virt_addr_valid+0x183/0x530 [ 338.537407][ C1] __virt_addr_valid+0x42f/0x530 [ 338.537426][ C1] __check_object_size+0x10d/0x900 [ 338.537449][ C1] ? __might_fault+0xc6/0x120 [ 338.537470][ C1] xt_obj_to_user+0x9c/0x130 [ 338.537491][ C1] xt_target_to_user+0xa6/0x1f0 [ 338.537513][ C1] do_ipt_get_ctl+0x112a/0x1810 [ 338.537541][ C1] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 338.537574][ C1] ? __pfx___might_resched+0x10/0x10 [ 338.537596][ C1] ? nf_getsockopt+0x248/0x2c0 [ 338.537619][ C1] ? __pfx_lock_release+0x10/0x10 [ 338.537646][ C1] ? rcu_is_watching+0x15/0xb0 [ 338.537671][ C1] ? trace_contention_end+0x3c/0x120 [ 338.537690][ C1] ? __mutex_lock+0x2ef/0xd70 [ 338.537714][ C1] ? __mutex_unlock_slowpath+0x21d/0x750 [ 338.537741][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 338.537766][ C1] ? __might_fault+0xaa/0x120 [ 338.537786][ C1] ? __pfx_lock_release+0x10/0x10 [ 338.537818][ C1] ? module_put+0x13a/0x2d0 [ 338.537839][ C1] nf_getsockopt+0x299/0x2c0 [ 338.537865][ C1] ip_getsockopt+0x222/0x2e0 [ 338.537892][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 338.537925][ C1] tcp_getsockopt+0x163/0x1c0 [ 338.537944][ C1] ? __pfx_tcp_getsockopt+0x10/0x10 [ 338.537964][ C1] ? sock_common_getsockopt+0x2e/0xb0 [ 338.537988][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 338.538013][ C1] do_sock_getsockopt+0x373/0x850 [ 338.538034][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 338.538065][ C1] __sys_getsockopt+0x271/0x330 [ 338.538087][ C1] ? __pfx___sys_getsockopt+0x10/0x10 [ 338.538106][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.538145][ C1] ? do_syscall_64+0x100/0x230 [ 338.538174][ C1] __x64_sys_getsockopt+0xb5/0xd0 [ 338.538197][ C1] do_syscall_64+0xf3/0x230 [ 338.538223][ C1] ? clear_bhb_loop+0x35/0x90 [ 338.538254][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.538283][ C1] RIP: 0033:0x7f4cab378eda [ 338.538300][ C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 338.538318][ C1] RSP: 002b:00007ffeea82a918 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 338.538338][ C1] RAX: ffffffffffffffda RBX: 00007ffeea82a9a0 RCX: 00007f4cab378eda [ 338.538354][ C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 338.538367][ C1] RBP: 0000000000000003 R08: 00007ffeea82a93c R09: 00007ffeea82ad57 [ 338.538381][ C1] R10: 00007ffeea82a9a0 R11: 0000000000000216 R12: 00007f4cab4d2e40 [ 338.538395][ C1] R13: 00007ffeea82a93c R14: 0000000000000000 R15: 00007f4cab4d5000 [ 338.538421][ C1] [ 339.115872][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 339.122792][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 339.133345][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 339.143447][ T30] Call Trace: [ 339.146770][ T30] [ 339.149738][ T30] dump_stack_lvl+0x241/0x360 [ 339.154470][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.159732][ T30] ? __pfx__printk+0x10/0x10 [ 339.164366][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 339.170410][ T30] ? vscnprintf+0x5d/0x90 [ 339.174793][ T30] panic+0x349/0x860 [ 339.178732][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 339.184946][ T30] ? __pfx_panic+0x10/0x10 [ 339.189403][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 339.194815][ T30] ? __irq_work_queue_local+0x137/0x410 [ 339.200404][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 339.205833][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 339.212032][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 339.218327][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 339.224571][ T30] watchdog+0x102d/0x1030 [ 339.228957][ T30] ? watchdog+0x1ea/0x1030 [ 339.233463][ T30] ? __pfx_watchdog+0x10/0x10 [ 339.238206][ T30] kthread+0x2f0/0x390 [ 339.242316][ T30] ? __pfx_watchdog+0x10/0x10 [ 339.247050][ T30] ? __pfx_kthread+0x10/0x10 [ 339.251696][ T30] ret_from_fork+0x4b/0x80 [ 339.256170][ T30] ? __pfx_kthread+0x10/0x10 [ 339.260800][ T30] ret_from_fork_asm+0x1a/0x30 [ 339.265634][ T30] [ 339.268801][ T30] Kernel Offset: disabled [ 339.273142][ T30] Rebooting in 86400 seconds..